last executing test programs: 16m34.995591737s ago: executing program 2 (id=3247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0307e804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16m34.802160762s ago: executing program 2 (id=3248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000340), &(0x7f00000001c0)=r0}, 0x20) close(0x3) 16m34.719331929s ago: executing program 2 (id=3249): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8902, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1}, 0x400100f) 16m32.935963523s ago: executing program 2 (id=3251): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 16m32.642671117s ago: executing program 2 (id=3256): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4020}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 16m32.123907238s ago: executing program 2 (id=3257): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 16m31.702342213s ago: executing program 32 (id=3257): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 6.654951371s ago: executing program 0 (id=9629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20008040) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) 6.532317101s ago: executing program 4 (id=9631): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x2, 0x108, 0x1, 0xffff}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b!'], 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000640)="8ad0cfc54974dfa22d0c6ed7b74acc1c6431c188b5099cccf8b31dec20abf94c2e7ac6772c37b2a2e9d8701ed9fe37db6bc64e32edddbee6cbc484b3f99964f116773dbf53e3194d8c3527eae264c57150e15efea32b310690ec3aa970b5e5f4033cf8483cc65b541c7f391c1b15d0bd8168a5a1c74fda386b934a58405aa7650fcfb7ef479d649b70e5490d4cd8c8443cf37ba428db6c4df6f137afee74a594e103a48425cb4dc3845acb29547613533386746d431bf9a4da09e48b2523d6ca71bcc8145489e5c287b4f37718000c83d352267424e74737d75bf491ee917b", &(0x7f0000000280)=""/163, &(0x7f00000003c0)="32637795128320c45675ff05", &(0x7f0000000740)="77ef17340b236c6e8e7a1d7625b36cc93623e5c2e1f6d9e8fde6ce183427015ed691592c65c510949fc518ce691fcbfe7baf3853d80416e2cd0fc5515a4028dc772d9e7e16c910aa1da380deb0102f64c6c90ac0f1490fa5d14548659e786257142f0f30f8edb0d0f0173cd15bbeabcb", 0x3, r0}, 0x38) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000600)={'tunl0\x00', @local}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x8, 0xe, 0x35, 0x7, 0x0, 0x4, 0x80080, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x4, 0x3, 0x7779, 0x8, 0xb, 0x0, 0x7fffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0xd}, 0x94) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xb}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 6.433679619s ago: executing program 0 (id=9632): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x8000}) mkdir(0x0, 0x40) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2e, &(0x7f0000000000)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) 6.227975076s ago: executing program 3 (id=9633): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x33fe0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x1001200, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0) 6.17660483s ago: executing program 4 (id=9634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) r4 = syz_clone(0x10222000, &(0x7f0000000200)="1d5b1aa2b5345c5d73f0a66a57e157b4c130a20da7e24a6f7d5b25430260384302da0e545e74e736a7453ff0f7c6a74340fba90f26a7705f54641d5e9e752a8e75a66433d48e1458858757fc7d70c28fe7dfa71b0074ac95a6e770f2ab6223387d4fd173e34bec", 0x67, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000340)="ec81178d76e1554846228ba0c5e7bf418f22e61086e1a0c647351ec305d39674dea9d0d6baa71cd6baba7c1dd1e9668c3b939a69e085b218488c1a4d4b061f1267911c5f2ca6844b6e35ff75df369ae1befb1b539adc3e9b36c85ca3d435513b8badfe89ab8030411781b6e290f55f675612da4ca83003c47fc924957ac4be87ee15d0") socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) sendmsg$unix(r5, &(0x7f0000000bc0)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000580)="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", 0xfa}, {&(0x7f0000000680)="2c8f64cdf5de556429c21aa03c6845474a88f39eb50b427a8f53b6d6bfe1c928c32844b701c11f531280dafa7469c00856c8016d692143b97a3459f9984686457e7ccdbd21faf8ff174abd224097d19829dd3224d04a91d2e60ad2080b100448b0a033ffb56f2bb6669258e0efadfe4b181c959fdb6d55285d1ff506a40af820c4c7d64fa036a3baa95f070029a5ca1fbb1fd3e55ed500859952011a21285e9d814a7073031119f9dddd", 0xaa}, {&(0x7f0000000400)="48c813a37f348c869e685d2108ae778eba8caee39b05288b0e7754673f91bd181115a2e8a6aa15ad7d33e000f94434cc63e04c1508efc0b344a24a602ba416723898e0acbed3fab9ea2791de7ae39ecfbec9c2b6e44961347e20e389e70528c53b99ace7889e318faa818441421b1c3a154a66591e8a0320", 0x78}, {&(0x7f00000000c0)="50ec5500ccffb988b9f3c0d992cddc7218bf0df0b319a44ee71664c24223c16173d223", 0x23}, {&(0x7f0000000740)="bab394f611283eb88bea97e3f5269274fdfe70813f14cc86d65c8f0cd1e37bbda0e7b4b7b57add5d9c92b3e0defb785c2fbb42034e850fd84f29a995b614429d3fc9d57c3b09aeecb6864409f493a85dbb8bc3d770e6c48509f0bf357f44b56a2136634f19f87b8e884827fdf6bf2296ffdb6384326563a50bef5126adef6e666c62e4ebc9d90ed5701b535c04b558d94e98e94b4be94a834e45a176b3ef0c8b37f333784c6212e256375453f4e4790c9c4f525086324d749771a0e8e99ec144a0b31dab73dc30901439b76e29e12a3b6146b50f0e75f7e981f5f5a3607ad10f11e280039bfc52ed778864", 0xeb}, {&(0x7f00000001c0)="9f75be5d17907d8d11375c0b79c64ef33c7e", 0x12}, {&(0x7f0000000840)="47d1b99bc8e7ca1d6a1ffd42", 0xc}, {&(0x7f0000000880)="08f920d443dff4f32fde2e7e1a30290940ea1092caa346b726b8cff92833be610708c93555d8d10653bc37a6fce6c550fefc7d83df097095afef1333e1ffbe39c2d59486c7d12c4d58dd32d2c6cd2d061d96bd7ab8cd9019f408e61f78b51f90621ab6ab515b7d354773161354c1716d308ce1525b694a15e771eb74c5bd06a3059f9428e10fff15e6731824883e3823986ee59dea65a477", 0x98}, {&(0x7f0000000940)="fe607f8f480c2d56298a7a5b9fff67f6741805933bb7af728ee0c50251fe4fcc84a3e9d0ae2a7112b26deea8254e5a57d08c40e9df79960f08b92bb6e4d541b8686a92c25684ca63c7a06960b02045a7c4e59a2fa884a86ff771af071ad43c7d333d9eb3626cefd0b8bfc38d2364ca51a79c74f88a198d3b63ef5f1a0a3e95384c091e514eae693bfce8cb6f4570ae72c3ba02c58b3e79218943458bebaba2a34e0bbf28e812606f50a7ddfe2f881dcdaf1e9bb35330d3fed23f52bbc4314d03c547c3cb9e875caa8a018e2a2026c6eb61dd189dd44717959409eeee3116266e8f6f837db4707f12f12aaa93f3aa9e852d120486dc2040a8", 0xf8}], 0x9, &(0x7f0000000b00)=[@rights={{0x30, 0x1, 0x1, [r3, r0, r2, 0xffffffffffffffff, r3, r3, r1, r3]}}, @rights={{0x2c, 0x1, 0x1, [r7, r2, r1, r2, r1, r2, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x98, 0x80}, 0x40800) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 4.394525024s ago: executing program 4 (id=9635): bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x8004745a, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.394216194s ago: executing program 3 (id=9636): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) close(r2) socketpair(0x28, 0x800, 0x4, &(0x7f00000000c0)) 4.387971325s ago: executing program 0 (id=9643): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x8000}) mkdir(0x0, 0x40) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2e, &(0x7f0000000000)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) 3.858513367s ago: executing program 1 (id=9638): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) 3.858235467s ago: executing program 4 (id=9639): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) close(r1) 3.857979578s ago: executing program 3 (id=9640): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x9}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 3.720052069s ago: executing program 1 (id=9641): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0040020000000000000000000000000000001700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000000000000000850000009b000000b7080000000000007b8af8ff00000000b7080000003c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000020000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.002783037s ago: executing program 1 (id=9642): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x14130}], 0x1}, 0x80d1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xcc, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2b, 0xfffffc03, 0x3, 0x2, 0x8000000, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) close(r0) 1.405313246s ago: executing program 0 (id=9644): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 1.404861396s ago: executing program 1 (id=9645): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) r4 = syz_clone(0x10222000, &(0x7f0000000200)="1d5b1aa2b5345c5d73f0a66a57e157b4c130a20da7e24a6f7d5b25430260384302da0e545e74e736a7453ff0f7c6a74340fba90f26a7705f54641d5e9e752a8e75a66433d48e1458858757fc7d70c28fe7dfa71b0074ac95a6e770f2ab6223387d4fd173e34bec", 0x67, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000340)="ec81178d76e1554846228ba0c5e7bf418f22e61086e1a0c647351ec305d39674dea9d0d6baa71cd6baba7c1dd1e9668c3b939a69e085b218488c1a4d4b061f1267911c5f2ca6844b6e35ff75df369ae1befb1b539adc3e9b36c85ca3d435513b8badfe89ab8030411781b6e290f55f675612da4ca83003c47fc924957ac4be87ee15d0") socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) sendmsg$unix(r5, &(0x7f0000000bc0)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000580)="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", 0xfa}, {&(0x7f0000000680)="2c8f64cdf5de556429c21aa03c6845474a88f39eb50b427a8f53b6d6bfe1c928c32844b701c11f531280dafa7469c00856c8016d692143b97a3459f9984686457e7ccdbd21faf8ff174abd224097d19829dd3224d04a91d2e60ad2080b100448b0a033ffb56f2bb6669258e0efadfe4b181c959fdb6d55285d1ff506a40af820c4c7d64fa036a3baa95f070029a5ca1fbb1fd3e55ed500859952011a21285e9d814a7073031119f9dddd", 0xaa}, {&(0x7f0000000400)="48c813a37f348c869e685d2108ae778eba8caee39b05288b0e7754673f91bd181115a2e8a6aa15ad7d33e000f94434cc63e04c1508efc0b344a24a602ba416723898e0acbed3fab9ea2791de7ae39ecfbec9c2b6e44961347e20e389e70528c53b99ace7889e318faa818441421b1c3a154a66591e8a0320", 0x78}, {&(0x7f00000000c0)="50ec5500ccffb988b9f3c0d992cddc7218bf0df0b319a44ee71664c24223c16173d223", 0x23}, {&(0x7f0000000740)="bab394f611283eb88bea97e3f5269274fdfe70813f14cc86d65c8f0cd1e37bbda0e7b4b7b57add5d9c92b3e0defb785c2fbb42034e850fd84f29a995b614429d3fc9d57c3b09aeecb6864409f493a85dbb8bc3d770e6c48509f0bf357f44b56a2136634f19f87b8e884827fdf6bf2296ffdb6384326563a50bef5126adef6e666c62e4ebc9d90ed5701b535c04b558d94e98e94b4be94a834e45a176b3ef0c8b37f333784c6212e256375453f4e4790c9c4f525086324d749771a0e8e99ec144a0b31dab73dc30901439b76e29e12a3b6146b50f0e75f7e981f5f5a3607ad10f11e280039bfc52ed778864", 0xeb}, {&(0x7f00000001c0)="9f75be5d17907d8d11375c0b79c64ef33c7e", 0x12}, {&(0x7f0000000840)="47d1b99bc8e7ca1d6a1ffd42", 0xc}, {&(0x7f0000000880)="08f920d443dff4f32fde2e7e1a30290940ea1092caa346b726b8cff92833be610708c93555d8d10653bc37a6fce6c550fefc7d83df097095afef1333e1ffbe39c2d59486c7d12c4d58dd32d2c6cd2d061d96bd7ab8cd9019f408e61f78b51f90621ab6ab515b7d354773161354c1716d308ce1525b694a15e771eb74c5bd06a3059f9428e10fff15e6731824883e3823986ee59dea65a477", 0x98}, {&(0x7f0000000940)="fe607f8f480c2d56298a7a5b9fff67f6741805933bb7af728ee0c50251fe4fcc84a3e9d0ae2a7112b26deea8254e5a57d08c40e9df79960f08b92bb6e4d541b8686a92c25684ca63c7a06960b02045a7c4e59a2fa884a86ff771af071ad43c7d333d9eb3626cefd0b8bfc38d2364ca51a79c74f88a198d3b63ef5f1a0a3e95384c091e514eae693bfce8cb6f4570ae72c3ba02c58b3e79218943458bebaba2a34e0bbf28e812606f50a7ddfe2f881dcdaf1e9bb35330d3fed23f52bbc4314d03c547c3cb9e875caa8a018e2a2026c6eb61dd189dd44717959409eeee3116266e8f6f837db4707f12f12aaa93f3aa9e852d120486dc2040a8", 0xf8}], 0x9, &(0x7f0000000b00)=[@rights={{0x30, 0x1, 0x1, [r3, r0, r2, 0xffffffffffffffff, r3, r3, r1, r3]}}, @rights={{0x2c, 0x1, 0x1, [r7, r2, r1, r2, r1, r2, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x98, 0x80}, 0x40800) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.404494396s ago: executing program 4 (id=9646): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x4, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 1.403303946s ago: executing program 3 (id=9647): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.012429208s ago: executing program 0 (id=9648): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) close(r2) socketpair(0x28, 0x800, 0x4, &(0x7f00000000c0)) 649.743627ms ago: executing program 1 (id=9649): bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x8004745a, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 575.121533ms ago: executing program 0 (id=9650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) 574.820174ms ago: executing program 3 (id=9651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20008040) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) 247.39085ms ago: executing program 3 (id=9652): socket$kcm(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000900), 0x4) 164.439546ms ago: executing program 1 (id=9653): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x33fe0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x1001200, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0) 0s ago: executing program 4 (id=9654): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x83, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) syz_clone(0xa089400, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x95, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x12000, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 [ 1001.595292][T20736] ? aa_sock_opt_perm+0x74/0x100 [ 1001.600289][T20736] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1001.605882][T20736] ? security_socket_setsockopt+0x7e/0xa0 [ 1001.611639][T20736] ? xsk_poll+0x670/0x670 [ 1001.616033][T20736] do_sock_setsockopt+0x175/0x1a0 [ 1001.621110][T20736] ? __fdget+0x180/0x210 [ 1001.625410][T20736] __x64_sys_setsockopt+0x184/0x200 [ 1001.630684][T20736] do_syscall_64+0x55/0xb0 [ 1001.635150][T20736] ? clear_bhb_loop+0x40/0x90 [ 1001.639868][T20736] ? clear_bhb_loop+0x40/0x90 [ 1001.644596][T20736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.650545][T20736] RIP: 0033:0x7fccd678ebe9 [ 1001.655006][T20736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.674662][T20736] RSP: 002b:00007fccd7643038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1001.683139][T20736] RAX: ffffffffffffffda RBX: 00007fccd69b5fa0 RCX: 00007fccd678ebe9 [ 1001.691156][T20736] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1001.699173][T20736] RBP: 00007fccd6811e19 R08: 0000000000000004 R09: 0000000000000000 [ 1001.707185][T20736] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1001.715198][T20736] R13: 00007fccd69b6038 R14: 00007fccd69b5fa0 R15: 00007ffe0a6f1428 [ 1001.723283][T20736] [ 1001.831766][T20736] Mem-Info: [ 1001.835152][T20736] active_anon:8164 inactive_anon:0 isolated_anon:0 [ 1001.835152][T20736] active_file:18526 inactive_file:40191 isolated_file:0 [ 1001.835152][T20736] unevictable:768 dirty:162 writeback:0 [ 1001.835152][T20736] slab_reclaimable:10820 slab_unreclaimable:100873 [ 1001.835152][T20736] mapped:23745 shmem:1365 pagetables:474 [ 1001.835152][T20736] sec_pagetables:0 bounce:0 [ 1001.835152][T20736] kernel_misc_reclaimable:0 [ 1001.835152][T20736] free:1336509 free_pcp:6873 free_cma:0 [ 1001.902364][T20736] Node 0 active_anon:32656kB inactive_anon:0kB active_file:60416kB inactive_file:160560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94952kB dirty:644kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10040kB pagetables:1896kB sec_pagetables:0kB all_unreclaimable? no [ 1001.945535][T20736] Node 1 active_anon:0kB inactive_anon:0kB active_file:13688kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1001.987786][T20736] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1002.076176][T20736] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1002.096289][T20736] Node 0 DMA32 free:1452692kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:32608kB inactive_anon:0kB active_file:60416kB inactive_file:159224kB unevictable:1536kB writepending:644kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:10404kB local_pcp:5412kB free_cma:0kB [ 1002.164899][T20736] lowmem_reserve[]: 0 0 1 1 1 [ 1002.222659][T20736] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1002.325116][T20736] lowmem_reserve[]: 0 0 0 0 0 [ 1002.341641][T20736] Node 1 Normal free:3877984kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:13688kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17028kB local_pcp:10500kB free_cma:0kB [ 1002.383466][T20736] lowmem_reserve[]: 0 0 0 0 0 [ 1002.391562][T20736] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1002.404854][T20736] Node 0 DMA32: 423*4kB (U) 621*8kB (UM) 493*16kB (UM) 1066*32kB (UME) 696*64kB (UME) 285*128kB (UME) 68*256kB (UME) 38*512kB (UM) 20*1024kB (UM) 12*2048kB (UM) 303*4096kB (UM) = 1452692kB [ 1002.423819][T20736] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1002.435397][T20736] Node 1 Normal: 240*4kB (UME) 50*8kB (UE) 41*16kB (UE) 182*32kB (UE) 45*64kB (UME) 13*128kB (UE) 2*256kB (UM) 1*512kB (U) 2*1024kB (ME) 2*2048kB (ME) 942*4096kB (M) = 3877984kB [ 1002.453354][T20736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1002.464253][T20736] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1002.473711][T20736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1002.493278][T20736] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1002.514896][T20736] 60084 total pagecache pages [ 1002.519759][T20736] 0 pages in swap cache [ 1002.524036][T20736] Free swap = 124996kB [ 1002.541169][T20736] Total swap = 124996kB [ 1002.545373][T20736] 2097051 pages RAM [ 1002.555149][T20736] 0 pages HighMem/MovableOnly [ 1002.560192][T20736] 416137 pages reserved [ 1002.564711][T20736] 0 pages cma reserved [ 1006.881610][T20778] syzkaller0: entered promiscuous mode [ 1006.895900][T20778] syzkaller0: entered allmulticast mode [ 1007.041227][T20787] netlink: 'syz.0.6255': attribute type 4 has an invalid length. [ 1007.049144][T20787] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6255'. [ 1007.072473][T20787] : renamed from bond0 (while UP) [ 1009.098411][T20799] syzkaller0: entered promiscuous mode [ 1009.104111][T20799] syzkaller0: entered allmulticast mode [ 1011.057286][T20809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.064914][T20809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.073042][T20809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.080517][T20809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.089139][T20809] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1011.096349][T20809] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1011.139340][T20812] wg2: entered promiscuous mode [ 1011.146706][T20812] wg2: entered allmulticast mode [ 1011.395008][T20820] wg2: entered promiscuous mode [ 1011.414895][T20820] wg2: entered allmulticast mode [ 1012.151215][T20837] syzkaller0: entered promiscuous mode [ 1012.184087][T20837] syzkaller0: entered allmulticast mode [ 1012.210120][T20840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.232574][T20840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.257956][T20840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.305443][T20840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.318782][T20856] wg2: entered promiscuous mode [ 1014.324171][T20856] wg2: entered allmulticast mode [ 1014.372328][T20858] syzkaller0: entered promiscuous mode [ 1014.377907][T20858] syzkaller0: entered allmulticast mode [ 1016.124926][T20865] netlink: 'syz.0.6284': attribute type 21 has an invalid length. [ 1016.132915][T20865] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6284'. [ 1016.308209][T20874] syzkaller0: entered promiscuous mode [ 1016.313727][T20874] syzkaller0: entered allmulticast mode [ 1018.053848][T13237] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 1018.064751][T20882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.081061][T20882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.092849][T20882] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1018.100477][T20882] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1018.156386][T20882] bridge0: port 3(batadv0) entered disabled state [ 1018.201590][T20882] bridge0: port 3(batadv0) entered disabled state [ 1018.328967][T20886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6293'. [ 1019.332879][T20892] syzkaller0: entered promiscuous mode [ 1019.345667][T20892] syzkaller0: entered allmulticast mode [ 1019.449288][T20902] syzkaller0: entered promiscuous mode [ 1019.454808][T20902] syzkaller0: entered allmulticast mode [ 1019.768373][ T2919] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1023.241254][T20926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.252462][T20926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.263951][T20926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.272342][T20926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.282763][T20926] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1023.290773][T20926] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1023.413380][T20922] syzkaller0: entered promiscuous mode [ 1023.426459][T20922] syzkaller0: entered allmulticast mode [ 1024.318258][T13237] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 1026.624926][T13237] Bluetooth: hci3: unexpected event 0x3c length: 15 > 7 [ 1026.796069][T12018] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1027.274572][T20986] syzkaller0: entered promiscuous mode [ 1027.287461][T20986] syzkaller0: entered allmulticast mode [ 1027.304271][T20982] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.6336'. [ 1027.324305][T20982] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.6336'. [ 1027.350633][T20982] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6336'. [ 1028.709288][T21013] syz.1.6349[21013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1028.709422][T21013] syz.1.6349[21013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1030.183299][T21033] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1030.320798][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6358'. [ 1030.763632][T21041] syzkaller0: entered promiscuous mode [ 1030.769977][T21041] syzkaller0: entered allmulticast mode [ 1031.966654][T21067] netlink: 'syz.4.6369': attribute type 1 has an invalid length. [ 1031.974623][T21067] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.6369'. [ 1031.986676][T21067] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6369'. [ 1032.890393][T21071] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.6371'. [ 1034.263710][T21096] netlink: 'syz.3.6379': attribute type 29 has an invalid length. [ 1035.647856][T21109] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1035.781382][T21096] netlink: 'syz.3.6379': attribute type 29 has an invalid length. [ 1036.146067][T21126] sit0: left promiscuous mode [ 1036.267225][T21130] sit0: entered promiscuous mode [ 1036.644185][T21135] netlink: 'syz.4.6394': attribute type 10 has an invalid length. [ 1036.679099][T21135] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1037.244618][T21156] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 1037.252310][T21156] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1037.259644][T21156] veth0_to_bridge: entered allmulticast mode [ 1037.266973][T21156] veth0_to_bridge: entered promiscuous mode [ 1037.278047][T21156] Ÿë: port 2(erspan0) entered blocking state [ 1037.284350][T21156] Ÿë: port 2(erspan0) entered disabled state [ 1037.291241][T21156] erspan0: entered allmulticast mode [ 1037.298800][T21156] erspan0: entered promiscuous mode [ 1037.422607][T21163] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6405'. [ 1037.432230][T21163] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1037.564013][T13237] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 1037.708835][T21172] netlink: 'syz.1.6409': attribute type 10 has an invalid length. [ 1037.829937][T21172] veth0_vlan: left promiscuous mode [ 1037.872829][T21172] veth0_vlan: entered promiscuous mode [ 1037.923732][T21172] team0: Device veth0_vlan failed to register rx_handler [ 1038.186679][T21179] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 1038.755454][T21206] netlink: 'syz.1.6423': attribute type 11 has an invalid length. [ 1038.775220][T21206] netlink: 195824 bytes leftover after parsing attributes in process `syz.1.6423'. [ 1039.221488][T21216] syzkaller0: entered promiscuous mode [ 1039.229839][T12018] syzkaller0: tun_net_xmit 76 [ 1039.256303][T13260] syzkaller0: tun_net_xmit 76 [ 1039.261639][T13260] syzkaller0: tun_net_xmit 48 [ 1039.327618][ T5847] syzkaller0: tun_net_xmit 76 [ 1039.396990][T13260] syzkaller0: tun_net_xmit 76 [ 1039.481908][ T965] syzkaller0: tun_net_xmit 76 [ 1039.536986][T13260] syzkaller0: tun_net_xmit 76 [ 1039.767582][T21237] netlink: 'syz.1.6432': attribute type 29 has an invalid length. [ 1041.698791][T21237] netlink: 'syz.1.6432': attribute type 29 has an invalid length. [ 1042.165721][T21254] netlink: 'syz.4.6439': attribute type 3 has an invalid length. [ 1042.173923][T21254] netlink: 'syz.4.6439': attribute type 4 has an invalid length. [ 1042.181907][T21254] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.6439'. [ 1043.835373][T21258] netlink: 'syz.4.6441': attribute type 10 has an invalid length. [ 1043.854244][T21258] hsr_slave_0: entered promiscuous mode [ 1043.863959][T21258] team0: Port device hsr_slave_0 added [ 1044.352222][T21267] »»»»»»: renamed from vlan0 [ 1044.884262][T21273] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1044.948653][T21273] syzkaller0: linktype set to 768 [ 1045.169630][T21280] syzkaller0: entered promiscuous mode [ 1045.175319][T21280] syzkaller0: entered allmulticast mode [ 1046.617273][T13237] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1046.626402][T13237] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1046.635734][T13237] CPU: 0 PID: 13237 Comm: kworker/u5:1 Not tainted 6.6.101-syzkaller #0 [ 1046.644084][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1046.654159][T13237] Workqueue: hci1 hci_rx_work [ 1046.658862][T13237] Call Trace: [ 1046.662143][T13237] [ 1046.665070][T13237] dump_stack_lvl+0x16c/0x230 [ 1046.669754][T13237] ? show_regs_print_info+0x20/0x20 [ 1046.674960][T13237] ? load_image+0x3b0/0x3b0 [ 1046.679484][T13237] sysfs_create_dir_ns+0x256/0x280 [ 1046.684633][T13237] ? hci_rx_work+0x43a/0xd80 [ 1046.689226][T13237] ? sysfs_warn_dup+0xa0/0xa0 [ 1046.693915][T13237] ? do_raw_spin_unlock+0x121/0x230 [ 1046.699120][T13237] kobject_add_internal+0x6b8/0xc70 [ 1046.704330][T13237] kobject_add+0x156/0x220 [ 1046.709437][T13237] ? __rwlock_init+0x150/0x150 [ 1046.714200][T13237] ? kobject_init+0x1e0/0x1e0 [ 1046.718880][T13237] ? _raw_spin_unlock+0x28/0x40 [ 1046.723740][T13237] ? get_device_parent+0x366/0x390 [ 1046.728857][T13237] device_add+0x408/0xc20 [ 1046.733195][T13237] hci_conn_add_sysfs+0xd5/0x1e0 [ 1046.738139][T13237] le_conn_complete_evt+0xc37/0x1220 [ 1046.743451][T13237] ? bt_warn+0x10c/0x160 [ 1046.747712][T13237] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1046.753963][T13237] ? bt_info+0x160/0x160 [ 1046.758211][T13237] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1046.763848][T13237] ? skb_pull_data+0xfb/0x200 [ 1046.768556][T13237] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1046.774464][T13237] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 1046.780889][T13237] ? hci_remote_host_features_evt+0x160/0x160 [ 1046.786971][T13237] hci_event_packet+0x795/0x1210 [ 1046.791928][T13237] ? bis_list+0x290/0x290 [ 1046.796357][T13237] ? lockdep_hardirqs_on+0x98/0x150 [ 1046.801565][T13237] ? hci_send_to_monitor+0xd7/0x4f0 [ 1046.806770][T13237] hci_rx_work+0x43a/0xd80 [ 1046.811193][T13237] ? process_scheduled_works+0x957/0x15b0 [ 1046.816932][T13237] process_scheduled_works+0xa45/0x15b0 [ 1046.822501][T13237] ? assign_work+0x400/0x400 [ 1046.827092][T13237] ? assign_work+0x39e/0x400 [ 1046.831680][T13237] worker_thread+0xa55/0xfc0 [ 1046.836337][T13237] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1046.842230][T13237] ? _raw_spin_unlock+0x40/0x40 [ 1046.847087][T13237] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1046.853004][T13237] kthread+0x2fa/0x390 [ 1046.857070][T13237] ? pr_cont_work+0x560/0x560 [ 1046.861753][T13237] ? kthread_blkcg+0xd0/0xd0 [ 1046.866354][T13237] ret_from_fork+0x48/0x80 [ 1046.870802][T13237] ? kthread_blkcg+0xd0/0xd0 [ 1046.875409][T13237] ret_from_fork_asm+0x11/0x20 [ 1046.880286][T13237] [ 1046.889525][T13237] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1046.903732][T13237] Bluetooth: hci1: failed to register connection device [ 1048.183149][T21312] syzkaller0: entered promiscuous mode [ 1048.190604][T21312] syzkaller0: entered allmulticast mode [ 1048.288130][T18867] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 1048.957625][T18867] Bluetooth: hci1: command 0x0406 tx timeout [ 1049.042274][T21343] netlink: 'syz.1.6472': attribute type 3 has an invalid length. [ 1049.050215][T21343] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.6472'. [ 1050.787701][T21358] netlink: 'syz.0.6476': attribute type 10 has an invalid length. [ 1051.657199][T21390] netlink: 'syz.4.6489': attribute type 10 has an invalid length. [ 1052.359772][T18867] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 1054.732501][T21426] netlink: 'syz.3.6501': attribute type 4 has an invalid length. [ 1054.756014][T21426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6501'. [ 1054.846164][T21428] netlink: 'syz.4.6502': attribute type 10 has an invalid length. [ 1054.874536][T21428] bond0: (slave wlan1): Releasing backup interface [ 1054.930303][T21428] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 1054.941888][T21428] team0: Port device wlan1 added [ 1054.960132][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.966577][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.985670][T21427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1055.354809][T21452] netlink: 'syz.3.6513': attribute type 39 has an invalid length. [ 1055.382520][T18867] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1055.570814][T21464] netlink: 'syz.0.6519': attribute type 10 has an invalid length. [ 1055.581052][T21464] veth0_vlan: entered allmulticast mode [ 1055.591911][T21464] veth0_vlan: left promiscuous mode [ 1055.618258][T21464] veth0_vlan: entered promiscuous mode [ 1055.656414][T21464] team0: Device veth0_vlan failed to register rx_handler [ 1055.787058][T21473] netlink: 'syz.3.6523': attribute type 16 has an invalid length. [ 1055.794977][T21473] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6523'. [ 1056.176597][T21489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1056.199609][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1056.305704][T18867] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 1057.319357][T21510] netlink: 766 bytes leftover after parsing attributes in process `syz.0.6539'. [ 1058.544864][T21545] netlink: 'syz.0.6554': attribute type 2 has an invalid length. [ 1058.574063][T21545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6554'. [ 1058.946445][ T3532] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1059.580524][T21564] netlink: 'syz.3.6562': attribute type 10 has an invalid length. [ 1059.588621][T21564] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6562'. [ 1059.681730][T21568] delete_channel: no stack [ 1059.794293][T21576] netlink: 'syz.0.6567': attribute type 10 has an invalid length. [ 1060.577718][T18867] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1060.634610][T21597] wg2: left promiscuous mode [ 1060.652669][T21597] wg2: left allmulticast mode [ 1060.804015][T18867] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1060.812623][T18867] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1060.822138][T18867] CPU: 0 PID: 18867 Comm: kworker/u5:2 Not tainted 6.6.101-syzkaller #0 [ 1060.830487][T18867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1060.840648][T18867] Workqueue: hci3 hci_rx_work [ 1060.845332][T18867] Call Trace: [ 1060.848692][T18867] [ 1060.851626][T18867] dump_stack_lvl+0x16c/0x230 [ 1060.856306][T18867] ? show_regs_print_info+0x20/0x20 [ 1060.861517][T18867] ? load_image+0x3b0/0x3b0 [ 1060.866056][T18867] sysfs_create_dir_ns+0x256/0x280 [ 1060.871280][T18867] ? hci_rx_work+0x43a/0xd80 [ 1060.875879][T18867] ? sysfs_warn_dup+0xa0/0xa0 [ 1060.880575][T18867] ? do_raw_spin_unlock+0x121/0x230 [ 1060.885874][T18867] kobject_add_internal+0x6b8/0xc70 [ 1060.891081][T18867] kobject_add+0x156/0x220 [ 1060.895493][T18867] ? __rwlock_init+0x150/0x150 [ 1060.900428][T18867] ? kobject_init+0x1e0/0x1e0 [ 1060.905338][T18867] ? _raw_spin_unlock+0x28/0x40 [ 1060.910225][T18867] ? get_device_parent+0x366/0x390 [ 1060.915370][T18867] device_add+0x408/0xc20 [ 1060.919717][T18867] hci_conn_add_sysfs+0xd5/0x1e0 [ 1060.924672][T18867] le_conn_complete_evt+0xc37/0x1220 [ 1060.929981][T18867] ? bt_warn+0x10c/0x160 [ 1060.934230][T18867] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1060.940471][T18867] ? bt_info+0x160/0x160 [ 1060.944730][T18867] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1060.950380][T18867] ? skb_pull_data+0xfb/0x200 [ 1060.955075][T18867] hci_le_conn_complete_evt+0x187/0x440 [ 1060.960634][T18867] ? hci_remote_host_features_evt+0x160/0x160 [ 1060.966711][T18867] hci_event_packet+0x795/0x1210 [ 1060.971663][T18867] ? bis_list+0x290/0x290 [ 1060.975994][T18867] ? lockdep_hardirqs_on+0x98/0x150 [ 1060.981194][T18867] ? hci_send_to_monitor+0xd7/0x4f0 [ 1060.986392][T18867] hci_rx_work+0x43a/0xd80 [ 1060.990821][T18867] ? process_scheduled_works+0x957/0x15b0 [ 1060.996543][T18867] process_scheduled_works+0xa45/0x15b0 [ 1061.002102][T18867] ? assign_work+0x400/0x400 [ 1061.006688][T18867] ? assign_work+0x39e/0x400 [ 1061.011363][T18867] worker_thread+0xa55/0xfc0 [ 1061.016038][T18867] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1061.022015][T18867] ? _raw_spin_unlock+0x40/0x40 [ 1061.026875][T18867] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1061.032789][T18867] kthread+0x2fa/0x390 [ 1061.036853][T18867] ? pr_cont_work+0x560/0x560 [ 1061.041528][T18867] ? kthread_blkcg+0xd0/0xd0 [ 1061.046104][T18867] ret_from_fork+0x48/0x80 [ 1061.050599][T18867] ? kthread_blkcg+0xd0/0xd0 [ 1061.055186][T18867] ret_from_fork_asm+0x11/0x20 [ 1061.059963][T18867] [ 1061.065907][T18867] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1061.080952][T18867] Bluetooth: hci3: failed to register connection device [ 1061.109923][T21613] netlink: 'syz.0.6583': attribute type 10 has an invalid length. [ 1061.122351][T21613] : entered promiscuous mode [ 1061.129778][T21613] bond_slave_1: entered promiscuous mode [ 1061.139958][T21613] batadv_slave_0: entered promiscuous mode [ 1061.166718][T21611] pim6reg1: entered promiscuous mode [ 1061.172076][T21611] pim6reg1: entered allmulticast mode [ 1061.280903][T21619] sit0: entered promiscuous mode [ 1061.454178][T21626] netlink: 'syz.1.6589': attribute type 17 has an invalid length. [ 1061.466164][T21626] netlink: 'syz.1.6589': attribute type 16 has an invalid length. [ 1061.474154][T21626] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6589'. [ 1061.550037][T21628] netlink: 'syz.4.6590': attribute type 39 has an invalid length. [ 1062.036515][T13237] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1062.044601][T13237] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1062.054481][T13237] CPU: 0 PID: 13237 Comm: kworker/u5:1 Not tainted 6.6.101-syzkaller #0 [ 1062.062834][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1062.072904][T13237] Workqueue: hci0 hci_rx_work [ 1062.077712][T13237] Call Trace: [ 1062.081005][T13237] [ 1062.083947][T13237] dump_stack_lvl+0x16c/0x230 [ 1062.088645][T13237] ? show_regs_print_info+0x20/0x20 [ 1062.093866][T13237] ? load_image+0x3b0/0x3b0 [ 1062.098510][T13237] sysfs_create_dir_ns+0x256/0x280 [ 1062.103659][T13237] ? hci_rx_work+0x43a/0xd80 [ 1062.108272][T13237] ? sysfs_warn_dup+0xa0/0xa0 [ 1062.112993][T13237] ? do_raw_spin_unlock+0x121/0x230 [ 1062.118227][T13237] kobject_add_internal+0x6b8/0xc70 [ 1062.123479][T13237] kobject_add+0x156/0x220 [ 1062.127923][T13237] ? __rwlock_init+0x150/0x150 [ 1062.132717][T13237] ? kobject_init+0x1e0/0x1e0 [ 1062.137424][T13237] ? _raw_spin_unlock+0x28/0x40 [ 1062.142300][T13237] ? get_device_parent+0x366/0x390 [ 1062.147530][T13237] device_add+0x408/0xc20 [ 1062.151899][T13237] hci_conn_add_sysfs+0xd5/0x1e0 [ 1062.156893][T13237] le_conn_complete_evt+0xc37/0x1220 [ 1062.162216][T13237] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1062.168489][T13237] ? bt_info+0x160/0x160 [ 1062.172831][T13237] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1062.178494][T13237] ? skb_pull_data+0xfb/0x200 [ 1062.183199][T13237] hci_le_conn_complete_evt+0x187/0x440 [ 1062.188770][T13237] ? hci_remote_host_features_evt+0x160/0x160 [ 1062.194867][T13237] hci_event_packet+0x795/0x1210 [ 1062.199832][T13237] ? bis_list+0x290/0x290 [ 1062.204171][T13237] ? lockdep_hardirqs_on+0x98/0x150 [ 1062.209369][T13237] ? hci_send_to_monitor+0xd7/0x4f0 [ 1062.214603][T13237] hci_rx_work+0x43a/0xd80 [ 1062.219031][T13237] ? process_scheduled_works+0x957/0x15b0 [ 1062.224754][T13237] process_scheduled_works+0xa45/0x15b0 [ 1062.230403][T13237] ? assign_work+0x400/0x400 [ 1062.235008][T13237] ? assign_work+0x39e/0x400 [ 1062.239622][T13237] worker_thread+0xa55/0xfc0 [ 1062.244221][T13237] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1062.250126][T13237] ? _raw_spin_unlock+0x40/0x40 [ 1062.254976][T13237] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1062.260883][T13237] kthread+0x2fa/0x390 [ 1062.264950][T13237] ? pr_cont_work+0x560/0x560 [ 1062.269629][T13237] ? kthread_blkcg+0xd0/0xd0 [ 1062.274216][T13237] ret_from_fork+0x48/0x80 [ 1062.278634][T13237] ? kthread_blkcg+0xd0/0xd0 [ 1062.283214][T13237] ret_from_fork_asm+0x11/0x20 [ 1062.287988][T13237] [ 1062.297653][T13237] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1062.311852][T13237] Bluetooth: hci0: failed to register connection device [ 1062.534769][T21652] syzkaller0: entered promiscuous mode [ 1062.541467][T21652] syzkaller0: entered allmulticast mode [ 1062.574629][T21652] syzkaller0: left promiscuous mode [ 1062.580080][T21652] syzkaller0: left allmulticast mode [ 1062.676495][T21660] delete_channel: no stack [ 1062.865957][T13237] Bluetooth: hci0: unknown advertising packet type: 0xc5 [ 1063.126380][T13237] Bluetooth: hci3: command 0x0406 tx timeout [ 1065.753866][T21680] syzkaller0: entered promiscuous mode [ 1065.759789][T21680] syzkaller0: entered allmulticast mode [ 1068.198866][T21700] Ÿë: port 1(syz_tun) entered blocking state [ 1068.205310][T21700] Ÿë: port 1(syz_tun) entered disabled state [ 1068.211862][T21700] syz_tun: entered allmulticast mode [ 1068.218058][T21700] syz_tun: entered promiscuous mode [ 1068.367383][T21720] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1068.480880][T13237] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1068.488434][T13237] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1068.571838][T21732] syz.0.6630[21732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1068.571967][T21732] syz.0.6630[21732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1068.587385][T21732] syz.0.6630[21732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1068.605773][T21732] syz.0.6630[21732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1068.755169][T18867] Bluetooth: hci2: adv larger than maximum supported [ 1070.627524][T18867] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 1070.990964][T18867] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1071.594011][T21779] netlink: 'syz.4.6650': attribute type 21 has an invalid length. [ 1071.607023][T21779] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6650'. [ 1071.617444][T21779] netlink: 'syz.4.6650': attribute type 4 has an invalid length. [ 1072.404170][T21810] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1072.441205][T21800] netlink: 'syz.4.6657': attribute type 21 has an invalid length. [ 1072.651018][T21818] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6663'. [ 1072.723206][T21818] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6663'. [ 1073.690785][T21833] netlink: 'syz.4.6671': attribute type 21 has an invalid length. [ 1073.707977][T21833] IPv6: NLM_F_CREATE should be specified when creating new route [ 1073.726242][T21833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1073.733525][T21833] IPv6: NLM_F_CREATE should be set when creating new route [ 1073.740916][T21833] IPv6: NLM_F_CREATE should be set when creating new route [ 1073.748231][T21833] IPv6: NLM_F_CREATE should be set when creating new route [ 1073.936958][T21841] netlink: 'syz.4.6674': attribute type 6 has an invalid length. [ 1073.945067][T21841] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6674'. [ 1075.278219][T21876] netlink: 'syz.0.6687': attribute type 6 has an invalid length. [ 1075.286511][T21876] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6687'. [ 1075.753744][T21894] syzkaller0: entered promiscuous mode [ 1075.766451][T21894] syzkaller0: entered allmulticast mode [ 1079.163817][T21935] netlink: 'syz.4.6712': attribute type 10 has an invalid length. [ 1079.175928][T21935] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6712'. [ 1079.424530][T21942] netlink: 'syz.4.6716': attribute type 39 has an invalid length. [ 1079.590657][T21944] syzkaller0: entered promiscuous mode [ 1079.597225][T21944] syzkaller0: entered allmulticast mode [ 1082.173821][T18867] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1082.370709][T21989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1082.378227][T21989] IPv6: NLM_F_CREATE should be set when creating new route [ 1082.385953][T21989] IPv6: NLM_F_CREATE should be set when creating new route [ 1082.395767][T21989] IPv6: NLM_F_CREATE should be set when creating new route [ 1084.459791][T22019] syzkaller0: entered promiscuous mode [ 1084.465310][T22019] syzkaller0: entered allmulticast mode [ 1084.804957][T22038] netlink: 'syz.3.6745': attribute type 15 has an invalid length. [ 1085.306967][T22056] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6754'. [ 1085.333084][T18867] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 1085.446798][T22063] netlink: 'syz.4.6757': attribute type 2 has an invalid length. [ 1086.400230][T22082] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6764'. [ 1086.704723][T22093] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 1086.824507][T22097] netlink: 'syz.3.6769': attribute type 10 has an invalid length. [ 1087.368936][T22111] syzkaller0: entered promiscuous mode [ 1087.385978][T22111] syzkaller0: entered allmulticast mode [ 1087.410444][T22122] syzkaller0: left promiscuous mode [ 1087.579949][T18867] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 1089.741614][T22127] wg2: left promiscuous mode [ 1089.753725][T22127] wg2: left allmulticast mode [ 1089.764431][T22131] wg2: entered promiscuous mode [ 1089.769634][T22131] wg2: entered allmulticast mode [ 1089.775681][T22137] netlink: 'syz.0.6781': attribute type 10 has an invalid length. [ 1089.856541][T22137] syz_tun: left allmulticast mode [ 1089.861831][T22137] Ÿë: port 1(syz_tun) entered disabled state [ 1089.900211][T22137] : (slave syz_tun): Enslaving as an active interface with an up link [ 1090.051174][T18867] Bluetooth: hci2: adv larger than maximum supported [ 1090.365167][T18867] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1091.789793][T22186] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1091.798575][T18867] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17 [ 1091.805105][T18867] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1091.850589][T22186] syzkaller0: entered promiscuous mode [ 1091.860544][T22191] netlink: set zone limit has 8 unknown bytes [ 1091.867203][T22186] syzkaller0: entered allmulticast mode [ 1092.218562][T22203] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6806'. [ 1095.731029][T18867] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 1095.731062][T18867] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1096.030016][T22260] netlink: 'syz.1.6822': attribute type 39 has an invalid length. [ 1096.275471][T18867] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 1096.809053][T22292] netlink: 'syz.3.6837': attribute type 3 has an invalid length. [ 1096.824449][T22292] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.6837'. [ 1096.958021][T22296] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6839'. [ 1096.993635][T22298] netlink: 'syz.3.6840': attribute type 1 has an invalid length. [ 1097.449075][T22311] syzkaller0: entered promiscuous mode [ 1097.454615][T22311] syzkaller0: entered allmulticast mode [ 1101.721586][T22356] syzkaller0: entered promiscuous mode [ 1101.727712][T22356] syzkaller0: entered allmulticast mode [ 1103.983488][T18867] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1104.446927][T22397] lo: left promiscuous mode [ 1104.489044][T22397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1104.522839][T22399] netlink: 'syz.3.6884': attribute type 10 has an invalid length. [ 1104.536460][T22399] veth0_vlan: left promiscuous mode [ 1104.542608][T22399] veth0_vlan: entered promiscuous mode [ 1104.550673][T22399] team0: Device veth0_vlan failed to register rx_handler [ 1104.647804][T22408] netlink: 'syz.4.6887': attribute type 10 has an invalid length. [ 1104.658483][T22408] team0: left promiscuous mode [ 1104.663287][T22408] C: left promiscuous mode [ 1104.670691][T22408] team_slave_1: left promiscuous mode [ 1104.676911][T22408] hsr_slave_0: left promiscuous mode [ 1104.682581][T22408] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 1104.702392][T22410] netlink: 'syz.4.6887': attribute type 10 has an invalid length. [ 1104.716199][T22410] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6887'. [ 1104.736366][T22410] team0: entered promiscuous mode [ 1104.756683][T22410] C: entered promiscuous mode [ 1104.761619][T22410] team_slave_1: entered promiscuous mode [ 1104.774499][T22410] hsr_slave_0: entered promiscuous mode [ 1104.781295][T22410] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 1104.791115][T22410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.037143][T22422] syz.3.6892[22422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1105.037272][T22422] syz.3.6892[22422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1105.397939][T22432] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6896'. [ 1106.272265][T22445] netlink: 'syz.0.6900': attribute type 39 has an invalid length. [ 1106.944505][T22466] syzkaller0: entered promiscuous mode [ 1106.962733][T22466] syzkaller0: entered allmulticast mode [ 1110.277246][T22490] syzkaller0: entered promiscuous mode [ 1110.282731][T22490] syzkaller0: entered allmulticast mode [ 1112.407119][T22509] netlink: 'syz.0.6923': attribute type 10 has an invalid length. [ 1112.549516][T22516] netlink: 'syz.0.6926': attribute type 21 has an invalid length. [ 1113.458201][T22539] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1113.775781][T22554] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.6942'. [ 1114.176715][T18867] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 1114.452081][T22588] bridge0: port 4(team0) entered disabled state [ 1114.465734][T22588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.473057][T22588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.483618][T22588] bridge0: entered allmulticast mode [ 1115.391931][T18867] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1115.439113][T22611] syzkaller0: entered promiscuous mode [ 1115.444646][T22611] syzkaller0: entered allmulticast mode [ 1115.789319][T22623] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6969'. [ 1116.736401][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.742738][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.337104][T22655] netlink: 'syz.0.6983': attribute type 10 has an invalid length. [ 1117.344983][T22655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1117.366470][T22652] netlink: 'syz.4.6982': attribute type 10 has an invalid length. [ 1117.393072][T22652] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1118.484863][T22679] netlink: 'syz.0.6994': attribute type 10 has an invalid length. [ 1118.827773][T22690] syzkaller0: entered promiscuous mode [ 1118.836160][T22690] syzkaller0: entered allmulticast mode [ 1119.068346][T22698] netlink: 'syz.3.7003': attribute type 39 has an invalid length. [ 1119.097610][T22698] veth0_macvtap: left promiscuous mode [ 1119.127922][T18867] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1119.135413][T18867] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1119.451011][T18867] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1119.460646][T18867] Bluetooth: hci0: Injecting HCI hardware error event [ 1119.469199][T18867] Bluetooth: hci0: hardware error 0x00 [ 1120.508327][T22751] syzkaller0: entered promiscuous mode [ 1120.514084][T22751] syzkaller0: entered allmulticast mode [ 1121.527019][T18867] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1122.565193][T22770] netlink: 'syz.1.7033': attribute type 10 has an invalid length. [ 1122.590590][T22770] bond0: (slave wlan1): Releasing backup interface [ 1122.636491][T22773] syzkaller0: entered promiscuous mode [ 1122.653477][T22773] syzkaller0: entered allmulticast mode [ 1122.822747][T22783] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7039'. [ 1122.866277][T22783] netlink: 'syz.4.7039': attribute type 39 has an invalid length. [ 1122.880638][T22783] veth0_macvtap: left promiscuous mode [ 1123.102779][T18867] Bluetooth: hci1: adv larger than maximum supported [ 1123.946499][T22813] syzkaller0: entered promiscuous mode [ 1123.962108][T22813] syzkaller0: entered allmulticast mode [ 1123.974740][T22815] netlink: 'syz.3.7052': attribute type 10 has an invalid length. [ 1123.984100][T22815] team0: Device ip6_vti0 is of different type [ 1124.153536][T22821] netlink: 'syz.4.7055': attribute type 10 has an invalid length. [ 1124.167574][T22821] team0: left promiscuous mode [ 1124.172765][T22821] C: left promiscuous mode [ 1124.181642][T22821] team_slave_1: left promiscuous mode [ 1124.188045][T22821] hsr_slave_0: left promiscuous mode [ 1124.193808][T22821] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 1124.229710][T22821] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.239657][T22821] bond0: (slave team0): Enslaving as an active interface with an up link [ 1124.250061][T22825] netlink: 'syz.3.7057': attribute type 9 has an invalid length. [ 1124.259346][T22825] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.7057'. [ 1124.494915][T22836] syzkaller0: entered promiscuous mode [ 1124.619611][T22836] syzkaller0: entered allmulticast mode [ 1124.642003][T22840] netlink: 'syz.1.7064': attribute type 21 has an invalid length. [ 1127.111321][T22865] netlink: 'syz.3.7071': attribute type 10 has an invalid length. [ 1127.129645][T22865] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1127.541595][T22882] syzkaller0: entered promiscuous mode [ 1127.549375][T22882] syzkaller0: entered allmulticast mode [ 1127.558091][T22883] netlink: 'syz.1.7076': attribute type 21 has an invalid length. [ 1129.988423][T22912] netlink: 'syz.0.7084': attribute type 10 has an invalid length. [ 1130.017267][T22912] veth1_macvtap: entered promiscuous mode [ 1130.023419][T22912] veth1_macvtap: entered allmulticast mode [ 1130.031493][T22912] team0: Port device veth1_macvtap added [ 1130.202343][T22921] netlink: 'syz.3.7093': attribute type 4 has an invalid length. [ 1130.216388][T22921] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7093'. [ 1130.247559][T22921] : renamed from bond0 (while UP) [ 1131.874245][T22937] syz.1.7091: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1131.889640][T22937] CPU: 0 PID: 22937 Comm: syz.1.7091 Not tainted 6.6.101-syzkaller #0 [ 1131.897877][T22937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1131.907975][T22937] Call Trace: [ 1131.911270][T22937] [ 1131.914225][T22937] dump_stack_lvl+0x16c/0x230 [ 1131.918937][T22937] ? show_regs_print_info+0x20/0x20 [ 1131.924156][T22937] ? load_image+0x3b0/0x3b0 [ 1131.928690][T22937] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1131.935138][T22937] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1131.941695][T22937] warn_alloc+0x210/0x300 [ 1131.946048][T22937] ? stack_trace_save+0x9c/0xe0 [ 1131.950927][T22937] ? zone_watermark_ok_safe+0x230/0x230 [ 1131.956521][T22937] ? kasan_set_track+0x5f/0x70 [ 1131.961298][T22937] ? kasan_set_track+0x4e/0x70 [ 1131.966071][T22937] ? __kasan_kmalloc+0x8f/0xa0 [ 1131.970852][T22937] ? xsk_init_queue+0xb0/0x110 [ 1131.975625][T22937] ? xsk_setsockopt+0x4db/0x6f0 [ 1131.980514][T22937] ? do_sock_setsockopt+0x175/0x1a0 [ 1131.985741][T22937] ? __x64_sys_setsockopt+0x184/0x200 [ 1131.991155][T22937] __vmalloc_node_range+0x126/0x1320 [ 1131.996542][T22937] ? free_vm_area+0x50/0x50 [ 1132.001112][T22937] vmalloc_user+0x74/0x80 [ 1132.005470][T22937] ? xskq_create+0xbf/0x170 [ 1132.009994][T22937] xskq_create+0xbf/0x170 [ 1132.014434][T22937] xsk_init_queue+0xb0/0x110 [ 1132.019047][T22937] xsk_setsockopt+0x4db/0x6f0 [ 1132.023751][T22937] ? xsk_poll+0x670/0x670 [ 1132.028108][T22937] ? __fget_files+0x28/0x4d0 [ 1132.032718][T22937] ? aa_sock_opt_perm+0x74/0x100 [ 1132.037689][T22937] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1132.043346][T22937] ? security_socket_setsockopt+0x7e/0xa0 [ 1132.049115][T22937] ? xsk_poll+0x670/0x670 [ 1132.053510][T22937] do_sock_setsockopt+0x175/0x1a0 [ 1132.058557][T22937] ? __fdget+0x180/0x210 [ 1132.062824][T22937] __x64_sys_setsockopt+0x184/0x200 [ 1132.068142][T22937] do_syscall_64+0x55/0xb0 [ 1132.072573][T22937] ? clear_bhb_loop+0x40/0x90 [ 1132.077260][T22937] ? clear_bhb_loop+0x40/0x90 [ 1132.081970][T22937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1132.087928][T22937] RIP: 0033:0x7fd1ddf8ebe9 [ 1132.092367][T22937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.112107][T22937] RSP: 002b:00007fd1dee61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1132.120557][T22937] RAX: ffffffffffffffda RBX: 00007fd1de1b5fa0 RCX: 00007fd1ddf8ebe9 [ 1132.128549][T22937] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1132.136532][T22937] RBP: 00007fd1de011e19 R08: 0000000000000004 R09: 0000000000000000 [ 1132.144544][T22937] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1132.152537][T22937] R13: 00007fd1de1b6038 R14: 00007fd1de1b5fa0 R15: 00007ffefcee6a28 [ 1132.160567][T22937] [ 1132.186584][T22937] Mem-Info: [ 1132.189966][T22937] active_anon:10461 inactive_anon:0 isolated_anon:0 [ 1132.189966][T22937] active_file:18526 inactive_file:40241 isolated_file:0 [ 1132.189966][T22937] unevictable:768 dirty:221 writeback:0 [ 1132.189966][T22937] slab_reclaimable:11147 slab_unreclaimable:101795 [ 1132.189966][T22937] mapped:23759 shmem:1365 pagetables:428 [ 1132.189966][T22937] sec_pagetables:0 bounce:0 [ 1132.189966][T22937] kernel_misc_reclaimable:0 [ 1132.189966][T22937] free:1329270 free_pcp:8262 free_cma:0 [ 1132.250887][T22937] Node 0 active_anon:41844kB inactive_anon:0kB active_file:60416kB inactive_file:160760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95008kB dirty:884kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9980kB pagetables:1712kB sec_pagetables:0kB all_unreclaimable? no [ 1132.287956][T22937] Node 1 active_anon:0kB inactive_anon:0kB active_file:13688kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1132.319135][T22937] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1132.346511][T22937] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1132.352392][T22937] Node 0 DMA32 free:1422968kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:41796kB inactive_anon:0kB active_file:60416kB inactive_file:159424kB unevictable:1536kB writepending:884kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:17536kB local_pcp:5232kB free_cma:0kB [ 1132.386077][T22937] lowmem_reserve[]: 0 0 1 1 1 [ 