last executing test programs: 20m5.779698761s ago: executing program 2 (id=1997): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x80, r4, 0x0, 0x7}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) r7 = openat$cgroup(r6, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x42, 0x1, 0x6, 0x1, 0x0, 0x94a, 0x29404, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000002, 0x3, @perf_bp={&(0x7f0000000180), 0xc}, 0xae00, 0xfffffffffffffffe, 0xd, 0x6, 0x101, 0x7, 0x3, 0x0, 0x4, 0x0, 0x802}, r6, 0xb, r5, 0x3) write$cgroup_type(r8, &(0x7f00000000c0), 0x9) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r11}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r11, &(0x7f00000005c0)}, 0x20) 20m5.156227707s ago: executing program 2 (id=2000): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0xb5, 0x0, 0x0, 0x8000000000000001, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, @perf_config_ext={0x7, 0x2}, 0x114905, 0x4, 0x8, 0x1, 0x0, 0x0, 0x81, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNGETVNETLE(r0, 0x8955, &(0x7f0000000040)) 20m4.756254657s ago: executing program 2 (id=2002): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x1a02}) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) 20m3.956019337s ago: executing program 2 (id=2005): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x44, 0x8, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20m2.398285977s ago: executing program 2 (id=2009): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107383, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7af, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000028000b6394f90509a16dd8e50000cc57", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x40000240) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) 19m57.97672936s ago: executing program 2 (id=2013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x3, 0x1, 0x1638, 0xffffffffffffffff, 0xff7}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9101a04000a740100067402000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 19m42.914560596s ago: executing program 32 (id=2013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x3, 0x1, 0x1638, 0xffffffffffffffff, 0xff7}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9101a04000a740100067402000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 8.97408244s ago: executing program 4 (id=8074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x54, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x200, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 5.636941685s ago: executing program 4 (id=8095): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0), &(0x7f0000001900), 0x10000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.334235989s ago: executing program 4 (id=8111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 4.195046582s ago: executing program 1 (id=8113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="76ea09edffffff0465f7dacaeb4fa6", 0x0, 0x63ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.019900487s ago: executing program 1 (id=8115): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61129000000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000003d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 2.949681375s ago: executing program 1 (id=8118): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r6 = socket$kcm(0x2, 0x3, 0x2) close(r6) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 1.231419629s ago: executing program 0 (id=8120): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="80", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/147, 0x93}], 0x1}, 0x21) 1.231170639s ago: executing program 4 (id=8121): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 1.128604821s ago: executing program 1 (id=8123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb29e08f088a8", 0x0, 0x200008, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.018177105s ago: executing program 0 (id=8125): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.018028645s ago: executing program 4 (id=8126): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x13, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000088a87e227f3ad7", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 927.959877ms ago: executing program 4 (id=8127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x54, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x200, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 916.902707ms ago: executing program 0 (id=8128): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x224901, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x40, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0xb}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8000200, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x26}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x0, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0xf3, 0x0, 0xffffffbd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 683.303553ms ago: executing program 3 (id=8130): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) 613.871625ms ago: executing program 3 (id=8131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0, r0}, 0x18) 528.267257ms ago: executing program 0 (id=8132): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 454.069449ms ago: executing program 3 (id=8133): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 361.373601ms ago: executing program 3 (id=8134): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 337.154652ms ago: executing program 0 (id=8135): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 198.153416ms ago: executing program 3 (id=8136): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 139.541187ms ago: executing program 3 (id=8137): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 125.276237ms ago: executing program 1 (id=8138): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xc, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x27}, 0x94) 62.145449ms ago: executing program 0 (id=8139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x1) 0s ago: executing program 1 (id=8140): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x224901, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x40, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0xb}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8000200, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x26}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x0, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0xf3, 0x0, 0xffffffbd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 0000000000000004 R09: 0000000000000000 [ 1439.444785][T24441] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1439.452960][T24441] R13: 00007f1544c26038 R14: 00007f1544c25fa0 R15: 00007ffc351761d8 [ 1439.461083][T24441] [ 1439.509297][T24441] Mem-Info: [ 1439.513128][T24441] active_anon:14595 inactive_anon:0 isolated_anon:0 [ 1439.513128][T24441] active_file:18509 inactive_file:40472 isolated_file:0 [ 1439.513128][T24441] unevictable:768 dirty:167 writeback:0 [ 1439.513128][T24441] slab_reclaimable:11064 slab_unreclaimable:95197 [ 1439.513128][T24441] mapped:24136 shmem:1373 pagetables:658 [ 1439.513128][T24441] sec_pagetables:0 bounce:0 [ 1439.513128][T24441] kernel_misc_reclaimable:0 [ 1439.513128][T24441] free:1335512 free_pcp:8052 free_cma:0 [ 1439.739794][T24447] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1439.799483][T24441] Node 0 active_anon:58296kB inactive_anon:0kB active_file:74036kB inactive_file:161688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96532kB dirty:676kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9960kB pagetables:2492kB sec_pagetables:0kB all_unreclaimable? no [ 1439.914549][T24441] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1439.970546][T24441] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.012245][T24441] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1440.018211][T24441] Node 0 DMA32 free:1433720kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:58156kB inactive_anon:0kB active_file:74036kB inactive_file:160864kB unevictable:1536kB writepending:676kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:12252kB local_pcp:2192kB free_cma:0kB [ 1440.122424][T24441] lowmem_reserve[]: 0 0 0 0 0 [ 1440.127361][T24441] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.170636][T24453] __nla_validate_parse: 1 callbacks suppressed [ 1440.170677][T24453] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5855'. [ 1440.223395][T24441] lowmem_reserve[]: 0 0 0 0 0 [ 1440.233605][T24441] Node 1 Normal free:3892736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20612kB local_pcp:9624kB free_cma:0kB [ 1440.269346][T24441] lowmem_reserve[]: 0 0 0 0 0 [ 1440.277927][T24441] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1440.294980][T24441] Node 0 DMA32: 2138*4kB (UM) 2788*8kB (UME) 2157*16kB (UME) 1450*32kB (UM) 918*64kB (UME) 671*128kB (UME) 304*256kB (UME) 123*512kB (UME) 28*1024kB (UME) 10*2048kB (UME) 241*4096kB (UM) = 1433496kB [ 1440.386646][T24441] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1440.434708][T24441] Node 1 Normal: 106*4kB (UME) 57*8kB (UME) 39*16kB (UME) 61*32kB (UME) 32*64kB (UME) 5*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 948*4096kB (M) = 3892736kB [ 1440.491596][T24441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1440.539055][T24441] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1440.593498][T24441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1440.664393][T24441] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1440.679415][T24459] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5849'. [ 1440.702964][T24441] 60354 total pagecache pages [ 1440.707730][T24441] 0 pages in swap cache [ 1440.771691][T24441] Free swap = 124996kB [ 1440.828952][T24441] Total swap = 124996kB [ 1440.873945][T24441] 2097051 pages RAM [ 1440.880733][T24441] 0 pages HighMem/MovableOnly [ 1440.885483][T24441] 416955 pages reserved [ 1440.928720][T24441] 0 pages cma reserved [ 1441.274150][T24466] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5852'. [ 1441.301449][T24468] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5853'. [ 1441.511904][T24474] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5856'. [ 1441.758558][T24482] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5860'. [ 1441.819375][T24479] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5858'. [ 1442.162844][T12461] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 1443.358094][T24499] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5866'. [ 1443.423422][T24497] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5865'. [ 1443.747207][T24506] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5868'. [ 1446.498386][T24561] __nla_validate_parse: 5 callbacks suppressed [ 1446.498407][T24561] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5887'. [ 1446.843744][T24566] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5890'. [ 1447.140394][T24569] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5892'. [ 1447.158008][T24571] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5894'. [ 1448.343806][T24591] netlink: 'syz.4.5901': attribute type 4 has an invalid length. [ 1448.360689][T24591] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5901'. [ 1448.381850][T24591] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1448.420948][T24594] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5902'. [ 1448.679229][T24602] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5904'. [ 1450.684533][T24631] netlink: 'syz.0.5922': attribute type 4 has an invalid length. [ 1450.697793][T24631] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5922'. [ 1450.709524][T24630] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5915'. [ 1450.902555][T24633] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5917'. [ 1451.671473][T24646] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5920'. [ 1452.046453][T24651] netlink: 'syz.0.5924': attribute type 4 has an invalid length. [ 1452.063557][T24651] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5924'. [ 1452.317294][T24654] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5925'. [ 1452.826486][T24659] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5935'. [ 1452.902428][T24660] netlink: 'syz.1.5927': attribute type 4 has an invalid length. [ 1452.959204][T24660] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1453.191227][T24667] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5930'. [ 1453.805504][T24675] netlink: 'syz.0.5942': attribute type 4 has an invalid length. [ 1453.852043][T24675] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5942'. [ 1453.965842][T24677] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5933'. [ 1454.312005][T24684] netlink: 'syz.1.5946': attribute type 4 has an invalid length. [ 1454.329777][T24684] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1454.723924][T24689] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5939'. [ 1456.053934][T24708] warn_alloc: 4 callbacks suppressed [ 1456.053988][T24708] syz.4.5944: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1456.109205][T24708] CPU: 0 PID: 24708 Comm: syz.4.5944 Not tainted syzkaller #0 [ 1456.116774][T24708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1456.126988][T24708] Call Trace: [ 1456.130322][T24708] [ 1456.133310][T24708] dump_stack_lvl+0x18c/0x250 [ 1456.138063][T24708] ? show_regs_print_info+0x20/0x20 [ 1456.143334][T24708] ? load_image+0x420/0x420 [ 1456.147912][T24708] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1456.154391][T24708] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1456.160966][T24708] warn_alloc+0x246/0x340 [ 1456.165354][T24708] ? stack_trace_save+0xaa/0x100 [ 1456.170366][T24708] ? zone_watermark_ok_safe+0x230/0x230 [ 1456.175978][T24708] ? kasan_set_track+0x5f/0x70 [ 1456.180794][T24708] ? kasan_set_track+0x4e/0x70 [ 1456.185616][T24708] ? __kasan_kmalloc+0x8f/0xa0 [ 1456.190446][T24708] ? xsk_init_queue+0xad/0x100 [ 1456.195284][T24708] ? xsk_setsockopt+0x4c9/0x750 [ 1456.200195][T24708] ? do_sock_setsockopt+0x175/0x1a0 [ 1456.205454][T24708] ? __x64_sys_setsockopt+0x182/0x200 [ 1456.210893][T24708] __vmalloc_node_range+0x129/0x1320 [ 1456.216284][T24708] ? free_vm_area+0x50/0x50 [ 1456.220863][T24708] vmalloc_user+0x74/0x80 [ 1456.225256][T24708] ? xskq_create+0xbf/0x170 [ 1456.229849][T24708] xskq_create+0xbf/0x170 [ 1456.234274][T24708] xsk_init_queue+0xad/0x100 [ 1456.238965][T24708] xsk_setsockopt+0x4c9/0x750 [ 1456.243728][T24708] ? xsk_poll+0x670/0x670 [ 1456.248133][T24708] ? __fget_files+0x28/0x460 [ 1456.252810][T24708] ? aa_sock_opt_perm+0x74/0x100 [ 1456.257848][T24708] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1456.263636][T24708] ? security_socket_setsockopt+0x7e/0xa0 [ 1456.269430][T24708] ? xsk_poll+0x670/0x670 [ 1456.273841][T24708] do_sock_setsockopt+0x175/0x1a0 [ 1456.278934][T24708] ? __fdget+0x180/0x210 [ 1456.283273][T24708] __x64_sys_setsockopt+0x182/0x200 [ 1456.288532][T24708] do_syscall_64+0x55/0xb0 [ 1456.292989][T24708] ? clear_bhb_loop+0x40/0x90 [ 1456.297719][T24708] ? clear_bhb_loop+0x40/0x90 [ 1456.302427][T24708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.308369][T24708] RIP: 0033:0x7f154499e0d9 [ 1456.312866][T24708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.332939][T24708] RSP: 002b:00007f1542bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1456.341753][T24708] RAX: ffffffffffffffda RBX: 00007f1544c25fa0 RCX: 00007f154499e0d9 [ 1456.349781][T24708] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 1456.357877][T24708] RBP: 00007f1544a35024 R08: 0000000000000004 R09: 