last executing test programs: 7.371183015s ago: executing program 3 (id=4792): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xffffffff}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000740)="d21f34b6b8b41609e09d2f4655c2f2", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.361535555s ago: executing program 0 (id=4800): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0xffffffff}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 5.723475671s ago: executing program 1 (id=4796): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x8) r1 = socket$kcm(0x2, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000488c) r2 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="0200049b0800"}) 5.692353341s ago: executing program 0 (id=4798): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 4.959269313s ago: executing program 2 (id=4799): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x81008000, 0x0, 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 4.139403086s ago: executing program 3 (id=4801): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x2, 0x6, 0xd, 0x4, 0x0, 0x0, 0x1011, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000011c0), 0x8}, 0x4400, 0x81, 0xf, 0x8, 0x0, 0x2, 0x5, 0x0, 0x8bcd, 0x0, 0x4}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9e", 0xb7}], 0x1}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0, 0x3}, 0x800, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.088134467s ago: executing program 1 (id=4802): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 3.607697814s ago: executing program 2 (id=4803): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0x7feb, 0x1080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x7, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 3.606681154s ago: executing program 0 (id=4811): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x81008000, 0x0, 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 3.300178648s ago: executing program 1 (id=4804): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x81008000, 0x0, 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 2.861726995s ago: executing program 2 (id=4805): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 2.269132484s ago: executing program 0 (id=4806): sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @broadcast}) 2.268925054s ago: executing program 2 (id=4807): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0xffffffff}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2.121881817s ago: executing program 3 (id=4808): close(0x4) 1.840056581s ago: executing program 1 (id=4809): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000880)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 1.755862562s ago: executing program 3 (id=4810): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x8) r1 = socket$kcm(0x2, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000488c) r2 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="0200049b0800"}) 1.28866895s ago: executing program 0 (id=4812): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.26523691s ago: executing program 1 (id=4813): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0xffffffff}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1.153619541s ago: executing program 3 (id=4814): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x81008000, 0x0, 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 1.120303012s ago: executing program 2 (id=4815): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x81008000, 0x0, 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 7.019299ms ago: executing program 1 (id=4816): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0xa, 0x2, 0x11, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 6.697549ms ago: executing program 3 (id=4817): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0xa, 0x2, 0x11, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c00000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 878.46µs ago: executing program 0 (id=4824): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x81008000, 0x0, 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 0s ago: executing program 2 (id=4818): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x81008000, 0x0, 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) kernel console output (not intermixed with test programs): .308'. [ 145.997508][ T6682] wg2: entered promiscuous mode [ 146.002573][ T6682] wg2: entered allmulticast mode [ 146.714934][ T6694] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.328'. [ 147.995775][ T6710] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.335'. [ 153.132547][ T6761] netlink: 'syz.2.352': attribute type 3 has an invalid length. [ 153.174432][ T6761] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.352'. [ 153.247339][ T6764] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.355'. [ 153.278820][ T6764] netlink: zone id is out of range [ 153.302890][ T6764] netlink: zone id is out of range [ 153.345648][ T6764] netlink: zone id is out of range [ 153.350865][ T6764] netlink: zone id is out of range [ 153.379367][ T6764] netlink: zone id is out of range [ 153.413450][ T6764] netlink: zone id is out of range [ 153.466178][ T6764] netlink: zone id is out of range [ 153.488932][ T6764] netlink: zone id is out of range [ 153.525179][ T6764] netlink: zone id is out of range [ 153.569847][ T6764] netlink: zone id is out of range [ 156.494756][ T6783] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.361'. [ 159.096169][ T6819] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.374'. [ 159.207090][ T6827] syz.2.380[6827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.207353][ T6827] syz.2.380[6827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.240764][ T6827] syz.2.380[6827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.272887][ T6827] syz.2.380[6827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.306723][ T6868] syz.3.393[6868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.333533][ T6868] syz.3.393[6868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.376317][ T6868] syz.3.393[6868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.409040][ T6868] syz.3.393[6868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.066975][ T6856] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 163.528556][ T50] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 163.820269][ T6934] netlink: 'syz.3.427': attribute type 12 has an invalid length. [ 163.853282][ T6934] netlink: 132 bytes leftover after parsing attributes in process `syz.3.427'. [ 164.366409][ T50] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 164.566922][ T6961] netlink: 'syz.0.431': attribute type 12 has an invalid length. [ 164.593477][ T6961] netlink: 132 bytes leftover after parsing attributes in process `syz.0.431'. [ 164.809522][ T6969] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.433'. [ 164.821165][ T6968] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.433'. [ 164.850248][ T6971] syzkaller0: entered promiscuous mode [ 164.856310][ T6971] syzkaller0: entered allmulticast mode [ 164.941014][ T50] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 166.121125][ T7000] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.446'. [ 166.138513][ T6999] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.446'. [ 166.225175][ T7002] syzkaller0: entered promiscuous mode [ 166.230985][ T7002] syzkaller0: entered allmulticast mode [ 169.402279][ T7058] syzkaller0: entered promiscuous mode [ 169.411065][ T7058] syzkaller0: entered allmulticast mode [ 171.992548][ T7108] syz.3.495 uses obsolete (PF_INET,SOCK_PACKET) [ 172.029621][ T7108] netlink: 'syz.3.495': attribute type 10 has an invalid length. [ 172.087496][ T7108] team0: Device ipvlan1 failed to register rx_handler [ 172.153367][ T7112] netlink: 'syz.2.496': attribute type 21 has an invalid length. [ 172.161444][ T7112] netlink: 'syz.2.496': attribute type 12 has an invalid length. [ 172.170848][ T7112] netlink: 'syz.2.496': attribute type 13 has an invalid length. [ 172.178981][ T7112] netlink: 'syz.2.496': attribute type 14 has an invalid length. [ 172.198045][ T7112] netlink: 'syz.2.496': attribute type 15 has an invalid length. [ 172.206239][ T7112] netlink: 'syz.2.496': attribute type 16 has an invalid length. [ 172.214130][ T7112] netlink: 'syz.2.496': attribute type 19 has an invalid length. [ 172.221864][ T7112] netlink: 'syz.2.496': attribute type 21 has an invalid length. [ 172.229758][ T7112] netlink: 'syz.2.496': attribute type 22 has an invalid length. [ 172.239104][ T7112] netlink: 12226 bytes leftover after parsing attributes in process `syz.2.496'. [ 172.268549][ T7108] syz.3.495 (7108) used greatest stack depth: 20016 bytes left [ 172.508887][ T7118] syzkaller0: entered promiscuous mode [ 172.514889][ T7118] syzkaller0: entered allmulticast mode [ 172.556725][ T7125] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.501'. [ 174.262385][ T7140] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.508'. [ 174.388115][ T7144] team0: Device ipvlan1 failed to register rx_handler [ 174.655331][ T7144] syz.2.507 (7144) used greatest stack depth: 19752 bytes left [ 174.679194][ T7154] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.512'. [ 175.407631][ T7180] team0: Device ipvlan1 failed to register rx_handler [ 175.593981][ T7180] syz.0.525 (7180) used greatest stack depth: 18024 bytes left [ 176.397752][ T5799] Bluetooth: hci1: command 0x206a tx timeout [ 176.403253][ T50] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 177.277153][ T5795] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 177.286008][ T5795] Bluetooth: hci0: command 0x206a tx timeout [ 177.725540][ T7195] validate_nla: 13 callbacks suppressed [ 177.725558][ T7195] netlink: 'syz.0.538': attribute type 10 has an invalid length. [ 177.742451][ T7195] team0: Device ipvlan1 failed to register rx_handler [ 178.352164][ T7237] syzkaller0: entered promiscuous mode [ 178.357917][ T7237] syzkaller0: entered allmulticast mode [ 180.513700][ T7262] netlink: 132 bytes leftover after parsing attributes in process `syz.1.559'. [ 181.256320][ T7285] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.567'. [ 181.290181][ T7285] net_ratelimit: 43 callbacks suppressed [ 181.290226][ T7285] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 181.369286][ T7289] syzkaller0: entered promiscuous mode [ 181.376086][ T7289] syzkaller0: entered allmulticast mode [ 186.176868][ T50] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 188.236187][ T50] Bluetooth: hci1: command 0x206a tx timeout [ 188.698520][ T50] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 188.759203][ T7392] netlink: 'syz.0.613': attribute type 10 has an invalid length. [ 188.791365][ T7392] geneve0: entered promiscuous mode [ 188.831268][ T7392] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 190.702108][ T7417] Driver unsupported XDP return value 0 on prog (id 414) dev N/A, expect packet loss! [ 190.724324][ T50] Bluetooth: hci0: command 0x206a tx timeout [ 190.753982][ T50] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 190.946206][ T7427] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 190.964110][ T7427] geneve0: entered promiscuous mode [ 191.001302][ T7427] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 191.379525][ T7439] netlink: 'syz.2.630': attribute type 10 has an invalid length. [ 191.394847][ T7439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.630'. [ 191.428742][ T7439] netlink: 'syz.2.630': attribute type 10 has an invalid length. [ 191.446128][ T7439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.630'. [ 191.484620][ T7437] netlink: 'syz.2.630': attribute type 10 has an invalid length. [ 191.505012][ T7437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.630'. [ 192.794959][ T50] Bluetooth: hci2: command tx timeout [ 194.720056][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.726615][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.148144][ T7501] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 197.194931][ T7501] syzkaller0: entered promiscuous mode [ 197.200511][ T7501] syzkaller0: entered allmulticast mode [ 199.712850][ T7509] syz.3.656 (7509) used obsolete PPPIOCDETACH ioctl [ 201.158851][ T7542] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.185394][ T7542] syzkaller0: entered promiscuous mode [ 201.198553][ T7542] syzkaller0: entered allmulticast mode [ 205.624570][ T7585] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 205.682315][ T7585] syzkaller0: entered promiscuous mode [ 205.698437][ T7585] syzkaller0: entered allmulticast mode [ 209.648301][ T7590] netlink: 'syz.3.688': attribute type 10 has an invalid length. [ 209.657749][ T7590] netlink: 55 bytes leftover after parsing attributes in process `syz.3.688'. [ 210.293095][ T7639] macsec0: entered promiscuous mode [ 210.331019][ T7639] macsec0: entered allmulticast mode [ 210.365005][ T7639] veth1_macvtap: entered allmulticast mode [ 210.406749][ T7634] veth1_macvtap: left allmulticast mode [ 210.433413][ T7634] veth1_macvtap: left promiscuous mode [ 210.439007][ T7634] macsec0: left promiscuous mode [ 210.453586][ T7634] macsec0: left allmulticast mode [ 212.156161][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 212.161426][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 212.162925][ T5802] Bluetooth: hci1: command 0x206a tx timeout [ 212.170034][ T5102] Bluetooth: hci0: command 0x206a tx timeout [ 213.914814][ T7666] netlink: 'syz.2.721': attribute type 39 has an invalid length. [ 214.059794][ T7672] veth1_macvtap: left promiscuous mode [ 214.122725][ T7672] veth1_macvtap: entered promiscuous mode [ 214.149562][ T7672] macsec0: entered promiscuous mode [ 214.159972][ T7672] macsec0: entered allmulticast mode [ 214.172709][ T7672] veth1_macvtap: entered allmulticast mode [ 214.472922][ T7684] netlink: 'syz.2.726': attribute type 10 has an invalid length. [ 214.491064][ T7684] netlink: 55 bytes leftover after parsing attributes in process `syz.2.726'. [ 216.192531][ T7705] netlink: 'syz.0.734': attribute type 39 has an invalid length. [ 216.269173][ T7706] syzkaller0: entered promiscuous mode [ 216.276154][ T7706] syzkaller0: entered allmulticast mode [ 217.752066][ T7716] syzkaller0: entered promiscuous mode [ 217.757759][ T7716] syzkaller0: entered allmulticast mode [ 217.812255][ T7720] netlink: 'syz.1.741': attribute type 10 has an invalid length. [ 217.820184][ T7720] netlink: 55 bytes leftover after parsing attributes in process `syz.1.741'. [ 218.451580][ T7731] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.747304][ T5799] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 218.965413][ T5799] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 219.100374][ T7742] veth1_macvtap: left promiscuous mode [ 219.176529][ T7750] veth1_macvtap: entered promiscuous mode [ 219.220020][ T7750] macsec0: entered promiscuous mode [ 219.230283][ T7750] macsec0: entered allmulticast mode [ 219.241800][ T7750] veth1_macvtap: entered allmulticast mode [ 221.456368][ T5795] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 221.661102][ T5795] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 222.873236][ T5802] Bluetooth: hci0: command 0x206a tx timeout [ 223.410334][ T5799] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 224.459504][ T7840] syzkaller0: entered promiscuous mode [ 224.509878][ T7840] syzkaller0: entered allmulticast mode [ 227.026529][ T5799] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 227.289177][ T5799] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 227.296728][ T5799] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 227.462105][ T7869] syzkaller0: entered promiscuous mode [ 227.468423][ T7869] syzkaller0: entered allmulticast mode [ 229.657811][ T7913] syzkaller0: entered promiscuous mode [ 229.664515][ T7913] syzkaller0: entered allmulticast mode [ 231.302140][ T7921] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.824'. [ 231.312192][ T7926] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.825'. [ 231.529000][ T7934] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.838'. [ 231.669916][ T7936] syzkaller0: entered promiscuous mode [ 231.676470][ T7936] syzkaller0: entered allmulticast mode [ 233.707653][ T7951] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.844'. [ 233.717613][ T7956] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.836'. [ 235.153463][ T7979] netlink: 'syz.1.850': attribute type 39 has an invalid length. [ 235.604076][ T7995] netlink: 'syz.3.864': attribute type 39 has an invalid length. [ 240.519788][ T8060] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.880'. [ 241.372006][ T8073] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.895'. [ 246.272098][ T8140] syzkaller0: entered promiscuous mode [ 246.284307][ T8140] syzkaller0: entered allmulticast mode [ 249.616854][ T8169] : port 1(ip6gretap0) entered blocking state [ 249.624700][ T8169] : port 1(ip6gretap0) entered disabled state [ 249.631060][ T8169] ip6gretap0: entered allmulticast mode [ 249.638963][ T8169] ip6gretap0: entered promiscuous mode [ 249.750784][ T8174] : port 1(ip6gretap0) entered blocking state [ 249.767312][ T8174] : port 1(ip6gretap0) entered disabled state [ 249.778423][ T8174] ip6gretap0: entered allmulticast mode [ 249.794754][ T8174] ip6gretap0: entered promiscuous mode [ 249.995918][ T8188] netlink: 'syz.3.931': attribute type 33 has an invalid length. [ 250.006070][ T8188] netlink: 152 bytes leftover after parsing attributes in process `syz.3.931'. [ 250.017449][ T8188] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 250.288758][ T8197] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.935'. [ 250.404027][ T8199] netlink: 'syz.1.939': attribute type 64 has an invalid length. [ 250.628591][ T8201] syzkaller0: entered promiscuous mode [ 250.634481][ T8201] syzkaller0: entered allmulticast mode [ 252.535080][ T8215] syzkaller0: entered promiscuous mode [ 252.540642][ T8215] syzkaller0: entered allmulticast mode [ 252.556788][ T8220] netlink: 'syz.0.947': attribute type 33 has an invalid length. [ 252.575042][ T8220] netlink: 152 bytes leftover after parsing attributes in process `syz.0.947'. [ 252.590737][ T8220] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 255.728349][ T8269] netlink: 'syz.3.977': attribute type 21 has an invalid length. [ 255.747768][ T8269] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.769707][ T8269] IPv6: Can't replace route, no match found [ 256.078043][ T8271] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.976'. [ 256.167783][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.175463][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.524892][ T8293] netlink: 'syz.0.978': attribute type 19 has an invalid length. [ 258.532865][ T8293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.978'. [ 258.551936][ T8300] netlink: 'syz.2.980': attribute type 64 has an invalid length. [ 258.750420][ T8302] netlink: 'syz.0.981': attribute type 21 has an invalid length. [ 258.758487][ T8302] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.766872][ T8302] IPv6: Can't replace route, no match found [ 259.896382][ T8322] syz.1.990[8322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.896639][ T8322] syz.1.990[8322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.050993][ T8330] syz.2.1001[8330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.063092][ T8330] syz.2.1001[8330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.095455][ T8328] netlink: 'syz.1.992': attribute type 19 has an invalid length. [ 260.117250][ T8328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 260.186288][ T8335] netlink: 'syz.3.991': attribute type 64 has an invalid length. [ 260.452132][ T8345] netlink: 'syz.1.997': attribute type 21 has an invalid length. [ 260.460537][ T8345] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.476372][ T8345] IPv6: Can't replace route, no match found [ 260.970786][ T8363] netlink: 'syz.3.1005': attribute type 19 has an invalid length. [ 260.978882][ T8363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1005'. [ 260.997513][ T8362] netlink: 'syz.0.1013': attribute type 21 has an invalid length. [ 261.006000][ T8362] IPv6: Can't replace route, no match found [ 261.307920][ T8375] netlink: 'syz.1.1019': attribute type 19 has an invalid length. [ 261.353856][ T8375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1019'. [ 261.425603][ T8377] pim6reg1: entered promiscuous mode [ 261.437651][ T8377] pim6reg1: entered allmulticast mode [ 261.786937][ T5802] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 262.544732][ T8415] pim6reg1: entered promiscuous mode [ 262.559261][ T8415] pim6reg1: entered allmulticast mode [ 262.987380][ T8421] netlink: 'syz.0.1040': attribute type 10 has an invalid length. [ 263.022813][ T8421] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 263.305844][ T5802] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 263.353764][ T5802] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 264.878788][ T8462] netlink: 'syz.0.1045': attribute type 8 has an invalid length. [ 264.895404][ T8462] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1045'. [ 266.605146][ T8459] syzkaller0: entered promiscuous mode [ 266.610659][ T8459] syzkaller0: entered allmulticast mode [ 266.844798][ T5802] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 267.045846][ T5802] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 267.409933][ T8488] netlink: 'syz.1.1054': attribute type 10 has an invalid length. [ 267.458929][ T8488] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 267.952620][ T8497] netlink: 'syz.1.1057': attribute type 8 has an invalid length. [ 267.964917][ T8497] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1057'. [ 269.513514][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 269.611382][ T5802] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 269.639827][ T8506] syzkaller0: entered promiscuous mode [ 269.654470][ T8506] syzkaller0: entered allmulticast mode [ 269.676163][ T8506] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 273.134149][ T8577] netlink: 'syz.2.1089': attribute type 10 has an invalid length. [ 273.168341][ T8577] team0: Port device wlan1 added [ 273.197743][ T5802] Bluetooth: hci1: command 0x206a tx timeout [ 273.211281][ T8576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.038553][ T8604] netlink: 'syz.3.1101': attribute type 10 has an invalid length. [ 274.107431][ T8604] team0: Port device wlan1 added [ 274.155771][ T8602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.309988][ T8636] netlink: 'syz.1.1113': attribute type 10 has an invalid length. [ 275.371760][ T8636] team0: Port device wlan1 added [ 275.419047][ T8635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.910730][ T8656] syzkaller0: create flow: hash 742795662 index 1 [ 275.972647][ T23] syzkaller0: tun_net_xmit 76 [ 275.979348][ T23] syzkaller0: tun_net_xmit 48 [ 276.003614][ T5841] syzkaller0: tun_net_xmit 76 [ 276.133662][ T5841] syzkaller0: tun_net_xmit 76 [ 276.230734][ T8651] syzkaller0: delete flow: hash 742795662 index 1 [ 277.907459][ T8666] netlink: 'syz.2.1126': attribute type 10 has an invalid length. [ 277.927607][ T8666] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.087021][ T8670] 7B: renamed from syzkaller0 [ 279.255142][ T8697] syzkaller0: create flow: hash 3579274973 index 1 [ 279.283605][ T5841] syzkaller0: tun_net_xmit 76 [ 279.292884][ T5841] syzkaller0: tun_net_xmit 48 [ 279.313564][ T5841] syzkaller0: tun_net_xmit 76 [ 279.411810][ T8691] syzkaller0: delete flow: hash 3579274973 index 1 [ 280.140969][ T5799] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 283.744713][ T8749] netlink: 'syz.3.1158': attribute type 2 has an invalid length. [ 283.773902][ T8749] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1158'. [ 284.208392][ T8755] syzkaller0: create flow: hash 3579274973 index 1 [ 285.623710][ T5879] syzkaller0: tun_net_xmit 76 [ 285.628678][ T5879] syzkaller0: tun_net_xmit 48 [ 285.654831][ T5879] syzkaller0: tun_net_xmit 76 [ 285.667597][ T8754] syzkaller0: delete flow: hash 3579274973 index 1 [ 288.823924][ T8803] netlink: 'syz.2.1178': attribute type 2 has an invalid length. [ 288.831795][ T8803] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1178'. [ 289.212250][ T8812] syzkaller0: entered promiscuous mode [ 289.218945][ T8812] syzkaller0: entered allmulticast mode [ 289.235651][ T5879] syzkaller0: tun_net_xmit 48 [ 289.261522][ T8812] syzkaller0: tun_net_xmit 1280 [ 289.272829][ T8812] syzkaller0: create flow: hash 2882206299 index 1 [ 289.409021][ T8810] syzkaller0: delete flow: hash 2882206299 index 1 [ 291.644877][ T8821] pim6reg1: entered promiscuous mode [ 291.650265][ T8821] pim6reg1: entered allmulticast mode [ 292.272153][ T8839] netlink: 'syz.1.1190': attribute type 2 has an invalid length. [ 292.307898][ T8839] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1190'. [ 292.586108][ T8843] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 292.701856][ T8843] netlink: 'syz.0.1193': attribute type 4 has an invalid length. [ 292.845620][ T8843] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1193'. [ 295.966840][ T8864] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.1203'. [ 297.190304][ T8892] Zero length message leads to an empty skb [ 297.215596][ T8892] netlink: 'syz.0.1213': attribute type 10 has an invalid length. [ 297.224202][ T8892] bridge0: port 3(team0) entered blocking state [ 297.230981][ T8892] bridge0: port 3(team0) entered disabled state [ 297.237781][ T8892] team0: entered allmulticast mode [ 297.243270][ T8892] team_slave_0: entered allmulticast mode [ 297.249085][ T8892] team_slave_1: entered allmulticast mode [ 297.258731][ T8892] team0: entered promiscuous mode [ 297.264035][ T8892] team_slave_0: entered promiscuous mode [ 297.270140][ T8892] team_slave_1: entered promiscuous mode [ 297.277609][ T8892] bridge0: port 3(team0) entered blocking state [ 297.284603][ T8892] bridge0: port 3(team0) entered forwarding state [ 297.566340][ T8904] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 297.584446][ T8904] syzkaller0: entered allmulticast mode [ 298.197260][ T8920] syzkaller0: entered promiscuous mode [ 298.204657][ T8920] syzkaller0: entered allmulticast mode [ 298.213746][ T8924] netlink: 'syz.2.1227': attribute type 10 has an invalid length. [ 298.226534][ T8924] bridge0: port 3(team0) entered blocking state [ 298.233683][ T8924] bridge0: port 3(team0) entered disabled state [ 298.253033][ T8924] team0: entered allmulticast mode [ 298.263118][ T8924] team_slave_0: entered allmulticast mode [ 298.279440][ T8924] team_slave_1: entered allmulticast mode [ 298.285703][ T8924] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 298.306424][ T8924] team0: entered promiscuous mode [ 298.311938][ T8924] team_slave_0: entered promiscuous mode [ 298.318562][ T8924] team_slave_1: entered promiscuous mode [ 298.325081][ T8924] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 298.338112][ T8924] bridge0: port 3(team0) entered blocking state [ 298.344749][ T8924] bridge0: port 3(team0) entered forwarding state [ 298.363578][ T5841] syzkaller0: tun_net_xmit 48 [ 298.457915][ T8929] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 298.473413][ T8929] netlink: 'syz.1.1229': attribute type 4 has an invalid length. [ 298.481489][ T8929] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1229'. [ 301.006710][ T8971] netlink: 'syz.1.1240': attribute type 10 has an invalid length. [ 301.021229][ T8971] bridge0: port 3(team0) entered blocking state [ 301.028413][ T8971] bridge0: port 3(team0) entered disabled state [ 301.035866][ T8971] team0: entered allmulticast mode [ 301.041386][ T8971] team_slave_0: entered allmulticast mode [ 301.048088][ T8971] team_slave_1: entered allmulticast mode [ 301.054336][ T8971] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 301.074078][ T8971] team0: entered promiscuous mode [ 301.088458][ T8971] team_slave_0: entered promiscuous mode [ 301.103461][ T8971] team_slave_1: entered promiscuous mode [ 301.121228][ T8971] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 301.151102][ T8971] bridge0: port 3(team0) entered blocking state [ 301.157832][ T8971] bridge0: port 3(team0) entered forwarding state [ 301.611702][ T8974] netlink: 'syz.2.1241': attribute type 1 has an invalid length. [ 301.630706][ T8974] netlink: 'syz.2.1241': attribute type 4 has an invalid length. [ 301.638979][ T8974] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1241'. [ 301.798804][ T8975] pim6reg1: entered promiscuous mode [ 301.852807][ T8975] pim6reg1: entered allmulticast mode [ 303.040133][ T8995] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 303.063141][ T8995] syzkaller0: entered allmulticast mode [ 303.444907][ T9006] netlink: 'syz.1.1256': attribute type 11 has an invalid length. [ 305.254612][ T9039] netlink: 'syz.3.1267': attribute type 11 has an invalid length. [ 309.979494][ T5799] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 309.987255][ T5799] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 310.491828][ T5799] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 311.219525][ T5802] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 313.489265][ T5802] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 316.809966][ T9214] netlink: 'syz.0.1341': attribute type 10 has an invalid length. [ 316.821074][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1341'. [ 316.879078][ T9214] ipvlan1: entered promiscuous mode [ 316.885513][ T9214] ipvlan1: entered allmulticast mode [ 316.891715][ T9214] veth0_vlan: entered allmulticast mode [ 316.971012][ T9214] bridge0: port 4(ipvlan1) entered blocking state [ 316.987440][ T9214] bridge0: port 4(ipvlan1) entered disabled state [ 317.041359][ T9214] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 317.385083][ T5802] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 317.597092][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.603653][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.059087][ T5802] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 319.193396][ T5799] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 320.328347][ T5802] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 320.386348][ T9302] netlink: 'syz.1.1375': attribute type 10 has an invalid length. [ 320.467088][ T9302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1375'. [ 321.610715][ T5802] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 321.618580][ T5802] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 325.794739][ T9471] netlink: 'syz.1.1432': attribute type 15 has an invalid length. [ 329.278450][ T9557] netlink: 'syz.2.1471': attribute type 15 