last executing test programs: 9m38.269923531s ago: executing program 3 (id=215): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 9m38.048641435s ago: executing program 1 (id=218): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000080)=r0}, 0x20) close(0x3) 9m37.864642198s ago: executing program 2 (id=219): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf81"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 9m37.75643141s ago: executing program 1 (id=221): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 9m37.589775312s ago: executing program 1 (id=222): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 9m37.589524242s ago: executing program 3 (id=223): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r3, 0x8) 9m37.572809062s ago: executing program 2 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r0, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 9m37.468778894s ago: executing program 2 (id=226): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0xfffffffc, 0x0, 0x2000000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x2) 9m37.340493076s ago: executing program 1 (id=227): socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c", 0x1f}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb2, 0x2, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0xc42a, 0x3, 0x7, 0x5, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00 '], 0x33fe0) 9m37.338610316s ago: executing program 3 (id=235): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x80}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2}) 9m37.232477398s ago: executing program 3 (id=229): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 9m37.207736058s ago: executing program 2 (id=230): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 9m36.825703194s ago: executing program 1 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, &(0x7f00000002c0), &(0x7f0000000380)=""/107}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 9m36.786178605s ago: executing program 2 (id=233): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x17) 9m36.689233726s ago: executing program 3 (id=234): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 9m36.339633951s ago: executing program 2 (id=236): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 9m36.094256096s ago: executing program 32 (id=236): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 9m36.081861006s ago: executing program 1 (id=237): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 9m35.845132619s ago: executing program 33 (id=237): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 9m35.838902909s ago: executing program 3 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 9m35.83855551s ago: executing program 34 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 9m22.276093782s ago: executing program 4 (id=288): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0}, 0x0) 9m22.036927176s ago: executing program 4 (id=282): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 9m19.705665443s ago: executing program 4 (id=286): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], 0x0, 0x5e, 0x0, 0x1}, 0x28) 9m19.29055013s ago: executing program 4 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m18.907682066s ago: executing program 4 (id=293): socketpair(0x28, 0x5, 0x23, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x336}, 0x24000044) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x485, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000440)=@nl=@proc, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/202, 0xca}, {0x0}], 0x2}, 0x40012022) 9m17.93732439s ago: executing program 4 (id=295): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1, 0x4}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 9m17.877380942s ago: executing program 35 (id=295): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1, 0x4}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 8.060812719s ago: executing program 7 (id=3233): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="bdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/17], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) 7.438656809s ago: executing program 7 (id=3236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)={r1}) 6.869162348s ago: executing program 7 (id=3241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1}, 0x40012100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 6.564686264s ago: executing program 5 (id=3244): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0xb47, r1}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x510, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000080)={'wlan1\x00'}) 5.921732344s ago: executing program 6 (id=3255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20c282, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) close(r0) socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 5.828992796s ago: executing program 0 (id=3247): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003d) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000009500000000000000150511203fb0882e4d2daf4d63c71dd50a282e707847831514b53142a30e4ed5c31d601563438e1c516544fc658f1244f1567b811985d944c76ca91fea9db4ea826b053069a291b3f309e74aba82192ea57289673ca6453a02ea143410c30a3236daf9a64df983b280d79f3d32a937764789ae7c14901a8b390f816d39ab47983ac9e5437639f1"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.53040862s ago: executing program 0 (id=3249): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1}, 0x0) 5.222743555s ago: executing program 0 (id=3250): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="bdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/17], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) 4.712900854s ago: executing program 0 (id=3251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)={r1}) 3.915768296s ago: executing program 5 (id=3252): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.907472756s ago: executing program 7 (id=3253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdb, 0x6}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b706000000000000008100", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.68150562s ago: executing program 0 (id=3254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="374292e7f7ef"}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000400)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0)U\xaaC\xc388\x13C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xcd\xfd\xee\x86\x1a\xc8t\xe1\';\x19\xcfL\x98\x99\x0fqE*\x89\x03\xe6\xe1\xab?\xa5\xa0k\xa3x\xdc\b\xa7\xe4\x8c\x92^\xe0\x8eG8\xc8\x03\xf5\\\xd4\x06\x9a)\'\x9d\xe9Hh\x886\x9a\xd1\x82\x87\x16\x03\xafC\x1e\xb8\r\xa1\xacWC\x00\x00\x83k\x85}\xdd\"\xc6\x9f\xe7\x06\n\xd7\xae\f\xd5\xc8\xb8Y\xdbX\a\x0e\x86W\x1d\x8d]N_|G\xc6\xbei\x8d\x14\x01\x01\xa5\xa7\xd7}T\xd8,6\xe3\xaa\xe2\xe1B<\xfb\xe2M\x15\xffO0\xd3\xa9R)Z|$\x04V\xe1\x8e=w\xaa\x95\xc3{\x02\xa6\x98\xf4z\x94\x85\x9f4Q\xcf\xbbz]v\x9e\x00\xdcI\xdb\x01\xd2\xb7f\xe2d\xc3L\x01\xa9\x14U3\xa4\x03\x83\x8dw?u\xa8\x196I\xde\xa1\xe6\xfc=W\xe9\xa8\xed\x06_\x9b\xa2G\xe2\xc3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xc2\x06;\xdcC\xc3L\x82rG\xc8a\xbb\xc3\xd3\xa2g\xa4\x83\x9d\xecc\xc4\b\xebN\x97\x99\v\xca\x05\xfe\xd0\xde\x01\f\xf2EL\xed7@t@\xa9b\x16\xdctLd2C\xf8e\x9b\x91\xc9\xc3\x8f\x95\xab\xdc\xe1\xb6\xd4\x18\xa6K\\\xf5l\xb2;\x1b\xe5Xw\xe93vm\x9d\xbd\x86*\xd1\xd1\xd6\x1f\xfcX\xb6tT^j\x9a\xa4U\xb2\xc6d\xea\x8d\xbb\"\xe1 \xe3k\xa6\x8d\xa8\xae)\x06.V\x1c\xd4\xdc\x85\xcfUF%\xcf+\tlsr\xaf\t\xe3xd\xdeu\x0eq\x8dr\xa0\xb6%;\x95\xd5\xe6R\xe8\xc5\x04U\xd2T\xf2:\xa1\xf8\x9c\xb6\x94\xe3\xc0\xebu-\xb6\x9e\x92\t\xa8t\x90\'\x87\xe7\x7fN\xb6\xc4') 3.625542731s ago: executing program 6 (id=3256): syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)="8d341d", 0x3}], 0x1}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2.950069122s ago: executing program 5 (id=3257): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) close(r1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000002c0), &(0x7f00000003c0)=r0}, 0x20) 2.949845082s ago: executing program 6 (id=3258): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x23, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 2.792295035s ago: executing program 5 (id=3259): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x1) 743.821897ms ago: executing program 5 (id=3260): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 670.975319ms ago: executing program 5 (id=3261): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="bdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/17], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) 670.800789ms ago: executing program 7 (id=3262): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0xb47, r1}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x510, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000080)={'wlan1\x00'}) 665.557459ms ago: executing program 6 (id=3269): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x1) 319.826825ms ago: executing program 0 (id=3263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1}, 0x40012100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 319.574275ms ago: executing program 6 (id=3264): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)={r1}) 247.728006ms ago: executing program 7 (id=3265): syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)="8d341d", 0x3}], 0x1}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 6 (id=3266): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) kernel console output (not intermixed with test programs): mode [ 130.664288][ T6408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.672058][ T6408] Cannot create hsr debugfs directory [ 130.757220][ T6410] hsr_slave_0: entered promiscuous mode [ 130.764804][ T6410] hsr_slave_1: entered promiscuous mode [ 130.772623][ T6410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.780875][ T6410] Cannot create hsr debugfs directory [ 130.937921][ T5792] Bluetooth: hci0: command tx timeout [ 130.962798][ T6406] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.997474][ T6406] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.018149][ T5792] Bluetooth: hci1: command tx timeout [ 131.037039][ T6406] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.055724][ T6406] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.106900][ T5792] Bluetooth: hci3: command tx timeout [ 131.207048][ T6408] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 131.235545][ T6408] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 131.246852][ T6408] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 131.257816][ T6408] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 131.363790][ T6410] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.382691][ T6410] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 131.402774][ T6410] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.424258][ T6410] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.513547][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.577534][ T6406] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.596923][ T6408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.616941][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.624170][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.642368][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.650287][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.688072][ T6408] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.729394][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.736672][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.766032][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.773270][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.808658][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.893825][ T6410] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.939527][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.946755][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.978511][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.985768][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.351572][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.449016][ T6408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.587510][ T6410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.971175][ T6406] veth0_vlan: entered promiscuous mode [ 133.008385][ T6406] veth1_vlan: entered promiscuous mode [ 133.018776][ T5792] Bluetooth: hci0: command tx timeout [ 133.098627][ T5794] Bluetooth: hci1: command tx timeout [ 133.129877][ T6408] veth0_vlan: entered promiscuous mode [ 133.158378][ T6408] veth1_vlan: entered promiscuous mode [ 133.183639][ T6406] veth0_macvtap: entered promiscuous mode [ 133.192249][ T5792] Bluetooth: hci3: command tx timeout [ 133.215650][ T6406] veth1_macvtap: entered promiscuous mode [ 133.271802][ T6410] veth0_vlan: entered promiscuous mode [ 133.287076][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.298811][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.309585][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.320094][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.330084][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.341129][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.351063][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.361948][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.374125][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.395683][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.407214][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.417730][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.429364][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.439684][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.450373][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.460393][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.471314][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.482787][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.506224][ T6408] veth0_macvtap: entered promiscuous mode [ 133.519711][ T6406] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.529830][ T6406] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.539502][ T6406] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.549129][ T6406] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.565086][ T6410] veth1_vlan: entered promiscuous mode [ 133.575897][ T6408] veth1_macvtap: entered promiscuous mode [ 133.656153][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.672521][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.683349][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.696141][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.706431][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.716961][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.727158][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.743488][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.743723][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.750763][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.770054][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.782059][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.796126][ T6408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.852329][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.863035][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.873061][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.884058][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.894279][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.906078][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.916209][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.926988][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.937428][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.948245][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.960742][ T6408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.973313][ T6408] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.982939][ T6408] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.994304][ T6408] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.005009][ T6408] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.048615][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.056596][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.063030][ T6410] veth0_macvtap: entered promiscuous mode [ 134.097009][ T6410] veth1_macvtap: entered promiscuous mode [ 134.202275][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.212427][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.220602][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.239967][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.250852][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.251721][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.260917][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.260936][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.260947][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.260961][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.260972][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.260985][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.261013][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.261026][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.261040][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.261054][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.263354][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.407346][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.419699][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.430771][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.442524][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.452668][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.466598][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.476998][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.487728][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.497593][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.508605][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.519791][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.530664][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.544894][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.592259][ T6410] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.604145][ T6410] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.613561][ T6410] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.623702][ T6410] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.640621][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.649476][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.849915][ T6498] syzkaller1: entered promiscuous mode [ 134.855561][ T6498] syzkaller1: entered allmulticast mode [ 134.880195][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.888732][ T6498] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 134.888760][ T6498] syzkaller1: Linktype set failed because interface is up [ 134.909203][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.079369][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.087280][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.100086][ T5792] Bluetooth: hci0: command tx timeout [ 135.188378][ T5792] Bluetooth: hci1: command tx timeout [ 135.258668][ T5792] Bluetooth: hci3: command tx timeout [ 138.081704][ T6522] netlink: 176 bytes leftover after parsing attributes in process `syz.0.261'. [ 138.229546][ T6526] syzkaller1: entered promiscuous mode [ 138.235115][ T6526] syzkaller1: entered allmulticast mode [ 138.267677][ T6526] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 138.285615][ T6526] syzkaller1: Linktype set failed because interface is up [ 138.718727][ T6538] netlink: 156 bytes leftover after parsing attributes in process `syz.5.266'. [ 139.153596][ T6549] netlink: 'syz.5.273': attribute type 25 has an invalid length. [ 139.166754][ T6549] netlink: 'syz.5.273': attribute type 28 has an invalid length. [ 139.399565][ T6554] netlink: 'syz.4.285': attribute type 25 has an invalid length. [ 139.407396][ T6554] netlink: 'syz.4.285': attribute type 28 has an invalid length. [ 139.508115][ T6558] syzkaller1: entered promiscuous mode [ 139.517100][ T6558] syzkaller1: entered allmulticast mode [ 139.555602][ T5776] syzkaller1: tun_net_xmit 70 [ 139.567539][ T6558] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 139.573702][ T6558] syzkaller1: Linktype set failed because interface is up [ 139.901072][ T6566] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 139.941996][ T6566] netlink: 'syz.4.282': attribute type 4 has an invalid length. [ 139.951784][ T6566] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.282'. [ 143.503864][ T3430] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.714159][ T3430] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.900321][ T3430] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.070909][ T3430] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.829018][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.885889][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.906023][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.919287][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.946412][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.959261][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.004193][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.018714][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.036319][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.045859][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.062872][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.077856][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.029318][ T5792] Bluetooth: hci1: command tx timeout [ 147.193132][ T5792] Bluetooth: hci3: command tx timeout [ 147.246137][ T6605] chnl_net:caif_netlink_parms(): no params data found [ 147.485507][ T6610] chnl_net:caif_netlink_parms(): no params data found [ 147.634792][ T3430] hsr_slave_0: left promiscuous mode [ 147.645572][ T3430] hsr_slave_1: left promiscuous mode [ 147.661563][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.682864][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.698671][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.706300][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.723346][ T3430] bridge_slave_1: left allmulticast mode [ 147.729620][ T3430] bridge_slave_1: left promiscuous mode [ 147.737109][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.754724][ T3430] bridge_slave_0: left allmulticast mode [ 147.760801][ T3430] bridge_slave_0: left promiscuous mode [ 147.766665][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.834323][ T3430] veth1_macvtap: left promiscuous mode [ 147.848240][ T3430] veth0_macvtap: left promiscuous mode [ 147.854006][ T3430] veth1_vlan: left promiscuous mode [ 147.870587][ T3430] veth0_vlan: left promiscuous mode [ 148.593019][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 148.650349][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 148.692643][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.739852][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.112421][ T5792] Bluetooth: hci1: command tx timeout [ 149.264777][ T5792] Bluetooth: hci3: command tx timeout [ 149.274720][ T3430] bond0 (unregistering): Released all slaves [ 149.467518][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.477527][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.485887][ T6605] bridge_slave_0: entered allmulticast mode [ 149.493528][ T6605] bridge_slave_0: entered promiscuous mode [ 149.503487][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.513865][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.521936][ T6605] bridge_slave_1: entered allmulticast mode [ 149.529420][ T6605] bridge_slave_1: entered promiscuous mode [ 149.689451][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.702511][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.711542][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.719642][ T6610] bridge_slave_0: entered allmulticast mode [ 149.727231][ T6610] bridge_slave_0: entered promiscuous mode [ 149.772061][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.798030][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.805209][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.838829][ T6610] bridge_slave_1: entered allmulticast mode [ 149.846556][ T6610] bridge_slave_1: entered promiscuous mode [ 150.027516][ T6605] team0: Port device team_slave_0 added [ 150.041222][ T6605] team0: Port device team_slave_1 added [ 150.073983][ T6610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.106462][ T6610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.180349][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.187370][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.214201][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.260048][ T6610] team0: Port device team_slave_0 added [ 150.271091][ T6610] team0: Port device team_slave_1 added [ 150.285785][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.292904][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.320644][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.462337][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.470700][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.498470][ T6610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.514863][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.522318][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.561210][ T6610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.597299][ T6605] hsr_slave_0: entered promiscuous mode [ 150.613580][ T6605] hsr_slave_1: entered promiscuous mode [ 150.624080][ T6605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.633059][ T6605] Cannot create hsr debugfs directory [ 150.800970][ T6610] hsr_slave_0: entered promiscuous mode [ 150.807771][ T6610] hsr_slave_1: entered promiscuous mode [ 150.814240][ T6610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.822061][ T6610] Cannot create hsr debugfs directory [ 150.912376][ T3430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.007547][ T3430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.132809][ T3430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.178142][ T5792] Bluetooth: hci1: command tx timeout [ 151.276073][ T3430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.337868][ T5792] Bluetooth: hci3: command tx timeout [ 152.177551][ T6610] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 152.267024][ T6610] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 152.279492][ T6610] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 152.313307][ T6610] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 152.648666][ T6605] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.692931][ T6605] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.775816][ T6605] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 152.798958][ T6605] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.036530][ T6610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.062778][ T3430] hsr_slave_0: left promiscuous mode [ 153.070545][ T3430] hsr_slave_1: left promiscuous mode [ 153.077129][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.084842][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.095152][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.103706][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.114208][ T3430] bridge_slave_1: left allmulticast mode [ 153.120381][ T3430] bridge_slave_1: left promiscuous mode [ 153.126166][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.136375][ T3430] bridge_slave_0: left allmulticast mode [ 153.143590][ T3430] bridge_slave_0: left promiscuous mode [ 153.149895][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.180479][ T3430] veth1_macvtap: left promiscuous mode [ 153.186148][ T3430] veth0_macvtap: left promiscuous mode [ 153.192158][ T3430] veth1_vlan: left promiscuous mode [ 153.197529][ T3430] veth0_vlan: left promiscuous mode [ 153.261375][ T5792] Bluetooth: hci1: command tx timeout [ 153.418708][ T5792] Bluetooth: hci3: command tx timeout [ 153.849082][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 153.900252][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 153.947797][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.997362][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.455981][ T3430] bond0 (unregistering): Released all slaves [ 154.577630][ T6610] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.610709][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.618162][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.656772][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.664174][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.803482][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.911511][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.971451][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.979056][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.001026][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.008283][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.111387][ T6605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.135422][ T6605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.419560][ T6610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.551541][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.000063][ T6610] veth0_vlan: entered promiscuous mode [ 156.039001][ T6610] veth1_vlan: entered promiscuous mode [ 156.131123][ T6610] veth0_macvtap: entered promiscuous mode [ 156.172425][ T6610] veth1_macvtap: entered promiscuous mode [ 