last executing test programs: 4.711234291s ago: executing program 1 (id=1933): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x23, 0x0, &(0x7f0000000c80)='GPL\x00', 0x79, 0x7b, &(0x7f0000000cc0)=""/123, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x5, 0xb8a, 0xa, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff], 0x0, 0x10, 0x81}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x2f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x4, 0x8, 0x6, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x4, &(0x7f0000000f00), &(0x7f0000000f40)=[{0x0, 0x2, 0x5, 0x4}, {0x1, 0x5, 0x8, 0x1}, {0x3, 0x3, 0xb, 0x9}, {0x3, 0x1, 0x9, 0x8}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x800000000000, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 4.454488492s ago: executing program 1 (id=1928): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x6a00, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r1, 0x3, 0x3, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r3, 0x0, &(0x7f0000000380)=""/81}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) 4.267822327s ago: executing program 0 (id=1931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 4.254710058s ago: executing program 1 (id=1932): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x19, &(0x7f0000000000)=r7, 0x8) 3.98759985s ago: executing program 0 (id=1937): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000001c0)=r4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.98732473s ago: executing program 2 (id=1938): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 3.954919482s ago: executing program 3 (id=1939): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) syz_clone(0x81008000, 0x0, 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 3.889306977s ago: executing program 2 (id=1940): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 3.663585826s ago: executing program 3 (id=1941): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) 3.529487566s ago: executing program 3 (id=1942): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20010000) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) 3.459068862s ago: executing program 2 (id=1943): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x4, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 3.291595226s ago: executing program 3 (id=1944): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xa}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0xac97}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r0}, 0x18) 3.274837307s ago: executing program 1 (id=1945): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0xd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.178168126s ago: executing program 2 (id=1946): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.111013731s ago: executing program 0 (id=1947): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r1, 0x0, 0x0}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.031513147s ago: executing program 2 (id=1948): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)='$', 0x1}], 0x1}, 0x4040001) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x2, 0xfffffffe, 0x8000, 0x6, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020000008500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000240)='xen_cpu_write_idt_entry\x00', r4, 0x0, 0x7}, 0x18) recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 1.020817958s ago: executing program 3 (id=1949): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) 963.511033ms ago: executing program 0 (id=1950): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) 913.770587ms ago: executing program 0 (id=1951): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000, 0x400, 0x0, 0xfffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 127.38709ms ago: executing program 3 (id=1952): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 126.58215ms ago: executing program 1 (id=1960): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5) socketpair(0x1, 0x1, 0x0, 0x0) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) 123.17793ms ago: executing program 0 (id=1953): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 122.76767ms ago: executing program 2 (id=1954): socket$kcm(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000900), 0x4) 0s ago: executing program 1 (id=1955): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x50200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 61.358736][ T5771] cgroup: Unknown subsys name 'net' [ 61.553254][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.904879][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.282398][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.293471][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.297080][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.309082][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.310331][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.323815][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.324119][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.332998][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.343748][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.346286][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.354499][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.360760][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.374650][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.383516][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.391128][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.399423][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.406240][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.407422][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.414484][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.420904][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.435035][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.435911][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.450720][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.458169][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.902748][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 65.013541][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 65.023373][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 65.041432][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 65.065953][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.073343][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.081872][ T5783] bridge_slave_0: entered allmulticast mode [ 65.088845][ T5783] bridge_slave_0: entered promiscuous mode [ 65.101847][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.109048][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.116270][ T5783] bridge_slave_1: entered allmulticast mode [ 65.123806][ T5783] bridge_slave_1: entered promiscuous mode [ 65.214806][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.242425][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.324274][ T5783] team0: Port device team_slave_0 added [ 65.333694][ T5783] team0: Port device team_slave_1 added [ 65.350935][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.358158][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.365283][ T5791] bridge_slave_0: entered allmulticast mode [ 65.372253][ T5791] bridge_slave_0: entered promiscuous mode [ 65.379730][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.387038][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.394336][ T5784] bridge_slave_0: entered allmulticast mode [ 65.401571][ T5784] bridge_slave_0: entered promiscuous mode [ 65.451477][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.458859][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.466022][ T5791] bridge_slave_1: entered allmulticast mode [ 65.473977][ T5791] bridge_slave_1: entered promiscuous mode [ 65.480597][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.487961][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.495184][ T5784] bridge_slave_1: entered allmulticast mode [ 65.503045][ T5784] bridge_slave_1: entered promiscuous mode [ 65.509775][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.517250][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.524437][ T5780] bridge_slave_0: entered allmulticast mode [ 65.531543][ T5780] bridge_slave_0: entered promiscuous mode [ 65.539578][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.546531][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.572739][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.587149][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.594122][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.620134][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.650659][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.658082][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.665415][ T5780] bridge_slave_1: entered allmulticast mode [ 65.672465][ T5780] bridge_slave_1: entered promiscuous mode [ 65.718191][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.753242][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.765901][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.777297][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.789137][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.813326][ T5783] hsr_slave_0: entered promiscuous mode [ 65.821227][ T5783] hsr_slave_1: entered promiscuous mode [ 65.831308][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.913394][ T5784] team0: Port device team_slave_0 added [ 65.935474][ T5791] team0: Port device team_slave_0 added [ 65.946169][ T5780] team0: Port device team_slave_0 added [ 65.953827][ T5784] team0: Port device team_slave_1 added [ 65.984810][ T5791] team0: Port device team_slave_1 added [ 65.993209][ T5780] team0: Port device team_slave_1 added [ 66.016586][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.023983][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.050115][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.100539][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.107598][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.133741][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.159483][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.166461][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.192552][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.204412][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.211469][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.237773][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.251049][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.258210][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.284231][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.315328][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.322530][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.349134][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.463124][ T5780] hsr_slave_0: entered promiscuous mode [ 66.467894][ T5790] Bluetooth: hci3: command tx timeout [ 