1132.390921][T22937] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1132.421994][T22937] lowmem_reserve[]: 0 0 0 0 0 [ 1132.431496][T22937] Node 1 Normal free:3878752kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:13688kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16260kB local_pcp:5760kB free_cma:0kB [ 1132.461659][T22937] lowmem_reserve[]: 0 0 0 0 0 [ 1132.466703][T22937] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1132.479633][T22937] Node 0 DMA32: 770*4kB (U) 468*8kB (UM) 199*16kB (UME) 573*32kB (M) 591*64kB (UM) 308*128kB (UM) 74*256kB (UM) 34*512kB (UME) 17*1024kB (UME) 13*2048kB (UME) 302*4096kB (UM) = 1422968kB [ 1132.498993][T22937] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1132.511427][T22937] Node 1 Normal: 240*4kB (UME) 50*8kB (UE) 41*16kB (UE) 190*32kB (UE) 47*64kB (UME) 14*128kB (UE) 3*256kB (UM) 1*512kB (U) 2*1024kB (ME) 2*2048kB (ME) 942*4096kB (M) = 3878752kB [ 1132.529811][T22937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1132.540233][T22937] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1132.549729][T22937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1132.559777][T22937] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1132.580212][T22937] 60132 total pagecache pages [ 1132.584958][T22937] 0 pages in swap cache [ 1132.589663][T22937] Free swap = 124996kB [ 1132.593972][T22937] Total swap = 124996kB [ 1132.603073][T22937] 2097051 pages RAM [ 1132.607515][T22937] 0 pages HighMem/MovableOnly [ 1132.612723][T22937] 416137 pages reserved [ 1132.617163][T22937] 0 pages cma reserved [ 1133.586455][T22930] netlink: 'syz.3.7089': attribute type 10 has an invalid length. [ 1133.594387][T22930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7089'. [ 1133.608998][T22930] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1133.725598][T18867] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1133.968176][T18867] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 1134.028683][T22957] netlink: 'syz.4.7101': attribute type 4 has an invalid length. [ 1134.069149][T22957] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7101'. [ 1134.213602][T22957] wlan1: mtu less than device minimum [ 1134.221640][T22957] team0: Device wlan1 failed to change mtu [ 1137.023877][T22990] netlink: 'syz.1.7113': attribute type 29 has an invalid length. [ 1137.100937][T22990] netlink: 'syz.1.7113': attribute type 29 has an invalid length. [ 1137.289487][T23002] netlink: 'syz.1.7116': attribute type 4 has an invalid length. [ 1137.297892][T23002] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7116'. [ 1137.323674][T23002] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1137.605004][T23015] netlink: 'syz.4.7131': attribute type 4 has an invalid length. [ 1137.613145][T23015] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7131'. [ 1137.704414][T23015] wlan1: mtu less than device minimum [ 1137.719553][T23015] team0: Device wlan1 failed to change mtu [ 1140.561345][T23048] netlink: 'syz.0.7135': attribute type 10 has an invalid length. [ 1140.588350][T23048] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7135'. [ 1141.405563][T23057] netlink: 'syz.1.7137': attribute type 4 has an invalid length. [ 1141.426529][T23057] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7137'. [ 1141.466204][T23057] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1141.565427][T18867] Bluetooth: hci2: unexpected event 0x36 length: 15 > 7 [ 1141.581902][T23063] netlink: 'syz.4.7141': attribute type 2 has an invalid length. [ 1141.597159][T23063] netlink: 'syz.4.7141': attribute type 9 has an invalid length. [ 1141.614793][T23063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7141'. [ 1141.642281][T18867] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5 [ 1141.797950][T23076] veth1_to_bond: entered allmulticast mode [ 1142.012407][T18867] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1142.217213][T23090] netlink: 'syz.4.7152': attribute type 28 has an invalid length. [ 1142.231690][T18867] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 1142.268095][T23090] netlink: 'syz.4.7152': attribute type 29 has an invalid length. [ 1142.287204][T23090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7152'. [ 1142.594089][T23109] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.7160'. [ 1142.616007][T23109] openvswitch: netlink: Duplicate key (type 0). [ 1142.654817][T23111] netlink: 'syz.1.7161': attribute type 10 has an invalid length. [ 1142.712825][T23111] dummy0: entered promiscuous mode [ 1142.725552][T23111] team0: Port device dummy0 added [ 1142.836913][T23116] syzkaller0: entered promiscuous mode [ 1142.856956][T23116] syzkaller0: entered allmulticast mode [ 1145.159405][T23150] netlink: 'syz.3.7178': attribute type 29 has an invalid length. [ 1145.177960][T23150] netlink: 'syz.3.7178': attribute type 29 has an invalid length. [ 1145.449295][T23162] syzkaller0: entered promiscuous mode [ 1145.455299][T23162] syzkaller0: entered allmulticast mode [ 1145.890292][T23176] netlink: 'syz.0.7187': attribute type 29 has an invalid length. [ 1145.913591][T23176] netlink: 'syz.0.7187': attribute type 29 has an invalid length. [ 1146.157690][T23192] syzkaller0: entered promiscuous mode [ 1146.163236][T23192] syzkaller0: entered allmulticast mode [ 1146.173673][T23192] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7194'. [ 1146.185488][T23192] batadv_slave_1: entered promiscuous mode [ 1146.314396][T23196] netlink: 'syz.1.7196': attribute type 17 has an invalid length. [ 1146.337240][T23196] netlink: 'syz.1.7196': attribute type 16 has an invalid length. [ 1146.345102][T23196] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7196'. [ 1146.971975][T18867] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 1147.497059][T23252] netlink: 'syz.1.7221': attribute type 23 has an invalid length. [ 1147.535021][T23250] netlink: 'syz.4.7220': attribute type 9 has an invalid length. [ 1147.545771][T23250] netlink: 49779 bytes leftover after parsing attributes in process `syz.4.7220'. [ 1147.767251][T23262] lo: left promiscuous mode [ 1147.798486][T23262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1148.085739][T23276] syzkaller0: entered promiscuous mode [ 1148.092259][T23276] syzkaller0: entered allmulticast mode [ 1148.099561][T23275] netlink: 'syz.3.7226': attribute type 64 has an invalid length. [ 1148.364310][T23282] netlink: 'syz.4.7233': attribute type 29 has an invalid length. [ 1148.378395][T23282] netlink: 'syz.4.7233': attribute type 29 has an invalid length. [ 1149.184016][T23308] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 1149.204585][T23308] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 1149.257553][T23315] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.7247'. [ 1149.776758][ T58] syzkaller0: tun_net_xmit 76 [ 1149.781699][ T58] syzkaller0: tun_net_xmit 48 [ 1149.817780][T12962] syzkaller0: tun_net_xmit 76 [ 1149.833921][T23327] syzkaller0: create flow: hash 634411526 index 1 [ 1149.925224][T23333] syzkaller0: delete flow: hash 634411526 index 1 [ 1151.728316][T23346] netlink: 'syz.4.7258': attribute type 29 has an invalid length. [ 1152.712361][T23346] netlink: 'syz.4.7258': attribute type 29 has an invalid length. [ 1152.833003][T18867] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 1153.411141][T23365] wg2: entered promiscuous mode [ 1153.525944][T23365] wg2: entered allmulticast mode [ 1153.974536][T23376] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 1153.984871][T23376] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 1154.699767][T23393] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1156.701715][T23409] netlink: 'syz.1.7278': attribute type 12 has an invalid length. [ 1156.725927][T23409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7278'. [ 1156.881413][T23417] netlink: 'syz.4.7280': attribute type 10 has an invalid length. [ 1156.889478][T23417] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 1156.898110][T23416] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1157.247721][T23428] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1157.294808][T23428] netlink: 'syz.1.7283': attribute type 10 has an invalid length. [ 1157.326291][T23428] wlan1: mtu less than device minimum [ 1157.331743][T23428] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 1157.458829][T23433] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.7285'. [ 1157.485109][T23432] netdevsim netdevsim0: Direct firmware load for Ö failed with error -2 [ 1157.516512][T23432] netdevsim netdevsim0: Falling back to sysfs fallback for: Ö [ 1157.588321][T23437] syzkaller0: entered promiscuous mode [ 1157.594083][T23437] syzkaller0: entered allmulticast mode [ 1159.436934][ T2919] wlan1: Trigger new scan to find an IBSS to join [ 1160.974317][T23461] netlink: 'syz.0.7294': attribute type 12 has an invalid length. [ 1160.994340][T23461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7294'. [ 1161.132224][T23464] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1161.354798][T23471] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1161.463031][T23471] netlink: 'syz.4.7298': attribute type 10 has an invalid length. [ 1161.488140][T23471] team0: Port device wlan1 removed [ 1161.511979][T23471] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1161.686912][T23478] netlink: 'syz.3.7300': attribute type 21 has an invalid length. [ 1161.695027][T23478] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7300'. [ 1162.016493][T18867] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 1162.400335][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 1162.423335][T23494] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7304'. [ 1162.636654][T23499] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 1162.645719][T23499] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 1163.834909][T23511] syzkaller0: entered promiscuous mode [ 1163.937012][T23511] syzkaller0: entered allmulticast mode [ 1165.436175][ T3555] wlan1: Trigger new scan to find an IBSS to join [ 1166.400511][ T2919] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1166.917263][T23516] netlink: 'syz.4.7313': attribute type 21 has an invalid length. [ 1166.925263][T23516] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7313'. [ 1167.047336][T18867] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 1168.010338][T18867] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 1168.143299][T23554] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7322'. [ 1169.010011][T23557] netlink: 'syz.1.7327': attribute type 21 has an invalid length. [ 1169.017940][T23557] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7327'. [ 1170.071866][T23590] netlink: 'syz.4.7342': attribute type 21 has an invalid length. [ 1170.096291][T23590] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7342'. [ 1170.157536][T23593] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7345'. [ 1170.305700][T23600] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7347'. [ 1170.327334][T23600] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.7347'. [ 1170.361997][T23600] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7347'. [ 1171.307014][T23623] netlink: 'syz.0.7359': attribute type 21 has an invalid length. [ 1171.400655][T23623] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7359'. [ 1171.500512][T23627] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1172.452975][T23637] syz.4.7362[23637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1172.453098][T23637] syz.4.7362[23637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1172.801609][T23653] netlink: 'syz.4.7378': attribute type 21 has an invalid length. [ 1172.845870][T23653] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7378'. [ 1172.968709][T23655] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1173.860505][T23674] netlink: 'syz.3.7379': attribute type 1 has an invalid length. [ 1173.869315][T23674] __nla_validate_parse: 1 callbacks suppressed [ 1173.869328][T23674] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.7379'. [ 1173.887134][T23674] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7379'. [ 1175.016196][T23690] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.7386'. [ 1175.020998][T23691] netlink: 'syz.0.7394': attribute type 29 has an invalid length. [ 1175.038098][T23691] netlink: 'syz.0.7394': attribute type 29 has an invalid length. [ 1176.071832][T23707] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.7392'. [ 1177.848622][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.855147][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.181114][T23728] netlink: 'syz.1.7400': attribute type 21 has an invalid length. [ 1179.189261][T23728] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7400'. [ 1179.210564][T23745] sit0: entered promiscuous mode [ 1179.414050][T23751] netlink: 'syz.3.7406': attribute type 10 has an invalid length. [ 1180.426735][T23762] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 1180.433902][T23762] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1180.441415][T23762] veth0_to_bridge: entered allmulticast mode [ 1180.449091][T23762] veth0_to_bridge: entered promiscuous mode [ 1180.466106][T23762] Ÿë: port 2(erspan0) entered blocking state [ 1180.472408][T23762] Ÿë: port 2(erspan0) entered disabled state [ 1180.479254][T23762] erspan0: entered allmulticast mode [ 1180.486289][T23762] erspan0: entered promiscuous mode [ 1180.804664][T18867] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 1181.560165][T23790] netlink: 'syz.0.7424': attribute type 10 has an invalid length. [ 1181.897144][T23794] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 1182.298632][T23813] netlink: 'syz.3.7435': attribute type 11 has an invalid length. [ 1182.307524][T23813] netlink: 195824 bytes leftover after parsing attributes in process `syz.3.7435'. [ 1183.241835][T23836] netlink: 'syz.1.7448': attribute type 3 has an invalid length. [ 1183.265827][T23836] netlink: 'syz.1.7448': attribute type 4 has an invalid length. [ 1183.273598][T23836] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.7448'. [ 1183.452394][T23844] netlink: 'syz.3.7443': attribute type 29 has an invalid length. [ 1183.500429][T23844] netlink: 'syz.3.7443': attribute type 29 has an invalid length. [ 1184.015277][T23858] netlink: 'syz.0.7450': attribute type 10 has an invalid length. [ 1184.060133][T23858] hsr_slave_0: entered promiscuous mode [ 1184.069919][T23858] hsr_slave_0: entered allmulticast mode [ 1184.081859][T23858] team0: Port device hsr_slave_0 added [ 1189.078914][T18867] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1189.086987][T18867] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1189.096502][T18867] CPU: 1 PID: 18867 Comm: kworker/u5:2 Not tainted 6.6.101-syzkaller #0 [ 1189.104854][T18867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1189.114919][T18867] Workqueue: hci3 hci_rx_work [ 1189.119621][T18867] Call Trace: [ 1189.122904][T18867] [ 1189.125845][T18867] dump_stack_lvl+0x16c/0x230 [ 1189.130549][T18867] ? show_regs_print_info+0x20/0x20 [ 1189.135778][T18867] ? load_image+0x3b0/0x3b0 [ 1189.140320][T18867] sysfs_create_dir_ns+0x256/0x280 [ 1189.145440][T18867] ? hci_rx_work+0x43a/0xd80 [ 1189.150031][T18867] ? sysfs_warn_dup+0xa0/0xa0 [ 1189.154713][T18867] ? do_raw_spin_unlock+0x121/0x230 [ 1189.159918][T18867] kobject_add_internal+0x6b8/0xc70 [ 1189.165215][T18867] kobject_add+0x156/0x220 [ 1189.169635][T18867] ? __rwlock_init+0x150/0x150 [ 1189.174400][T18867] ? kobject_init+0x1e0/0x1e0 [ 1189.179077][T18867] ? _raw_spin_unlock+0x28/0x40 [ 1189.183965][T18867] ? get_device_parent+0x366/0x390 [ 1189.189086][T18867] device_add+0x408/0xc20 [ 1189.193433][T18867] hci_conn_add_sysfs+0xd5/0x1e0 [ 1189.198375][T18867] le_conn_complete_evt+0xc37/0x1220 [ 1189.203667][T18867] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1189.209904][T18867] ? bt_info+0x160/0x160 [ 1189.214145][T18867] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1189.219782][T18867] ? skb_pull_data+0xfb/0x200 [ 1189.224464][T18867] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1189.230357][T18867] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 1189.236769][T18867] ? hci_remote_host_features_evt+0x160/0x160 [ 1189.242840][T18867] hci_event_packet+0x795/0x1210 [ 1189.247787][T18867] ? bis_list+0x290/0x290 [ 1189.252160][T18867] ? lockdep_hardirqs_on+0x98/0x150 [ 1189.257364][T18867] ? hci_send_to_monitor+0xd7/0x4f0 [ 1189.262566][T18867] hci_rx_work+0x43a/0xd80 [ 1189.266989][T18867] ? process_scheduled_works+0x957/0x15b0 [ 1189.272911][T18867] process_scheduled_works+0xa45/0x15b0 [ 1189.278501][T18867] ? assign_work+0x400/0x400 [ 1189.283104][T18867] ? assign_work+0x39e/0x400 [ 1189.287700][T18867] worker_thread+0xa55/0xfc0 [ 1189.292289][T18867] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1189.298187][T18867] ? _raw_spin_unlock+0x40/0x40 [ 1189.303057][T18867] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1189.308968][T18867] kthread+0x2fa/0x390 [ 1189.313032][T18867] ? pr_cont_work+0x560/0x560 [ 1189.317711][T18867] ? kthread_blkcg+0xd0/0xd0 [ 1189.322292][T18867] ret_from_fork+0x48/0x80 [ 1189.326713][T18867] ? kthread_blkcg+0xd0/0xd0 [ 1189.331298][T18867] ret_from_fork_asm+0x11/0x20 [ 1189.336163][T18867] [ 1189.348110][T18867] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1189.363432][T18867] Bluetooth: hci3: failed to register connection device [ 1190.079413][T23931] netlink: 'syz.4.7481': attribute type 3 has an invalid length. [ 1190.104892][T23931] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.7481'. [ 1190.590987][T23952] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 1190.625248][T23952] netlink: 'syz.1.7489': attribute type 10 has an invalid length. [ 1190.708009][T23952] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1193.550172][T23992] netlink: 'syz.1.7512': attribute type 4 has an invalid length. [ 1193.565962][T23992] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7512'. [ 1195.949364][T24014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1197.333835][T24015] netlink: 'syz.0.7513': attribute type 10 has an invalid length. [ 1197.341834][T24015] mac80211_hwsim hwsim36 wlan1: left allmulticast mode [ 1197.351506][T12018] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:a8:6c [ 1197.352121][T24015] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 1197.360003][T12018] wlan1: Creating new IBSS network, BSSID 00:00:00:00:a8:6c [ 1197.368190][T24015] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 1197.383135][T24015] team0: Port device wlan1 added [ 1197.389019][T24019] netlink: 'syz.4.7524': attribute