156.216023][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.229679][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.240211][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.251308][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.264858][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.275772][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.286583][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.298229][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.309861][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.320713][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.335223][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.365818][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.377471][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.405577][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.416310][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.426818][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.437531][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.447497][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.464722][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.474711][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.485715][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.507940][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.525357][ T6605] veth0_vlan: entered promiscuous mode [ 156.566836][ T6610] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.588818][ T6610] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.597597][ T6610] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.608974][ T6610] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.661550][ T6605] veth1_vlan: entered promiscuous mode [ 156.761626][ T6605] veth0_macvtap: entered promiscuous mode [ 156.794857][ T6605] veth1_macvtap: entered promiscuous mode [ 156.816831][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.849412][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.872217][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.890298][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.900778][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.916417][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.926712][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.938403][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.948882][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.961340][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.971409][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.982053][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.992647][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.003572][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.015432][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.053376][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.064542][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.075070][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.085778][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.095678][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.107599][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.117649][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.128736][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.138959][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.149977][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.161506][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.174849][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.189250][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.204491][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.213358][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.220413][ T6605] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.230124][ T6605] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.239344][ T6605] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.249307][ T6605] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.514227][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.547831][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.490602][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.554774][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.597535][ T6802] netlink: 60 bytes leftover after parsing attributes in process `syz.6.316'. [ 159.635481][ T6802] netlink: 60 bytes leftover after parsing attributes in process `syz.6.316'. [ 159.681060][ T6798] netlink: 60 bytes leftover after parsing attributes in process `syz.6.316'. [ 159.738736][ T6806] netlink: 60 bytes leftover after parsing attributes in process `syz.6.316'. [ 190.538808][ T5792] Bluetooth: hci0: Dropping invalid advertising data [ 190.546909][ T5792] Bluetooth: hci0: unknown advertising packet type: 0xff [ 190.546942][ T5792] Bluetooth: hci0: Malformed LE Event: 0x02 [ 190.688996][ T5792] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 192.479008][ T7063] netlink: 172 bytes leftover after parsing attributes in process `syz.0.439'. [ 192.707858][ T5792] Bluetooth: hci3: command tx timeout [ 193.023884][ T7089] syzkaller0: entered promiscuous mode [ 193.037157][ T7089] syzkaller0: entered allmulticast mode [ 193.068351][ T7089] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 195.191487][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.197917][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.550080][ T7104] netlink: 172 bytes leftover after parsing attributes in process `syz.6.446'. [ 197.656973][ T7127] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.452'. [ 197.871388][ T7132] syzkaller0: entered promiscuous mode [ 197.877029][ T7132] syzkaller0: entered allmulticast mode [ 198.066383][ T7139] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.460'. [ 198.089347][ T7137] netlink: 172 bytes leftover after parsing attributes in process `syz.5.459'. [ 199.723495][ T7160] syzkaller0: entered promiscuous mode [ 199.738062][ T7160] syzkaller0: entered allmulticast mode [ 200.729914][ T7180] netlink: 'syz.5.479': attribute type 1 has an invalid length. [ 200.778586][ T7180] netlink: 'syz.5.479': attribute type 4 has an invalid length. [ 200.828178][ T7180] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.479'. [ 201.770606][ T7198] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.484'. [ 202.321657][ T5792] Bluetooth: hci3: Malformed LE Event: 0x0d [ 203.449375][ T7235] syz.7.501 uses obsolete (PF_INET,SOCK_PACKET) [ 204.620195][ T7269] netlink: 'syz.7.516': attribute type 3 has an invalid length. [ 204.644353][ T7269] netlink: 'syz.7.516': attribute type 4 has an invalid length. [ 204.671381][ T7269] netlink: 'syz.7.516': attribute type 7 has an invalid length. [ 204.692875][ T7269] netlink: 'syz.7.516': attribute type 8 has an invalid length. [ 204.702948][ T7269] netlink: 'syz.7.516': attribute type 7 has an invalid length. [ 204.713155][ T7269] netlink: 198048 bytes leftover after parsing attributes in process `syz.7.516'. [ 205.323175][ T7275] sock: sock_timestamping_bind_phc: sock not bind to device [ 205.499336][ T7283] syz.0.519: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 205.528785][ T7283] CPU: 0 PID: 7283 Comm: syz.0.519 Not tainted 6.6.99-syzkaller #0 [ 205.536865][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.547245][ T7283] Call Trace: [ 205.550586][ T7283] [ 205.553584][ T7283] dump_stack_lvl+0x16c/0x230 [ 205.558412][ T7283] ? show_regs_print_info+0x20/0x20 [ 205.563683][ T7283] ? load_image+0x3b0/0x3b0 [ 205.568254][ T7283] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 205.574915][ T7283] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 205.581746][ T7283] warn_alloc+0x210/0x300 [ 205.586139][ T7283] ? stack_trace_save+0x9c/0xe0 [ 205.591112][ T7283] ? zone_watermark_ok_safe+0x230/0x230 [ 205.596795][ T7283] ? kasan_set_track+0x5f/0x70 [ 205.601776][ T7283] ? kasan_set_track+0x4e/0x70 [ 205.606677][ T7283] ? __kasan_kmalloc+0x8f/0xa0 [ 205.611513][ T7283] ? xsk_init_queue+0xb0/0x110 [ 205.616433][ T7283] ? xsk_setsockopt+0x4db/0x6f0 [ 205.621407][ T7283] ? do_sock_setsockopt+0x175/0x1a0 [ 205.626671][ T7283] ? __x64_sys_setsockopt+0x184/0x200 [ 205.632083][ T7283] __vmalloc_node_range+0x126/0x1320 [ 205.637425][ T7283] ? free_vm_area+0x50/0x50 [ 205.641989][ T7283] vmalloc_user+0x74/0x80 [ 205.646352][ T7283] ? xskq_create+0xbf/0x170 [ 205.650983][ T7283] xskq_create+0xbf/0x170 [ 205.655355][ T7283] xsk_init_queue+0xb0/0x110 [ 205.660075][ T7283] xsk_setsockopt+0x4db/0x6f0 [ 205.664872][ T7283] ? xsk_poll+0x670/0x670 [ 205.669271][ T7283] ? __fget_files+0x28/0x4d0 [ 205.673918][ T7283] ? aa_sock_opt_perm+0x74/0x100 [ 205.678920][ T7283] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 205.684531][ T7283] ? security_socket_setsockopt+0x7e/0xa0 [ 205.690376][ T7283] ? xsk_poll+0x670/0x670 [ 205.694860][ T7283] do_sock_setsockopt+0x175/0x1a0 [ 205.700025][ T7283] ? __fdget+0x180/0x210 [ 205.704424][ T7283] __x64_sys_setsockopt+0x184/0x200 [ 205.709670][ T7283] do_syscall_64+0x55/0xb0 [ 205.714117][ T7283] ? clear_bhb_loop+0x40/0x90 [ 205.718822][ T7283] ? clear_bhb_loop+0x40/0x90 [ 205.723699][ T7283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.729737][ T7283] RIP: 0033:0x7f09b078e9a9 [ 205.734192][ T7283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.754079][ T7283] RSP: 002b:00007f09b15a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.762571][ T7283] RAX: ffffffffffffffda RBX: 00007f09b09b6080 RCX: 00007f09b078e9a9 [ 205.770586][ T7283] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 205.778811][ T7283] RBP: 00007f09b0810d69 R08: 0000000000000004 R09: 0000000000000000 [ 205.787526][ T7283] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 205.795632][ T7283] R13: 0000000000000001 R14: 00007f09b09b6080 R15: 00007ffd47a10168 [ 205.803651][ T7283] [ 205.867957][ T7283] Mem-Info: [ 205.876619][ T7283] active_anon:4330 inactive_anon:0 isolated_anon:0 [ 205.876619][ T7283] active_file:884 inactive_file:39872 isolated_file:0 [ 205.876619][ T7283] unevictable:768 dirty:91 writeback:0 [ 205.876619][ T7283] slab_reclaimable:10390 slab_unreclaimable:106587 [ 205.876619][ T7283] mapped:23787 shmem:1371 pagetables:450 [ 205.876619][ T7283] sec_pagetables:0 bounce:0 [ 205.876619][ T7283] kernel_misc_reclaimable:0 [ 205.876619][ T7283] free:1344393 free_pcp:11619 free_cma:0 [ 205.933423][ T7283] Node 0 active_anon:17320kB inactive_anon:0kB active_file:3536kB inactive_file:159284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95148kB dirty:360kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11900kB pagetables:1700kB sec_pagetables:0kB all_unreclaimable? no [ 205.968638][ T7283] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 206.026698][ T7283] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.073245][ T7283] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 206.079686][ T7283] Node 0 DMA32 free:1464532kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:17276kB inactive_anon:0kB active_file:3536kB inactive_file:157948kB unevictable:1536kB writepending:360kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:26872kB local_pcp:17196kB free_cma:0kB [ 206.121023][ T7283] lowmem_reserve[]: 0 0 1 1 1 [ 206.174063][ T7283] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.216291][ T7283] lowmem_reserve[]: 0 0 0 0 0 [ 206.223769][ T7283] Node 1 Normal free:3897676kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19808kB local_pcp:7904kB free_cma:0kB [ 206.295830][ T7283] lowmem_reserve[]: 0 0 0 0 0 [ 206.315142][ T7283] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.363282][ T7283] Node 0 DMA32: 897*4kB (UME) 943*8kB (UME) 536*16kB (UME) 97*32kB (UME) 77*64kB (UME) 23*128kB (UME) 4*256kB (UM) 2*512kB (UM) 0*1024kB 1*2048kB (U) 349*4096kB (M) = 1464284kB [ 206.388029][ T7283] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 206.407984][ T7283] Node 1 Normal: 255*4kB (UME) 64*8kB (UME) 45*16kB (UME) 92*32kB (UME) 24*64kB (UE) 6*128kB (UME) 0*256kB 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3897676kB [ 206.427206][ T7283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.437040][ T7283] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.448056][ T7283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.458247][ T7283] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.483328][ T7283] 42127 total pagecache pages [ 206.488526][ T7283] 0 pages in swap cache [ 206.492811][ T7283] Free swap = 124996kB [ 206.497000][ T7283] Total swap = 124996kB [ 206.502086][ T7283] 2097051 pages RAM [ 206.506050][ T7283] 0 pages HighMem/MovableOnly [ 206.515064][ T7283] 416137 pages reserved [ 206.519771][ T7283] 0 pages cma reserved [ 206.894143][ T7305] netlink: 'syz.0.530': attribute type 3 has an invalid length. [ 206.902941][ T7305] netlink: 'syz.0.530': attribute type 4 has an invalid length. [ 206.916138][ T7305] netlink: 'syz.0.530': attribute type 7 has an invalid length. [ 206.933596][ T7305] netlink: 'syz.0.530': attribute type 8 has an invalid length. [ 206.947402][ T7305] netlink: 'syz.0.530': attribute type 7 has an invalid length. [ 206.969651][ T7305] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.530'. [ 207.258120][ T7317] syzkaller0: entered promiscuous mode [ 207.263813][ T7317] syzkaller0: entered allmulticast mode [ 207.512840][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 209.411518][ T7327] netlink: 'syz.6.536': attribute type 25 has an invalid length. [ 209.906141][ T7343] netlink: 'syz.6.543': attribute type 3 has an invalid length. [ 209.947853][ T7343] netlink: 'syz.6.543': attribute type 4 has an invalid length. [ 209.955619][ T7343] netlink: 'syz.6.543': attribute type 7 has an invalid length. [ 209.976320][ T7343] netlink: 'syz.6.543': attribute type 8 has an invalid length. [ 209.995202][ T7343] netlink: 198048 bytes leftover after parsing attributes in process `syz.6.543'. [ 210.871605][ T1078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.117633][ T1078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.167280][ T7364] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.562'. [ 211.456259][ T1078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.690404][ T1078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.704770][ T7384] netlink: 198048 bytes leftover after parsing attributes in process `syz.5.560'. [ 212.644731][ T7407] validate_nla: 8 callbacks suppressed [ 212.644782][ T7407] netlink: 'syz.7.569': attribute type 3 has an invalid length. [ 212.684106][ T7407] netlink: 'syz.7.569': attribute type 15 has an invalid length. [ 212.712509][ T7407] netlink: 11254 bytes leftover after parsing attributes in process `syz.7.569'. [ 214.039161][ T1078] hsr_slave_0: left promiscuous mode [ 214.053056][ T1078] hsr_slave_1: left promiscuous mode [ 214.064272][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.078026][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.086422][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.094850][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.103474][ T1078] bridge_slave_1: left allmulticast mode [ 214.111840][ T1078] bridge_slave_1: left promiscuous mode [ 214.117634][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.130288][ T1078] bridge_slave_0: left allmulticast mode [ 214.136126][ T1078] bridge_slave_0: left promiscuous mode [ 214.148738][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.186203][ T1078] veth1_macvtap: left promiscuous mode [ 214.191953][ T1078] veth0_macvtap: left promiscuous mode [ 214.197956][ T1078] veth1_vlan: left promiscuous mode [ 214.203370][ T1078] veth0_vlan: left promiscuous mode [ 215.038990][ T1078] team0 (unregistering): Port device team_slave_1 removed [ 215.094724][ T1078] team0 (unregistering): Port device team_slave_0 removed [ 215.151096][ T1078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.226477][ T1078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.803905][ T1078] bond0 (unregistering): Released all slaves [ 215.873175][ T7448] netlink: 'syz.6.589': attribute type 3 has an invalid length. [ 215.882163][ T7448] netlink: 'syz.6.589': attribute type 15 has an invalid length. [ 215.890261][ T7448] netlink: 11254 bytes leftover after parsing attributes in process `syz.6.589'. [ 217.647519][ T7481] netlink: 'syz.7.602': attribute type 3 has an invalid length. [ 217.673164][ T7481] netlink: 'syz.7.602': attribute type 15 has an invalid length. [ 217.698371][ T7481] netlink: 11254 bytes leftover after parsing attributes in process `syz.7.602'. [ 217.992240][ T7494] netlink: 'syz.0.618': attribute type 3 has an invalid length. [ 218.001533][ T7494] netlink: 'syz.0.618': attribute type 15 has an invalid length. [ 218.010534][ T7494] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.618'. [ 218.887115][ T7510] netlink: 'syz.0.621': attribute type 3 has an invalid length. [ 218.925557][ T7510] netlink: 'syz.0.621': attribute type 15 has an invalid length. [ 218.934947][ T7510] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.621'. [ 220.136049][ T7533] syzkaller0: entered promiscuous mode [ 220.147830][ T7533] syzkaller0: entered allmulticast mode [ 224.685779][ T7589] syzkaller0: entered promiscuous mode [ 224.706936][ T7589] syzkaller0: entered allmulticast mode [ 228.319324][ T7643] syzkaller0: entered promiscuous mode [ 228.324886][ T7643] syzkaller0: entered allmulticast mode [ 230.728720][ T7665] syzkaller0: entered promiscuous mode [ 230.734442][ T7665] syzkaller0: entered allmulticast mode [ 231.397771][ T7689] syzkaller0: entered promiscuous mode [ 231.415136][ T7689] syzkaller0: entered allmulticast mode [ 231.423913][ T7690] netlink: 'syz.6.685': attribute type 1 has an invalid length. [ 231.443035][ T7690] netlink: 'syz.6.685': attribute type 4 has an invalid length. [ 231.452422][ T7690] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.685'. [ 232.180056][ T7701] syzkaller0: entered promiscuous mode [ 232.185634][ T7701] syzkaller0: entered allmulticast mode [ 232.293306][ T7703] syzkaller0: entered promiscuous mode [ 232.305863][ T7703] syzkaller0: entered allmulticast mode [ 232.643777][ T7716] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 232.657635][ T7716] netlink: 'syz.5.695': attribute type 4 has an invalid length. [ 232.699441][ T7716] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.695'. [ 233.556049][ T7732] syzkaller0: entered promiscuous mode [ 233.578273][ T7732] syzkaller0: entered allmulticast mode [ 234.763552][ T7745] netlink: 'syz.7.710': attribute type 1 has an invalid length. [ 234.789571][ T7745] netlink: 'syz.7.710': attribute type 4 has an invalid length. [ 234.812951][ T7745] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.710'. [ 236.476078][ T1078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.707081][ T1078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.990497][ T1078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.140522][ T1078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.516583][ T1078] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.149017][ T1078] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.392852][ T1078] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.643485][ T1078] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.700336][ T1078] hsr_slave_0: left promiscuous mode [ 244.808845][ T1078] hsr_slave_1: left promiscuous mode [ 244.818527][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.838143][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.883005][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.910630][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.948949][ T1078] bridge_slave_1: left allmulticast mode [ 244.954880][ T1078] bridge_slave_1: left promiscuous mode [ 244.984879][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.051311][ T1078] bridge_slave_0: left allmulticast mode [ 245.057084][ T1078] bridge_slave_0: left promiscuous mode [ 245.073784][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.152667][ T1078] hsr_slave_0: left promiscuous mode [ 245.188161][ T1078] hsr_slave_1: left promiscuous mode [ 245.207987][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.215538][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.248799][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.262862][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.281345][ T1078] bridge_slave_1: left allmulticast mode [ 245.287297][ T1078] bridge_slave_1: left promiscuous mode [ 245.295312][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.364562][ T1078] bridge_slave_0: left allmulticast mode [ 245.388165][ T1078] bridge_slave_0: left promiscuous mode [ 245.394069][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.527991][ T1078] veth1_macvtap: left promiscuous mode [ 245.533668][ T1078] veth0_macvtap: left promiscuous mode [ 245.555572][ T1078] veth1_vlan: left promiscuous mode [ 245.565600][ T1078] veth0_vlan: left promiscuous mode [ 245.614622][ T1078] veth1_macvtap: left promiscuous mode [ 245.628719][ T1078] veth0_macvtap: left promiscuous mode [ 245.634509][ T1078] veth1_vlan: left promiscuous mode [ 245.655998][ T1078] veth0_vlan: left promiscuous mode [ 246.594123][ T1078] team0 (unregistering): Port device team_slave_1 removed [ 246.644313][ T1078] team0 (unregistering): Port device team_slave_0 removed [ 246.691554][ T1078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.745744][ T1078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.306921][ T1078] bond0 (unregistering): Released all slaves [ 247.861590][ T1078] team0 (unregistering): Port device team_slave_1 removed [ 247.917567][ T1078] team0 (unregistering): Port device team_slave_0 removed [ 247.967829][ T1078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.018348][ T1078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.539299][ T1078] bond0 (unregistering): Released all slaves [ 249.081960][ T7965] netlink: 'syz.0.800': attribute type 10 has an invalid length. [ 249.093445][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.800'. [ 249.122519][ T7965] batman_adv: batadv0: Adding interface: vlan1 [ 249.138311][ T7965] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.176200][ T7965] batman_adv: batadv0: Interface activated: vlan1 [ 250.453211][ T7994] netlink: 'syz.5.813': attribute type 10 has an invalid length. [ 250.464170][ T7994] netlink: 40 bytes leftover after parsing attributes in process `syz.5.813'. [ 250.481910][ T7994] batman_adv: batadv0: Adding interface: vlan1 [ 250.500094][ T7994] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.578224][ T7994] batman_adv: batadv0: Interface activated: vlan1 [ 251.468768][ T8006] syzkaller0: entered promiscuous mode [ 251.474755][ T8006] syzkaller0: entered allmulticast mode [ 253.594836][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 255.669914][ T8053] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.834'. [ 255.728248][ T8051] syzkaller0: entered promiscuous mode [ 255.733809][ T8051] syzkaller0: entered allmulticast mode [ 256.623414][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.637769][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.853949][ T8087] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.847'. [ 259.785791][ T8104] syzkaller0: entered promiscuous mode [ 259.804916][ T8104] syzkaller0: entered allmulticast mode [ 264.103856][ T8151] syzkaller0: entered promiscuous mode [ 264.118671][ T8151] syzkaller0: entered allmulticast mode [ 268.729631][ T8194] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.889'. [ 268.938840][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 268.942279][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 272.978846][ T8188] syzkaller0: entered promiscuous mode [ 272.984495][ T8188] syzkaller0: entered allmulticast mode [ 275.071211][ T8226] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.901'. [ 279.741963][ T8250] syzkaller0: entered promiscuous mode [ 279.747527][ T8250] syzkaller0: entered allmulticast mode [ 280.039034][ T8260] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.914'. [ 281.205437][ T8279] netlink: 'syz.6.925': attribute type 2 has an invalid length. [ 281.223815][ T8279] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.925'. [ 284.884395][ T8290] netlink: 'syz.7.937': attribute type 2 has an invalid length. [ 284.893980][ T8290] netlink: 17267 bytes leftover after parsing attributes in process `syz.7.937'. [ 285.772187][ T50] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12 [ 287.545449][ T50] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12 [ 287.828186][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 289.578015][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 293.589435][ T50] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 293.589482][ T50] Bluetooth: unknown link type 88 [ 293.603216][ T50] Bluetooth: hci1: connection err: -111 [ 295.163568][ T50] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 295.163612][ T50] Bluetooth: unknown link type 88 [ 295.177434][ T50] Bluetooth: hci0: connection err: -111 [ 297.286898][ T8454] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1004'. [ 297.350352][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.985892][ T8487] cgroup: fork rejected by pids controller in /syz6 [ 298.852530][ T3430] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.116555][ T3430] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.719740][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.742571][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.751439][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.762184][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.777585][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 299.785646][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.326233][ T3430] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.488294][ T3430] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.561945][ T8523] netlink: 'syz.5.1032': attribute type 29 has an invalid length. [ 301.589659][ T8523] netlink: 'syz.5.1032': attribute type 29 has an invalid length. [ 301.666422][ T8526] netlink: 'syz.5.1032': attribute type 29 has an invalid length. [ 301.676700][ T8523] netlink: 'syz.5.1032': attribute type 29 has an invalid length. [ 301.784201][ T8523] netlink: 'syz.5.1032': attribute type 29 has an invalid length. [ 301.818342][ T5792] Bluetooth: hci1: command tx timeout [ 302.057059][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 303.198572][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.206046][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.216493][ T8516] bridge_slave_0: entered allmulticast mode [ 303.228477][ T8516] bridge_slave_0: entered promiscuous mode [ 303.254469][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.261852][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.278299][ T8516] bridge_slave_1: entered allmulticast mode [ 303.285690][ T8516] bridge_slave_1: entered promiscuous mode [ 303.434816][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.453902][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.531129][ T8516] team0: Port device team_slave_0 added [ 303.555444][ T8516] team0: Port device team_slave_1 added [ 303.714151][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.722028][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.749705][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.839108][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.873367][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.938232][ T5792] Bluetooth: hci1: command tx timeout [ 303.988140][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.100612][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.551607][ T8516] hsr_slave_0: entered promiscuous mode [ 304.588495][ T8516] hsr_slave_1: entered promiscuous mode [ 304.645133][ T3430] hsr_slave_0: left promiscuous mode [ 304.741344][ T3430] hsr_slave_1: left promiscuous mode [ 304.749090][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.756661][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.771890][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.780392][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.789040][ T3430] bridge_slave_1: left allmulticast mode [ 304.794779][ T3430] bridge_slave_1: left promiscuous mode [ 304.801226][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.813159][ T3430] bridge_slave_0: left allmulticast mode [ 304.819456][ T3430] bridge_slave_0: left promiscuous mode [ 304.825423][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.852910][ T3430] veth1_macvtap: left promiscuous mode [ 304.858780][ T3430] veth0_macvtap: left promiscuous mode [ 304.864491][ T3430] veth1_vlan: left promiscuous mode [ 304.872034][ T3430] veth0_vlan: left promiscuous mode [ 305.514613][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 305.571040][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 305.632753][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.691519][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.987968][ T5792] Bluetooth: hci1: command tx timeout [ 306.267259][ T3430] bond0 (unregistering): Released all slaves [ 306.372978][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.058060][ T5792] Bluetooth: hci1: command tx timeout [ 308.815115][ T8516] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.825322][ T8516] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.839336][ T8516] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.851131][ T8516] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.932322][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.960411][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.972856][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.980063][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.994606][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.001813][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.218068][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.465183][ T8516] veth0_vlan: entered promiscuous mode [ 309.481217][ T8516] veth1_vlan: entered promiscuous mode [ 309.519191][ T8516] veth0_macvtap: entered promiscuous mode [ 309.532161][ T8516] veth1_macvtap: entered promiscuous mode [ 309.555708][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.567224][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.577440][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.590213][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.600288][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.611023][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.624033][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.640283][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.651479][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.663197][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.675076][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.685282][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.695799][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.707228][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.724119][ T8516] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.733537][ T8516] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.743098][ T8516] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.752258][ T8516] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.851969][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.863191][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.895322][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.904665][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.116850][ T8607] netlink: 'syz.6.1053': attribute type 29 has an invalid length. [ 310.143266][ T8607] netlink: 'syz.6.1053': attribute type 29 has an invalid length. [ 310.238065][ T8607] netlink: 'syz.6.1053': attribute type 29 has an invalid length. [ 310.260234][ T8611] netlink: 'syz.6.1053': attribute type 29 has an invalid length. [ 310.313741][ T8607] netlink: 'syz.6.1053': attribute type 29 has an invalid length. [ 310.685105][ T8614] cgroup: fork rejected by pids controller in /syz5 [ 310.942009][ T8608] syz.0.1064 (8608) used greatest stack depth: 19112 bytes left [ 312.248114][ T1078] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.391669][ T1078] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.511979][ T1078] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.643294][ T1078] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.415429][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.437547][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.446988][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.467941][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.479908][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.488203][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.196304][ T8658] chnl_net:caif_netlink_parms(): no params data found [ 315.578261][ T50] Bluetooth: hci0: command tx timeout [ 315.677230][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.689960][ T8658] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.697282][ T8658] bridge_slave_0: entered allmulticast mode [ 315.710091][ T8658] bridge_slave_0: entered promiscuous mode [ 315.844564][ T8658] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.898413][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.905770][ T8658] bridge_slave_1: entered allmulticast mode [ 315.953209][ T8658] bridge_slave_1: entered promiscuous mode [ 315.994854][ T1078] hsr_slave_0: left promiscuous mode [ 316.025225][ T1078] hsr_slave_1: left promiscuous mode [ 316.054091][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.076123][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.112944][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.125174][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.157211][ T1078] batman_adv: batadv0: Interface deactivated: vlan1 [ 316.174616][ T1078] batman_adv: batadv0: Removing interface: vlan1 [ 316.192411][ T1078] bridge_slave_1: left allmulticast mode [ 316.202652][ T1078] bridge_slave_1: left promiscuous mode [ 316.214112][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.230525][ T1078] bridge_slave_0: left allmulticast mode [ 316.236769][ T1078] bridge_slave_0: left promiscuous mode [ 316.251173][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.311055][ T1078] veth1_macvtap: left promiscuous mode [ 316.322838][ T1078] veth0_macvtap: left promiscuous mode [ 316.328950][ T1078] veth1_vlan: left promiscuous mode [ 316.334649][ T1078] veth0_vlan: left promiscuous mode [ 317.304610][ T1078] team0 (unregistering): Port device team_slave_1 removed [ 317.359630][ T1078] team0 (unregistering): Port device team_slave_0 removed [ 317.423440][ T1078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.492795][ T1078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.657918][ T50] Bluetooth: hci0: command tx timeout [ 318.064599][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.074618][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.148940][ T1078] bond0 (unregistering): Released all slaves [ 318.285997][ T8741] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.1111'. [ 318.309361][ T8658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.324371][ T8658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.464077][ T8658] team0: Port device team_slave_0 added [ 318.488546][ T8658] team0: Port device team_slave_1 added [ 318.536215][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.543641][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.571096][ T8658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.585237][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.592488][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.618757][ T8658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.677377][ T8658] hsr_slave_0: entered promiscuous mode [ 318.684265][ T8658] hsr_slave_1: entered promiscuous mode [ 318.691064][ T8658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.699011][ T8658] Cannot create hsr debugfs directory [ 319.144565][ T8658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 319.155023][ T8658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 319.166053][ T8658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.181984][ T8658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 319.292030][ T8658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.320301][ T8658] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.334198][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.341432][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.361317][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.368640][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.602738][ T8658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.748759][ T50] Bluetooth: hci0: command tx timeout [ 319.869136][ T8658] veth0_vlan: entered promiscuous mode [ 319.883687][ T8658] veth1_vlan: entered promiscuous mode [ 319.920074][ T8658] veth0_macvtap: entered promiscuous mode [ 319.932487][ T8658] veth1_macvtap: entered promiscuous mode [ 319.951930][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.962703][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.973521][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.986124][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.996753][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.007424][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.019704][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.037156][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.047976][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.058440][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.069607][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.079600][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.090168][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.102217][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.115997][ T8658] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.124955][ T8658] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.134990][ T8658] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.144050][ T8658] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.222904][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.237252][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.272795][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.280889][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.435116][ T8782] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1122'. [ 321.818654][ T50] Bluetooth: hci0: command tx timeout [ 323.879871][ T8819] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.1134'. [ 324.734412][ T50] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 324.734528][ T50] Bluetooth: hci2: Malformed LE Event: 0x02 [ 326.441820][ T8860] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.1149'. [ 327.508215][ T50] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 327.508264][ T50] Bluetooth: hci3: Malformed LE Event: 0x02 [ 331.105559][ T50] Bluetooth: hci0: Malformed LE Event: 0x0d [ 333.513117][ T50] Bluetooth: hci2: Malformed LE Event: 0x0d [ 334.762642][ T50] Bluetooth: hci3: Malformed LE Event: 0x0d [ 335.490261][ T9011] warn_alloc: 2 callbacks suppressed [ 335.490279][ T9011] syz.5.1218: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 335.532413][ T9011] CPU: 1 PID: 9011 Comm: syz.5.1218 Not tainted 6.6.99-syzkaller #0 [ 335.540634][ T9011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.550945][ T9011] Call Trace: [ 335.554260][ T9011] [ 335.557259][ T9011] dump_stack_lvl+0x16c/0x230 [ 335.561982][ T9011] ? show_regs_print_info+0x20/0x20 [ 335.567220][ T9011] ? load_image+0x3b0/0x3b0 [ 335.571784][ T9011] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 335.578326][ T9011] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 335.584866][ T9011] warn_alloc+0x210/0x300 [ 335.589361][ T9011] ? stack_trace_save+0x9c/0xe0 [ 335.594257][ T9011] ? zone_watermark_ok_safe+0x230/0x230 [ 335.599865][ T9011] ? kasan_set_track+0x5f/0x70 [ 335.604704][ T9011] ? kasan_set_track+0x4e/0x70 [ 335.609497][ T9011] ? __kasan_kmalloc+0x8f/0xa0 [ 335.614288][ T9011] ? xsk_init_queue+0xb0/0x110 [ 335.619089][ T9011] ? xsk_setsockopt+0x4db/0x6f0 [ 335.623970][ T9011] ? do_sock_setsockopt+0x175/0x1a0 [ 335.629201][ T9011] ? __x64_sys_setsockopt+0x184/0x200 [ 335.634698][ T9011] __vmalloc_node_range+0x126/0x1320 [ 335.640081][ T9011] ? free_vm_area+0x50/0x50 [ 335.644780][ T9011] vmalloc_user+0x74/0x80 [ 335.649173][ T9011] ? xskq_create+0xbf/0x170 [ 335.653714][ T9011] xskq_create+0xbf/0x170 [ 335.658167][ T9011] xsk_init_queue+0xb0/0x110 [ 335.662802][ T9011] xsk_setsockopt+0x4db/0x6f0 [ 335.667519][ T9011] ? xsk_poll+0x670/0x670 [ 335.671897][ T9011] ? __fget_files+0x28/0x4d0 [ 335.676617][ T9011] ? aa_sock_opt_perm+0x74/0x100 [ 335.681589][ T9011] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 335.687165][ T9011] ? security_socket_setsockopt+0x7e/0xa0 [ 335.692913][ T9011] ? xsk_poll+0x670/0x670 [ 335.697283][ T9011] do_sock_setsockopt+0x175/0x1a0 [ 335.702381][ T9011] ? __fdget+0x180/0x210 [ 335.706685][ T9011] __x64_sys_setsockopt+0x184/0x200 [ 335.711928][ T9011] do_syscall_64+0x55/0xb0 [ 335.716387][ T9011] ? clear_bhb_loop+0x40/0x90 [ 335.721117][ T9011] ? clear_bhb_loop+0x40/0x90 [ 335.725997][ T9011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.731932][ T9011] RIP: 0033:0x7efe99f8e9a9 [ 335.736376][ T9011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.756198][ T9011] RSP: 002b:00007efe9ae29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 335.764733][ T9011] RAX: ffffffffffffffda RBX: 00007efe9a1b5fa0 RCX: 00007efe99f8e9a9 [ 335.772759][ T9011] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 335.780757][ T9011] RBP: 00007efe9a010d69 R08: 0000000000000004 R09: 0000000000000000 [ 335.788751][ T9011] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 335.796744][ T9011] R13: 0000000000000000 R14: 00007efe9a1b5fa0 R15: 00007ffe569d3288 [ 335.804779][ T9011] [ 335.854553][ T9011] Mem-Info: [ 335.857968][ T9011] active_anon:4998 inactive_anon:0 isolated_anon:0 [ 335.857968][ T9011] active_file:18543 inactive_file:39926 isolated_file:0 [ 335.857968][ T9011] unevictable:768 dirty:164 writeback:0 [ 335.857968][ T9011] slab_reclaimable:10614 slab_unreclaimable:99693 [ 335.857968][ T9011] mapped:23799 shmem:1383 pagetables:431 [ 335.857968][ T9011] sec_pagetables:0 bounce:0 [ 335.857968][ T9011] kernel_misc_reclaimable:0 [ 335.857968][ T9011] free:1341144 free_pcp:10813 free_cma:0 [ 335.904548][ T9011] Node 0 active_anon:19892kB inactive_anon:0kB active_file:74172kB inactive_file:159500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95196kB dirty:652kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10752kB pagetables:1624kB sec_pagetables:0kB all_unreclaimable? no [ 335.959286][ T9011] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 335.991029][ T9011] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.020132][ T9011] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 336.026435][ T9011] Node 0 DMA32 free:1448768kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:19948kB inactive_anon:0kB active_file:74172kB inactive_file:158164kB unevictable:1536kB writepending:648kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:25924kB local_pcp:17384kB free_cma:0kB [ 336.067801][ T9011] lowmem_reserve[]: 0 0 1 1 1 [ 336.072984][ T9011] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.106534][ T50] Bluetooth: hci1: Malformed LE Event: 0x0d [ 336.110051][ T9011] lowmem_reserve[]: 0 0 0 0 0 [ 336.130169][ T9011] Node 1 Normal free:3899996kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17636kB local_pcp:10848kB free_cma:0kB [ 336.166443][ T9011] lowmem_reserve[]: 0 0 0 0 0 [ 336.180161][ T9011] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 336.194019][ T9011] Node 0 DMA32: 34*4kB (UM) 179*8kB (ME) 568*16kB (ME) 582*32kB (UME) 980*64kB (UM) 226*128kB (UME) 56*256kB (UME) 43*512kB (UME) 17*1024kB (UME) 6*2048kB (UME) 308*4096kB (M) = 1448544kB [ 336.213379][ T9011] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 336.225958][ T9011] Node 1 Normal: 255*4kB (UME) 64*8kB (UME) 44*16kB (UME) 147*32kB (UME) 31*64kB (UE) 7*128kB (UME) 0*256kB 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3899996kB [ 336.258258][ T9011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.286123][ T9011] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.311609][ T9011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.333397][ T9011] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.344542][ T9011] 59852 total pagecache pages [ 336.354865][ T9011] 0 pages in swap cache [ 336.359370][ T9011] Free swap = 124996kB [ 336.363574][ T9011] Total swap = 124996kB [ 336.373391][ T9011] 2097051 pages RAM [ 336.377262][ T9011] 0 pages HighMem/MovableOnly [ 336.382234][ T9011] 416137 pages reserved [ 336.386889][ T9011] 0 pages cma reserved [ 336.814916][ T50] Bluetooth: hci0: Malformed LE Event: 0x0d [ 336.883948][ T9046] netlink: 'syz.7.1234': attribute type 2 has an invalid length. [ 336.899595][ T9046] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1234'. [ 339.432283][ T50] Bluetooth: hci1: Malformed HCI Event [ 340.548667][ T50] Bluetooth: hci2: Malformed HCI Event [ 340.700937][ T9141] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.1278'. [ 340.712423][ T9141] netlink: 6116 bytes leftover after parsing attributes in process `syz.5.1278'. [ 340.721856][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1278'. [ 341.170684][ T9154] pim6reg1: entered allmulticast mode [ 341.825352][ T9162] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1289'. [ 341.835448][ T9162] netlink: 6116 bytes leftover after parsing attributes in process `syz.6.1289'. [ 341.844891][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1289'. [ 342.255544][ T50] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 342.382608][ T9188] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.1299'. [ 342.400420][ T9188] netlink: 6116 bytes leftover after parsing attributes in process `syz.7.1299'. [ 342.412162][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1299'. [ 343.701162][ T50] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 344.033675][ T50] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 345.410540][ T9225] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 346.084581][ T50] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 346.636461][ T9257] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 347.672358][ T9274] syzkaller0: entered promiscuous mode [ 347.696845][ T9274] syzkaller0: entered allmulticast mode [ 347.803761][ T9282] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 350.289174][ T9310] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 351.824098][ T12] wlan1: Trigger new scan to find an IBSS to join [ 351.929508][ T9342] netlink: 'syz.6.1367': attribute type 3 has an invalid length. [ 351.952610][ T9342] netlink: 'syz.6.1367': attribute type 1 has an invalid length. [ 351.968528][ T9342] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.1367'. [ 355.281726][ T9387] netlink: 'syz.7.1383': attribute type 3 has an invalid length. [ 355.293525][ T9387] netlink: 'syz.7.1383': attribute type 1 has an invalid length. [ 355.304494][ T9387] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.1383'. [ 355.822546][ T48] wlan1: Trigger new scan to find an IBSS to join [ 355.941836][ T48] wlan1: Creating new IBSS network, BSSID c2:d3:25:d1:76:b2 [ 357.549806][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 358.761048][ T9416] netlink: 'syz.5.1393': attribute type 3 has an invalid length. [ 358.788338][ T9416] netlink: 'syz.5.1393': attribute type 1 has an invalid length. [ 358.796223][ T9416] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.1393'. [ 359.209837][ T5792] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 359.578177][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 360.966087][ T9459] netlink: 539 bytes leftover after parsing attributes in process `syz.6.1414'. [ 361.089705][ T5792] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 361.258890][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 363.178425][ T50] Bluetooth: hci1: command tx timeout [ 364.856278][ T9497] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1431'. [ 365.640985][ T9531] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1445'. [ 365.959966][ T9540] netlink: 'syz.6.1457': attribute type 3 has an invalid length. [ 365.979094][ T9540] netlink: 'syz.6.1457': attribute type 1 has an invalid length. [ 365.987013][ T9540] netlink: 'syz.6.1457': attribute type 1 has an invalid length. [ 366.028027][ T9540] netlink: 'syz.6.1457': attribute type 3 has an invalid length. [ 366.036719][ T9540] netlink: 130044 bytes leftover after parsing attributes in process `syz.6.1457'. [ 366.110502][ T9542] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1456'. [ 366.825343][ T9570] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 366.832384][ T9570] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 366.886163][ T9571] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1461'. [ 366.977234][ T9574] netlink: 'syz.0.1462': attribute type 3 has an invalid length. [ 367.005800][ T9574] netlink: 'syz.0.1462': attribute type 1 has an invalid length. [ 367.037036][ T9574] netlink: 'syz.0.1462': attribute type 1 has an invalid length. [ 367.072274][ T9574] netlink: 'syz.0.1462': attribute type 3 has an invalid length. [ 367.101227][ T9574] netlink: 130044 bytes leftover after parsing attributes in process `syz.0.1462'. [ 367.366615][ T9585] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.1467'. [ 367.440858][ T9585] netlink: zone id is out of range [ 367.478629][ T9585] netlink: del zone limit has 8 unknown bytes [ 368.064634][ T9605] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 368.071347][ T9605] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.230023][ T9625] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.1480'. [ 369.303897][ T9625] netlink: zone id is out of range [ 369.323289][ T9625] netlink: del zone limit has 8 unknown bytes [ 375.752154][ T9709] netlink: 'syz.0.1519': attribute type 33 has an invalid length. [ 375.768358][ T9709] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1519'. [ 376.557824][ T9736] netlink: 'syz.7.1532': attribute type 33 has an invalid length. [ 376.569651][ T9736] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1532'. [ 377.584830][ T9765] wg2: entered promiscuous mode [ 377.608599][ T9765] wg2: entered allmulticast mode [ 378.419362][ T9797] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1557'. [ 379.503357][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.517746][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.269222][ T50] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 381.275999][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 400.664327][T10121] netlink: 'syz.5.1686': attribute type 25 has an invalid length. [ 400.672452][T10121] netlink: 'syz.5.1686': attribute type 1 has an invalid length. [ 400.683128][T10121] bridge0: port 1(bridge_slave_0) entered learning state [ 402.251992][T10157] netlink: 'syz.7.1701': attribute type 25 has an invalid length. [ 402.273749][T10157] netlink: 'syz.7.1701': attribute type 1 has an invalid length. [ 402.352878][T10157] bridge0: port 1(bridge_slave_0) entered learning state [ 404.968058][ T48] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 404.975967][ T48] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 407.808854][T10198] netlink: 'syz.6.1713': attribute type 25 has an invalid length. [ 407.817206][T10198] netlink: 'syz.6.1713': attribute type 1 has an invalid length. [ 407.825705][T10198] bridge0: port 1(bridge_slave_0) entered learning state [ 413.320571][T10264] netlink: 'syz.6.1744': attribute type 10 has an invalid length. [ 414.978028][T10309] netlink: 'syz.7.1761': attribute type 10 has an invalid length. [ 418.849387][ T50] Bluetooth: hci0: Unknown advertising packet type: 0x70 [ 418.849430][ T50] Bluetooth: hci0: Malformed LE Event: 0x0d [ 419.022458][T10354] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1778'. [ 422.538187][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 425.318782][ T50] Bluetooth: hci3: Unknown advertising packet type: 0x70 [ 425.318831][ T50] Bluetooth: hci3: Malformed LE Event: 0x0d [ 425.653815][T10390] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1789'. [ 428.582668][ T50] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 429.407984][ T50] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 432.115541][T10460] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1819'. [ 432.888953][T10484] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1830'. [ 436.921011][T10542] syzkaller0: entered promiscuous mode [ 436.926627][T10542] syzkaller0: entered allmulticast mode [ 437.903314][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 439.722531][T10554] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1856'. [ 440.720144][T10582] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1868'. [ 440.943206][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.959871][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.047130][T10588] syzkaller0: entered promiscuous mode [ 441.052992][T10588] syzkaller0: entered allmulticast mode [ 444.123092][T10616] syzkaller0: entered promiscuous mode [ 444.137960][T10616] syzkaller0: entered allmulticast mode [ 448.655021][T10658] syzkaller0: entered promiscuous mode [ 448.665385][T10658] syzkaller0: entered allmulticast mode [ 448.804615][T10663] syzkaller0: entered promiscuous mode [ 448.810394][T10663] syzkaller0: entered allmulticast mode [ 451.083222][T10683] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1906'. [ 451.096005][T10683] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 453.561913][ T50] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 453.915164][T10714] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1916'. [ 453.938322][T10714] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 456.947747][ T50] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 476.530122][T10941] netlink: 'syz.6.2011': attribute type 10 has an invalid length. [ 476.564336][T10941] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2011'. [ 476.591608][T10941] team0: entered promiscuous mode [ 476.627988][T10941] team_slave_0: entered promiscuous mode [ 476.655674][T10941] team_slave_1: entered promiscuous mode [ 476.679638][T10941] team0: entered allmulticast mode [ 476.684901][T10941] team_slave_0: entered allmulticast mode [ 476.727810][T10941] team_slave_1: entered allmulticast mode [ 476.755283][T10941] bridge0: port 3(team0) entered blocking state [ 476.777234][T10941] bridge0: port 3(team0) entered disabled state [ 476.833274][T10941] bridge0: port 3(team0) entered blocking state [ 476.840218][T10941] bridge0: port 3(team0) entered forwarding state [ 490.767894][T10971] netlink: 'syz.7.2024': attribute type 10 has an invalid length. [ 490.788875][T10971] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2024'. [ 490.814202][T10971] team0: entered promiscuous mode [ 490.824344][T10971] team_slave_0: entered promiscuous mode [ 490.840899][T10971] team_slave_1: entered promiscuous mode [ 490.853512][T10971] team0: entered allmulticast mode [ 490.864149][T10971] team_slave_0: entered allmulticast mode [ 490.871192][T10971] team_slave_1: entered allmulticast mode [ 490.878396][T10971] bridge0: port 3(team0) entered blocking state [ 490.886450][T10971] bridge0: port 3(team0) entered disabled state [ 490.896503][T10971] bridge0: port 3(team0) entered blocking state [ 490.903034][T10971] bridge0: port 3(team0) entered forwarding state [ 492.592616][T11005] netlink: 'syz.5.2037': attribute type 10 has an invalid length. [ 492.617989][T11005] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2037'. [ 492.638181][T11005] team0: entered promiscuous mode [ 492.643441][T11005] team_slave_0: entered promiscuous mode [ 492.681945][T11005] team_slave_1: entered promiscuous mode [ 492.704917][T11005] team0: entered allmulticast mode [ 492.727936][T11005] team_slave_0: entered allmulticast mode [ 492.744659][T11005] team_slave_1: entered allmulticast mode [ 492.773384][T11005] bridge0: port 3(team0) entered blocking state [ 492.788291][T11005] bridge0: port 3(team0) entered disabled state [ 492.822997][T11005] bridge0: port 3(team0) entered blocking state [ 492.829788][T11005] bridge0: port 3(team0) entered forwarding state [ 493.455913][T11024] netlink: 'syz.0.2047': attribute type 21 has an invalid length. [ 493.475638][T11024] netlink: 'syz.0.2047': attribute type 12 has an invalid length. [ 493.521402][T11024] netlink: 'syz.0.2047': attribute type 13 has an invalid length. [ 493.533873][T11024] netlink: 'syz.0.2047': attribute type 14 has an invalid length. [ 493.546979][T11024] netlink: 'syz.0.2047': attribute type 15 has an invalid length. [ 493.555907][T11024] netlink: 'syz.0.2047': attribute type 16 has an invalid length. [ 493.564343][T11024] netlink: 'syz.0.2047': attribute type 19 has an invalid length. [ 493.574254][T11024] netlink: 'syz.0.2047': attribute type 21 has an invalid length. [ 493.582959][T11024] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.2047'. [ 493.718046][T11032] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2051'. [ 493.727272][T11032] team0: entered promiscuous mode [ 493.773292][T11032] team_slave_0: entered promiscuous mode [ 493.783432][T11032] team_slave_1: entered promiscuous mode [ 493.789809][T11032] team0: entered allmulticast mode [ 493.795318][T11032] team_slave_0: entered allmulticast mode [ 493.801455][T11032] team_slave_1: entered allmulticast mode [ 493.814336][T11032] bridge0: port 3(team0) entered blocking state [ 493.821432][T11032] bridge0: port 3(team0) entered disabled state [ 493.831541][T11032] bridge0: port 3(team0) entered blocking state [ 493.838164][T11032] bridge0: port 3(team0) entered forwarding state [ 493.861582][T11034] netlink: 12226 bytes leftover after parsing attributes in process `syz.6.2060'. [ 494.234956][T11054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2065'. [ 494.634822][T11068] netlink: 12226 bytes leftover after parsing attributes in process `syz.5.2066'. [ 496.031900][T11101] validate_nla: 21 callbacks suppressed [ 496.031931][T11101] netlink: 'syz.7.2078': attribute type 21 has an invalid length. [ 496.046776][T11101] netlink: 'syz.7.2078': attribute type 12 has an invalid length. [ 496.055105][T11101] netlink: 'syz.7.2078': attribute type 13 has an invalid length. [ 496.069342][T11101] netlink: 'syz.7.2078': attribute type 14 has an invalid length. [ 496.077777][T11101] netlink: 'syz.7.2078': attribute type 15 has an invalid length. [ 496.090070][T11101] netlink: 'syz.7.2078': attribute type 16 has an invalid length. [ 496.100670][T11101] netlink: 'syz.7.2078': attribute type 19 has an invalid length. [ 496.109407][T11101] netlink: 'syz.7.2078': attribute type 21 has an invalid length. [ 496.123219][T11101] netlink: 'syz.7.2078': attribute type 22 has an invalid length. [ 496.133587][T11101] netlink: 12226 bytes leftover after parsing attributes in process `syz.7.2078'. [ 502.409304][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.415841][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.876882][T11193] syzkaller0: entered allmulticast mode [ 504.168947][T11206] syz.6.2119[11206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.169115][T11206] syz.6.2119[11206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.054261][T11232] syz.7.2132[11232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.068338][T11232] syz.7.2132[11232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.287062][T11234] IPv6: Can't replace route, no match found [ 508.008079][T11275] IPv6: Can't