66.475004][ T5780] hsr_slave_1: entered promiscuous mode [ 66.481732][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.490419][ T5780] Cannot create hsr debugfs directory [ 66.499584][ T5784] hsr_slave_0: entered promiscuous mode [ 66.505806][ T5784] hsr_slave_1: entered promiscuous mode [ 66.512584][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.520327][ T5784] Cannot create hsr debugfs directory [ 66.536955][ T5793] Bluetooth: hci0: command tx timeout [ 66.536971][ T50] Bluetooth: hci2: command tx timeout [ 66.547092][ T5790] Bluetooth: hci1: command tx timeout [ 66.560430][ T5791] hsr_slave_0: entered promiscuous mode [ 66.566734][ T5791] hsr_slave_1: entered promiscuous mode [ 66.572889][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.580668][ T5791] Cannot create hsr debugfs directory [ 66.745270][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.775721][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.819284][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.850759][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.994326][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.011178][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.021359][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.037887][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.119508][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.130463][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.140814][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.152079][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.233162][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.244296][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.257910][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.283029][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.345319][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.389720][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.422053][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.429760][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.446645][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.453828][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.468878][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.518090][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.548035][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.579414][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.586565][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.602653][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.628914][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.636080][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.648184][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.655345][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.691507][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.713045][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.720239][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.805189][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.821881][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.869698][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.876893][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.919881][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.927115][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.121990][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.242903][ T5783] veth0_vlan: entered promiscuous mode [ 68.286344][ T5783] veth1_vlan: entered promiscuous mode [ 68.302588][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.318739][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.425903][ T5783] veth0_macvtap: entered promiscuous mode [ 68.441149][ T5783] veth1_macvtap: entered promiscuous mode [ 68.463467][ T5780] veth0_vlan: entered promiscuous mode [ 68.473227][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.487963][ T5791] veth0_vlan: entered promiscuous mode [ 68.503746][ T5780] veth1_vlan: entered promiscuous mode [ 68.528938][ T5791] veth1_vlan: entered promiscuous mode [ 68.540843][ T5790] Bluetooth: hci3: command tx timeout [ 68.550530][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.575736][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.597888][ T5780] veth0_macvtap: entered promiscuous mode [ 68.611625][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.620904][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.621632][ T5790] Bluetooth: hci1: command tx timeout [ 68.635526][ T5793] Bluetooth: hci2: command tx timeout [ 68.635566][ T5793] Bluetooth: hci0: command tx timeout [ 68.635885][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.655676][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.673300][ T5780] veth1_macvtap: entered promiscuous mode [ 68.724120][ T5791] veth0_macvtap: entered promiscuous mode [ 68.742970][ T5791] veth1_macvtap: entered promiscuous mode [ 68.752519][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.764768][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.777536][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.844647][ T5784] veth0_vlan: entered promiscuous mode [ 68.858694][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.871931][ T1360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.882015][ T1360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.883658][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.903377][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.914813][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.923811][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.932712][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.941978][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.981738][ T5784] veth1_vlan: entered promiscuous mode [ 68.990415][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.001523][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.011480][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.022040][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.033142][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.057331][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.074383][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.083727][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.094713][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.105279][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.115962][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.128904][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.180180][ T5784] veth0_macvtap: entered promiscuous mode [ 69.195511][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.204998][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.214436][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.223342][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.258725][ T5784] veth1_macvtap: entered promiscuous mode [ 69.270103][ T1360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.284945][ T1360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.381848][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.393513][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.396330][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.431283][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.441364][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.452119][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.462119][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.473368][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.486027][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.535549][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.546421][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.556311][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.567599][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.577880][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.588385][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.599847][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.620142][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.633437][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.669987][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.696499][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.716262][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.728811][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.785309][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.794947][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.020783][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.052356][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.249622][ T5878] syzkaller0: entered promiscuous mode [ 70.255231][ T5878] syzkaller0: entered allmulticast mode [ 70.276116][ T1360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.315431][ T1360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.619767][ T5793] Bluetooth: hci3: command tx timeout [ 70.697360][ T5793] Bluetooth: hci1: command tx timeout [ 70.703361][ T50] Bluetooth: hci0: command tx timeout [ 70.709827][ T5790] Bluetooth: hci2: command tx timeout [ 71.663942][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.672522][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.002842][ T5905] syz.2.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 72.021327][ T5882] syzkaller0: entered promiscuous mode [ 72.035897][ T5905] CPU: 1 PID: 5905 Comm: syz.2.3 Not tainted 6.6.101-syzkaller #0 [ 72.043821][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.053974][ T5905] Call Trace: [ 72.056735][ T5882] syzkaller0: entered allmulticast mode [ 72.057333][ T5905] [ 72.057373][ T5905] dump_stack_lvl+0x16c/0x230 [ 72.070849][ T5905] ? show_regs_print_info+0x20/0x20 [ 72.076150][ T5905] ? load_image+0x3b0/0x3b0 [ 72.080795][ T5905] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 72.087327][ T5905] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 72.093938][ T5905] warn_alloc+0x210/0x300 [ 72.098378][ T5905] ? stack_trace_save+0x9c/0xe0 [ 72.103336][ T5905] ? zone_watermark_ok_safe+0x230/0x230 [ 72.109038][ T5905] ? kasan_set_track+0x5f/0x70 [ 72.113878][ T5905] ? kasan_set_track+0x4e/0x70 [ 72.118724][ T5905] ? __kasan_kmalloc+0x8f/0xa0 [ 72.123761][ T5905] ? xsk_init_queue+0xb0/0x110 [ 72.128605][ T5905] ? xsk_setsockopt+0x4db/0x6f0 [ 72.133588][ T5905] ? do_sock_setsockopt+0x175/0x1a0 [ 72.138873][ T5905] ? __x64_sys_setsockopt+0x184/0x200 [ 72.144363][ T5905] __vmalloc_node_range+0x126/0x1320 [ 72.149914][ T5905] ? free_vm_area+0x50/0x50 [ 72.154593][ T5905] vmalloc_user+0x74/0x80 [ 72.159016][ T5905] ? xskq_create+0xbf/0x170 [ 72.163601][ T5905] xskq_create+0xbf/0x170 [ 72.168033][ T5905] xsk_init_queue+0xb0/0x110 [ 72.172733][ T5905] xsk_setsockopt+0x4db/0x6f0 [ 72.177527][ T5905] ? xsk_poll+0x670/0x670 [ 72.181991][ T5905] ? __fget_files+0x28/0x4d0 [ 72.186682][ T5905] ? aa_sock_opt_perm+0x74/0x100 [ 72.191745][ T5905] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 72.197378][ T5905] ? security_socket_setsockopt+0x7e/0xa0 [ 72.203187][ T5905] ? xsk_poll+0x670/0x670 [ 72.207645][ T5905] do_sock_setsockopt+0x175/0x1a0 [ 72.212770][ T5905] ? __fdget+0x180/0x210 [ 72.217128][ T5905] __x64_sys_setsockopt+0x184/0x200 [ 72.222458][ T5905] do_syscall_64+0x55/0xb0 [ 72.226969][ T5905] ? clear_bhb_loop+0x40/0x90 [ 72.231736][ T5905] ? clear_bhb_loop+0x40/0x90 [ 72.236514][ T5905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.242504][ T5905] RIP: 0033:0x7fc2db98eb69 [ 72.246991][ T5905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.266728][ T5905] RSP: 002b:00007fc2db7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 72.275175][ T5905] RAX: ffffffffffffffda RBX: 00007fc2dbbb5fa0 RCX: 00007fc2db98eb69 [ 72.283196][ T5905] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 72.291227][ T5905] RBP: 00007fc2dba11df1 R08: 0000000000000004 R09: 0000000000000000 [ 72.299250][ T5905] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 72.307253][ T5905] R13: 0000000000000000 R14: 00007fc2dbbb5fa0 R15: 00007ffe668f2168 [ 72.315300][ T5905] [ 72.340941][ T5905] Mem-Info: [ 72.345380][ T5905] active_anon:5129 inactive_anon:0 isolated_anon:0 [ 72.345380][ T5905] active_file:753 inactive_file:39823 isolated_file:0 [ 72.345380][ T5905] unevictable:768 dirty:1370 writeback:0 [ 72.345380][ T5905] slab_reclaimable:9860 slab_unreclaimable:95032 [ 72.345380][ T5905] mapped:23892 shmem:1361 pagetables:546 [ 72.345380][ T5905] sec_pagetables:0 bounce:0 [ 72.345380][ T5905] kernel_misc_reclaimable:0 [ 72.345380][ T5905] free:1366268 free_pcp:8902 free_cma:0 [ 72.393257][ T5905] Node 0 active_anon:20516kB inactive_anon:0kB active_file:3012kB inactive_file:159088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95568kB dirty:5472kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11416kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 72.427210][ T5905] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 72.460428][ T5905] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 72.488602][ T5905] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 72.494808][ T5905] Node 0 DMA32 free:1555288kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:20668kB inactive_anon:0kB active_file:3012kB inactive_file:157780kB unevictable:1536kB writepending:5460kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:14808kB local_pcp:7140kB free_cma:0kB [ 72.526322][ T5905] lowmem_reserve[]: 0 0 1 1 1 [ 72.531975][ T5905] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:12kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 72.563008][ T5905] lowmem_reserve[]: 0 0 0 0 0 [ 72.568776][ T5905] Node 1 Normal free:3894184kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20792kB local_pcp:11616kB free_cma:0kB [ 72.599211][ T5905] lowmem_reserve[]: 0 0 0 0 0 [ 72.604133][ T5905] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 72.621513][ T5905] Node 0 DMA32: 2*4kB (UM) 2*8kB (ME) 0*16kB 3*32kB (UME) 2*64kB (ME) 1*128kB (U) 1*256kB (M) 0*512kB 4*1024kB (UM) 3*2048kB (M) 377*4096kB (M) = 1555064kB [ 72.639172][ T5905] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 72.651762][ T5905] Node 1 Normal: 174*4kB (UME) 66*8kB (UME) 42*16kB (UME) 52*32kB (UME) 11*64kB (UE) 6*128kB (UME) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3894184kB [ 72.670858][ T5905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.680898][ T5905] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.690680][ T5905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.706787][ T5790] Bluetooth: hci3: command tx timeout [ 72.714974][ T5905] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.724787][ T5905] 41939 total pagecache pages [ 72.729925][ T5905] 0 pages in swap cache [ 72.734226][ T5905] Free swap = 124996kB [ 72.739430][ T5905] Total swap = 124996kB [ 72.745137][ T5905] 2097051 pages RAM [ 72.749329][ T5905] 0 pages HighMem/MovableOnly [ 72.754085][ T5905] 416137 pages reserved [ 72.758546][ T5905] 0 pages cma reserved [ 72.777414][ T5790] Bluetooth: hci2: command tx timeout [ 72.782881][ T5790] Bluetooth: hci1: command tx timeout [ 72.787140][ T5793] Bluetooth: hci0: command tx timeout [ 74.160348][ T5793] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 74.756750][ C0] hrtimer: interrupt took 96548 ns [ 74.845600][ T5948] netlink: 'syz.1.25': attribute type 64 has an invalid length. [ 75.087277][ T5948] syz.1.25 (5948) used greatest stack depth: 19688 bytes left [ 76.114005][ T5974] warning: `syz.3.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.136481][ T5977] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.35'. [ 76.601143][ T5979] syzkaller0: entered promiscuous mode [ 76.613535][ T5979] syzkaller0: entered allmulticast mode [ 80.512943][ T6049] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 81.181480][ T6025] netlink: 'syz.0.55': attribute type 33 has an invalid length. [ 81.189668][ T6025] netlink: 152 bytes leftover after parsing attributes in process `syz.0.55'. [ 81.199716][ T6025] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 81.904767][ T9] cfg80211: failed to load regulatory.db [ 83.534168][ T6077] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 85.346431][ T6095] syzkaller0: entered promiscuous mode [ 85.352169][ T6095] syzkaller0: entered allmulticast mode [ 85.378929][ T6095] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 85.867513][ T6113] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.488742][ T6131] : entered promiscuous mode [ 86.508514][ T6131] : entered allmulticast mode [ 87.356026][ T5790] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 90.429042][ T6196] lo: entered allmulticast mode [ 90.487917][ T6198] lo: entered promiscuous mode [ 90.503008][ T6198] lo: left allmulticast mode [ 90.665752][ T6200] syzkaller0: entered promiscuous mode [ 90.672269][ T6200] syzkaller0: entered allmulticast mode [ 93.503469][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 94.023521][ T6235] syzkaller0: entered promiscuous mode [ 94.045877][ T6235] syzkaller0: entered allmulticast mode [ 98.013817][ T6302] syzkaller0: entered promiscuous mode [ 98.021444][ T6302] syzkaller0: entered allmulticast mode [ 105.432373][ T6370] syzkaller0: entered promiscuous mode [ 105.445321][ T6370] syzkaller0: entered allmulticast mode [ 108.750349][ T6407] syzkaller0: entered promiscuous mode [ 108.759955][ T6407] syzkaller0: entered allmulticast mode [ 110.955663][ T6444] syzkaller0: entered promiscuous mode [ 110.986978][ T6444] syzkaller0: entered allmulticast mode [ 112.897532][ T6471] syzkaller0: entered promiscuous mode [ 112.903096][ T6471] syzkaller0: entered allmulticast mode [ 114.664413][ T6469] syzkaller0: entered promiscuous mode [ 114.670202][ T6469] syzkaller0: entered allmulticast mode [ 118.022103][ T6532] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.245'. [ 120.392313][ T6568] syzkaller0: entered promiscuous mode [ 120.398458][ T6568] syzkaller0: entered allmulticast mode [ 122.847597][ T6590] netlink: 'syz.2.275': attribute type 64 has an invalid length. [ 123.080152][ T5790] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 123.589829][ T6618] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.720099][ T6622] syzkaller0: entered promiscuous mode [ 123.725740][ T6622] syzkaller0: entered allmulticast mode [ 125.442919][ T6635] syzkaller0: entered promiscuous mode [ 125.512832][ T6635] syzkaller0: entered allmulticast mode [ 127.554038][ T5790] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 128.278582][ T6670] netlink: 'syz.3.292': attribute type 64 has an invalid length. [ 128.584689][ T6673] syzkaller0: entered promiscuous mode [ 128.595816][ T6673] syzkaller0: entered allmulticast mode [ 131.621706][ T6716] netlink: 'syz.0.307': attribute type 64 has an invalid length. [ 131.633816][ T6714] netlink: 'syz.3.310': attribute type 29 has an invalid length. [ 131.676760][ T6714] netlink: 'syz.3.310': attribute type 29 has an invalid length. [ 131.695231][ T6717] netlink: 'syz.3.310': attribute type 29 has an invalid length. [ 131.797684][ T6713] syzkaller0: entered promiscuous mode [ 131.803800][ T6713] syzkaller0: entered allmulticast mode [ 131.871005][ T6717] syzkaller0: entered promiscuous mode [ 131.877020][ T6717] syzkaller0: entered allmulticast mode [ 131.884172][ T6714] ip6_tunnel: non-ECT from 0000:0800:1b00:0000:0000:0800:1e00:0000 with DS=0x37 [ 133.112815][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.119578][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.435706][ T6733] netlink: 'syz.2.318': attribute type 19 has an invalid length. [ 135.458275][ T6733] netlink: 40 bytes leftover after parsing attributes in process `syz.2.318'. [ 135.701669][ T6744] netlink: 'syz.0.320': attribute type 64 has an invalid length. [ 136.898818][ T6761] netlink: 'syz.3.326': attribute type 19 has an invalid length. [ 136.957109][ T6761] netlink: 156 bytes leftover after parsing attributes in process `syz.3.326'. [ 137.474482][ T6773] netlink: 'syz.3.329': attribute type 33 has an invalid length. [ 137.500915][ T6773] netlink: 152 bytes leftover after parsing attributes in process `syz.3.329'. [ 139.520384][ T6802] netlink: 'syz.3.342': attribute type 12 has an invalid length. [ 139.543056][ T6802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.342'. [ 139.992663][ T6810] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.224755][ T6829] syzkaller0: entered promiscuous mode [ 142.256783][ T6829] syzkaller0: entered allmulticast mode [ 144.464917][ T6835] netlink: 'syz.1.353': attribute type 33 has an invalid length. [ 144.472890][ T6835] netlink: 152 bytes leftover after parsing attributes in process `syz.1.353'. [ 149.879912][ T6871] netlink: 'syz.2.363': attribute type 15 has an invalid length. [ 149.881048][ T6868] netlink: 'syz.1.362': attribute type 29 has an invalid length. [ 149.957546][ T6868] netlink: 'syz.1.362': attribute type 29 has an invalid length. [ 149.997185][ T6872] netlink: 'syz.1.362': attribute type 29 has an invalid length. [ 150.225850][ T6868] syzkaller0: entered promiscuous mode [ 150.245862][ T6868] syzkaller0: entered allmulticast mode [ 155.070794][ T6875] netlink: 'syz.0.364': attribute type 33 has an invalid length. [ 155.079225][ T6875] netlink: 152 bytes leftover after parsing attributes in process `syz.0.364'. [ 156.184552][ T6909] netlink: 'syz.3.379': attribute type 2 has an invalid length. [ 156.203874][ T6909] netlink: 164 bytes leftover after parsing attributes in process `syz.3.379'. [ 159.518071][ T6926] netlink: 'syz.2.384': attribute type 29 has an invalid length. [ 159.671346][ T6926] netlink: 'syz.2.384': attribute type 29 has an invalid length. [ 159.680132][ T6927] netlink: 'syz.2.384': attribute type 29 has an invalid length. [ 159.773690][ T6926] syzkaller0: entered promiscuous mode [ 159.779252][ T6926] syzkaller0: entered allmulticast mode [ 161.264319][ T6936] netlink: 'syz.2.385': attribute type 33 has an invalid length. [ 161.274099][ T6936] netlink: 152 bytes leftover after parsing attributes in process `syz.2.385'. [ 161.305021][ T5793] Bluetooth: hci2: unknown advertising packet type: 0xff [ 161.305096][ T5793] Bluetooth: hci2: unknown advertising packet type: 0x80 [ 162.325375][ T5793] Bluetooth: hci3: unknown advertising packet type: 0xff [ 162.333598][ T5793] Bluetooth: hci3: unknown advertising packet type: 0x80 [ 165.122425][ T5793] Bluetooth: hci1: unknown advertising packet type: 0xff [ 165.131615][ T5793] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 168.498460][ T7056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.431'. [ 172.214740][ T7100] …: port 1(ip6gretap0) entered blocking state [ 172.231040][ T7100] …: port 1(ip6gretap0) entered disabled state [ 172.240417][ T7100] ip6gretap0: entered allmulticast mode [ 172.251445][ T7100] ip6gretap0: entered promiscuous mode [ 172.479841][ T5793] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 172.488204][ T5793] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 172.520130][ T7106] netlink: 'syz.0.446': attribute type 29 has an invalid length. [ 172.537467][ T7106] netlink: 'syz.0.446': attribute type 29 has an invalid length. [ 172.629093][ T7106] netlink: 'syz.0.446': attribute type 29 has an invalid length. [ 172.779735][ T7106] syzkaller0: entered promiscuous mode [ 172.816434][ T7106] syzkaller0: entered allmulticast mode [ 175.647613][ T5793] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 175.698085][ T7123] syzkaller0: entered promiscuous mode [ 175.718333][ T7123] syzkaller0: entered allmulticast mode [ 176.998549][ T7156] netlink: 'syz.3.464': attribute type 29 has an invalid length. [ 177.826490][ T7135] netlink: 32 bytes leftover after parsing attributes in process `syz.0.457'. [ 177.918134][ T7156] netlink: 'syz.3.464': attribute type 29 has an invalid length. [ 177.995487][ T7159] syzkaller0: entered promiscuous mode [ 178.001306][ T7159] syzkaller0: entered allmulticast mode [ 178.971077][ T7191] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.472'. [ 180.171926][ T5793] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 180.220116][ T7200] netlink: 'syz.1.478': attribute type 10 has an invalid length. [ 180.247358][ T7200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.478'. [ 180.276908][ T7200] dummy0: entered promiscuous mode [ 180.283122][ T7200] bridge0: port 3(dummy0) entered blocking state [ 180.314625][ T7200] bridge0: port 3(dummy0) entered disabled state [ 180.324758][ T7200] dummy0: entered allmulticast mode [ 180.332723][ T7200] bridge0: port 3(dummy0) entered blocking state [ 180.339631][ T7200] bridge0: port 3(dummy0) entered forwarding state [ 181.051654][ T5793] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 181.433418][ T7221] syzkaller0: entered promiscuous mode [ 181.514410][ T7221] syzkaller0: entered allmulticast mode [ 182.196896][ T5793] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 182.206863][ T5793] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 182.235347][ T7234] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.499'. [ 184.740966][ T7262] netlink: 'syz.2.502': attribute type 39 has an invalid length. [ 185.638790][ T7279] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.507'. [ 185.768452][ T7281] netlink: 'syz.3.515': attribute type 39 has an invalid length. [ 186.660240][ T5793] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 186.668180][ T5793] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 188.083277][ T7328] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.529'. [ 188.100254][ T7328] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 188.126136][ T7328] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 188.194450][ T7331] netlink: 'syz.0.527': attribute type 39 has an invalid length. [ 188.434286][ T7343] netlink: 'syz.2.533': attribute type 10 has an invalid length. [ 188.457873][ T7343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.474875][ T7343] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 188.506853][ T7340] netlink: 'syz.2.533': attribute type 10 has an invalid length. [ 188.519964][ T7340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.533'. [ 188.530112][ T7340] batadv0: entered promiscuous mode [ 188.535779][ T7340] batadv0: entered allmulticast mode [ 188.559706][ T7340] bond0: (slave batadv0): Releasing backup interface [ 188.584885][ T7340] bridge0: port 3(batadv0) entered blocking state [ 188.592969][ T7340] bridge0: port 3(batadv0) entered disabled state [ 188.924236][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 188.933904][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 189.366544][ T5793] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 189.375111][ T5793] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 190.042791][ T7368] netlink: 'syz.1.543': attribute type 39 has an invalid length. [ 190.338572][ T7372] bond_slave_1: mtu less than device minimum [ 190.584525][ T7378] veth0_vlan: entered allmulticast mode [ 190.786750][ T7379] veth0_vlan: left promiscuous mode [ 190.950783][ T7379] veth0_vlan: entered promiscuous mode [ 191.497069][ T5103] Bluetooth: hci2: command 0x0406 tx timeout [ 191.503266][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 191.511623][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 191.514059][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 191.889922][ T7391] netlink: 'syz.3.554': attribute type 27 has an invalid length. [ 192.079123][ T7391] bond0: (slave bond_slave_0): Releasing backup interface [ 192.676565][ T7406] bond_slave_1: mtu less than device minimum [ 193.283103][ T7402] syzkaller0: entered promiscuous mode [ 193.349670][ T7402] syzkaller0: entered allmulticast mode [ 194.552808][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.559245][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.034159][ T7470] netlink: 'syz.3.562': attribute type 10 has an invalid length. [ 197.073829][ T7469] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.561'. [ 197.081682][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.115218][ T7470] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 197.124463][ T7469] netlink: 'syz.1.561': attribute type 10 has an invalid length. [ 197.141670][ T7469] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 197.215182][ T5786] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 197.222996][ T5786] Bluetooth: hci2: Invalid handle: 0x85b0 > 0x0eff [ 197.230139][ T7466] netlink: 'syz.3.562': attribute type 10 has an invalid length. [ 197.282624][ T7466] netlink: 40 bytes leftover after parsing attributes in process `syz.3.562'. [ 197.292218][ T7466] batadv0: entered promiscuous mode [ 197.314942][ T7466] batadv0: entered allmulticast mode [ 197.366637][ T7466] bond0: (slave batadv0): Releasing backup interface [ 197.395068][ T7466] bridge0: port 3(batadv0) entered blocking state [ 197.413529][ T7466] bridge0: port 3(batadv0) entered disabled state [ 197.528717][ T7480] bond_slave_1: mtu less than device minimum [ 197.549735][ T7445] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 197.559224][ T7445] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 197.766606][ T7482] C: renamed from team_slave_0 (while UP) [ 197.813193][ T7482] netlink: 'syz.0.568': attribute type 3 has an invalid length. [ 197.841427][ T7482] netlink: 152 bytes leftover after parsing attributes in process `syz.0.568'. [ 197.889674][ T7482] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 197.935151][ T7490] netlink: 'syz.1.572': attribute type 27 has an invalid length. [ 198.032492][ T7490] bond0: (slave bond_slave_0): Releasing backup interface [ 198.092824][ T7498] veth0_vlan: entered allmulticast mode [ 198.165646][ T7499] veth0_vlan: left promiscuous mode [ 198.351260][ T7499] veth0_vlan: entered promiscuous mode [ 198.624866][ T7505] netlink: 'syz.1.579': attribute type 10 has an invalid length. [ 198.645969][ T7505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.678690][ T7505] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 198.736430][ T7505] netlink: 'syz.1.579': attribute type 10 has an invalid length. [ 198.756618][ T7505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.579'. [ 198.796162][ T7505] batadv0: entered promiscuous mode [ 198.814157][ T7505] batadv0: entered allmulticast mode [ 198.836237][ T7505] bond0: (slave batadv0): Releasing backup interface [ 198.852759][ T7505] bridge0: port 4(batadv0) entered blocking state [ 198.867014][ T7505] bridge0: port 4(batadv0) entered disabled state [ 199.298790][ T7440] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 199.308877][ T7440] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 199.322869][ T7531] veth0_vlan: entered allmulticast mode [ 199.434757][ T7531] veth0_vlan: left promiscuous mode [ 199.442743][ T7531] veth0_vlan: entered promiscuous mode [ 199.654449][ T7542] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.593'. [ 199.676913][ T7542] netlink: zone id is out of range [ 199.682248][ T7542] netlink: zone id is out of range [ 199.688835][ T7542] netlink: zone id is out of range [ 199.694120][ T7542] netlink: zone id is out of range [ 199.701587][ T7542] netlink: zone id is out of range [ 199.713150][ T7542] netlink: zone id is out of range [ 199.719098][ T7540] C: renamed from team_slave_0 (while UP) [ 199.735221][ T7542] netlink: zone id is out of range [ 199.748889][ T7540] netlink: 'syz.1.592': attribute type 3 has an invalid length. [ 199.757104][ T7542] netlink: zone id is out of range [ 199.772044][ T7540] netlink: 152 bytes leftover after parsing attributes in process `syz.1.592'. [ 200.276191][ T7552] netlink: 'syz.0.594': attribute type 10 has an invalid length. [ 200.328564][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.350349][ T7552] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 200.361504][ T7550] netlink: 'syz.0.594': attribute type 10 has an invalid length. [ 200.396033][ T7550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.594'. [ 200.422379][ T7550] batadv0: entered promiscuous mode [ 200.436328][ T7550] batadv0: entered allmulticast mode [ 200.446466][ T7550] bond0: (slave batadv0): Releasing backup interface [ 200.475359][ T7550] bridge0: port 3(batadv0) entered blocking state [ 200.485505][ T7550] bridge0: port 3(batadv0) entered disabled state [ 200.502727][ T7548] C: renamed from team_slave_0 (while UP) [ 200.521205][ T7548] netlink: 152 bytes leftover after parsing attributes in process `syz.2.603'. [ 200.820958][ T5790] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 200.828900][ T5790] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff [ 200.843557][ T7560] syzkaller0: entered promiscuous mode [ 200.851271][ T7560] syzkaller0: entered allmulticast mode [ 200.949751][ T1335] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 200.959341][ T1335] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 203.121307][ T5790] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 203.334049][ T7586] C: renamed from team_slave_0 (while UP) [ 203.364719][ T7586] validate_nla: 1 callbacks suppressed [ 203.364760][ T7586] netlink: 