last executing test programs: 4.667380182s ago: executing program 1 (id=915): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 4.404884384s ago: executing program 1 (id=919): r0 = socket$kcm(0xa, 0x2, 0x73) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={0x0, 0x4, 0x10}, 0xc) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) close(r1) 4.016485486s ago: executing program 1 (id=921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000001c0)=r4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.909084464s ago: executing program 0 (id=923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) socketpair(0x11, 0x1, 0x4, &(0x7f0000000180)) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200350000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.908809084s ago: executing program 3 (id=924): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000040)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b030231a6080c000af32c0cae93000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df0000ecb8f6ec63c9f4d493803fd88635a6d10000f8ea56a52600e6657594f1817d00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 3.71090622s ago: executing program 3 (id=925): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001ce00200142603600e12080005007a010401a80016002000044004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000012f46facb8f4f1a566403af421a4e6987e238aa26abca3ccc0fc61e5c5ab89e43adfa036f4472e743d6cae3a2c61e54ae2144c7f6f25e89cd7caddaa5b088ec7c3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000003c0)=""/70) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x8cff, 0x0, 0x5, 0xe60, 0x0, 0x95}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x3, 0x6, 0x8, 0x6, 0x0, 0x80, 0x2081, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x9, 0xc}, 0x18006, 0x4, 0x7, 0x7, 0x8, 0x175, 0xd505, 0x0, 0x75, 0x0, 0xf}, 0x0, 0x6, r1, 0x5) 1.658957996s ago: executing program 3 (id=926): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80c0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e", 0x23}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.657860576s ago: executing program 0 (id=935): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000600000000000000000004000000000000000d000000000000"], &(0x7f0000002200)=""/4110, 0x32, 0x100e, 0x1}, 0x20) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10002, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x3, 0x9, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611000000000000063012200000017009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180), 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x8e, 0xfffffffffffffffc}, 0xf) sendmsg$unix(r0, &(0x7f0000000480)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffeb0, 0x0, 0x3b, 0x4000}, 0x0) syz_clone(0xa089400, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.656617736s ago: executing program 2 (id=936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001ce00200142603600e12080005007a010401a80016002000044004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000012f46facb8f4f1a566403af421a4e6987e238aa26abca3ccc0fc61e5c5ab89e43adfa036f4472e743d6cae3a2c61e54ae2144c7f6f25e89cd7caddaa5b088ec7c3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000003c0)=""/70) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x8cff, 0x0, 0x5, 0xe60, 0x0, 0x95}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x3, 0x6, 0x8, 0x6, 0x0, 0x80, 0x2081, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x9, 0xc}, 0x18006, 0x4, 0x7, 0x7, 0x8, 0x175, 0xd505, 0x0, 0x75, 0x0, 0xf}, 0x0, 0x6, r1, 0x5) 1.398478867s ago: executing program 3 (id=927): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x4, 0x7}, {0x2, 0x0, 0xf, 0x1}]}, 0x94) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040002, 0x0, 0x0, 0x3}]}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) 1.396466397s ago: executing program 1 (id=938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) socketpair(0x11, 0x1, 0x4, &(0x7f0000000180)) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200350000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.246679079s ago: executing program 3 (id=928): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x71, &(0x7f0000000000)=r7, 0x8) 1.24170331s ago: executing program 2 (id=940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 972.721022ms ago: executing program 0 (id=929): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) 971.564002ms ago: executing program 2 (id=942): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)=0x10000) 487.769621ms ago: executing program 0 (id=930): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9", 0x6b}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe", 0x4c}, {&(0x7f0000001400)="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", 0x180}], 0x3}, 0x4000081) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 453.477203ms ago: executing program 1 (id=932): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x35b}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) 453.132484ms ago: executing program 2 (id=933): socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x111211, 0x0, 0x100, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x1bffffffffffffc}, 0x0, 0x8001, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 251.88729ms ago: executing program 3 (id=934): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x700) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x10) 251.05581ms ago: executing program 1 (id=947): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x71, &(0x7f0000000000)=r7, 0x8) 250.17389ms ago: executing program 2 (id=937): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac14"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x5450, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 220.176462ms ago: executing program 0 (id=939): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 73.469704ms ago: executing program 2 (id=941): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 0s ago: executing program 0 (id=943): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x2402, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 84.095057][ T5775] cgroup: Unknown subsys name 'net' [ 84.233474][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.948209][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.659896][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.668127][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.669561][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.678241][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.685701][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.692445][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.703028][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.718409][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.719067][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.735218][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.738659][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.743006][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.751069][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.757392][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.766659][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.773671][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.786145][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.787217][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.795105][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.808096][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.816509][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.830301][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.838105][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.845608][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.569218][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.593896][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 88.654995][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 88.678585][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 88.841405][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.849975][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.857986][ T5789] bridge_slave_0: entered allmulticast mode [ 88.866104][ T5789] bridge_slave_0: entered promiscuous mode [ 88.934774][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.942573][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.949923][ T5789] bridge_slave_1: entered allmulticast mode [ 88.958074][ T5789] bridge_slave_1: entered promiscuous mode [ 88.965934][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.974383][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.982734][ T5785] bridge_slave_0: entered allmulticast mode [ 88.989861][ T5785] bridge_slave_0: entered promiscuous mode [ 88.999427][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.007626][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.015328][ T5785] bridge_slave_1: entered allmulticast mode [ 89.022670][ T5785] bridge_slave_1: entered promiscuous mode [ 89.029714][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.037346][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.044983][ T5796] bridge_slave_0: entered allmulticast mode [ 89.052223][ T5796] bridge_slave_0: entered promiscuous mode [ 89.097466][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.105492][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.113718][ T5796] bridge_slave_1: entered allmulticast mode [ 89.121083][ T5796] bridge_slave_1: entered promiscuous mode [ 89.128823][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.136276][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.143637][ T5786] bridge_slave_0: entered allmulticast mode [ 89.150812][ T5786] bridge_slave_0: entered promiscuous mode [ 89.196405][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.204463][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.211766][ T5786] bridge_slave_1: entered allmulticast mode [ 89.219241][ T5786] bridge_slave_1: entered promiscuous mode [ 89.241695][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.255262][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.297842][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.309574][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.334175][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.359154][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.372583][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.420335][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.460501][ T5789] team0: Port device team_slave_0 added [ 89.470622][ T5785] team0: Port device team_slave_0 added [ 89.480204][ T5785] team0: Port device team_slave_1 added [ 89.502637][ T5786] team0: Port device team_slave_0 added [ 89.518717][ T5789] team0: Port device team_slave_1 added [ 89.553909][ T5796] team0: Port device team_slave_0 added [ 89.563678][ T5786] team0: Port device team_slave_1 added [ 89.595200][ T5796] team0: Port device team_slave_1 added [ 89.603360][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.610403][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.638220][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.665053][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.672884][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.699283][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.730645][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.737877][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.764706][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.796951][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.804366][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.831730][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.859567][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.867601][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.894785][ T5794] Bluetooth: hci1: command tx timeout [ 89.900635][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.915513][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.922926][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.950659][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.950794][ T5794] Bluetooth: hci0: command tx timeout [ 89.964251][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.967948][ T5790] Bluetooth: hci3: command tx timeout [ 89.974852][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.980431][ T5797] Bluetooth: hci2: command tx timeout [ 90.014636][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.049221][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.056419][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.082855][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.137305][ T5789] hsr_slave_0: entered promiscuous mode [ 90.144297][ T5789] hsr_slave_1: entered promiscuous mode [ 90.221677][ T5785] hsr_slave_0: entered promiscuous mode [ 90.229625][ T5785] hsr_slave_1: entered promiscuous mode [ 90.236535][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.245917][ T5785] Cannot create hsr debugfs directory [ 90.270329][ T5796] hsr_slave_0: entered promiscuous mode [ 90.277060][ T5796] hsr_slave_1: entered promiscuous mode [ 90.284842][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.292992][ T5796] Cannot create hsr debugfs directory [ 90.304524][ T5786] hsr_slave_0: entered promiscuous mode [ 90.311346][ T5786] hsr_slave_1: entered promiscuous mode [ 90.321677][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.329363][ T5786] Cannot create hsr debugfs directory [ 90.805583][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.820986][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.831872][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.845682][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.925324][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.937154][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.951541][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.970870][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.069317][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.082613][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.107286][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.120077][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.206787][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.235681][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.247323][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.258405][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.321215][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.429473][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.476205][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.505768][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.513979][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.545731][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.552975][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.567450][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.583693][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.591189][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.662640][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.670224][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.777803][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.810275][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.881167][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.906061][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.940139][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.947756][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.963114][ T5797] Bluetooth: hci1: command tx timeout [ 92.020685][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.028057][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.032243][ T5797] Bluetooth: hci2: command tx timeout [ 92.040875][ T5797] Bluetooth: hci0: command tx timeout [ 92.044860][ T5794] Bluetooth: hci3: command tx timeout [ 92.050310][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.059203][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.079764][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.087043][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.244610][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.255754][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.289366][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.350184][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.429256][ T788] cfg80211: failed to load regulatory.db [ 92.514555][ T5786] veth0_vlan: entered promiscuous mode [ 92.564828][ T5789] veth0_vlan: entered promiscuous mode [ 92.588697][ T5786] veth1_vlan: entered promiscuous mode [ 92.640505][ T5789] veth1_vlan: entered promiscuous mode [ 92.727018][ T5786] veth0_macvtap: entered promiscuous mode [ 92.766730][ T5786] veth1_macvtap: entered promiscuous mode [ 92.779554][ T5789] veth0_macvtap: entered promiscuous mode [ 92.792606][ T5789] veth1_macvtap: entered promiscuous mode [ 92.839533][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.851330][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.863834][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.875953][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.904267][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.918031][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.927649][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.937001][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.947739][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.960111][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.973345][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.987036][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.005689][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.022573][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.030981][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.040481][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.050137][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.060199][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.237726][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.254769][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.293912][ T5796] veth0_vlan: entered promiscuous mode [ 93.358689][ T5785] veth0_vlan: entered promiscuous mode [ 93.370310][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.376898][ T5796] veth1_vlan: entered promiscuous mode [ 93.390468][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.403250][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.412105][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.444184][ T5785] veth1_vlan: entered promiscuous mode [ 93.489153][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.533642][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.546493][ T5796] veth0_macvtap: entered promiscuous mode [ 93.601186][ T5796] veth1_macvtap: entered promiscuous mode [ 93.639967][ T5785] veth0_macvtap: entered promiscuous mode [ 93.717318][ T5785] veth1_macvtap: entered promiscuous mode [ 93.777215][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.800152][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.822731][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.835304][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.849439][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.884990][ T5878] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 93.900633][ T5878] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.022665][ T5790] Bluetooth: hci1: command tx timeout [ 94.041928][ C0] hrtimer: interrupt took 46654 ns [ 94.055077][ T5882] Zero length message leads to an empty skb [ 94.102048][ T5790] Bluetooth: hci3: command tx timeout [ 94.107674][ T5790] Bluetooth: hci0: command tx timeout [ 94.113360][ T5794] Bluetooth: hci2: command tx timeout [ 94.461516][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.472878][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.484500][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.495908][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.508421][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.535874][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.547521][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.579456][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.591723][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.602115][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.616904][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.629247][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.653397][ T5796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.669971][ T5796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.680124][ T5796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.689720][ T5796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.710695][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.726407][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.737028][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.748861][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.759098][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.770108][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.783371][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.810391][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.819726][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.829272][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.838309][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.021832][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.049271][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.116156][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.133064][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.161364][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.170528][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.253970][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.286291][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.430206][ T5878] syz.2.3 (5878) used greatest stack depth: 19440 bytes left [ 95.847319][ T5790] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 96.102318][ T5790] Bluetooth: hci1: command tx timeout [ 96.137189][ T5904] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 96.158315][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.183459][ T5790] Bluetooth: hci3: command tx timeout [ 96.188958][ T5790] Bluetooth: hci0: command tx timeout [ 96.194612][ T5794] Bluetooth: hci2: command tx timeout [ 96.217790][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.256508][ T5904] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 96.292669][ C1] Illegal XDP return value 16128 on prog (id 7) dev batadv_slave_0, expect packet loss! [ 96.696400][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 96.778049][ T5920] netlink: 'syz.0.20': attribute type 17 has an invalid length. [ 96.796373][ T5920] netlink: 'syz.0.20': attribute type 16 has an invalid length. [ 96.813265][ T5920] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20'. [ 97.823397][ T5790] Bluetooth: hci0: unexpected event 0x36 length: 15 > 7 [ 98.227103][ T5949] veth1_to_bond: entered allmulticast mode [ 98.611649][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.632018][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.715447][ T5961] bridge0: entered allmulticast mode [ 98.967173][ T5962] bridge_slave_1: left allmulticast mode [ 98.992099][ T5962] bridge_slave_1: left promiscuous mode [ 98.999747][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.048473][ T5962] bridge_slave_0: left allmulticast mode [ 99.083179][ T5962] bridge_slave_0: left promiscuous mode [ 99.089296][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.125041][ T5968] netlink: 'syz.1.39': attribute type 29 has an invalid length. [ 99.242250][ T5968] netlink: 'syz.1.39': attribute type 29 has an invalid length. [ 99.545646][ T5790] Bluetooth: hci1: Malformed Event: 0x2f [ 99.618537][ T5975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.931204][ T5981] netlink: 'syz.2.45': attribute type 10 has an invalid length. [ 99.964087][ T5981] batman_adv: batadv0: Adding interface: wlan0 [ 99.970378][ T5981] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.062063][ T5981] batman_adv: batadv0: Interface activated: wlan0 [ 100.513267][ T5991] netlink: 'syz.2.50': attribute type 29 has an invalid length. [ 100.554628][ T5991] netlink: 'syz.2.50': attribute type 29 has an invalid length. [ 101.383035][ T5999] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 101.581152][ T5999] team0: Port device dummy0 added [ 102.248797][ T6008] syzkaller0: entered promiscuous mode [ 102.261457][ T6008] syzkaller0: entered allmulticast mode [ 102.615917][ T6015] netlink: 'syz.3.58': attribute type 64 has an invalid length. [ 103.125399][ T6021] netlink: 'syz.2.60': attribute type 10 has an invalid length. [ 103.160728][ T6021] syz_tun: entered promiscuous mode [ 103.223384][ T6021] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 103.328803][ T6015] syz.3.58 (6015) used greatest stack depth: 18664 bytes left [ 103.445075][ T6028] warning: `syz.3.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.605361][ T5790] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 103.752102][ T6033] netlink: 'syz.2.65': attribute type 2 has an invalid length. [ 103.801215][ T6033] netlink: 'syz.2.65': attribute type 9 has an invalid length. [ 103.811281][ T6033] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'. [ 105.446077][ T6074] syzkaller0: entered promiscuous mode [ 105.453181][ T6074] syzkaller0: entered allmulticast mode [ 108.489799][ T6097] netlink: 830 bytes leftover after parsing attributes in process `syz.0.91'. [ 108.803684][ T6113] netlink: 'syz.0.94': attribute type 10 has an invalid length. [ 109.035020][ T6113] team0: Port device wlan1 added [ 109.147077][ T5790] Bluetooth: hci0: Malformed LE Event: 0x0d [ 109.794967][ T6133] netlink: 'syz.2.102': attribute type 10 has an invalid length. [ 109.968180][ T6131] netlink: 'syz.2.102': attribute type 29 has an invalid length. [ 110.018183][ T6131] netlink: 'syz.2.102': attribute type 29 has an invalid length. [ 110.281131][ T6135] syzkaller0: entered promiscuous mode [ 110.313022][ T6135] syzkaller0: entered allmulticast mode [ 112.093767][ T6145] netlink: 'syz.3.107': attribute type 9 has an invalid length. [ 112.101824][ T6145] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.107'. [ 113.198733][ T6174] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.223780][ T6174] syzkaller0: entered promiscuous mode [ 113.229451][ T6174] syzkaller0: entered allmulticast mode [ 113.346977][ T6182] bridge0: entered promiscuous mode [ 113.354450][ T6182] bridge0: entered allmulticast mode [ 113.956014][ T6195] sit0: entered promiscuous mode [ 114.066480][ T6195] sit0: entered allmulticast mode [ 115.872763][ T5790] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 117.226287][ T6246] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 117.327922][ T6246] team0: Device veth1_macvtap failed to register rx_handler [ 117.973882][ T6263] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 118.178551][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.190097][ T6263] bond0: (slave team0): Enslaving as an active interface with an up link [ 119.084259][ T6276] netlink: 'syz.3.156': attribute type 10 has an invalid length. [ 119.156955][ T6276] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 119.195324][ T6276] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 119.207005][ T6276] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 119.225135][ T6276] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 119.446183][ T6285] syzkaller0: entered promiscuous mode [ 119.466544][ T6285] syzkaller0: entered allmulticast mode [ 119.550294][ T6285] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.175958][ T5790] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 120.849541][ T6319] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.175'. [ 121.179290][ T5790] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 121.459936][ T6322] syzkaller0: entered promiscuous mode [ 121.496927][ T6322] syzkaller0: entered allmulticast mode [ 121.617661][ T6330] syzkaller0: left promiscuous mode [ 125.160766][ T6367] netlink: 'syz.0.192': attribute type 3 has an invalid length. [ 125.187128][ T6367] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.192'. [ 130.214833][ T6438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.223214][ T6438] IPv6: NLM_F_CREATE should be set when creating new route [ 130.231380][ T6438] IPv6: NLM_F_CREATE should be set when creating new route [ 130.718366][ T6447] netlink: 'syz.3.224': attribute type 2 has an invalid length. [ 131.364331][ T6454] syzkaller0: entered promiscuous mode [ 131.369883][ T6454] syzkaller0: entered allmulticast mode [ 131.524792][ T6457] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.228'. [ 133.402564][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.410270][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.216877][ T6504] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 137.529995][ T5790] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 137.530070][ T5790] Bluetooth: hci1: Malformed LE Event: 0x0d [ 137.647978][ T5790] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 137.923591][ T6524] netlink: 180 bytes leftover after parsing attributes in process `syz.3.255'. [ 138.139511][ T6528] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.257'. [ 141.182180][ T6590] netlink: 'syz.3.280': attribute type 10 has an invalid length. [ 141.202748][ T6590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.280'. [ 141.245087][ T6590] batman_adv: batadv0: Adding interface: virt_wifi0 [ 141.261126][ T6590] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.291462][ T6590] batman_adv: batadv0: Interface activated: virt_wifi0 [ 141.947421][ T5790] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17 [ 142.295496][ T6606] netlink: 'syz.3.288': attribute type 10 has an invalid length. [ 142.443506][ T6606] veth0_vlan: left promiscuous mode [ 142.456613][ T6606] veth0_vlan: entered promiscuous mode [ 142.469129][ T6606] team0: Device veth0_vlan failed to register rx_handler [ 144.747987][ T5790] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6 [ 144.824677][ T5790] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 144.840518][ T5790] Bluetooth: hci3: Injecting HCI hardware error event [ 144.849527][ T5794] Bluetooth: hci3: hardware error 0x00 [ 145.457622][ T6660] syzkaller0: entered promiscuous mode [ 145.463829][ T6660] syzkaller0: entered allmulticast mode [ 146.225676][ T6679] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.317'. [ 146.291529][ T6677] netlink: 'syz.0.316': attribute type 15 has an invalid length. [ 146.378132][ T6683] netlink: 'syz.2.320': attribute type 10 has an invalid length. [ 146.386941][ T6683] hsr_slave_0: left promiscuous mode [ 146.396721][ T6683] hsr_slave_1: left promiscuous mode [ 146.660431][ T6691] netlink: set zone limit has 8 unknown bytes [ 146.763648][ T6695] netlink: 'syz.1.324': attribute type 21 has an invalid length. [ 146.902016][ T5794] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 147.048363][ T6699] syzkaller0: entered promiscuous mode [ 147.092714][ T6699] syzkaller0: entered allmulticast mode [ 150.020950][ T6731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.073746][ T6743] netlink: 830 bytes leftover after parsing attributes in process `syz.2.342'. [ 152.805933][ T6771] netlink: 'syz.1.352': attribute type 39 has an invalid length. [ 153.027757][ T6774] netlink: 'syz.3.353': attribute type 10 has an invalid length. [ 153.080771][ T6774] bond0: (slave team0): Releasing backup interface [ 153.111318][ T6774] batman_adv: batadv0: Adding interface: team0 [ 153.129744][ T6774] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.208679][ T6774] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 153.303315][ T6776] netlink: 'syz.3.353': attribute type 10 has an invalid length. [ 153.311341][ T6776] netlink: 2 bytes leftover after parsing attributes in process `syz.3.353'. [ 153.342176][ T6776] team0: entered promiscuous mode [ 153.361332][ T6776] team_slave_0: entered promiscuous mode [ 153.374732][ T6776] team_slave_1: entered promiscuous mode [ 153.389950][ T6776] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.397954][ T6776] batman_adv: batadv0: Interface activated: team0 [ 153.405002][ T6776] batman_adv: batadv0: Interface deactivated: team0 [ 153.412570][ T6776] batman_adv: batadv0: Removing interface: team0 [ 153.420116][ T6776] bridge0: port 3(team0) entered blocking state [ 153.432327][ T6776] bridge0: port 3(team0) entered disabled state [ 153.445011][ T6776] team0: entered allmulticast mode [ 153.450796][ T6776] team_slave_0: entered allmulticast mode [ 153.458069][ T6776] team_slave_1: entered allmulticast mode [ 153.473198][ T6776] bridge0: port 3(team0) entered blocking state [ 153.480329][ T6776] bridge0: port 3(team0) entered forwarding state [ 153.534667][ T6786] syzkaller0: entered promiscuous mode [ 153.540266][ T6786] syzkaller0: entered allmulticast mode [ 153.741556][ T6795] netlink: 'syz.3.360': attribute type 10 has an invalid length. [ 153.780398][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.861742][ T6795] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 154.133411][ T6795] bond0: entered promiscuous mode [ 154.167404][ T6795] bond_slave_0: entered promiscuous mode [ 154.199937][ T6795] bond_slave_1: entered promiscuous mode [ 154.249247][ T6795] batadv0: entered promiscuous mode [ 154.904238][ T6807] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 155.747435][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.756421][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.793530][ T6824] bridge0: left promiscuous mode [ 155.849217][ T6824] bridge0: left allmulticast mode [ 155.938362][ T6825] bridge_slave_1: left allmulticast mode [ 155.957531][ T6825] bridge_slave_1: left promiscuous mode [ 155.982309][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.051643][ T6825] bridge_slave_0: left allmulticast mode [ 156.090531][ T6825] bridge_slave_0: left promiscuous mode [ 156.098540][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.162061][ T6834] netlink: 'syz.3.377': attribute type 2 has an invalid length. [ 156.170123][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.377'. [ 156.224066][ T6831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.376'. [ 156.236140][ T6837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.376'. [ 157.259003][ T6859] syz.1.388[6859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.259154][ T6859] syz.1.388[6859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.293365][ T6859] syz.1.388[6859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.328210][ T6859] syz.1.388[6859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.920377][ T5794] Bluetooth: hci1: unknown advertising packet type: 0xc5 [ 158.473939][ T6883] syzkaller0: entered promiscuous mode [ 158.512140][ T6883] syzkaller0: entered allmulticast mode [ 158.805889][ T5794] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 160.219443][ T6899] delete_channel: no stack [ 161.133300][ T6893] netlink: 'syz.2.400': attribute type 21 has an invalid length. [ 161.357506][ T6905] netlink: 'syz.0.405': attribute type 6 has an invalid length. [ 161.365367][ T6903] netlink: 'syz.2.404': attribute type 39 has an invalid length. [ 161.385350][ T6905] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.405'. [ 161.465951][ T6903] bond0: (slave syz_tun): Releasing backup interface [ 162.352981][ T5794] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 164.422456][ T5794] Bluetooth: hci2: command tx timeout [ 164.997107][ T6966] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 165.012794][ T6966] netlink: 156 bytes leftover after parsing attributes in process `syz.3.431'. [ 166.038036][ T5794] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 169.470999][ T7032] netlink: 'syz.0.459': attribute type 21 has an invalid length. [ 169.484590][ T7032] netlink: 128 bytes leftover after parsing attributes in process `syz.0.459'. [ 169.496406][ T7032] netlink: 'syz.0.459': attribute type 4 has an invalid length. [ 169.859677][ T7045] netlink: 'syz.0.462': attribute type 17 has an invalid length. [ 169.882621][ T7045] netlink: 'syz.0.462': attribute type 16 has an invalid length. [ 169.902835][ T7045] netlink: 152 bytes leftover after parsing attributes in process `syz.0.462'. [ 170.228352][ T7053] netlink: 'syz.0.466': attribute type 39 has an invalid length. [ 171.112515][ T7066] netlink: 'syz.1.472': attribute type 39 has an invalid length. [ 172.508746][ T5790] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 172.517142][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 172.527234][ T5790] CPU: 1 PID: 5790 Comm: kworker/u5:2 Not tainted 6.6.101-syzkaller #0 [ 172.535901][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.546116][ T5790] Workqueue: hci0 hci_rx_work [ 172.550919][ T5790] Call Trace: [ 172.554338][ T5790] [ 172.557430][ T5790] dump_stack_lvl+0x16c/0x230 [ 172.562264][ T5790] ? show_regs_print_info+0x20/0x20 [ 172.567718][ T5790] ? load_image+0x3b0/0x3b0 [ 172.572503][ T5790] sysfs_create_dir_ns+0x256/0x280 [ 172.577699][ T5790] ? hci_rx_work+0x43a/0xd80 [ 172.582543][ T5790] ? sysfs_warn_dup+0xa0/0xa0 [ 172.587492][ T5790] ? do_raw_spin_unlock+0x121/0x230 [ 172.592778][ T5790] kobject_add_internal+0x6b8/0xc70 [ 