last executing test programs: 31m26.177670439s ago: executing program 4 (id=1436): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000300)="274cc2eb", 0x4}], 0x1}, 0x8000) 31m25.205947055s ago: executing program 4 (id=1452): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x24a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31m25.099162252s ago: executing program 4 (id=1453): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 31m24.795058839s ago: executing program 4 (id=1456): r0 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f00000003c0)="0a985d7879f1bb", 0x7}], 0x3}, 0x8001) 31m24.670933106s ago: executing program 4 (id=1458): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8924, &(0x7f0000000080)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b7000000e0ffffffbca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141400000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 31m19.878124055s ago: executing program 4 (id=1470): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0x51, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 31m4.204090626s ago: executing program 32 (id=1470): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0x51, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 17.278167619s ago: executing program 5 (id=9710): sendmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000400)="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", 0x28f}], 0x1}, 0x20000000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.182418845s ago: executing program 5 (id=9712): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) 16.870081233s ago: executing program 5 (id=9718): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.803848767s ago: executing program 5 (id=9719): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x29188000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.505043314s ago: executing program 5 (id=9725): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x202, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xcd7f60989b9904e2, 0x2, 0xfffffffe, 0x6, 0x0, 0xc8e5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x37, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 16.245652069s ago: executing program 5 (id=9728): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0xc3, 0x0, 0x0, 0x10, &(0x7f0000000a00), 0x0, 0x0, 0xec, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x105e40, 0x102, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 7.057991022s ago: executing program 3 (id=9801): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ffffe, 0x0, 0x41000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.81128145s ago: executing program 2 (id=9819): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x202, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xcd7f60989b9904e2, 0x2, 0xfffffffe, 0x6, 0x0, 0xc8e5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x37, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x6, 0x1d, 0x7, 0x0, 0x7fffffff, 0x420, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x32, 0x7ff, 0x5, 0x7, 0x81, 0x6, 0x5, 0x0, 0x2, 0x0, 0xb}, 0x0, 0x9, 0xffffffffffffffff, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, 0x0) 3.736999854s ago: executing program 3 (id=9820): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000000000000000000008000000", @ANYRES32=0x1, @ANYBLOB="0100"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000008"], 0x50) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 3.667304118s ago: executing program 2 (id=9821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008d26200b704000000800000850000003300000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0x7, 0x0, &(0x7f0000000c40)="63eced8e46dc3f", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.544947115s ago: executing program 3 (id=9822): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x29, 0x2, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4) 3.450145961s ago: executing program 2 (id=9823): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241", 0x7}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) 3.362308125s ago: executing program 3 (id=9825): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x40}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3.272174891s ago: executing program 2 (id=9826): sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="e4", 0x1}], 0x1}, 0x4000) 3.211588775s ago: executing program 3 (id=9827): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x29188000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.1102182s ago: executing program 1 (id=9828): sendmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000400)="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", 0x28f}], 0x1}, 0x20000000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.10998559s ago: executing program 2 (id=9829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) 3.016710136s ago: executing program 1 (id=9830): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000007500000000000000a500feff000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001140)={r2, 0x20, &(0x7f0000001100)={&(0x7f0000001000)=""/122, 0x7a, 0x0, &(0x7f0000001080)=""/80, 0x50}}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2, 0x4}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001180)=@o_path={&(0x7f0000001980)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, 0x4000, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000000eeff007301"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) ioctl$TUNATTACHFILTER(r7, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f00000011c0), 0x200400, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 2.957688889s ago: executing program 3 (id=9831): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ffffe, 0x0, 0x41000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.923424291s ago: executing program 2 (id=9832): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200ce0c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup, 0x3, 0x0, 0xaf4c, 0x0, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8100, 0xc8, 0xffffffff, 0x0, 0xfd2b, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="62042700180f01000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x10b}, {&(0x7f0000000480)="8eefedd1a9f7b60541fce923f584d6024263fb5df6219db166dd03702720153500359a0f63da5eb51e0e3b2396bd0dad6e336fedaed6d76cb3757e0b3abd7e5e71f570dd8e1d07f5dc66924e40a252203517fb66257809d53fb6e11103369c65ad619beb1be4a15fb213f41503abc543aee819016b73cc911c12ffd82b84b83618f78f309d088b33dab7dc40d2b06479efabad4695d3a100c48c3193c273b3e8cc0464cb59986bed8dd8575424435b36dd96e44889ce908f6a7c13de66ceeddf2192974f37b00b7b7f8b2f8ab295", 0xce}, {&(0x7f0000000580)="0eeb7647ee1336b753440a5a8272c74cf8608336c81e0c2157150ce34235cb7d212342705d96fcc035e313b3ca35bcfdcce2332073b4bdf4a417a9a5fcd0e7d598b2a16cc214224e4e8761d635fd331abc1aaedfbdde64adfb6342d9b5449051d6b39517b0970cffc64148089ee99ecdc75ab1d05c7dd7d77fdd135f01fdae76310c4f3cd3a724b1e907ba685c4f5a60a43e7cd1b32e00017de4c7aaccaf80e11b1ff4da1f8fcb8a377c9986c0b67be9e85d0f7fc8a8998198ef488d5ae7351db452ea673632ca7a410b186463f687b278329fdbd82e6f271f50fec34bf4dcd478970e868c7ab79e1e2181ea8ac5e0", 0xef}, {&(0x7f00000013c0)="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", 0xbbd}], 0x5}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000081005d11", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4) 2.798151569s ago: executing program 0 (id=9833): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000000000000000000008000000", @ANYRES32=0x1, @ANYBLOB="0100"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000008"], 0x50) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 2.77441173s ago: executing program 1 (id=9834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008d26200b704000000800000850000003300000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0xb, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.678446925s ago: executing program 1 (id=9835): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB], 0x0, 0x24, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @xdp}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7, 0xff, 0x89, 0xe3, 0x0, 0x80000000002, 0x4100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x200}, 0x108482, 0xc764, 0x6, 0x0, 0xfffffffffffffffa, 0xffffffff, 0x10, 0x0, 0x11, 0x0, 0x100000001}, 0x0, 0x4, 0xffffffffffffffff, 0x2) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 2.196891973s ago: executing program 1 (id=9836): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x29, 0x2, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4) 2.130866257s ago: executing program 0 (id=9837): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241", 0x7}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) 1.940869338s ago: executing program 1 (id=9838): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) 1.653968725s ago: executing program 0 (id=9839): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x40}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.301958955s ago: executing program 0 (id=9840): sendmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000400)="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", 0x28f}], 0x1}, 0x20000000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 841.899132ms ago: executing program 33 (id=9728): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0xc3, 0x0, 0x0, 0x10, &(0x7f0000000a00), 0x0, 0x0, 0xec, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x105e40, 0x102, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 762.190516ms ago: executing program 0 (id=9842): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x29188000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=9843): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0090}, 0x0) kernel console output (not intermixed with test programs): i_le_conn_complete_evt+0x183/0x440 [ 1895.299344][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1895.305408][ T4280] hci_event_packet+0x7b6/0x1280 [ 1895.310353][ T4280] ? bis_list+0x280/0x280 [ 1895.314676][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1895.320561][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1895.325673][ T4280] ? bt_warn+0x30/0x180 [ 1895.329828][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1895.335024][ T4280] hci_rx_work+0x3eb/0xd40 [ 1895.339434][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1895.344286][ T4280] ? process_one_work+0x7b0/0x1160 [ 1895.349392][ T4280] process_one_work+0x8a2/0x1160 [ 1895.354342][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1895.359973][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1895.364988][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1895.370525][ T4280] ? kthread_data+0x4b/0xc0 [ 1895.375032][ T4280] worker_thread+0xaa2/0x1270 [ 1895.379726][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1895.384757][ T4280] kthread+0x29d/0x330 [ 1895.388814][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1895.393831][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1895.398413][ T4280] ret_from_fork+0x1f/0x30 [ 1895.402840][ T4280] [ 1895.406823][ T4280] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1895.420824][ T4280] Bluetooth: hci0: failed to register connection device [ 1895.591591][T28122] netlink: 'syz.5.8464': attribute type 10 has an invalid length. [ 1895.638250][T28121] delete_channel: no stack [ 1895.709044][T28129] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8466'. [ 1895.808364][T28138] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8469'. [ 1895.833832][T28138] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8469'. [ 1895.855969][T28138] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8469'. [ 1897.190922][ T4280] Bluetooth: hci2: command 0x2016 tx timeout [ 1897.440873][ T4280] Bluetooth: hci0: command 0x2016 tx timeout [ 1899.431966][ T4280] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1899.439706][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:128' [ 1899.449832][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1899.457398][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1899.467466][ T4280] Workqueue: hci5 hci_rx_work [ 1899.472165][ T4280] Call Trace: [ 1899.475450][ T4280] [ 1899.478388][ T4280] dump_stack_lvl+0x188/0x24e [ 1899.483086][ T4280] ? show_regs_print_info+0x12/0x12 [ 1899.488305][ T4280] ? load_image+0x400/0x400 [ 1899.492833][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1899.497971][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1899.502681][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1899.507904][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1899.513130][ T4280] kobject_add+0x160/0x230 [ 1899.517568][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1899.522268][ T4280] ? klist_children_get+0x50/0x50 [ 1899.527291][ T4280] ? get_device_parent+0x121/0x3f0 [ 1899.532410][ T4280] device_add+0x483/0xfb0 [ 1899.536739][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1899.541589][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1899.546525][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1899.551893][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1899.557266][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1899.563503][ T4280] ? bt_info+0x180/0x180 [ 1899.567739][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1899.573368][ T4280] ? skb_pull_data+0xf7/0x200 [ 1899.578046][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1899.583590][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1899.589654][ T4280] hci_event_packet+0x7b6/0x1280 [ 1899.594599][ T4280] ? bis_list+0x280/0x280 [ 1899.598926][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1899.604815][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1899.609977][ T4280] ? bt_warn+0x30/0x180 [ 1899.614161][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1899.619359][ T4280] hci_rx_work+0x3eb/0xd40 [ 1899.623771][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1899.628624][ T4280] ? process_one_work+0x7b0/0x1160 [ 1899.633998][ T4280] process_one_work+0x8a2/0x1160 [ 1899.638946][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1899.644577][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1899.649594][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1899.655132][ T4280] ? kthread_data+0x4b/0xc0 [ 1899.659637][ T4280] worker_thread+0xaa2/0x1270 [ 1899.664329][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1899.669354][ T4280] kthread+0x29d/0x330 [ 1899.673419][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1899.678438][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1899.683018][ T4280] ret_from_fork+0x1f/0x30 [ 1899.687438][ T4280] [ 1899.695371][ T4280] kobject_add_internal failed for hci5:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1899.708630][ T4280] Bluetooth: hci5: failed to register connection device [ 1899.813733][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1899.821713][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 1899.831849][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1899.839423][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1899.849493][ T4280] Workqueue: hci3 hci_rx_work [ 1899.854192][ T4280] Call Trace: [ 1899.857478][ T4280] [ 1899.860414][ T4280] dump_stack_lvl+0x188/0x24e [ 1899.865117][ T4280] ? show_regs_print_info+0x12/0x12 [ 1899.870334][ T4280] ? load_image+0x400/0x400 [ 1899.874877][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1899.880023][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1899.884726][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1899.889950][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1899.895182][ T4280] kobject_add+0x160/0x230 [ 1899.899628][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1899.904344][ T4280] ? klist_children_get+0x50/0x50 [ 1899.909387][ T4280] ? get_device_parent+0x121/0x3f0 [ 1899.914531][ T4280] device_add+0x483/0xfb0 [ 1899.918881][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1899.923755][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1899.928715][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1899.934112][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1899.939508][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1899.945761][ T4280] ? bt_info+0x180/0x180 [ 1899.950003][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1899.955638][ T4280] ? skb_pull_data+0xf7/0x200 [ 1899.960320][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1899.965867][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1899.971933][ T4280] hci_event_packet+0x7b6/0x1280 [ 1899.976879][ T4280] ? bis_list+0x280/0x280 [ 1899.981202][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1899.987093][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1899.992199][ T4280] ? bt_warn+0x30/0x180 [ 1899.996353][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1900.001550][ T4280] hci_rx_work+0x3eb/0xd40 [ 1900.005969][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1900.010817][ T4280] ? process_one_work+0x7b0/0x1160 [ 1900.015922][ T4280] process_one_work+0x8a2/0x1160 [ 1900.020869][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1900.026507][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1900.031527][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1900.037064][ T4280] ? kthread_data+0x4b/0xc0 [ 1900.041571][ T4280] worker_thread+0xaa2/0x1270 [ 1900.046258][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1900.051285][ T4280] kthread+0x29d/0x330 [ 1900.055344][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1900.060363][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1900.064944][ T4280] ret_from_fork+0x1f/0x30 [ 1900.069373][ T4280] [ 1900.073668][ T4280] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1900.087214][ T4280] Bluetooth: hci3: failed to register connection device [ 1900.495817][T28172] netlink: 'syz.0.8478': attribute type 10 has an invalid length. [ 1900.635941][T28179] netlink: 'syz.1.8481': attribute type 10 has an invalid length. [ 1900.667766][T28178] delete_channel: no stack [ 1900.729933][T28183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8483'. [ 1900.750957][T28183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8483'. [ 1900.830969][T28183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8483'. [ 1901.000407][T28195] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8487'. [ 1901.033135][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1901.040920][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 1901.050413][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1901.057973][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1901.068038][ T4280] Workqueue: hci0 hci_rx_work [ 1901.072744][ T4280] Call Trace: [ 1901.076030][ T4280] [ 1901.078963][ T4280] dump_stack_lvl+0x188/0x24e [ 1901.083659][ T4280] ? show_regs_print_info+0x12/0x12 [ 1901.088869][ T4280] ? load_image+0x400/0x400 [ 1901.093383][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1901.098495][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1901.103172][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1901.108366][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1901.113564][ T4280] kobject_add+0x160/0x230 [ 1901.117981][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1901.122664][ T4280] ? klist_children_get+0x50/0x50 [ 1901.127684][ T4280] ? get_device_parent+0x121/0x3f0 [ 1901.132800][ T4280] device_add+0x483/0xfb0 [ 1901.137132][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1901.141984][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1901.146921][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1901.152291][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1901.157661][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1901.163900][ T4280] ? bt_info+0x180/0x180 [ 1901.168155][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1901.173790][ T4280] ? skb_pull_data+0xf7/0x200 [ 1901.178475][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1901.184021][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1901.190090][ T4280] hci_event_packet+0x7b6/0x1280 [ 1901.195034][ T4280] ? bis_list+0x280/0x280 [ 1901.199360][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1901.205250][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1901.210357][ T4280] ? bt_warn+0x30/0x180 [ 1901.214519][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1901.219719][ T4280] hci_rx_work+0x3eb/0xd40 [ 1901.224131][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1901.228978][ T4280] ? process_one_work+0x7b0/0x1160 [ 1901.234083][ T4280] process_one_work+0x8a2/0x1160 [ 1901.239027][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1901.244660][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1901.249679][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1901.255214][ T4280] ? kthread_data+0x4b/0xc0 [ 1901.259757][ T4280] worker_thread+0xaa2/0x1270 [ 1901.264444][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1901.269476][ T4280] kthread+0x29d/0x330 [ 1901.273550][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1901.278573][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1901.283159][ T4280] ret_from_fork+0x1f/0x30 [ 1901.287585][ T4280] [ 1901.291733][ T4280] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1901.304992][ T4280] Bluetooth: hci0: failed to register connection device [ 1901.639861][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1901.647647][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 1901.657223][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1901.664777][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1901.674839][ T4280] Workqueue: hci0 hci_rx_work [ 1901.679532][ T4280] Call Trace: [ 1901.682824][ T4280] [ 1901.685758][ T4280] dump_stack_lvl+0x188/0x24e [ 1901.690443][ T4280] ? show_regs_print_info+0x12/0x12 [ 1901.695652][ T4280] ? load_image+0x400/0x400 [ 1901.700155][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1901.705268][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1901.709940][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1901.715142][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1901.720347][ T4280] kobject_add+0x160/0x230 [ 1901.724761][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1901.729447][ T4280] ? klist_children_get+0x50/0x50 [ 1901.734466][ T4280] ? get_device_parent+0x121/0x3f0 [ 1901.739582][ T4280] device_add+0x483/0xfb0 [ 1901.743911][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1901.748766][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1901.753712][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1901.759086][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1901.764458][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1901.770699][ T4280] ? bt_info+0x180/0x180 [ 1901.774941][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1901.780580][ T4280] ? skb_pull_data+0xf7/0x200 [ 1901.785277][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1901.790822][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1901.796888][ T4280] hci_event_packet+0x7b6/0x1280 [ 1901.801832][ T4280] ? bis_list+0x280/0x280 [ 1901.806157][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1901.812044][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1901.817150][ T4280] ? bt_warn+0x30/0x180 [ 1901.821304][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1901.826500][ T4280] hci_rx_work+0x3eb/0xd40 [ 1901.830915][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1901.835767][ T4280] ? process_one_work+0x7b0/0x1160 [ 1901.840878][ T4280] process_one_work+0x8a2/0x1160 [ 1901.845824][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1901.851455][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1901.856471][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1901.862013][ T4280] ? kthread_data+0x4b/0xc0 [ 1901.866521][ T4280] worker_thread+0xaa2/0x1270 [ 1901.871209][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1901.876237][ T4280] kthread+0x29d/0x330 [ 1901.880303][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1901.885324][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1901.889908][ T4280] ret_from_fork+0x1f/0x30 [ 1901.894336][ T4280] [ 1901.897637][T27044] Bluetooth: hci5: command 0x2016 tx timeout [ 1901.898330][ T4280] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1901.917174][ T4280] Bluetooth: hci0: failed to register connection device [ 1902.160873][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 1903.358849][T27044] Bluetooth: hci0: command 0x2016 tx timeout [ 1904.395132][T28232] netlink: 'syz.5.8496': attribute type 10 has an invalid length. [ 1905.430906][T27044] Bluetooth: hci0: command 0x2016 tx timeout [ 1907.344732][T28239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8499'. [ 1907.400995][T28239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8499'. [ 1907.410843][T28239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8499'. [ 1907.469294][T28237] netlink: 'syz.2.8498': attribute type 10 has an invalid length. [ 1907.495467][ T4280] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1907.503972][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:128' [ 1907.513532][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1907.521094][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1907.531156][ T4280] Workqueue: hci5 hci_rx_work [ 1907.535837][ T4280] Call Trace: [ 1907.539107][ T4280] [ 1907.542033][ T4280] dump_stack_lvl+0x188/0x24e [ 1907.546711][ T4280] ? show_regs_print_info+0x12/0x12 [ 1907.551907][ T4280] ? load_image+0x400/0x400 [ 1907.556423][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1907.561533][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1907.566211][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1907.571404][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1907.576600][ T4280] kobject_add+0x160/0x230 [ 1907.581014][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1907.585692][ T4280] ? klist_children_get+0x50/0x50 [ 1907.590718][ T4280] ? get_device_parent+0x121/0x3f0 [ 1907.595843][ T4280] device_add+0x483/0xfb0 [ 1907.600173][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1907.605026][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1907.610010][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1907.615396][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1907.620775][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1907.627022][ T4280] ? bt_info+0x180/0x180 [ 1907.631264][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1907.636899][ T4280] ? skb_pull_data+0xf7/0x200 [ 1907.641583][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1907.647128][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1907.653197][ T4280] hci_event_packet+0x7b6/0x1280 [ 1907.658140][ T4280] ? bis_list+0x280/0x280 [ 1907.662469][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1907.668357][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1907.673462][ T4280] ? bt_warn+0x30/0x180 [ 1907.677617][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1907.682815][ T4280] hci_rx_work+0x3eb/0xd40 [ 1907.687227][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1907.692076][ T4280] ? process_one_work+0x7b0/0x1160 [ 1907.697187][ T4280] process_one_work+0x8a2/0x1160 [ 1907.702132][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1907.707762][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 1907.712782][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1907.717802][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1907.723346][ T4280] ? kthread_data+0x4b/0xc0 [ 1907.727856][ T4280] worker_thread+0xaa2/0x1270 [ 1907.732545][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1907.737574][ T4280] kthread+0x29d/0x330 [ 1907.741636][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1907.746656][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1907.751244][ T4280] ret_from_fork+0x1f/0x30 [ 1907.755668][ T4280] [ 1907.758874][ T4280] kobject_add_internal failed for hci5:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1907.780632][ T4280] Bluetooth: hci5: failed to register connection device [ 1907.895740][T28236] delete_channel: no stack [ 1907.924532][ T4280] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1907.932416][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:128' [ 1907.942191][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1907.949780][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1907.959854][ T4280] Workqueue: hci1 hci_rx_work [ 1907.964567][ T4280] Call Trace: [ 1907.967858][ T4280] [ 1907.970831][ T4280] dump_stack_lvl+0x188/0x24e [ 1907.975543][ T4280] ? show_regs_print_info+0x12/0x12 [ 1907.980764][ T4280] ? load_image+0x400/0x400 [ 1907.985313][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1907.990457][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1907.995178][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1908.000406][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1908.005629][ T4280] kobject_add+0x160/0x230 [ 1908.010049][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1908.014735][ T4280] ? klist_children_get+0x50/0x50 [ 1908.019756][ T4280] ? get_device_parent+0x121/0x3f0 [ 1908.024878][ T4280] device_add+0x483/0xfb0 [ 1908.029214][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1908.034072][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1908.039022][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1908.044398][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1908.049770][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1908.056007][ T4280] ? bt_info+0x180/0x180 [ 1908.060262][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1908.065898][ T4280] ? skb_pull_data+0xf7/0x200 [ 1908.070586][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1908.076144][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1908.082211][ T4280] hci_event_packet+0x7b6/0x1280 [ 1908.087156][ T4280] ? bis_list+0x280/0x280 [ 1908.091480][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1908.097372][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1908.102484][ T4280] ? bt_warn+0x30/0x180 [ 1908.106639][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1908.111834][ T4280] hci_rx_work+0x3eb/0xd40 [ 1908.116255][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1908.121108][ T4280] ? process_one_work+0x7b0/0x1160 [ 1908.126219][ T4280] process_one_work+0x8a2/0x1160 [ 1908.131169][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1908.136800][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 1908.141830][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1908.146859][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1908.152419][ T4280] ? kthread_data+0x4b/0xc0 [ 1908.156934][ T4280] worker_thread+0xaa2/0x1270 [ 1908.161636][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1908.166664][ T4280] kthread+0x29d/0x330 [ 1908.170736][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1908.175764][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1908.180346][ T4280] ret_from_fork+0x1f/0x30 [ 1908.184773][ T4280] [ 1908.189059][ T4280] kobject_add_internal failed for hci1:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1908.202977][ T4280] Bluetooth: hci1: failed to register connection device [ 1909.830824][ T4280] Bluetooth: hci5: command 0x2016 tx timeout [ 1910.230877][T27044] Bluetooth: hci1: command 0x2016 tx timeout [ 1911.526463][T28267] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8507'. [ 1914.394088][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.400493][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.812670][T28280] netlink: 'syz.5.8512': attribute type 10 has an invalid length. [ 1914.877758][T28286] FAULT_INJECTION: forcing a failure. [ 1914.877758][T28286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1914.900707][T28287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8513'. [ 1914.909877][T28286] CPU: 1 PID: 28286 Comm: syz.1.8515 Not tainted syzkaller #0 [ 1914.917352][T28286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1914.927411][T28286] Call Trace: [ 1914.930696][T28286] [ 1914.930848][T28287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8513'. [ 1914.933619][T28286] dump_stack_lvl+0x188/0x24e [ 1914.947219][T28286] ? show_regs_print_info+0x12/0x12 [ 1914.952436][T28286] ? load_image+0x400/0x400 [ 1914.955284][T28289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8513'. [ 1914.956939][T28286] ? __lock_acquire+0x7d10/0x7d10 [ 1914.970883][T28286] should_fail_ex+0x399/0x4d0 [ 1914.975570][T28286] _copy_from_user+0x2c/0x170 [ 1914.980242][T28286] __copy_msghdr+0x3b7/0x580 [ 1914.984835][T28286] ___sys_sendmsg+0x210/0x360 [ 1914.989511][T28286] ? __sys_sendmsg+0x290/0x290 [ 1914.994284][T28286] ? __lock_acquire+0x7d10/0x7d10 [ 1914.999316][T28286] __se_sys_sendmsg+0x1bb/0x2a0 [ 1915.004162][T28286] ? __x64_sys_sendmsg+0x80/0x80 [ 1915.009105][T28286] ? lockdep_hardirqs_on+0x94/0x140 [ 1915.014298][T28286] do_syscall_64+0x4c/0xa0 [ 1915.018705][T28286] ? clear_bhb_loop+0x60/0xb0 [ 1915.023373][T28286] ? clear_bhb_loop+0x60/0xb0 [ 1915.028041][T28286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1915.033923][T28286] RIP: 0033:0x7f173d59bf79 [ 1915.038326][T28286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1915.057920][T28286] RSP: 002b:00007f173e4cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1915.066325][T28286] RAX: ffffffffffffffda RBX: 00007f173d815fa0 RCX: 00007f173d59bf79 [ 1915.074286][T28286] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 1915.082248][T28286] RBP: 00007f173e4cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1915.090215][T28286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1915.098188][T28286] R13: 00007f173d816038 R14: 00007f173d815fa0 R15: 00007ffcccf36f38 [ 1915.106159][T28286] [ 1915.113394][ T4280] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1915.121052][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:128' [ 1915.130556][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1915.138119][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1915.148183][ T4280] Workqueue: hci1 hci_rx_work [ 1915.152895][ T4280] Call Trace: [ 1915.156181][ T4280] [ 1915.159121][ T4280] dump_stack_lvl+0x188/0x24e [ 1915.163823][ T4280] ? show_regs_print_info+0x12/0x12 [ 1915.169040][ T4280] ? load_image+0x400/0x400 [ 1915.173572][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1915.178712][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1915.183413][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1915.188636][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1915.193861][ T4280] kobject_add+0x160/0x230 [ 1915.198309][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1915.203018][ T4280] ? klist_children_get+0x50/0x50 [ 1915.208063][ T4280] ? get_device_parent+0x121/0x3f0 [ 1915.213217][ T4280] device_add+0x483/0xfb0 [ 1915.217585][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1915.222463][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1915.227445][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1915.232843][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1915.238250][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1915.244513][ T4280] ? bt_info+0x180/0x180 [ 1915.248778][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1915.254436][ T4280] ? skb_pull_data+0xf7/0x200 [ 1915.259142][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1915.264712][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1915.270801][ T4280] hci_event_packet+0x7b6/0x1280 [ 1915.275768][ T4280] ? bis_list+0x280/0x280 [ 1915.280116][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1915.286026][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1915.291159][ T4280] ? bt_warn+0x30/0x180 [ 1915.295355][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1915.300580][ T4280] hci_rx_work+0x3eb/0xd40 [ 1915.305020][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1915.309898][ T4280] ? process_one_work+0x7b0/0x1160 [ 1915.315032][ T4280] process_one_work+0x8a2/0x1160 [ 1915.320012][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1915.325669][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1915.330714][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1915.336277][ T4280] ? kthread_data+0x4b/0xc0 [ 1915.340814][ T4280] worker_thread+0xaa2/0x1270 [ 1915.345530][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1915.350591][ T4280] kthread+0x29d/0x330 [ 1915.354676][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1915.359722][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1915.364331][ T4280] ret_from_fork+0x1f/0x30 [ 1915.368787][ T4280] [ 1915.375229][ T4280] kobject_add_internal failed for hci1:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1915.389258][ T4280] Bluetooth: hci1: failed to register connection device [ 1915.416137][T28296] netlink: 'syz.0.8518': attribute type 10 has an invalid length. [ 1915.455800][ T4280] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1915.465253][T28294] delete_channel: no stack [ 1915.470494][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 1915.480807][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1915.488376][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1915.498453][ T4280] Workqueue: hci2 hci_rx_work [ 1915.503162][ T4280] Call Trace: [ 1915.506464][ T4280] [ 1915.509404][ T4280] dump_stack_lvl+0x188/0x24e [ 1915.514117][ T4280] ? show_regs_print_info+0x12/0x12 [ 1915.519344][ T4280] ? load_image+0x400/0x400 [ 1915.523867][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1915.528993][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1915.533679][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1915.538885][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1915.544094][ T4280] kobject_add+0x160/0x230 [ 1915.548513][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1915.553203][ T4280] ? klist_children_get+0x50/0x50 [ 1915.558227][ T4280] ? get_device_parent+0x121/0x3f0 [ 1915.563364][ T4280] device_add+0x483/0xfb0 [ 1915.567708][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1915.572565][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1915.577509][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1915.582885][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1915.588260][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1915.594499][ T4280] ? bt_info+0x180/0x180 [ 1915.598759][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1915.604410][ T4280] ? skb_pull_data+0xf7/0x200 [ 1915.609101][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1915.614659][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1915.620738][ T4280] hci_event_packet+0x7b6/0x1280 [ 1915.625686][ T4280] ? bis_list+0x280/0x280 [ 1915.630013][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1915.635906][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1915.641024][ T4280] ? bt_warn+0x30/0x180 [ 1915.645180][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1915.650377][ T4280] hci_rx_work+0x3eb/0xd40 [ 1915.654798][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1915.659658][ T4280] ? process_one_work+0x7b0/0x1160 [ 1915.664767][ T4280] process_one_work+0x8a2/0x1160 [ 1915.669716][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1915.675348][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 1915.680375][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1915.685393][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1915.690942][ T4280] ? kthread_data+0x4b/0xc0 [ 1915.695456][ T4280] worker_thread+0xaa2/0x1270 [ 1915.700155][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1915.705195][ T4280] kthread+0x29d/0x330 [ 1915.709257][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1915.714281][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1915.718866][ T4280] ret_from_fork+0x1f/0x30 [ 1915.723298][ T4280] [ 1915.731729][ T4280] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1915.745284][ T4280] Bluetooth: hci2: failed to register connection device [ 1917.441268][ T4280] Bluetooth: hci1: command 0x2016 tx timeout [ 1917.830685][T27044] Bluetooth: hci2: command 0x2016 tx timeout [ 1919.372441][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1919.380164][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 1919.391517][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1919.399090][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1919.409141][ T4280] Workqueue: hci3 hci_rx_work [ 1919.413826][ T4280] Call Trace: [ 1919.417099][ T4280] [ 1919.420025][ T4280] dump_stack_lvl+0x188/0x24e [ 1919.424706][ T4280] ? show_regs_print_info+0x12/0x12 [ 1919.429902][ T4280] ? load_image+0x400/0x400 [ 1919.434410][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1919.439522][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1919.444196][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1919.449398][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1919.454626][ T4280] kobject_add+0x160/0x230 [ 1919.459038][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1919.463720][ T4280] ? klist_children_get+0x50/0x50 [ 1919.468737][ T4280] ? get_device_parent+0x121/0x3f0 [ 1919.473853][ T4280] device_add+0x483/0xfb0 [ 1919.478182][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1919.483033][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1919.487976][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1919.493351][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1919.498735][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1919.504973][ T4280] ? bt_info+0x180/0x180 [ 1919.509209][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1919.514844][ T4280] ? skb_pull_data+0xf7/0x200 [ 1919.519529][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1919.525072][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1919.531143][ T4280] hci_event_packet+0x7b6/0x1280 [ 1919.536083][ T4280] ? bis_list+0x280/0x280 [ 1919.540411][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1919.546311][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1919.551448][ T4280] ? bt_warn+0x30/0x180 [ 1919.555601][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1919.560798][ T4280] hci_rx_work+0x3eb/0xd40 [ 1919.565208][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1919.570058][ T4280] ? process_one_work+0x7b0/0x1160 [ 1919.575164][ T4280] process_one_work+0x8a2/0x1160 [ 1919.580112][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1919.585743][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 1919.590761][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1919.595778][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1919.601315][ T4280] ? kthread_data+0x4b/0xc0 [ 1919.605820][ T4280] worker_thread+0xaa2/0x1270 [ 1919.610503][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1919.615529][ T4280] kthread+0x29d/0x330 [ 1919.619587][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1919.624605][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1919.629185][ T4280] ret_from_fork+0x1f/0x30 [ 1919.633609][ T4280] [ 1919.640922][ T4280] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1919.654649][ T4280] Bluetooth: hci3: failed to register connection device [ 1919.702423][T28331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8526'. [ 1919.709719][T28333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1919.758487][T28333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1919.770252][T28335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1919.910589][T28329] netlink: 'syz.5.8527': attribute type 10 has an invalid length. [ 1919.933290][T28339] netlink: 'syz.2.8532': attribute type 17 has an invalid length. [ 1919.959011][T28339] netlink: 'syz.2.8532': attribute type 16 has an invalid length. [ 1919.977997][T28339] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8532'. [ 1920.276597][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1920.285176][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 1920.296690][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1920.304264][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1920.314332][ T4280] Workqueue: hci3 hci_rx_work [ 1920.319042][ T4280] Call Trace: [ 1920.322338][ T4280] [ 1920.325283][ T4280] dump_stack_lvl+0x188/0x24e [ 1920.329988][ T4280] ? show_regs_print_info+0x12/0x12 [ 1920.335216][ T4280] ? load_image+0x400/0x400 [ 1920.339755][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1920.344899][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1920.349612][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1920.354836][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1920.360073][ T4280] kobject_add+0x160/0x230 [ 1920.364516][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1920.369225][ T4280] ? klist_children_get+0x50/0x50 [ 1920.374259][ T4280] ? get_device_parent+0x121/0x3f0 [ 1920.379385][ T4280] device_add+0x483/0xfb0 [ 1920.383727][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1920.388586][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1920.393537][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1920.398909][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1920.404284][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1920.410520][ T4280] ? bt_info+0x180/0x180 [ 1920.414762][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1920.420422][ T4280] ? skb_pull_data+0xf7/0x200 [ 1920.425116][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1920.430669][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1920.436739][ T4280] hci_event_packet+0x7b6/0x1280 [ 1920.441686][ T4280] ? bis_list+0x280/0x280 [ 1920.446019][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1920.451912][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1920.457025][ T4280] ? bt_warn+0x30/0x180 [ 1920.461183][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1920.466381][ T4280] hci_rx_work+0x3eb/0xd40 [ 1920.470794][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1920.475644][ T4280] ? process_one_work+0x7b0/0x1160 [ 1920.480754][ T4280] process_one_work+0x8a2/0x1160 [ 1920.485700][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1920.491331][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1920.496350][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1920.501888][ T4280] ? kthread_data+0x4b/0xc0 [ 1920.506400][ T4280] worker_thread+0xaa2/0x1270 [ 1920.511091][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1920.516121][ T4280] kthread+0x29d/0x330 [ 1920.520182][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1920.525204][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1920.529789][ T4280] ret_from_fork+0x1f/0x30 [ 1920.534221][ T4280] [ 1920.542282][ T4280] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1920.555676][ T4280] Bluetooth: hci3: failed to register connection device [ 1920.687440][T28349] netlink: 'syz.2.8535': attribute type 10 has an invalid length. [ 1920.786202][T28345] delete_channel: no stack [ 1921.183965][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1921.192281][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 1921.211073][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1921.218647][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1921.228724][ T4280] Workqueue: hci0 hci_rx_work [ 1921.233517][ T4280] Call Trace: [ 1921.236807][ T4280] [ 1921.239755][ T4280] dump_stack_lvl+0x188/0x24e [ 1921.244464][ T4280] ? show_regs_print_info+0x12/0x12 [ 1921.249698][ T4280] ? load_image+0x400/0x400 [ 1921.254239][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1921.259378][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1921.264087][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1921.269315][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1921.274548][ T4280] kobject_add+0x160/0x230 [ 1921.278989][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1921.283721][ T4280] ? klist_children_get+0x50/0x50 [ 1921.288772][ T4280] ? get_device_parent+0x121/0x3f0 [ 1921.293918][ T4280] device_add+0x483/0xfb0 [ 1921.298279][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1921.303162][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1921.308130][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1921.313528][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1921.318933][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1921.325198][ T4280] ? bt_info+0x180/0x180 [ 1921.329463][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1921.335123][ T4280] ? skb_pull_data+0xf7/0x200 [ 1921.339821][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1921.345370][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1921.351438][ T4280] hci_event_packet+0x7b6/0x1280 [ 1921.356382][ T4280] ? bis_list+0x280/0x280 [ 1921.360706][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1921.366595][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1921.371700][ T4280] ? bt_warn+0x30/0x180 [ 1921.375852][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1921.381049][ T4280] hci_rx_work+0x3eb/0xd40 [ 1921.385461][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1921.390307][ T4280] ? process_one_work+0x7b0/0x1160 [ 1921.395413][ T4280] process_one_work+0x8a2/0x1160 [ 1921.400355][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1921.405988][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1921.411005][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1921.416543][ T4280] ? kthread_data+0x4b/0xc0 [ 1921.421051][ T4280] worker_thread+0xaa2/0x1270 [ 1921.425736][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1921.430765][ T4280] kthread+0x29d/0x330 [ 1921.434821][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1921.439840][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1921.444422][ T4280] ret_from_fork+0x1f/0x30 [ 1921.448858][ T4280] [ 1921.456024][ T4280] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1921.469365][ T4280] Bluetooth: hci0: failed to register connection device [ 1921.646733][T28377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8544'. [ 1921.675638][T28377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8544'. [ 1921.681098][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 1921.730838][T28378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8544'. [ 1923.510697][T27044] Bluetooth: hci0: command 0x2016 tx timeout [ 1923.751165][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 1925.265283][T28396] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8549'. [ 1925.309701][T28391] netlink: 'syz.3.8547': attribute type 10 has an invalid length. [ 1925.342500][T27044] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1925.350295][T27044] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:128' [ 1925.361583][T27044] CPU: 0 PID: 27044 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1925.369269][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1925.379382][T27044] Workqueue: hci1 hci_rx_work [ 1925.384109][T27044] Call Trace: [ 1925.387411][T27044] [ 1925.390370][T27044] dump_stack_lvl+0x188/0x24e [ 1925.395111][T27044] ? show_regs_print_info+0x12/0x12 [ 1925.400374][T27044] ? load_image+0x400/0x400 [ 1925.404954][T27044] sysfs_create_dir_ns+0x26a/0x290 [ 1925.410111][T27044] ? sysfs_warn_dup+0xa0/0xa0 [ 1925.414829][T27044] ? do_raw_spin_unlock+0x11d/0x230 [ 1925.420069][T27044] kobject_add_internal+0x61c/0xcc0 [ 1925.425342][T27044] kobject_add+0x160/0x230 [ 1925.429805][T27044] ? kobject_init+0x1d0/0x1d0 [ 1925.434545][T27044] ? klist_children_get+0x50/0x50 [ 1925.439603][T27044] ? get_device_parent+0x121/0x3f0 [ 1925.444765][T27044] device_add+0x483/0xfb0 [ 1925.449134][T27044] ? kmem_cache_free+0xf7/0x290 [ 1925.454090][T27044] hci_conn_add_sysfs+0xd1/0x1e0 [ 1925.459084][T27044] le_conn_complete_evt+0x105f/0x1670 [ 1925.464511][T27044] ? le_conn_complete_evt+0xe6/0x1670 [ 1925.469952][T27044] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1925.476247][T27044] ? bt_info+0x180/0x180 [ 1925.480533][T27044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1925.486213][T27044] ? skb_pull_data+0xf7/0x200 [ 1925.490948][T27044] hci_le_conn_complete_evt+0x183/0x440 [ 1925.496544][T27044] ? hci_remote_host_features_evt+0x270/0x270 [ 1925.502652][T27044] hci_event_packet+0x7b6/0x1280 [ 1925.507649][T27044] ? bis_list+0x280/0x280 [ 1925.512033][T27044] ? kcov_remote_start+0x27/0x7e0 [ 1925.517112][T27044] ? hci_send_to_monitor+0x9c/0x4a0 [ 1925.522352][T27044] hci_rx_work+0x3eb/0xd40 [ 1925.526805][T27044] ? _raw_spin_unlock+0x40/0x40 [ 1925.531712][T27044] ? process_one_work+0x7b0/0x1160 [ 1925.536854][T27044] process_one_work+0x8a2/0x1160 [ 1925.541874][T27044] ? worker_detach_from_pool+0x240/0x240 [ 1925.547551][T27044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1925.552605][T27044] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1925.558180][T27044] ? kthread_data+0x4b/0xc0 [ 1925.562747][T27044] worker_thread+0xaa2/0x1270 [ 1925.567521][T27044] ? __kthread_parkme+0x162/0x1c0 [ 1925.572603][T27044] kthread+0x29d/0x330 [ 1925.576691][T27044] ? worker_clr_flags+0x1a0/0x1a0 [ 1925.581745][T27044] ? kthread_blkcg+0xd0/0xd0 [ 1925.586371][T27044] ret_from_fork+0x1f/0x30 [ 1925.590869][T27044] [ 1925.595671][T27044] kobject_add_internal failed for hci1:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1925.611672][T27044] Bluetooth: hci1: failed to register connection device [ 1926.169560][T27044] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1926.177501][T27044] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:128' [ 1926.187354][T27044] CPU: 1 PID: 27044 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1926.195001][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1926.205053][T27044] Workqueue: hci5 hci_rx_work [ 1926.209730][T27044] Call Trace: [ 1926.213001][T27044] [ 1926.215922][T27044] dump_stack_lvl+0x188/0x24e [ 1926.220605][T27044] ? show_regs_print_info+0x12/0x12 [ 1926.225800][T27044] ? load_image+0x400/0x400 [ 1926.230306][T27044] sysfs_create_dir_ns+0x26a/0x290 [ 1926.235420][T27044] ? sysfs_warn_dup+0xa0/0xa0 [ 1926.240094][T27044] ? do_raw_spin_unlock+0x11d/0x230 [ 1926.245289][T27044] kobject_add_internal+0x61c/0xcc0 [ 1926.250498][T27044] kobject_add+0x160/0x230 [ 1926.254912][T27044] ? kobject_init+0x1d0/0x1d0 [ 1926.259595][T27044] ? klist_children_get+0x50/0x50 [ 1926.264614][T27044] ? get_device_parent+0x121/0x3f0 [ 1926.269733][T27044] device_add+0x483/0xfb0 [ 1926.274063][T27044] ? kmem_cache_free+0xf7/0x290 [ 1926.278913][T27044] hci_conn_add_sysfs+0xd1/0x1e0 [ 1926.283850][T27044] le_conn_complete_evt+0x105f/0x1670 [ 1926.289217][T27044] ? le_conn_complete_evt+0xe6/0x1670 [ 1926.294596][T27044] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1926.300832][T27044] ? bt_info+0x180/0x180 [ 1926.305068][T27044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1926.310699][T27044] ? skb_pull_data+0xf7/0x200 [ 1926.315379][T27044] hci_le_conn_complete_evt+0x183/0x440 [ 1926.320924][T27044] ? hci_remote_host_features_evt+0x270/0x270 [ 1926.326986][T27044] hci_event_packet+0x7b6/0x1280 [ 1926.331927][T27044] ? bis_list+0x280/0x280 [ 1926.336252][T27044] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1926.342143][T27044] ? kcov_remote_start+0x4c7/0x7e0 [ 1926.347247][T27044] ? bt_warn+0x30/0x180 [ 1926.351406][T27044] ? hci_send_to_monitor+0x9c/0x4a0 [ 1926.356603][T27044] hci_rx_work+0x3eb/0xd40 [ 1926.361012][T27044] ? _raw_spin_unlock+0x40/0x40 [ 1926.365860][T27044] ? process_one_work+0x7b0/0x1160 [ 1926.370966][T27044] process_one_work+0x8a2/0x1160 [ 1926.375905][T27044] ? worker_detach_from_pool+0x240/0x240 [ 1926.381529][T27044] ? _raw_spin_lock_irq+0x86/0xf0 [ 1926.386547][T27044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1926.391560][T27044] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1926.397099][T27044] ? kthread_data+0x4b/0xc0 [ 1926.401604][T27044] worker_thread+0xaa2/0x1270 [ 1926.406291][T27044] ? __kthread_parkme+0x162/0x1c0 [ 1926.411319][T27044] kthread+0x29d/0x330 [ 1926.415377][T27044] ? worker_clr_flags+0x1a0/0x1a0 [ 1926.420393][T27044] ? kthread_blkcg+0xd0/0xd0 [ 1926.424991][T27044] ret_from_fork+0x1f/0x30 [ 1926.429424][T27044] [ 1926.436211][T27044] kobject_add_internal failed for hci5:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1926.450685][T27044] Bluetooth: hci5: failed to register connection device [ 1926.494249][T28412] netlink: 'syz.1.8554': attribute type 10 has an invalid length. [ 1926.579174][T28411] delete_channel: no stack [ 1927.126760][T28431] tun0: tun_chr_ioctl cmd 1074025673 [ 1927.671029][T27044] Bluetooth: hci1: command 0x2016 tx timeout [ 1928.481248][T27044] Bluetooth: hci5: command 0x2016 tx timeout [ 1929.908110][T28445] netlink: 'syz.0.8567': attribute type 10 has an invalid length. [ 1929.945909][T27044] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1929.953911][T27044] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 1929.964223][T27044] CPU: 1 PID: 27044 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1929.971904][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1929.981973][T27044] Workqueue: hci3 hci_rx_work [ 1929.986654][T27044] Call Trace: [ 1929.989924][T27044] [ 1929.992850][T27044] dump_stack_lvl+0x188/0x24e [ 1929.997530][T27044] ? show_regs_print_info+0x12/0x12 [ 1930.002730][T27044] ? load_image+0x400/0x400 [ 1930.007238][T27044] sysfs_create_dir_ns+0x26a/0x290 [ 1930.012352][T27044] ? sysfs_warn_dup+0xa0/0xa0 [ 1930.017030][T27044] ? do_raw_spin_unlock+0x11d/0x230 [ 1930.022228][T27044] kobject_add_internal+0x61c/0xcc0 [ 1930.027424][T27044] kobject_add+0x160/0x230 [ 1930.031838][T27044] ? kobject_init+0x1d0/0x1d0 [ 1930.036521][T27044] ? klist_children_get+0x50/0x50 [ 1930.041542][T27044] ? get_device_parent+0x121/0x3f0 [ 1930.046660][T27044] device_add+0x483/0xfb0 [ 1930.050989][T27044] ? kmem_cache_free+0xf7/0x290 [ 1930.055841][T27044] hci_conn_add_sysfs+0xd1/0x1e0 [ 1930.060777][T27044] le_conn_complete_evt+0x105f/0x1670 [ 1930.066151][T27044] ? le_conn_complete_evt+0xe6/0x1670 [ 1930.071522][T27044] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1930.077766][T27044] ? bt_info+0x180/0x180 [ 1930.082007][T27044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1930.087650][T27044] ? skb_pull_data+0xf7/0x200 [ 1930.092342][T27044] hci_le_conn_complete_evt+0x183/0x440 [ 1930.097888][T27044] ? hci_remote_host_features_evt+0x270/0x270 [ 1930.103955][T27044] hci_event_packet+0x7b6/0x1280 [ 1930.108898][T27044] ? bis_list+0x280/0x280 [ 1930.113223][T27044] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1930.119110][T27044] ? kcov_remote_start+0x4c7/0x7e0 [ 1930.124223][T27044] ? bt_warn+0x30/0x180 [ 1930.128374][T27044] ? hci_send_to_monitor+0x9c/0x4a0 [ 1930.133571][T27044] hci_rx_work+0x3eb/0xd40 [ 1930.137982][T27044] ? _raw_spin_unlock+0x40/0x40 [ 1930.142832][T27044] ? process_one_work+0x7b0/0x1160 [ 1930.147941][T27044] process_one_work+0x8a2/0x1160 [ 1930.152891][T27044] ? worker_detach_from_pool+0x240/0x240 [ 1930.158515][T27044] ? _raw_spin_lock_irq+0x86/0xf0 [ 1930.163536][T27044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1930.168552][T27044] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1930.174091][T27044] ? kthread_data+0x4b/0xc0 [ 1930.178598][T27044] worker_thread+0xaa2/0x1270 [ 1930.183287][T27044] ? __kthread_parkme+0x162/0x1c0 [ 1930.188319][T27044] kthread+0x29d/0x330 [ 1930.192377][T27044] ? worker_clr_flags+0x1a0/0x1a0 [ 1930.197398][T27044] ? kthread_blkcg+0xd0/0xd0 [ 1930.201983][T27044] ret_from_fork+0x1f/0x30 [ 1930.206409][T27044] [ 1930.211294][T27044] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1930.225254][T27044] Bluetooth: hci3: failed to register connection device [ 1930.309407][T27044] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1930.317190][T27044] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:128' [ 1930.327784][T27044] CPU: 1 PID: 27044 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1930.335437][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1930.345485][T27044] Workqueue: hci5 hci_rx_work [ 1930.350165][T27044] Call Trace: [ 1930.353435][T27044] [ 1930.356357][T27044] dump_stack_lvl+0x188/0x24e [ 1930.361038][T27044] ? show_regs_print_info+0x12/0x12 [ 1930.366234][T27044] ? load_image+0x400/0x400 [ 1930.370742][T27044] sysfs_create_dir_ns+0x26a/0x290 [ 1930.375856][T27044] ? sysfs_warn_dup+0xa0/0xa0 [ 1930.380529][T27044] ? do_raw_spin_unlock+0x11d/0x230 [ 1930.385723][T27044] kobject_add_internal+0x61c/0xcc0 [ 1930.390922][T27044] kobject_add+0x160/0x230 [ 1930.395348][T27044] ? kobject_init+0x1d0/0x1d0 [ 1930.400027][T27044] ? klist_children_get+0x50/0x50 [ 1930.405044][T27044] ? get_device_parent+0x121/0x3f0 [ 1930.410162][T27044] device_add+0x483/0xfb0 [ 1930.414499][T27044] ? kmem_cache_free+0xf7/0x290 [ 1930.419350][T27044] hci_conn_add_sysfs+0xd1/0x1e0 [ 1930.424288][T27044] le_conn_complete_evt+0x105f/0x1670 [ 1930.429657][T27044] ? le_conn_complete_evt+0xe6/0x1670 [ 1930.435028][T27044] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1930.441269][T27044] ? bt_info+0x180/0x180 [ 1930.445508][T27044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1930.451139][T27044] ? skb_pull_data+0xf7/0x200 [ 1930.455820][T27044] hci_le_conn_complete_evt+0x183/0x440 [ 1930.461362][T27044] ? hci_remote_host_features_evt+0x270/0x270 [ 1930.467427][T27044] hci_event_packet+0x7b6/0x1280 [ 1930.472368][T27044] ? bis_list+0x280/0x280 [ 1930.476707][T27044] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1930.482593][T27044] ? kcov_remote_start+0x4c7/0x7e0 [ 1930.487703][T27044] ? bt_warn+0x30/0x180 [ 1930.491859][T27044] ? hci_send_to_monitor+0x9c/0x4a0 [ 1930.497052][T27044] hci_rx_work+0x3eb/0xd40 [ 1930.501483][T27044] ? _raw_spin_unlock+0x40/0x40 [ 1930.506331][T27044] ? process_one_work+0x7b0/0x1160 [ 1930.511435][T27044] process_one_work+0x8a2/0x1160 [ 1930.516376][T27044] ? worker_detach_from_pool+0x240/0x240 [ 1930.522006][T27044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1930.527021][T27044] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1930.532558][T27044] ? kthread_data+0x4b/0xc0 [ 1930.537065][T27044] worker_thread+0xaa2/0x1270 [ 1930.541752][T27044] ? __kthread_parkme+0x162/0x1c0 [ 1930.546779][T27044] kthread+0x29d/0x330 [ 1930.550835][T27044] ? worker_clr_flags+0x1a0/0x1a0 [ 1930.555854][T27044] ? kthread_blkcg+0xd0/0xd0 [ 1930.560443][T27044] ret_from_fork+0x1f/0x30 [ 1930.564868][T27044] [ 1930.568725][T27044] kobject_add_internal failed for hci5:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1930.582039][T27044] Bluetooth: hci5: failed to register connection device [ 1930.739891][T28462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8573'. [ 1930.761150][T28462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8573'. [ 1930.781813][T28462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8573'. [ 1930.819776][T28465] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8575'. [ 1931.113144][T28468] netlink: 'syz.3.8574': attribute type 10 has an invalid length. [ 1931.126761][T28466] delete_channel: no stack [ 1932.311803][T27044] Bluetooth: hci3: command 0x2016 tx timeout [ 1932.630906][T27044] Bluetooth: hci5: command 0x2016 tx timeout [ 1934.377445][T28486] netlink: 'syz.0.8581': attribute type 10 has an invalid length. [ 1934.591152][T27044] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1934.598749][T27044] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 1934.608435][T27044] CPU: 1 PID: 27044 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1934.616083][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1934.626159][T27044] Workqueue: hci0 hci_rx_work [ 1934.630861][T27044] Call Trace: [ 1934.630882][ T4280] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1934.634138][T27044] [ 1934.634151][T27044] dump_stack_lvl+0x188/0x24e [ 1934.634185][T27044] ? show_regs_print_info+0x12/0x12 [ 1934.634211][T27044] ? load_image+0x400/0x400 [ 1934.641875][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 1934.644489][T27044] sysfs_create_dir_ns+0x26a/0x290 [ 1934.673366][T27044] ? sysfs_warn_dup+0xa0/0xa0 [ 1934.678054][T27044] ? do_raw_spin_unlock+0x11d/0x230 [ 1934.683259][T27044] kobject_add_internal+0x61c/0xcc0 [ 1934.688467][T27044] kobject_add+0x160/0x230 [ 1934.692884][T27044] ? kobject_init+0x1d0/0x1d0 [ 1934.697590][T27044] ? klist_children_get+0x50/0x50 [ 1934.702622][T27044] ? get_device_parent+0x121/0x3f0 [ 1934.707749][T27044] device_add+0x483/0xfb0 [ 1934.712087][T27044] ? kmem_cache_free+0xf7/0x290 [ 1934.716951][T27044] hci_conn_add_sysfs+0xd1/0x1e0 [ 1934.721894][T27044] le_conn_complete_evt+0x105f/0x1670 [ 1934.727269][T27044] ? le_conn_complete_evt+0xe6/0x1670 [ 1934.732647][T27044] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1934.738897][T27044] ? bt_info+0x180/0x180 [ 1934.743145][T27044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1934.748784][T27044] ? skb_pull_data+0xf7/0x200 [ 1934.753495][T27044] hci_le_conn_complete_evt+0x183/0x440 [ 1934.759061][T27044] ? hci_remote_host_features_evt+0x270/0x270 [ 1934.765136][T27044] hci_event_packet+0x7b6/0x1280 [ 1934.770086][T27044] ? bis_list+0x280/0x280 [ 1934.774420][T27044] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1934.780315][T27044] ? kcov_remote_start+0x4c7/0x7e0 [ 1934.785430][T27044] ? bt_warn+0x30/0x180 [ 1934.789591][T27044] ? hci_send_to_monitor+0x9c/0x4a0 [ 1934.794798][T27044] hci_rx_work+0x3eb/0xd40 [ 1934.799219][T27044] ? _raw_spin_unlock+0x40/0x40 [ 1934.804074][T27044] ? process_one_work+0x7b0/0x1160 [ 1934.809185][T27044] process_one_work+0x8a2/0x1160 [ 1934.814137][T27044] ? worker_detach_from_pool+0x240/0x240 [ 1934.819772][T27044] ? _raw_spin_lock_irq+0x86/0xf0 [ 1934.824798][T27044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1934.829818][T27044] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1934.835363][T27044] ? kthread_data+0x4b/0xc0 [ 1934.839875][T27044] worker_thread+0xaa2/0x1270 [ 1934.844571][T27044] ? __kthread_parkme+0x162/0x1c0 [ 1934.849606][T27044] kthread+0x29d/0x330 [ 1934.853674][T27044] ? worker_clr_flags+0x1a0/0x1a0 [ 1934.858697][T27044] ? kthread_blkcg+0xd0/0xd0 [ 1934.863288][T27044] ret_from_fork+0x1f/0x30 [ 1934.867718][T27044] [ 1934.872041][T27044] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1934.874534][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1934.885370][T27044] Bluetooth: hci0: failed to register connection device [ 1934.892759][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1934.892774][ T4280] Workqueue: hci2 hci_rx_work [ 1934.892797][ T4280] Call Trace: [ 1934.892804][ T4280] [ 1934.920659][ T4280] dump_stack_lvl+0x188/0x24e [ 1934.925357][ T4280] ? show_regs_print_info+0x12/0x12 [ 1934.930572][ T4280] ? load_image+0x400/0x400 [ 1934.935102][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1934.940235][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1934.944934][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1934.950145][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1934.955363][ T4280] kobject_add+0x160/0x230 [ 1934.959800][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1934.964529][ T4280] ? klist_children_get+0x50/0x50 [ 1934.969568][ T4280] ? get_device_parent+0x121/0x3f0 [ 1934.974709][ T4280] device_add+0x483/0xfb0 [ 1934.979061][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1934.983919][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1934.988859][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1934.994228][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1934.999598][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1935.005835][ T4280] ? bt_info+0x180/0x180 [ 1935.010072][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1935.015703][ T4280] ? skb_pull_data+0xf7/0x200 [ 1935.020383][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1935.025927][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1935.031993][ T4280] hci_event_packet+0x7b6/0x1280 [ 1935.036936][ T4280] ? bis_list+0x280/0x280 [ 1935.041263][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1935.047152][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1935.052257][ T4280] ? bt_warn+0x30/0x180 [ 1935.056410][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1935.061607][ T4280] hci_rx_work+0x3eb/0xd40 [ 1935.066020][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1935.070870][ T4280] ? process_one_work+0x7b0/0x1160 [ 1935.075977][ T4280] process_one_work+0x8a2/0x1160 [ 1935.080922][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1935.086549][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 1935.091566][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1935.096580][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1935.102117][ T4280] ? kthread_data+0x4b/0xc0 [ 1935.106623][ T4280] worker_thread+0xaa2/0x1270 [ 1935.111309][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1935.116339][ T4280] kthread+0x29d/0x330 [ 1935.120394][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1935.125412][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1935.129993][ T4280] ret_from_fork+0x1f/0x30 [ 1935.134416][ T4280] [ 1935.147977][ T4280] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1935.161486][ T4280] Bluetooth: hci2: failed to register connection device [ 1936.960701][ T4280] Bluetooth: hci0: command 0x2016 tx timeout [ 1937.190762][T27044] Bluetooth: hci2: command 0x2016 tx timeout [ 1937.578775][T28508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8589'. [ 1937.629541][T28508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8589'. [ 1937.660027][T28514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8589'. [ 1937.691223][T28511] netlink: 'syz.2.8588': attribute type 10 has an invalid length. [ 1937.713568][T28510] delete_channel: no stack [ 1939.109463][T28537] netlink: 'syz.0.8597': attribute type 10 has an invalid length. [ 1941.166749][T27044] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1941.174473][T27044] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 1941.184240][T27044] CPU: 1 PID: 27044 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1941.191897][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1941.201968][T27044] Workqueue: hci2 hci_rx_work [ 1941.206675][T27044] Call Trace: [ 1941.209965][T27044] [ 1941.212911][T27044] dump_stack_lvl+0x188/0x24e [ 1941.217618][T27044] ? show_regs_print_info+0x12/0x12 [ 1941.222841][T27044] ? load_image+0x400/0x400 [ 1941.227377][T27044] sysfs_create_dir_ns+0x26a/0x290 [ 1941.232518][T27044] ? sysfs_warn_dup+0xa0/0xa0 [ 1941.237221][T27044] ? do_raw_spin_unlock+0x11d/0x230 [ 1941.242443][T27044] kobject_add_internal+0x61c/0xcc0 [ 1941.247664][T27044] kobject_add+0x160/0x230 [ 1941.252098][T27044] ? kobject_init+0x1d0/0x1d0 [ 1941.256803][T27044] ? klist_children_get+0x50/0x50 [ 1941.261846][T27044] ? get_device_parent+0x121/0x3f0 [ 1941.266980][T27044] device_add+0x483/0xfb0 [ 1941.271322][T27044] ? kmem_cache_free+0xf7/0x290 [ 1941.276188][T27044] hci_conn_add_sysfs+0xd1/0x1e0 [ 1941.281132][T27044] le_conn_complete_evt+0x105f/0x1670 [ 1941.286513][T27044] ? le_conn_complete_evt+0xe6/0x1670 [ 1941.291886][T27044] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1941.298126][T27044] ? bt_info+0x180/0x180 [ 1941.302372][T27044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1941.308008][T27044] ? skb_pull_data+0xf7/0x200 [ 1941.312692][T27044] hci_le_conn_complete_evt+0x183/0x440 [ 1941.318236][T27044] ? hci_remote_host_features_evt+0x270/0x270 [ 1941.324303][T27044] hci_event_packet+0x7b6/0x1280 [ 1941.329248][T27044] ? bis_list+0x280/0x280 [ 1941.333574][T27044] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1941.339471][T27044] ? kcov_remote_start+0x4c7/0x7e0 [ 1941.344581][T27044] ? bt_warn+0x30/0x180 [ 1941.348734][T27044] ? hci_send_to_monitor+0x9c/0x4a0 [ 1941.353934][T27044] hci_rx_work+0x3eb/0xd40 [ 1941.358347][T27044] ? _raw_spin_unlock+0x40/0x40 [ 1941.363199][T27044] ? process_one_work+0x7b0/0x1160 [ 1941.368306][T27044] process_one_work+0x8a2/0x1160 [ 1941.373252][T27044] ? worker_detach_from_pool+0x240/0x240 [ 1941.378884][T27044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1941.383903][T27044] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1941.389442][T27044] ? kthread_data+0x4b/0xc0 [ 1941.393952][T27044] worker_thread+0xaa2/0x1270 [ 1941.398642][T27044] ? __kthread_parkme+0x162/0x1c0 [ 1941.403670][T27044] kthread+0x29d/0x330 [ 1941.407729][T27044] ? worker_clr_flags+0x1a0/0x1a0 [ 1941.412751][T27044] ? kthread_blkcg+0xd0/0xd0 [ 1941.417334][T27044] ret_from_fork+0x1f/0x30 [ 1941.421761][T27044] [ 1941.427093][T27044] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1941.440500][T27044] Bluetooth: hci2: failed to register connection device [ 1941.657100][T27044] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1941.664821][T27044] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 1941.674479][T27044] CPU: 1 PID: 27044 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1941.682132][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1941.692201][T27044] Workqueue: hci0 hci_rx_work [ 1941.696901][T27044] Call Trace: [ 1941.700289][T27044] [ 1941.703211][T27044] dump_stack_lvl+0x188/0x24e [ 1941.707884][T27044] ? show_regs_print_info+0x12/0x12 [ 1941.713086][T27044] ? load_image+0x400/0x400 [ 1941.717606][T27044] sysfs_create_dir_ns+0x26a/0x290 [ 1941.722729][T27044] ? sysfs_warn_dup+0xa0/0xa0 [ 1941.727432][T27044] ? do_raw_spin_unlock+0x11d/0x230 [ 1941.732660][T27044] kobject_add_internal+0x61c/0xcc0 [ 1941.737884][T27044] kobject_add+0x160/0x230 [ 1941.742325][T27044] ? kobject_init+0x1d0/0x1d0 [ 1941.747030][T27044] ? klist_children_get+0x50/0x50 [ 1941.752063][T27044] ? get_device_parent+0x121/0x3f0 [ 1941.757207][T27044] device_add+0x483/0xfb0 [ 1941.761561][T27044] ? kmem_cache_free+0xf7/0x290 [ 1941.766423][T27044] hci_conn_add_sysfs+0xd1/0x1e0 [ 1941.771454][T27044] le_conn_complete_evt+0x105f/0x1670 [ 1941.776838][T27044] ? le_conn_complete_evt+0xe6/0x1670 [ 1941.782212][T27044] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1941.788465][T27044] ? bt_info+0x180/0x180 [ 1941.792714][T27044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1941.798372][T27044] ? skb_pull_data+0xf7/0x200 [ 1941.803073][T27044] hci_le_conn_complete_evt+0x183/0x440 [ 1941.808614][T27044] ? hci_remote_host_features_evt+0x270/0x270 [ 1941.814674][T27044] hci_event_packet+0x7b6/0x1280 [ 1941.819610][T27044] ? bis_list+0x280/0x280 [ 1941.823930][T27044] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1941.829813][T27044] ? kcov_remote_start+0x4c7/0x7e0 [ 1941.834925][T27044] ? bt_warn+0x30/0x180 [ 1941.839105][T27044] ? hci_send_to_monitor+0x9c/0x4a0 [ 1941.844331][T27044] hci_rx_work+0x3eb/0xd40 [ 1941.848771][T27044] ? _raw_spin_unlock+0x40/0x40 [ 1941.853634][T27044] ? process_one_work+0x7b0/0x1160 [ 1941.858764][T27044] process_one_work+0x8a2/0x1160 [ 1941.863740][T27044] ? worker_detach_from_pool+0x240/0x240 [ 1941.869380][T27044] ? _raw_spin_lock_irq+0x86/0xf0 [ 1941.874409][T27044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1941.879439][T27044] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1941.884973][T27044] ? kthread_data+0x4b/0xc0 [ 1941.889476][T27044] worker_thread+0xaa2/0x1270 [ 1941.894153][T27044] ? __kthread_parkme+0x162/0x1c0 [ 1941.899191][T27044] kthread+0x29d/0x330 [ 1941.903265][T27044] ? worker_clr_flags+0x1a0/0x1a0 [ 1941.908286][T27044] ? kthread_blkcg+0xd0/0xd0 [ 1941.912879][T27044] ret_from_fork+0x1f/0x30 [ 1941.917318][T27044] [ 1941.921715][T27044] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1941.934972][T27044] Bluetooth: hci0: failed to register connection device [ 1943.520835][T27044] Bluetooth: hci2: command 0x2016 tx timeout [ 1944.001483][T27044] Bluetooth: hci0: command 0x2016 tx timeout [ 1944.809135][T28568] netlink: 'syz.3.8605': attribute type 10 has an invalid length. [ 1944.827297][T28573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8607'. [ 1944.860478][T28573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8607'. [ 1944.870797][T28567] delete_channel: no stack [ 1944.912303][T28577] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8607'. [ 1945.354610][ T4280] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1945.362316][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 1945.371868][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1945.379424][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1945.389501][ T4280] Workqueue: hci2 hci_rx_work [ 1945.391185][T28585] netlink: 'syz.3.8612': attribute type 10 has an invalid length. [ 1945.394185][ T4280] Call Trace: [ 1945.394196][ T4280] [ 1945.394205][ T4280] dump_stack_lvl+0x188/0x24e [ 1945.394239][ T4280] ? show_regs_print_info+0x12/0x12 [ 1945.418080][ T4280] ? load_image+0x400/0x400 [ 1945.422599][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1945.427710][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1945.432384][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1945.437577][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1945.442773][ T4280] kobject_add+0x160/0x230 [ 1945.447188][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1945.451867][ T4280] ? klist_children_get+0x50/0x50 [ 1945.456885][ T4280] ? get_device_parent+0x121/0x3f0 [ 1945.462001][ T4280] device_add+0x483/0xfb0 [ 1945.466330][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1945.471179][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1945.476114][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1945.481484][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1945.486853][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1945.493087][ T4280] ? bt_info+0x180/0x180 [ 1945.497324][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1945.502960][ T4280] ? skb_pull_data+0xf7/0x200 [ 1945.507655][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1945.513204][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1945.519270][ T4280] hci_event_packet+0x7b6/0x1280 [ 1945.524210][ T4280] ? bis_list+0x280/0x280 [ 1945.528534][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1945.534429][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1945.539578][ T4280] ? bt_warn+0x30/0x180 [ 1945.543734][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1945.548928][ T4280] hci_rx_work+0x3eb/0xd40 [ 1945.553337][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1945.558184][ T4280] ? process_one_work+0x7b0/0x1160 [ 1945.563291][ T4280] process_one_work+0x8a2/0x1160 [ 1945.568235][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1945.573863][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1945.578881][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1945.584423][ T4280] ? kthread_data+0x4b/0xc0 [ 1945.588930][ T4280] worker_thread+0xaa2/0x1270 [ 1945.593614][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1945.598641][ T4280] kthread+0x29d/0x330 [ 1945.602701][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1945.607720][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1945.612303][ T4280] ret_from_fork+0x1f/0x30 [ 1945.616728][ T4280] [ 1945.619827][ T4280] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1945.633077][ T4280] Bluetooth: hci2: failed to register connection device [ 1946.799527][ T4280] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1946.808126][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 1946.817740][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1946.825303][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1946.835372][ T4280] Workqueue: hci2 hci_rx_work [ 1946.840072][ T4280] Call Trace: [ 1946.843363][ T4280] [ 1946.846306][ T4280] dump_stack_lvl+0x188/0x24e [ 1946.851013][ T4280] ? show_regs_print_info+0x12/0x12 [ 1946.856226][ T4280] ? load_image+0x400/0x400 [ 1946.860741][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1946.865857][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1946.870549][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1946.875752][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1946.880952][ T4280] kobject_add+0x160/0x230 [ 1946.885366][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1946.890056][ T4280] ? klist_children_get+0x50/0x50 [ 1946.895074][ T4280] ? get_device_parent+0x121/0x3f0 [ 1946.900198][ T4280] device_add+0x483/0xfb0 [ 1946.904529][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1946.909387][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1946.914328][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1946.919700][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1946.925070][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1946.931315][ T4280] ? bt_info+0x180/0x180 [ 1946.935559][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1946.941193][ T4280] ? skb_pull_data+0xf7/0x200 [ 1946.945876][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1946.951421][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1946.957484][ T4280] hci_event_packet+0x7b6/0x1280 [ 1946.962426][ T4280] ? bis_list+0x280/0x280 [ 1946.966749][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1946.972639][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1946.977746][ T4280] ? bt_warn+0x30/0x180 [ 1946.981898][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1946.987094][ T4280] hci_rx_work+0x3eb/0xd40 [ 1946.991502][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1946.996351][ T4280] ? process_one_work+0x7b0/0x1160 [ 1947.001463][ T4280] process_one_work+0x8a2/0x1160 [ 1947.006407][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1947.012072][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 1947.017100][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1947.022123][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1947.027658][ T4280] ? kthread_data+0x4b/0xc0 [ 1947.032167][ T4280] worker_thread+0xaa2/0x1270 [ 1947.036852][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1947.041883][ T4280] kthread+0x29d/0x330 [ 1947.045942][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1947.050959][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1947.055546][ T4280] ret_from_fork+0x1f/0x30 [ 1947.059968][ T4280] [ 1947.063962][ T4280] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1947.077377][ T4280] Bluetooth: hci2: failed to register connection device [ 1947.680908][ T4280] Bluetooth: hci2: command 0x2016 tx timeout [ 1948.456955][T28617] netlink: 'syz.5.8622': attribute type 10 has an invalid length. [ 1948.482341][T28615] delete_channel: no stack [ 1948.584493][T28622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8623'. [ 1948.596458][T28622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8623'. [ 1948.614890][T28622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8623'. [ 1949.761381][ T4280] Bluetooth: hci2: command 0x2016 tx timeout [ 1951.651353][T27044] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1951.659022][T27044] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 1951.668977][T27044] CPU: 0 PID: 27044 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1951.676627][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1951.686686][T27044] Workqueue: hci2 hci_rx_work [ 1951.691374][T27044] Call Trace: [ 1951.694650][T27044] [ 1951.697574][T27044] dump_stack_lvl+0x188/0x24e [ 1951.702258][T27044] ? show_regs_print_info+0x12/0x12 [ 1951.707456][T27044] ? load_image+0x400/0x400 [ 1951.711964][T27044] sysfs_create_dir_ns+0x26a/0x290 [ 1951.717078][T27044] ? sysfs_warn_dup+0xa0/0xa0 [ 1951.721759][T27044] ? do_raw_spin_unlock+0x11d/0x230 [ 1951.726955][T27044] kobject_add_internal+0x61c/0xcc0 [ 1951.732156][T27044] kobject_add+0x160/0x230 [ 1951.736568][T27044] ? kobject_init+0x1d0/0x1d0 [ 1951.741250][T27044] ? klist_children_get+0x50/0x50 [ 1951.746267][T27044] ? get_device_parent+0x121/0x3f0 [ 1951.751384][T27044] device_add+0x483/0xfb0 [ 1951.755716][T27044] ? kmem_cache_free+0xf7/0x290 [ 1951.760568][T27044] hci_conn_add_sysfs+0xd1/0x1e0 [ 1951.765516][T27044] le_conn_complete_evt+0x105f/0x1670 [ 1951.770889][T27044] ? le_conn_complete_evt+0xe6/0x1670 [ 1951.776262][T27044] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1951.782498][T27044] ? bt_info+0x180/0x180 [ 1951.786740][T27044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1951.792378][T27044] ? skb_pull_data+0xf7/0x200 [ 1951.797060][T27044] hci_le_conn_complete_evt+0x183/0x440 [ 1951.802612][T27044] ? hci_remote_host_features_evt+0x270/0x270 [ 1951.808688][T27044] hci_event_packet+0x7b6/0x1280 [ 1951.813633][T27044] ? bis_list+0x280/0x280 [ 1951.817959][T27044] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1951.823852][T27044] ? kcov_remote_start+0x4c7/0x7e0 [ 1951.828962][T27044] ? bt_warn+0x30/0x180 [ 1951.833126][T27044] ? hci_send_to_monitor+0x9c/0x4a0 [ 1951.838322][T27044] hci_rx_work+0x3eb/0xd40 [ 1951.842736][T27044] ? _raw_spin_unlock+0x40/0x40 [ 1951.847585][T27044] ? process_one_work+0x7b0/0x1160 [ 1951.852700][T27044] process_one_work+0x8a2/0x1160 [ 1951.857647][T27044] ? worker_detach_from_pool+0x240/0x240 [ 1951.863283][T27044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1951.868302][T27044] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1951.873842][T27044] ? kthread_data+0x4b/0xc0 [ 1951.878361][T27044] worker_thread+0xaa2/0x1270 [ 1951.883049][T27044] ? __kthread_parkme+0x162/0x1c0 [ 1951.888081][T27044] kthread+0x29d/0x330 [ 1951.892146][T27044] ? worker_clr_flags+0x1a0/0x1a0 [ 1951.897166][T27044] ? kthread_blkcg+0xd0/0xd0 [ 1951.901749][T27044] ret_from_fork+0x1f/0x30 [ 1951.906175][T27044] [ 1951.917521][T27044] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1951.930819][T27044] Bluetooth: hci2: failed to register connection device [ 1952.059283][T28642] FAULT_INJECTION: forcing a failure. [ 1952.059283][T28642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1952.071078][T28643] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8627'. [ 1952.088770][T28642] CPU: 1 PID: 28642 Comm: syz.5.8630 Not tainted syzkaller #0 [ 1952.096233][T28642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1952.106285][T28642] Call Trace: [ 1952.109563][T28642] [ 1952.112492][T28642] dump_stack_lvl+0x188/0x24e [ 1952.117205][T28642] ? show_regs_print_info+0x12/0x12 [ 1952.122404][T28642] ? load_image+0x400/0x400 [ 1952.126908][T28642] ? __lock_acquire+0x7d10/0x7d10 [ 1952.131935][T28642] ? snprintf+0xe5/0x140 [ 1952.136183][T28642] should_fail_ex+0x399/0x4d0 [ 1952.140867][T28642] _copy_to_user+0x2c/0x130 [ 1952.145372][T28642] simple_read_from_buffer+0xe3/0x150 [ 1952.150753][T28642] proc_fail_nth_read+0x1a6/0x220 [ 1952.155797][T28642] ? proc_fault_inject_write+0x310/0x310 [ 1952.161435][T28642] ? fsnotify_perm+0x248/0x550 [ 1952.166219][T28642] ? proc_fault_inject_write+0x310/0x310 [ 1952.171857][T28642] vfs_read+0x2de/0xa00 [ 1952.176019][T28642] ? kernel_read+0x1e0/0x1e0 [ 1952.180613][T28642] ? __fget_files+0x28/0x4b0 [ 1952.185204][T28642] ? __fget_files+0x28/0x4b0 [ 1952.189798][T28642] ? __fget_files+0x43d/0x4b0 [ 1952.194485][T28642] ? __fdget_pos+0x2ae/0x360 [ 1952.199079][T28642] ? ksys_read+0x71/0x250 [ 1952.203412][T28642] ksys_read+0x14c/0x250 [ 1952.207657][T28642] ? vfs_write+0xa30/0xa30 [ 1952.212081][T28642] ? lockdep_hardirqs_on+0x94/0x140 [ 1952.217278][T28642] do_syscall_64+0x4c/0xa0 [ 1952.221694][T28642] ? clear_bhb_loop+0x60/0xb0 [ 1952.226368][T28642] ? clear_bhb_loop+0x60/0xb0 [ 1952.231047][T28642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1952.236941][T28642] RIP: 0033:0x7f0f8875c84e [ 1952.241355][T28642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1952.260965][T28642] RSP: 002b:00007f0f896a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1952.269376][T28642] RAX: ffffffffffffffda RBX: 00007f0f896a86c0 RCX: 00007f0f8875c84e [ 1952.277345][T28642] RDX: 000000000000000f RSI: 00007f0f896a80a0 RDI: 0000000000000004 [ 1952.285312][T28642] RBP: 00007f0f896a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1952.293341][T28642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1952.301308][T28642] R13: 00007f0f88a16128 R14: 00007f0f88a16090 R15: 00007ffc7febf838 [ 1952.309290][T28642] [ 1952.478695][T28645] netlink: 'syz.0.8628': attribute type 10 has an invalid length. [ 1954.000625][T27044] Bluetooth: hci2: command 0x2016 tx timeout [ 1955.654751][ T4280] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1955.662936][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:128' [ 1955.672766][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1955.680340][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1955.690424][ T4280] Workqueue: hci1 hci_rx_work [ 1955.695133][ T4280] Call Trace: [ 1955.698430][ T4280] [ 1955.701380][ T4280] dump_stack_lvl+0x188/0x24e [ 1955.706093][ T4280] ? show_regs_print_info+0x12/0x12 [ 1955.711329][ T4280] ? load_image+0x400/0x400 [ 1955.715877][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1955.721032][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1955.725755][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1955.730982][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1955.736215][ T4280] kobject_add+0x160/0x230 [ 1955.740659][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1955.745371][ T4280] ? klist_children_get+0x50/0x50 [ 1955.750414][ T4280] ? get_device_parent+0x121/0x3f0 [ 1955.755552][ T4280] device_add+0x483/0xfb0 [ 1955.759906][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1955.764782][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1955.769748][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1955.775148][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1955.780545][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1955.786874][ T4280] ? bt_info+0x180/0x180 [ 1955.791143][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1955.796799][ T4280] ? skb_pull_data+0xf7/0x200 [ 1955.801501][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1955.807070][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1955.813155][ T4280] hci_event_packet+0x7b6/0x1280 [ 1955.818124][ T4280] ? bis_list+0x280/0x280 [ 1955.822471][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1955.828381][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1955.833506][ T4280] ? bt_warn+0x30/0x180 [ 1955.837680][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1955.842899][ T4280] hci_rx_work+0x3eb/0xd40 [ 1955.847331][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1955.852205][ T4280] ? process_one_work+0x7b0/0x1160 [ 1955.857332][ T4280] process_one_work+0x8a2/0x1160 [ 1955.862301][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1955.867958][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 1955.873004][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1955.878041][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1955.883606][ T4280] ? kthread_data+0x4b/0xc0 [ 1955.888398][ T4280] worker_thread+0xaa2/0x1270 [ 1955.893115][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1955.898168][ T4280] kthread+0x29d/0x330 [ 1955.902243][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1955.907286][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1955.911890][ T4280] ret_from_fork+0x1f/0x30 [ 1955.916339][ T4280] [ 1955.920319][ T4280] kobject_add_internal failed for hci1:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1955.933738][ T4280] Bluetooth: hci1: failed to register connection device [ 1956.196902][T28671] netlink: 'syz.1.8636': attribute type 10 has an invalid length. [ 1956.212073][T28668] delete_channel: no stack [ 1956.331030][T28682] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8639'. [ 1956.340081][T28682] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8639'. [ 1956.393924][T28684] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8639'. [ 1956.442100][ T4280] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1956.449741][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:128' [ 1956.459545][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1956.467116][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1956.477192][ T4280] Workqueue: hci1 hci_rx_work [ 1956.481900][ T4280] Call Trace: [ 1956.485196][ T4280] [ 1956.488141][ T4280] dump_stack_lvl+0x188/0x24e [ 1956.492852][ T4280] ? show_regs_print_info+0x12/0x12 [ 1956.498083][ T4280] ? load_image+0x400/0x400 [ 1956.502625][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1956.507769][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1956.512480][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1956.517715][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1956.522948][ T4280] kobject_add+0x160/0x230 [ 1956.527417][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1956.532143][ T4280] ? klist_children_get+0x50/0x50 [ 1956.537189][ T4280] ? get_device_parent+0x121/0x3f0 [ 1956.542334][ T4280] device_add+0x483/0xfb0 [ 1956.546696][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1956.551583][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1956.556552][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1956.561962][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1956.567367][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1956.573665][ T4280] ? bt_info+0x180/0x180 [ 1956.577938][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1956.583613][ T4280] ? skb_pull_data+0xf7/0x200 [ 1956.588327][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1956.593905][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1956.599997][ T4280] hci_event_packet+0x7b6/0x1280 [ 1956.604986][ T4280] ? bis_list+0x280/0x280 [ 1956.609343][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1956.615265][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1956.620401][ T4280] ? bt_warn+0x30/0x180 [ 1956.624589][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1956.629819][ T4280] hci_rx_work+0x3eb/0xd40 [ 1956.634265][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1956.639154][ T4280] ? process_one_work+0x7b0/0x1160 [ 1956.644294][ T4280] process_one_work+0x8a2/0x1160 [ 1956.649276][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1956.654941][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1956.659988][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1956.665555][ T4280] ? kthread_data+0x4b/0xc0 [ 1956.670084][ T4280] worker_thread+0xaa2/0x1270 [ 1956.674789][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1956.679837][ T4280] kthread+0x29d/0x330 [ 1956.683893][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1956.688907][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1956.693508][ T4280] ret_from_fork+0x1f/0x30 [ 1956.697955][ T4280] [ 1956.706175][ T4280] kobject_add_internal failed for hci1:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1956.720034][ T4280] Bluetooth: hci1: failed to register connection device [ 1957.182720][T28696] netlink: 'syz.3.8644': attribute type 10 has an invalid length. [ 1957.997505][ T4280] Bluetooth: hci1: command 0x2016 tx timeout [ 1960.090892][ T4280] Bluetooth: hci1: command 0x2016 tx timeout [ 1960.214332][T28712] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8648'. [ 1960.495907][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1960.503854][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 1960.513648][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1960.521239][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1960.531335][ T4280] Workqueue: hci0 hci_rx_work [ 1960.536069][ T4280] Call Trace: [ 1960.539379][ T4280] [ 1960.539464][T28718] netlink: 'syz.5.8651': attribute type 10 has an invalid length. [ 1960.542325][ T4280] dump_stack_lvl+0x188/0x24e [ 1960.542374][ T4280] ? show_regs_print_info+0x12/0x12 [ 1960.542410][ T4280] ? load_image+0x400/0x400 [ 1960.542481][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1960.542526][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1960.542569][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1960.542612][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1960.542665][ T4280] kobject_add+0x160/0x230 [ 1960.542711][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1960.542769][ T4280] ? klist_children_get+0x50/0x50 [ 1960.542797][ T4280] ? get_device_parent+0x121/0x3f0 [ 1960.604484][ T4280] device_add+0x483/0xfb0 [ 1960.608853][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1960.613742][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1960.618705][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1960.624108][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1960.629528][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1960.635792][ T4280] ? bt_info+0x180/0x180 [ 1960.640063][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1960.645726][ T4280] ? skb_pull_data+0xf7/0x200 [ 1960.650438][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1960.656012][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1960.662109][ T4280] hci_event_packet+0x7b6/0x1280 [ 1960.667101][ T4280] ? bis_list+0x280/0x280 [ 1960.671447][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1960.677362][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1960.682498][ T4280] ? bt_warn+0x30/0x180 [ 1960.686679][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1960.691913][ T4280] hci_rx_work+0x3eb/0xd40 [ 1960.696351][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1960.701238][ T4280] ? process_one_work+0x7b0/0x1160 [ 1960.706370][ T4280] process_one_work+0x8a2/0x1160 [ 1960.711357][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1960.717004][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 1960.722141][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1960.727180][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1960.732741][ T4280] ? kthread_data+0x4b/0xc0 [ 1960.737278][ T4280] worker_thread+0xaa2/0x1270 [ 1960.742018][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1960.747084][ T4280] kthread+0x29d/0x330 [ 1960.751161][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1960.756202][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1960.760825][ T4280] ret_from_fork+0x1f/0x30 [ 1960.765307][ T4280] [ 1960.770279][ T4280] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1960.786803][ T4280] Bluetooth: hci0: failed to register connection device [ 1960.812688][T28717] delete_channel: no stack [ 1961.077684][ T4280] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1961.079860][T28735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8656'. [ 1961.086300][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:128' [ 1961.099924][T28735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8656'. [ 1961.104350][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1961.120204][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1961.130275][ T4280] Workqueue: hci5 hci_rx_work [ 1961.134984][ T4280] Call Trace: [ 1961.138292][ T4280] [ 1961.141238][ T4280] dump_stack_lvl+0x188/0x24e [ 1961.145939][ T4280] ? show_regs_print_info+0x12/0x12 [ 1961.151147][ T4280] ? load_image+0x400/0x400 [ 1961.155661][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1961.160781][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1961.165464][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1961.170663][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1961.175867][ T4280] kobject_add+0x160/0x230 [ 1961.180286][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1961.184970][ T4280] ? klist_children_get+0x50/0x50 [ 1961.190004][ T4280] ? get_device_parent+0x121/0x3f0 [ 1961.195123][ T4280] device_add+0x483/0xfb0 [ 1961.199459][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1961.204317][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1961.209257][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1961.214632][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1961.220007][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1961.226248][ T4280] ? bt_info+0x180/0x180 [ 1961.230492][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1961.236129][ T4280] ? skb_pull_data+0xf7/0x200 [ 1961.240820][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1961.246368][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1961.252483][ T4280] hci_event_packet+0x7b6/0x1280 [ 1961.257431][ T4280] ? bis_list+0x280/0x280 [ 1961.261758][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1961.267651][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1961.272761][ T4280] ? bt_warn+0x30/0x180 [ 1961.276917][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1961.282117][ T4280] hci_rx_work+0x3eb/0xd40 [ 1961.286531][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1961.291388][ T4280] ? process_one_work+0x7b0/0x1160 [ 1961.296498][ T4280] process_one_work+0x8a2/0x1160 [ 1961.301447][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1961.307075][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 1961.312100][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1961.317119][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1961.322661][ T4280] ? kthread_data+0x4b/0xc0 [ 1961.327190][ T4280] worker_thread+0xaa2/0x1270 [ 1961.331888][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1961.336917][ T4280] kthread+0x29d/0x330 [ 1961.340985][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1961.346007][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1961.350599][ T4280] ret_from_fork+0x1f/0x30 [ 1961.355037][ T4280] [ 1961.359368][ T4280] kobject_add_internal failed for hci5:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1961.372927][ T4280] Bluetooth: hci5: failed to register connection device [ 1961.385625][T28736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8656'. [ 1961.809349][T28748] netlink: 'syz.5.8660': attribute type 10 has an invalid length. [ 1962.171929][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1962.179645][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 1962.189307][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1962.196883][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1962.206968][ T4280] Workqueue: hci0 hci_rx_work [ 1962.211677][ T4280] Call Trace: [ 1962.214964][ T4280] [ 1962.217909][ T4280] dump_stack_lvl+0x188/0x24e [ 1962.222619][ T4280] ? show_regs_print_info+0x12/0x12 [ 1962.227852][ T4280] ? load_image+0x400/0x400 [ 1962.232398][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1962.237539][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1962.242257][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1962.247482][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1962.252711][ T4280] kobject_add+0x160/0x230 [ 1962.257159][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1962.261873][ T4280] ? klist_children_get+0x50/0x50 [ 1962.266921][ T4280] ? get_device_parent+0x121/0x3f0 [ 1962.272066][ T4280] device_add+0x483/0xfb0 [ 1962.276433][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1962.281313][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1962.286277][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1962.291670][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1962.297052][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1962.303296][ T4280] ? bt_info+0x180/0x180 [ 1962.307540][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1962.313179][ T4280] ? skb_pull_data+0xf7/0x200 [ 1962.317877][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1962.323427][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1962.329498][ T4280] hci_event_packet+0x7b6/0x1280 [ 1962.334448][ T4280] ? bis_list+0x280/0x280 [ 1962.338777][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1962.344686][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1962.349804][ T4280] ? bt_warn+0x30/0x180 [ 1962.353960][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1962.359164][ T4280] hci_rx_work+0x3eb/0xd40 [ 1962.363581][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1962.368434][ T4280] ? process_one_work+0x7b0/0x1160 [ 1962.373549][ T4280] process_one_work+0x8a2/0x1160 [ 1962.378494][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1962.384125][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 1962.389511][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1962.394544][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1962.400088][ T4280] ? kthread_data+0x4b/0xc0 [ 1962.404607][ T4280] worker_thread+0xaa2/0x1270 [ 1962.409294][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1962.414347][ T4280] kthread+0x29d/0x330 [ 1962.418415][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1962.423444][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1962.428033][ T4280] ret_from_fork+0x1f/0x30 [ 1962.432461][ T4280] [ 1962.436479][ T4280] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1962.449893][ T4280] Bluetooth: hci0: failed to register connection device [ 1962.880808][ T4280] Bluetooth: hci0: command 0x2016 tx timeout [ 1963.431810][ T4280] Bluetooth: hci5: command 0x2016 tx timeout [ 1964.950868][T27044] Bluetooth: hci0: command 0x2016 tx timeout [ 1965.028900][T27044] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1965.037404][T27044] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 1965.050934][T27044] CPU: 0 PID: 27044 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1965.058595][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1965.068682][T27044] Workqueue: hci3 hci_rx_work [ 1965.073391][T27044] Call Trace: [ 1965.076697][T27044] [ 1965.079646][T27044] dump_stack_lvl+0x188/0x24e [ 1965.084354][T27044] ? show_regs_print_info+0x12/0x12 [ 1965.089583][T27044] ? load_image+0x400/0x400 [ 1965.093983][T28778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1965.094116][T27044] sysfs_create_dir_ns+0x26a/0x290 [ 1965.108175][T27044] ? sysfs_warn_dup+0xa0/0xa0 [ 1965.112876][T27044] ? do_raw_spin_unlock+0x11d/0x230 [ 1965.118081][T27044] kobject_add_internal+0x61c/0xcc0 [ 1965.123279][T27044] kobject_add+0x160/0x230 [ 1965.127692][T27044] ? kobject_init+0x1d0/0x1d0 [ 1965.132377][T27044] ? klist_children_get+0x50/0x50 [ 1965.137410][T27044] ? get_device_parent+0x121/0x3f0 [ 1965.142530][T27044] device_add+0x483/0xfb0 [ 1965.146861][T27044] ? kmem_cache_free+0xf7/0x290 [ 1965.151713][T27044] hci_conn_add_sysfs+0xd1/0x1e0 [ 1965.156649][T27044] le_conn_complete_evt+0x105f/0x1670 [ 1965.162022][T27044] ? le_conn_complete_evt+0xe6/0x1670 [ 1965.167395][T27044] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1965.173633][T27044] ? bt_info+0x180/0x180 [ 1965.177872][T27044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1965.183512][T27044] ? skb_pull_data+0xf7/0x200 [ 1965.188553][T27044] hci_le_conn_complete_evt+0x183/0x440 [ 1965.194104][T27044] ? hci_remote_host_features_evt+0x270/0x270 [ 1965.200172][T27044] hci_event_packet+0x7b6/0x1280 [ 1965.205120][T27044] ? bis_list+0x280/0x280 [ 1965.209447][T27044] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1965.215333][T27044] ? kcov_remote_start+0x4c7/0x7e0 [ 1965.220437][T27044] ? bt_warn+0x30/0x180 [ 1965.224607][T27044] ? hci_send_to_monitor+0x9c/0x4a0 [ 1965.229818][T27044] hci_rx_work+0x3eb/0xd40 [ 1965.234253][T27044] ? _raw_spin_unlock+0x40/0x40 [ 1965.239116][T27044] ? process_one_work+0x7b0/0x1160 [ 1965.244231][T27044] process_one_work+0x8a2/0x1160 [ 1965.249176][T27044] ? worker_detach_from_pool+0x240/0x240 [ 1965.254812][T27044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1965.259830][T27044] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1965.265372][T27044] ? kthread_data+0x4b/0xc0 [ 1965.269883][T27044] worker_thread+0xaa2/0x1270 [ 1965.274569][T27044] ? __kthread_parkme+0x162/0x1c0 [ 1965.279599][T27044] kthread+0x29d/0x330 [ 1965.283660][T27044] ? worker_clr_flags+0x1a0/0x1a0 [ 1965.288866][T27044] ? kthread_blkcg+0xd0/0xd0 [ 1965.293450][T27044] ret_from_fork+0x1f/0x30 [ 1965.297892][T27044] [ 1965.302517][T27044] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1965.330640][T27044] Bluetooth: hci3: failed to register connection device [ 1965.332445][T28778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1965.361110][T28780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1965.528156][T28781] netlink: 'syz.0.8670': attribute type 10 has an invalid length. [ 1965.613915][T28779] delete_channel: no stack [ 1965.935284][T28795] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8674'. [ 1966.501657][T28808] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8681'. [ 1966.520821][T28808] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8681'. [ 1966.532980][T28808] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8681'. [ 1966.785887][T28811] device syzkaller0 entered promiscuous mode [ 1966.883022][ T4280] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1966.893931][T28819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8685'. [ 1967.355030][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 1968.606875][T28819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8685'. [ 1968.616048][T28822] netlink: 'syz.3.8686': attribute type 2 has an invalid length. [ 1968.629194][T28822] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8686'. [ 1968.670423][T28836] nr0: port 1(hsr0) entered blocking state [ 1968.687818][T28836] nr0: port 1(hsr0) entered disabled state [ 1968.721794][T28836] device hsr0 entered promiscuous mode [ 1969.412433][T28874] netlink: 'syz.1.8709': attribute type 2 has an invalid length. [ 1969.450928][T28874] netlink: 'syz.1.8709': attribute type 8 has an invalid length. [ 1969.458679][T28874] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8709'. [ 1971.027627][T28959] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.8748'. [ 1974.484438][T28989] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8761'. [ 1975.842819][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.849159][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.570051][T28989] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8761'. [ 1976.976154][T29015] netlink: 'syz.2.8772': attribute type 25 has an invalid length. [ 1977.369668][T29031] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8778'. [ 1977.413609][T29031] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8778'. [ 1977.446309][T29036] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8778'. [ 1977.528293][T29031] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8778'. [ 1977.547749][T29031] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8778'. [ 1981.342030][T29064] netlink: 'syz.5.8793': attribute type 2 has an invalid length. [ 1981.349957][T29064] netlink: 'syz.5.8793': attribute type 8 has an invalid length. [ 1981.435752][T29064] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8793'. [ 1983.468573][T29110] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8811'. [ 1983.549630][T29110] netlink: 'syz.0.8811': attribute type 4 has an invalid length. [ 1983.583589][T29110] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8811'. [ 1983.984342][T29125] netlink: 'syz.1.8817': attribute type 29 has an invalid length. [ 1984.031666][T29125] netlink: 'syz.1.8817': attribute type 29 has an invalid length. [ 1984.081578][T29130] netlink: 'syz.1.8817': attribute type 29 has an invalid length. [ 1984.204227][T29133] netlink: 'syz.0.8820': attribute type 2 has an invalid length. [ 1984.230388][T29133] netlink: 'syz.0.8820': attribute type 1 has an invalid length. [ 1984.250691][T29133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1985.549602][T29169] netlink: 'syz.1.8834': attribute type 2 has an invalid length. [ 1985.574519][T29169] netlink: 'syz.1.8834': attribute type 1 has an invalid length. [ 1985.586027][T29169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1987.176815][T29205] netlink: 'syz.0.8845': attribute