replace route, no match found [ 512.848539][T11307] syz.7.2163[11307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.848830][T11307] syz.7.2163[11307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.001151][T11310] IPv6: Can't replace route, no match found [ 513.813889][T11330] syzkaller0: entered promiscuous mode [ 513.820213][T11330] syzkaller0: entered allmulticast mode [ 514.906994][T11341] syz.0.2178[11341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.907295][T11341] syz.0.2178[11341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.325324][T11336] IPv6: Can't replace route, no match found [ 516.983946][T11363] syz.6.2190[11363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.984412][T11363] syz.6.2190[11363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.424154][T11370] syzkaller0: entered promiscuous mode [ 517.452819][ T50] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 517.457745][T11370] syzkaller0: entered allmulticast mode [ 518.660671][T11398] syz.5.2204[11398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.660955][T11398] syz.5.2204[11398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.340098][ T50] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 521.236896][T11436] syzkaller0: entered promiscuous mode [ 521.261290][T11436] syzkaller0: entered allmulticast mode [ 521.620438][T11450] syz.0.2227[11450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.620724][T11450] syz.0.2227[11450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.647427][T11450] syz.0.2227[11450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.660519][T11450] syz.0.2227[11450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.268060][T11465] syzkaller0: entered promiscuous mode [ 524.292368][T11465] syzkaller0: entered allmulticast mode [ 524.416262][T11475] sock: sock_timestamping_bind_phc: sock not bind to device [ 524.884663][T11487] syz.6.2242[11487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.885062][T11487] syz.6.2242[11487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.909235][T11487] syz.6.2242[11487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.921334][T11487] syz.6.2242[11487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.840259][T11490] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2243'. [ 526.957305][T11494] syz.5.2253[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.957917][T11494] syz.5.2253[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.979211][T11494] syz.5.2253[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.996590][T11494] syz.5.2253[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.336749][T11503] netlink: 138036 bytes leftover after parsing attributes in process `syz.5.2247'. [ 527.371515][T11503] netlink: zone id is out of range [ 527.376843][T11503] netlink: zone id is out of range [ 527.385661][T11502] sock: sock_timestamping_bind_phc: sock not bind to device [ 527.386306][T11503] netlink: zone id is out of range [ 527.403668][T11503] netlink: zone id is out of range [ 527.443688][T11503] netlink: zone id is out of range [ 527.449403][T11503] netlink: zone id is out of range [ 527.459295][T11503] netlink: zone id is out of range [ 527.480022][T11500] syzkaller0: entered promiscuous mode [ 527.487681][T11503] netlink: zone id is out of range [ 527.498512][T11500] syzkaller0: entered allmulticast mode [ 527.517756][T11503] netlink: zone id is out of range [ 527.537731][T11503] netlink: zone id is out of range [ 529.480543][T11514] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2254'. [ 529.878239][T11526] syzkaller0: entered promiscuous mode [ 529.883831][T11526] syzkaller0: entered allmulticast mode [ 530.537250][T11539] netlink: 138036 bytes leftover after parsing attributes in process `syz.7.2264'. [ 532.431800][T11548] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.2269'. [ 532.582911][T11557] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2280'. [ 532.735277][T11556] syzkaller0: entered promiscuous mode [ 532.741118][T11556] syzkaller0: entered allmulticast mode [ 536.648019][T11590] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2296'. [ 536.664920][T11595] netlink: 'syz.5.2288': attribute type 17 has an invalid length. [ 536.671550][T11590] net_ratelimit: 96 callbacks suppressed [ 536.671577][T11590] netlink: del zone limit has 8 unknown bytes [ 536.678975][T11595] netlink: 'syz.5.2288': attribute type 16 has an invalid length. [ 536.679001][T11595] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2288'. [ 537.021144][T11602] netlink: 'syz.0.2292': attribute type 2 has an invalid length. [ 537.066075][T11602] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2292'. [ 537.678758][T11621] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.2302'. [ 537.691753][T11621] netlink: del zone limit has 8 unknown bytes [ 538.178672][T11629] netlink: 'syz.7.2305': attribute type 2 has an invalid length. [ 538.186856][T11629] netlink: 17267 bytes leftover after parsing attributes in process `syz.7.2305'. [ 539.979656][T11619] netlink: 'syz.0.2301': attribute type 17 has an invalid length. [ 539.987931][T11619] netlink: 'syz.0.2301': attribute type 16 has an invalid length. [ 539.995849][T11619] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2301'. [ 540.746332][T11653] netlink: 'syz.5.2315': attribute type 2 has an invalid length. [ 540.771551][T11653] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.2315'. [ 545.475467][T11741] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.2350'. [ 545.784510][T11754] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2363'. [ 548.893859][T11801] netlink: 'syz.0.2375': attribute type 10 has an invalid length. [ 548.974340][T11801] team0: Device ipvlan1 failed to register rx_handler [ 550.318372][T11845] netlink: 'syz.0.2400': attribute type 3 has an invalid length. [ 550.335955][T11845] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2400'. [ 552.323272][T11841] netlink: 'syz.7.2389': attribute type 10 has an invalid length. [ 552.336553][T11841] team0: Device ipvlan1 failed to register rx_handler [ 552.968414][T11891] netlink: 'syz.6.2415': attribute type 3 has an invalid length. [ 552.976389][T11891] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2415'. [ 553.041167][T11893] netlink: 'syz.5.2414': attribute type 10 has an invalid length. [ 553.056280][T11893] team0: Device ipvlan1 failed to register rx_handler [ 555.554993][ T50] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 556.580166][T11922] netlink: 'syz.6.2425': attribute type 10 has an invalid length. [ 556.635691][ T50] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 556.746850][T11922] team0: Device ipvlan1 failed to register rx_handler [ 556.925858][T11925] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2433'. [ 557.056336][T11922] syz.6.2425 (11922) used greatest stack depth: 19056 bytes left [ 558.576328][T11967] netlink: 'syz.6.2441': attribute type 4 has an invalid length. [ 558.586804][T11967] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2441'. [ 560.993195][T11972] netlink: 'syz.6.2443': attribute type 10 has an invalid length. [ 561.004992][T11972] team0: Device ipvlan1 failed to register rx_handler [ 561.613331][ T5792] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 561.623332][ T5792] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 561.633135][ T5792] CPU: 0 PID: 5792 Comm: kworker/u5:3 Not tainted 6.6.99-syzkaller #0 [ 561.641371][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.651498][ T5792] Workqueue: hci1 hci_rx_work [ 561.656269][ T5792] Call Trace: [ 561.659606][ T5792] [ 561.662587][ T5792] dump_stack_lvl+0x16c/0x230 [ 561.667353][ T5792] ? show_regs_print_info+0x20/0x20 [ 561.672629][ T5792] ? load_image+0x3b0/0x3b0 [ 561.677243][ T5792] sysfs_create_dir_ns+0x256/0x280 [ 561.682452][ T5792] ? hci_rx_work+0x43a/0xd80 [ 561.687158][ T5792] ? sysfs_warn_dup+0xa0/0xa0 [ 561.691886][ T5792] ? do_raw_spin_unlock+0x121/0x230 [ 561.697126][ T5792] kobject_add_internal+0x6b8/0xc70 [ 561.702466][ T5792] kobject_add+0x156/0x220 [ 561.706916][ T5792] ? __rwlock_init+0x150/0x150 [ 561.711711][ T5792] ? kobject_init+0x1e0/0x1e0 [ 561.716432][ T5792] ? _raw_spin_unlock+0x28/0x40 [ 561.721327][ T5792] ? get_device_parent+0x366/0x390 [ 561.726486][ T5792] device_add+0x408/0xc20 [ 561.731037][ T5792] hci_conn_add_sysfs+0xd5/0x1e0 [ 561.736016][ T5792] le_conn_complete_evt+0xc37/0x1220 [ 561.741345][ T5792] ? bt_warn+0x10c/0x160 [ 561.745623][ T5792] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 561.751908][ T5792] ? bt_info+0x160/0x160 [ 561.756445][ T5792] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 561.762114][ T5792] ? skb_pull_data+0xfb/0x200 [ 561.766844][ T5792] hci_le_conn_complete_evt+0x187/0x440 [ 561.772438][ T5792] ? hci_remote_host_features_evt+0x160/0x160 [ 561.778552][ T5792] hci_event_packet+0x795/0x1210 [ 561.783536][ T5792] ? bis_list+0x290/0x290 [ 561.787990][ T5792] ? lockdep_hardirqs_on+0x98/0x150 [ 561.793271][ T5792] ? hci_send_to_monitor+0xd7/0x4f0 [ 561.798544][ T5792] hci_rx_work+0x43a/0xd80 [ 561.803026][ T5792] ? process_scheduled_works+0x957/0x15b0 [ 561.808786][ T5792] process_scheduled_works+0xa45/0x15b0 [ 561.814405][ T5792] ? assign_work+0x400/0x400 [ 561.819042][ T5792] ? assign_work+0x39e/0x400 [ 561.823674][ T5792] worker_thread+0xa55/0xfc0 [ 561.828298][ T5792] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 561.834437][ T5792] kthread+0x2fa/0x390 [ 561.838644][ T5792] ? pr_cont_work+0x560/0x560 [ 561.843409][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 561.848414][ T5792] ret_from_fork+0x48/0x80 [ 561.852891][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 561.857516][ T5792] ret_from_fork_asm+0x11/0x20 [ 561.862606][ T5792] [ 561.867943][ T5792] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 561.882072][ T5792] Bluetooth: hci1: failed to register connection device [ 562.000650][T11993] syzkaller0: entered allmulticast mode [ 562.468166][T12005] netlink: 'syz.7.2457': attribute type 10 has an invalid length. [ 562.484436][T12005] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2457'. [ 562.787835][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 563.827806][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.834196][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.897771][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 564.167488][T12041] netlink: 'syz.7.2471': attribute type 2 has an invalid length. [ 564.175533][T12041] netlink: 199824 bytes leftover after parsing attributes in process `syz.7.2471'. [ 565.205422][T12070] syz.6.2484 (12070) used obsolete PPPIOCDETACH ioctl [ 565.256592][ T50] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 565.363217][T12074] netlink: 'syz.7.2486': attribute type 21 has an invalid length. [ 565.407646][T12074] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2486'. [ 565.438299][T12074] netlink: 'syz.7.2486': attribute type 4 has an invalid length. [ 565.493322][T12074] netlink: 'syz.7.2486': attribute type 5 has an invalid length. [ 565.559568][T12074] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2486'. [ 565.804357][T12084] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2491'. [ 566.690220][T12090] netlink: 'syz.5.2494': attribute type 21 has an invalid length. [ 566.968665][T12098] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2497'. [ 567.267273][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 567.300490][T12111] syzkaller0: entered promiscuous mode [ 567.306198][T12111] syzkaller0: entered allmulticast mode [ 570.716694][ T50] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 573.964292][T12222] veth1_macvtap: left promiscuous mode [ 573.997098][T12223] veth1_macvtap: entered promiscuous mode [ 574.006727][T12223] macsec0: entered promiscuous mode [ 574.013684][T12223] macsec0: entered allmulticast mode [ 574.027046][T12223] veth1_macvtap: entered allmulticast mode [ 574.037481][T12225] bridge0: port 3(team0) entered disabled state [ 574.044285][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.052282][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.073766][T12225] bridge0: entered allmulticast mode [ 574.103740][T12226] bridge0: port 3(team0) entered disabled state [ 574.145476][T12226] bridge_slave_1: left allmulticast mode [ 574.159919][T12226] bridge_slave_1: left promiscuous mode [ 574.165803][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.205626][T12226] bridge_slave_0: left allmulticast mode [ 574.222102][T12226] bridge_slave_0: left promiscuous mode [ 574.237237][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.343118][T12234] __sock_release: fasync list not empty! [ 574.521446][T12237] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.859407][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 575.606362][T12271] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2567'. [ 576.329440][T12286] syzkaller0: entered promiscuous mode [ 576.335252][T12286] syzkaller0: entered allmulticast mode [ 579.067010][T12327] netlink: 'syz.6.2590': attribute type 10 has an invalid length. [ 579.108005][T12327] geneve0: entered promiscuous mode [ 579.173149][T12327] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 580.236716][ T50] Bluetooth: hci1: unexpected event 0x06 length: 151 > 3 [ 580.293617][T12357] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2600'. [ 580.341384][T12359] netlink: 'syz.6.2601': attribute type 10 has an invalid length. [ 580.369490][T12359] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 580.396683][T12359] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 580.408816][T12359] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 580.423096][T12359] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 580.431725][T12361] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2602'. [ 581.097443][ T50] Bluetooth: hci2: ISO packet for unknown connection handle 255 [ 581.283948][T12390] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2617'. [ 581.339867][ T50] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10 [ 581.686503][T12409] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.2623'. [ 581.718414][T12407] netlink: 'syz.0.2624': attribute type 39 has an invalid length. [ 582.595893][ T5792] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 582.682752][T12438] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2636'. [ 582.954105][T12443] syzkaller0: entered promiscuous mode [ 582.960510][T12443] syzkaller0: entered allmulticast mode [ 583.034983][ T5801] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 583.417639][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 584.383148][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 585.902754][T12484] netlink: 'syz.0.2651': attribute type 10 has an invalid length. [ 585.915558][T12484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2651'. [ 585.928021][T12484] netlink: 'syz.0.2651': attribute type 10 has an