'syz.3.612': attribute type 3 has an invalid length. [ 203.404240][ T7586] netlink: 152 bytes leftover after parsing attributes in process `syz.3.612'. [ 203.434788][ T7586] net_ratelimit: 3 callbacks suppressed [ 203.434817][ T7586] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 203.755804][ T7605] netlink: 'syz.2.619': attribute type 10 has an invalid length. [ 203.808798][ T7605] batadv0: left allmulticast mode [ 203.813995][ T7605] batadv0: left promiscuous mode [ 203.855462][ T7605] bridge0: port 3(batadv0) entered disabled state [ 203.901168][ T7605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.934062][ T7605] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 203.955613][ T7603] netlink: 'syz.2.619': attribute type 10 has an invalid length. [ 203.966362][ T7603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.619'. [ 203.994160][ T7603] batadv0: entered promiscuous mode [ 204.012522][ T7603] batadv0: entered allmulticast mode [ 204.029824][ T7603] bond0: (slave batadv0): Releasing backup interface [ 204.082485][ T7603] bridge0: port 3(batadv0) entered blocking state [ 204.114109][ T7603] bridge0: port 3(batadv0) entered disabled state [ 204.597627][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 204.607073][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 204.984272][ T5790] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 205.176765][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 205.284490][ T7630] netlink: 'syz.2.636': attribute type 10 has an invalid length. [ 205.749097][ T7634] netlink: 'syz.0.628': attribute type 3 has an invalid length. [ 205.772004][ T7634] netlink: 152 bytes leftover after parsing attributes in process `syz.0.628'. [ 205.793185][ T7634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.314638][ T7670] netlink: 14 bytes leftover after parsing attributes in process `syz.1.632'. [ 206.343043][ T7670] hsr_slave_0: left promiscuous mode [ 206.352707][ T7670] hsr_slave_1: left promiscuous mode [ 206.392569][ T7675] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.633'. [ 206.413866][ T7675] netlink: zone id is out of range [ 206.419254][ T7675] netlink: zone id is out of range [ 206.425161][ T7675] netlink: zone id is out of range [ 206.435154][ T7675] netlink: zone id is out of range [ 206.440454][ T7675] netlink: zone id is out of range [ 206.445590][ T7675] netlink: zone id is out of range [ 206.459863][ T7675] netlink: zone id is out of range [ 206.465112][ T7675] netlink: zone id is out of range [ 206.798122][ T5790] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 207.026955][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 207.125313][ T7690] netlink: 'syz.0.641': attribute type 3 has an invalid length. [ 207.141820][ T7690] netlink: 152 bytes leftover after parsing attributes in process `syz.0.641'. [ 207.219352][ T7696] syzkaller0: entered promiscuous mode [ 207.224961][ T7696] syzkaller0: entered allmulticast mode [ 207.409999][ T7704] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.646'. [ 208.866875][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 209.085836][ T7702] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 209.457727][ T7719] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 209.860754][ T7730] netlink: 'syz.1.654': attribute type 3 has an invalid length. [ 209.905927][ T7730] netlink: 152 bytes leftover after parsing attributes in process `syz.1.654'. [ 209.928854][ T7730] net_ratelimit: 11 callbacks suppressed [ 209.928900][ T7730] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 209.966550][ T7732] netlink: 'syz.3.656': attribute type 39 has an invalid length. [ 210.552249][ T7746] sit0: entered allmulticast mode [ 210.714014][ T7740] netlink: 'syz.0.668': attribute type 3 has an invalid length. [ 210.727499][ T7740] netlink: 152 bytes leftover after parsing attributes in process `syz.0.668'. [ 210.741818][ T7740] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.850240][ T7751] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 211.166591][ T7761] syzkaller0: entered promiscuous mode [ 211.172916][ T7769] sctp: [Deprecated]: syz.3.678 (pid 7769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.172916][ T7769] Use struct sctp_sack_info instead [ 211.189884][ T7761] syzkaller0: entered allmulticast mode [ 211.210356][ T7767] netlink: 'syz.1.669': attribute type 10 has an invalid length. [ 213.255281][ T7783] netlink: 'syz.3.674': attribute type 3 has an invalid length. [ 213.268177][ T7783] netlink: 152 bytes leftover after parsing attributes in process `syz.3.674'. [ 213.280256][ T7783] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 213.600428][ T7790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.679'. [ 214.779793][ T7810] netlink: 'syz.3.687': attribute type 3 has an invalid length. [ 214.811245][ T7810] netlink: 152 bytes leftover after parsing attributes in process `syz.3.687'. [ 214.835646][ T7810] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 215.057233][ T7816] syzkaller0: entered promiscuous mode [ 215.065745][ T7816] syzkaller0: entered allmulticast mode [ 217.820007][ T7838] netlink: 'syz.0.703': attribute type 39 has an invalid length. [ 217.854270][ T7841] sit0: entered allmulticast mode [ 218.055554][ T5790] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 218.121545][ T7845] netlink: 'syz.2.698': attribute type 3 has an invalid length. [ 218.144998][ T7845] netlink: 152 bytes leftover after parsing attributes in process `syz.2.698'. [ 218.168815][ T7845] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 218.248119][ T7858] netlink: 14 bytes leftover after parsing attributes in process `syz.0.701'. [ 218.279313][ T7858] hsr_slave_0: left promiscuous mode [ 218.285681][ T7858] hsr_slave_1: left promiscuous mode [ 218.462258][ T7864] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.648564][ T7862] netlink: 'syz.2.712': attribute type 3 has an invalid length. [ 218.656926][ T7862] netlink: 152 bytes leftover after parsing attributes in process `syz.2.712'. [ 218.672376][ T7862] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 219.229655][ T7877] netlink: 14 bytes leftover after parsing attributes in process `syz.3.717'. [ 219.245434][ T7877] hsr_slave_0: left promiscuous mode [ 219.253401][ T7877] hsr_slave_1: left promiscuous mode [ 219.299123][ T7875] sit0: entered allmulticast mode [ 219.406822][ T7879] syzkaller0: entered promiscuous mode [ 219.412331][ T7879] syzkaller0: entered allmulticast mode [ 220.061040][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 221.158198][ T7883] netlink: 'syz.1.711': attribute type 39 has an invalid length. [ 221.195689][ T7894] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 221.378695][ T5786] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 221.442203][ T7898] netlink: 'syz.0.716': attribute type 3 has an invalid length. [ 221.471856][ T7898] netlink: 152 bytes leftover after parsing attributes in process `syz.0.716'. [ 221.514573][ T7898] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 221.877121][ T7912] syzkaller0: entered promiscuous mode [ 221.882649][ T7912] syzkaller0: entered allmulticast mode [ 221.997867][ T7918] sit0: entered allmulticast mode [ 222.491437][ T7930] syzkaller0: entered promiscuous mode [ 222.511447][ T7930] syzkaller0: entered allmulticast mode [ 223.117058][ T5790] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 223.326839][ T5790] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 223.416968][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 225.177338][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 225.505110][ T7957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.739'. [ 225.515056][ T7961] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 225.529117][ T7961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.740'. [ 225.551491][ T7961] batman_adv: batadv0: Adding interface: vlan1 [ 225.559008][ T7961] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.616023][ T7961] batman_adv: batadv0: Interface activated: vlan1 [ 225.950285][ T50] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 226.108223][ T7978] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.746'. [ 226.473229][ T7984] syzkaller0: entered promiscuous mode [ 226.484664][ T7984] syzkaller0: entered allmulticast mode [ 227.266984][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 227.296342][ T7989] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.760'. [ 230.201974][ T7991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.751'. [ 230.365057][ T8032] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 230.373637][ T8032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.769'. [ 230.390389][ T8032] batman_adv: batadv0: Adding interface: vlan1 [ 230.396621][ T8032] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.443168][ T8032] batman_adv: batadv0: Interface activated: vlan1 [ 231.037736][ T8044] pim6reg1: entered promiscuous mode [ 231.050839][ T8044] pim6reg1: entered allmulticast mode [ 231.313865][ T8048] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.774'. [ 232.664663][ T8071] netlink: 'syz.0.791': attribute type 25 has an invalid length. [ 232.899120][ T8079] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.785'. [ 233.110428][ T8085] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.786'. [ 234.204912][ T8109] netlink: 'syz.2.796': attribute type 4 has an invalid length. [ 234.223106][ T8109] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.796'. [ 234.364182][ T8112] pim6reg1: entered promiscuous mode [ 234.382817][ T8112] pim6reg1: entered allmulticast mode [ 235.759572][ T8132] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.804'. [ 236.494921][ T8138] syzkaller0: entered promiscuous mode [ 236.525374][ T8138] syzkaller0: entered allmulticast mode [ 237.534114][ T8175] netlink: 'syz.1.824': attribute type 4 has an invalid length. [ 237.542156][ T8175] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.824'. [ 237.726011][ T8179] netlink: 'syz.1.816': attribute type 25 has an invalid length. [ 238.080638][ T8187] netlink: 132 bytes leftover after parsing attributes in process `syz.0.819'. [ 239.046572][ T8201] netlink: 'syz.0.827': attribute type 4 has an invalid length. [ 239.059383][ T8201] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.827'. [ 241.598686][ T8222] netlink: 'syz.1.834': attribute type 10 has an invalid length. [ 242.546451][ T8242] syzkaller0: entered promiscuous mode [ 242.561992][ T8242] syzkaller0: entered allmulticast mode [ 242.797528][ T8249] netlink: 'syz.2.848': attribute type 10 has an invalid length. [ 242.818651][ T8249] bond0: (slave bond_slave_0): Releasing backup interface [ 244.462459][ T8282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.860'. [ 244.525222][ T8287] netlink: 'syz.0.861': attribute type 10 has an invalid length. [ 244.548629][ T8287] bond0: (slave bond_slave_0): Releasing backup interface [ 244.802338][ T8290] syzkaller0: entered promiscuous mode [ 244.811749][ T8290] syzkaller0: entered allmulticast mode [ 245.869783][ T8312] syzkaller0: entered allmulticast mode [ 246.265629][ T8320] netlink: 'syz.3.876': attribute type 39 has an invalid length. [ 246.510851][ T8328] syzkaller0: entered promiscuous mode [ 246.516550][ T8328] syzkaller0: entered allmulticast mode [ 246.945175][ T8338] syzkaller0: entered promiscuous mode [ 246.961140][ T8338] syzkaller0: entered allmulticast mode [ 246.969492][ T8341] syzkaller0: entered promiscuous mode [ 246.975095][ T8341] syzkaller0: entered allmulticast mode [ 247.044138][ T8344] wg2: entered promiscuous mode [ 247.050129][ T8344] wg2: entered allmulticast mode [ 247.286073][ T8353] netlink: 'syz.2.887': attribute type 39 has an invalid length. [ 248.213469][ T8370] syzkaller0: entered promiscuous mode [ 248.220139][ T8370] syzkaller0: entered allmulticast mode [ 248.233684][ T8373] netlink: 'syz.2.897': attribute type 10 has an invalid length. [ 248.348211][ T8375] syzkaller0: entered allmulticast mode [ 248.443053][ T8379] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.900'. [ 248.564710][ T8381] netlink: 'syz.1.901': attribute type 10 has an invalid length. [ 248.628333][ T8384] netlink: 'syz.0.902': attribute type 39 has an invalid length. [ 248.787943][ T8390] syzkaller0: entered allmulticast mode [ 249.181298][ T8398] __sock_release: fasync list not empty! [ 249.236192][ T8403] netlink: 'syz.1.911': attribute type 10 has an invalid length. [ 249.264179][ T8403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.911'. [ 249.287814][ T8403] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 249.303209][ T8403] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.345138][ T8403] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 249.380422][ T8405] syzkaller0: entered promiscuous mode [ 249.386319][ T8405] syzkaller0: entered allmulticast mode [ 249.666638][ T8416] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.916'. [ 249.684299][ T8421] netlink: 132 bytes leftover after parsing attributes in process `syz.3.918'. [ 249.706248][ T8416] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 249.915059][ T8426] netlink: 'syz.3.921': attribute type 10 has an invalid length. [ 249.997596][ T8428] __sock_release: fasync list not empty! [ 250.831696][ T8453] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.932'. [ 250.853048][ T8453] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 251.131613][ T8462] netlink: 'syz.1.935': attribute type 10 has an invalid length. [ 251.178590][ T8460] wg2: entered promiscuous mode [ 251.183647][ T8460] wg2: entered allmulticast mode [ 252.949507][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.994979][ T1360] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.002269][ T1360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.849169][ T8509] netlink: 'syz.2.953': attribute type 10 has an invalid length. [ 254.415238][ T8519] netlink: 'syz.2.956': attribute type 10 has an invalid length. [ 254.423789][ T8519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.956'. [ 254.442665][ T8519] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 254.449606][ T8519] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.478260][ T8519] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 255.994614][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.001366][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.605355][ T8551] syzkaller0: entered promiscuous mode [ 256.611316][ T8551] syzkaller0: entered allmulticast mode [ 257.138656][ T8558] netlink: 'syz.0.969': attribute type 10 has an invalid length. [ 257.758001][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.801066][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.808307][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.427789][ T8591] netlink: 'syz.3.982': attribute type 10 has an invalid length. [ 258.472780][ T8596] syzkaller0: entered allmulticast mode [ 258.504770][ T8596] syzkaller0: entered promiscuous mode [ 258.523006][ T8596] syzkaller0: left allmulticast mode [ 259.935984][ T50] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 259.945248][ T50] Bluetooth: hci2: Invalid handle: 0x85b0 > 0x0eff [ 260.296541][ T5786] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 261.188220][ T5786] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 261.648852][ T5786] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 261.895243][ T8643] syzkaller0: entered promiscuous mode [ 261.930135][ T8643] syzkaller0: entered allmulticast mode [ 262.213725][ T8649] syzkaller0: entered promiscuous mode [ 262.427342][ T8657] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 262.649858][ T5786] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 262.985701][ T5786] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 263.304514][ T8680] syzkaller0: entered allmulticast mode [ 263.339789][ T8680] syzkaller0: entered promiscuous mode [ 263.345515][ T8680] syzkaller0: left allmulticast mode [ 263.424653][ T8678] syzkaller0: entered promiscuous mode [ 263.430917][ T8678] syzkaller0: entered allmulticast mode [ 266.495592][ T8717] syzkaller0: entered allmulticast mode [ 266.516215][ T8717] syzkaller0: entered promiscuous mode [ 266.521854][ T8717] syzkaller0: left allmulticast mode [ 266.826112][ T5786] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 268.125196][ T8754] syzkaller0: entered allmulticast mode [ 268.180559][ T8754] syzkaller0: entered promiscuous mode [ 268.186488][ T8754] syzkaller0: left allmulticast mode [ 268.435418][ T8763] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 268.449217][ T8763] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 269.283336][ T5786] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 270.370969][ T8810] netlink: 'syz.3.1059': attribute type 29 has an invalid length. [ 270.409298][ T8810] netlink: 'syz.3.1059': attribute type 29 has an invalid length. [ 272.053570][ T8857] netlink: 'syz.2.1073': attribute type 4 has an invalid length. [ 272.154646][ T8857] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1073'. [ 274.790497][ T8875] syz.0.1086[8875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.790633][ T8875] syz.0.1086[8875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.913584][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.962923][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.992930][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.006520][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.024419][ T8880] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 275.032607][ T8880] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 275.083111][ T8880] bridge0: port 4(batadv0) entered disabled state [ 275.446401][ T5786] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 275.496448][ T8897] netlink: 'syz.0.1087': attribute type 29 has an invalid length. [ 276.920351][ T8897] netlink: 'syz.0.1087': attribute type 29 has an invalid length. [ 277.219498][ T8907] syz.1.1093[8907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.221367][ T8907] syz.1.1093[8907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.758460][ T8922] syz.2.1105[8922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.802164][ T8922] syz.2.1105[8922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.954296][ T8929] netlink: 'syz.3.1099': attribute type 3 has an invalid length. [ 278.974044][ T8929] netlink: 'syz.3.1099': attribute type 4 has an invalid length. [ 278.982443][ T8929] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1099'. [ 281.275335][ T8954] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 282.894964][ T9000] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1127'. [ 282.907208][ T9000] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1127'. [ 282.933891][ T9000] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1127'. [ 282.958370][ T9002] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 283.017394][ T5786] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 284.027901][ T5786] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 284.330756][ T9041] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1140'. [ 284.485768][ T50] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 285.084355][ T9062] syz.1.1148 uses obsolete (PF_INET,SOCK_PACKET) [ 286.063178][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 286.476387][ T5786] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 287.176983][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 291.670457][ T50] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 292.630498][ T9145] syzkaller0: entered promiscuous mode [ 292.647466][ T9145] syzkaller0: entered allmulticast mode [ 292.675490][ T50] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 293.081844][ T9161] Zero length message leads to an empty skb [ 295.823866][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 296.776965][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 296.782723][ T9188] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1186'. [ 296.852409][ T9190] netlink: 'syz.1.1187': attribute type 4 has an invalid length. [ 296.864094][ T9190] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1187'. [ 296.880803][ T9190] wlan1: mtu less than device minimum [ 299.140194][ T9214] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 299.151701][ T9214] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1195'. [ 299.170649][ T9214] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1195'. [ 299.263579][ T9221] syzkaller0: entered promiscuous mode [ 299.271296][ T9221] syzkaller0: entered allmulticast mode [ 301.593649][ T9236] netlink: 'syz.2.1211': attribute type 4 has an invalid length. [ 301.612671][ T9236] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1211'. [ 301.657518][ T9236] : renamed from bond0 (while UP) [ 302.333677][ T9248] syz.2.1203: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 302.394099][ T9248] CPU: 1 PID: 9248 Comm: syz.2.1203 Not tainted 6.6.101-syzkaller #0 [ 302.402269][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.412381][ T9248] Call Trace: [ 302.415683][ T9248] [ 302.418639][ T9248] dump_stack_lvl+0x16c/0x230 [ 302.423369][ T9248] ? show_regs_print_info+0x20/0x20 [ 302.428590][ T9248] ? load_image+0x3b0/0x3b0 [ 302.433131][ T9248] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 302.439573][ T9248] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 302.446102][ T9248] warn_alloc+0x210/0x300 [ 302.450464][ T9248] ? stack_trace_save+0x9c/0xe0 [ 302.455369][ T9248] ? zone_watermark_ok_safe+0x230/0x230 [ 302.460969][ T9248] ? kasan_set_track+0x5f/0x70 [ 302.465748][ T9248] ? kasan_set_track+0x4e/0x70 [ 302.470529][ T9248] ? __kasan_kmalloc+0x8f/0xa0 [ 302.475311][ T9248] ? xsk_init_queue+0xb0/0x110 [ 302.480111][ T9248] ? xsk_setsockopt+0x4db/0x6f0 [ 302.484986][ T9248] ? do_sock_setsockopt+0x175/0x1a0 [ 302.490196][ T9248] ? __x64_sys_setsockopt+0x184/0x200 [ 302.495593][ T9248] __vmalloc_node_range+0x126/0x1320 [ 302.500992][ T9248] ? free_vm_area+0x50/0x50 [ 302.505539][ T9248] vmalloc_user+0x74/0x80 [ 302.509886][ T9248] ? xskq_create+0xbf/0x170 [ 302.514399][ T9248] xskq_create+0xbf/0x170 [ 302.518777][ T9248] xsk_init_queue+0xb0/0x110 [ 302.523408][ T9248] xsk_setsockopt+0x4db/0x6f0 [ 302.528129][ T9248] ? xsk_poll+0x670/0x670 [ 302.532490][ T9248] ? __fget_files+0x28/0x4d0 [ 302.537105][ T9248] ? aa_sock_opt_perm+0x74/0x100 [ 302.542063][ T9248] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 302.547632][ T9248] ? security_socket_setsockopt+0x7e/0xa0 [ 302.553363][ T9248] ? xsk_poll+0x670/0x670 [ 302.557720][ T9248] do_sock_setsockopt+0x175/0x1a0 [ 302.562758][ T9248] ? __fdget+0x180/0x210 [ 302.567021][ T9248] __x64_sys_setsockopt+0x184/0x200 [ 302.572244][ T9248] do_syscall_64+0x55/0xb0 [ 302.576678][ T9248] ? clear_bhb_loop+0x40/0x90 [ 302.581399][ T9248] ? clear_bhb_loop+0x40/0x90 [ 302.586099][ T9248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.592020][ T9248] RIP: 0033:0x7fc2db98eb69 [ 302.596480][ T9248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.616111][ T9248] RSP: 002b:00007fc2db7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.624585][ T9248] RAX: ffffffffffffffda RBX: 00007fc2dbbb5fa0 RCX: 00007fc2db98eb69 [ 302.632590][ T9248] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 302.640601][ T9248] RBP: 00007fc2dba11df1 R08: 0000000000000004 R09: 0000000000000000 [ 302.648611][ T9248] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 302.656596][ T9248] R13: 0000000000000000 R14: 00007fc2dbbb5fa0 R15: 00007ffe668f2168 [ 302.664624][ T9248] [ 302.672373][ T9248] Mem-Info: [ 302.675565][ T9248] active_anon:8219 inactive_anon:0 isolated_anon:0 [ 302.675565][ T9248] active_file:18492 inactive_file:39912 isolated_file:0 [ 302.675565][ T9248] unevictable:768 dirty:191 writeback:0 [ 302.675565][ T9248] slab_reclaimable:9958 slab_unreclaimable:95125 [ 302.675565][ T9248] mapped:24095 shmem:1361 pagetables:630 [ 302.675565][ T9248] sec_pagetables:0 bounce:0 [ 302.675565][ T9248] kernel_misc_reclaimable:0 [ 302.675565][ T9248] free:1347006 free_pcp:5855 free_cma:0 [ 302.732387][ T9248] Node 0 active_anon:32876kB inactive_anon:0kB active_file:73968kB inactive_file:159444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96380kB dirty:764kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11712kB pagetables:2520kB sec_pagetables:0kB all_unreclaimable? no [ 302.846912][ T9248] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 303.030596][ T9248] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.171594][ T9248] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 303.188129][ T9248] Node 0 DMA32 free:1474948kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:32520kB inactive_anon:0kB active_file:73968kB inactive_file:158136kB unevictable:1536kB writepending:824kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:5132kB local_pcp:3100kB free_cma:0kB [ 303.264694][ T9248] lowmem_reserve[]: 0 0 1 1 1 [ 303.270810][ T9248] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 303.309571][ T9248] lowmem_reserve[]: 0 0 0 0 0 [ 303.314745][ T9248] Node 1 Normal free:3896768kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19360kB local_pcp:10464kB free_cma:0kB [ 303.359524][ T9248] lowmem_reserve[]: 0 0 0 0 0 [ 303.364432][ T9248] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 303.395242][ T9257] syzkaller0: entered promiscuous mode [ 303.404720][ T9248] Node 0 DMA32: 1917*4kB (UM) 1099*8kB (UME) 1024*16kB (UME) 981*32kB (UME) 1077*64kB (UME) 305*128kB (UME) 82*256kB (UM) 10*512kB (UME) 4*1024kB (UE) 5*2048kB (UME) 307*4096kB (UM) = 1470124kB [ 303.425908][ T9257] syzkaller0: entered allmulticast mode [ 303.437546][ T9248] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 303.498202][ T9248] Node 1 Normal: 236*4kB (UME) 66*8kB (UME) 42*16kB (UME) 107*32kB (UME) 20*64kB (UE) 6*128kB (UME) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3896768kB [ 303.555791][ T9248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.616367][ T9248] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.657189][ T9248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.703335][ T9248] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.739986][ T9248] 59765 total pagecache pages [ 303.759882][ T9248] 0 pages in swap cache [ 303.771391][ T9248] Free swap = 124996kB [ 303.797424][ T9248] Total swap = 124996kB [ 303.805528][ T9248] 2097051 pages RAM [ 303.823901][ T9248] 0 pages HighMem/MovableOnly [ 303.849408][ T9248] 416137 pages reserved [ 303.863356][ T9248] 0 pages cma reserved [ 306.272076][ T9275] netlink: 'syz.0.1214': attribute type 4 has an invalid length. [ 306.281753][ T9275] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1214'. [ 306.306284][ T9275] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 309.758717][ T9351] netlink: 'syz.2.1239': attribute type 10 has an invalid length. [ 309.796121][ T9351] team0: Cannot enslave team device to itself [ 309.960871][ T9355] netlink: 'syz.3.1243': attribute type 10 has an invalid length. [ 309.986115][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.023378][ T9355] bridge_slave_1: left allmulticast mode [ 310.050217][ T9355] bridge_slave_1: left promiscuous mode [ 310.069252][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.132674][ T9355] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 310.342074][ T9363] netlink: 'syz.2.1244': attribute type 21 has an invalid length. [ 310.350252][ T9363] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1244'. [ 313.068009][ T9382] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1251'. [ 313.098688][ T9383] netlink: 'syz.0.1259': attribute type 10 has an invalid length. [ 313.119709][ T9383] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.141610][ T9383] bridge_slave_1: left allmulticast mode [ 313.154780][ T9383] bridge_slave_1: left promiscuous mode [ 313.165485][ T9383] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.196443][ T9383] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 314.513522][ T9416] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1266'. [ 315.180403][ T9430] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 315.256340][ T9430] bond0: (slave wlan1): Releasing backup interface [ 315.289603][ T9430] team0: Port device wlan1 added [ 317.434079][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.441649][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.412354][ T9484] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1286'. [ 319.432600][ T9486] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1283'. [ 321.049094][ T9501] netlink: 'syz.3.1291': attribute type 10 has an invalid length. [ 321.139074][ T9501] team0: Cannot enslave team device to itself [ 322.443372][ T9523] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1300'. [ 322.592303][ T9528] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1303'. [ 323.375893][ T9537] netlink: 'syz.0.1306': attribute type 10 has an invalid length. [ 323.418770][ T9537] team0: Cannot enslave team device to itself [ 323.949660][ T9543] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1315'. [ 325.431703][ T9568] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1314'. [ 325.708311][ T9570] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1325'. [ 325.910008][ T9575] netlink: 'syz.1.1316': attribute type 10 has an invalid length. [ 325.959218][ T9575] team0: Cannot enslave team device to itself [ 326.763282][ T9586] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 326.791727][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 327.313938][ T9594] netlink: 'syz.3.1322': attribute type 21 has an invalid length. [ 327.336980][ T9594] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1322'. [ 328.472487][ T9605] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1328'. [ 328.483172][ T9608] netlink: 'syz.2.1336': attribute type 12 has an invalid length. [ 328.483200][ T9608] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1336'. [ 328.801169][ T9615] netlink: 'syz.2.1330': attribute type 10 has an invalid length. [ 328.817183][ T9615] team0: Cannot enslave team device to itself [ 331.031900][ T9625] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 331.041669][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 331.266637][ T9633] netlink: 'syz.1.1338': attribute type 21 has an invalid length. [ 331.281676][ T9633] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1338'. [ 332.699120][ T9660] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 332.737283][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 334.792365][ T9672] netlink: 'syz.0.1353': attribute type 21 has an invalid length. [ 334.805268][ T9672] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1353'. [ 334.893691][ T9677] netlink: 'syz.3.1355': attribute type 11 has an invalid length. [ 334.906519][ T9677] netlink: 195824 bytes leftover after parsing attributes in process `syz.3.1355'. [ 336.725789][ T9704] netlink: 'syz.1.1367': attribute type 21 has an invalid length. [ 336.733929][ T9704] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1367'. [ 341.533673][ T9753] netlink: 'syz.1.1388': attribute type 11 has an invalid length. [ 341.550123][ T9753] netlink: 195824 bytes leftover after parsing attributes in process `syz.1.1388'. [ 341.600600][ T9751] wg2: entered promiscuous mode [ 341.605527][ T9751] wg2: entered allmulticast mode [ 342.210237][ T9768] syzkaller0: entered promiscuous mode [ 342.215817][ T9768] syzkaller0: entered allmulticast mode [ 344.200132][ T9782] netlink: 'syz.0.1401': attribute type 11 has an invalid length. [ 344.212024][ T9782] netlink: 195824 bytes leftover after parsing attributes in process `syz.0.1401'. [ 345.903061][ T9785] wg2: left promiscuous mode [ 345.907912][ T9785] wg2: left allmulticast mode [ 345.918374][ T9786] wg2: entered promiscuous mode [ 345.923293][ T9786] wg2: entered allmulticast mode [ 346.553531][ T9800] syzkaller0: entered promiscuous mode [ 346.559496][ T9800] syzkaller0: entered allmulticast mode [ 348.572134][ T9817] wg2: entered promiscuous mode [ 348.583181][ T9817] wg2: entered allmulticast mode [ 349.571654][ T9840] syzkaller0: entered promiscuous mode [ 349.581662][ T9840] syzkaller0: entered allmulticast mode [ 352.477371][ T9871] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 352.527201][ T9871] batman_adv: batadv0: Interface deactivated: vlan1 [ 352.571525][ T5790] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 352.584119][ T9871] veth0_vlan: left promiscuous mode [ 352.653645][ T9871] veth0_vlan: entered promiscuous mode [ 352.701866][ T9871] batman_adv: batadv0: Interface activated: vlan1 [ 352.713229][ T9871] team0: Device veth0_vlan failed to register rx_handler [ 352.751302][ T9871] batman_adv: batadv0: Interface deactivated: vlan1 [ 352.958414][ T9871] syz.2.1438 (9871) used greatest stack depth: 18856 bytes left [ 354.119674][ T9898] wg2: left promiscuous mode [ 354.124504][ T9898] wg2: left allmulticast mode [ 354.151432][ T9898] wg2: entered promiscuous mode [ 