172.598165][ T5790] kobject_add+0x156/0x220 [ 172.602641][ T5790] ? __rwlock_init+0x150/0x150 [ 172.607566][ T5790] ? kobject_init+0x1e0/0x1e0 [ 172.612722][ T5790] ? _raw_spin_unlock+0x28/0x40 [ 172.617617][ T5790] ? get_device_parent+0x366/0x390 [ 172.622978][ T5790] device_add+0x408/0xc20 [ 172.627378][ T5790] hci_conn_add_sysfs+0xd5/0x1e0 [ 172.632437][ T5790] le_conn_complete_evt+0xc37/0x1220 [ 172.637870][ T5790] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 172.644242][ T5790] ? bt_info+0x160/0x160 [ 172.648535][ T5790] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 172.654210][ T5790] ? skb_pull_data+0xfb/0x200 [ 172.665462][ T5790] hci_le_conn_complete_evt+0x187/0x440 [ 172.671076][ T5790] ? hci_remote_host_features_evt+0x160/0x160 [ 172.677483][ T5790] hci_event_packet+0x795/0x1210 [ 172.682673][ T5790] ? bis_list+0x290/0x290 [ 172.687072][ T5790] ? lockdep_hardirqs_on+0x98/0x150 [ 172.692515][ T5790] ? hci_send_to_monitor+0xd7/0x4f0 [ 172.697851][ T5790] hci_rx_work+0x43a/0xd80 [ 172.702634][ T5790] ? process_scheduled_works+0x957/0x15b0 [ 172.708675][ T5790] process_scheduled_works+0xa45/0x15b0 [ 172.714772][ T5790] ? assign_work+0x400/0x400 [ 172.719709][ T5790] ? assign_work+0x39e/0x400 [ 172.724350][ T5790] worker_thread+0xa55/0xfc0 [ 172.729025][ T5790] kthread+0x2fa/0x390 [ 172.733136][ T5790] ? pr_cont_work+0x560/0x560 [ 172.738028][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 172.742828][ T5790] ret_from_fork+0x48/0x80 [ 172.747381][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 172.752013][ T5790] ret_from_fork_asm+0x11/0x20 [ 172.756818][ T5790] [ 172.760958][ T5790] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 172.775336][ T5790] Bluetooth: hci0: failed to register connection device [ 177.195309][ T7121] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.294959][ T7141] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.498'. [ 180.610309][ T7167] delete_channel: no stack [ 180.686120][ T7172] netlink: 'syz.1.508': attribute type 10 has an invalid length. [ 180.714577][ T7172] veth0_vlan: entered allmulticast mode [ 180.947769][ T7172] veth0_vlan: left promiscuous mode [ 181.067093][ T7172] veth0_vlan: entered promiscuous mode [ 181.296177][ T7172] team0: Device veth0_vlan failed to register rx_handler [ 181.763285][ T7172] syz.1.508 (7172) used greatest stack depth: 17320 bytes left [ 182.114744][ T7191] syzkaller0: entered promiscuous mode [ 182.137452][ T7191] syzkaller0: entered allmulticast mode [ 182.173438][ T7199] netlink: 'syz.3.516': attribute type 6 has an invalid length. [ 182.188220][ T7199] netlink: 168 bytes leftover after parsing attributes in process `syz.3.516'. [ 182.236556][ T7191] syzkaller0: left promiscuous mode [ 182.253829][ T7191] syzkaller0: left allmulticast mode [ 184.020544][ T5794] Bluetooth: hci2: adv larger than maximum supported [ 185.562611][ T7244] sit0: entered allmulticast mode [ 185.585726][ T7247] sit0: entered promiscuous mode [ 186.145836][ T7257] syzkaller0: entered promiscuous mode [ 186.163590][ T7257] syzkaller0: entered allmulticast mode [ 186.190433][ T7265] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.542'. [ 188.670096][ T7287] netlink: 'syz.1.549': attribute type 10 has an invalid length. [ 188.680608][ T7287] veth0_vlan: left promiscuous mode [ 188.688125][ T7287] veth0_vlan: entered promiscuous mode [ 188.697724][ T7287] team0: Device veth0_vlan failed to register rx_handler [ 189.217608][ T7306] syz.3.556 uses obsolete (PF_INET,SOCK_PACKET) [ 189.677972][ T7319] netlink: 48 bytes leftover after parsing attributes in process `syz.2.559'. [ 189.984345][ T7326] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 190.862774][ T7340] syz.0.569: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 190.936746][ T7340] CPU: 0 PID: 7340 Comm: syz.0.569 Not tainted 6.6.101-syzkaller #0 [ 190.945113][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.955554][ T7340] Call Trace: [ 190.959084][ T7340] [ 190.962197][ T7340] dump_stack_lvl+0x16c/0x230 [ 190.967248][ T7340] ? show_regs_print_info+0x20/0x20 [ 190.972709][ T7340] ? load_image+0x3b0/0x3b0 [ 190.977671][ T7340] ? __rcu_read_unlock+0x7c/0xd0 [ 190.982755][ T7340] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.989544][ T7340] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 190.996400][ T7340] warn_alloc+0x210/0x300 [ 191.001006][ T7340] ? stack_trace_save+0x9c/0xe0 [ 191.006054][ T7340] ? zone_watermark_ok_safe+0x230/0x230 [ 191.011936][ T7340] ? kasan_set_track+0x5f/0x70 [ 191.016786][ T7340] ? kasan_set_track+0x4e/0x70 [ 191.021707][ T7340] ? __kasan_kmalloc+0x8f/0xa0 [ 191.026735][ T7340] ? xsk_init_queue+0xb0/0x110 [ 191.031667][ T7340] ? xsk_setsockopt+0x4db/0x6f0 [ 191.036670][ T7340] ? do_sock_setsockopt+0x175/0x1a0 [ 191.041959][ T7340] ? __x64_sys_setsockopt+0x184/0x200 [ 191.047886][ T7340] __vmalloc_node_range+0x126/0x1320 [ 191.053505][ T7340] ? free_vm_area+0x50/0x50 [ 191.058430][ T7340] vmalloc_user+0x74/0x80 [ 191.063127][ T7340] ? xskq_create+0xbf/0x170 [ 191.067793][ T7340] xskq_create+0xbf/0x170 [ 191.072302][ T7340] xsk_init_queue+0xb0/0x110 [ 191.077007][ T7340] xsk_setsockopt+0x4db/0x6f0 [ 191.081968][ T7340] ? xsk_poll+0x670/0x670 [ 191.086675][ T7340] ? __fget_files+0x28/0x4d0 [ 191.091419][ T7340] ? aa_sock_opt_perm+0x74/0x100 [ 191.096626][ T7340] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 191.102389][ T7340] ? security_socket_setsockopt+0x7e/0xa0 [ 191.108211][ T7340] ? xsk_poll+0x670/0x670 [ 191.112703][ T7340] do_sock_setsockopt+0x175/0x1a0 [ 191.117995][ T7340] ? __fdget+0x180/0x210 [ 191.122343][ T7340] __x64_sys_setsockopt+0x184/0x200 [ 191.127662][ T7340] do_syscall_64+0x55/0xb0 [ 191.132151][ T7340] ? clear_bhb_loop+0x40/0x90 [ 191.136992][ T7340] ? clear_bhb_loop+0x40/0x90 [ 191.141758][ T7340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.148097][ T7340] RIP: 0033:0x7f55cf38ebe9 [ 191.152703][ T7340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.173000][ T7340] RSP: 002b:00007f55d026c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.181705][ T7340] RAX: ffffffffffffffda RBX: 00007f55cf5b5fa0 RCX: 00007f55cf38ebe9 [ 191.190126][ T7340] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 191.198280][ T7340] RBP: 00007f55cf411e19 R08: 0000000000000004 R09: 0000000000000000 [ 191.206337][ T7340] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 191.214391][ T7340] R13: 00007f55cf5b6038 R14: 00007f55cf5b5fa0 R15: 00007ffe040d0f28 [ 191.222949][ T7340] [ 191.395672][ T7340] Mem-Info: [ 191.413548][ T7340] active_anon:17115 inactive_anon:0 isolated_anon:0 [ 191.413548][ T7340] active_file:16030 inactive_file:39860 isolated_file:0 [ 191.413548][ T7340] unevictable:768 dirty:196 writeback:0 [ 191.413548][ T7340] slab_reclaimable:9978 slab_unreclaimable:98297 [ 191.413548][ T7340] mapped:32711 shmem:10363 pagetables:597 [ 191.413548][ T7340] sec_pagetables:0 bounce:0 [ 191.413548][ T7340] kernel_misc_reclaimable:0 [ 191.413548][ T7340] free:1335014 free_pcp:8078 free_cma:0 [ 191.634081][ T7340] Node 0 active_anon:69552kB inactive_anon:0kB active_file:64120kB inactive_file:159240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131788kB dirty:780kB writeback:0kB shmem:40904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11408kB pagetables:2392kB sec_pagetables:0kB all_unreclaimable? no [ 191.758578][ T7340] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 191.878490][ T7340] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.926930][ T7340] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 191.933954][ T7340] Node 0 DMA32 free:1431440kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:70604kB inactive_anon:0kB active_file:64120kB inactive_file:157920kB unevictable:1536kB writepending:780kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:11640kB local_pcp:8096kB free_cma:0kB [ 191.977805][ T7340] lowmem_reserve[]: 0 0 1 1 1 [ 191.987939][ T7340] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 192.039664][ T7340] lowmem_reserve[]: 0 0 0 0 0 [ 192.047001][ T7340] Node 1 Normal free:3890980kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22916kB local_pcp:14308kB free_cma:0kB [ 192.109712][ T7340] lowmem_reserve[]: 0 0 0 0 0 [ 192.119861][ T7340] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 192.141794][ T7340] Node 0 DMA32: 1*4kB (E) 286*8kB (UE) 498*16kB (UME) 3*32kB (UME) 305*64kB (ME) 100*128kB (UM) 64*256kB (UM) 26*512kB (UME) 17*1024kB (UM) 8*2048kB (UME) 323*4096kB (UM) = 1429172kB [ 192.253304][ T7340] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 192.296440][ T7340] Node 1 Normal: 293*4kB (UE) 52*8kB (UE) 37*16kB (UE) 93*32kB (UE) 18*64kB (UME) 7*128kB (UME) 1*256kB (E) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3890980kB [ 192.362122][ T7340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.398624][ T7340] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.426905][ T7340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.458313][ T7340] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.497067][ T7340] 68594 total pagecache pages [ 192.512337][ T7340] 0 pages in swap cache [ 192.516800][ T7340] Free swap = 124996kB [ 192.521182][ T7340] Total swap = 124996kB [ 192.535774][ T7340] 2097051 pages RAM [ 192.539724][ T7340] 0 pages HighMem/MovableOnly [ 192.544820][ T7340] 416137 pages reserved [ 192.549342][ T7340] 0 pages cma reserved [ 