0000000000000000 [ 1456.365935][T24708] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1456.374013][T24708] R13: 00007f1544c26038 R14: 00007f1544c25fa0 R15: 00007ffc351761d8 [ 1456.382036][T24708] [ 1456.440531][T24708] Mem-Info: [ 1456.443963][T24708] active_anon:14557 inactive_anon:0 isolated_anon:0 [ 1456.443963][T24708] active_file:18509 inactive_file:40478 isolated_file:0 [ 1456.443963][T24708] unevictable:768 dirty:123 writeback:0 [ 1456.443963][T24708] slab_reclaimable:10976 slab_unreclaimable:94854 [ 1456.443963][T24708] mapped:24140 shmem:1373 pagetables:624 [ 1456.443963][T24708] sec_pagetables:0 bounce:0 [ 1456.443963][T24708] kernel_misc_reclaimable:0 [ 1456.443963][T24708] free:1334377 free_pcp:9060 free_cma:0 [ 1456.498044][T24708] Node 0 active_anon:58256kB inactive_anon:0kB active_file:74036kB inactive_file:161712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96596kB dirty:564kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10120kB pagetables:2556kB sec_pagetables:0kB all_unreclaimable? no [ 1456.566952][T24712] netlink: 'syz.3.5948': attribute type 4 has an invalid length. [ 1456.592925][T24708] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1456.836645][T24708] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1457.063664][T24708] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1457.109208][T24708] Node 0 DMA32 free:1429404kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:58416kB inactive_anon:0kB active_file:74036kB inactive_file:160888kB unevictable:1536kB writepending:564kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:14528kB local_pcp:5508kB free_cma:0kB [ 1457.186975][T24708] lowmem_reserve[]: 0 0 0 0 0 [ 1457.196094][T24708] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1457.241344][T24708] lowmem_reserve[]: 0 0 0 0 0 [ 1457.253705][T24708] Node 1 Normal free:3892736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20612kB local_pcp:10988kB free_cma:0kB [ 1457.307627][T24708] lowmem_reserve[]: 0 0 0 0 0 [ 1457.337006][T24708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1457.374037][T24708] Node 0 DMA32: 1507*4kB (UM) 2788*8kB (UME) 2157*16kB (UME) 1401*32kB (UM) 918*64kB (UME) 671*128kB (UME) 304*256kB (UME) 123*512kB (UME) 28*1024kB (UME) 10*2048kB (UME) 241*4096kB (UM) = 1429404kB [ 1457.464987][T24708] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1457.531972][T24708] Node 1 Normal: 106*4kB (UME) 57*8kB (UME) 39*16kB (UME) 61*32kB (UME) 32*64kB (UME) 5*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 948*4096kB (M) = 3892736kB [ 1457.632808][T24724] __nla_validate_parse: 1 callbacks suppressed [ 1457.632851][T24724] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5951'. [ 1457.659040][T24708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.692873][T24708] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1457.716495][T24708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.737033][T24708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1457.746964][T24708] 60360 total pagecache pages [ 1457.772805][T24708] 0 pages in swap cache [ 1457.777045][T24708] Free swap = 124996kB [ 1457.810920][T24708] Total swap = 124996kB [ 1457.815159][T24708] 2097051 pages RAM [ 1457.850703][T24726] netlink: 'syz.0.5952': attribute type 4 has an invalid length. [ 1457.879009][T24708] 0 pages HighMem/MovableOnly [ 1457.892209][T24708] 416955 pages reserved [ 1457.896441][T24708] 0 pages cma reserved [ 1457.901667][T24726] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5952'. [ 1458.093670][T24730] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5954'. [ 1458.353190][T24735] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5956'. [ 1458.767992][T24747] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5961'. [ 1460.535638][T24767] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5967'. [ 1460.591709][T24772] netlink: 'syz.1.5969': attribute type 4 has an invalid length. [ 1460.605890][T24772] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5969'. [ 1460.862453][T24778] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5971'. [ 1463.485545][T24805] netlink: 'syz.1.5981': attribute type 4 has an invalid length. [ 1463.503979][T24805] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5981'. [ 1463.548068][T24808] netlink: 'syz.3.5983': attribute type 4 has an invalid length. [ 1463.572348][T24808] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5983'. [ 1463.935749][T24818] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5988'. [ 1464.012038][T24816] netlink: 'syz.0.5987': attribute type 4 has an invalid length. [ 1464.039290][T24816] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5987'. [ 1464.278228][T24821] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5990'. [ 1465.900041][T24842] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5997'. [ 1466.032345][T24846] netlink: 'syz.4.5999': attribute type 4 has an invalid length. [ 1466.068218][T24846] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5999'. [ 1466.093298][T24846] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1466.125775][T24848] warn_alloc: 5 callbacks suppressed [ 1466.125841][T24848] syz.3.6000: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1466.178976][T24848] CPU: 1 PID: 24848 Comm: syz.3.6000 Not tainted syzkaller #0 [ 1466.186528][T24848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1466.196716][T24848] Call Trace: [ 1466.200213][T24848] [ 1466.203169][T24848] dump_stack_lvl+0x18c/0x250 [ 1466.207890][T24848] ? show_regs_print_info+0x20/0x20 [ 1466.213116][T24848] ? load_image+0x420/0x420 [ 1466.217661][T24848] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1466.224118][T24848] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1466.230878][T24848] warn_alloc+0x246/0x340 [ 1466.235241][T24848] ? stack_trace_save+0xaa/0x100 [ 1466.240231][T24848] ? zone_watermark_ok_safe+0x230/0x230 [ 1466.245816][T24848] ? kasan_set_track+0x5f/0x70 [ 1466.250624][T24848] ? kasan_set_track+0x4e/0x70 [ 1466.255589][T24848] ? __kasan_kmalloc+0x8f/0xa0 [ 1466.260554][T24848] ? xsk_init_queue+0xad/0x100 [ 1466.265454][T24848] ? xsk_setsockopt+0x4c9/0x750 [ 1466.270347][T24848] ? do_sock_setsockopt+0x175/0x1a0 [ 1466.275570][T24848] ? __x64_sys_setsockopt+0x182/0x200 [ 1466.281134][T24848] __vmalloc_node_range+0x129/0x1320 [ 1466.286528][T24848] ? free_vm_area+0x50/0x50 [ 1466.291084][T24848] vmalloc_user+0x74/0x80 [ 1466.295553][T24848] ? xskq_create+0xbf/0x170 [ 1466.300100][T24848] xskq_create+0xbf/0x170 [ 1466.304729][T24848] xsk_init_queue+0xad/0x100 [ 1466.309450][T24848] xsk_setsockopt+0x4c9/0x750 [ 1466.314167][T24848] ? xsk_poll+0x670/0x670 [ 1466.318534][T24848] ? __fget_files+0x28/0x460 [ 1466.323159][T24848] ? aa_sock_opt_perm+0x74/0x100 [ 1466.328157][T24848] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1466.333735][T24848] ? security_socket_setsockopt+0x7e/0xa0 [ 1466.339575][T24848] ? xsk_poll+0x670/0x670 [ 1466.343975][T24848] do_sock_setsockopt+0x175/0x1a0 [ 1466.349037][T24848] ? __fdget+0x180/0x210 [ 1466.353325][T24848] __x64_sys_setsockopt+0x182/0x200 [ 1466.358569][T24848] do_syscall_64+0x55/0xb0 [ 1466.363013][T24848] ? clear_bhb_loop+0x40/0x90 [ 1466.367719][T24848] ? clear_bhb_loop+0x40/0x90 [ 1466.372433][T24848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1466.378361][T24848] RIP: 0033:0x7f2a8959e0d9 [ 1466.382800][T24848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1466.402436][T24848] RSP: 002b:00007f2a8a48a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1466.410897][T24848] RAX: ffffffffffffffda RBX: 00007f2a89825fa0 RCX: 00007f2a8959e0d9 [ 1466.418936][T24848] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 1466.426951][T24848] RBP: 00007f2a89635024 R08: 0000000000000004 R09: 0000000000000000 [ 1466.434957][T24848] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1466.442988][T24848] R13: 00007f2a89826038 R14: 00007f2a89825fa0 R15: 00007ffdc649d418 [ 1466.451013][T24848] [ 1466.463814][T24848] Mem-Info: [ 1466.478691][T24848] active_anon:14594 inactive_anon:0 isolated_anon:0 [ 1466.478691][T24848] active_file:18509 inactive_file:40482 isolated_file:0 [ 1466.478691][T24848] unevictable:768 dirty:163 writeback:0 [ 1466.478691][T24848] slab_reclaimable:10934 slab_unreclaimable:95225 [ 1466.478691][T24848] mapped:24164 shmem:1373 pagetables:672 [ 1466.478691][T24848] sec_pagetables:0 bounce:0 [ 1466.478691][T24848] kernel_misc_reclaimable:0 [ 1466.478691][T24848] free:1333985 free_pcp:10666 free_cma:0 [ 1466.588169][T24851] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6001'. [ 1466.637037][T24848] Node 0 active_anon:58176kB inactive_anon:0kB active_file:74036kB inactive_file:161728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96656kB dirty:652kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10016kB pagetables:2388kB sec_pagetables:0kB all_unreclaimable? no [ 1466.765380][T24848] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1466.828400][T24848] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1466.956293][T24861] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6004'. [ 1466.967924][T24848] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1467.008373][T24848] Node 0 DMA32 free:1427836kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:58436kB inactive_anon:0kB active_file:74036kB inactive_file:160904kB unevictable:1536kB writepending:652kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:21828kB local_pcp:14532kB free_cma:0kB [ 1467.099021][T24848] lowmem_reserve[]: 0 0 0 0 0 [ 1467.104964][T24848] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1467.142925][T24848] lowmem_reserve[]: 0 0 0 0 0 [ 1467.229536][T24848] Node 1 Normal free:3892736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20612kB local_pcp:9624kB free_cma:0kB [ 1467.309299][T24848] lowmem_reserve[]: 0 0 0 0 0 [ 1467.314163][T24848] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1467.348036][T24848] Node 0 DMA32: 1507*4kB (UM) 2788*8kB (UME) 2157*16kB (UME) 1352*32kB (UM) 918*64kB (UME) 671*128kB (UME) 304*256kB (UME) 123*512kB (UME) 28*1024kB (UME) 10*2048kB (UME) 241*4096kB (UM) = 1427836kB [ 1467.468606][T24848] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1467.579672][T24848] Node 1 Normal: 106*4kB (UME) 57*8kB (UME) 39*16kB (UME) 61*32kB (UME) 32*64kB (UME) 5*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 948*4096kB (M) = 3892736kB [ 1467.652805][T24848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1467.759958][T24848] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1467.793152][T24848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1467.809552][T24848] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1467.821194][T24848] 60364 total pagecache pages [ 1467.826127][T24848] 0 pages in swap cache [ 1467.831055][T24848] Free swap = 124996kB [ 1467.835440][T24848] Total swap = 124996kB [ 1467.840139][T24848] 2097051 pages RAM [ 1467.844179][T24848] 0 pages HighMem/MovableOnly [ 1467.852024][T24848] 416955 pages reserved [ 1467.856820][T24848] 0 pages cma reserved [ 1468.121187][T24875] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6009'. [ 1468.394008][T24877] netlink: 'syz.1.6010': attribute type 4 has an invalid length. [ 1468.524959][T24879] netlink: 'syz.3.6011': attribute type 4 has an invalid length. [ 1468.537418][T24879] __nla_validate_parse: 1 callbacks suppressed [ 1468.537455][T24879] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6011'. [ 1468.701732][T24885] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6014'. [ 1470.949243][T24918] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6025'. [ 1471.187252][T24921] netlink: 'syz.3.6027': attribute type 4 has an invalid length. [ 1471.204711][T24921] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1471.365082][T24927] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6030'. [ 1472.624675][T24941] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6035'. [ 1473.019710][T24946] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6037'. [ 1475.270891][T24980] netlink: 'syz.3.6049': attribute type 4 has an invalid length. [ 1475.313252][T24980] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6049'. [ 1475.333904][T24983] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6050'. [ 1477.207274][T25015] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6061'. [ 1477.305491][T25014] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6062'. [ 1477.465993][T25017] netlink: 'syz.4.6063': attribute type 4 has an invalid length. [ 1477.477706][T25017] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6063'. [ 1477.490778][T25017] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1478.106789][T25032] netlink: 'syz.4.6068': attribute type 4 has an invalid length. [ 1478.115211][T25032] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6068'. [ 1478.124892][T25032] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1478.149623][T25038] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6069'. [ 1478.392874][T25046] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6073'. [ 1480.077000][T25068] netlink: 'syz.0.6080': attribute type 4 has an invalid length. [ 1480.128133][T25068] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6080'. [ 1480.492288][T25081] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6083'. [ 1480.670729][T25087] warn_alloc: 4 callbacks suppressed [ 1480.670765][T25087] syz.3.6086: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1480.713208][T25087] CPU: 0 PID: 25087 Comm: syz.3.6086 Not tainted syzkaller #0 [ 1480.720758][T25087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1480.730866][T25087] Call Trace: [ 1480.734200][T25087] [ 1480.737387][T25087] dump_stack_lvl+0x18c/0x250 [ 1480.742316][T25087] ? show_regs_print_info+0x20/0x20 [ 1480.747750][T25087] ? load_image+0x420/0x420 [ 1480.752337][T25087] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1480.758817][T25087] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1480.765384][T25087] warn_alloc+0x246/0x340 [ 1480.769805][T25087] ? stack_trace_save+0xaa/0x100 [ 1480.774805][T25087] ? zone_watermark_ok_safe+0x230/0x230 [ 1480.780425][T25087] ? kasan_set_track+0x5f/0x70 [ 1480.785246][T25087] ? kasan_set_track+0x4e/0x70 [ 1480.790071][T25087] ? __kasan_kmalloc+0x8f/0xa0 [ 1480.794892][T25087] ? xsk_init_queue+0xad/0x100 [ 1480.799722][T25087] ? xsk_setsockopt+0x4c9/0x750 [ 1480.804632][T25087] ? do_sock_setsockopt+0x175/0x1a0 [ 1480.809887][T25087] ? __x64_sys_setsockopt+0x182/0x200 [ 1480.815325][T25087] __vmalloc_node_range+0x129/0x1320 [ 1480.820704][T25087] ? free_vm_area+0x50/0x50 [ 1480.825285][T25087] vmalloc_user+0x74/0x80 [ 1480.829680][T25087] ? xskq_create+0xbf/0x170 [ 1480.834248][T25087] xskq_create+0xbf/0x170 [ 1480.838646][T25087] xsk_init_queue+0xad/0x100 [ 1480.843307][T25087] xsk_setsockopt+0x4c9/0x750 [ 1480.848086][T25087] ? xsk_poll+0x670/0x670 [ 1480.852485][T25087] ? __fget_files+0x28/0x460 [ 1480.857132][T25087] ? aa_sock_opt_perm+0x74/0x100 [ 1480.862138][T25087] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1480.867742][T25087] ? security_socket_setsockopt+0x7e/0xa0 [ 1480.873509][T25087] ? xsk_poll+0x670/0x670 [ 1480.877901][T25087] do_sock_setsockopt+0x175/0x1a0 [ 1480.882978][T25087] ? __fdget+0x180/0x210 [ 1480.887296][T25087] __x64_sys_setsockopt+0x182/0x200 [ 1480.892552][T25087] do_syscall_64+0x55/0xb0 [ 1480.897017][T25087] ? clear_bhb_loop+0x40/0x90 [ 1480.901754][T25087] ? clear_bhb_loop+0x40/0x90 [ 1480.906489][T25087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1480.912432][T25087] RIP: 0033:0x7f2a8959e0d9 [ 1480.916902][T25087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.936573][T25087] RSP: 