last executing test programs: 3.531172889s ago: executing program 4 (id=47170): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0xc) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 2.832769126s ago: executing program 4 (id=47161): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3fe, 0x6ab0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x2, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) 2.521580873s ago: executing program 4 (id=47179): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 1.964093243s ago: executing program 1 (id=47171): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a35865ec3b5dcb3db9543b9922252ef22e932e7aaf2eb32457656a01f5e65baced"], 0x18}, 0x0) 1.963758223s ago: executing program 3 (id=47174): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40085) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 1.963524484s ago: executing program 4 (id=47175): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) 1.702232888s ago: executing program 2 (id=47176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.701928458s ago: executing program 3 (id=47177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.701109988s ago: executing program 1 (id=47188): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) 1.689418679s ago: executing program 0 (id=47178): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, 0x0, 0x0) 1.536882107s ago: executing program 2 (id=47181): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f0000000100)=r1, 0x4) 1.523137318s ago: executing program 0 (id=47182): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.371700746s ago: executing program 3 (id=47183): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.361639087s ago: executing program 1 (id=47194): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) 1.313337199s ago: executing program 2 (id=47184): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r1) 1.132392439s ago: executing program 0 (id=47185): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.129297639s ago: executing program 1 (id=47197): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0xc) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 1.075240962s ago: executing program 2 (id=47186): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.074878172s ago: executing program 3 (id=47187): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 921.90875ms ago: executing program 0 (id=47189): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a35865ec3b5dcb3db9543b9922252ef22e932e7aaf2eb32457656a01f5e65baced"], 0x18}, 0x0) 638.894765ms ago: executing program 1 (id=47190): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) 638.596656ms ago: executing program 2 (id=47191): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) 637.824636ms ago: executing program 4 (id=47202): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 636.952966ms ago: executing program 3 (id=47204): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xd}, 0x21, 0x0, 0x6, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x0, 0x0, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x143842, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 584.941188ms ago: executing program 0 (id=47192): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40085) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 493.717804ms ago: executing program 2 (id=47193): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 438.697216ms ago: executing program 3 (id=47195): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0xe}, 0x3, 0x0, 0x8000000, 0x0, 0x80000000000000, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x1) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair(0x10, 0x6, 0x7, &(0x7f0000000000)) 332.854482ms ago: executing program 1 (id=47196): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f0000000100)=r1, 0x4) 173.609291ms ago: executing program 0 (id=47198): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000040000000400000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 0s ago: executing program 4 (id=47199): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): sendmsg+0x290/0x290 [ 2705.606456][T30819] ? rcu_read_lock_any_held+0xb0/0x130 [ 2705.611926][T30819] __se_sys_sendmsg+0x1bb/0x2a0 [ 2705.616778][T30819] ? __x64_sys_sendmsg+0x80/0x80 [ 2705.621723][T30819] ? lockdep_hardirqs_on+0x94/0x140 [ 2705.626924][T30819] do_syscall_64+0x4c/0xa0 [ 2705.631371][T30819] ? clear_bhb_loop+0x60/0xb0 [ 2705.636056][T30819] ? clear_bhb_loop+0x60/0xb0 [ 2705.640729][T30819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2705.646618][T30819] RIP: 0033:0x7ff64239aeb9 [ 2705.651029][T30819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2705.670633][T30819] RSP: 002b:00007ff64326c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2705.679046][T30819] RAX: ffffffffffffffda RBX: 00007ff642615fa0 RCX: 00007ff64239aeb9 [ 2705.687015][T30819] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2705.694980][T30819] RBP: 00007ff642408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2705.702946][T30819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2705.710912][T30819] R13: 00007ff642616038 R14: 00007ff642615fa0 R15: 00007ffd0844a808 [ 2705.718894][T30819] [ 2711.254061][T30945] netlink: 'syz.2.42620': attribute type 13 has an invalid length. [ 2711.341035][T30945] netlink: 152 bytes leftover after parsing attributes in process `syz.2.42620'. [ 2711.403320][T30945] erspan0: refused to change device tx_queue_len [ 2711.410541][T30945] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2711.612275][T30954] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.42624'. [ 2712.929032][T30988] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.42642'. [ 2713.233083][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.239832][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.627851][T30998] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.42645'. [ 2713.665850][T30998] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2714.184961][T31020] netlink: 'syz.4.42656': attribute type 3 has an invalid length. [ 2714.208173][T31020] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.42656'. [ 2714.734561][T31035] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.42665'. [ 2714.856682][T31038] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.42664'. [ 2714.961764][T31038] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2716.287181][T31077] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.42681'. [ 2717.932318][T31115] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.42697'. [ 2727.940725][T31258] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.42754'. [ 2730.793718][T31290] device veth0_to_team entered promiscuous mode [ 2730.807297][T31288] netlink: 'syz.4.42777': attribute type 21 has an invalid length. [ 2730.902741][T31288] netlink: 'syz.4.42777': attribute type 6 has an invalid length. [ 2730.951723][T31288] netlink: 132 bytes leftover after parsing attributes in process `syz.4.42777'. [ 2731.084397][T31297] netlink: 'syz.1.42769': attribute type 1 has an invalid length. [ 2731.883796][T31324] netlink: 60583 bytes leftover after parsing attributes in process `syz.4.42781'. [ 2731.922763][T31324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42781'. [ 2734.765144][T31352] netlink: 'syz.0.42792': attribute type 12 has an invalid length. [ 2734.810277][T31352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.42792'. [ 2735.125183][T31363] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.42797'. [ 2744.682389][T31397] netlink: 'syz.3.42810': attribute type 21 has an invalid length. [ 2744.694356][T31397] netlink: 'syz.3.42810': attribute type 6 has an invalid length. [ 2744.706034][T31397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.42810'. [ 2751.930484][T31497] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.42855'. [ 2751.941242][T31497] openvswitch: netlink: Key type 386 is out of range max 32 [ 2752.979704][T31510] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.42860'. [ 2756.008148][T31548] netlink: 'syz.1.42876': attribute type 1 has an invalid length. [ 2756.016185][T31548] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.42876'. [ 2758.034844][ T4304] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 2759.029128][T31599] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.42897'. [ 2759.055795][T31599] openvswitch: netlink: Key type 386 is out of range max 32 [ 2759.940632][T31621] netlink: 'syz.0.42909': attribute type 1 has an invalid length. [ 2759.983091][T31621] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.42909'. [ 2760.804565][ T4304] Bluetooth: hci4: unexpected event 0x31 length: 15 > 6 [ 2760.859317][T31635] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.42914'. [ 2760.901755][T31635] openvswitch: netlink: Key type 386 is out of range max 32 [ 2761.249889][T31647] netlink: 'syz.4.42923': attribute type 1 has an invalid length. [ 2761.278190][T31647] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.42923'. [ 2761.782377][ T4304] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 2762.145748][T31666] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.42930'. [ 2762.202780][T31666] openvswitch: netlink: Key type 386 is out of range max 32 [ 2765.060564][T31710] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.42947'. [ 2765.096045][T31710] openvswitch: netlink: Key type 386 is out of range max 32 [ 2767.043234][T31754] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.42969'. [ 2767.110952][T31754] openvswitch: netlink: Key type 386 is out of range max 32 [ 2772.104565][T31814] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.42993'. [ 2772.728297][T31841] netlink: 144 bytes leftover after parsing attributes in process `syz.0.43008'. [ 2772.757142][T31841] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2773.065516][T31845] netlink: 'syz.0.43009': attribute type 21 has an invalid length. [ 2773.096258][T31845] netlink: 'syz.0.43009': attribute type 3 has an invalid length. [ 2773.131701][T31845] netlink: 144 bytes leftover after parsing attributes in process `syz.0.43009'. [ 2774.633983][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.640295][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2777.293250][T31899] netlink: 'syz.1.43043': attribute type 21 has an invalid length. [ 2777.340267][T31899] netlink: 'syz.1.43043': attribute type 3 has an invalid length. [ 2777.390076][T31899] netlink: 144 bytes leftover after parsing attributes in process `syz.1.43043'. [ 2778.408002][T31922] netlink: 144 bytes leftover after parsing attributes in process `syz.4.43042'. [ 2778.442625][T31922] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2778.673871][T31928] netlink: 144 bytes leftover after parsing attributes in process `syz.2.43059'. [ 2778.859527][T31928] team0: Port device team_slave_0 removed [ 2778.882874][T31928] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2779.253002][T31939] device syzkaller0 entered promiscuous mode [ 2782.415075][T31971] tap0: tun_chr_ioctl cmd 1074025675 [ 2782.420723][T31971] tap0: persist disabled [ 2782.430163][T31982] netlink: 144 bytes leftover after parsing attributes in process `syz.3.43067'. [ 2782.440387][T31982] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2791.738504][T32123] tap0: tun_chr_ioctl cmd 1074025675 [ 2791.743918][T32123] tap0: persist disabled [ 2791.976907][T32148] tap0: tun_chr_ioctl cmd 1074025675 [ 2791.992418][T32148] tap0: persist disabled [ 2793.498488][T32184] tap0: tun_chr_ioctl cmd 1074025675 [ 2793.507837][T32184] tap0: persist disabled [ 2793.576238][T32193] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.43153'. [ 2807.834349][ T4304] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2807.843627][ T4304] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2807.854001][ T4304] CPU: 0 PID: 4304 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2807.861578][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2807.871661][ T4304] Workqueue: hci3 hci_rx_work [ 2807.876429][ T4304] Call Trace: [ 2807.879716][ T4304] [ 2807.882667][ T4304] dump_stack_lvl+0x188/0x24e [ 2807.887400][ T4304] ? show_regs_print_info+0x12/0x12 [ 2807.892637][ T4304] ? load_image+0x400/0x400 [ 2807.897192][ T4304] sysfs_create_dir_ns+0x26a/0x290 [ 2807.902363][ T4304] ? sysfs_warn_dup+0xa0/0xa0 [ 2807.907091][ T4304] ? do_raw_spin_unlock+0x11d/0x230 [ 2807.912327][ T4304] kobject_add_internal+0x61c/0xcc0 [ 2807.917566][ T4304] kobject_add+0x160/0x230 [ 2807.922049][ T4304] ? kobject_init+0x1d0/0x1d0 [ 2807.926783][ T4304] ? klist_children_get+0x50/0x50 [ 2807.931848][ T4304] ? get_device_parent+0x121/0x3f0 [ 2807.937012][ T4304] device_add+0x483/0xfb0 [ 2807.941392][ T4304] ? kmem_cache_free+0xf7/0x290 [ 2807.946285][ T4304] hci_conn_add_sysfs+0xd1/0x1e0 [ 2807.951275][ T4304] le_conn_complete_evt+0x105f/0x1670 [ 2807.956694][ T4304] ? le_conn_complete_evt+0xe6/0x1670 [ 2807.962131][ T4304] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2807.968438][ T4304] ? bt_info+0x180/0x180 [ 2807.972704][ T4304] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2807.978388][ T4304] ? skb_pull_data+0xf7/0x200 [ 2807.983132][ T4304] hci_le_conn_complete_evt+0x183/0x440 [ 2807.988731][ T4304] ? hci_remote_host_features_evt+0x270/0x270 [ 2807.994859][ T4304] hci_event_packet+0x7b6/0x1280 [ 2807.999854][ T4304] ? bis_list+0x280/0x280 [ 2808.004217][ T4304] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2808.010147][ T4304] ? kcov_remote_start+0x4c7/0x7e0 [ 2808.015316][ T4304] ? mt_dump_node+0x8f0/0x1920 [ 2808.020129][ T4304] ? hci_send_to_monitor+0x9c/0x4a0 [ 2808.025383][ T4304] hci_rx_work+0x3eb/0xd40 [ 2808.029850][ T4304] ? _raw_spin_unlock+0x40/0x40 [ 2808.034744][ T4304] ? process_one_work+0x7b0/0x1160 [ 2808.039876][ T4304] process_one_work+0x8a2/0x1160 [ 2808.044874][ T4304] ? worker_detach_from_pool+0x240/0x240 [ 2808.050571][ T4304] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2808.055647][ T4304] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2808.061244][ T4304] ? kthread_data+0x4b/0xc0 [ 2808.065808][ T4304] worker_thread+0xaa2/0x1270 [ 2808.070569][ T4304] kthread+0x29d/0x330 [ 2808.074688][ T4304] ? worker_clr_flags+0x1a0/0x1a0 [ 2808.079747][ T4304] ? kthread_blkcg+0xd0/0xd0 [ 2808.084392][ T4304] ret_from_fork+0x1f/0x30 [ 2808.088870][ T4304] [ 2808.102307][ T4304] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2808.115704][ T4304] Bluetooth: hci3: failed to register connection device [ 2808.175650][T32462] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 2808.897896][T32479] device syzkaller0 entered promiscuous mode [ 2808.970345][T32462] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 [ 2809.373704][T32462] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2809.382657][T32462] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 2809.392210][T32462] CPU: 1 PID: 32462 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 2809.399861][T32462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2809.409937][T32462] Workqueue: hci4 hci_rx_work [ 2809.414639][T32462] Call Trace: [ 2809.417932][T32462] [ 2809.420875][T32462] dump_stack_lvl+0x188/0x24e [ 2809.425589][T32462] ? show_regs_print_info+0x12/0x12 [ 2809.430815][T32462] ? load_image+0x400/0x400 [ 2809.435414][T32462] sysfs_create_dir_ns+0x26a/0x290 [ 2809.440558][T32462] ? sysfs_warn_dup+0xa0/0xa0 [ 2809.445255][T32462] ? do_raw_spin_unlock+0x11d/0x230 [ 2809.450461][T32462] kobject_add_internal+0x61c/0xcc0 [ 2809.455662][T32462] kobject_add+0x160/0x230 [ 2809.460091][T32462] ? kobject_init+0x1d0/0x1d0 [ 2809.464779][T32462] ? klist_children_get+0x50/0x50 [ 2809.469810][T32462] ? get_device_parent+0x121/0x3f0 [ 2809.474930][T32462] device_add+0x483/0xfb0 [ 2809.479264][T32462] ? kmem_cache_free+0xf7/0x290 [ 2809.484126][T32462] hci_conn_add_sysfs+0xd1/0x1e0 [ 2809.489109][T32462] le_conn_complete_evt+0x105f/0x1670 [ 2809.494498][T32462] ? le_conn_complete_evt+0xe6/0x1670 [ 2809.499885][T32462] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2809.506127][T32462] ? bt_info+0x180/0x180 [ 2809.510370][T32462] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2809.516010][T32462] ? skb_pull_data+0xf7/0x200 [ 2809.520703][T32462] hci_le_conn_complete_evt+0x183/0x440 [ 2809.526254][T32462] ? hci_remote_host_features_evt+0x270/0x270 [ 2809.532326][T32462] hci_event_packet+0x7b6/0x1280 [ 2809.537274][T32462] ? bis_list+0x280/0x280 [ 2809.541602][T32462] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2809.547491][T32462] ? kcov_remote_start+0x4c7/0x7e0 [ 2809.552604][T32462] ? mt_dump_node+0x8f0/0x1920 [ 2809.557370][T32462] ? hci_send_to_monitor+0x9c/0x4a0 [ 2809.562568][T32462] hci_rx_work+0x3eb/0xd40 [ 2809.566977][T32462] ? _raw_spin_unlock+0x40/0x40 [ 2809.571824][T32462] ? process_one_work+0x7b0/0x1160 [ 2809.576934][T32462] process_one_work+0x8a2/0x1160 [ 2809.581881][T32462] ? worker_detach_from_pool+0x240/0x240 [ 2809.587505][T32462] ? _raw_spin_lock_irq+0x86/0xf0 [ 2809.592531][T32462] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2809.597556][T32462] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2809.603102][T32462] ? kthread_data+0x4b/0xc0 [ 2809.607612][T32462] worker_thread+0xaa2/0x1270 [ 2809.612302][T32462] ? __kthread_parkme+0x162/0x1c0 [ 2809.617329][T32462] kthread+0x29d/0x330 [ 2809.621394][T32462] ? worker_clr_flags+0x1a0/0x1a0 [ 2809.626412][T32462] ? kthread_blkcg+0xd0/0xd0 [ 2809.631005][T32462] ret_from_fork+0x1f/0x30 [ 2809.635438][T32462] [ 2809.639537][T32462] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2809.652726][T32462] Bluetooth: hci4: failed to register connection device [ 2810.161416][T32462] Bluetooth: hci3: command 0x2016 tx timeout [ 2810.245388][T32462] Bluetooth: hci1: command 0x2021 tx timeout [ 2811.665056][T32462] Bluetooth: hci4: unexpected subevent 0x06 length: 150 > 10 [ 2811.672956][T32462] Bluetooth: hci4: command 0x2016 tx timeout [ 2812.132571][T32462] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2812.242422][T32462] Bluetooth: hci3: command 0x2021 tx timeout [ 2813.747391][T32576] __sock_release: fasync list not empty! [ 2813.753373][T32462] Bluetooth: hci4: command 0x2021 tx timeout [ 2814.153040][ T9532] Bluetooth: hci2: command 0x2016 tx timeout [ 2815.933713][T32593] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.43323'. [ 2816.372500][T32618] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.43334'. [ 2823.258555][T32691] __sock_release: fasync list not empty! [ 2823.559195][T32704] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.43371'. [ 2827.893665][T32743] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.43386'. [ 2831.426509][ T305] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.43399'. [ 2831.430209][ T301] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.43410'. [ 2831.442291][ T305] netlink: zone id is out of range [ 2831.457638][ T305] netlink: zone id is out of range [ 2831.474980][ T305] netlink: get zone limit has 8 unknown bytes [ 2834.077442][ T360] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.43416'. [ 2834.087213][ T360] netlink: zone id is out of range [ 2834.092833][ T360] netlink: zone id is out of range [ 2834.098226][ T360] netlink: get zone limit has 8 unknown bytes [ 2835.833309][ T365] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.43419'. [ 2836.084506][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.090862][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.487342][ T390] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.43433'. [ 2836.504574][ T390] netlink: zone id is out of range [ 2836.510162][ T390] netlink: zone id is out of range [ 2836.520986][ T390] netlink: get zone limit has 8 unknown bytes [ 2838.946475][ T402] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.43440'. [ 2842.031108][ T420] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.43446'. [ 2842.088027][ T420] netlink: zone id is out of range [ 2842.128219][ T420] netlink: zone id is out of range [ 2842.153678][ T420] netlink: get zone limit has 8 unknown bytes [ 2853.649503][ T516] netlink: 'syz.4.43488': attribute type 10 has an invalid length. [ 2853.678074][ T516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2854.017526][ T516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2854.045227][ T516] device batadv_slave_0 entered promiscuous mode [ 2854.062639][ T516] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2854.280749][ T9532] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 2855.129820][ T552] netlink: 'syz.3.43505': attribute type 10 has an invalid length. [ 2855.152675][ T552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2855.212230][ T552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2855.292928][ T9532] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 2855.336370][ T552] device batadv_slave_0 entered promiscuous mode [ 2855.351044][ T552] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2857.069901][T32462] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 2858.290152][ T592] netlink: 'syz.1.43523': attribute type 10 has an invalid length. [ 2858.305262][ T592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2858.323663][ T592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2858.338965][ T592] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2861.609701][T32462] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 2862.857219][ T9532] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 2864.929039][T32462] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 2866.342859][T32462] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 2868.080828][ T753] netlink: 'syz.1.43590': attribute type 4 has an invalid length. [ 2873.666934][ T822] netlink: 'syz.4.43620': attribute type 4 has an invalid length. [ 2876.530707][ T851] netlink: 'syz.3.43633': attribute type 4 has an invalid length. [ 2876.945831][ T840] netlink: 'syz.2.43629': attribute type 1 has an invalid length. [ 2876.958175][ T840] netlink: 'syz.2.43629': attribute type 4 has an invalid length. [ 2876.966095][ T840] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.43629'. [ 2876.975863][ T844] netlink: 'syz.4.43631': attribute type 1 has an invalid length. [ 2876.984361][ T844] netlink: 'syz.4.43631': attribute type 4 has an invalid length. [ 2876.999203][ T844] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.43631'. [ 2896.372635][ T1052] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.43700'. [ 2896.382078][ T1057] netlink: 'syz.0.43702': attribute type 10 has an invalid length. [ 2896.410897][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 2896.430456][ T1057] device bridge_slave_1 left promiscuous mode [ 2896.452727][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 2896.463885][ T1057] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2896.682597][ T1069] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.43708'. [ 2896.725765][ T1070] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.43717'. [ 2896.852938][ T1074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.43710'. [ 2897.544274][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.550743][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2903.076718][ T1094] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.43718'. [ 2903.087016][ T1111] netlink: 'syz.4.43726': attribute type 10 has an invalid length. [ 2906.909116][ T1159] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.43744'. [ 2908.174567][ T1181] netlink: 'syz.4.43753': attribute type 10 has an invalid length. [ 2908.226123][ T1181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.43753'. [ 2909.071482][ T1204] netlink: 'syz.1.43762': attribute type 25 has an invalid length. [ 2909.118718][ T1204] netlink: 'syz.1.43762': attribute type 1 has an invalid length. [ 2909.159463][ T1204] bridge0: port 1(bridge_slave_0) entered learning state [ 2912.250216][T32462] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 2914.961287][ T1251] netlink: 128 bytes leftover after parsing attributes in process `syz.4.43779'. [ 2915.007257][ T1251] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2918.337126][T32462] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 2918.552026][ T1357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.43816'. [ 2925.695456][ T1461] netlink: 'syz.3.43859': attribute type 5 has an invalid length. [ 2925.842914][T32462] Bluetooth: hci4: unexpected subevent 0x01 length: 128 > 18 [ 2926.326578][ T1485] netlink: 'syz.4.43866': attribute type 10 has an invalid length. [ 2926.352079][ T1485] netlink: 40 bytes leftover after parsing attributes in process `syz.4.43866'. [ 2926.408170][ T1485] netlink: 'syz.4.43866': attribute type 10 has an invalid length. [ 2926.492217][ T1485] netlink: 40 bytes leftover after parsing attributes in process `syz.4.43866'. [ 2933.445364][ T1584] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.43907'. [ 2934.752560][ T1619] netlink: 'syz.1.43924': attribute type 16 has an invalid length. [ 2934.819794][ T1619] netlink: 156 bytes leftover after parsing attributes in process `syz.1.43924'. [ 2937.693408][ T1648] delete_channel: no stack [ 2937.707620][ T1648] delete_channel: no stack [ 2941.346092][ T1646] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.43935'. [ 2941.671545][ T9532] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 2941.887784][ T9532] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2941.906506][ T9532] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2941.925446][ T9532] CPU: 1 PID: 9532 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2941.935106][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2941.949832][ T9532] Workqueue: hci3 hci_rx_work [ 2941.955668][ T9532] Call Trace: [ 2941.959303][ T9532] [ 2941.963512][ T9532] dump_stack_lvl+0x188/0x24e [ 2941.968708][ T9532] ? show_regs_print_info+0x12/0x12 [ 2941.975061][ T9532] ? load_image+0x400/0x400 [ 2941.980499][ T9532] sysfs_create_dir_ns+0x26a/0x290 [ 2941.988146][ T9532] ? sysfs_warn_dup+0xa0/0xa0 [ 2941.994517][ T9532] ? do_raw_spin_unlock+0x11d/0x230 [ 2942.000934][ T9532] kobject_add_internal+0x61c/0xcc0 [ 2942.009469][ T9532] kobject_add+0x160/0x230 [ 2942.015283][ T9532] ? kobject_init+0x1d0/0x1d0 [ 2942.021471][ T9532] ? klist_children_get+0x50/0x50 [ 2942.028137][ T9532] ? get_device_parent+0x121/0x3f0 [ 2942.035253][ T9532] device_add+0x483/0xfb0 [ 2942.040420][ T9532] ? kmem_cache_free+0xf7/0x290 [ 2942.046787][ T9532] hci_conn_add_sysfs+0xd1/0x1e0 [ 2942.053053][ T9532] le_conn_complete_evt+0x105f/0x1670 [ 2942.058935][ T9532] ? le_conn_complete_evt+0xe6/0x1670 [ 2942.064709][ T9532] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2942.071674][ T9532] ? bt_info+0x180/0x180 [ 2942.076362][ T9532] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2942.083407][ T9532] ? skb_pull_data+0xf7/0x200 [ 2942.089557][ T9532] hci_le_conn_complete_evt+0x183/0x440 [ 2942.095930][ T9532] ? hci_remote_host_features_evt+0x270/0x270 [ 2942.102292][ T9532] hci_event_packet+0x7b6/0x1280 [ 2942.108596][ T9532] ? bis_list+0x280/0x280 [ 2942.113102][ T9532] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2942.119644][ T9532] ? kcov_remote_start+0x4c7/0x7e0 [ 2942.125646][ T9532] ? mt_dump_node+0x8f0/0x1920 [ 2942.131545][ T9532] ? hci_send_to_monitor+0x9c/0x4a0 [ 2942.136910][ T9532] hci_rx_work+0x3eb/0xd40 [ 2942.142181][ T9532] ? _raw_spin_unlock+0x40/0x40 [ 2942.148398][ T9532] ? process_one_work+0x7b0/0x1160 [ 2942.154023][ T9532] process_one_work+0x8a2/0x1160 [ 2942.159460][ T9532] ? worker_detach_from_pool+0x240/0x240 [ 2942.167001][ T9532] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2942.172411][ T9532] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2942.178809][ T9532] ? kthread_data+0x4b/0xc0 [ 2942.184082][ T9532] worker_thread+0xaa2/0x1270 [ 2942.189686][ T9532] kthread+0x29d/0x330 [ 2942.194720][ T9532] ? worker_clr_flags+0x1a0/0x1a0 [ 2942.202408][ T9532] ? kthread_blkcg+0xd0/0xd0 [ 2942.208129][ T9532] ret_from_fork+0x1f/0x30 [ 2942.214133][ T9532] [ 2942.219530][ T9532] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2942.240989][ T9532] Bluetooth: hci3: failed to register connection device [ 2942.721493][ T1710] netlink: 'syz.2.43964': attribute type 3 has an invalid length. [ 2942.863948][ T1710] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.43964'. [ 2943.904015][ T1725] device syzkaller0 entered promiscuous mode [ 2944.312478][ T9532] Bluetooth: hci3: command 0x2016 tx timeout [ 2946.511206][ T1747] netlink: 'syz.2.43979': attribute type 3 has an invalid length. [ 2946.550468][ T1747] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.43979'. [ 2953.156774][ T1781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2953.991978][ T1811] netlink: 'syz.3.44006': attribute type 4 has an invalid length. [ 2954.002971][ T1811] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.44006'. [ 2954.004995][ T1808] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.44005'. [ 2956.763726][ T1872] device syzkaller0 entered promiscuous mode [ 2958.197464][ T9532] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 2958.723396][ T1919] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2958.961048][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.968041][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2960.361831][ T1907] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.44045'. [ 2960.396138][ T1921] device veth1_macvtap left promiscuous mode [ 2961.239975][ T1963] IPv6: NLM_F_CREATE should be specified when creating new route [ 2961.276325][ T1963] netlink: 1 bytes leftover after parsing attributes in process `syz.1.44070'. [ 2961.319051][ T1967] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.44071'. [ 2962.104497][ T9532] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 2967.669050][ T2038] device syzkaller0 entered promiscuous mode [ 2967.694942][ T2043] netlink: 'syz.1.44104': attribute type 21 has an invalid length. [ 2967.875746][ T2051] netlink: 'syz.1.44108': attribute type 29 has an invalid length. [ 2970.615026][ T2050] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.44107'. [ 2970.625492][ T2051] netlink: 'syz.1.44108': attribute type 29 has an invalid length. [ 2970.747632][ T2059] device syzkaller0 entered promiscuous mode [ 2971.693917][ T2114] netlink: 'syz.1.44133': attribute type 3 has an invalid length. [ 2971.702012][ T2114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.44133'. [ 2974.035648][ T2112] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.44132'. [ 2974.419827][ T2145] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.44147'. [ 2974.783477][ T9532] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2977.484113][ T2145] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2977.494945][ T2145] CPU: 1 PID: 2145 Comm: syz.2.44147 Not tainted syzkaller #0 [ 2977.502465][ T2145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2977.512539][ T2145] Call Trace: [ 2977.515841][ T2145] [ 2977.518770][ T2145] dump_stack_lvl+0x188/0x24e [ 2977.523548][ T2145] ? show_regs_print_info+0x12/0x12 [ 2977.528761][ T2145] ? load_image+0x400/0x400 [ 2977.533276][ T2145] sysfs_warn_dup+0x8a/0xa0 [ 2977.537783][ T2145] sysfs_do_create_link_sd+0xc0/0x110 [ 2977.543170][ T2145] device_add+0x7ed/0xfb0 [ 2977.547543][ T2145] wiphy_register+0x1d9f/0x2ac0 [ 2977.552429][ T2145] ? cfg80211_event_work+0x40/0x40 [ 2977.557541][ T2145] ? minstrel_ht_alloc+0x894/0xa20 [ 2977.562665][ T2145] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2977.568747][ T2145] ieee80211_register_hw+0x2d00/0x39f0 [ 2977.574214][ T2145] ? ieee80211_register_hw+0xea1/0x39f0 [ 2977.579757][ T2145] ? ieee80211_register_hw+0xea1/0x39f0 [ 2977.585312][ T2145] ? ieee80211_tasklet_handler+0x20/0x20 [ 2977.590964][ T2145] ? memset+0x1e/0x40 [ 2977.594949][ T2145] ? __hrtimer_init+0x186/0x270 [ 2977.599810][ T2145] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2977.605535][ T2145] hwsim_new_radio_nl+0xafa/0xce0 [ 2977.610559][ T2145] genl_family_rcv_msg_doit+0x22a/0x330 [ 2977.616097][ T2145] ? end_current_label_crit_section+0x170/0x170 [ 2977.622338][ T2145] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2977.628225][ T2145] ? bpf_lsm_capable+0x5/0x10 [ 2977.632904][ T2145] ? security_capable+0x85/0xb0 [ 2977.637766][ T2145] genl_rcv_msg+0x604/0x790 [ 2977.642277][ T2145] ? genl_bind+0x360/0x360 [ 2977.646712][ T2145] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2977.653070][ T2145] netlink_rcv_skb+0x1fb/0x450 [ 2977.657850][ T2145] ? genl_bind+0x360/0x360 [ 2977.662269][ T2145] ? netlink_ack+0x1170/0x1170 [ 2977.667039][ T2145] ? down_read+0x1a8/0x2d0 [ 2977.671456][ T2145] genl_rcv+0x24/0x40 [ 2977.675455][ T2145] netlink_unicast+0x74d/0x8d0 [ 2977.680215][ T2145] netlink_sendmsg+0x8ad/0xbd0 [ 2977.684977][ T2145] ? lockdep_hardirqs_on+0x94/0x140 [ 2977.690193][ T2145] ? netlink_getsockopt+0x550/0x550 [ 2977.695420][ T2145] ? bpf_lsm_socket_accept+0x10/0x10 [ 2977.700741][ T2145] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2977.706016][ T2145] ? security_socket_sendmsg+0x7c/0xa0 [ 2977.711472][ T2145] ? netlink_getsockopt+0x550/0x550 [ 2977.716663][ T2145] ____sys_sendmsg+0x5be/0x970 [ 2977.721434][ T2145] ? __sys_sendmsg_sock+0x30/0x30 [ 2977.726448][ T2145] ? __import_iovec+0x315/0x500 [ 2977.731303][ T2145] ? import_iovec+0x6f/0xa0 [ 2977.735801][ T2145] ___sys_sendmsg+0x2a2/0x360 [ 2977.740488][ T2145] ? try_to_wake_up+0x6ae/0x1080 [ 2977.745433][ T2145] ? __sys_sendmsg+0x290/0x290 [ 2977.750240][ T2145] __se_sys_sendmsg+0x1bb/0x2a0 [ 2977.755097][ T2145] ? __x64_sys_sendmsg+0x80/0x80 [ 2977.760033][ T2145] ? lockdep_hardirqs_on+0x94/0x140 [ 2977.765223][ T2145] do_syscall_64+0x4c/0xa0 [ 2977.769626][ T2145] ? clear_bhb_loop+0x60/0xb0 [ 2977.774286][ T2145] ? clear_bhb_loop+0x60/0xb0 [ 2977.778948][ T2145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2977.784830][ T2145] RIP: 0033:0x7fc1c8f9aeb9 [ 2977.789249][ T2145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2977.808940][ T2145] RSP: 002b:00007fc1c9def028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2977.817434][ T2145] RAX: ffffffffffffffda RBX: 00007fc1c9215fa0 RCX: 00007fc1c8f9aeb9 [ 2977.825418][ T2145] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2977.833473][ T2145] RBP: 00007fc1c9008c1f R08: 0000000000000000 R09: 0000000000000000 [ 2977.841439][ T2145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2977.849416][ T2145] R13: 00007fc1c9216038 R14: 00007fc1c9215fa0 R15: 00007fff2a7da9a8 [ 2977.857393][ T2145] [ 2978.027645][ T9532] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 2978.485019][ T2195] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.44167'. [ 2979.568384][ T9532] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 2980.152698][T32462] Bluetooth: hci1: command 0x206e tx timeout [ 2980.468218][ T2230] netlink: 'syz.2.44182': attribute type 1 has an invalid length. [ 2980.500922][ T2230] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.44182'. [ 2980.873200][ T9532] Bluetooth: hci3: command 0x0406 tx timeout [ 2982.232293][ T9532] Bluetooth: hci1: command 0x206e tx timeout [ 2985.903850][ T2263] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.44196'. [ 2985.946328][ T2278] device syzkaller0 entered promiscuous mode [ 2985.972319][ T2288] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.44206'. [ 2986.218469][ T2298] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.44211'. [ 2986.239537][ T2298] openvswitch: netlink: Flow actions attr not present in new flow. [ 2989.664336][ T2346] netlink: 'syz.0.44229': attribute type 11 has an invalid length. [ 2989.691409][ T2346] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.44229'. [ 2992.469197][ T2433] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2994.389581][ T2501] device syzkaller0 entered promiscuous mode [ 2994.781110][ T2524] delete_channel: no stack [ 2995.154781][ T9532] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2996.019336][ T2547] netlink: 'syz.2.44302': attribute type 29 has an invalid length. [ 2996.261454][ T2550] delete_channel: no stack [ 2996.928453][ T9532] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2996.936188][ T9532] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 2996.945610][ T9532] CPU: 0 PID: 9532 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2996.953193][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2996.963267][ T9532] Workqueue: hci4 hci_rx_work [ 2996.967956][ T9532] Call Trace: [ 2996.971251][ T9532] [ 2996.974198][ T9532] dump_stack_lvl+0x188/0x24e [ 2996.978900][ T9532] ? show_regs_print_info+0x12/0x12 [ 2996.984118][ T9532] ? load_image+0x400/0x400 [ 2996.988629][ T9532] sysfs_create_dir_ns+0x26a/0x290 [ 2996.993757][ T9532] ? sysfs_warn_dup+0xa0/0xa0 [ 2996.998486][ T9532] ? do_raw_spin_unlock+0x11d/0x230 [ 2997.003706][ T9532] kobject_add_internal+0x61c/0xcc0 [ 2997.008909][ T9532] kobject_add+0x160/0x230 [ 2997.013353][ T9532] ? kobject_init+0x1d0/0x1d0 [ 2997.018065][ T9532] ? klist_children_get+0x50/0x50 [ 2997.023093][ T9532] ? get_device_parent+0x121/0x3f0 [ 2997.028209][ T9532] device_add+0x483/0xfb0 [ 2997.032552][ T9532] ? kmem_cache_free+0xf7/0x290 [ 2997.037440][ T9532] hci_conn_add_sysfs+0xd1/0x1e0 [ 2997.042662][ T9532] le_conn_complete_evt+0x105f/0x1670 [ 2997.048064][ T9532] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2997.054339][ T9532] ? bt_info+0x180/0x180 [ 2997.058604][ T9532] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2997.064249][ T9532] ? skb_pull_data+0xf7/0x200 [ 2997.068944][ T9532] hci_le_conn_complete_evt+0x183/0x440 [ 2997.074525][ T9532] ? hci_remote_host_features_evt+0x270/0x270 [ 2997.080629][ T9532] hci_event_packet+0x7b6/0x1280 [ 2997.085614][ T9532] ? bis_list+0x280/0x280 [ 2997.090039][ T9532] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2997.095971][ T9532] ? kcov_remote_start+0x4c7/0x7e0 [ 2997.101111][ T9532] ? mt_dump_node+0x8f0/0x1920 [ 2997.105897][ T9532] ? hci_send_to_monitor+0x9c/0x4a0 [ 2997.111113][ T9532] hci_rx_work+0x3eb/0xd40 [ 2997.115541][ T9532] ? _raw_spin_unlock+0x40/0x40 [ 2997.120410][ T9532] ? process_one_work+0x7b0/0x1160 [ 2997.125518][ T9532] process_one_work+0x8a2/0x1160 [ 2997.130460][ T9532] ? worker_detach_from_pool+0x240/0x240 [ 2997.136113][ T9532] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2997.141162][ T9532] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2997.146716][ T9532] ? kthread_data+0x4b/0xc0 [ 2997.151229][ T9532] worker_thread+0xaa2/0x1270 [ 2997.155954][ T9532] kthread+0x29d/0x330 [ 2997.160058][ T9532] ? worker_clr_flags+0x1a0/0x1a0 [ 2997.165113][ T9532] ? kthread_blkcg+0xd0/0xd0 [ 2997.169740][ T9532] ret_from_fork+0x1f/0x30 [ 2997.174226][ T9532] [ 2997.190647][ T9532] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2997.206379][ T9532] Bluetooth: hci4: failed to register connection device [ 2997.257118][ T2588] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2997.264075][ T2588] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2997.826789][ T9532] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 2998.235347][ T2606] netlink: 44 bytes leftover after parsing attributes in process `syz.4.44323'. [ 2998.911376][ T2547] netlink: 'syz.2.44302': attribute type 29 has an invalid length. [ 2998.920674][ T2574] netlink: 14 bytes leftover after parsing attributes in process `syz.0.44312'. [ 2999.056815][ T2599] : port 1(macsec0) entered blocking state [ 2999.067900][ T2599] : port 1(macsec0) entered disabled state [ 2999.085306][ T2599] device macsec0 entered promiscuous mode [ 2999.632103][ T2637] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.44333'. [ 2999.641698][ T2637] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.44333'. [ 2999.665677][ T2637] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.44333'. [ 2999.682867][ T2637] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.44333'. [ 3001.162387][ T9532] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 3001.218203][ T4304] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 3001.233867][ T4304] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 3001.243414][ T4304] CPU: 1 PID: 4304 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 3001.250999][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3001.261075][ T4304] Workqueue: hci2 hci_rx_work [ 3001.265781][ T4304] Call Trace: [ 3001.269071][ T4304] [ 3001.272012][ T4304] dump_stack_lvl+0x188/0x24e [ 3001.276719][ T4304] ? show_regs_print_info+0x12/0x12 [ 3001.281967][ T4304] ? load_image+0x400/0x400 [ 3001.286544][ T4304] sysfs_create_dir_ns+0x26a/0x290 [ 3001.291710][ T4304] ? sysfs_warn_dup+0xa0/0xa0 [ 3001.296428][ T4304] ? do_raw_spin_unlock+0x11d/0x230 [ 3001.301660][ T4304] kobject_add_internal+0x61c/0xcc0 [ 3001.306898][ T4304] kobject_add+0x160/0x230 [ 3001.311361][ T4304] ? kobject_init+0x1d0/0x1d0 [ 3001.316079][ T4304] ? klist_children_get+0x50/0x50 [ 3001.321123][ T4304] ? get_device_parent+0x121/0x3f0 [ 3001.326266][ T4304] device_add+0x483/0xfb0 [ 3001.330614][ T4304] ? kmem_cache_free+0xf7/0x290 [ 3001.335504][ T4304] hci_conn_add_sysfs+0xd1/0x1e0 [ 3001.340473][ T4304] le_conn_complete_evt+0x105f/0x1670 [ 3001.345882][ T4304] ? le_conn_complete_evt+0xe6/0x1670 [ 3001.351287][ T4304] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 3001.357574][ T4304] ? bt_info+0x180/0x180 [ 3001.361833][ T4304] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 3001.367491][ T4304] ? skb_pull_data+0xf7/0x200 [ 3001.372226][ T4304] hci_le_conn_complete_evt+0x183/0x440 [ 3001.377825][ T4304] ? hci_remote_host_features_evt+0x270/0x270 [ 3001.383921][ T4304] hci_event_packet+0x7b6/0x1280 [ 3001.388910][ T4304] ? bis_list+0x280/0x280 [ 3001.393254][ T4304] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3001.399180][ T4304] ? kcov_remote_start+0x4c7/0x7e0 [ 3001.404322][ T4304] ? mt_dump_node+0x8f0/0x1920 [ 3001.409128][ T4304] ? hci_send_to_monitor+0x9c/0x4a0 [ 3001.414349][ T4304] hci_rx_work+0x3eb/0xd40 [ 3001.418785][ T4304] ? _raw_spin_unlock+0x40/0x40 [ 3001.423666][ T4304] ? process_one_work+0x7b0/0x1160 [ 3001.428794][ T4304] process_one_work+0x8a2/0x1160 [ 3001.433793][ T4304] ? worker_detach_from_pool+0x240/0x240 [ 3001.439448][ T4304] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3001.444490][ T4304] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3001.450054][ T4304] ? kthread_data+0x4b/0xc0 [ 3001.454592][ T4304] worker_thread+0xaa2/0x1270 [ 3001.459350][ T4304] kthread+0x29d/0x330 [ 3001.463439][ T4304] ? worker_clr_flags+0x1a0/0x1a0 [ 3001.468481][ T4304] ? kthread_blkcg+0xd0/0xd0 [ 3001.473112][ T4304] ret_from_fork+0x1f/0x30 [ 3001.477602][ T4304] [ 3001.482014][ T4304] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 3001.495668][ T4304] Bluetooth: hci2: failed to register connection device [ 3003.095387][ T2688] sock: sock_set_timeout: `syz.2.44351' (pid 2688) tries to set negative timeout [ 3003.195734][ T4304] Bluetooth: hci1: command 0x0406 tx timeout [ 3003.532158][ T9532] Bluetooth: hci2: command 0x2016 tx timeout [ 3009.066880][T29045] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3009.161449][T29045] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3009.338810][T29045] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3009.400762][ T4304] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 3009.408803][ T4304] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 3009.418745][ T4304] CPU: 1 PID: 4304 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 3009.426326][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3009.436404][ T4304] Workqueue: hci4 hci_rx_work [ 3009.441090][ T4304] Call Trace: [ 3009.444363][ T4304] [ 3009.447289][ T4304] dump_stack_lvl+0x188/0x24e [ 3009.451971][ T4304] ? show_regs_print_info+0x12/0x12 [ 3009.457174][ T4304] ? load_image+0x400/0x400 [ 3009.461688][ T4304] sysfs_create_dir_ns+0x26a/0x290 [ 3009.466802][ T4304] ? sysfs_warn_dup+0xa0/0xa0 [ 3009.471480][ T4304] ? do_raw_spin_unlock+0x11d/0x230 [ 3009.476701][ T4304] kobject_add_internal+0x61c/0xcc0 [ 3009.481923][ T4304] kobject_add+0x160/0x230 [ 3009.486362][ T4304] ? kobject_init+0x1d0/0x1d0 [ 3009.491049][ T4304] ? klist_children_get+0x50/0x50 [ 3009.496091][ T4304] ? get_device_parent+0x121/0x3f0 [ 3009.501230][ T4304] device_add+0x483/0xfb0 [ 3009.505573][ T4304] ? kmem_cache_free+0xf7/0x290 [ 3009.510432][ T4304] hci_conn_add_sysfs+0xd1/0x1e0 [ 3009.515378][ T4304] le_conn_complete_evt+0x105f/0x1670 [ 3009.520774][ T4304] ? le_conn_complete_evt+0xe6/0x1670 [ 3009.526165][ T4304] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 3009.532418][ T4304] ? bt_info+0x180/0x180 [ 3009.536666][ T4304] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 3009.542306][ T4304] ? skb_pull_data+0xf7/0x200 [ 3009.546991][ T4304] hci_le_enh_conn_complete_evt+0x185/0x460 [ 3009.552886][ T4304] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 3009.559301][ T4304] ? hci_remote_host_features_evt+0x270/0x270 [ 3009.565367][ T4304] hci_event_packet+0x7b6/0x1280 [ 3009.570309][ T4304] ? bis_list+0x280/0x280 [ 3009.574634][ T4304] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3009.580521][ T4304] ? kcov_remote_start+0x4c7/0x7e0 [ 3009.585636][ T4304] ? mt_dump_node+0x8f0/0x1920 [ 3009.590405][ T4304] ? hci_send_to_monitor+0x9c/0x4a0 [ 3009.595603][ T4304] hci_rx_work+0x3eb/0xd40 [ 3009.600016][ T4304] ? _raw_spin_unlock+0x40/0x40 [ 3009.604866][ T4304] ? process_one_work+0x7b0/0x1160 [ 3009.609972][ T4304] process_one_work+0x8a2/0x1160 [ 3009.614968][ T4304] ? worker_detach_from_pool+0x240/0x240 [ 3009.620603][ T4304] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3009.625634][ T4304] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3009.631181][ T4304] ? kthread_data+0x4b/0xc0 [ 3009.635688][ T4304] worker_thread+0xaa2/0x1270 [ 3009.640388][ T4304] kthread+0x29d/0x330 [ 3009.644459][ T4304] ? worker_clr_flags+0x1a0/0x1a0 [ 3009.649483][ T4304] ? kthread_blkcg+0xd0/0xd0 [ 3009.654081][ T4304] ret_from_fork+0x1f/0x30 [ 3009.658510][ T4304] [ 3009.665075][ T4304] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 3009.678361][ T4304] Bluetooth: hci4: failed to register connection device [ 3009.974330][T29045] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.231482][ T9532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3010.251755][ T9532] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3010.267934][ T9532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3010.306374][ T9532] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3010.314409][ T9532] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3010.321895][ T9532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3010.796959][ T2786] chnl_net:caif_netlink_parms(): no params data found [ 3010.941896][ T2786] bridge0: port 1(bridge_slave_0) entered blocking state [ 3010.954265][ T2786] bridge0: port 1(bridge_slave_0) entered disabled state [ 3010.966083][ T2786] device bridge_slave_0 entered promiscuous mode [ 3010.975193][ T2786] bridge0: port 2(bridge_slave_1) entered blocking state [ 3010.982774][ T2786] bridge0: port 