194.837554][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.854313][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.410564][ T7385] syzkaller0: entered promiscuous mode [ 196.427732][ T7385] syzkaller0: entered allmulticast mode [ 196.779966][ T7387] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 196.789334][ T7387] syzkaller0: Linktype set failed because interface is up [ 200.040029][ T7410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.048017][ T7410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.061467][ T7410] batman_adv: batadv0: Interface deactivated: wlan0 [ 200.068739][ T7410] batman_adv: batadv0: Removing interface: wlan0 [ 201.719239][ T5794] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 201.730150][ T5794] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 201.740715][ T5794] CPU: 1 PID: 5794 Comm: kworker/u5:3 Not tainted 6.6.101-syzkaller #0 [ 201.749289][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.759565][ T5794] Workqueue: hci2 hci_rx_work [ 201.764281][ T5794] Call Trace: [ 201.767676][ T5794] [ 201.770720][ T5794] dump_stack_lvl+0x16c/0x230 [ 201.775434][ T5794] ? show_regs_print_info+0x20/0x20 [ 201.781000][ T5794] ? load_image+0x3b0/0x3b0 [ 201.785654][ T5794] sysfs_create_dir_ns+0x256/0x280 [ 201.791236][ T5794] ? hci_rx_work+0x43a/0xd80 [ 201.796500][ T5794] ? sysfs_warn_dup+0xa0/0xa0 [ 201.801291][ T5794] ? do_raw_spin_unlock+0x121/0x230 [ 201.806699][ T5794] kobject_add_internal+0x6b8/0xc70 [ 201.811952][ T5794] kobject_add+0x156/0x220 [ 201.816514][ T5794] ? __rwlock_init+0x150/0x150 [ 201.821312][ T5794] ? kobject_init+0x1e0/0x1e0 [ 201.826193][ T5794] ? _raw_spin_unlock+0x28/0x40 [ 201.831103][ T5794] ? get_device_parent+0x366/0x390 [ 201.836420][ T5794] device_add+0x408/0xc20 [ 201.840826][ T5794] hci_conn_add_sysfs+0xd5/0x1e0 [ 201.845952][ T5794] le_conn_complete_evt+0xc37/0x1220 [ 201.851536][ T5794] ? bt_warn+0x10c/0x160 [ 201.855929][ T5794] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 201.862250][ T5794] ? bt_info+0x160/0x160 [ 201.866714][ T5794] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 201.872558][ T5794] ? skb_pull_data+0xfb/0x200 [ 201.877451][ T5794] hci_le_enh_conn_complete_evt+0x189/0x460 [ 201.883682][ T5794] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 201.890136][ T5794] ? hci_remote_host_features_evt+0x160/0x160 [ 201.896331][ T5794] hci_event_packet+0x795/0x1210 [ 201.901422][ T5794] ? bis_list+0x290/0x290 [ 201.905910][ T5794] ? lockdep_hardirqs_on+0x98/0x150 [ 201.911251][ T5794] ? hci_send_to_monitor+0xd7/0x4f0 [ 201.916512][ T5794] hci_rx_work+0x43a/0xd80 [ 201.921065][ T5794] ? process_scheduled_works+0x957/0x15b0 [ 201.927046][ T5794] process_scheduled_works+0xa45/0x15b0 [ 201.933360][ T5794] ? assign_work+0x400/0x400 [ 201.938093][ T5794] ? assign_work+0x39e/0x400 [ 201.942753][ T5794] worker_thread+0xa55/0xfc0 [ 201.947627][ T5794] kthread+0x2fa/0x390 [ 201.952068][ T5794] ? pr_cont_work+0x560/0x560 [ 201.956776][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 201.961396][ T5794] ret_from_fork+0x48/0x80 [ 201.965926][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 201.970903][ T5794] ret_from_fork_asm+0x11/0x20 [ 201.976121][ T5794] [ 201.980796][ T5794] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 201.995679][ T5794] Bluetooth: hci2: failed to register connection device [ 203.209975][ T7472] netlink: 'syz.0.616': attribute type 4 has an invalid length. [ 203.263115][ T7472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.616'. [ 203.689388][ T7476] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.617'. [ 204.034431][ T5790] Bluetooth: hci2: command tx timeout [ 204.447207][ T7494] netlink: 'syz.1.625': attribute type 10 has an invalid length. [ 204.548555][ T7494] team0: Device hsr_slave_0 failed to register rx_handler [ 204.696664][ T7497] syzkaller0: entered promiscuous mode [ 204.702433][ T7497] syzkaller0: entered allmulticast mode [ 205.690866][ T5790] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 206.680722][ T7520] syz.2.633[7520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.680874][ T7520] syz.2.633[7520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.979921][ T7512] netlink: 'syz.1.630': attribute type 4 has an invalid length. [ 207.000021][ T7512] netlink: 152 bytes leftover after parsing attributes in process `syz.1.630'. [ 207.027748][ T7512] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 207.813366][ T5790] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 208.797830][ T7563] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.653'. [ 208.832562][ T7563] openvswitch: netlink: Duplicate key (type 0). [ 209.121296][ T7575] netlink: 'syz.1.657': attribute type 28 has an invalid length. [ 209.131833][ T7575] netlink: 'syz.1.657': attribute type 29 has an invalid length. [ 209.140331][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.1.657'. [ 209.721234][ T5790] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 210.143320][ T7593] syzkaller0: entered promiscuous mode [ 210.156731][ T7593] syzkaller0: entered allmulticast mode [ 212.262170][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 212.269412][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 212.271438][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 213.148895][ T5794] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11 [ 213.157572][ T5794] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 214.742076][ T7643] macsec0: entered promiscuous mode [ 214.747764][ T7643] macsec0: entered allmulticast mode [ 214.803880][ T7643] veth1_macvtap: entered allmulticast mode [ 214.817672][ T7649] syzkaller0: entered promiscuous mode [ 214.835455][ T7649] syzkaller0: entered allmulticast mode [ 214.863635][ T5794] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11 [ 214.871015][ T5794] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 215.458074][ T7660] netlink: 'syz.1.688': attribute type 10 has an invalid length. [ 215.492957][ T7660] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 215.603277][ T7660] team0: Port device wlan1 added [ 215.924984][ T7674] veth1_macvtap: left allmulticast mode [ 215.947027][ T7674] veth1_macvtap: left promiscuous mode [ 215.960818][ T7674] macsec0: left promiscuous mode [ 215.967496][ T7674] macsec0: left allmulticast mode [ 216.398709][ T7676] team0: Port device team_slave_0 removed [ 216.405558][ T7676] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 216.428538][ T7679] wg2: entered promiscuous mode [ 216.434172][ T7679] wg2: entered allmulticast mode [ 217.073582][ T7691] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 217.126154][ T7691] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 217.234046][ T5794] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 217.243497][ T5794] Bluetooth: hci2: Injecting HCI hardware error event [ 217.252257][ T5794] Bluetooth: hci2: hardware error 0x00 [ 219.559271][ T5794] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 220.440598][ T7707] bridge_slave_1: mtu less than device minimum [ 220.621805][ T7719] netlink: 'syz.3.709': attribute type 29 has an invalid length. [ 222.499424][ T7713] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 222.511630][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 222.535678][ T7717] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.708'. [ 222.553655][ T7717] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.708'. [ 222.572164][ T7717] netlink: 2 bytes leftover after parsing attributes in process `syz.2.708'. [ 222.582107][ T7719] netlink: 'syz.3.709': attribute type 29 has an invalid length. [ 225.446604][ T7754] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.720'. [ 225.486248][ T7754] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.720'. [ 225.516172][ T7754] netlink: 2 bytes leftover after parsing attributes in process `syz.0.720'. [ 225.910152][ T7769] netlink: 'syz.1.728': attribute type 11 has an invalid length. [ 225.925474][ T7769] netlink: 195824 bytes leftover after parsing attributes in process `syz.1.728'. [ 226.480361][ T7776] syzkaller0: entered promiscuous mode [ 226.486355][ T7776] syzkaller0: entered allmulticast mode [ 228.973881][ T7788] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.735'. [ 228.983874][ T7788] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.735'. [ 228.996850][ T7788] netlink: 2 bytes leftover after parsing attributes in process `syz.1.735'. [ 229.309888][ T7803] netlink: 'syz.0.740': attribute type 11 has an invalid length. [ 229.322130][ T7803] netlink: 195824 bytes leftover after parsing attributes in process `syz.0.740'. [ 229.387614][ T5794] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 230.607722][ T7823] syzkaller0: entered promiscuous mode [ 230.636461][ T7823] syzkaller0: entered allmulticast mode [ 230.658548][ T7827] netlink: 'syz.0.750': attribute type 1 has an invalid length. [ 230.688525][ T7827] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.750'. [ 230.730648][ T7827] netlink: 9 bytes leftover after parsing attributes in process `syz.0.750'. [ 233.070750][ T7842] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 233.085574][ T7842] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.763'. [ 233.101079][ T7842] netlink: 9 bytes leftover after parsing attributes in process `syz.1.763'. [ 233.318812][ T7843] syzkaller0: entered promiscuous mode [ 233.336459][ T7843] syzkaller0: entered