002b:00007f2a8a48a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1480.945060][T25087] RAX: ffffffffffffffda RBX: 00007f2a89825fa0 RCX: 00007f2a8959e0d9 [ 1480.953090][T25087] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1480.961119][T25087] RBP: 00007f2a89635024 R08: 0000000000000004 R09: 0000000000000000 [ 1480.969151][T25087] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1480.977182][T25087] R13: 00007f2a89826038 R14: 00007f2a89825fa0 R15: 00007ffdc649d418 [ 1480.985233][T25087] [ 1481.013383][T25091] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6088'. [ 1481.034722][T25087] Mem-Info: [ 1481.056256][T25087] active_anon:14570 inactive_anon:0 isolated_anon:0 [ 1481.056256][T25087] active_file:18509 inactive_file:40488 isolated_file:0 [ 1481.056256][T25087] unevictable:768 dirty:93 writeback:4 [ 1481.056256][T25087] slab_reclaimable:10913 slab_unreclaimable:95190 [ 1481.056256][T25087] mapped:25172 shmem:1373 pagetables:644 [ 1481.056256][T25087] sec_pagetables:0 bounce:0 [ 1481.056256][T25087] kernel_misc_reclaimable:0 [ 1481.056256][T25087] free:1333859 free_pcp:10461 free_cma:0 [ 1481.266597][T25087] Node 0 active_anon:58468kB inactive_anon:0kB active_file:74036kB inactive_file:161752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100700kB dirty:376kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10196kB pagetables:2656kB sec_pagetables:0kB all_unreclaimable? no [ 1481.576152][T25087] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1481.716768][T25087] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.825053][T25101] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6090'. [ 1481.863946][T25087] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1481.942559][T25087] Node 0 DMA32 free:1427332kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:58328kB inactive_anon:0kB active_file:74036kB inactive_file:160928kB unevictable:1536kB writepending:400kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:22132kB local_pcp:11396kB free_cma:0kB [ 1482.156380][T25087] lowmem_reserve[]: 0 0 0 0 0 [ 1482.163283][T25103] netlink: 'syz.4.6091': attribute type 4 has an invalid length. [ 1482.183584][T25087] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.212681][T25103] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6091'. [ 1482.236690][T25103] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1482.262879][T25087] lowmem_reserve[]: 0 0 0 0 0 [ 1482.268154][T25087] Node 1 Normal free:3892736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20612kB local_pcp:10988kB free_cma:0kB [ 1482.299069][T25087] lowmem_reserve[]: 0 0 0 0 0 [ 1482.303978][T25087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1482.368968][T25087] Node 0 DMA32: 1381*4kB (UM) 2788*8kB (UME) 2157*16kB (UME) 1352*32kB (UM) 918*64kB (UME) 671*128kB (UME) 304*256kB (UME) 123*512kB (UME) 28*1024kB (UME) 10*2048kB (UME) 241*4096kB (UM) = 1427332kB [ 1482.430166][T25087] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1482.478920][T25087] Node 1 Normal: 106*4kB (UME) 57*8kB (UME) 39*16kB (UME) 61*32kB (UME) 32*64kB (UME) 5*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 948*4096kB (M) = 3892736kB [ 1482.531098][T25087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.551658][T25087] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1482.574746][T25087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.598986][T25087] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1482.608363][T25087] 60370 total pagecache pages [ 1482.628113][T25087] 0 pages in swap cache [ 1482.635179][T25087] Free swap = 124996kB [ 1482.644588][T25087] Total swap = 124996kB [ 1482.648818][T25087] 2097051 pages RAM [ 1482.720586][T25087] 0 pages HighMem/MovableOnly [ 1482.760657][T25087] 416955 pages reserved [ 1482.798258][T25087] 0 pages cma reserved [ 1483.996388][T25130] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6100'. [ 1484.873347][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.883984][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.291665][T25159] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6111'. [ 1487.297432][T25173] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6116'. [ 1488.183835][T25181] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6120'. [ 1489.997128][T25200] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6125'. [ 1490.668209][T25212] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6129'. [ 1491.680455][T25221] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6131'. [ 1492.204181][T25225] warn_alloc: 5 callbacks suppressed [ 1492.204222][T25225] syz.4.6133: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1492.257316][T25225] CPU: 1 PID: 25225 Comm: syz.4.6133 Not tainted syzkaller #0 [ 1492.264869][T25225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1492.275080][T25225] Call Trace: [ 1492.278409][T25225] [ 1492.281392][T25225] dump_stack_lvl+0x18c/0x250 [ 1492.286139][T25225] ? show_regs_print_info+0x20/0x20 [ 1492.291406][T25225] ? load_image+0x420/0x420 [ 1492.295980][T25225] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1492.302466][T25225] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1492.309041][T25225] warn_alloc+0x246/0x340 [ 1492.313426][T25225] ? stack_trace_save+0xaa/0x100 [ 1492.318426][T25225] ? zone_watermark_ok_safe+0x230/0x230 [ 1492.324129][T25225] ? kasan_set_track+0x5f/0x70 [ 1492.328962][T25225] ? kasan_set_track+0x4e/0x70 [ 1492.333787][T25225] ? __kasan_kmalloc+0x8f/0xa0 [ 1492.338626][T25225] ? xsk_init_queue+0xad/0x100 [ 1492.343456][T25225] ? xsk_setsockopt+0x4c9/0x750 [ 1492.348402][T25225] ? do_sock_setsockopt+0x175/0x1a0 [ 1492.353661][T25225] ? __x64_sys_setsockopt+0x182/0x200 [ 1492.359089][T25225] __vmalloc_node_range+0x129/0x1320 [ 1492.364467][T25225] ? free_vm_area+0x50/0x50 [ 1492.369048][T25225] vmalloc_user+0x74/0x80 [ 1492.373449][T25225] ? xskq_create+0xbf/0x170 [ 1492.378013][T25225] xskq_create+0xbf/0x170 [ 1492.382419][T25225] xsk_init_queue+0xad/0x100 [ 1492.387091][T25225] xsk_setsockopt+0x4c9/0x750 [ 1492.391843][T25225] ? xsk_poll+0x670/0x670 [ 1492.396250][T25225] ? __fget_files+0x28/0x460 [ 1492.400906][T25225] ? aa_sock_opt_perm+0x74/0x100 [ 1492.405899][T25225] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1492.411512][T25225] ? security_socket_setsockopt+0x7e/0xa0 [ 1492.417288][T25225] ? xsk_poll+0x670/0x670 [ 1492.421767][T25225] do_sock_setsockopt+0x175/0x1a0 [ 1492.426841][T25225] ? __fdget+0x180/0x210 [ 1492.431131][T25225] __x64_sys_setsockopt+0x182/0x200 [ 1492.436399][T25225] do_syscall_64+0x55/0xb0 [ 1492.440848][T25225] ? clear_bhb_loop+0x40/0x90 [ 1492.445581][T25225] ? clear_bhb_loop+0x40/0x90 [ 1492.450334][T25225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1492.456256][T25225] RIP: 0033:0x7f154499e0d9 [ 1492.460704][T25225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.480602][T25225] RSP: 002b:00007f1542bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1492.489066][T25225] RAX: ffffffffffffffda RBX: 00007f1544c25fa0 RCX: 00007f154499e0d9 [ 1492.497147][T25225] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 1492.505233][T25225] RBP: 00007f1544a35024 R08: 0000000000000004 R09: 0000000000000000 [ 1492.513262][T25225] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1492.521520][T25225] R13: 00007f1544c26038 R14: 00007f1544c25fa0 R15: 00007ffc351761d8 [ 1492.529626][T25225] [ 1492.615112][T25225] Mem-Info: [ 1492.618591][T25225] active_anon:14586 inactive_anon:0 isolated_anon:0 [ 1492.618591][T25225] active_file:18509 inactive_file:40492 isolated_file:0 [ 1492.618591][T25225] unevictable:768 dirty:82 writeback:0 [ 1492.618591][T25225] slab_reclaimable:10894 slab_unreclaimable:95484 [ 1492.618591][T25225] mapped:24134 shmem:1373 pagetables:656 [ 1492.618591][T25225] sec_pagetables:0 bounce:0 [ 1492.618591][T25225] kernel_misc_reclaimable:0 [ 1492.618591][T25225] free:1333736 free_pcp:9964 free_cma:0 [ 1492.695372][T25225] Node 0 active_anon:58444kB inactive_anon:0kB active_file:74036kB inactive_file:161768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96536kB dirty:328kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10084kB pagetables:2624kB sec_pagetables:0kB all_unreclaimable? no [ 1492.912513][T25225] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1493.109339][T25225] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1493.247552][T25225] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1493.298941][T25225] Node 0 DMA32 free:1426840kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:58360kB inactive_anon:0kB active_file:74036kB inactive_file:160944kB unevictable:1536kB writepending:404kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:20164kB local_pcp:6292kB free_cma:0kB [ 1493.329613][T25225] lowmem_reserve[]: 0 0 0 0 0 [ 1493.334403][T25225] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1493.361377][T25225] lowmem_reserve[]: 0 0 0 0 0 [ 1493.366163][T25225] Node 1 Normal free:3892736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20612kB local_pcp:9624kB free_cma:0kB [ 1493.496495][T25225] lowmem_reserve[]: 0 0 0 0 0 [ 1493.521572][T25225] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1493.589270][T25225] Node 0 DMA32: 1318*4kB (UM) 2788*8kB (UME) 2142*16kB (UME) 1352*32kB (UM) 918*64kB (UME) 671*128kB (UME) 304*256kB (UME) 123*512kB (UME) 28*1024kB (UME) 10*2048kB (UME) 241*4096kB (UM) = 1426840kB [ 1493.676363][T25225] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1493.722366][T25225] Node 1 Normal: 106*4kB (UME) 57*8kB (UME) 39*16kB (UME) 61*32kB (UME) 32*64kB (UME) 5*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 948*4096kB (M) = 3892736kB [ 1493.832288][T25225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1493.876517][T25225] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1493.948985][T25225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1494.042546][T25225] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1494.133990][T25225] 60376 total pagecache pages [ 1494.164132][T25225] 0 pages in swap cache [ 1494.168376][T25225] Free swap = 124996kB [ 1494.202657][T25225] Total swap = 124996kB [ 1494.206936][T25225] 2097051 pages RAM [ 1494.218946][T25225] 0 pages HighMem/MovableOnly [ 1494.228537][T25225] 416955 pages reserved [ 1494.240921][T25225] 0 pages cma reserved [ 1494.703819][T12461] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 1494.856442][T25262] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6149'. [ 1496.392966][T25278] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1503.052255][T25398] warn_alloc: 9 callbacks suppressed [ 1503.052292][T25398] syz.3.6200: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1503.108347][T25398] CPU: 1 PID: 25398 Comm: syz.3.6200 Not tainted syzkaller #0 [ 1503.115899][T25398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1503.126015][T25398] Call Trace: [ 1503.129348][T25398] [ 1503.132412][T25398] dump_stack_lvl+0x18c/0x250 [ 1503.137158][T25398] ? show_regs_print_info+0x20/0x20 [ 1503.142419][T25398] ? load_image+0x420/0x420 [ 1503.147085][T25398] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1503.153582][T25398] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1503.160157][T25398] warn_alloc+0x246/0x340 [ 1503.164550][T25398] ? stack_trace_save+0xaa/0x100 [ 1503.169560][T25398] ? zone_watermark_ok_safe+0x230/0x230 [ 1503.175178][T25398] ? kasan_set_track+0x5f/0x70 [ 1503.180012][T25398] ? kasan_set_track+0x4e/0x70 [ 1503.184841][T25398] ? __kasan_kmalloc+0x8f/0xa0 [ 1503.189676][T25398] ? xsk_init_queue+0xad/0x100 [ 1503.194505][T25398] ? xsk_setsockopt+0x4c9/0x750 [ 1503.199421][T25398] ? do_sock_setsockopt+0x175/0x1a0 [ 1503.204681][T25398] ? __x64_sys_setsockopt+0x182/0x200 [ 1503.210126][T25398] __vmalloc_node_range+0x129/0x1320 [ 1503.215519][T25398] ? free_vm_area+0x50/0x50 [ 1503.220116][T25398] vmalloc_user+0x74/0x80 [ 1503.224524][T25398] ? xskq_create+0xbf/0x170 [ 1503.229103][T25398] xskq_create+0xbf/0x170 [ 1503.233515][T25398] xsk_init_queue+0xad/0x100 [ 1503.238184][T25398] xsk_setsockopt+0x4c9/0x750 [ 1503.242940][T25398] ? xsk_poll+0x670/0x670 [ 1503.247349][T25398] ? __fget_files+0x28/0x460 [ 1503.252015][T25398] ? aa_sock_opt_perm+0x74/0x100 [ 1503.257036][T25398] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1503.262659][T25398] ? security_socket_setsockopt+0x7e/0xa0 [ 1503.268441][T25398] ? xsk_poll+0x670/0x670 [ 1503.272860][T25398] do_sock_setsockopt+0x175/0x1a0 [ 1503.277950][T25398] ? __fdget+0x180/0x210 [ 1503.282284][T25398] __x64_sys_setsockopt+0x182/0x200 [ 1503.287550][T25398] do_syscall_64+0x55/0xb0 [ 1503.292030][T25398] ? clear_bhb_loop+0x40/0x90 [ 1503.296769][T25398] ? clear_bhb_loop+0x40/0x90 [ 1503.301594][T25398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1503.307561][T25398] RIP: 0033:0x7f2a8959e0d9 [ 1503.312032][T25398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.331697][T25398] RSP: 002b:00007f2a8a48a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1503.340178][T25398] RAX: ffffffffffffffda RBX: 00007f2a89825fa0 RCX: 00007f2a8959e0d9 [ 1503.348219][T25398] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 1503.356342][T25398] RBP: 00007f2a89635024 R08: 0000000000000004 R09: 0000000000000000 [ 1503.364457][T25398] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1503.372514][T25398] R13: 00007f2a89826038 R14: 00007f2a89825fa0 R15: 00007ffdc649d418 [ 1503.380589][T25398] [ 1503.441453][T25398] Mem-Info: [ 1503.444926][T25398] active_anon:14556 inactive_anon:0 isolated_anon:0 [ 1503.444926][T25398] active_file:18509 inactive_file:40496 isolated_file:0 [ 1503.444926][T25398] unevictable:768 dirty:141 writeback:0 [ 1503.444926][T25398] slab_reclaimable:10883 slab_unreclaimable:95145 [ 1503.444926][T25398] mapped:24140 shmem:1373 pagetables:624 [ 1503.444926][T25398] sec_pagetables:0 bounce:0 [ 1503.444926][T25398] kernel_misc_reclaimable:0 [ 1503.444926][T25398] free:1333505 free_pcp:10455 free_cma:0 [ 1503.500331][T25398] Node 0 active_anon:58224kB inactive_anon:0kB active_file:74036kB inactive_file:161784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96560kB dirty:564kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10028kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no [ 1503.549676][T25398] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1503.662867][T25398] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1503.702613][T25398] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1503.716429][T25398] Node 0 DMA32 free:1425916kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:58184kB inactive_anon:0kB active_file:74036kB inactive_file:160960kB unevictable:1536kB writepending:564kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:22108kB local_pcp:13888kB free_cma:0kB [ 1503.774649][T25406] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6204'. [ 1503.788373][T25398] lowmem_reserve[]: 0 0 0 0 0 [ 1503.860526][T25398] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1503.941462][T25398] lowmem_reserve[]: 0 0 0 0 0 [ 1503.985821][T25398] Node 1 Normal free:3892736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20612kB local_pcp:10988kB free_cma:0kB [ 1504.025533][T25398] lowmem_reserve[]: 0 0 0 0 0 [ 1504.030574][T25398] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1504.093067][T25398] Node 0 DMA32: 1255*4kB (UM) 2788*8kB (UME) 2142*16kB (UME) 1331*32kB (UM) 918*64kB (UME) 671*128kB (UME) 304*256kB (UME) 123*512kB (UME) 28*1024kB (UME) 10*2048kB (UME) 241*4096kB (UM) = 1425916kB [ 1504.139562][T25398] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1504.179607][T25398] Node 1 Normal: 106*4kB (UME) 57*8kB (UME) 39*16kB (UME) 61*32kB (UME) 32*64kB (UME) 