type 10 has an invalid length. [ 1987.217398][T29205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8845'. [ 1987.257130][T29205] device batadv0 entered promiscuous mode [ 1987.294938][T29205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 1987.333042][T29205] bridge0: port 4(batadv0) entered blocking state [ 1987.375480][T29205] bridge0: port 4(batadv0) entered disabled state [ 1987.417434][T29205] bridge0: port 4(batadv0) entered blocking state [ 1987.423968][T29205] bridge0: port 4(batadv0) entered forwarding state [ 1987.436633][T23122] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1987.446321][T23122] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1987.480898][T29205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 1987.599197][T29215] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 1987.645992][T29215] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 1988.063312][T29223] netlink: 'syz.0.8858': attribute type 2 has an invalid length. [ 1988.090710][T29223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1988.558620][T29245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8866'. [ 1988.670730][T29248] bridge0: port 5(veth1_virt_wifi) entered blocking state [ 1988.684391][T29248] bridge0: port 5(veth1_virt_wifi) entered disabled state [ 1988.881032][T29253] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8870'. [ 1990.542925][T29281] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8880'. [ 1990.585639][T29282] validate_nla: 1 callbacks suppressed [ 1990.585654][T29282] netlink: 'syz.3.8880': attribute type 4 has an invalid length. [ 1990.600908][T29282] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8880'. [ 1990.672358][T29282] wlan1: mtu less than device minimum [ 1991.942029][T27044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1991.955034][T27044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1991.965468][T27044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1991.995712][T27044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1992.003533][T27044] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1992.011151][T27044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1992.744624][T29310] chnl_net:caif_netlink_parms(): no params data found [ 1993.079268][T29310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.209047][T29310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.240145][T29310] device bridge_slave_0 entered promiscuous mode [ 1993.296762][T29310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.307506][T29310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.340065][T29310] device bridge_slave_1 entered promiscuous mode [ 1993.488275][T29310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1993.546482][T29310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1993.682228][T29310] team0: Port device team_slave_0 added [ 1993.712668][T29310] team0: Port device team_slave_1 added [ 1993.744182][T29354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1993.779355][T29310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1993.797761][T29310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1993.870028][T29310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1993.895106][ T4280] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1993.902867][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 1993.908882][T29310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1993.914885][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1993.926187][T29310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1993.926850][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1993.962790][ T4280] Workqueue: hci2 hci_rx_work [ 1993.967492][ T4280] Call Trace: [ 1993.970782][ T4280] [ 1993.973726][ T4280] dump_stack_lvl+0x188/0x24e [ 1993.978452][ T4280] ? show_regs_print_info+0x12/0x12 [ 1993.983678][ T4280] ? load_image+0x400/0x400 [ 1993.988211][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1993.993350][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1993.998053][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1994.003272][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1994.008497][ T4280] kobject_add+0x160/0x230 [ 1994.012935][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1994.017655][ T4280] ? klist_children_get+0x50/0x50 [ 1994.022698][ T4280] ? get_device_parent+0x121/0x3f0 [ 1994.027841][ T4280] device_add+0x483/0xfb0 [ 1994.032206][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1994.037092][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1994.042054][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 1994.047438][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 1994.052821][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1994.059067][ T4280] ? bt_info+0x180/0x180 [ 1994.063311][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1994.068948][ T4280] ? skb_pull_data+0xf7/0x200 [ 1994.073633][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1994.079187][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1994.085254][ T4280] hci_event_packet+0x7b6/0x1280 [ 1994.090212][ T4280] ? bis_list+0x280/0x280 [ 1994.094537][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1994.100426][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1994.105535][ T4280] ? bt_warn+0x30/0x180 [ 1994.109693][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1994.114890][ T4280] hci_rx_work+0x3eb/0xd40 [ 1994.119303][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1994.124154][ T4280] ? process_one_work+0x7b0/0x1160 [ 1994.129265][ T4280] process_one_work+0x8a2/0x1160 [ 1994.134215][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1994.139848][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1994.144866][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1994.150408][ T4280] ? kthread_data+0x4b/0xc0 [ 1994.154919][ T4280] worker_thread+0xaa2/0x1270 [ 1994.159610][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 1994.164664][ T4280] kthread+0x29d/0x330 [ 1994.168724][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1994.173754][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1994.178346][ T4280] ret_from_fork+0x1f/0x30 [ 1994.182774][ T4280] [ 1994.187038][T13947] Bluetooth: hci4: command 0x0409 tx timeout [ 1994.195620][ T4280] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 1994.205153][T29310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1994.208868][ T4280] Bluetooth: hci2: failed to register connection device [ 1994.253453][T29354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1994.317049][T29310] device hsr_slave_0 entered promiscuous mode [ 1994.324115][T29310] device hsr_slave_1 entered promiscuous mode [ 1994.330800][T29310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1994.338429][T29310] Cannot create hsr debugfs directory [ 1994.642305][T29310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1994.689860][T29366] netlink: 'syz.0.8912': attribute type 2 has an invalid length. [ 1994.761586][T23132] tipc: Left network mode [ 1994.807101][T29310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.065528][T29310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.236055][T29310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.271199][T29379] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8917'. [ 1995.325729][T29379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.549343][T29384] netlink: 'syz.1.8920': attribute type 10 has an invalid length. [ 1995.914715][T29310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1995.974836][T29310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1996.120527][T29310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1996.148983][T29397] device hsr0 entered promiscuous mode [ 1996.229014][T29310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1996.242172][ T4280] Bluetooth: hci2: command 0x2016 tx timeout [ 1996.248197][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 1996.515557][T29310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1996.605434][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1996.661347][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1996.699154][T29310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1997.068243][T23132] bond0: (slave wlan1): Releasing backup interface [ 1997.129938][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1997.157982][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1997.222147][T23122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1997.229294][T23122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1997.371112][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1997.429638][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1997.489006][T23122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1997.496151][T23122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1997.570965][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1997.616582][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1997.637537][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1997.677707][T29435] netlink: 'syz.1.8939': attribute type 10 has an invalid length. [ 1997.696262][T29435] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8939'. [ 1997.747327][T29435] device batadv0 entered promiscuous mode [ 1997.798480][T29435] bridge0: port 3(batadv0) entered blocking state [ 1997.805472][T29435] bridge0: port 3(batadv0) entered disabled state [ 1997.837868][T29435] bridge0: port 3(batadv0) entered blocking state [ 1997.844396][T29435] bridge0: port 3(batadv0) entered forwarding state [ 1997.900968][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1997.949255][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1998.208275][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1998.262091][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1998.271385][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1998.309694][T23138] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1998.319176][T23138] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1998.328466][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 1998.354096][T23132] device hsr_slave_0 left promiscuous mode [ 1998.361592][T23132] device hsr_slave_1 left promiscuous mode [ 1998.379426][T23132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1998.419785][T23132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1998.444048][T23132] device bridge_slave_1 left promiscuous mode [ 1998.450267][T23132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1998.495107][T23132] device bridge_slave_0 left promiscuous mode [ 1998.510839][T23132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1998.550194][T23132] device veth1_macvtap left promiscuous mode [ 1998.560098][T23132] device veth0_macvtap left promiscuous mode [ 1999.002733][T23132] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1999.177879][T23132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1999.249419][T23132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1999.646708][T23132] bond0 (unregistering): Released all slaves [ 1999.778255][T29451] netlink: 'syz.5.8944': attribute type 10 has an invalid length. [ 1999.794994][T29451] team0: Device ipvlan1 failed to register rx_handler [ 1999.824071][T29455] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.8947'. [ 1999.896088][T29310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1999.925646][T29310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1999.989889][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2000.014423][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2000.036185][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2000.064658][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2000.085613][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2000.391007][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 2000.635494][T29497] netlink: 'syz.3.8963': attribute type 10 has an invalid length. [ 2000.691745][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2000.702842][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2000.745464][T29310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2000.808767][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2000.825917][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2000.854569][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2000.876863][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2000.886475][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2000.899757][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2000.910240][T29310] device veth0_vlan entered promiscuous mode [ 2000.925353][T29310] device veth1_vlan entered promiscuous mode [ 2000.954210][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2000.963906][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2000.975214][T29508] netlink: 'syz.1.8968': attribute type 10 has an invalid length. [ 2000.988232][T29310] device veth0_macvtap entered promiscuous mode [ 2001.005311][T29310] device veth1_macvtap entered promiscuous mode [ 2001.067444][T29310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2001.081624][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2001.090216][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2001.118114][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2001.131743][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2001.144491][T29310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2001.159967][T29310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.174713][T29310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2001.200673][T29310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.211972][T29310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2001.223460][T29310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.233525][T29310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2001.295814][T29310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.312983][T29310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2001.324254][T29512] device hsr0 entered promiscuous mode [ 2001.344827][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2001.385306][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2001.405486][T29310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.414934][T29310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.424329][T29310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.434474][T29310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.694771][T23110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2001.710111][T23110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.724386][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2001.776549][T23110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2001.796472][T23110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.809237][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2003.629571][T29574] netlink: 'syz.0.8995': attribute type 10 has an invalid length. [ 2003.678011][T29574] bridge0: port 5(macsec0) entered blocking state [ 2003.711138][T29574] bridge0: port 5(macsec0) entered disabled state [ 2003.740795][T29574] device macsec0 entered promiscuous mode [ 2003.747419][T29574] bridge0: port 5(macsec0) entered blocking state [ 2003.753974][T29574] bridge0: port 5(macsec0) entered listening state [ 2004.801336][T29602] bridge0: port 3(ip6gretap0) entered blocking state [ 2004.814569][T29602] bridge0: port 3(ip6gretap0) entered disabled state [ 2004.864850][T29602] device ip6gretap0 entered promiscuous mode [ 2004.894978][T29602] bridge0: port 3(ip6gretap0) entered blocking state [ 2004.902419][T29602] bridge0: port 3(ip6gretap0) entered forwarding state [ 2005.831925][ C0] bridge0: port 5(macsec0) entered learning state [ 2007.010453][T29659] device hsr0 entered promiscuous mode [ 2007.459491][T29675] netlink: 'syz.5.9035': attribute type 10 has an invalid length. [ 2007.492093][T29675] bridge0: port 3(macsec0) entered blocking state [ 2007.537889][T29675] bridge0: port 3(macsec0) entered disabled state [ 2007.598978][T29675] device macsec0 entered promiscuous mode [ 2007.635097][T29675] bridge0: port 3(macsec0) entered blocking state [ 2007.641832][T29675] bridge0: port 3(macsec0) entered forwarding state [ 2007.912346][ C0] bridge0: port 5(macsec0) entered forwarding state [ 2007.920148][ C0] bridge0: topology change detected, propagating [ 2008.239829][T29689] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 2008.258932][T29689] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 2010.481510][T13947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2010.490829][T13947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2010.498980][T13947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2010.507059][T13947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2010.515110][T13947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2010.522926][T13947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2010.698765][T29753] chnl_net:caif_netlink_parms(): no params data found [ 2010.811561][T23110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.091641][T23110] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.176760][T29753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.200743][T29753] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.229908][T29753] device bridge_slave_0 entered promiscuous mode [ 2011.300835][T23110] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.348703][T29753] bridge0: port 2(bridge_slave_1) entered blocking state [ 2011.389075][T29753] bridge0: port 2(bridge_slave_1) entered disabled state [ 2011.418628][T29753] device bridge_slave_1 entered promiscuous mode [ 2011.561764][T23110] bond0: (slave netdevsim0): Releasing backup interface [ 2011.582734][T23110] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.624742][T29753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2011.671582][T29753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2011.738780][T29753] team0: Port device team_slave_0 added [ 2011.770107][T29753] team0: Port device team_slave_1 added [ 2011.851710][T29753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2011.899643][T29753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.019263][T29753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2012.050866][T29794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9083'. [ 2012.086494][T29753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2012.098169][T29753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.187554][T29753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2012.250048][T23110] tipc: Left network mode [ 2012.544907][T29753] device hsr_slave_0 entered promiscuous mode [ 2012.560783][T13947] Bluetooth: hci0: command 0x0409 tx timeout [ 2012.576249][T29753] device hsr_slave_1 entered promiscuous mode [ 2012.645065][T29753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2012.688662][T29753] Cannot create hsr debugfs directory [ 2012.752264][T29817] bridge0: port 6(veth1_virt_wifi) entered blocking state [ 2012.773762][T29817] bridge0: port 6(veth1_virt_wifi) entered disabled state [ 2014.087403][T23110] bond0: (slave wlan1): Releasing backup interface [ 2014.126260][T29870] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9110'. [ 2014.375415][T29753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2014.420971][T29753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2014.455108][T23110] device hsr_slave_0 left promiscuous mode [ 2014.481510][T23110] device hsr_slave_1 left promiscuous mode [ 2014.522810][T23110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2014.530225][T23110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2014.581572][T23110] bridge0: port 3(batadv0) entered disabled state [ 2014.621507][T23110] device bridge_slave_1 left promiscuous mode [ 2014.627888][T23110] bridge0: port 2(bridge_slave_1) entered disabled state [ 2014.640866][T13947] Bluetooth: hci0: command 0x041b tx timeout [ 2014.716345][T23110] device bridge_slave_0 left promiscuous mode [ 2014.723395][T23110] bridge0: port 1(bridge_slave_0) entered disabled state [ 2014.798776][T23110] device veth1_macvtap left promiscuous mode [ 2014.811040][T23110] device veth0_macvtap left promiscuous mode [ 2016.005678][T23110] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2016.288924][T23110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2016.375673][T23110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2016.711671][T13947] Bluetooth: hci0: command 0x040f tx timeout [ 2016.913099][T23110] bond0 (unregistering): Released all slaves [ 2017.055952][T29753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2017.081180][T29932] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 2017.094836][T29932] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 2017.126900][T29753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2017.464799][T29753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2017.497978][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2017.511220][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2017.533606][T29753] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.557866][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2017.573670][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2017.607189][T28539] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.614332][T28539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2017.672822][T29964] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9145'. [ 2017.708196][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2017.718774][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2017.739533][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2017.762639][T28539] bridge0: port 2(bridge_slave_1) entered blocking state [ 2017.769754][T28539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2017.793809][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2017.845357][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2017.892180][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2017.929806][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2017.963261][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2017.980025][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2018.008846][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2018.041761][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2018.069890][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2018.101644][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2018.137180][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2018.169893][T29978] bridge0: port 6(veth1_virt_wifi) entered blocking state [ 2018.185156][T29978] bridge0: port 6(veth1_virt_wifi) entered disabled state [ 2018.219273][T29753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2018.545840][T29981] device syzkaller0 entered promiscuous mode [ 2018.793498][T13947] Bluetooth: hci0: command 0x0419 tx timeout [ 2021.989475][T30003] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9161'. [ 2022.006633][T30015] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 2022.016238][T30015] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 2022.285527][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2022.293575][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2022.345702][T29753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2022.423338][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2022.446482][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2022.563995][T23130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2022.587272][T23130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2022.629798][T23130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2022.661250][T23130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2022.703880][T29753] device veth0_vlan entered promiscuous mode [ 2022.749738][T30086] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9196'. [ 2022.789824][T29753] device veth1_vlan entered promiscuous mode [ 2022.980540][T30088] device syzkaller0 entered promiscuous mode [ 2022.997124][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2023.018891][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2023.035029][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2023.058506][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2023.078292][T29753] device veth0_macvtap entered promiscuous mode [ 2026.693328][T29753] device veth1_macvtap entered promiscuous mode [ 2026.701116][T23120] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2026.712167][T23120] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2026.741049][T30124] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 2026.748239][T30124] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 2026.848213][T29753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2026.877394][T29753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.888612][T29753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2026.907700][T29753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2026.942538][T29753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.969898][T29753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2027.025060][T29753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2027.036728][T29753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2027.047368][T29753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2027.057766][T29753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2027.068387][T29753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2027.080029][T29753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2027.088220][T23120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2027.111482][T23120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2027.141680][T23120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2027.171811][T23120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2027.226576][T29753] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.253654][T29753] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.262907][T29753] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.271864][T29753] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.472817][T23132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2027.490784][T23132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2027.517275][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2027.602765][T30188] device syzkaller0 entered promiscuous mode [ 2027.623965][T23120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2027.650436][T23120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2030.633935][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2031.605772][T30248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2031.613041][T30248] IPv6: NLM_F_CREATE should be set when creating new route [ 2031.620325][T30248] IPv6: NLM_F_CREATE should be set when creating new route [ 2031.627587][T30248] IPv6: NLM_F_CREATE should be set when creating new route [ 2031.759089][T30253] device syzkaller0 entered promiscuous mode [ 2031.977384][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2031.995242][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2032.003456][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2032.011975][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2032.019644][T27044] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2032.027067][T27044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2032.528951][T30283] delete_channel: no stack [ 2032.544539][T30283] delete_channel: no stack [ 2034.075059][T27044] Bluetooth: hci1: command 0x0409 tx timeout [ 2034.654275][T30268] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 2034.662110][T30268] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 2034.673135][T30281] tun0: tun_chr_ioctl cmd 2147767507 [ 2034.680498][T30307] device hsr0 entered promiscuous mode [ 2035.062779][T30262] chnl_net:caif_netlink_parms(): no params data found [ 2035.297052][T30262] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.313566][T30262] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.331514][T30262] device bridge_slave_0 entered promiscuous mode [ 2035.364300][T30262] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.398514][T30262] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.425065][T30262] device bridge_slave_1 entered promiscuous mode [ 2035.456351][T30342] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 2035.464680][T30342] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 2035.497259][T30262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2035.528765][T30262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2035.589563][T23110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.730469][T23110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.772265][T30262] team0: Port device team_slave_0 added [ 2035.843155][T30339] device syzkaller0 entered promiscuous mode [ 2036.041831][T30262] team0: Port device team_slave_1 added [ 2036.098556][T23110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.157955][T27044] Bluetooth: hci1: command 0x041b tx timeout [ 2037.273312][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.279682][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.240816][T27044] Bluetooth: hci1: command 0x040f tx timeout [ 2039.750308][T23110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.790010][T30262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2039.810949][T30262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2039.908532][T30262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2039.945494][T30262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2039.991397][T30262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2040.028638][T30262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2040.190208][T30262] device hsr_slave_0 entered promiscuous mode [ 2040.207237][T30262] device hsr_slave_1 entered promiscuous mode [ 2040.227612][T30262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2040.270847][T30262] Cannot create hsr debugfs directory [ 2040.310924][T27044] Bluetooth: hci1: command 0x0419 tx timeout [ 2040.442139][T30441] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 2040.460805][T30441] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 2041.155757][T30450] device syzkaller0 entered promiscuous mode [ 2044.986164][T30262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2045.008521][T30262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2045.018083][T30262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2045.064803][T30262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2045.300287][T23110] bond0: (slave wlan1): Releasing backup interface [ 2045.710382][T30542] device syzkaller0 entered promiscuous mode [ 2045.762422][T23110] nr0: port 1(hsr0) entered disabled state [ 2045.809577][T23110] device hsr_slave_0 left promiscuous mode [ 2045.821557][T23110] device hsr_slave_1 left promiscuous mode [ 2045.834466][T23110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2045.858989][T23110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2045.886899][T23110] device macsec0 left promiscuous mode [ 2045.900894][T23110] bridge0: port 5(macsec0) entered disabled state [ 2045.912419][T23110] bridge0: port 4(batadv0) entered disabled state [ 2045.934936][T23110] bridge0: port 3(team0) entered disabled state [ 2045.952313][T23110] device bridge_slave_1 left promiscuous mode [ 2045.980869][T23110] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.992048][T23110] device bridge_slave_0 left promiscuous mode [ 2046.026586][T23110] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.127228][T23110] device veth1_macvtap left promiscuous mode [ 2046.133334][T23110] device veth0_macvtap left promiscuous mode [ 2047.044456][T23110] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2047.073938][T23110] device batadv_slave_0 left promiscuous mode [ 2047.150877][T23110] device team_slave_1 left promiscuous mode [ 2047.168971][T23110] team0 (unregistering): Port device team_slave_1 removed [ 2047.240839][T23110] device team_slave_0 left promiscuous mode [ 2047.249210][T23110] team0 (unregistering): Port device team_slave_0 removed [ 2047.321368][T23110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2047.330305][T23110] device bond_slave_1 left promiscuous mode [ 2047.431574][T23110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2047.451992][T23110] device bond_slave_0 left promiscuous mode [ 2047.954176][T23110] device bond0 left promiscuous mode [ 2047.967061][T23110] team0 (unregistering): Port device bond0 removed [ 2048.015032][T23110] bond0 (unregistering): Released all slaves [ 2049.855035][T30262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2049.938767][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2049.947647][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2050.003201][T30262] 8021q: adding VLAN 0 to HW filter on device team0 [ 2050.027922][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2050.051391][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2050.071090][T28539] bridge0: port 1(bridge_slave_0) entered blocking state [ 2050.078227][T28539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2050.160321][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2050.205279][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2050.244640][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2050.276994][T23132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.284120][T23132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2050.322699][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2050.335917][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2050.355146][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2050.385378][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2050.434899][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2050.457012][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2050.477196][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2050.495587][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2050.522474][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2050.547563][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2050.559001][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2050.595366][T30262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2051.198568][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2051.210910][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2051.227545][T30262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2051.255127][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2051.272605][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2051.343725][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2051.358234][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2051.370730][T30262] device veth0_vlan entered promiscuous mode [ 2051.392099][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2051.421108][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2051.435078][T30262] device veth1_vlan entered promiscuous mode [ 2051.533851][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2051.552006][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2051.568461][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2051.592019][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2051.623514][T30262] device veth0_macvtap entered promiscuous mode [ 2051.642816][T30262] device veth1_macvtap entered promiscuous mode [ 2051.710058][T30262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2051.760726][T30262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.780765][T30262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2051.801436][T30262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.842233][T30262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2051.851591][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2051.859736][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2051.891473][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2051.929840][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2051.955438][T30262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.969346][T30262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.982332][T30262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.993643][T30262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.014092][T30262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.069211][T30262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.120082][T30262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.144544][T30262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.166686][T30262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2052.192897][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2052.203007][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2052.217993][T30262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.252331][T30262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.270634][T30262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.299679][T30262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.509037][T23130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2052.538345][T23130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2052.583550][T23138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2052.600908][T23130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2052.613113][T23138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2052.665186][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2053.507808][T13947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2053.516697][T13947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2053.524734][T13947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2053.546150][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2053.556613][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2053.564190][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2053.747841][T23130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.967303][T23130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.100547][T23130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.276685][T23130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.560541][T30707] chnl_net:caif_netlink_parms(): no params data found [ 2054.681583][T23130] tipc: Left network mode [ 2055.061429][T30707] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.068542][T30707] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.121697][T30707] device bridge_slave_0 entered promiscuous mode [ 2055.358144][T30707] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.382448][T30707] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.407646][T30707] device bridge_slave_1 entered promiscuous mode [ 2055.591143][T27044] Bluetooth: hci3: command 0x0409 tx timeout [ 2055.628048][T30707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2055.926752][T30707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2056.082885][T30707] team0: Port device team_slave_0 added [ 2056.149591][T30707] team0: Port device team_slave_1 added [ 2056.326705][T30707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.350682][T30707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.440823][T30707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2056.652980][T30707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2056.663339][T30707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.755513][T30707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2056.930263][T30707] device hsr_slave_0 entered promiscuous mode [ 2056.967374][T30707] device hsr_slave_1 entered promiscuous mode [ 2057.112224][T23130] bond0: (slave wlan1): Releasing backup interface [ 2057.682010][T27044] Bluetooth: hci3: command 0x041b tx timeout [ 2057.743740][T23130] device hsr_slave_0 left promiscuous mode [ 2057.751532][T23130] device hsr_slave_1 left promiscuous mode [ 2057.770113][T23130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2057.800296][T23130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2057.848266][T23130] device bridge_slave_1 left promiscuous mode [ 2057.861125][T23130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.903892][T23130] device bridge_slave_0 left promiscuous mode [ 2057.921137][T23130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.999824][T23130] device veth1_macvtap left promiscuous mode [ 2058.019025][T23130] device veth0_macvtap left promiscuous mode [ 2058.039353][T23130] device veth1_vlan left promiscuous mode [ 2058.055181][T23130] device veth0_vlan left promiscuous mode [ 2059.036035][T23130] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2059.146828][T23130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2059.535122][T23130] bond0 (unregistering): Released all slaves [ 2059.750765][T27044] Bluetooth: hci3: command 0x040f tx timeout [ 2060.855991][T30707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2060.919447][T30707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2060.987166][T30707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2061.027025][T30707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2061.256823][T30948] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9529'. [ 2061.343486][T30707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2061.413344][T23130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2061.423458][T23130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2061.457941][T30707] 8021q: adding VLAN 0 to HW filter on device team0 [ 2061.485110][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2061.501178][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2061.558452][T23138] bridge0: port 1(bridge_slave_0) entered blocking state [ 2061.565593][T23138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2061.644671][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2061.670183][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2061.707583][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2061.734655][T23138] bridge0: port 2(bridge_slave_1) entered blocking state [ 2061.741806][T23138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2061.800978][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2061.821671][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2061.830766][T27044] Bluetooth: hci3: command 0x0419 tx timeout [ 2061.859518][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2061.878839][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2061.894774][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2061.941783][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2061.962531][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2061.971636][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2061.995576][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2062.019851][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2062.043265][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2062.066970][T30707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2063.069963][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2063.110387][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2063.153577][T30707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2063.238345][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2063.257590][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2063.347020][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2063.366285][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2063.409498][T30707] device veth0_vlan entered promiscuous mode [ 2063.416397][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2063.451341][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2063.477283][T30707] device veth1_vlan entered promiscuous mode [ 2063.503521][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2063.567099][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2063.591378][T28541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2063.637851][T30707] device veth0_macvtap entered promiscuous mode [ 2063.662638][T30707] device veth1_macvtap entered promiscuous mode [ 