has an invalid length. [ 329.922460][ T9571] syzkaller0: entered promiscuous mode [ 329.938782][ T9571] syzkaller0: entered allmulticast mode [ 330.645306][ T5802] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 332.070037][ T9594] lo: entered allmulticast mode [ 332.101552][ T9594] lo: entered promiscuous mode [ 332.109977][ T9594] lo: left allmulticast mode [ 332.256285][ T5802] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 333.841726][ T5799] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 339.924682][ T9733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1542'. [ 340.290729][ T5802] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 341.354166][ T5802] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 341.369656][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 341.381708][ T5802] CPU: 0 PID: 5802 Comm: kworker/u5:7 Not tainted 6.6.99-syzkaller #0 [ 341.389939][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.400038][ T5802] Workqueue: hci2 hci_rx_work [ 341.404747][ T5802] Call Trace: [ 341.408037][ T5802] [ 341.410977][ T5802] dump_stack_lvl+0x16c/0x230 [ 341.415674][ T5802] ? show_regs_print_info+0x20/0x20 [ 341.420886][ T5802] ? load_image+0x3b0/0x3b0 [ 341.425416][ T5802] sysfs_create_dir_ns+0x256/0x280 [ 341.430543][ T5802] ? hci_rx_work+0x43a/0xd80 [ 341.435250][ T5802] ? sysfs_warn_dup+0xa0/0xa0 [ 341.439955][ T5802] ? do_raw_spin_unlock+0x121/0x230 [ 341.445176][ T5802] kobject_add_internal+0x6b8/0xc70 [ 341.450419][ T5802] kobject_add+0x156/0x220 [ 341.454883][ T5802] ? __rwlock_init+0x150/0x150 [ 341.459676][ T5802] ? kobject_init+0x1e0/0x1e0 [ 341.464370][ T5802] ? _raw_spin_unlock+0x28/0x40 [ 341.469238][ T5802] ? get_device_parent+0x366/0x390 [ 341.474364][ T5802] device_add+0x408/0xc20 [ 341.478711][ T5802] hci_conn_add_sysfs+0xd5/0x1e0 [ 341.483665][ T5802] le_conn_complete_evt+0xc37/0x1220 [ 341.488965][ T5802] ? bt_warn+0x10c/0x160 [ 341.493215][ T5802] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 341.499464][ T5802] ? bt_info+0x160/0x160 [ 341.503729][ T5802] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 341.509396][ T5802] ? skb_pull_data+0xfb/0x200 [ 341.514097][ T5802] hci_le_enh_conn_complete_evt+0x189/0x460 [ 341.520005][ T5802] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 341.526461][ T5802] ? hci_remote_host_features_evt+0x160/0x160 [ 341.532544][ T5802] hci_event_packet+0x795/0x1210 [ 341.537504][ T5802] ? bis_list+0x290/0x290 [ 341.541845][ T5802] ? lockdep_hardirqs_on+0x98/0x150 [ 341.547056][ T5802] ? hci_send_to_monitor+0xd7/0x4f0 [ 341.552271][ T5802] hci_rx_work+0x43a/0xd80 [ 341.556706][ T5802] ? process_scheduled_works+0x957/0x15b0 [ 341.562448][ T5802] process_scheduled_works+0xa45/0x15b0 [ 341.568057][ T5802] ? assign_work+0x400/0x400 [ 341.572681][ T5802] ? assign_work+0x39e/0x400 [ 341.577287][ T5802] worker_thread+0xa55/0xfc0 [ 341.581917][ T5802] kthread+0x2fa/0x390 [ 341.585995][ T5802] ? pr_cont_work+0x560/0x560 [ 341.590683][ T5802] ? kthread_blkcg+0xd0/0xd0 [ 341.595279][ T5802] ret_from_fork+0x48/0x80 [ 341.599721][ T5802] ? kthread_blkcg+0xd0/0xd0 [ 341.604346][ T5802] ret_from_fork_asm+0x11/0x20 [ 341.609132][ T5802] [ 341.617765][ T5802] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 341.632625][ T5802] Bluetooth: hci2: failed to register connection device [ 342.326419][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 342.916300][ T9790] syzkaller0: entered promiscuous mode [ 342.921857][ T9790] syzkaller0: entered allmulticast mode [ 343.344376][ T9806] syz.1.1570[9806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.344516][ T9806] syz.1.1570[9806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.519204][ T9807] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1571'. [ 343.675909][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 350.465301][ T9873] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1594'. [ 351.048649][ T9890] syz.2.1604[9890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.048782][ T9890] syz.2.1604[9890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.934660][ T9914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1611'. [ 356.147920][ T5802] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 356.360857][ T5802] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 356.377159][ T5802] Bluetooth: hci2: Invalid handle: 0x85b0 > 0x0eff [ 356.615794][ T9963] pim6reg1: entered promiscuous mode [ 356.621172][ T9963] pim6reg1: entered allmulticast mode [ 357.133636][ T9972] pim6reg1: entered promiscuous mode [ 357.139011][ T9972] pim6reg1: entered allmulticast mode [ 357.165061][ T5799] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 357.861255][ T5799] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 357.876402][ T9994] syzkaller0: entered promiscuous mode [ 357.889289][ T9994] syzkaller0: entered allmulticast mode [ 358.220414][T10007] pim6reg1: entered promiscuous mode [ 358.232223][T10007] pim6reg1: entered allmulticast mode [ 358.908703][T10023] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1655'. [ 358.945175][T10023] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 359.487419][T10031] sit0: entered allmulticast mode [ 359.885371][ T5799] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 359.889456][T10037] netlink: 'syz.2.1661': attribute type 10 has an invalid length. [ 359.989353][T10037] bond0: (slave geneve0): Releasing backup interface [ 360.244509][T10045] pim6reg1: entered promiscuous mode [ 360.274447][T10045] pim6reg1: entered allmulticast mode [ 360.439608][T10054] netlink: 'syz.2.1668': attribute type 39 has an invalid length. [ 361.452323][T10062] sit0: entered allmulticast mode [ 361.715865][T10069] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 361.747305][T10069] veth1_macvtap: left allmulticast mode [ 361.784479][T10069] veth1_macvtap: left promiscuous mode [ 361.869652][ T5799] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 361.877823][ T5799] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff [ 361.917782][ T5799] Bluetooth: hci1: command 0x206a tx timeout [ 362.346932][T10085] netlink: 'syz.0.1680': attribute type 10 has an invalid length. [ 362.363553][ T5799] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 362.408396][T10081] netlink: 'syz.0.1680': attribute type 10 has an invalid length. [ 362.452375][T10081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1680'. [ 363.971193][T10109] sit0: entered allmulticast mode [ 363.992594][ T5799] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 364.009377][ T5799] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff [ 364.396440][ T5799] Bluetooth: hci0: command 0x206a tx timeout [ 364.636092][T10121] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 364.660476][T10121] veth1_macvtap: left promiscuous mode [ 364.933326][ T5799] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 365.141237][T10133] netlink: 'syz.3.1706': attribute type 10 has an invalid length. [ 365.185790][T10133] veth1_macvtap: left allmulticast mode [ 365.195315][T10133] veth1_macvtap: left promiscuous mode [ 366.953219][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 368.515556][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.900255][T10179] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.907581][T10179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.145904][ T5799] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 371.154019][ T5799] Bluetooth: hci1: Invalid handle: 0x85b0 > 0x0eff [ 375.033875][ T5802] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 375.041900][ T5802] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff [ 376.374942][ T5799] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 376.382519][ T5799] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff [ 376.537540][T10341] syzkaller0: entered promiscuous mode [ 376.553040][T10341] syzkaller0: entered allmulticast mode [ 377.596866][T10370] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.1797'. [ 377.909558][T10373] syzkaller0: entered promiscuous mode [ 377.928866][T10373] syzkaller0: entered allmulticast mode [ 378.271882][T10386] syzkaller0: entered promiscuous mode [ 378.280121][T10386] syzkaller0: entered allmulticast mode [ 378.596518][T10395] syzkaller0: entered promiscuous mode [ 378.602127][T10395] syzkaller0: entered allmulticast mode [ 378.707220][T10397] syzkaller0: entered allmulticast mode [ 378.726638][T10397] syzkaller0: entered promiscuous mode [ 378.732210][T10397] syzkaller0: left allmulticast mode [ 379.050237][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.056817][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.121467][T10427] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.1820'. [ 380.379276][T10432] syzkaller0: entered promiscuous mode [ 380.385970][T10432] syzkaller0: entered allmulticast mode [ 382.645651][T10461] syzkaller0: entered promiscuous mode [ 382.651214][T10461] syzkaller0: entered allmulticast mode [ 382.802806][T10468] netlink: 'syz.2.1826': attribute type 10 has an invalid length. [ 382.829066][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1826'. [ 382.842586][T10468] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 384.216558][T10504] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 384.247236][T10504] syzkaller0: entered promiscuous mode [ 384.269718][T10504] syzkaller0: entered allmulticast mode [ 386.532793][T10529] syzkaller0: entered allmulticast mode [ 386.540934][T10533] syzkaller0: entered promiscuous mode [ 386.546617][T10533] syzkaller0: left allmulticast mode [ 386.654430][T10538] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.661929][T10538] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.689438][T10538] bridge0: entered allmulticast mode [ 386.810638][T10538] bridge_slave_1: left allmulticast mode [ 386.818489][T10538] bridge_slave_1: left promiscuous mode [ 386.825548][T10538] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.836415][T10538] bridge_slave_0: left allmulticast mode [ 386.842118][T10538] bridge_slave_0: left promiscuous mode [ 386.848594][T10538] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.209105][T10552] netlink: 'syz.2.1853': attribute type 39 has an invalid length. [ 387.516788][T10565] syzkaller0: entered allmulticast mode [ 387.629020][T10569] bond_slave_1: mtu less than device minimum [ 387.696474][T10571] bridge0: port 3(team0) entered disabled state [ 387.703249][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.710659][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.723608][T10571] bridge0: entered allmulticast mode [ 387.775601][T10571] team0: left allmulticast mode [ 387.780549][T10571] team_slave_0: left allmulticast mode [ 387.793890][T10571] team_slave_1: left allmulticast mode [ 387.799646][T10571] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 387.809853][T10571] team0: left promiscuous mode [ 387.814791][T10571] team_slave_0: left promiscuous mode [ 387.821540][T10571] team_slave_1: left promiscuous mode [ 387.827698][T10571] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 387.835985][T10571] bridge0: port 3(team0) entered disabled state [ 387.846743][T10571] bridge_slave_1: left allmulticast mode [ 387.852440][T10571] bridge_slave_1: left promiscuous mode [ 387.858559][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.868922][T10571] bridge_slave_0: left allmulticast mode [ 387.874800][T10571] bridge_slave_0: left promiscuous mode [ 387.880554][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.428363][T10597] netlink: 'syz.1.1869': attribute type 39 has an invalid length. [ 388.504108][T10599] Dead loop on virtual device ip6_vti0, fix it urgently! [ 388.853800][T10610] syzkaller0: entered promiscuous mode [ 388.859467][T10610] syzkaller0: entered allmulticast mode [ 388.866487][T10612] netlink: 'syz.0.1884': attribute type 39 has an invalid length. [ 390.634150][T10614] bridge0: port 3(team0) entered disabled state [ 390.640722][T10614] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.648825][T10614] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.657928][T10614] bridge0: entered allmulticast mode [ 390.677799][T10618] team0: left allmulticast mode [ 390.682798][T10618] team_slave_0: left allmulticast mode [ 390.688492][T10618] team_slave_1: left allmulticast mode [ 390.694148][T10618] team0: left promiscuous mode [ 390.699118][T10618] team_slave_0: left promiscuous mode [ 390.705614][T10618] team_slave_1: left promiscuous mode [ 390.711639][T10618] bridge0: port 3(team0) entered disabled state [ 390.721898][T10618] bridge_slave_1: left allmulticast mode [ 390.738063][T10618] bridge_slave_1: left promiscuous mode [ 390.754210][T10618] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.765558][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.015875][T10637] __sock_release: fasync list not empty! [ 391.022219][T10643] Dead loop on virtual device ip6_vti0, fix it urgently! [ 391.050811][T10645] bond_slave_1: mtu less than device minimum [ 391.155954][T10650] syzkaller0: entered promiscuous mode [ 391.161648][T10650] syzkaller0: entered allmulticast mode [ 391.289456][T10652] syzkaller0: entered promiscuous mode [ 391.295719][T10652] syzkaller0: entered allmulticast mode [ 393.311018][T10675] bond_slave_1: mtu less than device minimum [ 393.447545][T10679] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1911'. [ 393.457696][T10679] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1911'. [ 393.465618][T10681] Dead loop on virtual device ip6_vti0, fix it urgently! [ 393.472351][T10679] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1911'. [ 394.016914][T10698] syzkaller0: entered promiscuous mode [ 394.025603][T10698] syzkaller0: entered allmulticast mode [ 394.041096][T10701] syzkaller0: entered allmulticast mode [ 394.214845][T10707] warn_alloc: 3 callbacks suppressed [ 394.214864][T10707] syz.2.1913: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 394.236852][T10707] CPU: 1 PID: 10707 Comm: syz.2.1913 Not tainted 6.6.99-syzkaller #0 [ 394.245032][T10707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.255172][T10707] Call Trace: [ 394.258539][T10707] [ 394.261541][T10707] dump_stack_lvl+0x16c/0x230 [ 394.266312][T10707] ? show_regs_print_info+0x20/0x20 [ 394.271585][T10707] ? load_image+0x3b0/0x3b0 [ 394.276202][T10707] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 394.282711][T10707] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 394.289319][T10707] warn_alloc+0x210/0x300 [ 394.293761][T10707] ? stack_trace_save+0x9c/0xe0 [ 394.298736][T10707] ? zone_watermark_ok_safe+0x230/0x230 [ 394.304409][T10707] ? kasan_set_track+0x5f/0x70 [ 394.309258][T10707] ? kasan_set_track+0x4e/0x70 [ 394.314097][T10707] ? __kasan_kmalloc+0x8f/0xa0 [ 394.318943][T10707] ? xsk_init_queue+0xb0/0x110 [ 394.323786][T10707] ? xsk_setsockopt+0x4db/0x6f0 [ 394.328714][T10707] ? do_sock_setsockopt+0x175/0x1a0 [ 394.333996][T10707] ? __x64_sys_setsockopt+0x184/0x200 [ 394.339469][T10707] __vmalloc_node_range+0x126/0x1320 [ 394.344937][T10707] ? free_vm_area+0x50/0x50 [ 394.349588][T10707] vmalloc_user+0x74/0x80 [ 394.353994][T10707] ? xskq_create+0xbf/0x170 [ 394.358567][T10707] xskq_create+0xbf/0x170 [ 394.363084][T10707] xsk_init_queue+0xb0/0x110 [ 394.367872][T10707] xsk_setsockopt+0x4db/0x6f0 [ 394.372665][T10707] ? xsk_poll+0x670/0x670 [ 394.377123][T10707] ? __fget_files+0x28/0x4d0 [ 