2(bridge_slave_1) entered disabled state [ 3010.991007][ T2786] device bridge_slave_1 entered promiscuous mode [ 3011.029273][ T2786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3011.042381][ T2786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3011.104799][ T2786] team0: Port device team_slave_0 added [ 3011.188410][ T2818] Â: renamed from pim6reg1 [ 3011.206745][ T2786] team0: Port device team_slave_1 added [ 3011.280576][ T2786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3011.316150][ T2830] delete_channel: no stack [ 3011.320895][ T2786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3011.377057][ T2786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3011.469631][ T2786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3011.483214][ T2786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3011.565535][ T2786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3011.752690][ T9532] Bluetooth: hci4: command 0x2016 tx timeout [ 3011.813935][ T2786] device hsr_slave_0 entered promiscuous mode [ 3011.821042][ T2786] device hsr_slave_1 entered promiscuous mode [ 3011.836207][ T2786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3011.853320][ T2786] Cannot create hsr debugfs directory [ 3011.912641][ T2847] netlink: 14 bytes leftover after parsing attributes in process `syz.2.44396'. [ 3012.142591][ T2843] delete_channel: no stack [ 3012.376033][ T2862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.44403'. [ 3012.454614][ T9532] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 3012.472521][ T9532] Bluetooth: hci2: command 0x0409 tx timeout [ 3014.552258][ T9532] Bluetooth: hci2: command 0x041b tx timeout [ 3016.252275][ T2931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.44412'. [ 3016.288512][ T2931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3016.565230][T29045] device macsec0 left promiscuous mode [ 3016.571005][T29045] : port 1(macsec0) entered disabled state [ 3016.632201][ T9532] Bluetooth: hci2: command 0x040f tx timeout [ 3016.643943][T29045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3016.682185][T29045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3016.710697][T29045] device bridge_slave_1 left promiscuous mode [ 3016.736881][T29045] bridge0: port 2(bridge_slave_1) entered disabled state [ 3016.762673][T29045] device bridge_slave_0 left promiscuous mode [ 3016.769006][T29045] bridge0: port 1(bridge_slave_0) entered disabled state [ 3016.842999][T29045] device veth1_macvtap left promiscuous mode [ 3016.849113][T29045] device veth0_macvtap left promiscuous mode [ 3016.872347][T29045] device veth1_vlan left promiscuous mode [ 3016.879498][T29045] device veth0_vlan left promiscuous mode [ 3017.885992][T29045] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3017.950670][T29045] team0 (unregistering): Port device team_slave_1 removed [ 3018.059354][T29045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3018.127632][T29045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3018.557490][T29045] bond0 (unregistering): Released all slaves [ 3018.652455][ T2947] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3018.712303][ T9532] Bluetooth: hci2: command 0x0419 tx timeout [ 3018.780840][ T2962] netlink: 'syz.4.44425': attribute type 9 has an invalid length. [ 3018.796711][ T2786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3018.821400][ T2786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3018.883813][ T2786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3018.931595][ T2786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3019.180787][ T2786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3019.257984][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3019.273018][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3019.330296][ T2786] 8021q: adding VLAN 0 to HW filter on device team0 [ 3019.390493][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3019.413399][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3019.442464][T24684] bridge0: port 1(bridge_slave_0) entered blocking state [ 3019.449612][T24684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3019.544666][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3019.556423][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3019.603354][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3019.640488][T24684] bridge0: port 2(bridge_slave_1) entered blocking state [ 3019.647863][T24684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3019.691394][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3019.718664][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3019.749799][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3019.786106][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3019.826763][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3019.843087][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3019.877635][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3019.904940][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3019.921362][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3019.946573][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3019.963179][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3020.003488][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3020.132211][ T9532] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 3020.423652][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.437316][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.082204][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3021.109273][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3021.181746][ T2786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3021.338356][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3021.363295][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3021.393314][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3021.421367][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3021.437808][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3021.448659][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3021.494147][ T2786] device veth0_vlan entered promiscuous mode [ 3021.552712][ T2786] device veth1_vlan entered promiscuous mode [ 3021.614193][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3021.636375][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3021.682880][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3021.720238][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3021.750588][ T2786] device veth0_macvtap entered promiscuous mode [ 3021.842603][ T2786] device veth1_macvtap entered promiscuous mode [ 3021.920863][ T2786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3021.932056][ T2786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.942347][ T2786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3021.953061][ T2786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.965013][ T2786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3021.974524][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3021.998824][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3022.010702][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3022.030694][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3022.099599][ T2786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3022.137952][ T2786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.170902][ T2786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3022.192252][ T2786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.202944][ T2786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3022.214184][ T2786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.224313][ T2786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3022.235811][ T2786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.247450][ T2786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3022.256859][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3022.266919][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3022.304955][ T2786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3022.322610][ T2786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3022.351913][ T2786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3022.374130][ T2786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3022.465614][ T3053] netlink: 'syz.4.44449': attribute type 10 has an invalid length. [ 3022.508623][ T3053] 8021q: adding VLAN 0 to HW filter on device team0 [ 3022.526885][ T3053] device team0 entered promiscuous mode [ 3022.539133][ T3053] device team_slave_1 entered promiscuous mode [ 3022.546261][ T3053] device dummy0 entered promiscuous mode [ 3022.553609][ T3053] bond0: (slave team0): Enslaving as an active interface with an up link [ 3023.339613][ T9532] Bluetooth: hci4: unexpected event 0x0b length: 151 > 11 [ 3025.352219][ T4304] Bluetooth: hci4: command 0x0419 tx timeout [ 3025.685730][ T9428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3025.722178][ T9428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3025.785851][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3025.905526][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3025.932775][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3026.019264][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3026.032903][ T3116] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.44462'. [ 3026.132650][ T3118] netlink: 'syz.4.44462': attribute type 10 has an invalid length. [ 3026.202251][ T3118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.44462'. [ 3027.352419][ T3149] device syzkaller0 entered promiscuous mode [ 3027.432368][ T4304] Bluetooth: hci4: command 0x0406 tx timeout [ 3031.072134][ T3182] netlink: 'syz.2.44473': attribute type 7 has an invalid length. [ 3031.136933][ T3185] netlink: 'syz.0.44474': attribute type 10 has an invalid length. [ 3031.146300][ T3185] netlink: 55 bytes leftover after parsing attributes in process `syz.0.44474'. [ 3032.519847][ T3243] sock: sock_set_timeout: `syz.0.44500' (pid 3243) tries to set negative timeout [ 3032.788940][ T3248] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.44503'. [ 3032.883326][ T3248] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 3033.550019][ T3255] device syzkaller0 entered promiscuous mode [ 3036.021118][ T4304] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 3036.021188][ T4304] Bluetooth: hci1: Malformed LE Event: 0x02 [ 3039.370978][ T3319] delete_channel: no stack [ 3039.417283][ T3319] delete_channel: no stack [ 3039.603601][ T3324] netlink: 'syz.1.44532': attribute type 41 has an invalid length. [ 3039.627098][ T3324] netlink: 'syz.1.44532': attribute type 41 has an invalid length. [ 3039.716666][ T3331] netlink: 'syz.4.44536': attribute type 9 has an invalid length. [ 3039.742510][ T3331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.44536'. [ 3040.373612][ T4304] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 3041.730853][ T3380] device syzkaller0 entered promiscuous mode [ 3042.202664][ T3395] netlink: 196 bytes leftover after parsing attributes in process `syz.1.44555'. [ 3044.482590][ T4304] Bluetooth: hci3: command 0x0406 tx timeout [ 3045.542709][ T3407] netlink: 72 bytes leftover after parsing attributes in process `syz.1.44559'. [ 3048.302194][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3048.309778][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3052.632980][ T3548] netlink: 'syz.2.44613': attribute type 10 has an invalid length. [ 3052.740570][ T3548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3052.750414][ T3548] team0: Port device bond0 added [ 3053.031134][ T3562] delete_channel: no stack [ 3056.276455][ T3612] wlan1: mtu greater than device maximum [ 3056.425188][ T3617] netlink: 'syz.0.44642': attribute type 10 has an invalid length. [ 3056.470907][ T3627] delete_channel: no stack [ 3056.492771][ T3627] delete_channel: no stack [ 3056.889967][ T3617] team0: Port device hsr_slave_0 added [ 3057.039373][ T3631] device syzkaller0 entered promiscuous mode [ 3062.631371][ T3689] device bridge_slave_0 left promiscuous mode [ 3062.657315][ T3689] bridge0: port 1(bridge_slave_0) entered disabled state [ 3062.900123][ T3698] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.44667'. [ 3062.945560][T13497] tipc: Subscription rejected, illegal request [ 3063.989184][ T3741] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.44684'. [ 3064.004607][ T3742] device bridge_slave_1 left promiscuous mode [ 3064.025397][ T9416] tipc: Subscription rejected, illegal request [ 3064.053707][ T3742] bridge0: port 2(bridge_slave_1) entered disabled state [ 3064.108061][ T3742] device bridge_slave_0 left promiscuous mode [ 3064.122423][ T3742] bridge0: port 1(bridge_slave_0) entered disabled state [ 3065.238476][ T3750] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 3065.262184][ T3750] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 3065.292407][ T3750] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3067.339675][ T3777] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.44697'. [ 3067.440846][T13497] tipc: Subscription rejected, illegal request [ 3068.763559][ T3807] bridge0: port 3(bond0) entered disabled state [ 3068.803961][ T3807] device bridge_slave_1 left promiscuous mode [ 3068.810246][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 3068.853921][ T3807] device bridge_slave_0 left promiscuous mode [ 3068.860182][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 3069.061332][ T3807] team0: Port device bridge0 removed [ 3069.129003][ T3809] netlink: 'syz.1.44719': attribute type 10 has an invalid length. [ 3069.184128][ T3809] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3069.979147][ T3833] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.44716'. [ 3070.023878][T13497] tipc: Subscription rejected, illegal request [ 3073.182511][ T3852] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.44724'. [ 3073.283290][ T3858] netlink: 132 bytes leftover after parsing attributes in process `syz.2.44725'. [ 3074.189870][ T3878] netlink: 'syz.3.44733': attribute type 10 has an invalid length. [ 3074.241296][ T3878] device bridge_slave_1 entered promiscuous mode [ 3074.300830][ T3878] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3078.593927][ T3893] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.44738'. [ 3078.608974][ T3896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.44739'. [ 3078.628809][ T3903] netlink: 'syz.2.44742': attribute type 10 has an invalid length. [ 3081.836252][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.842823][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.765569][ T3923] netlink: 'syz.2.44750': attribute type 10 has an invalid length. [ 3082.782990][ T3923] bridge0: port 2(bridge_slave_1) entered disabled state [ 3082.790687][ T3923] device bridge_slave_1 left promiscuous mode [ 3082.798993][ T3923] bridge0: port 2(bridge_slave_1) entered disabled state [ 3082.810361][ T3923] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3082.824774][ T3950] netlink: 132 bytes leftover after parsing attributes in process `syz.4.44770'. [ 3082.997811][ T3967] netlink: 'syz.4.44775': attribute type 25 has an invalid length. [ 3083.012483][ T3967] netlink: 'syz.4.44775': attribute type 1 has an invalid length. [ 3083.297288][ T3977] netlink: 'syz.0.44767': attribute type 10 has an invalid length. [ 3083.306967][ T3977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.44767'. [ 3083.358434][ T3977] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3085.907005][ T3982] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.44769'. [ 3088.847029][ T4304] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 3091.575854][ T4042] netlink: 'syz.3.44805': attribute