type 39 has an invalid length. [ 1197.511120][T13237] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 1198.943176][T24060] netlink: 'syz.1.7534': attribute type 10 has an invalid length. [ 1198.966015][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1198.977538][T24060] veth0_vlan: left promiscuous mode [ 1198.986874][T24060] veth0_vlan: entered promiscuous mode [ 1198.998490][T24060] team0: Device veth0_vlan failed to register rx_handler [ 1199.088462][T13237] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 1200.135372][T24085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7546'. [ 1200.156544][T24085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7546'. [ 1200.376748][T13237] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 1201.454787][T24100] netlink: 766 bytes leftover after parsing attributes in process `syz.3.7553'. [ 1203.360325][T24136] delete_channel: no stack [ 1203.628995][T24149] netlink: 'syz.4.7573': attribute type 10 has an invalid length. [ 1203.645941][T24149] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7573'. [ 1203.778230][T24154] netlink: 'syz.1.7574': attribute type 2 has an invalid length. [ 1203.788139][T24154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7574'. [ 1205.133618][T24183] wg2: left promiscuous mode [ 1205.138429][T24183] wg2: left allmulticast mode [ 1205.499784][T24194] netlink: 'syz.4.7594': attribute type 10 has an invalid length. [ 1206.762868][T24214] netlink: 'syz.3.7602': attribute type 17 has an invalid length. [ 1206.771509][T24214] netlink: 'syz.3.7602': attribute type 16 has an invalid length. [ 1206.788487][T24214] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7602'. [ 1206.968820][T13237] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1206.976675][T13237] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1206.986488][T13237] CPU: 0 PID: 13237 Comm: kworker/u5:1 Not tainted 6.6.101-syzkaller #0 [ 1206.994854][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1207.004931][T13237] Workqueue: hci1 hci_rx_work [ 1207.009637][T13237] Call Trace: [ 1207.012925][T13237] [ 1207.015871][T13237] dump_stack_lvl+0x16c/0x230 [ 1207.020577][T13237] ? show_regs_print_info+0x20/0x20 [ 1207.025802][T13237] ? load_image+0x3b0/0x3b0 [ 1207.030349][T13237] sysfs_create_dir_ns+0x256/0x280 [ 1207.035492][T13237] ? hci_rx_work+0x43a/0xd80 [ 1207.040104][T13237] ? sysfs_warn_dup+0xa0/0xa0 [ 1207.044807][T13237] ? do_raw_spin_unlock+0x121/0x230 [ 1207.050035][T13237] kobject_add_internal+0x6b8/0xc70 [ 1207.055268][T13237] kobject_add+0x156/0x220 [ 1207.059719][T13237] ? __rwlock_init+0x150/0x150 [ 1207.064523][T13237] ? kobject_init+0x1e0/0x1e0 [ 1207.069228][T13237] ? _raw_spin_unlock+0x28/0x40 [ 1207.074108][T13237] ? get_device_parent+0x366/0x390 [ 1207.079245][T13237] device_add+0x408/0xc20 [ 1207.083612][T13237] hci_conn_add_sysfs+0xd5/0x1e0 [ 1207.088574][T13237] le_conn_complete_evt+0xc37/0x1220 [ 1207.093895][T13237] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1207.100239][T13237] ? bt_info+0x160/0x160 [ 1207.104495][T13237] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1207.110152][T13237] ? skb_pull_data+0xfb/0x200 [ 1207.114860][T13237] hci_le_conn_complete_evt+0x187/0x440 [ 1207.120440][T13237] ? hci_remote_host_features_evt+0x160/0x160 [ 1207.126545][T13237] hci_event_packet+0x795/0x1210 [ 1207.131523][T13237] ? bis_list+0x290/0x290 [ 1207.135886][T13237] ? lockdep_hardirqs_on+0x98/0x150 [ 1207.141117][T13237] ? hci_send_to_monitor+0xd7/0x4f0 [ 1207.146340][T13237] hci_rx_work+0x43a/0xd80 [ 1207.150794][T13237] ? process_scheduled_works+0x957/0x15b0 [ 1207.156536][T13237] process_scheduled_works+0xa45/0x15b0 [ 1207.162119][T13237] ? assign_work+0x400/0x400 [ 1207.166717][T13237] ? assign_work+0x39e/0x400 [ 1207.171313][T13237] worker_thread+0xa55/0xfc0 [ 1207.175900][T13237] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1207.181792][T13237] ? _raw_spin_unlock+0x40/0x40 [ 1207.186642][T13237] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1207.192549][T13237] kthread+0x2fa/0x390 [ 1207.196613][T13237] ? pr_cont_work+0x560/0x560 [ 1207.201291][T13237] ? kthread_blkcg+0xd0/0xd0 [ 1207.205877][T13237] ret_from_fork+0x48/0x80 [ 1207.210286][T13237] ? kthread_blkcg+0xd0/0xd0 [ 1207.214867][T13237] ret_from_fork_asm+0x11/0x20 [ 1207.219641][T13237] [ 1207.235019][T13237] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1207.249224][T13237] Bluetooth: hci1: failed to register connection device [ 1208.736824][T18867] Bluetooth: hci3: unknown advertising packet type: 0xc5 [ 1208.767277][T24248] delete_channel: no stack [ 1210.453267][T24269] syzkaller0: entered promiscuous mode [ 1210.458967][T24269] syzkaller0: entered allmulticast mode [ 1210.566035][T24269] syzkaller0: left promiscuous mode [ 1210.575952][T24269] syzkaller0: left allmulticast mode [ 1212.376152][T18867] Bluetooth: hci3: adv larger than maximum supported [ 1213.832131][T24300] syz.1.7640[24300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.839674][T24300] syz.1.7640[24300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.856265][T24300] syz.1.7640[24300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.871096][T24300] syz.1.7640[24300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1214.834861][T24308] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1215.024867][T18867] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 1219.013173][T24358] netlink: 'syz.0.7661': attribute type 21 has an invalid length. [ 1219.029334][T24358] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7661'. [ 1219.039475][T24358] netlink: 'syz.0.7661': attribute type 4 has an invalid length. [ 1219.149114][T24368] netlink: 'syz.0.7669': attribute type 21 has an invalid length. [ 1219.360401][T24377] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1219.528927][T24387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7677'. [ 1219.553791][T24387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7677'. [ 1219.931317][T24402] netlink: 'syz.3.7683': attribute type 21 has an invalid length. [ 1219.952419][T24402] IPv6: NLM_F_CREATE should be specified when creating new route [ 1219.967725][T24402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1219.975123][T24402] IPv6: NLM_F_CREATE should be set when creating new route [ 1219.982531][T24402] IPv6: NLM_F_CREATE should be set when creating new route [ 1219.989839][T24402] IPv6: NLM_F_CREATE should be set when creating new route [ 1220.302183][T24410] netlink: 'syz.3.7687': attribute type 6 has an invalid length. [ 1220.316248][T24410] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7687'. [ 1221.453740][T24445] netlink: 'syz.1.7701': attribute type 6 has an invalid length. [ 1221.463248][T24445] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7701'. [ 1224.130622][T24499] syzkaller0: entered promiscuous mode [ 1224.136277][T24499] syzkaller0: entered allmulticast mode [ 1226.365184][T24511] netlink: 'syz.3.7727': attribute type 39 has an invalid length. [ 1226.795549][T24531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1226.802986][T24531] IPv6: NLM_F_CREATE should be set when creating new route [ 1226.810541][T24531] IPv6: NLM_F_CREATE should be set when creating new route [ 1227.905687][T18867] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1227.925444][T24538] syzkaller0: entered promiscuous mode [ 1227.935382][T24538] syzkaller0: entered allmulticast mode [ 1230.965953][ T2919] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1232.077815][T24581] syzkaller0: entered promiscuous mode [ 1232.083346][T24581] syzkaller0: entered allmulticast mode [ 1232.239296][T24586] netlink: 'syz.4.7755': attribute type 15 has an invalid length. [ 1232.615323][T24602] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7764'. [ 1232.666230][T18867] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1232.804421][T24613] netlink: 'syz.3.7768': attribute type 2 has an invalid length. [ 1233.451497][T24637] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.7777'. [ 1233.503863][T24639] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 1233.721322][T24647] netlink: 'syz.0.7781': attribute type 10 has an invalid length. [ 1234.408266][T18867] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6 [ 1234.611193][T24676] syzkaller0: entered promiscuous mode [ 1234.625732][T24676] syzkaller0: entered allmulticast mode [ 1234.689880][T24675] syzkaller0: left promiscuous mode [ 1237.160481][T24683] netlink: 'syz.1.7793': attribute type 10 has an invalid length. [ 1237.169139][T24683] syz_tun: entered promiscuous mode [ 1237.183760][T24683] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1237.280052][T18867] Bluetooth: hci3: adv larger than maximum supported [ 1237.703477][T18867] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7 [ 1238.992199][T24727] netlink: set zone limit has 8 unknown bytes [ 1239.280900][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.289952][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.469604][T24749] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7821'. [ 1240.140970][T24754] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1240.193472][T24754] syzkaller0: entered promiscuous mode [ 1240.219916][T24754] syzkaller0: entered allmulticast mode [ 1240.354001][T24757] syzkaller0: entered promiscuous mode [ 1240.369727][T24757] syzkaller0: entered allmulticast mode [ 1240.901086][T18867] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7 [ 1245.495363][T18867] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 1245.950871][T24807] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7846'. [ 1245.986695][T24807] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.7846'. [ 1246.006028][T24807] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7846'. [ 1246.182480][T24812] netlink: 'syz.1.7848': attribute type 3 has an invalid length. [ 1246.187922][T24813] netlink: 'syz.4.7849': attribute type 1 has an invalid length. [ 1246.208790][T24812] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.7848'. [ 1246.442429][T24820] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7852'. [ 1249.123916][T24843] syzkaller0: entered promiscuous mode [ 1249.129993][T24843] syzkaller0: entered allmulticast mode [ 1251.366156][T24866] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7878'. [ 1251.377463][T24866] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.7878'. [ 1251.387671][T24866] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7878'. [ 1252.032191][T24897] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7884'. [ 1252.046516][T24897] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.7884'. [ 1252.057995][T24897] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7884'. [ 1252.992958][T24928] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1253.070710][T24931] netlink: 'syz.4.7897': attribute type 10 has an invalid length. [ 1253.100750][T24931] veth0_vlan: left promiscuous mode [ 1253.127185][T24931] veth0_vlan: entered promiscuous mode [ 1253.154177][T24931] team0: Device veth0_vlan failed to register rx_handler [ 1253.205368][T24933] netlink: 'syz.0.7898': attribute type 10 has an invalid length. [ 1253.236506][T24933] team0: left allmulticast mode [ 1253.241421][T24933] C: left allmulticast mode [ 1253.256225][T24933] team_slave_1: left allmulticast mode [ 1253.261803][T24933] veth1_macvtap: left allmulticast mode [ 1253.275396][T24933] hsr_slave_0: left allmulticast mode [ 1253.286979][T24933] mac80211_hwsim hwsim36 wlan1: left allmulticast mode [ 1253.305921][T24933] team0: left promiscuous mode [ 1253.317566][T24933] C: left promiscuous mode [ 1253.322237][T24933] team_slave_1: left promiscuous mode [ 1253.342107][T24933] veth1_macvtap: left promiscuous mode [ 1253.357719][T24933] hsr_slave_0: left promiscuous mode [ 1253.363251][T24933] mac80211_hwsim hwsim36 wlan1: left promiscuous mode [ 1253.386219][T24933] bridge0: port 4(team0) entered disabled state [ 1253.405973][T24937] netlink: 'syz.0.7898': attribute type 10 has an invalid length. [ 1253.413831][T24937] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7898'. [ 1253.433050][T24937] team0: entered promiscuous mode [ 1253.452324][T24937] C: entered promiscuous mode [ 1253.460880][T24937] team_slave_1: entered promiscuous mode [ 1253.472591][T24937] veth1_macvtap: entered promiscuous mode [ 1253.484043][T24937] hsr_slave_0: entered promiscuous mode [ 1253.494620][T24937] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 1253.513578][T24937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.523314][T24937] bridge0: port 3(team0) entered blocking state [ 1253.532098][T24937] bridge0: port 3(team0) entered disabled state [ 1253.544351][T24937] team0: entered allmulticast mode [ 1253.557703][T24937] C: entered allmulticast mode [ 1253.570089][T24937] team_slave_1: entered allmulticast mode [ 1253.586943][T24937] veth1_macvtap: entered allmulticast mode [ 1253.606839][T24937] hsr_slave_0: entered allmulticast mode [ 1253.612682][T24937] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 1254.010904][T24957] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7908'. [ 1254.396452][T24971] netlink: 'syz.3.7912': attribute type 39 has an invalid length. [ 1257.396654][T25015] syzkaller0: entered promiscuous mode [ 1257.409274][T25015] syzkaller0: entered allmulticast mode [ 1260.492540][T25033] syzkaller0: entered promiscuous mode [ 1260.498161][T25033] syzkaller0: entered allmulticast mode [ 1262.308941][T25045] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1262.389042][T25048] netlink: 'syz.3.7939': attribute type 21 has an invalid length. [ 1263.069962][T25077] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.7954'. [ 1263.414769][T18867] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1264.852543][T25136] syzkaller0: entered promiscuous mode [ 1264.865394][T25136] syzkaller0: entered allmulticast mode [ 1266.957022][T25179] netlink: 'syz.4.7995': attribute type 10 has an invalid length. [ 1266.969722][T25179] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7995'. [ 1266.986125][T25179] team0: entered promiscuous mode [ 1267.001838][T25179] C: entered promiscuous mode [ 1267.008631][T25179] team_slave_1: entered promiscuous mode [ 1267.029259][T25179] hsr_slave_0: entered promiscuous mode [ 1267.037386][T25179] team0: entered allmulticast mode [ 1267.043423][T25179] C: entered allmulticast mode [ 1267.049720][T25179] team_slave_1: entered allmulticast mode [ 1267.056536][T25179] hsr_slave_0: entered allmulticast mode [ 1267.077546][T25179] bond0: (slave team0): Releasing backup interface [ 1267.109031][T25179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1267.166863][T25181] netlink: 'syz.0.7996': attribute type 10 has an invalid length. [ 1268.075606][T25221] syzkaller0: entered promiscuous mode [ 1268.082790][T25221] syzkaller0: entered allmulticast mode [ 1268.364094][T25233] netlink: 'syz.0.8017': attribute type 39 has an invalid length. [ 1268.384199][T25233] veth0_macvtap: left promiscuous mode [ 1268.645494][T18867] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1268.657162][T18867] Bluetooth: hci2: Injecting HCI hardware error event [ 1268.666084][T18867] Bluetooth: hci2: hardware error 0x00 [ 1269.899265][T25287] syzkaller0: entered promiscuous mode [ 1269.905037][T25287] syzkaller0: entered allmulticast mode [ 1270.187048][T25296] netlink: 'syz.4.8044': attribute type 10 has an invalid length. [ 1270.195122][T25296] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 1270.212964][T25296] bond0: (slave wlan1): Releasing backup interface [ 1270.231468][T25296] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 1270.240978][T25296] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 1270.268841][T25296] team0: Port device wlan1 added [ 1270.634805][T25294] syzkaller0: entered promiscuous mode [ 1270.643791][T25294] syzkaller0: entered allmulticast mode [ 1271.045991][T18867] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1271.060387][T25312] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8053'. [ 1272.777558][T25312] netlink: 'syz.3.8053': attribute type 39 has an invalid length. [ 1273.669935][T25338] netlink: 'syz.4.8065': attribute type 10 has an invalid length. [ 1273.678324][T25338] team0: Device ip6_vti0 is of different type [ 1273.705638][T25334] syzkaller0: entered promiscuous mode [ 1273.713429][T25334] syzkaller0: entered allmulticast mode [ 1273.959559][T25344] netlink: 'syz.0.8067': attribute type 10 has an invalid length. [ 1273.988180][T25344] team0: left allmulticast mode [ 1273.993119][T25344] C: left allmulticast mode [ 1273.998206][T25344] team_slave_1: left allmulticast mode [ 1274.003708][T25344] veth1_macvtap: left allmulticast mode [ 1274.010087][T25344] hsr_slave_0: left allmulticast mode [ 1274.015665][T25344] mac80211_hwsim hwsim36 wlan1: left allmulticast mode [ 1274.022882][T25344] team0: left promiscuous mode [ 1274.028027][T25344] C: left promiscuous mode [ 1274.037095][T25344] team_slave_1: left promiscuous mode [ 1274.043126][T25344] veth1_macvtap: left promiscuous mode [ 1274.056805][T25344] hsr_slave_0: left promiscuous mode [ 1274.066124][T25344] mac80211_hwsim hwsim36 wlan1: left promiscuous mode [ 1274.080073][T25344] bridge0: port 3(team0) entered disabled state [ 1274.126859][T25344] wlan1: mtu less than device minimum [ 1274.137915][T25344] team0: Device wlan1 failed to change mtu [ 1274.146828][T25344] : (slave team0): Error -22 calling dev_set_mtu [ 1274.241481][T25351] syzkaller0: entered promiscuous mode [ 1274.250072][T25351] syzkaller0: entered allmulticast mode [ 1276.266795][T25377] syz.3.8082[25377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1276.266919][T25377] syz.3.8082[25377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1276.851760][T25356] netlink: 'syz.1.8072': attribute type 9 has an invalid length. [ 1276.871312][T25356] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.8072'. [ 1276.891205][T25376] netlink: 'syz.0.8081': attribute type 10 has an invalid length. [ 1276.952725][T25376] bridge_slave_1: left allmulticast mode [ 1276.965368][T25376] bridge_slave_1: left promiscuous mode [ 1276.972974][T25376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.984724][T25376] bridge_slave_1: entered promiscuous mode [ 1276.991171][T25376] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1277.135003][T25382] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1277.158476][T25382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8093'. [ 1278.366384][T25421] netlink: 'syz.4.8099': attribute type 21 has an invalid length. [ 