2063.727137][T30707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2063.752583][T30707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.790694][T30707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2063.825601][T30707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.867096][T30707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2063.905590][T30707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.946328][T30707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2063.992012][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2064.000515][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2064.021623][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2064.032676][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2064.061560][T30707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2064.075324][T30707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2064.111732][T30707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2064.122612][T30707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2064.140676][T30707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2064.170699][T30707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2064.191108][T30707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2064.220706][T30707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2064.242852][T30707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2064.258711][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2064.268303][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2064.292637][T30707] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.315297][T30707] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.325652][T30707] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.334809][T30707] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.567466][T28539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2064.602006][T28539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2064.619827][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2064.667169][T23138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2064.694589][T23138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2064.722703][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2075.375298][T31310] device syzkaller0 entered promiscuous mode [ 2075.561895][T31315] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 2075.621224][T31315] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 2081.454243][T31369] device hsr0 entered promiscuous mode [ 2082.439882][T31405] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9700'. [ 2088.598687][T31578] netlink: 'syz.1.9780': attribute type 10 has an invalid length. [ 2088.746254][T31578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2088.942421][T31578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2089.035248][T31578] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2089.091718][T31591] netlink: 'syz.0.9784': attribute type 10 has an invalid length. [ 2089.201576][T31591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2089.236089][T31591] team0: Port device bond0 added [ 2089.258821][T31590] delete_channel: no stack [ 2089.872976][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2091.910758][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 2092.616719][T27044] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2092.624432][T27044] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 2092.634797][T27044] CPU: 1 PID: 27044 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2092.642466][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2092.652536][T27044] Workqueue: hci3 hci_rx_work [ 2092.657242][T27044] Call Trace: [ 2092.660530][T27044] [ 2092.663470][T27044] dump_stack_lvl+0x188/0x24e [ 2092.668174][T27044] ? show_regs_print_info+0x12/0x12 [ 2092.673395][T27044] ? load_image+0x400/0x400 [ 2092.677935][T27044] sysfs_create_dir_ns+0x26a/0x290 [ 2092.683074][T27044] ? sysfs_warn_dup+0xa0/0xa0 [ 2092.687778][T27044] ? do_raw_spin_unlock+0x11d/0x230 [ 2092.693008][T27044] kobject_add_internal+0x61c/0xcc0 [ 2092.698230][T27044] kobject_add+0x160/0x230 [ 2092.702675][T27044] ? kobject_init+0x1d0/0x1d0 [ 2092.707376][T27044] ? klist_children_get+0x50/0x50 [ 2092.712401][T27044] ? get_device_parent+0x121/0x3f0 [ 2092.717516][T27044] device_add+0x483/0xfb0 [ 2092.721847][T27044] ? kmem_cache_free+0xf7/0x290 [ 2092.726701][T27044] hci_conn_add_sysfs+0xd1/0x1e0 [ 2092.731637][T27044] le_conn_complete_evt+0x105f/0x1670 [ 2092.737008][T27044] ? le_conn_complete_evt+0xe6/0x1670 [ 2092.742385][T27044] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2092.748623][T27044] ? bt_info+0x180/0x180 [ 2092.752867][T27044] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2092.758506][T27044] ? skb_pull_data+0xf7/0x200 [ 2092.763197][T27044] hci_le_conn_complete_evt+0x183/0x440 [ 2092.768742][T27044] ? hci_remote_host_features_evt+0x270/0x270 [ 2092.774808][T27044] hci_event_packet+0x7b6/0x1280 [ 2092.779766][T27044] ? bis_list+0x280/0x280 [ 2092.784090][T27044] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2092.789984][T27044] ? kcov_remote_start+0x4c7/0x7e0 [ 2092.795097][T27044] ? bt_warn+0x30/0x180 [ 2092.799253][T27044] ? hci_send_to_monitor+0x9c/0x4a0 [ 2092.804450][T27044] hci_rx_work+0x3eb/0xd40 [ 2092.808866][T27044] ? _raw_spin_unlock+0x40/0x40 [ 2092.813714][T27044] ? process_one_work+0x7b0/0x1160 [ 2092.818819][T27044] process_one_work+0x8a2/0x1160 [ 2092.823801][T27044] ? worker_detach_from_pool+0x240/0x240 [ 2092.829431][T27044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2092.834450][T27044] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2092.839985][T27044] ? kthread_data+0x4b/0xc0 [ 2092.844492][T27044] worker_thread+0xaa2/0x1270 [ 2092.849174][T27044] ? __kthread_parkme+0x162/0x1c0 [ 2092.854199][T27044] kthread+0x29d/0x330 [ 2092.858258][T27044] ? worker_clr_flags+0x1a0/0x1a0 [ 2092.863277][T27044] ? kthread_blkcg+0xd0/0xd0 [ 2092.867860][T27044] ret_from_fork+0x1f/0x30 [ 2092.872284][T27044] [ 2092.877797][T27044] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 2092.891491][T27044] Bluetooth: hci3: failed to register connection device [ 2093.678734][T27044] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2094.950931][T27044] Bluetooth: hci3: command 0x2016 tx timeout [ 2095.756611][ T4280] Bluetooth: hci4: command 0x2016 tx timeout [ 2097.588806][T27044] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2098.724689][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.731072][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.670857][T27044] Bluetooth: hci0: command 0x2016 tx timeout [ 2100.486692][T27044] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2100.496417][T27044] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2100.504150][T27044] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2100.513914][T27044] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2100.522000][T27044] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2100.529338][T27044] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2101.139939][T31734] chnl_net:caif_netlink_parms(): no params data found [ 2101.397987][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2101.405810][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 2101.415928][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 2101.423515][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2101.433605][ T4280] Workqueue: hci3 hci_rx_work [ 2101.438333][ T4280] Call Trace: [ 2101.441640][ T4280] [ 2101.444603][ T4280] dump_stack_lvl+0x188/0x24e [ 2101.449356][ T4280] ? show_regs_print_info+0x12/0x12 [ 2101.454611][ T4280] ? load_image+0x400/0x400 [ 2101.459204][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 2101.464379][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 2101.469111][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 2101.474379][ T4280] kobject_add_internal+0x61c/0xcc0 [ 2101.479604][ T4280] kobject_add+0x160/0x230 [ 2101.484047][ T4280] ? kobject_init+0x1d0/0x1d0 [ 2101.488761][ T4280] ? klist_children_get+0x50/0x50 [ 2101.493805][ T4280] ? get_device_parent+0x121/0x3f0 [ 2101.498954][ T4280] device_add+0x483/0xfb0 [ 2101.503307][ T4280] ? kmem_cache_free+0xf7/0x290 [ 2101.508179][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 2101.513139][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 2101.518529][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 2101.523920][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2101.530179][ T4280] ? bt_info+0x180/0x180 [ 2101.534442][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2101.540092][ T4280] ? skb_pull_data+0xf7/0x200 [ 2101.544795][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 2101.550359][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 2101.556445][ T4280] hci_event_packet+0x7b6/0x1280 [ 2101.561412][ T4280] ? bis_list+0x280/0x280 [ 2101.565768][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2101.571685][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 2101.576817][ T4280] ? bt_warn+0x30/0x180 [ 2101.581000][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 2101.586217][ T4280] hci_rx_work+0x3eb/0xd40 [ 2101.590645][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 2101.595511][ T4280] ? process_one_work+0x7b0/0x1160 [ 2101.600639][ T4280] process_one_work+0x8a2/0x1160 [ 2101.605603][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 2101.611249][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2101.616291][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2101.621842][ T4280] ? kthread_data+0x4b/0xc0 [ 2101.626367][ T4280] worker_thread+0xaa2/0x1270 [ 2101.631069][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 2101.636120][ T4280] kthread+0x29d/0x330 [ 2101.640204][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 2101.645251][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 2101.649851][ T4280] ret_from_fork+0x1f/0x30 [ 2101.654313][ T4280] [ 2101.660916][ T4280] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 2101.675051][ T4280] Bluetooth: hci3: failed to register connection device [ 2101.697887][T31734] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.735885][T31734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.751922][T31734] device bridge_slave_0 entered promiscuous mode [ 2101.760941][T31734] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.768641][T31734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.779660][T31734] device bridge_slave_1 entered promiscuous mode [ 2101.923925][T31734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2101.963668][T31734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2102.374188][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2102.383060][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 2102.392616][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 2102.400176][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2102.410252][ T4280] Workqueue: hci3 hci_rx_work [ 2102.414958][ T4280] Call Trace: [ 2102.418245][ T4280] [ 2102.421189][ T4280] dump_stack_lvl+0x188/0x24e [ 2102.425902][ T4280] ? show_regs_print_info+0x12/0x12 [ 2102.431129][ T4280] ? load_image+0x400/0x400 [ 2102.435663][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 2102.440796][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 2102.445497][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 2102.450718][ T4280] kobject_add_internal+0x61c/0xcc0 [ 2102.455947][ T4280] kobject_add+0x160/0x230 [ 2102.460364][ T4280] ? kobject_init+0x1d0/0x1d0 [ 2102.465046][ T4280] ? klist_children_get+0x50/0x50 [ 2102.470064][ T4280] ? get_device_parent+0x121/0x3f0 [ 2102.475182][ T4280] device_add+0x483/0xfb0 [ 2102.479522][ T4280] ? kmem_cache_free+0xf7/0x290 [ 2102.484378][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 2102.489315][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 2102.494686][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 2102.500056][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2102.506290][ T4280] ? bt_info+0x180/0x180 [ 2102.510530][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2102.516161][ T4280] ? skb_pull_data+0xf7/0x200 [ 2102.520846][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 2102.526391][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 2102.532457][ T4280] hci_event_packet+0x7b6/0x1280 [ 2102.537399][ T4280] ? bis_list+0x280/0x280 [ 2102.541722][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2102.547611][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 2102.552716][ T4280] ? bt_warn+0x30/0x180 [ 2102.556867][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 2102.562065][ T4280] hci_rx_work+0x3eb/0xd40 [ 2102.566475][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 2102.571326][ T4280] ? process_one_work+0x7b0/0x1160 [ 2102.576431][ T4280] process_one_work+0x8a2/0x1160 [ 2102.581377][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 2102.587009][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2102.592026][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2102.597561][ T4280] ? kthread_data+0x4b/0xc0 [ 2102.602081][ T4280] worker_thread+0xaa2/0x1270 [ 2102.606786][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 2102.611825][ T4280] kthread+0x29d/0x330 [ 2102.615888][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 2102.620914][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 2102.625499][ T4280] ret_from_fork+0x1f/0x30 [ 2102.629920][ T4280] [ 2102.633344][T27044] Bluetooth: hci5: command 0x0409 tx timeout [ 2102.633634][ T4280] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 2102.652909][ T4280] Bluetooth: hci3: failed to register connection device [ 2103.756534][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 2104.501957][T31734] team0: Port device team_slave_0 added [ 2104.509542][T31734] team0: Port device team_slave_1 added [ 2104.558494][T31734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2104.586205][T31734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2104.640622][T31734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2104.662293][T31734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2104.680679][T31734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2104.710724][ T4280] Bluetooth: hci5: command 0x041b tx timeout [ 2104.740383][T31734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2104.786761][T31734] device hsr_slave_0 entered promiscuous mode [ 2104.806628][T31734] device hsr_slave_1 entered promiscuous mode [ 2104.824701][T31734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2104.838956][T31734] Cannot create hsr debugfs directory [ 2105.056952][T31734] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2105.078218][T31734] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2105.098810][T31734] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2105.119743][T31734] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2105.317065][T31734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2105.338221][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2105.346211][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2105.359307][T31734] 8021q: adding VLAN 0 to HW filter on device team0 [ 2105.371229][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2105.379745][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2105.402334][T23138] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.409402][T23138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2105.430540][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2105.444538][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2105.453912][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2105.462970][T23138] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.470041][T23138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2105.478298][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2105.487918][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2105.504641][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2105.515349][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2105.525360][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2105.536089][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2105.545387][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2105.573281][T31734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2105.587672][T31734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2105.601294][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2105.610166][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2105.618872][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2105.628645][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2105.637394][T23116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2105.831015][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 2105.887186][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2105.895953][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2105.913416][T31734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2106.323568][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2106.343700][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2106.366092][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2106.383895][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2106.398025][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2106.407888][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2106.424652][T31734] device veth0_vlan entered promiscuous mode [ 2106.445135][T31734] device veth1_vlan entered promiscuous mode [ 2106.484476][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2106.493146][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2106.502029][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2106.511950][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2106.522349][T31734] device veth0_macvtap entered promiscuous mode [ 2106.532700][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2106.542260][T31734] device veth1_macvtap entered promiscuous mode [ 2106.569076][T31734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2106.587893][T31734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.598327][T31734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2106.612153][T31734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.623603][T31734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2106.635860][T31734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.648203][T31734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2106.658856][T31734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2106.669401][T31734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.679373][T31734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2106.694894][T31734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.704884][T31734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2106.715430][T31734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.725535][T31734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2106.735992][T31734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.745861][T31734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2106.756319][T31734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.767589][T31734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2106.775414][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2106.785440][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2106.793839][ T4280] Bluetooth: hci5: command 0x040f tx timeout [ 2106.800889][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2106.809401][T23138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2106.827055][T31734] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.843677][T31734] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.852459][T31734] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.861860][T31734] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.950133][T23138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2106.958249][T23138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2106.968118][T23132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2106.987090][T23122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2106.996505][T23122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2107.004396][T23122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2107.133816][T23132] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.195424][T23132] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.248995][T23132] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.320737][T23132] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.285403][T23132] device hsr_slave_0 left promiscuous mode [ 2108.297068][T23132] device hsr_slave_1 left promiscuous mode [ 2108.305212][T23132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2108.313978][T23132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2108.324501][T23132] device macsec0 left promiscuous mode [ 2108.330216][T23132] bridge0: port 3(macsec0) entered disabled state [ 2108.338283][T23132] device bridge_slave_1 left promiscuous mode [ 2108.344587][T23132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.354651][T23132] device bridge_slave_0 left promiscuous mode [ 2108.362683][T23132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.380920][T23132] device veth1_macvtap left promiscuous mode [ 2108.386930][T23132] device veth0_macvtap left promiscuous mode [ 2108.393173][T23132] device veth1_vlan left promiscuous mode [ 2108.398936][T23132] device veth0_vlan left promiscuous mode [ 2108.769831][T23132] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2108.808021][T23132] team0 (unregistering): Port device team_slave_1 removed [ 2108.843409][T23132] team0 (unregistering): Port device team_slave_0 removed [ 2108.875940][ T4280] Bluetooth: hci5: command 0x0419 tx timeout [ 2108.882907][T23132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2108.917260][T23132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2109.125014][T23132] team0 (unregistering): Port device bond0 removed [ 2109.150368][T23132] bond0 (unregistering): Released all slaves [ 2116.150813][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 2136.630672][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 2157.120794][T27044] Bluetooth: hci1: command 0x0406 tx timeout [ 2160.153371][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.159640][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2177.590688][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 2221.593899][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.600176][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.670805][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 2283.034017][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.040313][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.473723][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.480020][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.912254][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.918550][ T1277] ieee802154 phy1 wpan1: encryption failed: -22