5*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 948*4096kB (M) = 3892736kB [ 1504.202436][T25398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1504.212816][T25398] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1504.225860][T25398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1504.235713][T25398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1504.257853][T25398] 60380 total pagecache pages [ 1504.267593][T25398] 0 pages in swap cache [ 1504.278299][T25398] Free swap = 124996kB [ 1504.284915][T25398] Total swap = 124996kB [ 1504.290408][T25398] 2097051 pages RAM [ 1504.297757][T25398] 0 pages HighMem/MovableOnly [ 1504.305087][T25398] 416955 pages reserved [ 1504.309862][T25398] 0 pages cma reserved [ 1504.846475][T25433] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6215'. [ 1506.705515][T25474] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6233'. [ 1507.854787][T25501] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6244'. [ 1508.885101][T25530] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6258'. [ 1511.634389][T25598] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6288'. [ 1513.138003][T25627] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6299'. [ 1514.428210][T25653] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6308'. [ 1514.767905][T25660] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6311'. [ 1516.188276][T25680] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6319'. [ 1516.672380][T25690] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6323'. [ 1518.371731][T25708] warn_alloc: 4 callbacks suppressed [ 1518.371774][T25708] syz.3.6328: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1518.395991][T25708] CPU: 0 PID: 25708 Comm: syz.3.6328 Not tainted syzkaller #0 [ 1518.403572][T25708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1518.413664][T25708] Call Trace: [ 1518.416986][T25708] [ 1518.419944][T25708] dump_stack_lvl+0x18c/0x250 [ 1518.424684][T25708] ? show_regs_print_info+0x20/0x20 [ 1518.429915][T25708] ? load_image+0x420/0x420 [ 1518.434476][T25708] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1518.440940][T25708] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1518.447527][T25708] warn_alloc+0x246/0x340 [ 1518.451891][T25708] ? stack_trace_save+0xaa/0x100 [ 1518.456886][T25708] ? zone_watermark_ok_safe+0x230/0x230 [ 1518.462674][T25708] ? kasan_set_track+0x5f/0x70 [ 1518.467496][T25708] ? kasan_set_track+0x4e/0x70 [ 1518.472295][T25708] ? __kasan_kmalloc+0x8f/0xa0 [ 1518.477103][T25708] ? xsk_init_queue+0xad/0x100 [ 1518.481923][T25708] ? xsk_setsockopt+0x4c9/0x750 [ 1518.486842][T25708] ? do_sock_setsockopt+0x175/0x1a0 [ 1518.492112][T25708] ? __x64_sys_setsockopt+0x182/0x200 [ 1518.497718][T25708] __vmalloc_node_range+0x129/0x1320 [ 1518.503083][T25708] ? free_vm_area+0x50/0x50 [ 1518.507659][T25708] vmalloc_user+0x74/0x80 [ 1518.512036][T25708] ? xskq_create+0xbf/0x170 [ 1518.516588][T25708] xskq_create+0xbf/0x170 [ 1518.521054][T25708] xsk_init_queue+0xad/0x100 [ 1518.525697][T25708] xsk_setsockopt+0x4c9/0x750 [ 1518.530416][T25708] ? xsk_poll+0x670/0x670 [ 1518.534787][T25708] ? aa_sock_opt_perm+0x74/0x100 [ 1518.539789][T25708] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1518.545379][T25708] ? security_socket_setsockopt+0x7e/0xa0 [ 1518.551136][T25708] ? xsk_poll+0x670/0x670 [ 1518.555514][T25708] do_sock_setsockopt+0x175/0x1a0 [ 1518.560575][T25708] ? __fdget+0x180/0x210 [ 1518.564875][T25708] __x64_sys_setsockopt+0x182/0x200 [ 1518.570137][T25708] do_syscall_64+0x55/0xb0 [ 1518.574900][T25708] ? clear_bhb_loop+0x40/0x90 [ 1518.579642][T25708] ? clear_bhb_loop+0x40/0x90 [ 1518.584392][T25708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1518.590340][T25708] RIP: 0033:0x7f2a8959e0d9 [ 1518.594796][T25708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.614450][T25708] RSP: 002b:00007f2a8a48a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1518.622913][T25708] RAX: ffffffffffffffda RBX: 00007f2a89825fa0 RCX: 00007f2a8959e0d9 [ 1518.630924][T25708] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 1518.638954][T25708] RBP: 00007f2a89635024 R08: 0000000000000004 R09: 0000000000000000 [ 1518.646960][T25708] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1518.654965][T25708] R13: 00007f2a89826038 R14: 00007f2a89825fa0 R15: 00007ffdc649d418 [ 1518.663010][T25708] [ 1518.708774][T25708] Mem-Info: [ 1518.712417][T25708] active_anon:14557 inactive_anon:0 isolated_anon:0 [ 1518.712417][T25708] active_file:18509 inactive_file:40502 isolated_file:0 [ 1518.712417][T25708] unevictable:768 dirty:177 writeback:0 [ 1518.712417][T25708] slab_reclaimable:11138 slab_unreclaimable:94756 [ 1518.712417][T25708] mapped:24123 shmem:1373 pagetables:642 [ 1518.712417][T25708] sec_pagetables:0 bounce:0 [ 1518.712417][T25708] kernel_misc_reclaimable:0 [ 1518.712417][T25708] free:1332561 free_pcp:10845 free_cma:0 [ 1518.777757][T25708] Node 0 active_anon:58328kB inactive_anon:0kB active_file:74036kB inactive_file:161808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96492kB dirty:708kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10164kB pagetables:2568kB sec_pagetables:0kB all_unreclaimable? no [ 1518.859378][T25708] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1518.939210][T25708] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1518.986676][T25708] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1518.996967][T25708] Node 0 DMA32 free:1422140kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:58288kB inactive_anon:0kB active_file:74036kB inactive_file:160984kB unevictable:1536kB writepending:708kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:23204kB local_pcp:19804kB free_cma:0kB [ 1519.049131][T25708] lowmem_reserve[]: 0 0 0 0 0 [ 1519.059718][T25708] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1519.169611][T25708] lowmem_reserve[]: 0 0 0 0 0 [ 1519.175118][T25708] Node 1 Normal free:3892736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20612kB local_pcp:10988kB free_cma:0kB [ 1519.320463][T25708] lowmem_reserve[]: 0 0 0 0 0 [ 1519.325319][T25708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1519.344555][T25721] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6335'. [ 1519.384133][T25708] Node 0 DMA32: 941*4kB (UME) 2757*8kB (UME) 2126*16kB (UME) 1268*32kB (UM) 918*64kB (UME) 671*128kB (UME) 304*256kB (UME) 123*512kB (UME) 28*1024kB (UME) 10*2048kB (UME) 241*4096kB (UM) = 1422140kB [ 1519.441280][T25708] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1519.492176][T25708] Node 1 Normal: 106*4kB (UME) 57*8kB (UME) 39*16kB (UME) 61*32kB (UME) 32*64kB (UME) 5*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (UE) 0*2048kB 948*4096kB (M) = 3892736kB [ 1519.570461][T25725] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6336'. [ 1519.580578][T25708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1519.590900][T25708] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1519.618910][T25708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1519.648704][T25708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1519.681874][T25708] 60386 total pagecache pages [ 1519.703416][T25708] 0 pages in swap cache [ 1519.717623][T25708] Free swap = 124996kB [ 1519.757774][T25708] Total swap = 124996kB [ 1519.775912][T25728] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6337'. [ 1519.785880][T25708] 2097051 pages RAM [ 1519.793562][T25708] 0 pages HighMem/MovableOnly [ 1519.798305][T25708] 416955 pages reserved [ 1519.808705][T25708] 0 pages cma reserved [ 1520.651922][T25749] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6345'. [ 1520.897799][T25754] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6347'. [ 1520.925495][T25756] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6349'. [ 1521.424655][T25768] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6353'. [ 1522.386463][T25785] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6359'. [ 1523.198538][T25796] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6367'. [ 1523.832276][T25810] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6371'. [ 1524.841567][T25835] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6379'. [ 1525.743674][T25848] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6385'. [ 1526.356799][T25867] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6393'. [ 1526.515004][T25869] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6394'. [ 1527.148116][T25879] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6398'. [ 1527.875795][T25899] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6404'. [ 1528.361584][T25910] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1528.379441][T25912] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6410'. [ 1528.886183][T25927] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6416'. [ 1529.935451][T25944] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6422'. [ 1530.350770][T25961] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6428'. [ 1531.057255][T25978] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6434'. [ 1531.600865][T25996] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6452'. [ 1531.727269][T26002] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6445'. [ 1532.938000][T26031] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6459'. [ 1533.320862][T26040] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6463'. [ 1533.840985][T26053] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6470'. [ 1534.705162][T26075] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6476'. [ 1537.305684][T26149] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6511'. [ 1538.898981][T26195] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6530'. [ 1546.335079][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.345198][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.286295][T26460] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6637'. [ 1552.242048][T26515] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6658'. [ 1557.524088][T26654] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6722'. [ 1559.382157][T26681] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6736'. [ 1561.164230][T26721] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1563.179865][T26770] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6774'. [ 1565.435338][T26811] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6793'. [ 1567.581562][T26858] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6812'. [ 1572.547644][T26910] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6833'. [ 1575.843526][T26955] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6852'. [ 1583.712012][T27001] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6869'. [ 1586.635901][T27047] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1589.125441][T27059] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6897'. [ 1596.109310][T27089] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6899'. [ 1601.616017][T27141] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6914'. [ 1607.761713][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.768394][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.872246][T27200] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6932'. [ 1661.255273][T27625] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7077'. [ 1661.511425][T27631] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7087'. [ 1668.680466][T27674] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7093'. [ 1669.195320][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.201990][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.515628][T27715] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7107'. [ 1674.829501][T27758] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7121'. [ 1677.967804][T27786] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7133'. [ 1679.083470][T27822] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7149'. [ 1681.793374][T27837] netlink: 'syz.0.7156': attribute type 21 has an invalid length. [ 1681.801510][T27837] IPv6: NLM_F_CREATE should be specified when creating new route [ 1681.809527][T27837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1681.816947][T27837] IPv6: NLM_F_CREATE should be set when creating new route [ 1681.824354][T27837] IPv6: NLM_F_CREATE should be set when creating new route [ 1681.831705][T27837] IPv6: NLM_F_CREATE should be set when creating new route [ 1681.849650][T27852] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7161'. [ 1682.136206][T27855] netlink: 'syz.3.7164': attribute type 21 has an invalid length. [ 1682.163816][T27855] IPv6: NLM_F_CREATE should be specified when creating new route [ 1682.186749][T27855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1682.194647][T27855] IPv6: NLM_F_CREATE should be set when creating new route [ 1682.203090][T27855] IPv6: NLM_F_CREATE should be set when creating new route [ 1682.210838][T27855] IPv6: NLM_F_CREATE should be set when creating new route [ 1682.232767][T27860] netlink: 'syz.1.7170': attribute type 21 has an invalid length. [ 1682.244293][T27860] IPv6: NLM_F_CREATE should be specified when creating new route [ 1682.255652][T27860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1682.263534][T27860] IPv6: NLM_F_CREATE should be set when creating new route [ 1682.271690][T27860] IPv6: NLM_F_CREATE should be set when creating new route [ 1682.279489][T27860] IPv6: NLM_F_CREATE should be set when creating new route [ 1683.120485][T27877] netlink: 'syz.1.7172': attribute type 21 has an invalid length. [ 1683.130649][T27877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1683.275516][T27879] netlink: 'syz.4.7173': attribute type 21 has an invalid length. [ 1683.305698][T27879] IPv6: NLM_F_CREATE should be specified when creating new route [ 1683.326041][T27879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1683.333434][T27879] IPv6: NLM_F_CREATE should be set when creating new route [ 1683.340820][T27879] IPv6: NLM_F_CREATE should be set when creating new route [ 1683.348107][T27879] IPv6: NLM_F_CREATE should be set when creating new route [ 1683.508612][T27887] netlink: 'syz.1.7177': attribute type 21 has an invalid length. [ 1683.524016][T27887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1683.912843][T27893] netlink: 'syz.3.7180': attribute type 21 has an invalid length. [ 1683.940335][T27893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1684.132112][T27897] netlink: 'syz.0.7182': attribute type 21 has an invalid length. [ 1684.156355][T27897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1684.262695][T27904] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7185'. [ 1685.259966][T27920] netlink: 'syz.4.7191': attribute type 21 has an invalid length. [ 1685.290132][T27920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1685.548664][T27926] netlink: 'syz.3.7193': attribute type 21 has an invalid length. [ 1685.573901][T27926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1685.607120][T27928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1685.738140][T27931] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7195'. [ 1686.688298][T27949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1686.942334][T27955] validate_nla: 2 callbacks suppressed [ 1686.942374][T27955] netlink: 'syz.1.7210': attribute type 21 has an invalid length. [ 1686.965578][T27955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1686.976271][T27957] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7211'. [ 1687.330463][T27968] netlink: 'syz.0.7216': attribute type 21 has an invalid length. [ 