type 10 has an invalid length. [ 3091.957626][ T4072] netlink: 128 bytes leftover after parsing attributes in process `syz.1.44802'. [ 3091.973105][ T4072] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3092.565732][ T4102] netlink: 'syz.0.44817': attribute type 10 has an invalid length. [ 3093.314569][ T4102] team0: Port device macvlan0 added [ 3099.480641][ T4130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.44830'. [ 3099.729035][ T4158] netlink: 'syz.1.44836': attribute type 10 has an invalid length. [ 3100.589448][ T4158] team0: Port device macvlan0 added [ 3106.340962][ T4304] Bluetooth: hci1: unexpected subevent 0x01 length: 128 > 18 [ 3108.194499][ T4217] netlink: 'syz.0.44863': attribute type 10 has an invalid length. [ 3108.227068][ T4247] netlink: 'syz.2.44878': attribute type 5 has an invalid length. [ 3113.754608][ T4348] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.44920'. [ 3114.713767][ T4401] netlink: 'syz.3.44943': attribute type 16 has an invalid length. [ 3114.742220][ T4401] netlink: 156 bytes leftover after parsing attributes in process `syz.3.44943'. [ 3114.994827][ T4419] delete_channel: no stack [ 3115.007686][ T4419] delete_channel: no stack [ 3121.059422][ T4510] netlink: 'syz.0.44984': attribute type 3 has an invalid length. [ 3121.098171][ T4510] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.44984'. [ 3126.651978][ T4544] device syzkaller0 entered promiscuous mode [ 3127.288927][ T4573] netlink: 'syz.0.45020': attribute type 4 has an invalid length. [ 3127.297178][ T4573] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.45020'. [ 3129.068017][ T4594] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.45019'. [ 3129.860774][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3132.823120][ T4682] device veth1_macvtap left promiscuous mode [ 3133.039994][ T4304] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 3133.295297][ T4699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 3133.316496][ T4700] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.45063'. [ 3133.860537][ T4706] device syzkaller0 entered promiscuous mode [ 3135.115248][ T4304] Bluetooth: hci2: command 0x0406 tx timeout [ 3136.692820][ T4751] IPv6: NLM_F_CREATE should be specified when creating new route [ 3136.705606][ T4751] netlink: 1 bytes leftover after parsing attributes in process `syz.2.45086'. [ 3136.781555][ T4753] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.45087'. [ 3140.565145][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3140.919373][ T4833] netlink: 'syz.4.45134': attribute type 29 has an invalid length. [ 3140.945960][ T4833] netlink: 'syz.4.45134': attribute type 29 has an invalid length. [ 3141.500800][ T4859] netlink: 'syz.1.45133': attribute type 10 has an invalid length. [ 3141.522508][ T4859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.45133'. [ 3141.566148][ T4859] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3141.923576][ T4879] netlink: 'syz.0.45145': attribute type 3 has an invalid length. [ 3141.931488][ T4879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.45145'. [ 3142.753628][ T4903] netlink: 'syz.2.45156': attribute type 10 has an invalid length. [ 3142.761998][ T4903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.45156'. [ 3142.800263][ T4903] bridge0: port 2(veth0_vlan) entered blocking state [ 3142.813450][ T4903] bridge0: port 2(veth0_vlan) entered disabled state [ 3142.871265][ T4903] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3143.236211][ T9532] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 3143.280035][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.305595][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3145.268743][ T9532] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 3145.677473][ T4968] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.45182'. [ 3147.355808][ T4304] Bluetooth: hci4: command 0x206e tx timeout [ 3147.898384][ T4960] netlink: 'syz.3.45178': attribute type 10 has an invalid length. [ 3147.906435][ T4960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45178'. [ 3149.352224][ T4304] Bluetooth: hci2: command 0x0406 tx timeout [ 3149.452305][ T4304] Bluetooth: hci4: command 0x206e tx timeout [ 3153.432630][ T5039] netlink: 'syz.0.45217': attribute type 10 has an invalid length. [ 3153.459902][ T5039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45217'. [ 3153.510050][ T5039] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3154.008001][ T5059] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.45224'. [ 3154.029857][ T5059] openvswitch: netlink: Flow actions attr not present in new flow. [ 3156.197393][ T5104] netlink: 'syz.2.45246': attribute type 11 has an invalid length. [ 3156.208913][ T5104] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.45246'. [ 3158.727647][ T5091] netlink: 'syz.0.45240': attribute type 10 has an invalid length. [ 3158.742209][ T5091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45240'. [ 3158.756694][ T5091] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3160.655356][ T5172] netlink: 'syz.1.45275': attribute type 10 has an invalid length. [ 3160.682375][ T5172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.45275'. [ 3160.718647][ T5172] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3162.931814][ T5220] delete_channel: no stack [ 3163.320080][ T5240] netlink: 'syz.2.45305': attribute type 10 has an invalid length. [ 3163.339071][ T5240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.45305'. [ 3163.360468][ T5240] bridge0: port 2(veth0_vlan) entered blocking state [ 3163.373502][ T5240] bridge0: port 2(veth0_vlan) entered disabled state [ 3163.403832][ T5240] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3163.761584][ T4304] Bluetooth: hci3: Malformed LE Event: 0x02 [ 3164.350258][ T5269] delete_channel: no stack [ 3164.955340][ T5291] netlink: 14 bytes leftover after parsing attributes in process `syz.4.45337'. [ 3164.984490][ T5290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3164.990938][ T5290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3165.174823][ T5291] device hsr_slave_1 left promiscuous mode [ 3165.238134][ T4304] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 3165.353983][ T5307] netlink: 'syz.3.45334': attribute type 10 has an invalid length. [ 3165.371395][ T5307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45334'. [ 3165.417390][ T5309] device syzkaller0 entered promiscuous mode [ 3165.991546][ T5330] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.45344'. [ 3167.029724][ T4304] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 3167.192332][ T9532] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 3167.217088][ T9532] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 3167.228192][ T9532] CPU: 0 PID: 9532 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 3167.235800][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3167.245884][ T9532] Workqueue: hci0 hci_rx_work [ 3167.250589][ T9532] Call Trace: [ 3167.253871][ T9532] [ 3167.256789][ T9532] dump_stack_lvl+0x188/0x24e [ 3167.261463][ T9532] ? show_regs_print_info+0x12/0x12 [ 3167.266657][ T9532] ? load_image+0x400/0x400 [ 3167.271164][ T9532] sysfs_create_dir_ns+0x26a/0x290 [ 3167.276291][ T9532] ? sysfs_warn_dup+0xa0/0xa0 [ 3167.280981][ T9532] ? do_raw_spin_unlock+0x11d/0x230 [ 3167.286188][ T9532] kobject_add_internal+0x61c/0xcc0 [ 3167.291393][ T9532] kobject_add+0x160/0x230 [ 3167.295817][ T9532] ? kobject_init+0x1d0/0x1d0 [ 3167.300502][ T9532] ? klist_children_get+0x50/0x50 [ 3167.305522][ T9532] ? get_device_parent+0x121/0x3f0 [ 3167.310645][ T9532] device_add+0x483/0xfb0 [ 3167.314978][ T9532] ? kmem_cache_free+0xf7/0x290 [ 3167.319834][ T9532] hci_conn_add_sysfs+0xd1/0x1e0 [ 3167.324773][ T9532] le_conn_complete_evt+0x105f/0x1670 [ 3167.330150][ T9532] ? le_conn_complete_evt+0xe6/0x1670 [ 3167.335524][ T9532] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 3167.341761][ T9532] ? bt_info+0x180/0x180 [ 3167.346005][ T9532] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 3167.351661][ T9532] ? skb_pull_data+0xf7/0x200 [ 3167.356390][ T9532] hci_le_conn_complete_evt+0x183/0x440 [ 3167.361963][ T9532] ? hci_remote_host_features_evt+0x270/0x270 [ 3167.368047][ T9532] hci_event_packet+0x7b6/0x1280 [ 3167.373084][ T9532] ? bis_list+0x280/0x280 [ 3167.377409][ T9532] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3167.383365][ T9532] ? kcov_remote_start+0x4c7/0x7e0 [ 3167.388475][ T9532] ? mt_dump_node+0x8f0/0x1920 [ 3167.393241][ T9532] ? hci_send_to_monitor+0x9c/0x4a0 [ 3167.398438][ T9532] hci_rx_work+0x3eb/0xd40 [ 3167.402939][ T9532] ? _raw_spin_unlock+0x40/0x40 [ 3167.407790][ T9532] ? process_one_work+0x7b0/0x1160 [ 3167.412914][ T9532] process_one_work+0x8a2/0x1160 [ 3167.417898][ T9532] ? worker_detach_from_pool+0x240/0x240 [ 3167.423554][ T9532] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3167.428588][ T9532] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3167.434140][ T9532] ? kthread_data+0x4b/0xc0 [ 3167.438827][ T9532] worker_thread+0xaa2/0x1270 [ 3167.443525][ T9532] kthread+0x29d/0x330 [ 3167.447595][ T9532] ? worker_clr_flags+0x1a0/0x1a0 [ 3167.452613][ T9532] ? kthread_blkcg+0xd0/0xd0 [ 3167.457207][ T9532] ret_from_fork+0x1f/0x30 [ 3167.461638][ T9532] [ 3167.472075][ T9532] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 3167.485474][ T9532] Bluetooth: hci0: failed to register connection device [ 3169.032190][ T4304] Bluetooth: hci0: command 0x0406 tx timeout [ 3169.088412][ T5330] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.45344'. [ 3169.097977][ T5340] netlink: 'syz.3.45348': attribute type 10 has an invalid length. [ 3169.122176][ T5340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45348'. [ 3169.402923][ T5378] netlink: 'syz.0.45373': attribute type 10 has an invalid length. [ 3169.475926][ T5378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45373'. [ 3169.493252][ T5378] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3169.650245][ T5381] sock: sock_set_timeout: `syz.1.45362' (pid 5381) tries to set negative timeout [ 3171.112149][ T9532] Bluetooth: hci0: command 0x2016 tx timeout [ 3175.256796][ T9532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3175.267131][ T9532] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3175.275594][ T9532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3175.289611][ T9532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3175.307974][ T9532] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3175.334201][ T9532] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3175.525341][ T4304] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 3175.533032][ T4304] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 3175.542969][ T4304] CPU: 1 PID: 4304 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 3175.550535][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3175.560583][ T4304] Workqueue: hci0 hci_rx_work [ 3175.565256][ T4304] Call Trace: [ 3175.568524][ T4304] [ 3175.571446][ T4304] dump_stack_lvl+0x188/0x24e [ 3175.576124][ T4304] ? show_regs_print_info+0x12/0x12 [ 3175.581318][ T4304] ? load_image+0x400/0x400 [ 3175.585817][ T4304] sysfs_create_dir_ns+0x26a/0x290 [ 3175.590921][ T4304] ? sysfs_warn_dup+0xa0/0xa0 [ 3175.595589][ T4304] ? do_raw_spin_unlock+0x11d/0x230 [ 3175.600783][ T4304] kobject_add_internal+0x61c/0xcc0 [ 3175.605993][ T4304] kobject_add+0x160/0x230 [ 3175.610450][ T4304] ? kobject_init+0x1d0/0x1d0 [ 3175.615148][ T4304] ? klist_children_get+0x50/0x50 [ 3175.620160][ T4304] ? get_device_parent+0x121/0x3f0 [ 3175.625270][ T4304] device_add+0x483/0xfb0 [ 3175.629593][ T4304] ? kmem_cache_free+0xf7/0x290 [ 3175.634438][ T4304] hci_conn_add_sysfs+0xd1/0x1e0 [ 3175.639369][ T4304] le_conn_complete_evt+0x105f/0x1670 [ 3175.644736][ T4304] ? le_conn_complete_evt+0xe6/0x1670 [ 3175.650105][ T4304] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 3175.656347][ T4304] ? bt_info+0x180/0x180 [ 3175.660601][ T4304] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 3175.666241][ T4304] ? skb_pull_data+0xf7/0x200 [ 3175.670922][ T4304] hci_le_enh_conn_complete_evt+0x185/0x460 [ 3175.676818][ T4304] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 3175.683236][ T4304] ? hci_remote_host_features_evt+0x270/0x270 [ 3175.689305][ T4304] hci_event_packet+0x7b6/0x1280 [ 3175.694340][ T4304] ? bis_list+0x280/0x280 [ 3175.698785][ T4304] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3175.704678][ T4304] ? kcov_remote_start+0x4c7/0x7e0 [ 3175.709788][ T4304] ? mt_dump_node+0x8f0/0x1920 [ 3175.714551][ T4304] ? hci_send_to_monitor+0x9c/0x4a0 [ 3175.719757][ T4304] hci_rx_work+0x3eb/0xd40 [ 3175.724182][ T4304] ? _raw_spin_unlock+0x40/0x40 [ 3175.729033][ T4304] ? process_one_work+0x7b0/0x1160 [ 3175.734141][ T4304] process_one_work+0x8a2/0x1160 [ 3175.739089][ T4304] ? worker_detach_from_pool+0x240/0x240 [ 3175.744718][ T4304] ? _raw_spin_lock_irq+0x86/0xf0 [ 3175.749749][ T4304] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3175.754774][ T4304] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3175.760322][ T4304] ? kthread_data+0x4b/0xc0 [ 3175.764832][ T4304] worker_thread+0xaa2/0x1270 [ 3175.769541][ T4304] kthread+0x29d/0x330 [ 3175.773609][ T4304] ? worker_clr_flags+0x1a0/0x1a0 [ 3175.778633][ T4304] ? kthread_blkcg+0xd0/0xd0 [ 3175.783232][ T4304] ret_from_fork+0x1f/0x30 [ 3175.787658][ T4304] [ 3175.796060][ T4304] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 3175.809285][ T4304] Bluetooth: hci0: failed to register connection device [ 3177.437167][ T4304] Bluetooth: hci3: command 0x0409 tx timeout [ 3177.667345][ T5425] netlink: 'syz.4.45381': attribute type 10 has an invalid length. [ 3177.675421][ T5425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.45381'. [ 3177.783253][T29045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3177.833571][ T4304] Bluetooth: hci0: command 0x2016 tx timeout [ 3178.464165][T29045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3178.619166][T29045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3178.783925][T29045] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3178.871007][ T5483] Â: renamed from pim6reg1 [ 3178.947993][ T5442] chnl_net:caif_netlink_parms(): no params data found [ 3179.168606][T29045] device .