1278.526425][T25425] syzkaller0: entered promiscuous mode [ 1278.532216][T25425] syzkaller0: entered allmulticast mode [ 1280.725533][T25431] netlink: 'syz.4.8103': attribute type 10 has an invalid length. [ 1280.746853][T25431] veth1_macvtap: entered promiscuous mode [ 1280.752794][T25431] veth1_macvtap: entered allmulticast mode [ 1280.796961][T25431] team0: Port device veth1_macvtap added [ 1280.826488][T25437] syz.0.8106[25437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1280.826642][T25437] syz.0.8106[25437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1281.114785][T18867] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 1282.096035][T25482] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1282.121037][T25482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8127'. [ 1283.206124][T25525] netlink: 'syz.1.8147': attribute type 10 has an invalid length. [ 1283.214522][T25525] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8147'. [ 1283.784871][T25530] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1283.799863][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8150'. [ 1283.999903][T18867] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7 [ 1284.101866][T25537] netlink: 'syz.0.8152': attribute type 2 has an invalid length. [ 1284.139660][T25537] netlink: 'syz.0.8152': attribute type 9 has an invalid length. [ 1284.170998][T25537] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8152'. [ 1284.204853][T18867] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 1284.953507][T25562] netlink: 'syz.3.8165': attribute type 28 has an invalid length. [ 1284.971211][T25562] netlink: 'syz.3.8165': attribute type 29 has an invalid length. [ 1284.992786][T25562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8165'. [ 1285.172343][T25572] veth1_to_bond: entered allmulticast mode [ 1285.357122][T25580] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.8171'. [ 1285.366651][T25580] openvswitch: netlink: Duplicate key (type 0). [ 1285.481572][T25585] netlink: 'syz.4.8173': attribute type 10 has an invalid length. [ 1285.507206][T25585] dummy0: entered promiscuous mode [ 1285.516913][T25585] dummy0: entered allmulticast mode [ 1285.523440][T25585] team0: Port device dummy0 added [ 1285.976151][T25601] syzkaller0: entered promiscuous mode [ 1285.981993][T25601] syzkaller0: entered allmulticast mode [ 1288.213079][T25608] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1288.223208][T25610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8181'. [ 1288.669517][T25628] netlink: 'syz.0.8189': attribute type 29 has an invalid length. [ 1288.692600][T25628] netlink: 'syz.0.8189': attribute type 29 has an invalid length. [ 1288.983611][T25636] syzkaller0: entered promiscuous mode [ 1288.989983][T25636] syzkaller0: entered allmulticast mode [ 1289.394893][T25650] netlink: 'syz.1.8198': attribute type 29 has an invalid length. [ 1289.421192][T25650] netlink: 'syz.1.8198': attribute type 29 has an invalid length. [ 1289.784642][T25666] syzkaller0: entered promiscuous mode [ 1289.802251][T25666] syzkaller0: entered allmulticast mode [ 1289.831317][T25666] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8205'. [ 1289.845629][T25666] batadv_slave_1: entered promiscuous mode [ 1291.832863][T25720] netlink: 'syz.0.8232': attribute type 9 has an invalid length. [ 1291.848393][T25720] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.8232'. [ 1292.310810][T25734] netlink: 'syz.0.8236': attribute type 23 has an invalid length. [ 1292.544857][T25737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1293.109046][T25761] netlink: 'syz.1.8248': attribute type 29 has an invalid length. [ 1293.131575][T25761] netlink: 'syz.1.8248': attribute type 29 has an invalid length. [ 1293.189281][T25763] netlink: 'syz.4.8246': attribute type 64 has an invalid length. [ 1293.716668][T25778] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.8256'. [ 1295.154228][T25800] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 1295.190294][T25800] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 1296.261365][T25813] netlink: 'syz.0.8270': attribute type 1 has an invalid length. [ 1296.269421][T25813] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.8270'. [ 1296.279276][T25813] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8270'. [ 1296.392675][ T12] syzkaller0: tun_net_xmit 76 [ 1296.401764][ T12] syzkaller0: tun_net_xmit 48 [ 1296.425358][ T965] syzkaller0: tun_net_xmit 76 [ 1296.446090][ T965] syzkaller0: tun_net_xmit 76 [ 1296.447006][T25816] syzkaller0: create flow: hash 634411526 index 1 [ 1296.575764][T25821] syzkaller0: delete flow: hash 634411526 index 1 [ 1297.585138][T25829] netlink: 'syz.1.8284': attribute type 1 has an invalid length. [ 1297.605827][T25829] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.8284'. [ 1297.615187][T25829] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8284'. [ 1299.292145][T25833] wg2: entered promiscuous mode [ 1299.297810][T25833] wg2: entered allmulticast mode [ 1300.073438][T25848] erspan0: left allmulticast mode [ 1300.078518][T25850] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.8281'. [ 1300.088664][T25848] erspan0: left promiscuous mode [ 1300.093981][T25848] Ÿë: port 2(erspan0) entered disabled state [ 1300.102598][T25848] veth0_to_bridge: left allmulticast mode [ 1300.108536][T25848] veth0_to_bridge: left promiscuous mode [ 1300.114406][T25848] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1300.718317][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.725605][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.637095][T25880] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.8293'. [ 1302.076873][T25895] netlink: 'syz.4.8297': attribute type 29 has an invalid length. [ 1302.085697][T25895] netlink: 'syz.4.8297': attribute type 29 has an invalid length. [ 1302.552928][T25899] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.8300'. [ 1303.647724][T25914] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.8313'. [ 1304.779528][T25925] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.8306'. [ 1305.527596][T25940] netlink: 'syz.1.8308': attribute type 29 has an invalid length. [ 1305.537301][T25940] netlink: 'syz.1.8308': attribute type 29 has an invalid length. [ 1306.460869][T25950] netlink: 'syz.0.8323': attribute type 29 has an invalid length. [ 1306.481735][T25950] netlink: 'syz.0.8323': attribute type 29 has an invalid length. [ 1306.610825][T25957] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.8318'. [ 1306.659723][T25959] netlink: 'syz.0.8329': attribute type 29 has an invalid length. [ 1306.669805][T25959] netlink: 'syz.0.8329': attribute type 29 has an invalid length. [ 1306.803635][T25965] sit0: left promiscuous mode [ 1306.921360][T25965] sit0: entered promiscuous mode [ 1307.588609][T25971] netlink: 'syz.1.8322': attribute type 10 has an invalid length. [ 1307.594023][T25974] netlink: 'syz.4.8333': attribute type 29 has an invalid length. [ 1307.618443][T25971] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1307.637517][T25974] netlink: 'syz.4.8333': attribute type 29 has an invalid length. [ 1308.551246][T25993] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1310.537643][T25999] sit0: entered promiscuous mode [ 1310.620944][T26003] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.8345'. [ 1310.670025][T26007] netlink: 'syz.0.8337': attribute type 10 has an invalid length. [ 1311.719442][T26023] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.8352'. [ 1311.746412][T26025] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 1311.754350][T26025] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1311.762964][T26025] veth0_to_bridge: entered allmulticast mode [ 1311.771060][T26025] veth0_to_bridge: entered promiscuous mode [ 1311.807328][T26025] Ÿë: port 2(erspan0) entered blocking state [ 1311.836111][T26025] Ÿë: port 2(erspan0) entered disabled state [ 1311.854172][T26025] erspan0: entered allmulticast mode [ 1311.872811][T26025] erspan0: entered promiscuous mode [ 1314.487999][T26052] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.8362'. [ 1316.567469][T26068] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.8369'. [ 1318.227023][T26084] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 1318.234673][T26084] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1318.258923][T26084] veth0_to_bridge: entered allmulticast mode [ 1318.267294][T26084] veth0_to_bridge: entered promiscuous mode [ 1318.286263][T26085] Ÿë: port 2(erspan0) entered blocking state [ 1318.297215][T26085] Ÿë: port 2(erspan0) entered disabled state [ 1318.305991][T26085] erspan0: entered allmulticast mode [ 1318.313436][T26085] erspan0: entered promiscuous mode [ 1318.441724][T26087] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.8375'. [ 1320.366692][T26123] netlink: 'syz.3.8380': attribute type 10 has an invalid length. [ 1320.387187][T26123] veth0_vlan: left promiscuous mode [ 1320.402282][T26123] veth0_vlan: entered promiscuous mode [ 1320.413079][T26123] team0: Device veth0_vlan failed to register rx_handler [ 1320.600278][T26133] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1321.663799][T26158] netlink: 'syz.4.8392': attribute type 10 has an invalid length. [ 1321.682994][T26158] veth0_vlan: entered allmulticast mode [ 1321.694683][T26158] veth0_vlan: left promiscuous mode [ 1321.711189][T26158] veth0_vlan: entered promiscuous mode [ 1321.729179][T26158] team0: Device veth0_vlan failed to register rx_handler [ 1321.913544][T26165] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 1322.241774][T26174] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.8401'. [ 1322.670042][T26193] netlink: 'syz.3.8405': attribute type 10 has an invalid length. [ 1322.680044][T26193] veth0_vlan: left promiscuous mode [ 1322.690239][T26193] veth0_vlan: entered promiscuous mode [ 1322.710093][T26193] team0: Device veth0_vlan failed to register rx_handler [ 1323.866955][T26221] netlink: 'syz.4.8415': attribute type 11 has an invalid length. [ 1323.875328][T26221] netlink: 195824 bytes leftover after parsing attributes in process `syz.4.8415'. [ 1324.245449][T26234] netlink: 'syz.4.8417': attribute type 10 has an invalid length. [ 1324.257236][T26234] veth0_vlan: left promiscuous mode [ 1324.275631][T26234] veth0_vlan: entered promiscuous mode [ 1324.303173][T26234] team0: Device veth0_vlan failed to register rx_handler [ 1324.613302][T26248] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.8422'. [ 1325.359835][T26263] netlink: 'syz.0.8427': attribute type 11 has an invalid length. [ 1325.375535][T26263] netlink: 195824 bytes leftover after parsing attributes in process `syz.0.8427'. [ 1325.518278][T26269] netlink: 'syz.1.8432': attribute type 10 has an invalid length. [ 1327.277877][T26307] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.8444'. [ 1327.319498][T26309] netlink: 'syz.4.8443': attribute type 29 has an invalid length. [ 1327.348991][T26309] netlink: 'syz.4.8443': attribute type 29 has an invalid length. [ 1329.480827][T26346] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.8463'. [ 1330.697489][T26360] netlink: 'syz.0.8458': attribute type 29 has an invalid length. [ 1330.708606][T26360] netlink: 'syz.0.8458': attribute type 29 has an invalid length. [ 1331.501645][T26380] netlink: 'syz.3.8476': attribute type 10 has an invalid length. [ 1331.594873][T26380] hsr_slave_0: entered promiscuous mode [ 1331.620006][T26380] team0: Port device hsr_slave_0 added [ 1331.643442][T26386] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.8469'. [ 1331.719363][T26388] netlink: 'syz.0.8470': attribute type 3 has an invalid length. [ 1331.743838][T26388] netlink: 'syz.0.8470': attribute type 4 has an invalid length. [ 1331.751766][T26388] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.8470'. [ 1331.983666][T26396] netlink: 'syz.0.8473': attribute type 29 has an invalid length. [ 1332.041884][T26396] netlink: 'syz.0.8473': attribute type 29 has an invalid length. [ 1335.797375][T26419] netlink: 'syz.1.8482': attribute type 10 has an invalid length. [ 1335.853670][T26419] team0: Device hsr_slave_0 failed to register rx_handler [ 1335.891472][T26422] netlink: 'syz.3.8484': attribute type 3 has an invalid length. [ 1335.931742][T26422] netlink: 'syz.3.8484': attribute type 4 has an invalid length. [ 1335.941259][T26422] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.8484'. [ 1336.229776][T26432] netlink: 'syz.0.8488': attribute type 29 has an invalid length. [ 1336.252040][T26432] netlink: 'syz.0.8488': attribute type 29 has an invalid length. [ 1336.441444][T26436] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.8489'. [ 1338.845210][T26452] netlink: 'syz.4.8496': attribute type 3 has an invalid length. [ 1338.856285][T26452] netlink: 'syz.4.8496': attribute type 4 has an invalid length. [ 1338.864052][T26452] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.8496'. [ 1338.879851][T26450] netlink: 'syz.1.8495': attribute type 10 has an invalid length. [ 1338.897132][T26450] team0: Device hsr_slave_0 failed to register rx_handler [ 1339.317536][T26463] »»»»»»: renamed from vlan0 [ 1339.430394][T26472] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.8502'. [ 1340.423703][T26481] netlink: 'syz.3.8507': attribute type 10 has an invalid length. [ 1344.181528][T26516] netlink: 'syz.0.8516': attribute type 29 has an invalid length. [ 1344.207381][T26516] netlink: 'syz.0.8516': attribute type 29 has an invalid length. [ 1344.409540][T26526] netlink: 'syz.4.8521': attribute type 3 has an invalid length. [ 1344.456060][T26526] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.8521'. [ 1345.093146][T18867] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11 [ 1345.278619][T18867] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11 [ 1346.645977][T18867] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 1348.594080][T26578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8538'. [ 1349.115969][T18867] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1349.125060][T18867] Bluetooth: hci1: Injecting HCI hardware error event [ 1349.134242][T18867] Bluetooth: hci1: hardware error 0x00 [ 1349.499655][T26611] netlink: 'syz.4.8551': attribute type 29 has an invalid length. [ 1349.526285][T26611] netlink: 'syz.4.8551': attribute type 29 has an invalid length. [ 1350.267835][T26643] netlink: 'syz.1.8564': attribute type 29 has an invalid length. [ 1350.287596][T26643] netlink: 'syz.1.8564': attribute type 29 has an invalid length. [ 1350.813560][T25248] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11 [ 1351.270759][T26669] netlink: 'syz.3.8577': attribute type 29 has an invalid length. [ 1351.289077][T26669] netlink: 'syz.3.8577': attribute type 29 has an invalid length. [ 1351.297319][T18867] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1351.622769][T26682] netlink: 'syz.3.8590': attribute type 29 has an invalid length. [ 1351.645558][T26682] netlink: 'syz.3.8590': attribute type 29 has an invalid length. [ 1351.863213][T18867] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11 [ 1352.789877][T26705] netlink: 'syz.3.8593': attribute type 29 has an invalid length. [ 1352.806692][T26705] netlink: 'syz.3.8593': attribute type 29 has an invalid length. [ 1354.876056][T18867] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1354.884838][T18867] Bluetooth: hci3: Injecting HCI hardware error event [ 1354.893484][T18867] Bluetooth: hci3: hardware error 0x00 [ 1355.600788][T26746] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.8603'. [ 1355.805253][T26754] netlink: 'syz.1.8606': attribute type 29 has an invalid length. [ 1355.815550][T26754] netlink: 'syz.1.8606': attribute type 29 has an invalid length. [ 1356.957291][T26774] netlink: 'syz.3.8616': attribute type 12 has an invalid length. [ 1356.975933][T26774] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8616'. [ 1357.511476][T26785] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1357.601528][T18867] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1358.040259][T26792] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1358.084475][T26792] netlink: 'syz.3.8620': attribute type 10 has an invalid length. [ 1358.093507][T26792] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 1358.104134][T26792] wlan1: mtu less than device minimum [ 1358.117044][T26792] : (slave wlan1): Error -22 calling dev_set_mtu [ 1358.275503][T26798] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8621'. [ 1361.412078][T26824] erspan0: left allmulticast mode [ 1361.420599][T26824] erspan0: left promiscuous mode [ 1361.436709][T26824] Ÿë: port 2(erspan0) entered disabled state [ 1361.447619][T26824] veth0_to_bridge: left allmulticast mode [ 1361.453387][T26824] veth0_to_bridge: left promiscuous mode [ 1361.466077][T26824] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1361.640760][T26828] syzkaller0: entered promiscuous mode [ 1361.646843][T26828] syzkaller0: entered allmulticast mode [ 1362.188120][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.194503][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.965466][T26837] netlink: 'syz.4.8635': attribute type 12 has an invalid length. [ 1363.973675][T26837] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8635'. [ 1364.082954][T26840] netlink: 'syz.1.8644': attribute type 9 has an invalid length. [ 1364.093325][T26840] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.8644'. [ 1364.535439][T26844] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1366.433955][T26893] netlink: 'syz.3.8663': attribute type 29 has an invalid length. [ 1366.524715][T26893] netlink: 'syz.3.8663': attribute type 29 has an invalid length. [ 1368.470466][T26933] netlink: 'syz.4.8668': attribute type 29 has an invalid length. [ 1368.497020][T26933] netlink: 'syz.4.8668': attribute type 29 has an invalid length. [ 1368.972990][T26936] bridge_slave_0: left allmulticast mode [ 1369.019079][T26936] bridge_slave_0: left promiscuous mode [ 1369.030114][T26936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.611627][T26980] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.8691'. [ 1370.638940][T26980] openvswitch: netlink: Duplicate key (type 0). [ 1372.269262][T27015] netlink: 'syz.1.8699': attribute type 28 has an invalid length. [ 1372.277350][T27015] netlink: 'syz.1.8699': attribute type 29 has an invalid length. [ 1372.285179][T27015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8699'. [ 1373.556128][T27043] netlink: 'syz.3.8709': attribute type 2 has an invalid length. [ 1373.565934][T27043] netlink: 'syz.3.8709': attribute type 9 has