1687.345178][T27968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1687.862726][T27977] netlink: 'syz.3.7220': attribute type 21 has an invalid length. [ 1687.874877][T27977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1688.171184][T27985] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7224'. [ 1690.644848][T27992] netlink: 'syz.4.7227': attribute type 21 has an invalid length. [ 1690.654844][T27992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1691.040923][T28006] netlink: 'syz.3.7234': attribute type 21 has an invalid length. [ 1691.058819][T28006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1691.331936][T28013] netlink: 'syz.0.7236': attribute type 21 has an invalid length. [ 1691.359709][T28013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1691.720681][T28023] netlink: 'syz.0.7241': attribute type 21 has an invalid length. [ 1691.739623][T28023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1694.571855][T28046] netlink: 'syz.0.7251': attribute type 21 has an invalid length. [ 1694.594460][T28046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1694.602834][T28044] netlink: 'syz.3.7249': attribute type 21 has an invalid length. [ 1694.629805][T28044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1694.638033][T28048] netlink: 'syz.1.7250': attribute type 21 has an invalid length. [ 1694.648401][T28048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1694.783037][T28050] netlink: 'syz.4.7252': attribute type 21 has an invalid length. [ 1694.809441][T28050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1694.980545][T28056] netlink: 'syz.1.7255': attribute type 21 has an invalid length. [ 1694.990589][T28056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1695.032265][T28054] netlink: 'syz.3.7253': attribute type 21 has an invalid length. [ 1695.046293][T28054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1698.192060][T28082] netlink: 'syz.4.7265': attribute type 21 has an invalid length. [ 1698.202569][T28082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1698.209961][T28087] netlink: 'syz.1.7266': attribute type 21 has an invalid length. [ 1698.218183][T28087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1698.530927][T28092] netlink: 'syz.4.7267': attribute type 21 has an invalid length. [ 1698.541459][T28092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1698.889441][T28101] netlink: 'syz.0.7272': attribute type 21 has an invalid length. [ 1698.905743][T28101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1701.247608][T28110] netlink: 'syz.3.7277': attribute type 21 has an invalid length. [ 1701.256204][T28110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1701.265105][T28112] netlink: 'syz.4.7279': attribute type 21 has an invalid length. [ 1701.280002][T28112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1701.290270][T28114] netlink: 'syz.0.7278': attribute type 21 has an invalid length. [ 1701.298423][T28114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1701.519455][T28116] netlink: 'syz.3.7280': attribute type 21 has an invalid length. [ 1701.568494][T28116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1701.715045][T28120] netlink: 'syz.0.7282': attribute type 21 has an invalid length. [ 1701.727135][T28120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1702.033850][T28132] netlink: 'syz.1.7289': attribute type 21 has an invalid length. [ 1702.043302][T28132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1702.145533][T28128] netlink: 'syz.3.7286': attribute type 21 has an invalid length. [ 1702.179905][T28128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1702.498124][T28137] netlink: 'syz.1.7290': attribute type 21 has an invalid length. [ 1702.512241][T28137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1702.609368][T28141] netlink: 'syz.3.7291': attribute type 21 has an invalid length. [ 1702.621135][T28141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1703.287051][T28158] netlink: 'syz.3.7299': attribute type 21 has an invalid length. [ 1703.297473][T28158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1703.356519][T28160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1703.866478][T28168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1704.546909][T28181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1705.196763][T28196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1705.222593][T28200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1705.544325][T28205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1705.642349][T28209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1708.542443][T28228] validate_nla: 7 callbacks suppressed [ 1708.542475][T28228] netlink: 'syz.3.7328': attribute type 21 has an invalid length. [ 1708.604112][T28228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1708.790323][T28234] netlink: 'syz.4.7330': attribute type 21 has an invalid length. [ 1708.807614][T28234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1709.424948][T28250] netlink: 'syz.4.7337': attribute type 21 has an invalid length. [ 1709.434646][T28250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1711.764523][T28255] netlink: 'syz.3.7339': attribute type 21 has an invalid length. [ 1711.772887][T28255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1711.799028][T28260] netlink: 'syz.4.7341': attribute type 21 has an invalid length. [ 1711.808964][T28260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1712.395046][T28278] netlink: 'syz.1.7344': attribute type 21 has an invalid length. [ 1712.419143][T28278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1712.772264][T28284] netlink: 'syz.0.7349': attribute type 21 has an invalid length. [ 1712.787196][T28284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1712.801092][T28286] netlink: 'syz.1.7350': attribute type 21 has an invalid length. [ 1712.810851][T28286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1713.154229][T28293] netlink: 'syz.1.7352': attribute type 21 has an invalid length. [ 1713.175546][T28293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1713.555732][T28306] netlink: 'syz.1.7357': attribute type 21 has an invalid length. [ 1713.569505][T28306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1713.648108][T28308] netlink: 'syz.3.7358': attribute type 21 has an invalid length. [ 1713.680449][T28308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1713.717199][T28312] netlink: 'syz.0.7360': attribute type 21 has an invalid length. [ 1713.728404][T28312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1713.993811][T28316] netlink: 'syz.3.7362': attribute type 21 has an invalid length. [ 1714.013581][T28316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1714.056290][T28318] netlink: 'syz.4.7363': attribute type 21 has an invalid length. [ 1714.078053][T28318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1714.744049][T28333] netlink: 'syz.3.7369': attribute type 21 has an invalid length. [ 1714.753731][T28333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1714.825920][T28337] netlink: 'syz.0.7370': attribute type 21 has an invalid length. [ 1714.861879][T28337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1715.078004][T28343] netlink: 'syz.3.7372': attribute type 21 has an invalid length. [ 1715.087478][T28343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1715.184323][T28346] netlink: 'syz.0.7373': attribute type 21 has an invalid length. [ 1715.209422][T28346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1715.291653][T28348] netlink: 'syz.4.7374': attribute type 21 has an invalid length. [ 1715.311135][T28348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1715.490650][T28351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1716.018966][T28360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1716.049944][T28364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1716.307238][T28370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1716.543169][T28378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1716.717830][T28382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1716.866228][T28385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1716.909339][T28386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1717.090427][T28390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1717.140765][T28392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1717.362033][T28396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1719.706666][T28407] validate_nla: 11 callbacks suppressed [ 1719.706690][T28407] netlink: 'syz.1.7402': attribute type 21 has an invalid length. [ 1719.720558][T28407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1719.910883][T28413] netlink: 'syz.1.7404': attribute type 21 has an invalid length. [ 1719.926909][T28413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1720.130442][T28418] netlink: 'syz.0.7407': attribute type 21 has an invalid length. [ 1720.155736][T28418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1720.289648][T28420] netlink: 'syz.1.7409': attribute type 21 has an invalid length. [ 1720.316656][T28420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1720.483602][T28427] netlink: 'syz.0.7411': attribute type 21 has an invalid length. [ 1720.494743][T28427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1720.615389][T28429] netlink: 'syz.3.7413': attribute type 21 has an invalid length. [ 1720.646676][T28429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1720.735053][T28433] netlink: 'syz.4.7414': attribute type 21 has an invalid length. [ 1720.756117][T28433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1720.858912][T28435] netlink: 'syz.0.7415': attribute type 21 has an invalid length. [ 1720.899569][T28435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1720.983243][T28437] netlink: 'syz.1.7416': attribute type 21 has an invalid length. [ 1721.008492][T28437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1721.083863][T28440] netlink: 'syz.3.7426': attribute type 21 has an invalid length. [ 1721.127029][T28440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1721.180904][T28441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1723.788449][T28453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1723.798905][T28455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1724.018105][T28463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1724.187387][T28467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1724.621700][T28476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1724.834820][T28483] validate_nla: 6 callbacks suppressed [ 1724.834855][T28483] netlink: 'syz.4.7435': attribute type 21 has an invalid length. [ 1724.853867][T28483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1725.140681][T28488] netlink: 'syz.0.7438': attribute type 21 has an invalid length. [ 1725.154188][T28488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1725.305592][T28494] netlink: 'syz.3.7442': attribute type 21 has an invalid length. [ 1725.317238][T28494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1725.397372][T28498] netlink: 'syz.4.7444': attribute type 21 has an invalid length. [ 1725.415963][T28498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1725.480311][T28496] netlink: 'syz.1.7443': attribute type 21 has an invalid length. [ 1725.500771][T28496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1725.795257][T28505] netlink: 'syz.4.7447': attribute type 21 has an invalid length. [ 1725.819974][T28505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1725.852828][T28508] netlink: 'syz.1.7449': attribute type 21 has an invalid length. [ 1725.861904][T28508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1726.089981][T28511] netlink: 'syz.3.7451': attribute type 21 has an invalid length. [ 1726.099569][T28511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1726.305595][T28517] netlink: 'syz.4.7454': attribute type 21 has an invalid length. [ 1726.316875][T28517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1726.596911][T28528] netlink: 'syz.1.7457': attribute type 21 has an invalid length. [ 1726.609515][T28528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1726.829861][T28532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1726.948675][T28536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1727.055196][T28538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1727.270198][T28546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1727.356215][T28548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1727.659750][T28558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1728.002436][T28566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1728.102535][T28571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1728.280340][T28576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1728.445141][T28582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1728.552376][T28584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1729.072634][T28601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1729.254042][T28604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1729.482384][T28609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1729.557381][T28614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1730.639710][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.647088][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.365231][T28638] validate_nla: 15 callbacks suppressed [ 1732.365273][T28638] netlink: 'syz.4.7507': attribute type 21 has an invalid length. [ 1732.385108][T28638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1732.399949][T28635] netlink: 'syz.1.7506': attribute type 21 has an invalid length. [ 1732.420164][T28635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1732.656947][T28643] netlink: 'syz.3.7510': attribute type 21 has an invalid length. [ 1732.689238][T28643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1732.700238][T28646] netlink: 'syz.4.7511': attribute type 21 has an invalid length. [ 1732.712224][T28646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1732.750089][T28649] netlink: 'syz.1.7512': attribute type 21 has an invalid length. [ 1732.765009][T28649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1733.005500][T28653] netlink: 'syz.4.7514': attribute type 21 has an invalid length. [ 1733.018241][T28653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1735.485418][T28661] netlink: 'syz.4.7517': attribute type 21 has an invalid length. [ 1735.493642][T28661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1737.904636][T28671] netlink: 'syz.3.7520': attribute type 21 has an invalid length. [ 1737.919174][T28671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1738.146612][T28678] netlink: 'syz.1.7525': attribute type 21 has an invalid length. [ 1738.167305][T28678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1738.806554][T28689] netlink: 'syz.3.7528': attribute type 21 has an invalid length. [ 1738.822123][T28689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1739.192610][T28702] netlink: 'syz.3.7532': attribute type 21 has an invalid length. [ 1739.209732][T28702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1739.217579][T28704] netlink: 'syz.0.7533': attribute type 21 has an invalid length. [ 1739.231255][T28704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1742.271013][T28734] netlink: 'syz.1.7544': attribute type 21 has an invalid length. [ 1742.280810][T28734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1742.553536][T28738] netlink: 'syz.4.7545': attribute type 21 has an invalid length. [ 1742.579462][T28738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1742.609553][T28740] netlink: 'syz.1.7546': attribute