*! left promiscuous mode [ 3179.326476][ T5507] netlink: 14 bytes leftover after parsing attributes in process `syz.4.45411'. [ 3179.356183][ T5505] delete_channel: no stack [ 3179.512228][ T9532] Bluetooth: hci3: command 0x041b tx timeout [ 3179.536287][ T5503] delete_channel: no stack [ 3179.579340][ T5515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.45414'. [ 3179.622986][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state [ 3179.630192][ T5442] bridge0: port 1(bridge_slave_0) entered disabled state [ 3179.655783][ T5442] device bridge_slave_0 entered promiscuous mode [ 3179.669315][ T5513] netlink: 'syz.0.45413': attribute type 10 has an invalid length. [ 3179.686846][ T9532] Bluetooth: hci4: unexpected event 0x30 length: 15 > 3 [ 3179.691088][ T5513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45413'. [ 3179.718741][ T5513] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3179.920596][ T5442] bridge0: port 2(bridge_slave_1) entered blocking state [ 3179.932284][ T5442] bridge0: port 2(bridge_slave_1) entered disabled state [ 3179.968014][ T5442] device bridge_slave_1 entered promiscuous mode [ 3180.083732][ T5442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3180.128518][ T5442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3180.230833][ T5442] team0: Port device team_slave_0 added [ 3180.255962][ T5442] team0: Port device team_slave_1 added [ 3180.301338][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3180.318254][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3180.351256][ T5442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3180.371086][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3180.378682][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3180.413938][ T5442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3181.592180][ T9532] Bluetooth: hci3: command 0x040f tx timeout [ 3182.886572][ T5442] device hsr_slave_0 entered promiscuous mode [ 3182.913522][ T5442] device hsr_slave_1 entered promiscuous mode [ 3182.936957][ T5442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3182.979062][ T5442] Cannot create hsr debugfs directory [ 3183.656977][ T5562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.45425'. [ 3183.672217][ T9532] Bluetooth: hci3: command 0x0419 tx timeout [ 3183.696842][ T5562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3185.235824][ T5582] netlink: 'syz.0.45434': attribute type 10 has an invalid length. [ 3185.246550][ T5582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45434'. [ 3185.271423][ T5582] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3185.572431][ T5592] netlink: 'syz.2.45438': attribute type 9 has an invalid length. [ 3185.600429][ T5442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3185.665900][ T5442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3185.809864][ T5442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3185.833041][ T5442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3186.993854][T29045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3187.001307][T29045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3187.085245][T29045] device veth1_macvtap left promiscuous mode [ 3187.101079][T29045] device veth0_macvtap left promiscuous mode [ 3188.413017][T29045] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3188.452667][T29045] device batadv_slave_0 left promiscuous mode [ 3188.701281][T29045] team0 (unregistering): Port device team_slave_1 removed [ 3189.459967][T29045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3189.490250][T29045] device bond_slave_1 left promiscuous mode [ 3189.562749][T29045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3189.571778][T29045] device bond_slave_0 left promiscuous mode [ 3189.615609][T29045] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3189.625080][T29045] device bridge_slave_1 left promiscuous mode [ 3189.851599][T29045] team0 (unregistering): Port device dummy0 removed [ 3189.899019][T29045] bond0 (unregistering): Released all slaves [ 3189.943036][ T5661] netlink: 'syz.2.45451': attribute type 10 has an invalid length. [ 3189.950974][ T5661] netlink: 40 bytes leftover after parsing attributes in process `syz.2.45451'. [ 3189.978558][ T5661] bridge0: port 2(veth0_vlan) entered blocking state [ 3190.002160][ T5661] bridge0: port 2(veth0_vlan) entered disabled state [ 3190.021819][ T5661] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3190.581262][ T5442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3190.705687][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3190.731805][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3190.756526][ T5442] 8021q: adding VLAN 0 to HW filter on device team0 [ 3190.784247][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3190.800061][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3190.827979][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 3190.835200][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3190.880257][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3190.944644][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3190.962585][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3190.991260][T31308] bridge0: port 2(bridge_slave_1) entered blocking state [ 3190.998454][T31308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3191.028677][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3191.052718][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3191.120519][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3191.132501][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3191.163082][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3191.203912][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3191.220492][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3191.234136][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3191.249613][ T5442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3191.332235][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3191.379726][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3191.398085][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3191.459010][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3191.553328][ T5722] netlink: 'syz.1.45467': attribute type 10 has an invalid length. [ 3191.627787][ T9532] Bluetooth: hci0: unexpected event 0x0b length: 151 > 11 [ 3191.740759][ T5722] 8021q: adding VLAN 0 to HW filter on device team0 [ 3191.960879][ T5722] bond0: (slave team0): Enslaving as an active interface with an up link [ 3192.780685][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3192.795291][T31308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3192.811168][ T5442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3192.849976][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3192.864670][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3192.891940][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3192.908284][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3192.921879][ T5442] device veth0_vlan entered promiscuous mode [ 3192.937211][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3192.949544][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3192.970094][ T5442] device veth1_vlan entered promiscuous mode [ 3193.006107][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3193.020033][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3193.029068][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3193.046397][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3193.060509][ T5442] device veth0_macvtap entered promiscuous mode [ 3193.071776][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3193.088695][ T5442] device veth1_macvtap entered promiscuous mode [ 3193.120669][ T5442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3193.132769][ T5442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3193.142920][ T5442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3193.154387][ T5442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3193.164540][ T5442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3193.176060][ T5442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3193.187857][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3193.200218][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3193.212969][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3193.238307][ T5442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3193.259307][ T5442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3193.292085][ T5442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3193.322091][ T5442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3193.331927][ T5442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3193.358382][ T5442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3193.370480][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3193.391680][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3193.414009][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3193.439733][ T5442] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3193.456443][ T5442] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3193.465612][ T5442] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3193.476303][ T5442] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3193.672258][ T4304] Bluetooth: hci0: command 0x0419 tx timeout [ 3195.754028][ T4304] Bluetooth: hci0: command 0x0406 tx timeout [ 3196.302603][ T5762] netlink: 'syz.1.45491': attribute type 10 has an invalid length. [ 3196.310529][ T5762] netlink: 55 bytes leftover after parsing attributes in process `syz.1.45491'. [ 3196.481289][ T9416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3196.541235][ T9416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3196.646218][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3196.686164][T13497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3196.739090][T13497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3196.799771][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3199.387473][ T5796] device syzkaller0 entered promiscuous mode [ 3199.417482][ T5799] netlink: 'syz.1.45486': attribute type 7 has an invalid length. [ 3200.930699][ T5852] sock: sock_set_timeout: `syz.2.45513' (pid 5852) tries to set negative timeout [ 3200.975187][ T5850] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.45520'. [ 3202.700782][ T5850] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 3203.236852][ T9532] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 3203.236888][ T9532] Bluetooth: hci0: Malformed LE Event: 0x02 [ 3204.582809][ T5901] device syzkaller0 entered promiscuous mode [ 3204.720402][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.726827][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.825222][ T5911] delete_channel: no stack [ 3204.830905][ T5911] delete_channel: no stack [ 3210.708562][ T5956] netlink: 'syz.3.45550': attribute type 9 has an invalid length. [ 3210.736969][ T5956] netlink: 44 bytes leftover after parsing attributes in process `syz.3.45550'. [ 3210.805542][ T5963] netlink: 'syz.0.45553': attribute type 41 has an invalid length. [ 3210.823012][ T5963] netlink: 'syz.0.45553': attribute type 41 has an invalid length. [ 3211.531794][ T9532] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 3213.380330][ T5997] device syzkaller0 entered promiscuous mode [ 3214.172982][ T6013] netlink: 196 bytes leftover after parsing attributes in process `syz.4.45569'. [ 3216.492271][ T6026] netlink: 'syz.3.45589': attribute type 10 has an invalid length. [ 3216.500217][ T6026] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45589'. [ 3216.522825][ T6026] bridge0: port 3(veth0_vlan) entered blocking state [ 3216.530477][ T6026] bridge0: port 3(veth0_vlan) entered disabled state [ 3216.539731][ T6026] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3219.790026][ T6068] netlink: 'syz.1.45595': attribute type 10 has an invalid length. [ 3219.812283][ T6068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.45595'. [ 3219.826046][ T6068] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3219.894709][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3219.919810][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3219.943030][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3219.952684][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3222.662577][ T6120] netlink: 'syz.3.45618': attribute type 10 has an invalid length. [ 3222.687050][ T6120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45618'. [ 3222.699975][ T6120] bridge0: port 3(veth0_vlan) entered blocking state [ 3222.710734][ T6120] bridge0: port 3(veth0_vlan) entered disabled state [ 3222.741780][ T6120] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3227.472418][ T6159] netlink: 'syz.0.45644': attribute type 10 has an invalid length. [ 3227.486788][ T6159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45644'. [ 3227.524974][ T6159] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3227.541315][ T6163] netlink: 'syz.3.45635': attribute type 10 has an invalid length. [ 3227.662400][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3227.670820][ T6163] team0: Port device bond0 added [ 3228.900525][ T6219] delete_channel: no stack [ 3228.908912][ T6219] delete_channel: no stack [ 3231.200449][ T6210] wlan1: mtu greater than device maximum [ 3231.210124][ T6226] netlink: 'syz.1.45661': attribute type 10 has an invalid length. [ 3231.230361][ T6226] team0: Device hsr_slave_0 failed to register rx_handler [ 3232.732727][ T6247] device syzkaller0 entered promiscuous mode [ 3235.964260][ T9532] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 3237.213560][ T6320] netlink: 128 bytes leftover after parsing attributes in process `syz.3.45690'. [ 3237.300275][ T6320] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3238.144728][ T9532] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 3238.665275][ T6355] netlink: 128 bytes leftover after parsing attributes in process `syz.0.45707'. [ 3238.681954][ T6355] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3243.269950][ T6399] netlink: 128 bytes leftover after parsing attributes in process `syz.2.45725'. [ 3243.290036][ T6399] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3246.696171][ T6403] netlink: 128 bytes leftover after parsing attributes in process `syz.2.45742'. [ 3246.715802][ T6403] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3250.789172][ T6448] netlink: 128 bytes leftover after parsing attributes in process `syz.3.45749'. [ 3250.799819][ T6448] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3250.816178][ T6457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.45756'. [ 3254.412572][ T6484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.45769'. [ 3266.154330][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.160745][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3268.286956][ T9532] Bluetooth: hci3: unexpected subevent 0x01 length: 128 > 18 [ 3268.595789][ T6782] netlink: 'syz.4.45897': attribute type 5 has an invalid length. [ 3269.899763][ T9532] Bluetooth: hci0: unexpected subevent 0x01 length: 128 > 18 [ 3271.102256][ T6837] netlink: 'syz.1.45921': attribute type 5 has an invalid length. [ 3271.547989][ T6847] netlink: 'syz.0.45937': attribute type 5 has an invalid length. [ 3276.734221][ T6979] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.45984'. [ 3280.420585][ T7029] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.46002'. [ 3285.481081][ T7196] netlink: 'syz.4.46071': attribute type 16 has an invalid length. [ 3285.502475][ T7196] netlink: 156 bytes leftover after parsing attributes in process `syz.4.46071'. [ 3290.760841][ T7234] delete_channel: no stack [ 3290.766134][ T7234] delete_channel: no stack [ 3291.062889][ T7243] netlink: 'syz.0.46091': attribute type 16 has an invalid length. [ 3291.074489][ T7243] netlink: 156 bytes leftover after parsing attributes in process `syz.0.46091'. [ 3291.763596][ T7275] delete_channel: no stack [ 3291.768265][ T7275] delete_channel: no stack [ 3292.380795][ T7283] netlink: 'syz.2.46106': attribute type 16 has an invalid length. [ 3292.419911][ T7283] netlink: 156 bytes leftover after parsing attributes in process `syz.2.46106'. [ 3292.950265][ T7299] netlink: 'syz.0.46127': attribute type 16 has an invalid length. [ 3292.964213][ T7299] netlink: 156 bytes leftover after parsing attributes in process `syz.0.46127'. [ 3293.311886][ T7311] delete_channel: no stack [ 3293.342613][ T7311] delete_channel: no stack [ 3293.860404][ T7332] netlink: 'syz.4.46133': attribute type 16 has an invalid length. [ 3293.884258][ T7332] netlink: 156 bytes leftover after parsing attributes in process `syz.4.46133'. [ 3294.176672][ T7346] delete_channel: no stack [ 3294.188657][ T7346] delete_channel: no stack [ 3298.963366][ T4304] Bluetooth: hci3: command 0x0406 tx timeout [ 3300.253484][ T7531] netlink: 'syz.3.46209': attribute type 3 has an invalid length. [ 3300.261371][ T7531] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.46209'. [ 3308.790086][ T7591] netlink: 'syz.4.46236': attribute type 3 has