an invalid length. [ 1373.573803][T27043] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8709'. [ 1375.613800][T27084] netlink: 'syz.3.8728': attribute type 10 has an invalid length. [ 1375.651247][T27084] veth1_macvtap: entered promiscuous mode [ 1375.668725][T27084] team0: Port device veth1_macvtap added [ 1376.401151][T27095] netlink: 'syz.3.8734': attribute type 21 has an invalid length. [ 1378.929904][T27128] netlink: 'syz.1.8741': attribute type 10 has an invalid length. [ 1379.320121][T27139] netlink: 'syz.1.8747': attribute type 10 has an invalid length. [ 1380.782736][T27164] netlink: 'syz.1.8758': attribute type 10 has an invalid length. [ 1380.794317][T27164] team0: Device ip6_vti0 is of different type [ 1380.907379][T27162] netlink: 'syz.0.8754': attribute type 21 has an invalid length. [ 1380.941975][T27171] netlink: 'syz.1.8760': attribute type 10 has an invalid length. [ 1380.958186][T27171] team0: left promiscuous mode [ 1380.968771][T27171] C: left promiscuous mode [ 1380.982018][T27171] team_slave_1: left promiscuous mode [ 1380.989498][T27171] dummy0: left promiscuous mode [ 1381.039821][T27171] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.051435][T27171] bond0: (slave team0): Enslaving as an active interface with an up link [ 1381.538729][T27184] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8766'. [ 1381.590050][T27184] netlink: 'syz.0.8766': attribute type 39 has an invalid length. [ 1381.891340][T27194] netlink: 'syz.0.8771': attribute type 10 has an invalid length. [ 1382.797551][T27211] syzkaller0: entered promiscuous mode [ 1382.807613][T27211] syzkaller0: entered allmulticast mode [ 1382.962962][T27215] netlink: 'syz.3.8783': attribute type 10 has an invalid length. [ 1382.991373][T27215] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 1383.001029][T27215] team0: Port device wlan1 added [ 1383.789722][T27253] syzkaller0: entered promiscuous mode [ 1383.796813][T27253] syzkaller0: entered allmulticast mode [ 1385.902315][T27257] netlink: 'syz.0.8799': attribute type 10 has an invalid length. [ 1386.269072][T27282] netlink: 'syz.1.8810': attribute type 39 has an invalid length. [ 1386.826965][T27307] netlink: 'syz.3.8820': attribute type 10 has an invalid length. [ 1386.834940][T27307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8820'. [ 1386.851660][T27307] team0: entered allmulticast mode [ 1386.859978][T27307] C: entered allmulticast mode [ 1386.865102][T27307] team_slave_1: entered allmulticast mode [ 1386.872001][T27307] hsr_slave_0: entered allmulticast mode [ 1386.878795][T27307] veth1_macvtap: entered allmulticast mode [ 1386.884851][T27307] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 1386.894480][T27307] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1387.098883][T27312] netlink: 'syz.3.8822': attribute type 10 has an invalid length. [ 1387.131759][T27312] : (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1388.226892][T27353] syzkaller0: entered promiscuous mode [ 1388.242747][T27353] syzkaller0: entered allmulticast mode [ 1390.764389][T27426] netlink: 'syz.1.8877': attribute type 21 has an invalid length. [ 1390.852290][T27428] netlink: 11254 bytes leftover after parsing attributes in process `syz.4.8867'. [ 1391.417147][T27442] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1391.768185][T27453] netlink: 'syz.4.8881': attribute type 21 has an invalid length. [ 1391.829373][T27459] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1392.024096][T27471] netlink: 'syz.3.8897': attribute type 21 has an invalid length. [ 1393.060258][T27505] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1394.405651][T27534] syzkaller0: entered promiscuous mode [ 1394.431857][T27534] syzkaller0: entered allmulticast mode [ 1396.944254][T27547] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1398.244853][T27587] netlink: 'syz.4.8927': attribute type 39 has an invalid length. [ 1398.531855][T27599] netlink: 'syz.3.8942': attribute type 10 has an invalid length. [ 1398.558027][T27599] team0: left promiscuous mode [ 1398.562857][T27599] C: left promiscuous mode [ 1398.573246][T27599] team_slave_1: left promiscuous mode [ 1398.579433][T27599] hsr_slave_0: left promiscuous mode [ 1398.587140][T27599] veth1_macvtap: left promiscuous mode [ 1398.593188][T27599] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 1398.601071][T27599] team0: left allmulticast mode [ 1398.606207][T27599] C: left allmulticast mode [ 1398.628590][T27599] team_slave_1: left allmulticast mode [ 1398.634083][T27599] hsr_slave_0: left allmulticast mode [ 1398.645813][T27599] veth1_macvtap: left allmulticast mode [ 1398.653077][T27599] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 1398.676842][T27602] netlink: 'syz.3.8942': attribute type 10 has an invalid length. [ 1398.684760][T27602] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8942'. [ 1398.696963][T27602] team0: entered promiscuous mode [ 1398.702111][T27602] C: entered promiscuous mode [ 1398.707999][T27602] team_slave_1: entered promiscuous mode [ 1398.713894][T27602] hsr_slave_0: entered promiscuous mode [ 1398.720046][T27602] veth1_macvtap: entered promiscuous mode [ 1398.731837][T27602] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 1398.748380][T27602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.893615][T27610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1399.262738][T27626] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8943'. [ 1399.517217][T27634] netlink: 'syz.1.8948': attribute type 10 has an invalid length. [ 1399.863234][T27645] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1401.579458][T27698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1408.847367][T27811] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9023'. [ 1410.414911][T27837] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9034'. [ 1411.127144][T27855] syzkaller0: entered promiscuous mode [ 1411.132688][T27855] syzkaller0: entered allmulticast mode [ 1411.575438][T27867] netlink: set zone limit has 8 unknown bytes [ 1414.761785][T27882] netlink: 'syz.0.9051': attribute type 3 has an invalid length. [ 1414.770662][T27882] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.9051'. [ 1415.474914][T27894] netlink: 'syz.0.9055': attribute type 1 has an invalid length. [ 1415.520755][T27898] netlink: set zone limit has 8 unknown bytes [ 1416.634390][T27916] syzkaller0: entered promiscuous mode [ 1416.675815][T27916] syzkaller0: entered allmulticast mode [ 1419.323377][T27925] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 1422.045096][T27960] netlink: 'syz.0.9082': attribute type 15 has an invalid length. [ 1422.303577][T27989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1422.311107][T27989] IPv6: NLM_F_CREATE should be set when creating new route [ 1422.318616][T27989] IPv6: NLM_F_CREATE should be set when creating new route [ 1422.724547][T27998] syzkaller0: entered promiscuous mode [ 1422.747614][T27998] syzkaller0: entered allmulticast mode [ 1423.602593][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.609291][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.053753][T28028] netlink: 'syz.3.9103': attribute type 6 has an invalid length. [ 1426.066545][T28028] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9103'. [ 1426.265557][T28038] netlink: 'syz.0.9108': attribute type 6 has an invalid length. [ 1426.276204][T28038] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9108'. [ 1426.301613][T28036] netlink: 'syz.1.9116': attribute type 21 has an invalid length. [ 1426.426033][T28043] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9111'. [ 1426.439212][T28043] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9111'. [ 1427.577039][T28084] syz.3.9129[28084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1427.577162][T28084] syz.3.9129[28084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1427.592784][T28084] syz.3.9129[28084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1427.613824][T28084] syz.3.9129[28084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1430.082097][T28126] netlink: 'syz.1.9146': attribute type 10 has an invalid length. [ 1430.150202][T28126] bond0: entered promiscuous mode [ 1430.155321][T28126] bond_slave_1: entered promiscuous mode [ 1430.171525][T28126] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1430.188610][T28126] bridge_slave_1: entered promiscuous mode [ 1430.205032][T28126] team0: entered promiscuous mode [ 1430.215270][T28126] C: entered promiscuous mode [ 1430.225582][T28126] team_slave_1: entered promiscuous mode [ 1430.237730][T28126] dummy0: entered promiscuous mode [ 1430.465214][T28132] wg2: left promiscuous mode [ 1430.474969][T28132] wg2: left allmulticast mode [ 1430.974941][T28151] netlink: 766 bytes leftover after parsing attributes in process `syz.4.9166'. [ 1432.855301][T28198] netlink: 'syz.3.9180': attribute type 10 has an invalid length. [ 1432.906734][T28197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.380261][T28234] netlink: 'syz.3.9203': attribute type 3 has an invalid length. [ 1435.389963][T28234] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.9203'. [ 1436.317884][T28251] netlink: 'syz.4.9200': attribute type 4 has an invalid length. [ 1436.348213][T28251] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9200'. [ 1436.827706][T28267] netlink: 'syz.0.9208': attribute type 3 has an invalid length. [ 1436.846242][T28267] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.9208'. [ 1437.538685][T28288] netlink: 'syz.4.9219': attribute type 10 has an invalid length. [ 1437.745005][T28292] netlink: 'syz.1.9218': attribute type 10 has an invalid length. [ 1437.765488][T28292] mac80211_hwsim hwsim42 wlan1: left allmulticast mode [ 1437.779010][T28292] wlan1: mtu less than device minimum [ 1437.793209][T28291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.395332][T28299] netlink: 'syz.1.9233': attribute type 10 has an invalid length. [ 1438.427101][T28299] wlan1: mtu less than device minimum [ 1438.454394][T28294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.478173][T28298] netlink: 'syz.3.9231': attribute type 10 has an invalid length. [ 1438.557380][T28298] : (slave netdevsim0): Enslaving as an active interface with an up link [ 1439.341800][T28309] netlink: 'syz.3.9236': attribute type 10 has an invalid length. [ 1439.737606][T28326] netlink: 'syz.1.9234': attribute type 39 has an invalid length. [ 1439.814315][T28330] netlink: 'syz.4.9237': attribute type 10 has an invalid length. [ 1439.882610][T28328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.147070][T28339] mac80211_hwsim hwsim36 wlan1: left allmulticast mode [ 1440.165386][T28336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.871375][T28349] validate_nla: 1 callbacks suppressed [ 1440.871413][T28349] netlink: 'syz.3.9247': attribute type 10 has an invalid length. [ 1440.888334][T28349] veth0_vlan: left promiscuous mode [ 1440.902046][T28349] veth0_vlan: entered promiscuous mode [ 1440.925834][T28349] team0: Device veth0_vlan failed to register rx_handler [ 1441.968511][T28369] netlink: 'syz.1.9255': attribute type 10 has an invalid length. [ 1441.977575][T28369] wlan1: mtu less than device minimum [ 1441.985419][T28368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.427569][T28388] netlink: 'syz.4.9259': attribute type 10 has an invalid length. [ 1442.442961][T28388] veth0_vlan: left promiscuous mode [ 1442.452422][T28388] veth0_vlan: entered promiscuous mode [ 1442.468397][T28388] team0: Device veth0_vlan failed to register rx_handler [ 1442.793574][T28399] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9265'. [ 1442.817193][T28399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9265'. [ 1443.335392][T28405] netlink: 'syz.0.9276': attribute type 10 has an invalid length. [ 1444.352032][T28431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9278'. [ 1444.382162][T28431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9278'. [ 1449.165268][T28502] netlink: 'syz.0.9306': attribute type 10 has an invalid length. [ 1449.190319][T28502] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9306'. [ 1449.316536][T28505] netlink: 'syz.4.9309': attribute type 2 has an invalid length. [ 1449.324376][T28505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9309'. [ 1451.760368][T28539] netlink: 'syz.3.9324': attribute type 2 has an invalid length. [ 1451.871399][T28539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9324'. [ 1452.268289][T28554] netlink: 'syz.3.9330': attribute type 10 has an invalid length. [ 1452.284116][T28554] : entered promiscuous mode [ 1452.289806][T28554] bond_slave_1: entered promiscuous mode [ 1452.296824][T28554] bridge_slave_1: entered promiscuous mode [ 1452.303249][T28554] batadv_slave_0: entered promiscuous mode [ 1452.309575][T28554] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1453.368326][T28566] netlink: 'syz.4.9336': attribute type 17 has an invalid length. [ 1453.385258][T28566] netlink: 'syz.4.9336': attribute type 16 has an invalid length. [ 1453.395535][T28566] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9336'. [ 1453.817016][T28574] netlink: 'syz.4.9340': attribute type 2 has an invalid length. [ 1453.876534][T28574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9340'. [ 1455.798628][T28602] netlink: 766 bytes leftover after parsing attributes in process `syz.1.9348'. [ 1456.947310][T28620] delete_channel: no stack [ 1457.985260][T28628] syzkaller0: entered promiscuous mode [ 1457.990938][T28628] syzkaller0: entered allmulticast mode [ 1458.225856][T28628] syzkaller0: left promiscuous mode [ 1458.231132][T28628] syzkaller0: left allmulticast mode [ 1460.595344][T28643] netlink: 766 bytes leftover after parsing attributes in process `syz.1.9366'. [ 1460.978325][T28654] netlink: 'syz.0.9370': attribute type 17 has an invalid length. [ 1460.987155][T28654] netlink: 'syz.0.9370': attribute type 16 has an invalid length. [ 1461.005918][T28654] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9370'. [ 1462.178510][T28678] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1464.520327][T28687] netlink: 766 bytes leftover after parsing attributes in process `syz.0.9381'. [ 1464.740962][T28693] netlink: 766 bytes leftover after parsing attributes in process `syz.0.9397'. [ 1465.999728][T28727] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.9400'. [ 1466.050529][T28730] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1466.267059][T28735] syz.4.9401[28735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1466.267186][T28735] syz.4.9401[28735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1466.301074][T28735] syz.4.9401[28735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1466.390025][T28735] syz.4.9401[28735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1468.103935][T28736] netlink: 766 bytes leftover after parsing attributes in process `syz.3.9402'. [ 1468.989275][T28756] netlink: 766 bytes leftover after parsing attributes in process `syz.4.9416'. [ 1469.227701][T28764] netlink: 'syz.0.9417': attribute type 21 has an invalid length. [ 1469.235597][T28764] IPv6: NLM_F_CREATE should be specified when creating new route [ 1469.257263][T28764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1469.264566][T28764] IPv6: NLM_F_CREATE should be set when creating new route [ 1469.272001][T28764] IPv6: NLM_F_CREATE should be set when creating new route [ 1469.279345][T28764] IPv6: NLM_F_CREATE should be set when creating new route [ 1469.298806][T28760] netlink: 766 bytes leftover after parsing attributes in process `syz.4.9425'. [ 1471.011423][T28793] netlink: 766 bytes leftover after parsing attributes in process `syz.1.9432'. [ 1471.311552][T28803] netlink: 766 bytes leftover after parsing attributes in process `syz.3.9443'. [ 1472.986223][T28845] netlink: 766 bytes leftover after parsing attributes in process `syz.1.9448'. [ 1474.153432][T28866] netlink: 'syz.1.9454': attribute type 6 has an invalid length. [ 1474.278317][T28866] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1475.426003][T28883] netlink: 766 bytes leftover after parsing attributes in process `syz.0.9462'. [ 1476.349290][T28897] netlink: 766 bytes leftover after parsing attributes in process `syz.0.9475'. [ 1476.624274][T28901] syzkaller0: entered promiscuous mode [ 1476.630034][T28901] syzkaller0: entered allmulticast mode [ 1479.424887][T28912] netlink: 'syz.0.9472': attribute type 39 has an invalid length. [ 1479.449471][T28912] : (slave syz_tun): Releasing backup interface [ 1481.829054][T28984] netlink: 'syz.1.9493': attribute type 39 has an invalid length. [ 1481.910532][T28984] bond0: (slave syz_tun): Releasing backup interface [ 1482.046608][T28987] syzkaller0: entered promiscuous mode [ 1482.052494][T28987] syzkaller0: entered allmulticast mode [ 1485.062673][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.077251][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.145266][T29006] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9504'. [ 1485.201722][T29013] syzkaller0: entered promiscuous mode [ 1485.207866][T29013] syzkaller0: entered allmulticast mode [ 1487.162367][T29024] netlink: 'syz.0.9512': attribute type 39 has an invalid length. [ 1487.298963][T29030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1487.306517][T29030] IPv6: NLM_F_CREATE should be set when creating new route [ 1487.314059][T29030] IPv6: NLM_F_CREATE should be set when creating new route [ 1487.798710][T29048] netlink: 'syz.0.9519': attribute type 2 has an invalid length. [ 1487.950080][T29052] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9521'. [ 1488.365405][T29067] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9525'. [ 1488.627085][T29076] netlink: 'syz.4.9528': attribute type 10 has an invalid length. [ 1488.952579][T29084] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9532'. [ 1490.961672][T29117] netlink: 'syz.4.9550': attribute type 10 has an invalid length. [ 1491.212205][T29120] syzkaller0: entered promiscuous mode [ 1491.219198][T29120] syzkaller0: entered allmulticast mode [ 1491.245733][T29113] syzkaller0: left promiscuous mode [ 1493.336736][T29125] netlink: 'syz.1.9541': attribute type 10 has an invalid length. [ 1493.346454][T29125] hsr_slave_0: left promiscuous mode [ 1493.352353][T29125] hsr_slave_1: left promiscuous mode [ 1495.812518][T29168] netlink: 'syz.3.9555': attribute type 10 has an invalid length. [ 1496.074514][T29173] netlink: 'syz.3.9560': attribute type 10 has an invalid length. [ 1496.403598][T29177] netlink: 'syz.1.9572': attribute type 10 has an invalid length. [ 