394.381805][T10707] ? aa_sock_opt_perm+0x74/0x100 [ 394.386839][T10707] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 394.392467][T10707] ? security_socket_setsockopt+0x7e/0xa0 [ 394.398267][T10707] ? xsk_poll+0x670/0x670 [ 394.402781][T10707] do_sock_setsockopt+0x175/0x1a0 [ 394.407885][T10707] ? __fdget+0x180/0x210 [ 394.412210][T10707] __x64_sys_setsockopt+0x184/0x200 [ 394.417504][T10707] do_syscall_64+0x55/0xb0 [ 394.421995][T10707] ? clear_bhb_loop+0x40/0x90 [ 394.426799][T10707] ? clear_bhb_loop+0x40/0x90 [ 394.431572][T10707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.437555][T10707] RIP: 0033:0x7f8d1858e9a9 [ 394.442038][T10707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.461714][T10707] RSP: 002b:00007f8d19359038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 394.470218][T10707] RAX: ffffffffffffffda RBX: 00007f8d187b5fa0 RCX: 00007f8d1858e9a9 [ 394.478297][T10707] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 394.486345][T10707] RBP: 00007f8d18610d69 R08: 0000000000000004 R09: 0000000000000000 [ 394.494392][T10707] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 394.502431][T10707] R13: 0000000000000000 R14: 00007f8d187b5fa0 R15: 00007ffd9698d048 [ 394.510533][T10707] [ 394.553353][T10707] Mem-Info: [ 394.563194][T10707] active_anon:14697 inactive_anon:0 isolated_anon:0 [ 394.563194][T10707] active_file:18492 inactive_file:39940 isolated_file:0 [ 394.563194][T10707] unevictable:768 dirty:211 writeback:0 [ 394.563194][T10707] slab_reclaimable:10187 slab_unreclaimable:95683 [ 394.563194][T10707] mapped:23658 shmem:1361 pagetables:430 [ 394.563194][T10707] sec_pagetables:0 bounce:0 [ 394.563194][T10707] kernel_misc_reclaimable:0 [ 394.563194][T10707] free:1337740 free_pcp:6430 free_cma:0 [ 394.643176][T10707] Node 0 active_anon:58888kB inactive_anon:0kB active_file:73968kB inactive_file:159560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94632kB dirty:844kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10296kB pagetables:1720kB sec_pagetables:0kB all_unreclaimable? no [ 394.963487][T10707] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 395.554079][T10707] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.682819][T10707] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 395.702227][T10707] Node 0 DMA32 free:1439232kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:58876kB inactive_anon:0kB active_file:73968kB inactive_file:158220kB unevictable:1536kB writepending:860kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:6284kB local_pcp:2840kB free_cma:0kB [ 395.843273][T10707] lowmem_reserve[]: 0 0 1 1 1 [ 395.848102][T10707] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1340kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.073979][T10707] lowmem_reserve[]: 0 0 0 0 0 [ 396.078802][T10707] Node 1 Normal free:3891184kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22048kB local_pcp:13376kB free_cma:0kB [ 396.406753][T10707] lowmem_reserve[]: 0 0 0 0 0 [ 396.411600][T10707] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 396.450029][T10707] Node 0 DMA32: 4*4kB (UME) 217*8kB (ME) 507*16kB (UME) 774*32kB (UME) 731*64kB (UME) 174*128kB (UME) 83*256kB (UM) 42*512kB (UM) 20*1024kB (ME) 7*2048kB (ME) 307*4096kB (M) = 1438728kB [ 396.493113][T10707] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 396.524784][T10707] Node 1 Normal: 242*4kB (UME) 67*8kB (UME) 41*16kB (UME) 120*32kB (UME) 32*64kB (UME) 11*128kB (UME) 3*256kB (UME) 0*512kB 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3891184kB [ 396.562227][T10707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.572103][T10707] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.581580][T10707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.648538][T10707] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.678920][T10707] 59793 total pagecache pages [ 396.690532][T10707] 0 pages in swap cache [ 396.700453][T10707] Free swap = 124996kB [ 396.710381][T10707] Total swap = 124996kB [ 396.720328][T10707] 2097051 pages RAM [ 396.728873][T10707] 0 pages HighMem/MovableOnly [ 396.740340][T10707] 416137 pages reserved [ 396.749509][T10707] 0 pages cma reserved [ 399.041907][T10799] syz.2.1928[10799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.042049][T10799] syz.2.1928[10799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.165724][T10829] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1930'. [ 401.567731][T10838] syzkaller0: entered promiscuous mode [ 401.573337][T10838] syzkaller0: entered allmulticast mode [ 401.661150][T10841] netlink: 'syz.0.1935': attribute type 10 has an invalid length. [ 403.020652][T10868] syzkaller0: entered promiscuous mode [ 403.026485][T10868] syzkaller0: entered allmulticast mode [ 408.984847][T10930] netlink: 'syz.1.1960': attribute type 10 has an invalid length. [ 409.005669][T10930] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 409.140861][ T5802] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 410.981857][T10974] team_slave_0: left promiscuous mode [ 411.002190][T10974] team_slave_0: left allmulticast mode [ 411.066237][T10974] team0: Port device team_slave_0 removed [ 411.080831][T10974] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 411.840868][T11008] netlink: 'syz.1.1992': attribute type 10 has an invalid length. [ 414.783905][T11052] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.977253][T11062] netlink: 'syz.1.2010': attribute type 29 has an invalid length. [ 414.988477][T11062] netlink: 'syz.1.2010': attribute type 29 has an invalid length. [ 415.008587][T11063] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.665365][T11088] syzkaller0: entered promiscuous mode [ 416.671379][T11088] syzkaller0: entered allmulticast mode [ 418.130680][T11092] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.140255][T11094] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2025'. [ 420.346395][T11123] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.471115][T11128] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2037'. [ 422.234242][T11138] team0: Port device team_slave_0 removed [ 422.240954][T11138] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 427.626592][T11207] netlink: 'syz.0.2068': attribute type 3 has an invalid length. [ 427.634683][T11207] netlink: 'syz.0.2068': attribute type 4 has an invalid length. [ 427.642957][T11207] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.2068'. [ 427.876629][T11214] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2071'. [ 429.577377][T11240] : entered promiscuous mode [ 429.603075][T11240] : entered allmulticast mode [ 433.875228][T11297] netlink: 'syz.0.2102': attribute type 10 has an invalid length. [ 433.896410][T11297] bond0: (slave bond_slave_0): Releasing backup interface [ 435.693579][T11334] team0: Port device team_slave_0 removed [ 435.703655][T11334] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 435.740457][T11339] netlink: 'syz.0.2119': attribute type 29 has an invalid length. [ 435.757143][T11339] netlink: 'syz.0.2119': attribute type 29 has an invalid length. [ 436.967524][T11347] syzkaller0: entered promiscuous mode [ 436.983416][T11347] syzkaller0: entered allmulticast mode [ 437.052560][T11355] netlink: 'syz.3.2126': attribute type 29 has an invalid length. [ 438.721857][T11355] netlink: 'syz.3.2126': attribute type 29 has an invalid length. [ 439.087075][T11374] : port 1(veth0_to_bridge) entered blocking state [ 439.107674][T11374] : port 1(veth0_to_bridge) entered disabled state [ 439.125652][T11374] veth0_to_bridge: entered allmulticast mode [ 439.144565][T11374] veth0_to_bridge: entered promiscuous mode [ 439.185601][T11380] : port 2(erspan0) entered blocking state [ 439.202538][T11380] : port 2(erspan0) entered disabled state [ 439.227709][T11380] erspan0: entered allmulticast mode [ 439.248630][T11380] erspan0: entered promiscuous mode [ 439.483790][T11375] team0: Port device team_slave_0 removed [ 439.498277][T11375] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 440.478190][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.484777][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.804795][T11395] syzkaller0: entered promiscuous mode [ 440.811431][T11395] syzkaller0: entered allmulticast mode [ 442.536559][T11403] syzkaller0: entered promiscuous mode [ 442.542086][T11403] syzkaller0: entered allmulticast mode [ 445.304533][T11426] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 445.695002][T11455] syzkaller0: entered promiscuous mode [ 445.700949][T11455] syzkaller0: entered allmulticast mode [ 445.709086][T11454] netlink: 'syz.2.2158': attribute type 10 has an invalid length. [ 448.651869][T11468] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 450.025012][T11480] syzkaller0: entered promiscuous mode [ 450.030560][T11480] syzkaller0: entered allmulticast mode [ 451.434923][T11508] netlink: 'syz.0.2175': attribute type 2 has an invalid length. [ 451.442822][T11508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2175'. [ 451.838110][T11487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2168'. [ 452.127650][T11517] pim6reg1: entered promiscuous mode [ 452.133681][T11517] pim6reg1: entered allmulticast mode [ 452.197461][T11519] sock: sock_timestamping_bind_phc: sock not bind to device [ 453.404766][T11525] delete_channel: no stack [ 453.580358][T11535] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2188'. [ 453.592677][T11535] bond_slave_0: entered promiscuous mode [ 453.601092][T11535] bond_slave_1: entered promiscuous mode [ 453.611677][T11535] dummy0: entered promiscuous mode [ 453.622238][T11535] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 454.350194][T11536] syzkaller0: entered promiscuous mode [ 454.355825][T11536] syzkaller0: entered allmulticast mode [ 456.475784][T11543] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 456.489168][T11543] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 456.584626][T11561] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2197'. [ 456.689480][T11561] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 458.550591][T11576] netlink: 'syz.0.2203': attribute type 10 has an invalid length. [ 458.558789][T11576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2203'. [ 458.567832][T11576] lo: left promiscuous mode [ 458.572835][T11576] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 458.583108][T11576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.863148][T11586] syzkaller0: entered promiscuous mode [ 458.868883][T11586] syzkaller0: entered allmulticast mode [ 460.858433][T11627] netlink: 'syz.2.2219': attribute type 39 has an invalid length. [ 460.985822][ T5802] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 460.999244][T11635] syzkaller0: entered promiscuous mode [ 461.013272][T11635] syzkaller0: entered allmulticast mode [ 461.282598][T11641] syzkaller0: entered promiscuous mode [ 461.288302][T11641] syzkaller0: entered allmulticast mode [ 464.202644][T11670] sit0: entered promiscuous mode [ 464.416760][ T5802] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 464.484223][T11686] syzkaller0: entered promiscuous mode [ 464.498641][T11686] syzkaller0: entered allmulticast mode [ 464.541145][T11690] syz.0.2244[11690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.541395][T11690] syz.0.2244[11690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.297016][T11709] netlink: 'syz.2.2254': attribute type 10 has an invalid length. [ 466.333376][T11709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2254'. [ 466.350313][T11709] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 466.694595][T11726] wg2: left promiscuous mode [ 466.699353][T11726] wg2: left allmulticast mode [ 466.722701][T11726] wg2: entered promiscuous mode [ 466.727930][T11726] wg2: entered allmulticast mode [ 467.247786][ T5802] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 467.414862][T11751] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 470.104595][T11790] netlink: 'syz.3.2288': attribute type 2 has an invalid length. [ 470.132102][T11790] netlink: 'syz.3.2288': attribute type 8 has an invalid length. [ 470.146725][T11790] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2288'. [ 470.197142][ T5802] Bluetooth: hci3: adv larger than maximum supported [ 470.317085][ T5802] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 470.568015][ T5802] Bluetooth: hci0: command 0x206a tx timeout [ 470.723984][T11812] : renamed from bond0 (while UP) [ 473.218221][T11865] netlink: 'syz.0.2321': attribute type 3 has an invalid length. [ 473.245386][T11865] netlink: 'syz.0.2321': attribute type 16 has an invalid length. [ 473.268169][T11865] netlink: 'syz.0.2321': attribute type 18 has an invalid length. [ 473.294982][T11865] netlink: 'syz.0.2321': attribute type 20 has an invalid length. [ 473.326420][T11865] netlink: 'syz.0.2321': attribute type 25 has an invalid length. [ 476.622602][ T5799] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 476.631208][ T5799] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 476.640844][ T5799] CPU: 0 PID: 5799 Comm: kworker/u5:5 Not tainted 6.6.99-syzkaller #0 [ 476.649048][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.659151][ T5799] Workqueue: hci0 hci_rx_work [ 476.663867][ T5799] Call Trace: [ 476.667172][ T5799] [ 476.670121][ T5799] dump_stack_lvl+0x16c/0x230 [ 476.674825][ T5799] ? show_regs_print_info+0x20/0x20 [ 476.680046][ T5799] ? load_image+0x3b0/0x3b0 [ 476.684589][ T5799] sysfs_create_dir_ns+0x256/0x280 [ 476.689725][ T5799] ? hci_rx_work+0x43a/0xd80 [ 476.694343][ T5799] ? sysfs_warn_dup+0xa0/0xa0 [ 476.699072][ T5799] ? do_raw_spin_unlock+0x121/0x230 [ 476.704324][ T5799] kobject_add_internal+0x6b8/0xc70 [ 476.709573][ T5799] kobject_add+0x156/0x220 [ 476.714014][ T5799] ? __rwlock_init+0x150/0x150 [ 476.718806][ T5799] ? kobject_init+0x1e0/0x1e0 [ 476.723535][ T5799] ? _raw_spin_unlock+0x28/0x40 [ 476.728468][ T5799] ? get_device_parent+0x366/0x390 [ 476.733634][ T5799] device_add+0x408/0xc20 [ 476.738019][ T5799] hci_conn_add_sysfs+0xd5/0x1e0 [ 476.743003][ T5799] le_conn_complete_evt+0xc37/0x1220 [ 476.748352][ T5799] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 476.754647][ T5799] ? bt_info+0x160/0x160 [ 476.758919][ T5799] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 476.764673][ T5799] ? skb_pull_data+0xfb/0x200 [ 476.769398][ T5799] hci_le_conn_complete_evt+0x187/0x440 [ 476.774973][ T5799] ? hci_remote_host_features_evt+0x160/0x160 [ 476.781073][ T5799] hci_event_packet+0x795/0x1210 [ 476.786055][ T5799] ? bis_list+0x290/0x290 [ 476.790439][ T5799] ? lockdep_hardirqs_on+0x98/0x150 [ 476.795674][ T5799] ? hci_send_to_monitor+0xd7/0x4f0 [ 476.800905][ T5799] hci_rx_work+0x43a/0xd80 [ 476.805382][ T5799] ? process_scheduled_works+0x957/0x15b0 [ 476.811152][ T5799] process_scheduled_works+0xa45/0x15b0 [ 476.816761][ T5799] ? assign_work+0x400/0x400 [ 476.821388][ T5799] ? assign_work+0x39e/0x400 [ 476.826012][ T5799] worker_thread+0xa55/0xfc0 [ 476.830629][ T5799] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 476.836576][ T5799] kthread+0x2fa/0x390 [ 476.840661][ T5799] ? pr_cont_work+0x560/0x560 [ 476.845364][ T5799] ? kthread_blkcg+0xd0/0xd0 [ 476.849988][ T5799] ret_from_fork+0x48/0x80 [ 476.854438][ T5799] ? kthread_blkcg+0xd0/0xd0 [ 476.859045][ T5799] ret_from_fork_asm+0x11/0x20 [ 476.863849][ T5799] [ 476.867734][ T5799] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 