an invalid length. [ 3308.809122][ T7591] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.46236'. [ 3318.547228][ T7649] device syzkaller0 entered promiscuous mode [ 3319.008576][ T7665] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.46281'. [ 3324.527541][ T7699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.46285'. [ 3324.589223][ T7701] device syzkaller0 entered promiscuous mode [ 3324.596615][ T9532] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 3324.610868][ T7705] netlink: 'syz.1.46286': attribute type 10 has an invalid length. [ 3325.131196][ T7725] netlink: 'syz.0.46294': attribute type 2 has an invalid length. [ 3325.139554][ T7725] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.46294'. [ 3326.060974][ T9532] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 3327.077260][ T7723] netlink: 192 bytes leftover after parsing attributes in process `syz.3.46293'. [ 3327.224571][ T9532] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 3327.511382][ T7759] device wlan0 entered promiscuous mode [ 3327.595064][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.601468][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3331.967601][ T9532] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 3332.014000][ T7857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3332.087528][ T7859] netlink: 192 bytes leftover after parsing attributes in process `syz.4.46344'. [ 3332.531466][ T7866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3333.046971][ T9532] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 3333.720537][ T9532] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 3333.744496][ T7889] netlink: 'syz.3.46357': attribute type 2 has an invalid length. [ 3333.883126][ T7889] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.46357'. [ 3334.931246][ T7916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3335.254860][ T7932] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.46377'. [ 3335.615276][ T9532] Bluetooth: hci4: unexpected event 0x3b length: 15 > 10 [ 3336.572530][ T7965] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.46390'. [ 3336.600101][ T7971] netlink: 'syz.1.46391': attribute type 2 has an invalid length. [ 3336.608112][ T7971] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.46391'. [ 3337.426778][ T7984] netlink: 'syz.2.46397': attribute type 10 has an invalid length. [ 3337.452465][ T7986] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.46408'. [ 3337.855827][ T9532] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 3338.004223][ T7998] netlink: 192 bytes leftover after parsing attributes in process `syz.0.46404'. [ 3338.307598][ T9532] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 3339.568070][ T8050] netlink: 192 bytes leftover after parsing attributes in process `syz.2.46424'. [ 3339.841227][ T8063] device wlan0 entered promiscuous mode [ 3341.180852][ T8093] netlink: 192 bytes leftover after parsing attributes in process `syz.1.46442'. [ 3342.297145][ T8103] device wlan0 entered promiscuous mode [ 3342.872234][ T8127] netlink: 192 bytes leftover after parsing attributes in process `syz.1.46461'. [ 3342.897190][ T8128] device syzkaller0 entered promiscuous mode [ 3343.569912][ T8158] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 3343.598437][ T8158] device syzkaller0 entered promiscuous mode [ 3344.210498][ T8179] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.46480'. [ 3344.246529][T24684] tipc: Subscription rejected, illegal request [ 3344.930431][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3345.017629][ T8188] netlink: 192 bytes leftover after parsing attributes in process `syz.0.46487'. [ 3345.415653][ T8210] device bridge_slave_0 left promiscuous mode [ 3345.476909][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state [ 3345.689748][ T8210] bond0: (slave bridge0): Releasing backup interface [ 3345.974820][ T8228] device syzkaller0 left promiscuous mode [ 3345.984415][ T8230] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.46503'. [ 3346.028311][ T9428] tipc: Subscription rejected, illegal request [ 3346.997738][ T8267] bridge0: port 3(bond0) entered disabled state [ 3347.021692][ T8267] device bridge_slave_1 left promiscuous mode [ 3347.028206][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 3347.039998][ T8267] device bridge_slave_0 left promiscuous mode [ 3347.046627][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state [ 3349.311392][ T8314] delete_channel: no stack [ 3349.338134][ T8314] delete_channel: no stack [ 3349.701583][ T8329] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.46536'. [ 3349.721645][ T8326] device syzkaller0 left promiscuous mode [ 3349.732036][ T4539] tipc: Subscription rejected, illegal request [ 3350.150571][ T8347] wlan1: mtu greater than device maximum [ 3350.173534][ T8351] netlink: 'syz.2.46550': attribute type 10 has an invalid length. [ 3350.245664][ T8351] team0: Port device hsr_slave_0 added [ 3350.398345][ T8359] device syzkaller0 entered promiscuous mode [ 3350.898571][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3351.186226][ T8380] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.46561'. [ 3351.270532][ T4320] tipc: Subscription rejected, illegal request [ 3351.364119][ T8387] wlan1: mtu greater than device maximum [ 3351.592546][ T8395] device syzkaller0 entered promiscuous mode [ 3351.602511][ T8397] netlink: 'syz.4.46567': attribute type 10 has an invalid length. [ 3351.614288][ T8397] team0: Device hsr_slave_0 failed to register rx_handler [ 3351.808971][ T8408] device bridge_slave_1 left promiscuous mode [ 3351.832417][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 3351.841027][ T8408] device bridge_slave_0 left promiscuous mode [ 3351.850876][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 3352.631758][ T8427] wlan1: mtu greater than device maximum [ 3353.266526][ T8439] device syzkaller0 entered promiscuous mode [ 3353.480063][ T8448] netlink: 'syz.3.46585': attribute type 10 has an invalid length. [ 3353.586762][ T8448] team0: Device hsr_slave_0 failed to register rx_handler [ 3354.170061][ T8465] netlink: 'syz.1.46607': attribute type 10 has an invalid length. [ 3354.238331][ T8465] team0: Device hsr_slave_0 failed to register rx_handler [ 3354.531284][ T8482] device syzkaller0 left promiscuous mode [ 3354.615804][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3354.638369][ T8485] device syzkaller0 left promiscuous mode [ 3354.655250][ T8486] wlan1: mtu greater than device maximum [ 3357.626771][ T8522] netlink: 'syz.0.46621': attribute type 10 has an invalid length. [ 3357.670081][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3357.698852][ T8522] team0: Port device bond0 added [ 3358.224331][ T8545] device syzkaller0 left promiscuous mode [ 3359.694180][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3359.701644][ T8562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3359.787176][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3359.826784][ T8562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3360.256074][ T8579] netlink: 196 bytes leftover after parsing attributes in process `syz.0.46656'. [ 3363.280164][ T8626] netlink: 196 bytes leftover after parsing attributes in process `syz.2.46663'. [ 3364.271358][ T8642] netlink: 'syz.3.46682': attribute type 41 has an invalid length. [ 3364.288284][ T8642] netlink: 'syz.3.46682': attribute type 41 has an invalid length. [ 3364.431490][ T9532] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 3365.240514][ T8661] netlink: 'syz.2.46689': attribute type 41 has an invalid length. [ 3365.261531][ T8661] netlink: 'syz.2.46689': attribute type 41 has an invalid length. [ 3367.378211][ T8703] netlink: 'syz.4.46694': attribute type 41 has an invalid length. [ 3367.387983][ T8703] netlink: 'syz.4.46694': attribute type 41 has an invalid length. [ 3367.450191][ T8704] netlink: 196 bytes leftover after parsing attributes in process `syz.3.46692'. [ 3368.058756][ T9532] Bluetooth: hci2: unknown advertising packet type: 0x80 [ 3368.058831][ T9532] Bluetooth: hci2: Malformed LE Event: 0x02 [ 3368.466481][ T8726] device syzkaller0 entered promiscuous mode [ 3373.930584][ T8783] delete_channel: no stack [ 3373.956727][ T8783] delete_channel: no stack [ 3373.985353][ T8789] netlink: 'syz.1.46726': attribute type 41 has an invalid length. [ 3374.000676][ T8789] netlink: 'syz.1.46726': attribute type 41 has an invalid length. [ 3374.889775][ T8805] netlink: 'syz.0.46737': attribute type 7 has an invalid length. [ 3375.012373][ T8811] netlink: 'syz.4.46740': attribute type 10 has an invalid length. [ 3375.034633][ T8811] netlink: 55 bytes leftover after parsing attributes in process `syz.4.46740'. [ 3376.530902][ T8850] device syzkaller0 entered promiscuous mode [ 3377.704686][ T8892] device syzkaller0 entered promiscuous mode [ 3378.665145][ T9532] Bluetooth: hci1: unexpected event 0x0b length: 151 > 11 [ 3382.484420][ T8921] netlink: 'syz.2.46790': attribute type 10 has an invalid length. [ 3382.550923][ T8921] 8021q: adding VLAN 0 to HW filter on device team0 [ 3383.774344][ T8959] netlink: 'syz.1.46804': attribute type 9 has an invalid length. [ 3383.872349][ T8964] netlink: 36 bytes leftover after parsing attributes in process `syz.3.46809'. [ 3383.904953][ T8964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3385.288822][ T8993] netlink: 'syz.0.46821': attribute type 9 has an invalid length. [ 3387.355810][ T9532] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 3387.468973][ T9038] netlink: 'syz.3.46838': attribute type 9 has an invalid length. [ 3387.613398][ T9045] netlink: 14 bytes leftover after parsing attributes in process `syz.1.46857'. [ 3388.731268][ T9043] delete_channel: no stack [ 3389.039997][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.046399][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3392.030990][ T9072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.46856'. [ 3392.173381][ T9082] netlink: 'syz.1.46862': attribute type 9 has an invalid length. [ 3392.217782][ T9083] delete_channel: no stack [ 3392.396009][ T9088] Â: renamed from pim6reg1 [ 3392.968823][ T9532] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 3392.976765][ T9532] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 3392.986417][ T9532] CPU: 0 PID: 9532 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 3392.993991][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3393.004146][ T9532] Workqueue: hci1 hci_rx_work [ 3393.008834][ T9532] Call Trace: [ 3393.012108][ T9532] [ 3393.015035][ T9532] dump_stack_lvl+0x188/0x24e [ 3393.019736][ T9532] ? show_regs_print_info+0x12/0x12 [ 3393.024935][ T9532] ? load_image+0x400/0x400 [ 3393.029442][ T9532] sysfs_create_dir_ns+0x26a/0x290 [ 3393.034559][ T9532] ? sysfs_warn_dup+0xa0/0xa0 [ 3393.039244][ T9532] ? do_raw_spin_unlock+0x11d/0x230 [ 3393.044492][ T9532] kobject_add_internal+0x61c/0xcc0 [ 3393.049696][ T9532] kobject_add+0x160/0x230 [ 3393.054123][ T9532] ? kobject_init+0x1d0/0x1d0 [ 3393.058814][ T9532] ? klist_children_get+0x50/0x50 [ 3393.063834][ T9532] ? get_device_parent+0x121/0x3f0 [ 3393.068951][ T9532] device_add+0x483/0xfb0 [ 3393.073281][ T9532] ? kmem_cache_free+0xf7/0x290 [ 3393.078137][ T9532] hci_conn_add_sysfs+0xd1/0x1e0 [ 3393.083075][ T9532] le_conn_complete_evt+0x105f/0x1670 [ 3393.088448][ T9532] ? le_conn_complete_evt+0xe6/0x1670 [ 3393.093831][ T9532] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 3393.100168][ T9532] ? bt_info+0x180/0x180 [ 3393.104413][ T9532] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 3393.110049][ T9532] ? skb_pull_data+0xf7/0x200 [ 3393.114822][ T9532] hci_le_enh_conn_complete_evt+0x185/0x460 [ 3393.120712][ T9532] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 3393.127125][ T9532] ? hci_remote_host_features_evt+0x270/0x270 [ 3393.133197][ T9532] hci_event_packet+0x7b6/0x1280 [ 3393.138142][ T9532] ? bis_list+0x280/0x280 [ 3393.142469][ T9532] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3393.148364][ T9532] ? kcov_remote_start+0x4c7/0x7e0 [ 3393.153474][ T9532] ? mt_dump_node+0x8f0/0x1920 [ 3393.158236][ T9532] ? hci_send_to_monitor+0x9c/0x4a0 [ 3393.163432][ T9532] hci_rx_work+0x3eb/0xd40 [ 3393.167843][ T9532] ? _raw_spin_unlock+0x40/0x40 [ 3393.172698][ T9532] ? process_one_work+0x7b0/0x1160 [ 3393.177803][ T9532] process_one_work+0x8a2/0x1160 [ 3393.182756][ T9532] ? worker_detach_from_pool+0x240/0x240 [ 3393.188404][ T9532] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3393.193455][ T9532] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3393.199113][ T9532] ? kthread_data+0x4b/0xc0 [ 3393.203635][ T9532] worker_thread+0xaa2/0x1270 [ 3393.208346][ T9532] kthread+0x29d/0x330 [ 3393.212509][ T9532] ? worker_clr_flags+0x1a0/0x1a0 [ 3393.217537][ T9532] ? kthread_blkcg+0xd0/0xd0 [ 3393.222140][ T9532] ret_from_fork+0x1f/0x30 [ 3393.226570][ T9532] [ 3393.240823][ T9532] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 3393.254085][ T9532] Bluetooth: hci1: failed to register connection device [ 3395.230647][ T9158] delete_channel: no stack [ 3395.272108][ T9532] Bluetooth: hci1: command 0x2016 tx timeout [ 3400.725851][T24684] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3401.546997][ T9532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3401.555313][ T9532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3401.572291][ T9532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3401.584846][ T9532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3401.592716][ T9532] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3401.601254][ T9532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3401.774167][T24684] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3401.886238][ T4304] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 3401.900208][T24684] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3401.985072][T24684] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3402.085473][ T9231] chnl_net:caif_netlink_parms(): no params data found [ 3402.146007][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 3402.153247][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3402.161454][ T9231] device bridge_slave_0 entered promiscuous mode [ 3402.170380][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 3402.177845][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3402.191164][ T9231] device bridge_slave_1 entered promiscuous mode [ 3402.314809][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3402.411808][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3402.542406][ T9231] team0: Port device team_slave_0 added [ 3402.730634][ T9231] team0: Port device team_slave_1 added [ 3402.851636][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3402.877972][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3402.982391][ T9231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3403.166516][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3403.181216][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3403.235598][ T9231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3403.637405][ T9231] device hsr_slave_0 entered promiscuous mode [ 3403.657537][ T9231] device hsr_slave_1 entered promiscuous mode [ 3403.672053][ T4304] Bluetooth: hci0: command 0x0409 tx timeout [ 3403.739646][ T9231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3403.795851][ T9231] Cannot create hsr debugfs directory [ 3405.752155][ T4304] Bluetooth: hci0: command 0x041b tx timeout [ 3407.842222][ T4304] Bluetooth: hci0: command 0x040f tx timeout [ 3408.407547][ T9386] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.46973'. [ 3408.422151][ T9386] openvswitch: netlink: Flow actions attr not