1499.206773][T29211] syzkaller0: entered promiscuous mode [ 1499.212475][T29211] syzkaller0: entered allmulticast mode [ 1499.221798][T29213] netlink: 'syz.0.9578': attribute type 10 has an invalid length. [ 1501.775074][T29234] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9586'. [ 1502.256166][T29246] netlink: 'syz.1.9590': attribute type 10 has an invalid length. [ 1503.187810][T29256] syzkaller0: entered promiscuous mode [ 1503.193415][T29256] syzkaller0: entered allmulticast mode [ 1503.462372][T29260] syzkaller0: entered promiscuous mode [ 1503.468124][T29260] syzkaller0: entered allmulticast mode [ 1510.436488][T29330] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.9618'. [ 1511.291814][T29351] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1511.321519][T29351] syzkaller0: entered promiscuous mode [ 1511.334699][T29351] syzkaller0: entered allmulticast mode [ 1511.849505][T29365] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.9634'. [ 1514.217130][T29386] syzkaller0: entered promiscuous mode [ 1514.223439][T29386] syzkaller0: entered allmulticast mode [ 1516.659440][T29403] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9645'. [ 1623.335604][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1623.342618][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29422 P29434/1:b..l [ 1623.351903][ C1] rcu: (detected by 1, t=10503 jiffies, g=252325, q=57 ncpus=2) [ 1623.359626][ C1] task:syz.4.9654 state:R running task stack:25960 pid:29434 ppid:13421 flags:0x00004006 [ 1623.371768][ C1] Call Trace: [ 1623.375071][ C1] [ 1623.378117][ C1] __schedule+0x14d2/0x44d0 [ 1623.382664][ C1] ? mark_lock+0x94/0x320 [ 1623.387005][ C1] ? asan.module_dtor+0x20/0x20 [ 1623.391883][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1623.397925][ C1] ? preempt_schedule+0xab/0xc0 [ 1623.402875][ C1] preempt_schedule_common+0x82/0xc0 [ 1623.408440][ C1] preempt_schedule+0xab/0xc0 [ 1623.413127][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 1623.418763][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1623.423814][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1623.429127][ C1] _raw_spin_unlock+0x3a/0x40 [ 1623.433820][ C1] unmap_page_range+0x236f/0x2fe0 [ 1623.438900][ C1] ? copy_page_range+0x3600/0x3600 [ 1623.444031][ C1] ? unmap_single_vma+0x1b0/0x2a0 [ 1623.449078][ C1] unmap_vmas+0x25e/0x3a0 [ 1623.453429][ C1] ? unmap_page_range+0x2fe0/0x2fe0 [ 1623.458641][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1623.463694][ C1] exit_mmap+0x200/0xb50 [ 1623.467960][ C1] ? perf_trace_preemptirq_template+0x281/0x340 [ 1623.474220][ C1] ? vm_brk+0x30/0x30 [ 1623.478214][ C1] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1623.483876][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1623.489098][ C1] ? uprobe_clear_state+0x278/0x290 [ 1623.494317][ C1] __mmput+0x118/0x3c0 [ 1623.498401][ C1] copy_process+0x294b/0x3d70 [ 1623.503091][ C1] ? plist_add+0x3d8/0x490 [ 1623.507534][ C1] ? copy_process+0x945/0x3d70 [ 1623.512336][ C1] ? __pidfd_prepare+0x140/0x140 [ 1623.517291][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1623.522339][ C1] kernel_clone+0x21b/0x840 [ 1623.526857][ C1] ? trace_call_bpf+0xc3/0x690 [ 1623.531640][ C1] ? create_io_thread+0x140/0x140 [ 1623.536685][ C1] ? do_futex+0x2ff/0x3e0 [ 1623.541026][ C1] ? 0xffffffff81000000 [ 1623.545183][ C1] __x64_sys_clone+0x18c/0x1e0 [ 1623.549956][ C1] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1623.555786][ C1] ? __ia32_sys_vfork+0x100/0x100 [ 1623.560816][ C1] ? 0xffffffff81000000 [ 1623.564974][ C1] ? 0xffffffff81000000 [ 1623.569143][ C1] ? lock_chain_count+0x20/0x20 [ 1623.574010][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1623.579234][ C1] do_syscall_64+0x55/0xb0 [ 1623.583656][ C1] ? clear_bhb_loop+0x40/0x90 [ 1623.588336][ C1] ? clear_bhb_loop+0x40/0x90 [ 1623.593021][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1623.598932][ C1] RIP: 0033:0x7f6c9598ebe9 [ 1623.603353][ C1] RSP: 002b:00007f6c968acfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1623.611780][ C1] RAX: ffffffffffffffda RBX: 00007f6c95bb5fa0 RCX: 00007f6c9598ebe9 [ 1623.619756][ C1] RDX: ffffffff81000000 RSI: 0000000000000000 RDI: 000000000a089400 [ 1623.627726][ C1] RBP: 00007f6c95a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1623.635698][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1623.643758][ C1] R13: 00007f6c95bb6038 R14: 00007f6c95bb5fa0 R15: 00007ffceb29cfa8 [ 1623.651746][ C1] ? 0xffffffff81000000 [ 1623.655913][ C1] [ 1623.658937][ C1] task:syz.0.9650 state:R running task stack:27016 pid:29422 ppid:13235 flags:0x0000400a [ 1623.669727][ C1] Call Trace: [ 1623.673009][ C1] [ 1623.675860][ C1] sched_show_task+0x481/0x5a0 [ 1623.680645][ C1] ? __ia32_sys_sched_rr_get_interval_time32+0x110/0x110 [ 1623.687693][ C1] ? wq_watchdog_touch+0xef/0x170 [ 1623.692729][ C1] print_other_cpu_stall+0xfa7/0x1340 [ 1623.698163][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 1623.703551][ C1] ? print_cpu_stall+0x5a0/0x5a0 [ 1623.708583][ C1] ? __bpf_trace_rcu_utilization+0xa2/0xe0 [ 1623.714394][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 1623.720488][ C1] rcu_sched_clock_irq+0x87c/0x1220 [ 1623.725706][ C1] ? rcu_gp_set_torture_wait+0x10/0x10 [ 1623.731185][ C1] ? acct_account_cputime+0xd4/0x210 [ 1623.736488][ C1] update_process_times+0x147/0x1b0 [ 1623.741802][ C1] tick_sched_timer+0x3a2/0x580 [ 1623.746671][ C1] __hrtimer_run_queues+0x4df/0xc40 [ 1623.751886][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 1623.757464][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1623.762593][ C1] ? read_tsc+0x9/0x20 [ 1623.766663][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1623.772838][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 1623.777803][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1623.783707][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 1623.789360][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1623.795363][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 1623.801535][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 a9 4e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 1623.821156][ C1] RSP: 0018:ffffc900001f0900 EFLAGS: 00000206 [ 1623.827272][ C1] RAX: ccf731450f64b800 RBX: 1ffff9200003e128 RCX: ccf731450f64b800 [ 1623.835346][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780 [ 1623.843416][ C1] RBP: ffffc900001f0a00 R08: ffffffff90da3537 R09: 1ffffffff21b46a6 [ 1623.851396][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a7 R12: 0000000000000000 [ 1623.859392][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8cd354d8 [ 1623.867401][ C1] ? bpf_probe_write_user+0xe0/0xe0 [ 1623.872621][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1623.877592][ C1] ? lock_chain_count+0x20/0x20 [ 1623.882453][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1623.887227][ C1] bpf_trace_run1+0x256/0x3b0 [ 1623.891912][ C1] ? bpf_trace_run1+0xd6/0x3b0 [ 1623.896681][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 1623.902075][ C1] ? __bpf_trace_rcu_utilization+0x95/0xe0 [ 1623.907896][ C1] __bpf_trace_rcu_utilization+0xa2/0xe0 [ 1623.913557][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 1623.919651][ C1] ? rcu_leak_callback+0x10/0x10 [ 1623.924617][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1623.930625][ C1] trace_rcu_utilization+0x179/0x1a0 [ 1623.935940][ C1] rcu_core+0x1341/0x1720 [ 1623.940291][ C1] ? try_to_wake_up+0x2d2/0x10b0 [ 1623.945247][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1623.950284][ C1] ? __rwlock_init+0x150/0x150 [ 1623.955058][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1623.960290][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1623.965496][ C1] ? sched_clock+0x3f/0x60 [ 1623.969923][ C1] ? mark_lock+0x94/0x320 [ 1623.974263][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1623.980272][ C1] ? lock_chain_count+0x20/0x20 [ 1623.985145][ C1] ? try_to_wake_up+0x6f8/0x10b0 [ 1623.990122][ C1] handle_softirqs+0x280/0x820 [ 1623.994909][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1623.999688][ C1] ? do_softirq+0x180/0x180 [ 1624.004236][ C1] ? irq_work_single+0x199/0x230 [ 1624.009192][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1624.014411][ C1] __irq_exit_rcu+0xc7/0x190 [ 1624.019013][ C1] ? irq_exit_rcu+0x20/0x20 [ 1624.023524][ C1] ? rcu_is_watching+0x15/0xb0 [ 1624.028300][ C1] irq_exit_rcu+0x9/0x20 [ 1624.032548][ C1] sysvec_irq_work+0xa1/0xc0 [ 1624.037156][ C1] [ 1624.040088][ C1] [ 1624.043039][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 1624.048012][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 1624.054203][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 a9 4e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 1624.073833][ C1] RSP: 0018:ffffc9000c197c00 EFLAGS: 00000206 [ 1624.079916][ C1] RAX: ccf731450f64b800 RBX: 1ffff92001832f88 RCX: ccf731450f64b800 [ 1624.087895][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780 [ 1624.095869][ C1] RBP: ffffc9000c197cf0 R08: ffffffff90da3537 R09: 1ffffffff21b46a6 [ 1624.103845][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a7 R12: 0000000000000000 [ 1624.111877][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8cd354d8 [ 1624.119964][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 1624.125004][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1624.129951][ C1] ? __rwlock_init+0x150/0x150 [ 1624.134725][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1624.140111][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1624.144891][ C1] rcu_read_unlock+0x85/0xa0 [ 1624.149492][ C1] ? dput+0x3b/0x1e0 [ 1624.153389][ C1] dput+0xe6/0x1e0 [ 1624.157120][ C1] __fput+0x5e5/0x970 [ 1624.161126][ C1] task_work_run+0x1ce/0x250 [ 1624.165731][ C1] ? task_work_cancel+0x240/0x240 [ 1624.170774][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1624.176253][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 1624.181548][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 1624.187105][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1624.192629][ C1] do_syscall_64+0x61/0xb0 [ 1624.197069][ C1] ? clear_bhb_loop+0x40/0x90 [ 1624.201768][ C1] ? clear_bhb_loop+0x40/0x90 [ 1624.206462][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1624.212376][ C1] RIP: 0033:0x7fbef838ebe9 [ 1624.216812][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.236436][ C1] RSP: 002b:00007ffef91ef9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1624.244865][ C1] RAX: 0000000000000000 RBX: 00007fbef85b7da0 RCX: 00007fbef838ebe9 [ 1624.252841][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1624.260833][ C1] RBP: 00007fbef85b7da0 R08: 0000000000018b34 R09: 0000000ef91efccf [ 1624.268838][ C1] R10: 00000000005e1be8 R11: 0000000000000246 R12: 0000000000172a94 [ 1624.276905][ C1] R13: 00007ffef91efad0 R14: ffffffffffffffff R15: 00007ffef91efaf0 [ 1624.284902][ C1] [ 1624.287926][ C1] rcu: rcu_preempt kthread starved for 10597 jiffies! g252325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1624.299215][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1624.309190][ C1] rcu: RCU grace-period kthread stack dump: [ 1624.315085][ C1] task:rcu_preempt state:R running task stack:26664 pid:17 ppid:2 flags:0x00004000 [ 1624.325882][ C1] Call Trace: [ 1624.329173][ C1] [ 1624.332114][ C1] __schedule+0x14d2/0x44d0 [ 1624.336643][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1624.342550][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1624.347759][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1624.353664][ C1] ? asan.module_dtor+0x20/0x20 [ 1624.358531][ C1] ? enqueue_timer+0x225/0x530 [ 1624.363317][ C1] ? __mod_timer+0x984/0xdb0 [ 1624.367944][ C1] schedule+0xbd/0x170 [ 1624.372022][ C1] schedule_timeout+0x160/0x280 [ 1624.376916][ C1] ? console_conditional_schedule+0x40/0x40 [ 1624.382824][ C1] ? update_process_times+0x1b0/0x1b0 [ 1624.388271][ C1] ? prepare_to_swait_event+0x339/0x360 [ 1624.393842][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 1624.398812][ C1] ? rcu_gp_init+0x110e/0x1510 [ 1624.403599][ C1] ? rcu_gp_kthread+0x380/0x380 [ 1624.408466][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1624.414470][ C1] ? rcu_gp_init+0x1510/0x1510 [ 1624.419343][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1624.424376][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1624.429584][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1624.434798][ C1] rcu_gp_kthread+0x99/0x380 [ 1624.439404][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1624.444525][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 1624.449474][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1624.454515][ C1] kthread+0x2fa/0x390 [ 1624.458589][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1624.463714][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1624.468308][ C1] ret_from_fork+0x48/0x80 [ 1624.472731][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1624.477323][ C1] ret_from_fork_asm+0x11/0x20 [ 1624.482111][ C1] [ 1624.485133][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1624.491464][ C1] CPU: 1 PID: 29422 Comm: syz.0.9650 Not tainted 6.6.101-syzkaller #0 [ 1624.499617][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1624.509673][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 1624.515843][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 a9 4e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 1624.535457][ C1] RSP: 0018:ffffc900001f0900 EFLAGS: 00000206 [ 1624.541534][ C1] RAX: ccf731450f64b800 RBX: 1ffff9200003e128 RCX: ccf731450f64b800 [ 1624.549509][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780 [ 1624.557499][ C1] RBP: ffffc900001f0a00 R08: ffffffff90da3537 R09: 1ffffffff21b46a6 [ 1624.565492][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a7 R12: 0000000000000000 [ 1624.573479][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8cd354d8 [ 1624.581462][ C1] FS: 0000555583f8b500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1624.590405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1624.596996][ C1] CR2: 0000001b33b1dff8 CR3: 000000001e375000 CR4: 00000000003506e0 [ 1624.604977][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1624.612955][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1624.620934][ C1] Call Trace: [ 1624.624218][ C1] [ 1624.627071][ C1] ? bpf_probe_write_user+0xe0/0xe0 [ 1624.632323][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1624.637302][ C1] ? lock_chain_count+0x20/0x20 [ 1624.642177][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1624.646975][ C1] bpf_trace_run1+0x256/0x3b0 [ 1624.651678][ C1] ? bpf_trace_run1+0xd6/0x3b0 [ 1624.656459][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 1624.661846][ C1] ? __bpf_trace_rcu_utilization+0x95/0xe0 [ 1624.667670][ C1] __bpf_trace_rcu_utilization+0xa2/0xe0 [ 1624.673313][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 1624.679388][ C1] ? rcu_leak_callback+0x10/0x10 [ 1624.684339][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1624.690333][ C1] trace_rcu_utilization+0x179/0x1a0 [ 1624.695715][ C1] rcu_core+0x1341/0x1720 [ 1624.700061][ C1] ? try_to_wake_up+0x2d2/0x10b0 [ 1624.705013][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1624.710050][ C1] ? __rwlock_init+0x150/0x150 [ 1624.714822][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1624.720116][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1624.725500][ C1] ? sched_clock+0x3f/0x60 [ 1624.729928][ C1] ? mark_lock+0x94/0x320 [ 1624.734272][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1624.740263][ C1] ? lock_chain_count+0x20/0x20 [ 1624.745112][ C1] ? try_to_wake_up+0x6f8/0x10b0 [ 1624.750071][ C1] handle_softirqs+0x280/0x820 [ 1624.754844][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1624.759650][ C1] ? do_softirq+0x180/0x180 [ 1624.764167][ C1] ? irq_work_single+0x199/0x230 [ 1624.769158][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1624.774385][ C1] __irq_exit_rcu+0xc7/0x190 [ 1624.778997][ C1] ? irq_exit_rcu+0x20/0x20 [ 1624.783527][ C1] ? rcu_is_watching+0x15/0xb0 [ 1624.788313][ C1] irq_exit_rcu+0x9/0x20 [ 1624.792570][ C1] sysvec_irq_work+0xa1/0xc0 [ 1624.797176][ C1] [ 1624.800122][ C1] [ 1624.803149][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 1624.808099][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 1624.814277][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 a9 4e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 1624.833897][ C1] RSP: 0018:ffffc9000c197c00 EFLAGS: 00000206 [ 1624.839980][ C1] RAX: ccf731450f64b800 RBX: 1ffff92001832f88 RCX: ccf731450f64b800 [ 1624.847956][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780 [ 1624.855934][ C1] RBP: ffffc9000c197cf0 R08: ffffffff90da3537 R09: 1ffffffff21b46a6 [ 1624.863910][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a7 R12: 0000000000000000 [ 1624.872320][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8cd354d8 [ 1624.880344][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 1624.885393][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1624.890362][ C1] ? __rwlock_init+0x150/0x150 [ 1624.895166][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1624.900579][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1624.905383][ C1] rcu_read_unlock+0x85/0xa0 [ 1624.909999][ C1] ? dput+0x3b/0x1e0 [ 1624.913918][ C1] dput+0xe6/0x1e0 [ 1624.917659][ C1] __fput+0x5e5/0x970 [ 1624.921673][ C1] task_work_run+0x1ce/0x250 [ 1624.926317][ C1] ? task_work_cancel+0x240/0x240 [ 1624.931462][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1624.936942][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 1624.942243][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 1624.947804][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1624.953275][ C1] do_syscall_64+0x61/0xb0 [ 1624.957708][ C1] ? clear_bhb_loop+0x40/0x90 [ 1624.962393][ C1] ? clear_bhb_loop+0x40/0x90 [ 1624.967074][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1624.972978][ C1] RIP: 0033:0x7fbef838ebe9 [ 1624.977399][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.997016][ C1] RSP: 002b:00007ffef91ef9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1625.005456][ C1] RAX: 0000000000000000 RBX: 00007fbef85b7da0 RCX: 00007fbef838ebe9 [ 1625.013440][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1625.021519][ C1] RBP: 00007fbef85b7da0 R08: 0000000000018b34 R09: 0000000ef91efccf [ 1625.029506][ C1] R10: 00000000005e1be8 R11: 0000000000000246 R12: 0000000000172a94 [ 1625.037490][ C1] R13: 00007ffef91efad0 R14: ffffffffffffffff R15: 00007ffef91efaf0 [ 1625.045678][ C1]