476.883417][ T5799] Bluetooth: hci0: failed to register connection device [ 476.903151][T11890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.436905][ T5802] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 477.507089][T11916] netlink: 'syz.0.2342': attribute type 21 has an invalid length. [ 477.542145][T11916] IPv6: NLM_F_CREATE should be specified when creating new route [ 477.560996][T11916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.568423][T11916] IPv6: NLM_F_CREATE should be set when creating new route [ 477.575864][T11916] IPv6: NLM_F_CREATE should be set when creating new route [ 477.583212][T11916] IPv6: NLM_F_CREATE should be set when creating new route [ 477.891238][T11931] netlink: 'syz.3.2349': attribute type 6 has an invalid length. [ 477.913331][T11931] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2349'. [ 478.089793][T11937] syzkaller0: entered promiscuous mode [ 478.109499][T11937] syzkaller0: entered allmulticast mode [ 478.273124][T11944] netlink: 'syz.3.2355': attribute type 10 has an invalid length. [ 478.299929][ T5802] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 478.305206][T11944] bond0: (slave netdevsim0): Releasing backup interface [ 479.782539][T11950] netlink: 'syz.2.2358': attribute type 16 has an invalid length. [ 479.790694][T11950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2358'. [ 479.801001][T11950] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.959898][T11965] syzkaller0: entered promiscuous mode [ 480.965716][T11965] syzkaller0: entered allmulticast mode [ 482.713831][T11976] netlink: 'syz.2.2369': attribute type 21 has an invalid length. [ 482.721746][T11976] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2369'. [ 482.731156][T11976] netlink: 'syz.2.2369': attribute type 4 has an invalid length. [ 482.950208][T11998] wg2: left promiscuous mode [ 482.968422][T11998] wg2: left allmulticast mode [ 483.426981][ T5802] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 484.138945][T12008] delete_channel: no stack [ 485.750599][T12055] netdevsim netdevsim3 : renamed from netdevsim0 [ 486.109208][T12068] netlink: 'syz.2.2408': attribute type 21 has an invalid length. [ 486.829680][T12079] syzkaller0: entered promiscuous mode [ 486.842303][T12079] syzkaller0: entered allmulticast mode [ 486.914515][T12075] syzkaller0: left promiscuous mode [ 488.892763][T12094] veth0_vlan: left promiscuous mode [ 488.898260][T12094] veth0_vlan: entered promiscuous mode [ 489.178719][T12110] netlink: 'syz.2.2423': attribute type 39 has an invalid length. [ 489.304306][ T5802] Bluetooth: hci3: Malformed LE Event: 0x0d [ 489.342428][ T5802] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 489.634658][T12128] pim6reg1: entered promiscuous mode [ 489.662929][T12128] pim6reg1: entered allmulticast mode [ 490.315242][T12146] syzkaller0: entered promiscuous mode [ 490.331542][T12146] syzkaller0: entered allmulticast mode [ 493.356383][ T5802] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 493.376968][ T5802] Bluetooth: hci2: Injecting HCI hardware error event [ 493.407955][ T5802] Bluetooth: hci2: hardware error 0x00 [ 494.797781][ T5799] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 494.806079][T12178] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2449'. [ 495.046161][T12191] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 495.091908][T12189] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.513475][ T5802] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 499.332255][T12246] syzkaller0: entered promiscuous mode [ 499.338065][T12246] syzkaller0: entered allmulticast mode [ 501.322217][T12269] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2486'. [ 501.416853][T12271] syzkaller0: entered promiscuous mode [ 501.422411][T12271] syzkaller0: entered allmulticast mode [ 501.448919][T12273] netlink: 'syz.3.2488': attribute type 39 has an invalid length. [ 501.469342][T12273] veth0_macvtap: left promiscuous mode [ 501.556048][T12279] : (slave geneve0): Releasing backup interface [ 501.916842][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.923332][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.247855][T12291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 503.255438][T12291] IPv6: NLM_F_CREATE should be set when creating new route [ 503.262902][T12291] IPv6: NLM_F_CREATE should be set when creating new route [ 503.411009][T12296] netlink: 'syz.2.2496': attribute type 2 has an invalid length. [ 503.507632][T12299] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 503.807704][ T5802] Bluetooth: hci3: unknown advertising packet type: 0x6e [ 504.156016][T12331] netlink: 'syz.1.2512': attribute type 10 has an invalid length. [ 504.737879][T12352] syz.2.2522[12352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.738016][T12352] syz.2.2522[12352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.873048][T12352] syzkaller0: entered promiscuous mode [ 504.892635][T12352] syzkaller0: entered allmulticast mode [ 506.969090][T12359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.160870][T12372] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 507.184910][T12374] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 507.194559][T12374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2529'. [ 507.236572][T12372] netlink: 'syz.3.2530': attribute type 10 has an invalid length. [ 507.291587][T12372] team0: Port device wlan1 removed [ 507.316240][T12372] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 507.388123][T12379] syzkaller0: entered promiscuous mode [ 507.394842][T12379] syzkaller0: entered allmulticast mode [ 509.092288][T12388] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 509.191755][T12395] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.2537'. [ 509.333523][T12403] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2541'. [ 510.044360][ T5802] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 510.602972][ T5802] Bluetooth: hci0: Unknown advertising packet type: 0x75 [ 510.610187][ T5802] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 510.622910][ T5802] Bluetooth: hci0: Malformed LE Event: 0x0d [ 511.386065][T12483] .6`Ҙ: renamed from lo [ 511.882360][T12501] syzkaller0: entered promiscuous mode [ 511.896308][T12501] syzkaller0: entered allmulticast mode [ 512.112066][T12508] syzkaller0: entered promiscuous mode [ 512.117737][T12508] syzkaller0: entered allmulticast mode [ 513.980479][T12531] -1: renamed from syzkaller0 [ 514.668660][T12558] netlink: 'syz.0.2604': attribute type 6 has an invalid length. [ 514.691206][T12558] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2604'. [ 515.280006][T12563] netlink: 'syz.2.2606': attribute type 10 has an invalid length. [ 515.349418][T12563] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 515.383814][T12563] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 515.449686][T12563] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 515.463029][T12563] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 515.805292][ T5802] Bluetooth: hci3: unexpected event 0x20 length: 15 > 7 [ 517.604522][T12630] netlink: 'syz.3.2634': attribute type 9 has an invalid length. [ 517.661707][T12630] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.2634'. [ 518.138000][ T5802] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 518.138043][ T5802] Bluetooth: hci0: unexpected event for opcode 0x2064 [ 518.783525][T12648] veth1_to_bond: entered allmulticast mode [ 519.376277][T12667] netlink: 'syz.0.2650': attribute type 10 has an invalid length. [ 519.410895][T12667] hsr_slave_0: left promiscuous mode [ 519.431384][T12667] hsr_slave_1: left promiscuous mode [ 519.606243][ T5802] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 520.964632][T12712] netlink: 'syz.2.2671': attribute type 39 has an invalid length. [ 521.017513][T12714] netlink: 'syz.0.2672': attribute type 10 has an invalid length. [ 521.044873][T12714] team0: Port device wlan1 added [ 521.188437][T12721] netlink: 'syz.0.2675': attribute type 10 has an invalid length. [ 521.210567][T12721] veth1_vlan: entered allmulticast mode [ 521.350685][T12721] team0: Device veth1_vlan failed to register rx_handler [ 522.502144][ T5802] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 524.361709][T12738] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 524.389770][T12738] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.483070][T12738] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.499996][T12738] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.526264][T12738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.552777][T12738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.570795][T12738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.612047][T12738] geneve1: entered promiscuous mode [ 524.618352][T12738] geneve1: entered allmulticast mode [ 524.626073][T12738] team0: Port device geneve1 added [ 524.639455][T12743] syzkaller0: entered allmulticast mode [ 525.242540][T12757] netlink: 'syz.0.2685': attribute type 3 has an invalid length. [ 525.455233][T12757] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2685'. [ 526.155778][T12767] netlink: 'syz.2.2689': attribute type 10 has an invalid length. [ 526.616249][ T5802] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11 [ 526.624346][ T5802] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 527.566614][ T5802] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 527.574501][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 527.586110][ T5802] CPU: 0 PID: 5802 Comm: kworker/u5:7 Not tainted 6.6.99-syzkaller #0 [ 527.594344][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.604453][ T5802] Workqueue: hci1 hci_rx_work [ 527.609190][ T5802] Call Trace: [ 527.612498][ T5802] [ 527.615458][ T5802] dump_stack_lvl+0x16c/0x230 [ 527.620177][ T5802] ? show_regs_print_info+0x20/0x20 [ 527.625405][ T5802] ? load_image+0x3b0/0x3b0 [ 527.629960][ T5802] sysfs_create_dir_ns+0x256/0x280 [ 527.635109][ T5802] ? hci_rx_work+0x43a/0xd80 [ 527.639725][ T5802] ? sysfs_warn_dup+0xa0/0xa0 [ 527.644447][ T5802] ? do_raw_spin_unlock+0x121/0x230 [ 527.649675][ T5802] kobject_add_internal+0x6b8/0xc70 [ 527.654916][ T5802] kobject_add+0x156/0x220 [ 527.659364][ T5802] ? __rwlock_init+0x150/0x150 [ 527.664159][ T5802] ? kobject_init+0x1e0/0x1e0 [ 527.668877][ T5802] ? _raw_spin_unlock+0x28/0x40 [ 527.673764][ T5802] ? get_device_parent+0x366/0x390 [ 527.678900][ T5802] device_add+0x408/0xc20 [ 527.683259][ T5802] hci_conn_add_sysfs+0xd5/0x1e0 [ 527.688222][ T5802] le_conn_complete_evt+0xc37/0x1220 [ 527.693549][ T5802] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 527.699813][ T5802] ? bt_info+0x160/0x160 [ 527.704075][ T5802] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 527.709734][ T5802] ? skb_pull_data+0xfb/0x200 [ 527.714441][ T5802] hci_le_conn_complete_evt+0x187/0x440 [ 527.720008][ T5802] ? hci_remote_host_features_evt+0x160/0x160 [ 527.726107][ T5802] hci_event_packet+0x795/0x1210 [ 527.731080][ T5802] ? bis_list+0x290/0x290 [ 527.735451][ T5802] ? lockdep_hardirqs_on+0x98/0x150 [ 527.740672][ T5802] ? hci_send_to_monitor+0xd7/0x4f0 [ 527.745901][ T5802] hci_rx_work+0x43a/0xd80 [ 527.750353][ T5802] ? process_scheduled_works+0x957/0x15b0 [ 527.756090][ T5802] process_scheduled_works+0xa45/0x15b0 [ 527.761700][ T5802] ? assign_work+0x400/0x400 [ 527.766318][ T5802] ? assign_work+0x39e/0x400 [ 527.770949][ T5802] worker_thread+0xa55/0xfc0 [ 527.775609][ T5802] kthread+0x2fa/0x390 [ 527.779694][ T5802] ? pr_cont_work+0x560/0x560 [ 527.784390][ T5802] ? kthread_blkcg+0xd0/0xd0 [ 527.789006][ T5802] ret_from_fork+0x48/0x80 [ 527.793438][ T5802] ? kthread_blkcg+0xd0/0xd0 [ 527.798040][ T5802] ret_from_fork_asm+0x11/0x20 [ 527.802845][ T5802] [ 527.816766][ T5802] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 527.830856][ T5802] Bluetooth: hci1: failed to register connection device [ 528.170102][T12814] netlink: 'syz.2.2708': attribute type 10 has an invalid length. [ 528.178403][T12814] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2708'. [ 528.304316][T12800] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 528.317820][T12820] @: renamed from bond_slave_0 (while UP) [ 528.624643][T12832] bridge0: port 3(team0) entered disabled state [ 528.641889][T12832] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.680916][T12832] bridge0: entered allmulticast mode [ 528.838529][T12835] team0: left allmulticast mode [ 528.852945][T12835] team_slave_1: left allmulticast mode [ 528.858499][T12835] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 528.865500][T12835] geneve1: left allmulticast mode [ 528.870701][T12835] team0: left promiscuous mode [ 528.882600][T12835] team_slave_1: left promiscuous mode [ 528.888483][T12835] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 528.895595][T12835] geneve1: left promiscuous mode [ 528.901205][T12835] bridge0: port 3(team0) entered disabled state [ 528.911246][T12835] bridge_slave_1: left allmulticast mode [ 528.918061][T12835] bridge_slave_1: left promiscuous mode [ 528.926221][T12835] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.939420][T12835] bridge_slave_0: left promiscuous mode [ 528.946663][T12835] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.273646][T12852] netlink: 'syz.2.2723': attribute type 39 has an invalid length. [ 530.637674][T12800] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 530.646423][T12800] Bluetooth: hci0: Injecting HCI hardware error event [ 530.654674][ T5799] Bluetooth: hci0: hardware error 0x00 [ 531.273076][ T2941] wlan1: Trigger new scan to find an IBSS to join [ 531.307858][T12884] netlink: 'syz.3.2735': attribute type 10 has an invalid length. [ 532.304106][T12911] netlink: 'syz.1.2748': attribute type 21 has an invalid length. [ 532.323371][T12911] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2748'. [ 532.332635][T12911] netlink: 'syz.1.2748': attribute type 4 has an invalid length. [ 532.357235][T12911] netlink: 'syz.1.2748': attribute type 5 has an invalid length. [ 532.373573][T12911] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2748'. [ 532.724104][ T5799] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 533.814385][T12930] netlink: 'syz.1.2756': attribute type 2 has an invalid length. [ 533.846285][T12930] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2756'. [ 533.887410][T12927] netlink: 'syz.1.2756': attribute type 2 has an invalid length. [ 533.932988][T12927] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2756'. [ 534.323435][T10742] wlan1: Trigger new scan to find an IBSS to join [ 534.436344][T12944] netlink: 'syz.1.2762': attribute type 39 has an invalid length. [ 534.900381][ T5799] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 535.831839][T12975] netlink: 'syz.3.2774': attribute type 15 has an invalid length. [ 535.873041][T12975] netlink: 'syz.3.2774': attribute type 5 has an invalid length. [ 535.889884][T12975] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2774'. [ 536.470751][T13002] syzkaller0: create flow: hash 3579274973 index 1 [ 536.784334][ T9] syzkaller0: tun_net_xmit 76 [ 536.796638][ T9] syzkaller0: tun_net_xmit 48 [ 536.813512][ T5825] syzkaller0: tun_net_xmit 76 [ 536.818606][T12994] syzkaller0: delete flow: hash 3579274973 index 1 [ 537.286311][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 539.082170][T13018] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2789'. [ 