invalid length. [ 585.951132][T12484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2651'. [ 586.000425][T12483] netlink: 'syz.0.2651': attribute type 10 has an invalid length. [ 586.017912][T12483] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2651'. [ 586.058336][T12490] netlink: 'syz.7.2653': attribute type 39 has an invalid length. [ 586.691636][T12516] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 586.721775][T12516] syzkaller0: entered promiscuous mode [ 586.731528][T12516] syzkaller0: entered allmulticast mode [ 586.984913][ T50] Bluetooth: hci1: ISO packet for unknown connection handle 2681 [ 589.055480][T12526] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2670'. [ 601.563695][T12753] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2760'. [ 601.573742][T12753] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 602.775563][T12765] netlink: 'syz.6.2768': attribute type 1 has an invalid length. [ 602.790445][T12765] netlink: 'syz.6.2768': attribute type 4 has an invalid length. [ 602.804113][T12765] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2768'. [ 604.164200][T12789] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2776'. [ 604.174364][T12789] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 608.302299][T12807] netlink: 'syz.7.2784': attribute type 1 has an invalid length. [ 608.310212][T12807] netlink: 'syz.7.2784': attribute type 4 has an invalid length. [ 608.318695][T12807] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2784'. [ 608.523209][T12819] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2789'. [ 608.547417][T12819] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 609.528046][T12840] netlink: 'syz.5.2799': attribute type 1 has an invalid length. [ 609.542339][T12840] netlink: 'syz.5.2799': attribute type 4 has an invalid length. [ 609.552614][T12840] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2799'. [ 610.227630][T12850] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2801'. [ 610.251237][T12850] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 610.291646][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 612.868682][T12872] netlink: 'syz.0.2810': attribute type 1 has an invalid length. [ 612.876635][T12872] netlink: 'syz.0.2810': attribute type 4 has an invalid length. [ 612.885306][T12872] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2810'. [ 615.756832][ T5801] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 615.767129][T12893] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2820'. [ 615.776707][T12893] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 617.537274][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 617.757088][T12931] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2834'. [ 617.773831][T12931] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 623.282064][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 624.764151][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 625.274825][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.281596][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.999725][T13014] netlink: 'syz.0.2869': attribute type 29 has an invalid length. [ 627.852517][T13014] netlink: 'syz.0.2869': attribute type 29 has an invalid length. [ 628.015466][T13026] syzkaller0: entered promiscuous mode [ 628.037703][T13026] syzkaller0: entered allmulticast mode [ 628.055396][ T786] syzkaller0: tun_net_xmit 48 [ 628.066568][T13034] syzkaller0: tun_net_xmit 1280 [ 628.075418][T13034] syzkaller0: create flow: hash 2185030839 index 1 [ 628.286168][T13025] syzkaller0: delete flow: hash 2185030839 index 1 [ 636.108300][T13101] syzkaller0: entered promiscuous mode [ 636.113872][T13101] syzkaller0: entered allmulticast mode [ 636.161435][ T47] syzkaller0: tun_net_xmit 48 [ 641.805037][T13156] syzkaller0: entered promiscuous mode [ 641.812375][T13156] syzkaller0: entered allmulticast mode [ 641.853462][ T47] syzkaller0: tun_net_xmit 48 [ 643.280113][T13179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.359944][ T41] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 644.370936][T13180] netlink: 'syz.0.2939': attribute type 10 has an invalid length. [ 644.379514][ T41] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 644.437874][T13180] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 644.454680][T13180] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 644.476410][T13180] team0: Port device wlan1 added [ 645.165432][T13208] syzkaller0: entered promiscuous mode [ 645.174036][T13208] syzkaller0: entered allmulticast mode [ 645.246197][T13212] syzkaller0: entered promiscuous mode [ 645.251841][T13212] syzkaller0: entered allmulticast mode [ 647.266179][ T5854] syzkaller0: tun_net_xmit 48 [ 650.234793][T13245] syzkaller0: entered promiscuous mode [ 650.241173][T13245] syzkaller0: entered allmulticast mode [ 650.263328][ T5833] syzkaller0: tun_net_xmit 48 [ 650.316391][T13245] syzkaller0: tun_net_xmit 1280 [ 650.323368][T13245] syzkaller0: create flow: hash 2185030839 index 1 [ 650.459087][T13244] syzkaller0: delete flow: hash 2185030839 index 1 [ 653.503355][T13292] syzkaller0: create flow: hash 2185030839 index 1 [ 653.669860][ T47] syzkaller0: tun_net_xmit 76 [ 653.682495][ T47] syzkaller0: tun_net_xmit 48 [ 653.704133][ T786] syzkaller0: tun_net_xmit 76 [ 653.978245][T13287] syzkaller0: delete flow: hash 2185030839 index 1 [ 656.725563][ T5876] syzkaller0: tun_net_xmit 76 [ 656.731223][ T5876] syzkaller0: tun_net_xmit 48 [ 656.739004][T13313] syzkaller0: create flow: hash 1612625786 index 1 [ 656.747802][ T5854] syzkaller0: tun_net_xmit 76 [ 656.798598][ T5876] syzkaller0: tun_net_xmit 76 [ 656.886008][T13308] syzkaller0: delete flow: hash 1612625786 index 1 [ 659.823046][T13334] syzkaller0: create flow: hash 2185030839 index 1 [ 659.840636][ T47] syzkaller0: tun_net_xmit 76 [ 659.854331][ T47] syzkaller0: tun_net_xmit 48 [ 659.863006][T13336] netlink: 'syz.6.3008': attribute type 21 has an invalid length. [ 659.870005][ T47] syzkaller0: tun_net_xmit 76 [ 659.876059][T13336] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.884413][T13336] IPv6: Can't replace route, no match found [ 659.954317][T13328] syzkaller0: delete flow: hash 2185030839 index 1 [ 663.452955][T13375] netlink: 'syz.0.3021': attribute type 21 has an invalid length. [ 663.477253][T13375] IPv6: NLM_F_CREATE should be specified when creating new route [ 663.513767][T13375] IPv6: Can't replace route, no match found [ 663.839426][ T5876] syzkaller0: tun_net_xmit 76 [ 663.845377][T13384] syzkaller0: create flow: hash 2185030839 index 1 [ 663.852372][ T5876] syzkaller0: tun_net_xmit 48 [ 663.877931][ T5776] syzkaller0: tun_net_xmit 76 [ 664.090407][T13378] syzkaller0: delete flow: hash 2185030839 index 1 [ 666.289971][T13405] netlink: 'syz.5.3038': attribute type 21 has an invalid length. [ 666.304627][T13405] IPv6: NLM_F_CREATE should be specified when creating new route [ 666.318869][T13405] IPv6: Can't replace route, no match found [ 667.583606][T13426] netlink: 'syz.7.3050': attribute type 21 has an invalid length. [ 667.595211][T13426] IPv6: NLM_F_CREATE should be specified when creating new route [ 667.607070][T13426] IPv6: Can't replace route, no match found [ 668.170132][T13440] pim6reg1: entered allmulticast mode [ 669.056164][T13457] netlink: 'syz.6.3062': attribute type 21 has an invalid length. [ 669.127862][T13457] IPv6: Can't replace route, no match found [ 670.652811][T13479] pim6reg1: entered allmulticast mode [ 672.388059][T13515] pim6reg1: entered allmulticast mode [ 673.691491][T13541] pim6reg1: entered allmulticast mode [ 676.295182][T13595] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.3122'. [ 677.492787][T13626] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.3136'. [ 678.469205][ T5801] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 679.138241][T13674] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.3147'. [ 680.314614][ T5801] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 680.322755][ T5801] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 681.194171][T13704] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3162'. [ 681.751249][ T5801] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 682.582367][ T5801] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 682.591033][ T5801] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 682.903116][T13751] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3177'. [ 683.015373][ T5801] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 684.686376][T13784] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3192'. [ 684.992656][ T5801] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 685.633421][T13808] netlink: 'syz.5.3202': attribute type 29 has an invalid length. [ 685.662906][T13808] netlink: 'syz.5.3202': attribute type 29 has an invalid length. [ 685.686721][T13810] netlink: 'syz.5.3202': attribute type 29 has an invalid length. [ 685.773117][T13808] syzkaller0: entered promiscuous mode [ 685.794659][T13808] syzkaller0: entered allmulticast mode [ 686.142417][T13813] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.3203'. [ 686.583745][ T5801] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 686.712918][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.726768][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.950565][ T5801] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 688.285449][T13842] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.3213'. [ 689.716172][T13840] netlink: 'syz.7.3212': attribute type 10 has an invalid length. [ 689.725913][T13840] bond0: (slave bond_slave_0): Releasing backup interface [ 689.759156][T13849] netlink: 'syz.0.3218': attribute type 15 has an invalid length. [ 689.904441][T13855] netlink: 'syz.6.3229': attribute type 29 has an invalid length. [ 689.913179][T13855] netlink: 'syz.6.3229': attribute type 29 has an invalid length. [ 689.926887][T13855] netlink: 'syz.6.3229': attribute type 29 has an invalid length. [ 690.083016][T13855] syzkaller0: entered promiscuous mode [ 690.105374][T13855] syzkaller0: entered allmulticast mode [ 690.764513][T13875] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.3226'. [ 691.109839][T13879] Bluetooth: hci0: command 0x0406 tx timeout [ 692.701305][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 693.101598][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 695.074700][T13918] 7BՍ֕: renamed from syzkaller0 [ 695.100770][T13917] netlink: 'syz.7.3241': attribute type 29 has an invalid length. [ 695.127296][T13917] netlink: 'syz.7.3241': attribute type 29 has an invalid length. [ 695.169106][T13920] netlink: 'syz.7.3241': attribute type 29 has an invalid length. [ 695.244646][T13917] syzkaller0: entered promiscuous mode [ 695.258177][T13917] syzkaller0: entered allmulticast mode [ 698.643601][T13958] 7BՍ֕: renamed from syzkaller0 [ 701.709918][T13980] netlink: 'syz.0.3263': attribute type 29 has an invalid length. [ 701.718765][T13980] netlink: 'syz.0.3263': attribute type 29 has an invalid length. [ 701.732936][T13980] netlink: 'syz.0.3263': attribute type 29 has an invalid length. [ 701.748492][ T12] wlan1: Trigger new scan to find an IBSS to join [ 701.780902][ T12] ================================================================================ [ 701.802630][ T12] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1209:5 [ 701.823706][ T12] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 701.839531][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted 6.6.99-syzkaller #0 [ 701.847601][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 701.857919][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 701.864271][ T12] Call Trace: [ 701.867595][ T12] [ 701.870572][ T12] dump_stack_lvl+0x16c/0x230 [ 701.875320][ T12] ? show_regs_print_info+0x20/0x20 [ 701.880584][ T12] ? load_image+0x3b0/0x3b0 [ 701.885250][ T12] ? mutex_lock_nested+0x20/0x20 [ 701.890263][ T12] ubsan_epilogue+0xa/0x30 [ 701.894770][ T12] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 701.900573][ T12] ieee80211_request_ibss_scan+0x4eb/0x790 [ 701.906484][ T12] ieee80211_ibss_work+0xdfd/0x10c0 [ 701.911867][ T12] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 701.918361][ T12] ? mark_lock+0x94/0x320 [ 701.922786][ T12] ? ieee80211_iface_work+0xbca/0xc70 [ 701.928242][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 701.933703][ T12] cfg80211_wiphy_work+0x225/0x260 [ 701.938895][ T12] ? process_scheduled_works+0x957/0x15b0 [ 701.944952][ T12] process_scheduled_works+0xa45/0x15b0 [ 701.950610][ T12] ? assign_work+0x400/0x400 [ 701.955296][ T12] ? assign_work+0x39e/0x400 [ 701.959972][ T12] worker_thread+0xa55/0xfc0 [ 701.964675][ T12] kthread+0x2fa/0x390 [ 701.968812][ T12] ? pr_cont_work+0x560/0x560 [ 701.971566][T13980] syzkaller0: entered promiscuous mode [ 701.973528][ T12] ? kthread_blkcg+0xd0/0xd0 [ 701.983716][ T12] ret_from_fork+0x48/0x80 [ 701.984412][T13980] syzkaller0: entered allmulticast mode [ 701.988294][ T12] ? kthread_blkcg+0xd0/0xd0 [ 701.988331][ T12] ret_from_fork_asm+0x11/0x20 [ 701.988376][ T12] [ 702.014488][ T12] ================================================================================ [ 702.024343][ T12] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 702.031607][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted 6.6.99-syzkaller #0 [ 702.039660][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 702.050033][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 702.056389][ T12] Call Trace: [ 702.059712][ T12] [ 702.062675][ T12] dump_stack_lvl+0x16c/0x230 [ 702.067472][ T12] ? show_regs_print_info+0x20/0x20 [ 702.072698][ T12] ? load_image+0x3b0/0x3b0 [ 702.077249][ T12] panic+0x2c0/0x710 [ 702.081174][ T12] ? bpf_jit_dump+0xd0/0xd0 [ 702.085883][ T12] ? mutex_lock_nested+0x20/0x20 [ 702.090843][ T12] check_panic_on_warn+0x84/0xa0 [ 702.096041][ T12] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 702.101788][ T12] ieee80211_request_ibss_scan+0x4eb/0x790 [ 702.107629][ T12] ieee80211_ibss_work+0xdfd/0x10c0 [ 702.113033][ T12] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 702.119813][ T12] ? mark_lock+0x94/0x320 [ 702.124198][ T12] ? ieee80211_iface_work+0xbca/0xc70 [ 702.129724][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 702.135159][ T12] cfg80211_wiphy_work+0x225/0x260 [ 702.140585][ T12] ? process_scheduled_works+0x957/0x15b0 [ 702.146333][ T12] process_scheduled_works+0xa45/0x15b0 [ 702.151935][ T12] ? assign_work+0x400/0x400 [ 702.156552][ T12] ? assign_work+0x39e/0x400 [ 702.161169][ T12] worker_thread+0xa55/0xfc0 [ 702.165893][ T12] kthread+0x2fa/0x390 [ 702.169989][ T12] ? pr_cont_work+0x560/0x560 [ 702.174925][ T12] ? kthread_blkcg+0xd0/0xd0 [ 702.179570][ T12] ret_from_fork+0x48/0x80 [ 702.184030][ T12] ? kthread_blkcg+0xd0/0xd0 [ 702.188754][ T12] ret_from_fork_asm+0x11/0x20 [ 702.193580][ T12] [ 702.196901][ T12] Kernel Offset: disabled [ 702.201360][ T12] Rebooting in 86400 seconds..