present in new flow. [ 3408.529408][ T9231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3408.678510][ T9231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3408.694240][ T9231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3408.774904][T24684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3408.799376][T24684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3408.818045][T24684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3408.862632][T24684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3408.955621][T24684] device veth1_macvtap left promiscuous mode [ 3408.968502][T24684] device veth0_macvtap left promiscuous mode [ 3408.981575][T24684] device veth1_vlan left promiscuous mode [ 3409.929965][ T9532] Bluetooth: hci0: command 0x0419 tx timeout [ 3411.921027][T24684] team0 (unregistering): Port device macvlan0 removed [ 3411.994255][T24684] team0 (unregistering): Port device hsr_slave_0 removed [ 3412.096749][T24684] team0 (unregistering): Port device team_slave_1 removed [ 3412.169559][T24684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3412.210760][T24684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3412.253113][T24684] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3412.469083][T24684] team0 (unregistering): Port device dummy0 removed [ 3412.494662][T24684] team0 (unregistering): Port device bond0 removed [ 3412.526254][T24684] bond0 (unregistering): Released all slaves [ 3412.558741][ T9231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3412.739509][ T9437] netlink: 'syz.3.47000': attribute type 3 has an invalid length. [ 3412.792614][ T9437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.47000'. [ 3412.874470][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3412.924709][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3412.935805][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3412.960067][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 3412.986752][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3413.000840][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3413.018638][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 3413.025830][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3413.097168][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3413.140901][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3413.156172][ T9532] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 3413.182797][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3413.211759][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 3413.219051][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3413.266586][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3413.331726][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3413.411887][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3413.450495][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3413.485085][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3413.506827][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3413.556028][ T9231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3413.610992][ T9231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3413.678953][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3413.699062][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3413.733342][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3413.757272][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3413.792703][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3413.812682][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3414.872497][ T9532] Bluetooth: hci2: command 0x206e tx timeout [ 3414.964201][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3414.982301][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3414.990075][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3415.037318][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3415.046302][T24684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3415.078283][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3415.088043][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3415.115319][ T9231] device veth0_vlan entered promiscuous mode [ 3415.123340][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3415.132504][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3415.157221][ T9231] device veth1_vlan entered promiscuous mode [ 3415.246575][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3415.264952][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3415.296975][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3415.332921][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3415.353916][ T9231] device veth0_macvtap entered promiscuous mode [ 3415.376839][ T9231] device veth1_macvtap entered promiscuous mode [ 3415.410964][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3415.431962][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.454269][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3415.475137][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3415.504028][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.539348][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3415.548551][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3415.582741][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3415.609276][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3415.624442][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3415.656451][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3415.689431][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3415.727644][ T9231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.761613][ T9231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.791363][ T9231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.809554][ T9231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3416.344446][ T4539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3416.359418][ T4539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3416.397161][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3416.406690][T13497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3416.439153][T13497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3416.476245][T29045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3416.634315][ T9528] device veth1_macvtap left promiscuous mode [ 3416.822379][ T9537] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.47023'. [ 3416.952323][ T9532] Bluetooth: hci2: command 0x206e tx timeout [ 3416.973195][ T9545] netlink: 1 bytes leftover after parsing attributes in process `syz.4.47024'. [ 3417.758715][ T9557] device syzkaller0 entered promiscuous mode [ 3417.764682][ T9566] Dead loop on virtual device ip6_vti0, fix it urgently! [ 3417.801179][ T9562] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.47037'. [ 3417.903331][ T9532] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 3420.778431][ T9630] netlink: 'syz.1.47068': attribute type 4 has an invalid length. [ 3420.786653][ T9630] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.47068'. [ 3420.942928][ T9633] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.47069'. [ 3427.813204][ T9763] netlink: 'syz.4.47135': attribute type 4 has an invalid length. [ 3427.838311][ T9766] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.47134'. [ 3427.882313][ T9763] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.47135'. [ 3428.207484][ T9775] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.47140'. [ 3429.641035][ T9798] IPv6: NLM_F_CREATE should be specified when creating new route [ 3429.655099][ T9798] netlink: 1 bytes leftover after parsing attributes in process `syz.0.47137'. [ 3429.878179][ T9805] IPv6: NLM_F_CREATE should be specified when creating new route [ 3429.905011][ T9805] netlink: 1 bytes leftover after parsing attributes in process `syz.3.47152'. [ 3431.035140][ T9825] device veth1_macvtap left promiscuous mode [ 3431.089443][ T9827] Dead loop on virtual device ip6_vti0, fix it urgently! [ 3431.543797][ T9839] netlink: 1 bytes leftover after parsing attributes in process `syz.2.47157'. [ 3432.578594][ T9862] netlink: 'syz.2.47165': attribute type 29 has an invalid length. [ 3432.623261][ T9862] netlink: 'syz.2.47165': attribute type 29 has an invalid length. [ 3433.206132][ T9880] device veth1_macvtap left promiscuous mode [ 3433.761051][ T9898] netlink: 'syz.3.47183': attribute type 29 has an invalid length. [ 3433.786763][ T9898] netlink: 'syz.3.47183': attribute type 29 has an invalid length. [ 3435.267389][ T9428] ------------[ cut here ]------------ [ 3435.273589][ T9428] intf 08:02:11:00:00:01 [link=0]: bad STA 06:00:00:00:00:37 bandwidth 20 MHz (0) > channel config 1 MHz (8) [ 3435.365709][ T9428] WARNING: CPU: 0 PID: 9428 at drivers/net/wireless/mac80211_hwsim.c:2438 mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 3435.378000][ T9428] Modules linked in: [ 3435.381973][ T9428] CPU: 0 PID: 9428 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 3435.389620][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3435.399829][ T9428] Workqueue: phy83 ieee80211_iface_work [ 3435.405466][ T9428] RIP: 0010:mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 3435.412196][ T9428] Code: e8 c4 0c 00 00 48 c7 c7 80 00 28 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 e1 41 57 50 e8 f3 1c 52 fb 48 83 c4 10 <0f> 0b e9 8b fe ff ff e8 93 aa 86 fb 0f 0b e9 7f fe ff ff e8 87 aa [ 3435.432122][ T9428] RSP: 0018:ffffc90010def7f8 EFLAGS: 00010282 [ 3435.438217][ T9428] RAX: afe64255430c1300 RBX: 0000000000000014 RCX: ffff88807a27d940 [ 3435.446252][ T9428] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 3435.454306][ T9428] RBP: 0000000000000000 R08: ffffc90010def467 R09: 1ffff920021bde8c [ 3435.462319][ T9428] R10: dffffc0000000000 R11: fffff520021bde8d R12: 0000000000000000 [ 3435.470741][ T9428] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008 [ 3435.478890][ T9428] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3435.487873][ T9428] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3435.494517][ T9428] CR2: 0000001b3211dff8 CR3: 000000001dff8000 CR4: 00000000003506f0 [ 3435.502560][ T9428] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 3435.510556][ T9428] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3435.518586][ T9428] Call Trace: [ 3435.521874][ T9428] [ 3435.524855][ T9428] ? mac80211_hwsim_sta_rc_update+0x53/0x6e0 [ 3435.530870][ T9428] mac80211_hwsim_sta_add+0x92/0x280 [ 3435.536218][ T9428] ? mac80211_hwsim_sw_scan_complete+0xd0/0xd0 [ 3435.542432][ T9428] drv_sta_state+0x62a/0x1280 [ 3435.547232][ T9428] sta_info_insert_rcu+0xc1e/0x1550 [ 3435.552497][ T9428] ? sta_info_insert_rcu+0x1b0/0x1550 [ 3435.557914][ T9428] ieee80211_ibss_finish_sta+0x286/0x360 [ 3435.563610][ T9428] ? ieee80211_ibss_work+0x10f0/0x10f0 [ 3435.569097][ T9428] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3435.575238][ T9428] ieee80211_ibss_work+0x23c/0x10f0 [ 3435.580484][ T9428] ? lockdep_hardirqs_on+0x94/0x140 [ 3435.585764][ T9428] ? kcov_remote_stop+0x174/0x6e0 [ 3435.590811][ T9428] ? ieee80211_ibss_rx_queued_mgmt+0x2cd0/0x2cd0 [ 3435.597201][ T9428] ? skb_dequeue+0x120/0x150 [ 3435.601814][ T9428] ? ieee80211_iface_work+0x97c/0xc80 [ 3435.607250][ T9428] ? ieee80211_iface_work+0xb98/0xc80 [ 3435.612680][ T9428] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3435.617897][ T9428] ? process_one_work+0x7b0/0x1160 [ 3435.623060][ T9428] process_one_work+0x8a2/0x1160 [ 3435.628039][ T9428] ? worker_detach_from_pool+0x240/0x240 [ 3435.633719][ T9428] ? _raw_spin_lock_irq+0x86/0xf0 [ 3435.638781][ T9428] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3435.643867][ T9428] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3435.649434][ T9428] ? kthread_data+0x4b/0xc0 [ 3435.654002][ T9428] worker_thread+0xaa2/0x1270 [ 3435.658736][ T9428] kthread+0x29d/0x330 [ 3435.662861][ T9428] ? worker_clr_flags+0x1a0/0x1a0 [ 3435.667904][ T9428] ? kthread_blkcg+0xd0/0xd0 [ 3435.672562][ T9428] ret_from_fork+0x1f/0x30 [ 3435.677014][ T9428] [ 3435.680050][ T9428] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3435.687329][ T9428] CPU: 0 PID: 9428 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 3435.694969][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3435.705033][ T9428] Workqueue: phy83 ieee80211_iface_work [ 3435.710610][ T9428] Call Trace: [ 3435.713897][ T9428] [ 3435.716833][ T9428] dump_stack_lvl+0x188/0x24e [ 3435.721526][ T9428] ? memcpy+0x3c/0x60 [ 3435.725517][ T9428] ? show_regs_print_info+0x12/0x12 [ 3435.730735][ T9428] ? load_image+0x400/0x400 [ 3435.735263][ T9428] panic+0x2e5/0x730 [ 3435.739195][ T9428] ? bpf_jit_dump+0xd0/0xd0 [ 3435.743737][ T9428] ? ret_from_fork+0x1f/0x30 [ 3435.748375][ T9428] __warn+0x2f8/0x4f0 [ 3435.752371][ T9428] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 3435.758460][ T9428] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 3435.764541][ T9428] report_bug+0x2ba/0x4f0 [ 3435.768879][ T9428] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 3435.774965][ T9428] handle_bug+0x3a/0x70 [ 3435.779136][ T9428] exc_invalid_op+0x16/0x40 [ 3435.783650][ T9428] asm_exc_invalid_op+0x16/0x20 [ 3435.788490][ T9428] RIP: 0010:mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 3435.795163][ T9428] Code: e8 c4 0c 00 00 48 c7 c7 80 00 28 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 e1 41 57 50 e8 f3 1c 52 fb 48 83 c4 10 <0f> 0b e9 8b fe ff ff e8 93 aa 86 fb 0f 0b e9 7f fe ff ff e8 87 aa [ 3435.815022][ T9428] RSP: 0018:ffffc90010def7f8 EFLAGS: 00010282 [ 3435.821081][ T9428] RAX: afe64255430c1300 RBX: 0000000000000014 RCX: ffff88807a27d940 [ 3435.829041][ T9428] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 3435.837000][ T9428] RBP: 0000000000000000 R08: ffffc90010def467 R09: 1ffff920021bde8c [ 3435.844960][ T9428] R10: dffffc0000000000 R11: fffff520021bde8d R12: 0000000000000000 [ 3435.852920][ T9428] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008 [ 3435.860895][ T9428] ? mac80211_hwsim_sta_rc_update+0x53/0x6e0 [ 3435.866877][ T9428] mac80211_hwsim_sta_add+0x92/0x280 [ 3435.872154][ T9428] ? mac80211_hwsim_sw_scan_complete+0xd0/0xd0 [ 3435.878304][ T9428] drv_sta_state+0x62a/0x1280 [ 3435.882980][ T9428] sta_info_insert_rcu+0xc1e/0x1550 [ 3435.888179][ T9428] ? sta_info_insert_rcu+0x1b0/0x1550 [ 3435.893548][ T9428] ieee80211_ibss_finish_sta+0x286/0x360 [ 3435.899175][ T9428] ? ieee80211_ibss_work+0x10f0/0x10f0 [ 3435.904625][ T9428] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3435.910606][ T9428] ieee80211_ibss_work+0x23c/0x10f0 [ 3435.915794][ T9428] ? lockdep_hardirqs_on+0x94/0x140 [ 3435.920990][ T9428] ? kcov_remote_stop+0x174/0x6e0 [ 3435.926005][ T9428] ? ieee80211_ibss_rx_queued_mgmt+0x2cd0/0x2cd0 [ 3435.932326][ T9428] ? skb_dequeue+0x120/0x150 [ 3435.936909][ T9428] ? ieee80211_iface_work+0x97c/0xc80 [ 3435.942277][ T9428] ? ieee80211_iface_work+0xb98/0xc80 [ 3435.947639][ T9428] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3435.952826][ T9428] ? process_one_work+0x7b0/0x1160 [ 3435.957927][ T9428] process_one_work+0x8a2/0x1160 [ 3435.962952][ T9428] ? worker_detach_from_pool+0x240/0x240 [ 3435.968573][ T9428] ? _raw_spin_lock_irq+0x86/0xf0 [ 3435.973594][ T9428] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3435.978621][ T9428] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3435.984161][ T9428] ? kthread_data+0x4b/0xc0 [ 3435.988672][ T9428] worker_thread+0xaa2/0x1270 [ 3435.993364][ T9428] kthread+0x29d/0x330 [ 3435.997423][ T9428] ? worker_clr_flags+0x1a0/0x1a0 [ 3436.002437][ T9428] ? kthread_blkcg+0xd0/0xd0 [ 3436.007020][ T9428] ret_from_fork+0x1f/0x30 [ 3436.011440][ T9428] [ 3436.014790][ T9428] Kernel Offset: disabled [ 3436.019168][ T9428] Rebooting in 86400 seconds..