539.471252][T13034] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2793'. [ 540.982585][T13038] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2795'. [ 540.997262][T13037] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2795'. [ 541.660871][T13055] netlink: 'syz.3.2801': attribute type 10 has an invalid length. [ 541.821304][T13055] bond0: (slave wlan1): Releasing backup interface [ 541.962613][T13055] team0: Port device wlan1 added [ 544.187069][T13096] netlink: 'syz.1.2816': attribute type 10 has an invalid length. [ 544.313924][T10748] wlan1: Trigger new scan to find an IBSS to join [ 544.321326][T13096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.381819][T13096] team0: Port device bond0 added [ 544.395693][T13093] netlink: 'syz.3.2815': attribute type 9 has an invalid length. [ 544.408841][T13093] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2815'. [ 544.455282][ T5799] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 544.825422][T13112] netlink: 'syz.2.2822': attribute type 39 has an invalid length. [ 545.526949][T13122] netlink: 'syz.0.2826': attribute type 10 has an invalid length. [ 545.577842][T13122] team0: Port device wlan1 removed [ 545.599479][T13122] : (slave wlan1): Enslaving as an active interface with an up link [ 546.035676][T13128] netlink: 'syz.3.2829': attribute type 39 has an invalid length. [ 546.833224][T13156] netlink: 'syz.0.2838': attribute type 3 has an invalid length. [ 546.842588][T13155] sit0: entered promiscuous mode [ 546.928337][T13156] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2838'. [ 547.307439][T13161] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 547.339795][T13161] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 547.397710][T13165] netlink: 'syz.3.2841': attribute type 9 has an invalid length. [ 547.477489][T13165] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2841'. [ 547.885721][T13172] netlink: 'syz.0.2843': attribute type 10 has an invalid length. [ 547.969870][T13172] : (slave wlan1): Releasing backup interface [ 547.993859][T13172] team0: Port device wlan1 added [ 548.014960][T13171] netlink: 'syz.2.2844': attribute type 4 has an invalid length. [ 548.030019][T13171] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2844'. [ 548.097307][T13171] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 548.474153][T13179] netlink: 'syz.0.2847': attribute type 4 has an invalid length. [ 548.513106][T13179] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2847'. [ 548.556278][T13179] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 548.627848][T13182] netlink: 'syz.2.2848': attribute type 10 has an invalid length. [ 548.636098][T13182] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2848'. [ 549.354008][ T2941] wlan1: Trigger new scan to find an IBSS to join [ 549.634907][ T5799] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 550.373377][T10732] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 551.347448][T13239] netlink: 'syz.3.2867': attribute type 10 has an invalid length. [ 551.357765][T13239] bond0: (slave bond_slave_0): Releasing backup interface [ 551.375112][T13240] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 551.406514][T13238] netlink: 'syz.1.2868': attribute type 10 has an invalid length. [ 551.418401][T13238] team0: Port device wlan1 removed [ 551.429278][T13238] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 551.925634][T13264] netlink: 'syz.1.2876': attribute type 10 has an invalid length. [ 551.949335][T13264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2876'. [ 551.983318][T13264] dummy0: entered promiscuous mode [ 551.998501][T13261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2876'. [ 552.029407][T13264] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 552.100100][T13261] netlink: 9087 bytes leftover after parsing attributes in process `syz.1.2876'. [ 552.196172][T13263] netlink: 'syz.3.2877': attribute type 3 has an invalid length. [ 552.204296][T13263] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2877'. [ 552.209778][T13269] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 552.241103][T13269] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 552.300922][T13269] netlink: 'syz.2.2879': attribute type 9 has an invalid length. [ 552.309551][T13269] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2879'. [ 552.700650][T13276] netlink: 'syz.0.2882': attribute type 10 has an invalid length. [ 552.723466][T13276] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2882'. [ 552.838194][T13282] syz.2.2885[13282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.838352][T13282] syz.2.2885[13282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.858123][T13282] netlink: 'syz.2.2885': attribute type 21 has an invalid length. [ 552.877912][T13282] netlink: 'syz.2.2885': attribute type 6 has an invalid length. [ 552.885971][T13282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2885'. [ 553.505999][T13294] netlink: 'syz.2.2889': attribute type 9 has an invalid length. [ 553.542845][T13294] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2889'. [ 553.568484][T13298] A link change request failed with some changes committed already. Interface .6`Ҙ may have been left with an inconsistent configuration, please check. [ 554.103328][T13306] netlink: 'syz.1.2893': attribute type 29 has an invalid length. [ 554.126710][T13306] netlink: 'syz.1.2893': attribute type 29 has an invalid length. [ 554.383254][T13306] netlink: 'syz.1.2893': attribute type 29 has an invalid length. [ 557.970502][T13379] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2915'. [ 558.038317][T13379] netlink: del zone limit has 8 unknown bytes [ 558.384065][T13393] validate_nla: 2 callbacks suppressed [ 558.384082][T13393] netlink: 'syz.2.2920': attribute type 10 has an invalid length. [ 558.412776][T13393] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2920'. [ 558.421832][T13393] bond0: entered promiscuous mode [ 558.689122][T13402] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 558.715847][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2923'. [ 558.729369][T13402] netlink: 'syz.0.2923': attribute type 10 has an invalid length. [ 558.791380][T13402] team0: Port device wlan1 removed [ 558.874235][T13402] wlan1: mtu less than device minimum [ 558.881701][T13402] : (slave wlan1): Error -22 calling dev_set_mtu [ 559.557392][T13419] netlink: 'syz.0.2928': attribute type 15 has an invalid length. [ 559.588765][T13419] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.2928'. [ 560.053939][T13427] ipvlan0: entered promiscuous mode [ 560.073880][T13427] ipvlan0: entered allmulticast mode [ 560.132032][T13430] netlink: set zone limit has 8 unknown bytes [ 561.574141][T13460] netlink: 'syz.3.2940': attribute type 2 has an invalid length. [ 561.583453][T13460] netlink: 'syz.3.2940': attribute type 8 has an invalid length. [ 561.591425][T13460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2940'. [ 561.826362][T13468] pim6reg1: entered promiscuous mode [ 561.832043][T13468] pim6reg1: entered allmulticast mode [ 561.842876][T13468] netlink: 'syz.3.2944': attribute type 33 has an invalid length. [ 561.850902][T13468] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2944'. [ 562.103957][T13474] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 562.118483][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'. [ 562.151410][T13474] netlink: 'syz.2.2946': attribute type 10 has an invalid length. [ 562.167299][T13474] team0: Port device wlan1 removed [ 562.179868][T13474] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 562.191796][T13474] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 562.287426][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2947'. [ 562.889521][T13492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.228087][T13505] sit0: left promiscuous mode [ 563.352645][T13507] sit0: entered promiscuous mode [ 563.902724][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.910702][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.454338][T13533] sit0: entered allmulticast mode [ 564.546560][T13533] sit0: entered promiscuous mode [ 565.325755][T13538] mac80211_hwsim hwsim3 .3c: renamed from wlan1 (while UP) [ 565.367620][T13543] sit0: left promiscuous mode [ 565.502215][T13546] sit0: entered promiscuous mode [ 566.206894][T13553] sit0: left promiscuous mode [ 566.333431][T13555] sit0: entered promiscuous mode [ 566.772905][T13564] netlink: 'syz.2.2970': attribute type 10 has an invalid length. [ 566.893924][T13564] bond0: (slave netdevsim0): Releasing backup interface [ 566.966036][T13564] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 567.003971][T13564] team0: Port device netdevsim0 added [ 567.019070][T13565] netlink: 'syz.2.2970': attribute type 10 has an invalid length. [ 567.149101][T13565] team0: Port device netdevsim0 removed [ 567.185714][T13565] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 567.206079][T13565] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 567.238588][T13569] netlink: 'syz.1.2972': attribute type 10 has an invalid length. [ 567.263072][T13569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2972'. [ 567.295081][T13569] team0: entered promiscuous mode [ 567.300381][T13569] team_slave_1: entered promiscuous mode [ 567.322548][T13569] bond0: entered promiscuous mode [ 567.331769][T13569] @: entered promiscuous mode [ 567.354290][T13569] bond_slave_1: entered promiscuous mode [ 567.361111][T13569] bridge_slave_1: entered promiscuous mode [ 567.377305][T13569] mac80211_hwsim hwsim3 .3c: entered promiscuous mode [ 567.395534][T13569] team0: entered allmulticast mode [ 567.407802][T13569] team_slave_1: entered allmulticast mode [ 567.427992][T13569] bond0: entered allmulticast mode [ 567.439821][T13569] @: entered allmulticast mode [ 567.449809][T13569] bond_slave_1: entered allmulticast mode [ 567.458111][T13569] bridge_slave_1: entered allmulticast mode [ 567.464937][T13569] mac80211_hwsim hwsim3 .3c: entered allmulticast mode [ 567.481020][T13569] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 567.749209][T13586] O3c: renamed from bridge_slave_0 [ 568.690724][T13607] sctp: [Deprecated]: syz.3.2985 (pid 13607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.690724][T13607] Use struct sctp_sack_info instead [ 569.155480][T13618] netlink: 'syz.1.2986': attribute type 39 has an invalid length. [ 569.495174][T13629] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2990'. [ 569.510799][T13628] netlink: 'syz.2.2988': attribute type 3 has an invalid length. [ 569.551571][T13629] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2990'. [ 569.568794][T13628] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2988'. [ 569.598221][T13624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2990'. [ 570.564458][T13650] mac80211_hwsim hwsim9 .3c: renamed from wlan1 (while UP) [ 573.198564][T13699] sit0: entered promiscuous mode [ 573.880510][T13714] sit0: left promiscuous mode [ 574.204335][T13717] A link change request failed with some changes committed already. Interface .6`Ҙ may have been left with an inconsistent configuration, please check. [ 574.231216][T13716] sit0: entered promiscuous mode [ 576.213940][T13756] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3038'. [ 578.060707][T13785] netlink: 'syz.1.3036': attribute type 3 has an invalid length. [ 578.099149][T13785] netlink: 'syz.1.3036': attribute type 4 has an invalid length. [ 578.122982][T13785] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.3036'. [ 578.515378][T13800] : entered promiscuous mode [ 578.525364][T13800] : entered allmulticast mode [ 579.766941][T13840] netlink: 'syz.1.3069': attribute type 10 has an invalid length. [ 579.776991][T13840] bond0: (slave c@): Releasing backup interface [ 579.789779][T13840] @: left promiscuous mode [ 579.794827][T13840] @: left allmulticast mode [ 580.791911][T13857] pim6reg1: entered promiscuous mode [ 580.810450][T13857] pim6reg1: entered allmulticast mode [ 580.837150][T13857] netlink: 'syz.2.3065': attribute type 33 has an invalid length. [ 580.860749][T13857] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3065'. [ 583.499716][T13905] netlink: 'syz.0.3083': attribute type 29 has an invalid length. [ 583.508195][T13905] netlink: 'syz.0.3083': attribute type 29 has an invalid length. [ 583.639188][T13908] : port 1(veth0_to_bridge) entered blocking state [ 583.651948][T13908] : port 1(veth0_to_bridge) entered disabled state [ 583.659203][T13908] veth0_to_bridge: entered allmulticast mode [ 583.667460][T13908] veth0_to_bridge: entered promiscuous mode [ 583.686531][T13908] : port 2(erspan0) entered blocking state [ 583.693066][T13908] : port 2(erspan0) entered disabled state [ 583.699538][T13908] erspan0: entered allmulticast mode [ 583.706815][T13908] erspan0: entered promiscuous mode [ 584.312196][T13920] syzkaller0: entered promiscuous mode [ 584.319361][T13920] syzkaller0: entered allmulticast mode [ 586.634407][T13939] netlink: 'syz.0.3098': attribute type 10 has an invalid length. [ 587.037780][T13947] syzkaller0: entered promiscuous mode [ 587.043898][T13947] syzkaller0: entered allmulticast mode [ 589.718504][T13971] pim6reg1: entered promiscuous mode [ 589.724108][T13971] pim6reg1: entered allmulticast mode [ 589.824208][T13977] sock: sock_timestamping_bind_phc: sock not bind to device [ 590.104559][T13981] delete_channel: no stack [ 590.240140][T13990] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3117'. [ 590.512610][T14006] netlink: 'syz.2.3132': attribute type 10 has an invalid length. [ 590.535865][T14006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3132'. [ 590.585916][T14006] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 590.652620][T14006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.856586][T14017] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3127'. [ 590.954045][T14020] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 594.131673][T14084] syz.1.3158[14084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.131918][T14084] syz.1.3158[14084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.463652][T14095] sit0: left promiscuous mode [ 594.555999][T14097] sit0: entered promiscuous mode [ 595.149570][T14120] syzkaller0: entered promiscuous mode [ 595.155837][T14120] syzkaller0: entered allmulticast mode [ 597.205331][T14137] wg2: entered promiscuous mode [ 597.210278][T14137] wg2: entered allmulticast mode [ 598.798585][T14179] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 600.729565][T14183] netlink: 'syz.0.3192': attribute type 2 has an invalid length. [ 600.737542][T14183] netlink: 'syz.0.3192': attribute type 8 has an invalid length. [ 600.745445][T14183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3192'. [ 603.321361][T14251] netlink: 'syz.3.3221': attribute type 3 has an invalid length. [ 603.343039][T14251] netlink: 'syz.3.3221': attribute type 16 has an invalid length. [ 603.363098][T14251] netlink: 'syz.3.3221': attribute type 18 has an invalid length. [ 603.371004][T14251] netlink: 'syz.3.3221': attribute type 20 has an invalid length. [ 603.392934][T14251] netlink: 'syz.3.3221': attribute type 25 has an invalid length. [ 605.405911][ T5799] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 607.330068][T14279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.694417][T14299] netlink: 