allmulticast mode [ 233.398220][ T5794] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 233.825383][ T7853] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.758'. [ 236.967209][ T7878] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 236.993293][ T7878] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.768'. [ 237.022015][ T7878] netlink: 9 bytes leftover after parsing attributes in process `syz.3.768'. [ 237.342423][ T5794] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 237.625075][ T7891] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.771'. [ 238.396927][ T7906] veth0_vlan: entered allmulticast mode [ 238.619751][ T7907] veth0_vlan: left promiscuous mode [ 238.626934][ T7907] veth0_vlan: entered promiscuous mode [ 240.540551][ T7944] veth0_vlan: entered allmulticast mode [ 240.762078][ T7944] veth0_vlan: left promiscuous mode [ 240.782448][ T7944] veth0_vlan: entered promiscuous mode [ 242.013554][ T7972] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.793'. [ 246.665913][ T8037] veth0_vlan: left promiscuous mode [ 246.674206][ T8037] veth0_vlan: entered promiscuous mode [ 248.972206][ T8047] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.816'. [ 250.475655][ T8070] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 250.482947][ T8070] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 250.493522][ T8070] veth0_to_bridge: entered allmulticast mode [ 250.501508][ T8070] veth0_to_bridge: entered promiscuous mode [ 250.529792][ T8070] Ÿë: port 2(erspan0) entered blocking state [ 250.536335][ T8070] Ÿë: port 2(erspan0) entered disabled state [ 250.543341][ T8070] erspan0: entered allmulticast mode [ 250.550435][ T8070] erspan0: entered promiscuous mode [ 250.738356][ T8079] netlink: 'syz.3.834': attribute type 3 has an invalid length. [ 250.755998][ T8079] netlink: 'syz.3.834': attribute type 4 has an invalid length. [ 250.775000][ T8079] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.834'. [ 251.458270][ T8100] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.839'. [ 253.758798][ T8101] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 253.769083][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 253.969217][ T8109] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.849'. [ 254.126963][ T8115] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 254.148603][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 256.270237][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.277386][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.710331][ T8127] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 256.717802][ T8127] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 256.725159][ T8127] veth0_to_bridge: entered allmulticast mode [ 256.734091][ T8127] veth0_to_bridge: entered promiscuous mode [ 256.743527][ T8130] Ÿë: port 2(erspan0) entered blocking state [ 256.750454][ T8130] Ÿë: port 2(erspan0) entered disabled state [ 256.766414][ T8130] erspan0: entered allmulticast mode [ 256.780265][ T8130] erspan0: entered promiscuous mode [ 257.173746][ T8145] netlink: 'syz.0.852': attribute type 29 has an invalid length. [ 257.204292][ T8145] netlink: 'syz.0.852': attribute type 29 has an invalid length. [ 257.234392][ T8148] netlink: 'syz.1.847': attribute type 3 has an invalid length. [ 257.262885][ T8148] netlink: 'syz.1.847': attribute type 4 has an invalid length. [ 257.283458][ T8148] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.847'. [ 257.589268][ T5794] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 257.695711][ T8156] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 257.744356][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 258.501966][ T8174] syz.0.865[8174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.502166][ T8174] syz.0.865[8174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.630399][ T8173] netlink: 'syz.2.873': attribute type 29 has an invalid length. [ 258.694954][ T8173] netlink: 'syz.2.873': attribute type 29 has an invalid length. [ 259.154864][ T8190] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.870'. [ 259.813023][ T8196] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 259.826449][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 259.980670][ T8202] netlink: 'syz.3.875': attribute type 4 has an invalid length. [ 259.989203][ T8202] netlink: 152 bytes leftover after parsing attributes in process `syz.3.875'. [ 260.038265][ T8202] : renamed from bond0 [ 260.223751][ T8206] syz.3.878[8206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.223902][ T8206] syz.3.878[8206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.315262][ T8208] netlink: 'syz.1.877': attribute type 29 has an invalid length. [ 260.318704][ T8205] netlink: 'syz.2.885': attribute type 4 has an invalid length. [ 260.362023][ T8205] netlink: 152 bytes leftover after parsing attributes in process `syz.2.885'. [ 260.395360][ T8205] : renamed from bond0 (while UP) [ 260.443339][ T8208] netlink: 'syz.1.877': attribute type 29 has an invalid length. [ 260.718240][ T8216] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.888'. [ 260.727287][ T5794] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 261.204501][ T8231] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 261.218986][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 261.850066][ T8234] team0: Port device hsr_slave_0 added [ 261.877795][ T8238] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.897'. [ 263.134439][ T8251] validate_nla: 3 callbacks suppressed [ 263.134459][ T8251] netlink: 'syz.0.893': attribute type 4 has an invalid length. [ 263.167685][ T8251] netlink: 152 bytes leftover after parsing attributes in process `syz.0.893'. [ 263.245194][ T8251] : renamed from bond0 (while UP) [ 263.378334][ T8260] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 263.414632][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 263.588741][ T8264] netlink: 'syz.2.901': attribute type 4 has an invalid length. [ 263.597858][ T8264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.901'. [ 264.046036][ T8271] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.658652][ T8287] __nla_validate_parse: 1 callbacks suppressed [ 264.658689][ T8287] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.908'. [ 265.030001][ T8298] netlink: 'syz.1.912': attribute type 4 has an invalid length. [ 265.042939][ T8298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.912'. [ 265.043318][ T8297] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.922'. [ 265.997812][ T8324] syzkaller0: entered promiscuous mode [ 266.031583][ T8324] syzkaller0: entered allmulticast mode [ 266.259391][ T8335] netlink: 'syz.3.925': attribute type 4 has an invalid length. [ 266.267544][ T8335] netlink: 132 bytes leftover after parsing attributes in process `syz.3.925'. [ 268.283565][ T8342] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.926'. [ 268.322177][ T8340] netlink: 'syz.2.936': attribute type 4 has an invalid length. [ 268.330259][ T8340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.936'. [ 269.990230][ T8380] ================================================================== [ 269.998577][ T8380] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 270.006444][ T8380] Write of size 32 at addr ffff88807634d890 by task syz.0.943/8380 [ 270.014504][ T8380] [ 270.017107][ T8380] CPU: 0 PID: 8380 Comm: syz.0.943 Not tainted 6.6.101-syzkaller #0 [ 270.025552][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.036242][ T8380] Call Trace: [ 270.039649][ T8380] [ 270.042613][ T8380] dump_stack_lvl+0x16c/0x230 [ 270.047466][ T8380] ? read_lock_is_recursive+0x20/0x20 [ 270.053072][ T8380] ? show_regs_print_info+0x20/0x20 [ 270.058328][ T8380] ? load_image+0x3b0/0x3b0 [ 270.062950][ T8380] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 270.068484][ T8380] ? __virt_addr_valid+0x18c/0x540 [ 270.073976][ T8380] ? __virt_addr_valid+0x469/0x540 [ 270.079300][ T8380] print_report+0xac/0x220 [ 270.084090][ T8380] ? __bpf_get_stackid+0x6bf/0x900 [ 270.089499][ T8380] kasan_report+0x117/0x150 [ 270.094055][ T8380] ? __bpf_get_stackid+0x6bf/0x900 [ 270.099576][ T8380] kasan_check_range+0x288/0x290 [ 270.105035][ T8380] ? __bpf_get_stackid+0x6bf/0x900 [ 270.110384][ T8380] __asan_memcpy+0x40/0x70 [ 270.115192][ T8380] __bpf_get_stackid+0x6bf/0x900 [ 270.120286][ T8380] ? bpf_prog_e95a4a16f042d2d7+0x29/0x2d [ 270.126372][ T8380] bpf_get_stackid_raw_tp+0x196/0x200 [ 270.132106][ T8380] ? bpf_trace_run10+0x14a/0x450 [ 270.137174][ T8380] bpf_prog_e95a4a16f042d2d7+0x29/0x2d [ 270.143313][ T8380] bpf_trace_run10+0x3a2/0x450 [ 270.148319][ T8380] ? bpf_trace_run9+0x450/0x450 [ 270.153571][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.159333][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.165019][ T8380] __bpf_trace_percpu_alloc_percpu+0x365/0x3f0 [ 270.171228][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.176811][ T8380] ? perf_trace_percpu_destroy_chunk+0x2f0/0x2f0 [ 270.183317][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.188917][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.194512][ T8380] ? pcpu_alloc+0xf23/0x18d0 [ 270.199178][ T8380] ? __lock_acquire+0x7c80/0x7c80 [ 270.204471][ T8380] ? preempt_schedule_common+0x82/0xc0 [ 270.209967][ T8380] ? preempt_schedule+0xab/0xc0 [ 270.215033][ T8380] ? schedule_preempt_disabled+0x20/0x20 [ 270.221056][ T8380] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 