type 21 has an invalid length. [ 1742.618046][T28740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1743.075503][T28749] netlink: 'syz.4.7549': attribute type 21 has an invalid length. [ 1743.095042][T28749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1743.655393][T28762] netlink: 'syz.1.7554': attribute type 21 has an invalid length. [ 1743.666964][T28762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1746.902658][T28767] netlink: 'syz.1.7558': attribute type 21 has an invalid length. [ 1746.914627][T28767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1747.014822][T28771] netlink: 'syz.0.7557': attribute type 21 has an invalid length. [ 1747.039297][T28771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1747.352650][T28779] netlink: 'syz.3.7563': attribute type 21 has an invalid length. [ 1747.365269][T28779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1747.373715][T28781] netlink: 'syz.0.7565': attribute type 21 has an invalid length. [ 1747.389569][T28781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1749.736642][T28783] netlink: 'syz.4.7566': attribute type 21 has an invalid length. [ 1749.747221][T28783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1749.754929][T28785] netlink: 'syz.3.7567': attribute type 21 has an invalid length. [ 1749.779013][T28785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1749.786417][T28787] netlink: 'syz.0.7568': attribute type 21 has an invalid length. [ 1749.808418][T28787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1750.267392][T28803] netlink: 'syz.0.7575': attribute type 21 has an invalid length. [ 1750.293015][T28803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1750.308230][T28802] netlink: 'syz.1.7576': attribute type 21 has an invalid length. [ 1750.329328][T28802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1750.469865][T28807] netlink: 'syz.0.7578': attribute type 21 has an invalid length. [ 1750.485359][T28807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1750.493602][T28805] netlink: 'syz.3.7577': attribute type 21 has an invalid length. [ 1750.502790][T28805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1750.709739][T28813] netlink: 'syz.1.7581': attribute type 21 has an invalid length. [ 1750.721707][T28813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1752.994173][T28816] netlink: 'syz.3.7580': attribute type 21 has an invalid length. [ 1753.002654][T28816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1753.012911][T28814] netlink: 'syz.0.7588': attribute type 21 has an invalid length. [ 1753.021147][T28814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1753.542515][T28834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1753.608595][T28840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1763.791357][T28931] validate_nla: 2 callbacks suppressed [ 1763.791397][T28931] netlink: 'syz.4.7627': attribute type 21 has an invalid length. [ 1763.819602][T28931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1766.879894][T28966] netlink: 'syz.1.7638': attribute type 21 has an invalid length. [ 1766.899503][T28966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1766.931104][T28968] netlink: 'syz.3.7639': attribute type 21 has an invalid length. [ 1766.940404][T28968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1767.077751][T28972] netlink: 'syz.4.7642': attribute type 21 has an invalid length. [ 1767.105652][T28972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1767.485063][T28981] netlink: 'syz.0.7656': attribute type 21 has an invalid length. [ 1767.494808][T28981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1772.371651][T28999] netlink: 'syz.3.7654': attribute type 21 has an invalid length. [ 1772.379789][T28999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1772.664537][T29012] netlink: 'syz.0.7667': attribute type 21 has an invalid length. [ 1772.698384][T29012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1772.929908][T29023] netlink: 'syz.1.7661': attribute type 21 has an invalid length. [ 1772.974205][T29023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1773.130934][T29025] netlink: 'syz.0.7664': attribute type 21 has an invalid length. [ 1773.172263][T29025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1773.361033][T29031] netlink: 'syz.4.7665': attribute type 21 has an invalid length. [ 1773.379573][T29031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1773.396309][T29036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7672'. [ 1775.899735][T29040] netlink: 'syz.3.7674': attribute type 21 has an invalid length. [ 1775.907894][T29040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1775.916879][T29046] netlink: 'syz.4.7677': attribute type 21 has an invalid length. [ 1775.930536][T29046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1776.114841][T29054] netlink: 'syz.3.7680': attribute type 21 has an invalid length. [ 1776.128332][T29054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1776.244463][T29059] netlink: 'syz.1.7681': attribute type 21 has an invalid length. [ 1776.279462][T29059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1776.384991][T29065] netlink: 'syz.3.7684': attribute type 21 has an invalid length. [ 1776.409440][T29065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1776.563688][T29071] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7687'. [ 1778.877069][T29075] netlink: 'syz.0.7697': attribute type 21 has an invalid length. [ 1778.886409][T29075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1779.049908][T29080] netlink: 'syz.1.7689': attribute type 21 has an invalid length. [ 1779.081662][T29080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1779.151841][T29086] netlink: 'syz.0.7693': attribute type 21 has an invalid length. [ 1779.161536][T29086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1779.213298][T29082] netlink: 'syz.3.7690': attribute type 21 has an invalid length. [ 1779.235435][T29082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1779.273240][T29088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7694'. [ 1779.550462][T29092] netlink: 'syz.0.7696': attribute type 21 has an invalid length. [ 1779.563471][T29092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1779.600671][T29096] netlink: 'syz.4.7699': attribute type 21 has an invalid length. [ 1779.627044][T29096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1779.658655][T29098] netlink: 'syz.1.7700': attribute type 21 has an invalid length. [ 1779.682606][T29098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1779.795492][T29104] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7701'. [ 1779.829491][T29102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7709'. [ 1780.250129][T29111] netlink: 'syz.4.7706': attribute type 21 has an invalid length. [ 1780.273862][T29111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1780.331278][T29118] netlink: 'syz.3.7708': attribute type 21 has an invalid length. [ 1780.354663][T29118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1782.594745][T29120] netlink: 'syz.1.7710': attribute type 21 has an invalid length. [ 1782.603055][T29120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1782.611734][T29124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1782.623293][T29122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1782.825198][T29130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7723'. [ 1782.902122][T29126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1782.934539][T29131] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7714'. [ 1783.133808][T29135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1783.354363][T29141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1783.829597][T29157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7726'. [ 1783.850555][T29152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1783.875520][T29156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7725'. [ 1786.260751][T29163] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7728'. [ 1786.270397][T29162] validate_nla: 6 callbacks suppressed [ 1786.270412][T29162] netlink: 'syz.1.7727': attribute type 21 has an invalid length. [ 1786.303843][T29162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1786.331434][T29166] netlink: 'syz.0.7729': attribute type 21 has an invalid length. [ 1786.349213][T29166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1786.607883][T29169] netlink: 'syz.3.7730': attribute type 21 has an invalid length. [ 1786.617071][T29169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1787.024475][T29178] netlink: 'syz.4.7735': attribute type 21 has an invalid length. [ 1787.048327][T29178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1787.058500][T29182] netlink: 'syz.1.7736': attribute type 21 has an invalid length. [ 1787.073281][T29182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1789.445655][T29188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7738'. [ 1789.457553][T29190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7739'. [ 1789.467498][T29192] netlink: 'syz.0.7740': attribute type 21 has an invalid length. [ 1789.486280][T29192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1792.082700][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.099239][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.172139][T29207] netlink: 'syz.4.7743': attribute type 21 has an invalid length. [ 1792.180286][T29207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1792.435942][T29217] netlink: 'syz.4.7746': attribute type 21 has an invalid length. [ 1792.461287][T29217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1792.535930][T29221] netlink: 'syz.1.7747': attribute type 21 has an invalid length. [ 1792.550558][T29221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1794.798256][T29226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7751'. [ 1794.820067][T29230] netlink: 'syz.1.7753': attribute type 21 has an invalid length. [ 1794.828044][T29230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1795.037837][T29237] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7756'. [ 1795.154204][T29238] netlink: 'syz.1.7755': attribute type 21 has an invalid length. [ 1795.174052][T29238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1795.431836][T29243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7758'. [ 1795.533218][T29247] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7759'. [ 1795.763566][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1795.773695][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1795.782827][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1795.793086][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1795.806212][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1795.814470][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1796.069310][T29258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7762'. [ 1796.105848][T29256] netlink: 'syz.3.7761': attribute type 21 has an invalid length. [ 1796.127816][T29256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1796.197650][T29257] netlink: 'syz.4.7763': attribute type 21 has an invalid length. [ 1796.242892][T29257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1796.540256][T29264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1796.628476][T29272] netlink: 'syz.4.7766': attribute type 21 has an invalid length. [ 1796.639322][T29272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1797.915243][T12461] Bluetooth: hci3: command tx timeout [ 1799.076638][T29275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7767'. [ 1799.215179][T29249] chnl_net:caif_netlink_parms(): no params data found [ 1799.340502][T29285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7777'. [ 1799.426587][T29290] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7770'. [ 1799.545462][T14592] tipc: Left network mode [ 1799.613689][T29249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.654944][T29249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.679322][T29249] bridge_slave_0: entered allmulticast mode [ 1799.702283][T29249] bridge_slave_0: entered promiscuous mode [ 1799.831799][T29249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.848984][T29249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.856453][T29249] bridge_slave_1: entered allmulticast mode [ 1799.880506][T29249] bridge_slave_1: entered promiscuous mode [ 1799.888258][T29302] netlink: 'syz.3.7772': attribute type 21 has an invalid length. [ 1799.899325][T29302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1799.988845][T12461] Bluetooth: hci3: command tx timeout [ 1800.157394][T29311] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7781'. [ 1800.172198][T29308] netlink: 'syz.4.7782': attribute type 21 has an invalid length. [ 1800.182023][T29308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1800.221275][T29249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1800.290549][T29249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1800.399399][T29313] netlink: 'syz.3.7773': attribute type 21 has an invalid length. [ 1800.423959][T29313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1800.604660][T29249] team0: Port device team_slave_0 added [ 1800.642556][T29249] team0: Port device team_slave_1 added [ 1800.825228][T29249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.843509][T29249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.870524][T29249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1800.959732][T29249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.966799][T29249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.003660][T29249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.016732][T29325] netlink: 'syz.3.7776': attribute type 21 has an invalid length. [ 1801.025097][T29325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1802.071647][T12461] Bluetooth: hci3: command tx timeout [ 1803.337905][T29249] hsr_slave_0: entered promiscuous mode [ 1803.347363][T29249] hsr_slave_1: entered promiscuous mode [ 1803.357594][T29249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1803.365896][T29249] Cannot create hsr debugfs directory [ 1803.621772][T29331] netlink: 'syz.1.7787': attribute type 21 has an invalid length. [ 1803.654428][T29331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1804.149499][T12461] Bluetooth: hci3: command tx timeout [ 1806.701924][T29361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7783'. [ 1809.861879][T29369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7786'. [ 1810.061224][T29384] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7788'. [ 1811.849404][T29390] netlink: 'syz.4.7791': attribute type 21 has an invalid length. [ 1811.857751][T29390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1812.355243][T29249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1812.413557][T29249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1812.453111][T29249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1812.563890][T29249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1812.875333][T29249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1812.942859][T29249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1812.995677][T14602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.002991][T14602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1813.038761][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.045991][ T9190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1813.221578][T29249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1813.986318][T29249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1814.182257][T29249] veth0_vlan: entered promiscuous mode [ 1814.253831][T29249] veth1_vlan: entered promiscuous mode [ 1814.357319][T29249] veth0_macvtap: entered promiscuous mode [ 1814.396961][T29249] veth1_macvtap: entered promiscuous mode [ 1814.474317][T29249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1814.498459][T29249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.511149][T29249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1814.530985][T29249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.560614][T29249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1814.602797][T29249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1814.641135][T29249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.668849][T29249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1814.684116][T29249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.700612][T29249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1814.718943][T29249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.732936][T29249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.806438][T29249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.827201][T29249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.848884][T29249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.869925][T29249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.270946][T14592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.300361][T14592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.428465][T14578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.461903][T14578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.074875][T29522] netlink: 'syz.0.7754': attribute type 21 has an invalid length. [ 1816.139038][T29522] IPv6: NLM_F_CREATE should be specified when creating new route [ 1816.147674][T29522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1816.155404][T29522] IPv6: NLM_F_CREATE should be set when creating new route [ 1816.163419][T29522] IPv6: NLM_F_CREATE should be set when creating new route [ 1816.171216][T29522] IPv6: NLM_F_CREATE should be set when creating new route [ 1817.620121][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1817.633997][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1817.645298][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1817.655969][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1817.664203][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1817.673345][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1819.068955][T14578] tipc: Left network mode [ 1819.258944][T29549] chnl_net:caif_netlink_parms(): no params data found [ 1819.516372][T29549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.533020][T29549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.545600][T29549] bridge_slave_0: entered allmulticast mode [ 1819.562677][T29549] bridge_slave_0: entered promiscuous mode [ 1819.623551][T29549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.636087][T29549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.644668][T29549] bridge_slave_1: entered allmulticast mode [ 1819.655659][T29549] bridge_slave_1: entered promiscuous mode [ 1819.719374][T29549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1819.738623][T29549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1819.749443][T12461] Bluetooth: hci0: command tx timeout [ 1819.811305][T29549] team0: Port device team_slave_0 added [ 1819.841458][T29549] team0: Port device team_slave_1 added [ 1819.922465][T29549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.938784][T29549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.985406][T29549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1820.000349][T29549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1820.007387][T29549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1820.049131][T29549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1820.227986][T29549] hsr_slave_0: entered promiscuous mode [ 1820.242998][T29549] hsr_slave_1: entered promiscuous mode [ 1820.271172][T29549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1820.295671][T29549] Cannot create hsr debugfs directory [ 1820.808271][T29610] syzkaller0: entered promiscuous mode [ 1820.836644][T29610] syzkaller0: entered allmulticast mode [ 1821.829029][T12461] Bluetooth: hci0: command tx timeout [ 1823.910957][T12461] Bluetooth: hci0: command tx timeout [ 1825.994936][T12461] Bluetooth: hci0: command tx timeout [ 1826.316133][T14578] hsr_slave_0: left promiscuous mode [ 1826.360998][T14578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1826.368664][T14578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1826.394450][T14578] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1826.419039][T14578] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1826.444555][T14578] veth1_macvtap: left promiscuous mode [ 1826.470357][T14578] veth1_vlan: left allmulticast mode [ 1826.476031][T14578] veth1_vlan: left promiscuous mode [ 1826.518588][T14578] veth0_vlan: left promiscuous mode [ 1828.096673][T29549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1828.129872][T29549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1828.151856][T29549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1828.235644][T29549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1828.572022][T29549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.632480][T29549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.696263][T14583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.703833][T14583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1828.757266][T14602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.764521][T14602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1829.504041][T29549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1829.695153][T29549] veth0_vlan: entered promiscuous mode [ 1829.744940][T29549] veth1_vlan: entered promiscuous mode [ 1829.890418][T29549] veth0_macvtap: entered promiscuous mode [ 1829.924343][T29549] veth1_macvtap: entered promiscuous mode [ 1829.983530][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.011324][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.036915][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.056890][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.067431][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.085647][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.106667][T29549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1830.123699][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.134588][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.156478][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.175523][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.185846][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.202579][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.247939][T29549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1830.378140][T29549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.406085][T29549] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.415582][T29549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.425022][T29549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.460959][T29738] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 1830.474151][T29738] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 1831.025485][T14578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.048842][T14578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.250117][T14602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.258022][T14602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.617028][T29786] syzkaller0: entered promiscuous mode [ 1832.677857][T29786] syzkaller0: entered allmulticast mode [ 1832.890046][T12461] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1832.900280][T12461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1832.909238][T12461] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1832.940547][T12461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1832.949365][T12461] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1832.956975][T12461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1835.032188][T12461] Bluetooth: hci2: command tx timeout [ 1835.706748][T29795] chnl_net:caif_netlink_parms(): no params data found [ 1836.124460][T29795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.132076][T29795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.140016][T29795] bridge_slave_0: entered allmulticast mode [ 1836.147793][T29795] bridge_slave_0: entered promiscuous mode [ 1836.189123][T29835] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 1836.196614][T29835] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 1836.229863][T29795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.237202][T29795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.255233][T29795] bridge_slave_1: entered allmulticast mode [ 1836.267344][T29795] bridge_slave_1: entered promiscuous mode [ 1836.321604][T29841] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 1836.338923][T29841] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 1836.473209][T29795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1836.576157][T29795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1836.657417][T14583] tipc: Left network mode [ 1836.767986][T29795] team0: Port device team_slave_0 added [ 1836.802722][T29795] team0: Port device team_slave_1 added [ 1837.110308][T12461] Bluetooth: hci2: command tx timeout [ 1837.380830][T29795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1837.388592][T29795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.425429][T29795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1837.459556][T29795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1837.477609][T29795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.526689][T29795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1838.078002][T29795] hsr_slave_0: entered promiscuous mode [ 1838.101579][T29795] hsr_slave_1: entered promiscuous mode [ 1838.137302][T29795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1838.145424][T29795] Cannot create hsr debugfs directory [ 1839.189770][T12461] Bluetooth: hci2: command tx timeout [ 1839.667990][T14583] hsr_slave_0: left promiscuous mode [ 1839.711376][T14583] hsr_slave_1: left promiscuous mode [ 1839.755106][T14583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1839.783094][T14583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1839.820301][T14583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1839.838076][T14583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1839.865145][T14583] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1839.879071][T14583] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1839.919607][T14583] veth1_macvtap: left promiscuous mode [ 1841.278952][T12461] Bluetooth: hci2: command tx timeout [ 1841.706697][T29795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1841.743081][T29795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1841.844471][T29795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1841.882219][T29795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1842.151834][T29940] syzkaller0: entered promiscuous mode [ 1845.188574][T29795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1845.294116][T29795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1845.341348][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.348567][ T9190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1845.411278][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.418458][ T9190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1845.606229][T29795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1845.648861][T29795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1846.531861][T30030] syzkaller0: entered promiscuous mode [ 1846.546195][T30030] syzkaller0: entered allmulticast mode [ 1848.906033][T29795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1852.636093][T29795] veth0_vlan: entered promiscuous mode [ 1852.656004][T29795] veth1_vlan: entered promiscuous mode [ 1852.743644][T29795] veth0_macvtap: entered promiscuous mode [ 1852.799842][T29795] veth1_macvtap: entered promiscuous mode [ 1852.849613][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1852.872755][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1852.885520][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1852.902156][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1852.914644][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1852.928224][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1852.944134][T29795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1852.966511][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1852.982300][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1852.993795][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1853.014815][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1853.048928][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1853.083472][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1853.107530][T29795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1853.161077][T29795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.186281][T29795] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.200790][T29795] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.210046][T29795] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.491847][ T9190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1853.506750][ T9190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1853.523563][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.531924][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.685034][ T9190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1853.693223][ T9190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1854.115880][T30137] syzkaller0: entered promiscuous mode [ 1854.122910][T30137] syzkaller0: entered allmulticast mode [ 1861.325214][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1861.337462][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1861.359568][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1861.376211][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1861.385016][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1861.400774][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1861.510918][T14580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.621026][T14580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.730394][T14580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.888501][T30164] chnl_net:caif_netlink_parms(): no params data found [ 1862.215839][T30164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.226189][T30164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.234236][T30164] bridge_slave_0: entered allmulticast mode [ 1862.242252][T30164] bridge_slave_0: entered promiscuous mode [ 1862.386708][T30164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.420806][T30164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.431816][T30164] bridge_slave_1: entered allmulticast mode [ 1862.443507][T30164] bridge_slave_1: entered promiscuous mode [ 1862.468518][T14580] tipc: Left network mode [ 1862.995573][T30164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1863.011560][T30164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.429089][T12461] Bluetooth: hci4: command tx timeout [ 1865.519057][T12461] Bluetooth: hci4: command tx timeout [ 1866.407207][T30164] team0: Port device team_slave_0 added [ 1866.477626][T30164] team0: Port device team_slave_1 added [ 