'syz.2.3239': attribute type 21 has an invalid length. [ 607.703774][T14299] IPv6: NLM_F_CREATE should be specified when creating new route [ 607.712213][T14299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 607.719578][T14299] IPv6: NLM_F_CREATE should be set when creating new route [ 607.726948][T14299] IPv6: NLM_F_CREATE should be set when creating new route [ 607.734360][T14299] IPv6: NLM_F_CREATE should be set when creating new route [ 608.111881][T14308] netlink: 'syz.0.3244': attribute type 6 has an invalid length. [ 608.123570][T14308] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3244'. [ 608.426606][T14323] netlink: 'syz.1.3250': attribute type 10 has an invalid length. [ 608.552886][T14324] syzkaller0: entered promiscuous mode [ 608.563064][T14324] syzkaller0: entered allmulticast mode [ 611.000282][T14358] netlink: 'syz.3.3262': attribute type 21 has an invalid length. [ 611.016111][T14358] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3262'. [ 611.029975][T14358] netlink: 'syz.3.3262': attribute type 4 has an invalid length. [ 613.285020][T14421] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 613.405841][ T5799] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 613.864975][ T5799] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 613.873274][ T5799] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 614.288409][ T5799] Bluetooth: hci1: Malformed LE Event: 0x0d [ 614.772223][T14473] syzkaller0: entered promiscuous mode [ 614.783545][T14473] syzkaller0: entered allmulticast mode [ 614.810297][T14475] syzkaller0: left promiscuous mode [ 615.074467][T14484] netlink: 'syz.1.3308': attribute type 21 has an invalid length. [ 617.452019][T14502] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 617.914691][ T5799] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 617.923639][ T5799] Bluetooth: hci1: Injecting HCI hardware error event [ 617.932021][T12800] Bluetooth: hci1: hardware error 0x00 [ 619.318077][T14530] syzkaller0: entered promiscuous mode [ 619.338444][T14530] syzkaller0: entered allmulticast mode [ 620.233007][T12800] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 622.695035][T14558] netlink: 'syz.3.3345': attribute type 6 has an invalid length. [ 622.723408][T14558] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3345'. [ 623.012739][T14573] netlink: 'syz.3.3346': attribute type 10 has an invalid length. [ 623.099352][T14573] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 623.138150][T14573] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 623.149973][T14573] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 623.163954][T14573] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 623.501557][T14588] netlink: 'syz.3.3351': attribute type 3 has an invalid length. [ 623.509877][T14588] netlink: 'syz.3.3351': attribute type 4 has an invalid length. [ 623.518199][T14588] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.3351'. [ 623.631174][T14599] : entered promiscuous mode [ 623.636721][T14599] : entered allmulticast mode [ 624.084312][T14610] delete_channel: no stack [ 624.358945][T14622] netlink: 'syz.2.3366': attribute type 10 has an invalid length. [ 624.390105][T14622] hsr_slave_0: left promiscuous mode [ 624.406637][T14622] hsr_slave_1: left promiscuous mode [ 624.797041][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.803851][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.828140][T12800] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11 [ 625.836475][T12800] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 626.121505][T14670] netlink: 'syz.0.3386': attribute type 10 has an invalid length. [ 626.152177][T14670] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.202334][T14670] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.223281][T14670] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.314163][T14670] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.347544][T14670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.377864][T14670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.415198][T14670] team0: Port device geneve1 added [ 626.436751][T14671] delete_channel: no stack [ 627.449382][T14692] netlink: 'syz.3.3396': attribute type 10 has an invalid length. [ 627.954928][T14701] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 627.975099][T14701] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3401'. [ 628.323962][T14715] netlink: 'syz.0.3409': attribute type 39 has an invalid length. [ 628.768423][T14730] @: renamed from bond_slave_0 (while UP) [ 629.925742][T12800] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 629.935404][T12800] Bluetooth: hci3: Injecting HCI hardware error event [ 629.943791][ T5799] Bluetooth: hci3: hardware error 0x00 [ 629.974912][T14765] netlink: 'syz.2.3428': attribute type 21 has an invalid length. [ 629.993237][T14765] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3428'. [ 630.013252][T14765] netlink: 'syz.2.3428': attribute type 4 has an invalid length. [ 630.021064][T14765] netlink: 'syz.2.3428': attribute type 5 has an invalid length. [ 630.041437][T14765] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3428'. [ 630.837918][T12800] Bluetooth: hci3: unexpected event 0x16 length: 151 > 6 [ 631.609464][T12800] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 631.841711][T12800] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 632.003287][ T5799] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 632.038814][T14835] wg2: left promiscuous mode [ 632.047735][T14835] wg2: left allmulticast mode [ 632.131188][T14835] wg2: entered promiscuous mode [ 632.146242][T14835] wg2: entered allmulticast mode [ 632.466055][T14849] netlink: 'syz.2.3462': attribute type 10 has an invalid length. [ 632.530470][T14849] bond0: (slave .3c): Releasing backup interface [ 632.682813][T14849] mac80211_hwsim hwsim9 .3c: left promiscuous mode [ 632.739690][T14849] team0: Port device .3c added [ 634.263789][T14884] netlink: 'syz.1.3476': attribute type 10 has an invalid length. [ 635.656013][T14911] netlink: 'syz.3.3485': attribute type 3 has an invalid length. [ 635.729518][T14911] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3485'. [ 636.593116][T14924] netlink: 'syz.1.3490': attribute type 4 has an invalid length. [ 636.601296][T14924] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3490'. [ 636.658262][T14924] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 638.253186][T14967] netlink: 'syz.3.3504': attribute type 4 has an invalid length. [ 638.261652][T14967] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3504'. [ 638.279557][T14967] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 638.808343][T14976] netlink: 'syz.3.3509': attribute type 9 has an invalid length. [ 638.818889][T14976] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.3509'. [ 638.839610][T14980] netlink: 'syz.1.3510': attribute type 29 has an invalid length. [ 638.853548][T14980] netlink: 'syz.1.3510': attribute type 29 has an invalid length. [ 642.261637][T15050] netlink: 'syz.0.3531': attribute type 10 has an invalid length. [ 642.298049][T15050] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3531'. [ 642.340578][T15050] : entered promiscuous mode [ 642.351675][T15047] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3530'. [ 642.365968][T15050] bond_slave_1: entered promiscuous mode [ 642.375004][T15050] 8021q: adding VLAN 0 to HW filter on device  [ 642.393382][T15047] netlink: del zone limit has 8 unknown bytes [ 642.639495][T15056] netlink: 'syz.3.3534': attribute type 15 has an invalid length. [ 642.653195][T15056] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.3534'. [ 642.906671][T15066] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 642.919414][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3535'. [ 642.956155][T15064] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 642.983916][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3544'. [ 642.997055][T15066] netlink: 'syz.3.3535': attribute type 10 has an invalid length. [ 643.012599][T15066] team0: Port device wlan1 removed [ 643.021442][T15066] wlan1: mtu less than device minimum [ 643.027951][T15066] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 643.036477][T15064] netlink: 'syz.0.3544': attribute type 10 has an invalid length. [ 643.046956][T15064] wlan1: mtu less than device minimum [ 643.056537][T15064] : (slave wlan1): Error -22 calling dev_set_mtu [ 643.723355][T15086] netlink: 'syz.2.3542': attribute type 2 has an invalid length. [ 643.731395][T15086] netlink: 'syz.2.3542': attribute type 8 has an invalid length. [ 643.742219][T15086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3542'. [ 643.862509][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3545'. [ 645.339243][T15120] syzkaller0: entered promiscuous mode [ 645.350301][T15120] syzkaller0: entered allmulticast mode [ 645.364538][T15116] : port 1(veth0_to_bridge) entered blocking state [ 645.383183][T15116] : port 1(veth0_to_bridge) entered disabled state [ 645.390225][T15116] veth0_to_bridge: entered allmulticast mode [ 645.398715][T15116] veth0_to_bridge: entered promiscuous mode [ 645.421762][T15125] : port 2(erspan0) entered blocking state [ 645.428221][T15125] : port 2(erspan0) entered disabled state [ 645.435729][T15125] erspan0: entered allmulticast mode [ 645.442548][T15125] erspan0: entered promiscuous mode [ 647.290724][T15130] sit0: left promiscuous mode [ 647.554887][T15135] sit0: entered promiscuous mode [ 648.396129][T15143] netlink: 'syz.1.3561': attribute type 10 has an invalid length. [ 648.945379][T15157] pim6reg1: entered promiscuous mode [ 648.951341][T15157] pim6reg1: entered allmulticast mode [ 650.377522][T15177] delete_channel: no stack [ 650.589020][T15185] netlink: 'syz.3.3576': attribute type 10 has an invalid length. [ 651.726881][T15208] pim6reg1: entered promiscuous mode [ 651.754271][T15208] pim6reg1: entered allmulticast mode [ 651.996494][T15215] sock: sock_timestamping_bind_phc: sock not bind to device [ 652.288035][T15221] netlink: 'syz.0.3590': attribute type 10 has an invalid length. [ 652.295778][T15219] delete_channel: no stack [ 654.575286][T15275] pim6reg1: entered promiscuous mode [ 654.582659][T15275] pim6reg1: entered allmulticast mode [ 654.934188][T15287] syzkaller0: entered promiscuous mode [ 654.939716][T15287] syzkaller0: entered allmulticast mode [ 657.198467][T15299] netlink: 'syz.3.3623': attribute type 10 has an invalid length. [ 657.534692][T15317] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3641'. [ 658.733395][T15347] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 658.740199][T15347] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 661.592747][T15379] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3654'. [ 661.692966][T15383] pim6reg1: entered promiscuous mode [ 661.698788][T15383] pim6reg1: entered allmulticast mode [ 662.186989][T15394] sock: sock_timestamping_bind_phc: sock not bind to device [ 662.318831][T15393] delete_channel: no stack [ 665.664839][T15442] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3678'. [ 667.280068][T15468] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3685'. [ 667.408261][T15468] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 667.879774][T15483] netlink: 'syz.3.3690': attribute type 10 has an invalid length. [ 667.887993][T15483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3690'. [ 667.911671][T15483] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 667.938122][T15483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.351849][T15516] syzkaller0: entered promiscuous mode [ 669.371312][T15516] syzkaller0: entered allmulticast mode [ 671.368109][T15531] wg2: left promiscuous mode [ 671.372867][T15531] wg2: left allmulticast mode [ 671.392397][T15534] wg2: entered promiscuous mode [ 671.397812][T15534] wg2: entered allmulticast mode [ 671.793612][T15554] syzkaller0: entered promiscuous mode [ 671.805062][T15554] syzkaller0: entered allmulticast mode [ 674.773512][T15580] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3723'. [ 675.611808][T15591] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3739'. [ 675.854155][T15600] netlink: 'syz.1.3733': attribute type 2 has an invalid length. [ 675.862074][T15600] netlink: 'syz.1.3733': attribute type 8 has an invalid length. [ 675.880229][T15600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3733'. [ 676.739760][T15617] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3749'. [ 680.358777][T15667] : renamed from bond0 (while UP) [ 680.376573][T15667] : left promiscuous mode [ 680.381286][T15667] @: left promiscuous mode [ 680.390762][T15667] bond_slave_1: left promiscuous mode [ 680.399383][T15667] dummy0: left promiscuous mode [ 680.405092][T15667] netdevsim netdevsim2 : left promiscuous mode [ 681.337516][T15674] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3762'. [ 681.958696][T15688] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3776'. [ 682.835139][T15696] netlink: 'syz.1.3770': attribute type 3 has an invalid length. [ 682.864023][T15696] netlink: 'syz.1.3770': attribute type 16 has an invalid length. [ 682.871913][T15696] netlink: 'syz.1.3770': attribute type 18 has an invalid length. [ 682.900507][T15696] netlink: 'syz.1.3770': attribute type 20 has an invalid length. [ 682.918694][T15696] netlink: 'syz.1.3770': attribute type 25 has an invalid length. [ 686.237862][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.244690][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.574886][T15719] A link change request failed with some changes committed already. Interface .6`Ҙ may have been left with an inconsistent configuration, please check. [ 686.591671][T15722] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3781'. [ 686.953881][T15731] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3792'. [ 687.891809][T15737] netlink: 'syz.1.3795': attribute type 6 has an invalid length. [ 687.908850][T15737] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3795'. [ 689.037296][T15753] : renamed from bond0 [ 689.635816][T15757] netlink: 'syz.3.3791': attribute type 21 has an invalid length. [ 689.648671][T15757] IPv6: NLM_F_CREATE should be specified when creating new route [ 689.656822][T15757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 689.664130][T15757] IPv6: NLM_F_CREATE should be set when creating new route [ 689.671447][T15757] IPv6: NLM_F_CREATE should be set when creating new route [ 689.678807][T15757] IPv6: NLM_F_CREATE should be set when creating new route [ 690.681657][T15764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 690.840371][T15767] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3797'. [ 695.337694][T15800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.698409][T15808] netlink: 'syz.0.3813': attribute type 10 has an invalid length. [ 696.777897][T15819] syzkaller0: entered promiscuous mode [ 696.784490][T15819] syzkaller0: entered allmulticast mode [ 696.795834][T15818] netlink: 'syz.0.3816': attribute type 21 has an invalid length. [ 696.804081][T15818] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3816'. [ 696.813246][T15818] netlink: 'syz.0.3816': attribute type 4 has an invalid length. [ 698.744181][T15834] wg2: left promiscuous mode [ 698.748824][T15834] wg2: left allmulticast mode [ 699.646262][T15855] delete_channel: no stack [ 701.111098][T15873] syzkaller0: entered promiscuous mode [ 701.131741][T15873] syzkaller0: entered allmulticast mode [ 702.972464][T15886] wg2: left promiscuous mode [ 702.977295][T15886] wg2: left allmulticast mode [ 704.023311][T15891] syzkaller0: entered promiscuous mode [ 704.028827][T15891] syzkaller0: entered allmulticast mode [ 707.264273][T15943] wg2: left promiscuous mode [ 707.271741][T15943] wg2: left allmulticast mode [ 707.768680][T15954] pim6reg1: entered promiscuous mode [ 707.776834][T15954] pim6reg1: entered allmulticast mode [ 708.788297][T15979] syzkaller0: entered promiscuous mode [ 708.794101][T15979] syzkaller0: entered allmulticast mode [ 711.121911][T16001] syzkaller0: entered promiscuous mode [ 711.137886][T16001] syzkaller0: entered allmulticast mode [ 714.247155][T16028] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3890'. [ 714.434472][T16032] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3904'. [ 715.326897][T16040] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 717.669521][T16069] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3913'. [ 718.664552][T16080] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3917'. [ 718.883118][T16085] syzkaller0: entered promiscuous mode [ 718.888756][T16085] syzkaller0: entered allmulticast mode [ 723.741873][T16141] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3930'. [ 724.451379][T16145] syzkaller0: entered promiscuous mode [ 724.457071][T16145] syzkaller0: entered allmulticast mode [ 729.567314][T16205] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 733.460381][T16212] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3957'. [ 734.535193][T16241] netlink: 'syz.2.3970': attribute type 39 has an invalid length. [ 735.712024][T16255] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3977'. [ 735.843784][T16259] syzkaller0: entered promiscuous mode [ 735.849356][T16259] syzkaller0: entered allmulticast mode [ 735.885894][T16260] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 740.218596][T16287] netlink: 'syz.0.3984': attribute type 39 has an invalid length. [ 740.312265][T16292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.319890][T16292] IPv6: NLM_F_CREATE should be set when creating new route [ 740.327569][T16292] IPv6: NLM_F_CREATE should be set when creating new route [ 740.796468][T16297] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 741.420158][T16299] netlink: 'syz.1.3991': attribute type 2 has an invalid length. [ 741.547922][T16302] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 743.979523][T16308] syzkaller0: entered promiscuous mode [ 743.985072][T16308] syzkaller0: entered allmulticast mode [ 745.907036][T16326] netlink: 'syz.3.4005': attribute type 2 has an invalid length. [ 746.076353][T16339] netlink: 'syz.1.3998': attribute type 39 has an invalid length. [ 746.192196][T16341] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 746.761666][T16344] netlink: 'syz.1.4011': attribute type 39 has an invalid length. [ 746.772684][T16345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 746.780235][T16345] IPv6: NLM_F_CREATE should be set when creating new route [ 746.787742][T16345] IPv6: NLM_F_CREATE should be set when creating new route [ 747.728145][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.734908][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.775153][T16374] netlink: 'syz.1.4015': attribute type 39 has an invalid length. [ 751.054500][T16394] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 755.892942][T16443] netlink: 'syz.2.4038': attribute type 10 has an invalid length. [ 755.915621][T16444] wg2: entered promiscuous mode [ 755.920645][T16444] wg2: entered allmulticast mode [ 756.658655][T16460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.835896][T16469] syz.0.4049[16469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 756.836044][T16469] syz.0.4049[16469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 756.948805][T16469] syzkaller0: entered promiscuous mode [ 756.966964][T16469] syzkaller0: entered allmulticast mode [ 758.699916][T16477] wg2: entered promiscuous mode [ 758.705032][T16477] wg2: entered allmulticast mode [ 758.711563][T16479] netlink: 'syz.3.4052': attribute type 10 has an invalid length. [ 759.543459][T16501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.648833][T16506] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 759.661829][T16506] netlink: 'syz.1.4065': attribute type 10 has an invalid length. [ 759.769346][T16512] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 759.794388][T16514] syz.1.4067[16514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 759.794536][T16514] syz.1.4067[16514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 759.892487][T16514] syzkaller0: entered promiscuous mode [ 759.911071][T16514] syzkaller0: entered allmulticast mode [ 762.118043][T16538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 762.381454][T16549] netlink: 'syz.2.4079': attribute type 10 has an invalid length. [ 762.431865][T16549] team0: Port device .3c removed [ 762.451847][T16549] : (slave .3c): Enslaving as an active interface with an up link [ 762.578132][T16556] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 762.866884][T16564] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.4084'. [ 763.209501][T16572] syzkaller0: entered promiscuous mode [ 763.216021][T16572] syzkaller0: entered allmulticast mode [ 763.223949][T16570] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4090'. [ 765.348943][T16580] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 765.358791][T16585] netlink: 'syz.0.4095': attribute type 10 has an invalid length. [ 765.367038][T16585] wlan1: mtu less than device minimum [ 765.372451][T16585] : (slave wlan1): Error -22 calling dev_set_mtu [ 765.687327][T16596] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.4100'. [ 765.823035][T16605] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4104'. [ 766.189216][T16616] netlink: 'syz.2.4109': attribute type 10 has an invalid length. [ 766.696018][T16633] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.4116'. [ 767.006634][T16646] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 767.064459][T16646] netlink: 'syz.1.4122': attribute type 10 has an invalid length. [ 767.953634][T16672] netlink: 'syz.2.4135': attribute type 10 has an invalid length. [ 769.018140][T16715] .6`Ҙ: renamed from lo [ 770.197220][T16754] .6`Ҙ: renamed from lo [ 770.580729][T16766] syzkaller0: entered promiscuous mode [ 770.586470][T16766] syzkaller0: entered allmulticast mode [ 771.316696][T16786] syzkaller0: entered promiscuous mode [ 771.341347][T16786] syzkaller0: entered allmulticast mode [ 773.538533][T16805] syzkaller0: entered promiscuous mode [ 773.544292][T16805] syzkaller0: entered allmulticast mode [ 774.015144][T16826] syzkaller0: entered promiscuous mode [ 774.020796][T16826] syzkaller0: entered allmulticast mode [ 787.556827][T17116] netlink: 'syz.1.4314': attribute type 9 has an invalid length. [ 787.602835][T17116] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.4314'. [ 789.798272][T17166] netlink: 'syz.0.4331': attribute type 9 has an invalid length. [ 789.823697][T17166] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.4331'. [ 790.426521][T17174] veth1_to_bond: entered allmulticast mode [ 796.133797][T17264] veth1_to_bond: entered allmulticast mode [ 799.215693][T17315] veth1_to_bond: entered allmulticast mode [ 809.153271][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.159654][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.314908][T17604] netlink: 'syz.1.4479': attribute type 10 has an invalid length. [ 823.827293][T17604] bond0: (slave .3c): Releasing backup interface [ 824.204596][T17604] mac80211_hwsim hwsim3 .3c: left promiscuous mode [ 824.236679][T17604] mac80211_hwsim hwsim3 .3c: left allmulticast mode [ 824.362875][T17604] mac80211_hwsim hwsim3 .3c: entered promiscuous mode [ 824.466706][T17604] mac80211_hwsim hwsim3 .3c: entered allmulticast mode [ 824.587267][T17604] team0: Port device .3c added [ 828.143676][T17650] netlink: 'syz.3.4495': attribute type 10 has an invalid length. [ 828.425125][T17650] team0: Port device wlan1 added [ 831.137417][T17680] netlink: 'syz.2.4504': attribute type 10 has an invalid length. [ 838.872386][T17739] syzkaller0: entered promiscuous mode [ 838.953016][T17739] syzkaller0: entered allmulticast mode [ 843.124625][T17761] netdevsim netdevsim1 : renamed from netdevsim0 [ 844.122823][T17797] netlink: 'syz.3.4543': attribute type 21 has an invalid length. [ 844.868791][T17818] syzkaller0: entered promiscuous mode [ 844.874705][T17818] syzkaller0: entered allmulticast mode [ 844.974153][T17816] syzkaller0: left promiscuous mode [ 848.129381][T17860] syzkaller0: entered promiscuous mode [ 848.135418][T17860] syzkaller0: entered allmulticast mode [ 851.075440][T17886] syzkaller0: entered promiscuous mode [ 851.094421][T17886] syzkaller0: entered allmulticast mode [ 855.169464][T17931] netlink: 'syz.2.4589': attribute type 6 has an invalid length. [ 855.179041][T17931] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4589'. [ 855.278057][T17934] netlink: 'syz.0.4592': attribute type 10 has an invalid length. [ 855.573362][T17940] netlink: 'syz.3.4606': attribute type 10 has an invalid length. [ 855.592297][T17940] hsr_slave_0: left promiscuous mode [ 855.631835][T17940] hsr_slave_1: left promiscuous mode [ 859.581614][T18034] netlink: 'syz.2.4642': attribute type 10 has an invalid length. [ 859.631637][T18034] : (slave .3c): Releasing backup interface [ 859.704908][T18034] team0: Port device .3c added [ 863.249629][T18089] syzkaller0: entered allmulticast mode [ 865.598390][T18121] netlink: 'syz.1.4675': attribute type 10 has an invalid length. [ 870.299670][T18167] netlink: 'syz.3.4690': attribute type 10 has an invalid length. [ 870.334546][T18167] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.353373][T18167] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.382927][T18167] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.427754][T18167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.468053][T18167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.478331][T18167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.492447][T18167] team0: Port device geneve1 added [ 870.560635][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.567211][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.597297][T18170] netlink: 'syz.1.4692': attribute type 3 has an invalid length. [ 870.670445][T18170] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.4692'. [ 873.468015][T18224] netlink: 'syz.2.4715': attribute type 3 has an invalid length. [ 873.502256][T18224] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.4715'. [ 876.659347][T18265] netlink: 'syz.2.4733': attribute type 10 has an invalid length. [ 878.645647][T18305] netlink: 'syz.3.4743': attribute type 3 has an invalid length. [ 878.735211][T18305] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.4743'. [ 879.295465][T18308] netlink: 'syz.0.4746': attribute type 10 has an invalid length. [ 879.514884][T18308] team0: Port device wlan1 added [ 882.595518][T18341] netlink: 'syz.1.4758': attribute type 10 has an invalid length. [ 883.282753][ T11] wlan1: Trigger new scan to find an IBSS to join [ 886.313111][ T11] wlan1: Trigger new scan to find an IBSS to join [ 886.585711][ T12] wlan1: Creating new IBSS network, BSSID f6:ce:e2:f9:6d:46 [ 892.205708][T18436] netlink: 'syz.3.4792': attribute type 10 has an invalid length. [ 895.654986][T18465] netlink: 'syz.3.4801': attribute type 3 has an invalid length. [ 895.728997][T18465] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.4801'. [ 900.326343][ T12] wlan1: Trigger new scan to find an IBSS to join [ 900.362774][ T12] ================================================================================ [ 900.412872][ T12] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1209:5 [ 900.420696][ T12] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 900.537107][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted 6.6.99-syzkaller #0 [ 900.545202][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 900.555332][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 900.561636][ T12] Call Trace: [ 900.564942][ T12] [ 900.567922][ T12] dump_stack_lvl+0x16c/0x230 [ 900.572657][ T12] ? show_regs_print_info+0x20/0x20 [ 900.577902][ T12] ? load_image+0x3b0/0x3b0 [ 900.582460][ T12] ? mutex_lock_nested+0x20/0x20 [ 900.587458][ T12] ubsan_epilogue+0xa/0x30 [ 900.591927][ T12] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 900.597699][ T12] ieee80211_request_ibss_scan+0x4eb/0x790 [ 900.603566][ T12] ieee80211_ibss_work+0xdfd/0x10c0 [ 900.608825][ T12] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 900.615211][ T12] ? mark_lock+0x94/0x320 [ 900.619598][ T12] ? ieee80211_iface_work+0xbca/0xc70 [ 900.625034][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 900.630287][ T12] cfg80211_wiphy_work+0x225/0x260 [ 900.635478][ T12] ? process_scheduled_works+0x957/0x15b0 [ 900.641248][ T12] process_scheduled_works+0xa45/0x15b0 [ 900.646875][ T12] ? assign_work+0x400/0x400 [ 900.651524][ T12] ? assign_work+0x39e/0x400 [ 900.656171][ T12] worker_thread+0xa55/0xfc0 [ 900.660852][ T12] kthread+0x2fa/0x390 [ 900.664955][ T12] ? pr_cont_work+0x560/0x560 [ 900.669677][ T12] ? kthread_blkcg+0xd0/0xd0 [ 900.674408][ T12] ret_from_fork+0x48/0x80 [ 900.678869][ T12] ? kthread_blkcg+0xd0/0xd0 [ 900.683495][ T12] ret_from_fork_asm+0x11/0x20 [ 900.688319][ T12] [ 900.835037][ T12] ================================================================================ [ 900.868658][ T12] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 900.875933][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted 6.6.99-syzkaller #0 [ 900.883958][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 900.894225][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 900.900521][ T12] Call Trace: [ 900.903828][ T12] [ 900.906786][ T12] dump_stack_lvl+0x16c/0x230 [ 900.911500][ T12] ? show_regs_print_info+0x20/0x20 [ 900.916730][ T12] ? load_image+0x3b0/0x3b0 [ 900.921283][ T12] panic+0x2c0/0x710 [ 900.925239][ T12] ? bpf_jit_dump+0xd0/0xd0 [ 900.929803][ T12] ? mutex_lock_nested+0x20/0x20 [ 900.934783][ T12] check_panic_on_warn+0x84/0xa0 [ 900.939757][ T12] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 900.945540][ T12] ieee80211_request_ibss_scan+0x4eb/0x790 [ 900.951422][ T12] ieee80211_ibss_work+0xdfd/0x10c0 [ 900.956684][ T12] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 900.963058][ T12] ? mark_lock+0x94/0x320 [ 900.967445][ T12] ? ieee80211_iface_work+0xbca/0xc70 [ 900.972868][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 900.978107][ T12] cfg80211_wiphy_work+0x225/0x260 [ 900.983259][ T12] ? process_scheduled_works+0x957/0x15b0 [ 900.989013][ T12] process_scheduled_works+0xa45/0x15b0 [ 900.994632][ T12] ? assign_work+0x400/0x400 [ 900.999269][ T12] ? assign_work+0x39e/0x400 [ 901.003896][ T12] worker_thread+0xa55/0xfc0 [ 901.008551][ T12] kthread+0x2fa/0x390 [ 901.012644][ T12] ? pr_cont_work+0x560/0x560 [ 901.017367][ T12] ? kthread_blkcg+0xd0/0xd0 [ 901.022014][ T12] ret_from_fork+0x48/0x80 [ 901.026476][ T12] ? kthread_blkcg+0xd0/0xd0 [ 901.031117][ T12] ret_from_fork_asm+0x11/0x20 [ 901.035949][ T12] [ 901.039308][ T12] Kernel Offset: disabled [ 901.043742][ T12] Rebooting in 86400 seconds..