270.226909][ T8380] ? mutex_unlock+0x10/0x10 [ 270.231443][ T8380] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 270.237488][ T8380] ? _raw_spin_unlock+0x40/0x40 [ 270.242855][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.248224][ T8380] pcpu_alloc+0x1747/0x18d0 [ 270.253005][ T8380] bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.258353][ T8380] htab_map_alloc+0x342/0xe50 [ 270.263412][ T8380] map_create+0x877/0x1110 [ 270.268033][ T8380] ? security_bpf+0x7e/0xa0 [ 270.272956][ T8380] __sys_bpf+0x5f0/0x800 [ 270.277477][ T8380] ? bpf_link_show_fdinfo+0x350/0x350 [ 270.282901][ T8380] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 270.289186][ T8380] __x64_sys_bpf+0x7c/0x90 [ 270.293736][ T8380] do_syscall_64+0x55/0xb0 [ 270.298302][ T8380] ? clear_bhb_loop+0x40/0x90 [ 270.303340][ T8380] ? clear_bhb_loop+0x40/0x90 [ 270.308073][ T8380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.314081][ T8380] RIP: 0033:0x7f55cf38ebe9 [ 270.318531][ T8380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.339003][ T8380] RSP: 002b:00007f55d026c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.347724][ T8380] RAX: ffffffffffffffda RBX: 00007f55cf5b5fa0 RCX: 00007f55cf38ebe9 [ 270.355734][ T8380] RDX: 0000000000000048 RSI: 0000200000000840 RDI: 0000000000000000 [ 270.363746][ T8380] RBP: 00007f55cf411e19 R08: 0000000000000000 R09: 0000000000000000 [ 270.372273][ T8380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.381076][ T8380] R13: 00007f55cf5b6038 R14: 00007f55cf5b5fa0 R15: 00007ffe040d0f28 [ 270.389357][ T8380] [ 270.392436][ T8380] [ 270.394876][ T8380] Allocated by task 8380: [ 270.399235][ T8380] kasan_set_track+0x4e/0x70 [ 270.403942][ T8380] __kasan_kmalloc+0x8f/0xa0 [ 270.408599][ T8380] __kmalloc_node+0xb4/0x230 [ 270.413213][ T8380] bpf_map_area_alloc+0x5e/0x110 [ 270.418558][ T8380] prealloc_elems_and_freelist+0x86/0x1c0 [ 270.424497][ T8380] stack_map_alloc+0x33a/0x4c0 [ 270.429643][ T8380] map_create+0x877/0x1110 [ 270.434365][ T8380] __sys_bpf+0x5f0/0x800 [ 270.438895][ T8380] __x64_sys_bpf+0x7c/0x90 [ 270.443881][ T8380] do_syscall_64+0x55/0xb0 [ 270.448847][ T8380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.454821][ T8380] [ 270.457411][ T8380] The buggy address belongs to the object at ffff88807634d880 [ 270.457411][ T8380] which belongs to the cache kmalloc-cg-32 of size 32 [ 270.471656][ T8380] The buggy address is located 16 bytes inside of [ 270.471656][ T8380] allocated 24-byte region [ffff88807634d880, ffff88807634d898) [ 270.486346][ T8380] [ 270.488701][ T8380] The buggy address belongs to the physical page: [ 270.495355][ T8380] page:ffffea0001d8d340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7634d [ 270.505650][ T8380] memcg:ffff8880242a5801 [ 270.510187][ T8380] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 270.518282][ T8380] page_type: 0xffffffff() [ 270.522672][ T8380] raw: 00fff00000000800 ffff88801784d8c0 0000000000000000 0000000000000001 [ 270.531299][ T8380] raw: 0000000000000000 0000000080400040 00000001ffffffff ffff8880242a5801 [ 270.540165][ T8380] page dumped because: kasan: bad access detected [ 270.546877][ T8380] page_owner tracks the page as allocated [ 270.552714][ T8380] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5764, tgid 5764 (rm), ts 75264524624, free_ts 30217707901 [ 270.570795][ T8380] post_alloc_hook+0x1cd/0x210 [ 270.576057][ T8380] get_page_from_freelist+0x195c/0x19f0 [ 270.581811][ T8380] __alloc_pages+0x1e3/0x460 [ 270.586887][ T8380] alloc_slab_page+0x5d/0x170 [ 270.591727][ T8380] new_slab+0x87/0x2e0 [ 270.595939][ T8380] ___slab_alloc+0xc6d/0x12f0 [ 270.600759][ T8380] __kmem_cache_alloc_node+0x1a2/0x260 [ 270.606267][ T8380] kmalloc_trace+0x2a/0xe0 [ 270.610813][ T8380] single_open+0x5a/0x240 [ 270.615324][ T8380] proc_reg_open+0x25a/0x550 [ 270.619985][ T8380] do_dentry_open+0x8c6/0x1500 [ 270.624764][ T8380] path_openat+0x274b/0x3190 [ 270.629553][ T8380] do_filp_open+0x1c5/0x3d0 [ 270.634419][ T8380] do_sys_openat2+0x12c/0x1c0 [ 270.639152][ T8380] __x64_sys_openat+0x139/0x160 [ 270.644048][ T8380] do_syscall_64+0x55/0xb0 [ 270.648603][ T8380] page last free stack trace: [ 270.653748][ T8380] free_unref_page_prepare+0x7ce/0x8e0 [ 270.659336][ T8380] free_unref_page+0x32/0x2e0 [ 270.664199][ T8380] free_contig_range+0xa1/0x160 [ 270.669165][ T8380] destroy_args+0x87/0x770 [ 270.673791][ T8380] debug_vm_pgtable+0x3cc/0x410 [ 270.678762][ T8380] do_one_initcall+0x1fd/0x750 [ 270.684172][ T8380] do_initcall_level+0x137/0x1f0 [ 270.689261][ T8380] do_initcalls+0x69/0xd0 [ 270.693747][ T8380] kernel_init_freeable+0x3d2/0x570 [ 270.699546][ T8380] kernel_init+0x1d/0x1c0 [ 270.704547][ T8380] ret_from_fork+0x48/0x80 [ 270.708999][ T8380] ret_from_fork_asm+0x11/0x20 [ 270.714250][ T8380] [ 270.716859][ T8380] Memory state around the buggy address: [ 270.722774][ T8380] ffff88807634d780: fb fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 270.731920][ T8380] ffff88807634d800: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 270.740108][ T8380] >ffff88807634d880: 00 00 00 fc fc fc fc fc fb fb fb fb fc fc fc fc [ 270.748190][ T8380] ^ [ 270.753066][ T8380] ffff88807634d900: fa fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 270.761159][ T8380] ffff88807634d980: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 270.769957][ T8380] ================================================================== [ 270.781522][ T8380] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 270.788867][ T8380] CPU: 0 PID: 8380 Comm: syz.0.943 Not tainted 6.6.101-syzkaller #0 [ 270.796872][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.807042][ T8380] Call Trace: [ 270.810525][ T8380] [ 270.813734][ T8380] dump_stack_lvl+0x16c/0x230 [ 270.818438][ T8380] ? show_regs_print_info+0x20/0x20 [ 270.823745][ T8380] ? load_image+0x3b0/0x3b0 [ 270.828292][ T8380] panic+0x2c0/0x710 [ 270.832403][ T8380] ? bpf_jit_dump+0xd0/0xd0 [ 270.837456][ T8380] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 270.844466][ T8380] ? __bpf_get_stackid+0x6bf/0x900 [ 270.849620][ T8380] ? check_panic_on_warn+0x70/0xa0 [ 270.855271][ T8380] ? __bpf_get_stackid+0x6bf/0x900 [ 270.860514][ T8380] check_panic_on_warn+0x84/0xa0 [ 270.865650][ T8380] ? __bpf_get_stackid+0x6bf/0x900 [ 270.870880][ T8380] end_report+0x6f/0x140 [ 270.875511][ T8380] kasan_report+0x128/0x150 [ 270.880045][ T8380] ? __bpf_get_stackid+0x6bf/0x900 [ 270.885183][ T8380] kasan_check_range+0x288/0x290 [ 270.890187][ T8380] ? __bpf_get_stackid+0x6bf/0x900 [ 270.895772][ T8380] __asan_memcpy+0x40/0x70 [ 270.900565][ T8380] __bpf_get_stackid+0x6bf/0x900 [ 270.905547][ T8380] ? bpf_prog_e95a4a16f042d2d7+0x29/0x2d [ 270.911197][ T8380] bpf_get_stackid_raw_tp+0x196/0x200 [ 270.916608][ T8380] ? bpf_trace_run10+0x14a/0x450 [ 270.921729][ T8380] bpf_prog_e95a4a16f042d2d7+0x29/0x2d [ 270.927497][ T8380] bpf_trace_run10+0x3a2/0x450 [ 270.932731][ T8380] ? bpf_trace_run9+0x450/0x450 [ 270.937703][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.943107][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.948690][ T8380] __bpf_trace_percpu_alloc_percpu+0x365/0x3f0 [ 270.955105][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.960805][ T8380] ? perf_trace_percpu_destroy_chunk+0x2f0/0x2f0 [ 270.967262][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.972837][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 270.978369][ T8380] ? pcpu_alloc+0xf23/0x18d0 [ 270.983074][ T8380] ? __lock_acquire+0x7c80/0x7c80 [ 270.988122][ T8380] ? preempt_schedule_common+0x82/0xc0 [ 270.993710][ T8380] ? preempt_schedule+0xab/0xc0 [ 270.998587][ T8380] ? schedule_preempt_disabled+0x20/0x20 [ 271.004380][ T8380] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 271.010039][ T8380] ? mutex_unlock+0x10/0x10 [ 271.014790][ T8380] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 271.020890][ T8380] ? _raw_spin_unlock+0x40/0x40 [ 271.025859][ T8380] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 271.032037][ T8380] pcpu_alloc+0x1747/0x18d0 [ 271.036695][ T8380] bpf_map_alloc_percpu+0xb9/0x1a0 [ 271.042568][ T8380] htab_map_alloc+0x342/0xe50 [ 271.047309][ T8380] map_create+0x877/0x1110 [ 271.051752][ T8380] ? security_bpf+0x7e/0xa0 [ 271.056368][ T8380] __sys_bpf+0x5f0/0x800 [ 271.060854][ T8380] ? bpf_link_show_fdinfo+0x350/0x350 [ 271.066264][ T8380] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.072595][ T8380] __x64_sys_bpf+0x7c/0x90 [ 271.077040][ T8380] do_syscall_64+0x55/0xb0 [ 271.081824][ T8380] ? clear_bhb_loop+0x40/0x90 [ 271.086525][ T8380] ? clear_bhb_loop+0x40/0x90 [ 271.091330][ T8380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.097458][ T8380] RIP: 0033:0x7f55cf38ebe9 [ 271.102412][ T8380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.122840][ T8380] RSP: 002b:00007f55d026c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.131664][ T8380] RAX: ffffffffffffffda RBX: 00007f55cf5b5fa0 RCX: 00007f55cf38ebe9 [ 271.139918][ T8380] RDX: 0000000000000048 RSI: 0000200000000840 RDI: 0000000000000000 [ 271.148533][ T8380] RBP: 00007f55cf411e19 R08: 0000000000000000 R09: 0000000000000000 [ 271.157066][ T8380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.165408][ T8380] R13: 00007f55cf5b6038 R14: 00007f55cf5b5fa0 R15: 00007ffe040d0f28 [ 271.173495][ T8380] [ 271.177008][ T8380] Kernel Offset: disabled [ 271.181643][ T8380] Rebooting in 86400 seconds..