1866.761362][T30164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1866.795101][T30164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1866.874192][T30164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1866.911362][T30164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1866.918382][T30164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1866.985423][T30164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1867.397929][T30164] hsr_slave_0: entered promiscuous mode [ 1867.410727][T30164] hsr_slave_1: entered promiscuous mode [ 1867.588874][T12461] Bluetooth: hci4: command tx timeout [ 1868.582147][T14580] hsr_slave_0: left promiscuous mode [ 1868.604320][T14580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1868.616276][T14580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1868.626489][T14580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1868.640335][T14580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1868.652910][T14580] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1868.666816][T14580] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1868.698219][T14580] veth1_macvtap: left promiscuous mode [ 1868.714388][T14580] veth0_vlan: left promiscuous mode [ 1869.678941][T12461] Bluetooth: hci4: command tx timeout [ 1870.540597][T30164] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1870.557606][T30164] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1870.576882][T30164] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1870.595601][T30164] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1870.752894][T30164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1870.832274][T30164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1870.893024][T14585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.900347][T14585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1870.932198][T14585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.939481][T14585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1871.513669][T30164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1871.645474][T30164] veth0_vlan: entered promiscuous mode [ 1871.687089][T30164] veth1_vlan: entered promiscuous mode [ 1871.754630][T30164] veth0_macvtap: entered promiscuous mode [ 1871.772854][T30164] veth1_macvtap: entered promiscuous mode [ 1871.827629][T30164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.840618][T30164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.859111][T30164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.886211][T30164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.906796][T30164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.928314][T30164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.942819][T30164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1871.974756][T30164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.992966][T30164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.014465][T30164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.026460][T30164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.041653][T30164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.053636][T30164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.095375][T30164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1872.134995][T30164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.150790][T30164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.164263][T30164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.175528][T30164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.320283][T14602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.335941][T14602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.377554][T14602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.393701][T14602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1883.501600][T30502] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.8067'. [ 1885.756810][T30506] netlink: 'syz.1.8067': attribute type 39 has an invalid length. [ 1892.183334][T30621] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.8118'. [ 1893.663935][T30625] netlink: 'syz.1.8118': attribute type 39 has an invalid length. [ 1895.079967][ C1] [ 1895.082402][ C1] ====================================================== [ 1895.089463][ C1] WARNING: possible circular locking dependency detected [ 1895.096584][ C1] syzkaller #0 Not tainted [ 1895.101041][ C1] ------------------------------------------------------ [ 1895.108094][ C1] syz-executor/29549 is trying to acquire lock: [ 1895.114442][ C1] ffff88807d40ea38 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 1895.123456][ C1] [ 1895.123456][ C1] but task is already holding lock: [ 1895.130854][ C1] ffff8880b8f37de8 (stock_lock){-.-.}-{2:2}, at: mod_objcg_state+0x101/0x8c0 [ 1895.139689][ C1] [ 1895.139689][ C1] which lock already depends on the new lock. [ 1895.139689][ C1] [ 1895.150227][ C1] [ 1895.150227][ C1] the existing dependency chain (in reverse order) is: [ 1895.159269][ C1] [ 1895.159269][ C1] -> #1 (stock_lock){-.-.}-{2:2}: [ 1895.166511][ C1] obj_cgroup_charge+0x10a/0x630 [ 1895.172018][ C1] slab_pre_alloc_hook+0x2e2/0x300 [ 1895.177714][ C1] __kmem_cache_alloc_node+0x53/0x250 [ 1895.183670][ C1] __kmalloc_node+0xa6/0x240 [ 1895.188905][ C1] bpf_map_kmalloc_node+0xbc/0x1b0 [ 1895.194614][ C1] trie_update_elem+0x172/0xd60 [ 1895.200020][ C1] bpf_map_update_value+0x64b/0x710 [ 1895.205940][ C1] map_update_elem+0x586/0x710 [ 1895.211601][ C1] __sys_bpf+0x6b5/0x890 [ 1895.216578][ C1] __x64_sys_bpf+0x7c/0x90 [ 1895.221716][ C1] do_syscall_64+0x55/0xb0 [ 1895.227481][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1895.233946][ C1] [ 1895.233946][ C1] -> #0 (&trie->lock){-.-.}-{2:2}: [ 1895.241293][ C1] __lock_acquire+0x37ef/0x7d80 [ 1895.246709][ C1] lock_acquire+0x19e/0x420 [ 1895.251766][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 1895.257808][ C1] trie_delete_elem+0x94/0x630 [ 1895.263238][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1895.269242][ C1] trace_call_bpf+0x333/0x6c0 [ 1895.274476][ C1] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1895.280572][ C1] perf_trace_lock_acquire+0x342/0x400 [ 1895.286582][ C1] lock_acquire+0x3ef/0x420 [ 1895.291643][ C1] mod_objcg_mlstate+0xad/0x320 [ 1895.297043][ C1] mod_objcg_state+0x44b/0x8c0 [ 1895.302354][ C1] memcg_slab_free_hook+0x167/0x200 [ 1895.308094][ C1] kmem_cache_free+0xe1/0x290 [ 1895.313350][ C1] delayed_put_task_struct+0x10f/0x2a0 [ 1895.319421][ C1] rcu_core+0x9c1/0x17f0 [ 1895.324232][ C1] handle_softirqs+0x27d/0x820 [ 1895.329629][ C1] __irq_exit_rcu+0xd3/0x190 [ 1895.334851][ C1] irq_exit_rcu+0x9/0x20 [ 1895.339762][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1895.345948][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1895.352500][ C1] lock_acquire+0x208/0x420 [ 1895.357579][ C1] __pte_offset_map+0x48/0x280 [ 1895.362913][ C1] __pte_offset_map_lock+0x47/0x1d0 [ 1895.368685][ C1] copy_page_range+0xf75/0x3700 [ 1895.374106][ C1] copy_mm+0x1751/0x1e30 [ 1895.378903][ C1] copy_process+0x16c9/0x3da0 [ 1895.384145][ C1] kernel_clone+0x24b/0x8a0 [ 1895.389216][ C1] __x64_sys_clone+0x1b7/0x230 [ 1895.394563][ C1] do_syscall_64+0x55/0xb0 [ 1895.399541][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1895.405990][ C1] [ 1895.405990][ C1] other info that might help us debug this: [ 1895.405990][ C1] [ 1895.416363][ C1] Possible unsafe locking scenario: [ 1895.416363][ C1] [ 1895.423925][ C1] CPU0 CPU1 [ 1895.429315][ C1] ---- ---- [ 1895.434698][ C1] lock(stock_lock); [ 1895.438716][ C1] lock(&trie->lock); [ 1895.445349][ C1] lock(stock_lock); [ 1895.451965][ C1] lock(&trie->lock); [ 1895.456063][ C1] [ 1895.456063][ C1] *** DEADLOCK *** [ 1895.456063][ C1] [ 1895.464254][ C1] 8 locks held by syz-executor/29549: [ 1895.469652][ C1] #0: ffffffff8d1d4530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x298/0x1e30 [ 1895.478583][ C1] #1: ffff88807da51e20 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 1895.487960][ C1] #2: ffff88807ca6baa0 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 1895.497769][ C1] #3: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 1895.507479][ C1] #4: ffffffff8d131ec0 (rcu_callback){....}-{0:0}, at: rcu_core+0x951/0x17f0 [ 1895.516396][ C1] #5: ffffffff8cfd2f40 (put_task_map-wait-type-override){+...}-{3:3}, at: delayed_put_task_struct+0xe3/0x2a0 [ 1895.528092][ C1] #6: ffff8880b8f37de8 (stock_lock){-.-.}-{2:2}, at: mod_objcg_state+0x101/0x8c0 [ 1895.537355][ C1] #7: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0 [ 1895.546739][ C1] [ 1895.546739][ C1] stack backtrace: [ 1895.552663][ C1] CPU: 1 PID: 29549 Comm: syz-executor Not tainted syzkaller #0 [ 1895.560341][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1895.570509][ C1] Call Trace: [ 1895.573812][ C1] [ 1895.576682][ C1] dump_stack_lvl+0x18c/0x250 [ 1895.581494][ C1] ? load_image+0x420/0x420 [ 1895.586043][ C1] ? show_regs_print_info+0x20/0x20 [ 1895.591301][ C1] ? print_circular_bug+0x12b/0x1a0 [ 1895.596542][ C1] check_noncircular+0x2fc/0x400 [ 1895.601513][ C1] ? print_deadlock_bug+0x5d0/0x5d0 [ 1895.606912][ C1] ? lockdep_lock+0xf5/0x230 [ 1895.611570][ C1] ? check_noncircular+0x18a/0x400 [ 1895.616715][ C1] ? _find_first_zero_bit+0xd6/0x100 [ 1895.622054][ C1] __lock_acquire+0x37ef/0x7d80 [ 1895.626989][ C1] ? perf_trace_buf_alloc+0x131/0x290 [ 1895.632503][ C1] ? verify_lock_unused+0x140/0x140 [ 1895.637763][ C1] ? perf_trace_lock_acquire+0x1a7/0x400 [ 1895.643525][ C1] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1895.650171][ C1] lock_acquire+0x19e/0x420 [ 1895.654716][ C1] ? trie_delete_elem+0x94/0x630 [ 1895.659872][ C1] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1895.666922][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1895.672356][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 1895.677677][ C1] ? trie_delete_elem+0x94/0x630 [ 1895.682649][ C1] ? _raw_spin_lock+0x40/0x40 [ 1895.687363][ C1] ? __rwlock_init+0x150/0x150 [ 1895.692182][ C1] trie_delete_elem+0x94/0x630 [ 1895.697044][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1895.702560][ C1] trace_call_bpf+0x333/0x6c0 [ 1895.707301][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 1895.712113][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 1895.716973][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1895.722331][ C1] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1895.728526][ C1] ? mark_lock+0x94/0x320 [ 1895.732889][ C1] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1895.738567][ C1] perf_trace_lock_acquire+0x342/0x400 [ 1895.744067][ C1] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1895.750776][ C1] ? verify_lock_unused+0x140/0x140 [ 1895.756003][ C1] ? perf_trace_lock_acquire+0x342/0x400 [ 1895.761667][ C1] lock_acquire+0x3ef/0x420 [ 1895.766209][ C1] ? mod_objcg_mlstate+0x8c/0x320 [ 1895.771359][ C1] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1895.777983][ C1] ? mark_lock+0x94/0x320 [ 1895.782349][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1895.787792][ C1] mod_objcg_mlstate+0xad/0x320 [ 1895.792704][ C1] ? mod_objcg_mlstate+0x8c/0x320 [ 1895.797785][ C1] ? mod_objcg_mlstate+0x8c/0x320 [ 1895.802841][ C1] ? drain_obj_stock+0x3a0/0x3a0 [ 1895.807811][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1895.812902][ C1] ? percpu_ref_tryget+0x15/0x180 [ 1895.817967][ C1] ? percpu_ref_tryget+0x15/0x180 [ 1895.823027][ C1] mod_objcg_state+0x44b/0x8c0 [ 1895.827908][ C1] ? mod_objcg_state+0x101/0x8c0 [ 1895.832890][ C1] ? __memcg_kmem_uncharge_page+0x290/0x290 [ 1895.838827][ C1] ? bpf_task_storage_free+0x1c/0x290 [ 1895.844242][ C1] memcg_slab_free_hook+0x167/0x200 [ 1895.849474][ C1] ? delayed_put_task_struct+0x10f/0x2a0 [ 1895.855145][ C1] kmem_cache_free+0xe1/0x290 [ 1895.859859][ C1] ? delayed_put_task_struct+0xe3/0x2a0 [ 1895.865538][ C1] delayed_put_task_struct+0x10f/0x2a0 [ 1895.871034][ C1] ? put_task_struct_rcu_user+0xa0/0xa0 [ 1895.876698][ C1] ? rcu_core+0x951/0x17f0 [ 1895.881231][ C1] rcu_core+0x9c1/0x17f0 [ 1895.885526][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1895.890767][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1895.896114][ C1] ? mark_lock+0x94/0x320 [ 1895.900486][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1895.906527][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 1895.912012][ C1] ? lock_chain_count+0x20/0x20 [ 1895.916892][ C1] handle_softirqs+0x27d/0x820 [ 1895.921678][ C1] ? read_tsc+0x9/0x20 [ 1895.925799][ C1] ? ktime_get+0x24b/0x280 [ 1895.930244][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1895.935034][ C1] ? do_softirq+0x1a0/0x1a0 [ 1895.939835][ C1] __irq_exit_rcu+0xd3/0x190 [ 1895.944476][ C1] ? irq_exit_rcu+0x20/0x20 [ 1895.949132][ C1] irq_exit_rcu+0x9/0x20 [ 1895.953817][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1895.960682][ C1] [ 1895.963735][ C1] [ 1895.966807][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1895.973089][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 1895.978693][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1895.998437][ C1] RSP: 0018:ffffc90003a47360 EFLAGS: 00000206 [ 1896.004540][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 56718b00f29dbb00 [ 1896.012557][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 1896.020990][ C1] RBP: ffffc90003a47468 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 1896.028987][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff92000748e78 [ 1896.036980][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 1896.045016][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 1896.050768][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1896.056178][ C1] ? copy_page_range+0x2bb4/0x3700 [ 1896.061332][ C1] __pte_offset_map+0x48/0x280 [ 1896.066124][ C1] ? __pte_offset_map+0x2c/0x280 [ 1896.071086][ C1] __pte_offset_map_lock+0x47/0x1d0 [ 1896.076321][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1896.081765][ C1] copy_page_range+0xf75/0x3700 [ 1896.086761][ C1] ? pfn_valid+0x450/0x450 [ 1896.091214][ C1] ? copy_mm+0x1705/0x1e30 [ 1896.095662][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1896.100719][ C1] ? down_write+0x16e/0x200 [ 1896.105261][ C1] ? up_write+0x1be/0x410 [ 1896.109617][ C1] copy_mm+0x1751/0x1e30 [ 1896.113924][ C1] ? copy_signal+0x640/0x640 [ 1896.118542][ C1] ? lockdep_init_map_type+0x9c/0x8e0 [ 1896.123960][ C1] ? __init_rwsem+0x122/0x160 [ 1896.128688][ C1] ? copy_signal+0x51f/0x640 [ 1896.133314][ C1] copy_process+0x16c9/0x3da0 [ 1896.138116][ C1] ? copy_process+0x98e/0x3da0 [ 1896.142914][ C1] ? __pidfd_prepare+0x140/0x140 [ 1896.147895][ C1] kernel_clone+0x24b/0x8a0 [ 1896.152434][ C1] ? create_io_thread+0x190/0x190 [ 1896.157501][ C1] ? __might_fault+0xaa/0x120 [ 1896.162213][ C1] __x64_sys_clone+0x1b7/0x230 [ 1896.167027][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 1896.172091][ C1] ? lock_chain_count+0x20/0x20 [ 1896.176979][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1896.182211][ C1] do_syscall_64+0x55/0xb0 [ 1896.186852][ C1] ? clear_bhb_loop+0x40/0x90 [ 1896.191589][ C1] ? clear_bhb_loop+0x40/0x90 [ 1896.196323][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1896.202266][ C1] RIP: 0033:0x7f9de1bc6b52 [ 1896.206851][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1896.226502][ C1] RSP: 002b:00007ffc7d63cf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1896.234947][ C1] RAX: ffffffffffffffda RBX: 00007ffc7d63cf60 RCX: 00007f9de1bc6b52 [ 1896.243038][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1896.251058][ C1] RBP: 00007ffc7d63d0ec R08: 0000000000000000 R09: 0000000000000001 [ 1896.259075][ C1] R10: 000055556cd237d0 R11: 0000000000000246 R12: 0000000000000001 [ 1896.267092][ C1] R13: 00000000000927c0 R14: 00000000001cea23 R15: 00007ffc7d63d140 [ 1896.275129][ C1]