354.160144][ T9898] wg2: entered allmulticast mode [ 354.469409][ T9909] wg2: left promiscuous mode [ 354.474083][ T9909] wg2: left allmulticast mode [ 354.584715][ T9909] wg2: entered promiscuous mode [ 354.589806][ T9909] wg2: entered allmulticast mode [ 354.866569][ T9924] A6±ÿ: renamed from team_slave_1 (while UP) [ 356.024033][ T9937] netlink: 'syz.1.1463': attribute type 10 has an invalid length. [ 356.049016][ T9937] veth0_vlan: entered allmulticast mode [ 356.101681][ T9937] veth0_vlan: left promiscuous mode [ 356.140999][ T9937] veth0_vlan: entered promiscuous mode [ 356.168887][ T9937] team0: Device veth0_vlan failed to register rx_handler [ 357.400446][ T9955] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 359.191097][ T9960] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 359.198307][ T9960] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 359.205336][ T9960] veth0_to_bridge: entered allmulticast mode [ 359.213020][ T9960] veth0_to_bridge: entered promiscuous mode [ 359.220817][ T9957] Ÿë: port 2(erspan0) entered blocking state [ 359.233096][ T9957] Ÿë: port 2(erspan0) entered disabled state [ 359.239558][ T9957] erspan0: entered allmulticast mode [ 359.246448][ T9957] erspan0: entered promiscuous mode [ 359.554038][ T9977] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 361.388014][ T9992] A6±ÿ: renamed from team_slave_1 (while UP) [ 361.561208][ T5790] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 361.563893][T10000] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 361.581967][T10000] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 361.589023][T10000] veth0_to_bridge: entered allmulticast mode [ 361.604614][T10000] veth0_to_bridge: entered promiscuous mode [ 361.667522][T10000] Ÿë: port 2(erspan0) entered blocking state [ 361.673742][T10000] Ÿë: port 2(erspan0) entered disabled state [ 361.703797][T10000] erspan0: entered allmulticast mode [ 361.722339][T10000] erspan0: entered promiscuous mode [ 361.792623][T10009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1497'. [ 361.850645][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.924832][T10009] bridge_slave_0 (unregistering): left allmulticast mode [ 361.937003][T10009] bridge_slave_0 (unregistering): left promiscuous mode [ 361.946977][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.384671][T10018] netlink: 'syz.1.1492': attribute type 21 has an invalid length. [ 362.399052][T10018] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.407596][T10018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.415269][T10018] IPv6: NLM_F_CREATE should be set when creating new route [ 362.422684][T10018] IPv6: NLM_F_CREATE should be set when creating new route [ 362.429986][T10018] IPv6: NLM_F_CREATE should be set when creating new route [ 362.439645][T10020] A6±ÿ: renamed from team_slave_1 (while UP) [ 362.632545][ T5790] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 362.655021][T10024] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 363.578874][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 364.464647][T10034] Ÿë: port 1(erspan0) entered blocking state [ 364.474465][T10034] Ÿë: port 1(erspan0) entered disabled state [ 364.481158][T10034] erspan0: entered allmulticast mode [ 364.487633][T10034] erspan0: entered promiscuous mode [ 364.495259][T10043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1504'. [ 364.510465][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.643844][T10043] bridge_slave_0 (unregistering): left allmulticast mode [ 364.656770][T10043] bridge_slave_0 (unregistering): left promiscuous mode [ 364.667307][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.706477][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 364.735333][T10043] veth0_to_bridge (unregistering): left allmulticast mode [ 364.745987][T10043] veth0_to_bridge (unregistering): left promiscuous mode [ 364.753847][T10043] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 365.797944][T10057] netlink: 'syz.3.1508': attribute type 21 has an invalid length. [ 365.805831][T10057] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.848790][T10057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.856049][T10057] IPv6: NLM_F_CREATE should be set when creating new route [ 365.863456][T10057] IPv6: NLM_F_CREATE should be set when creating new route [ 365.870809][T10057] IPv6: NLM_F_CREATE should be set when creating new route [ 365.972013][ T5790] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 366.246243][T10068] netlink: 'syz.3.1513': attribute type 4 has an invalid length. [ 366.272070][T10068] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1513'. [ 366.286615][T10068] wlan1: mtu less than device minimum [ 366.405674][ T5786] Bluetooth: hci2: unknown advertising packet type: 0x60 [ 366.405707][ T5786] Bluetooth: hci2: unknown advertising packet type: 0x61 [ 366.427762][ T5786] Bluetooth: hci2: unknown advertising packet type: 0x08 [ 366.434945][ T5786] Bluetooth: hci2: unknown advertising packet type: 0xcb [ 366.860702][ T5786] Bluetooth: hci2: adv larger than maximum supported [ 367.336803][ T5786] Bluetooth: hci0: unknown advertising packet type: 0x60 [ 367.343878][ T5786] Bluetooth: hci0: unknown advertising packet type: 0x61 [ 367.352448][ T5786] Bluetooth: hci0: unknown advertising packet type: 0x08 [ 367.359728][ T5786] Bluetooth: hci0: unknown advertising packet type: 0xcb [ 367.524136][ T5786] Bluetooth: hci3: unknown advertising packet type: 0x60 [ 368.058039][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 369.119554][T10156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1554'. [ 369.197274][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.249773][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.990952][T10192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1569'. [ 371.016168][T10192] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.116591][T10192] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.180192][T10192] veth0_to_bridge (unregistering): left allmulticast mode [ 371.202167][T10192] veth0_to_bridge (unregistering): left promiscuous mode [ 371.229967][T10192] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 372.234569][ T5786] bt_err_ratelimited: 4 callbacks suppressed [ 372.234586][ T5786] Bluetooth: hci1: adv larger than maximum supported [ 372.676873][T10212] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 375.085765][T10228] veth1_to_bond: entered allmulticast mode [ 376.099928][ T5786] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 376.319261][ T5786] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 376.693315][ T5786] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 377.664701][T10326] syzkaller0: entered promiscuous mode [ 377.675536][T10326] syzkaller0: entered allmulticast mode [ 378.877394][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.883903][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.757771][T10363] delete_channel: no stack [ 381.185388][T10375] syzkaller0: entered promiscuous mode [ 381.191532][T10375] syzkaller0: entered allmulticast mode [ 381.331221][ T5786] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 383.271561][T10401] delete_channel: no stack [ 383.424374][T10408] pim6reg1: entered allmulticast mode [ 383.654015][ T5786] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 383.910968][ T5786] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 384.666466][ T5786] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 384.851155][T10430] syzkaller0: entered promiscuous mode [ 384.865269][T10430] syzkaller0: entered allmulticast mode [ 385.629555][ T5786] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 386.701685][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 387.255357][T10466] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 387.340062][ T5790] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 387.728289][ T5790] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 388.783072][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 389.488645][T10484] syzkaller0: entered promiscuous mode [ 389.505771][T10484] syzkaller0: entered allmulticast mode [ 389.554967][T10486] delete_channel: no stack [ 391.284116][T10493] syzkaller0: entered promiscuous mode [ 391.298744][T10493] syzkaller0: entered allmulticast mode [ 393.244867][T10503] netlink: 'syz.0.1694': attribute type 39 has an invalid length. [ 394.271622][T10519] netlink: 'syz.1.1704': attribute type 21 has an invalid length. [ 394.315964][T10522] netlink: 'syz.2.1705': attribute type 6 has an invalid length. [ 394.326963][T10522] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1705'. [ 396.323629][T10555] netlink: 'syz.3.1715': attribute type 21 has an invalid length. [ 396.450778][T10558] netlink: 'syz.1.1716': attribute type 6 has an invalid length. [ 396.466858][T10558] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1716'. [ 398.170624][T10588] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1727'. [ 398.189838][T10588] bond_slave_1: entered promiscuous mode [ 398.201511][T10588] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 398.214748][T10588] bridge_slave_1: entered promiscuous mode [ 398.339037][T10594] netlink: 'syz.3.1729': attribute type 6 has an invalid length. [ 398.347303][T10594] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1729'. [ 398.442700][ T5786] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 400.293436][T10636] netlink: 'syz.3.1747': attribute type 39 has an invalid length. [ 400.326046][T10635] netlink: 'syz.0.1746': attribute type 21 has an invalid length. [ 400.336344][T10635] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1746'. [ 400.360010][T10635] netlink: 'syz.0.1746': attribute type 4 has an invalid length. [ 400.386757][T10638] netlink: 'syz.2.1748': attribute type 10 has an invalid length. [ 400.421114][T10638] batman_adv: batadv0: Adding interface: netdevsim0 [ 400.455651][T10638] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.482068][T10638] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 400.770709][T10647] delete_channel: no stack [ 403.537801][T10669] netlink: 'syz.0.1760': attribute type 10 has an invalid length. [ 403.647564][T10669] batman_adv: batadv0: Adding interface: netdevsim0 [ 403.654215][T10669] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.762537][T10669] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 404.648706][T10681] netlink: 'syz.1.1764': attribute type 16 has an invalid length. [ 404.674061][T10681] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1764'. [ 405.301492][T10698] netlink: 'syz.2.1770': attribute type 21 has an invalid length. [ 405.323047][T10698] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1770'. [ 405.335953][T10698] netlink: 'syz.2.1770': attribute type 4 has an invalid length. [ 405.355948][T10702] netlink: 'syz.1.1771': attribute type 10 has an invalid length. [ 409.924481][T10735] netlink: 'syz.3.1784': attribute type 10 has an invalid length. [ 409.958439][T10735] batman_adv: batadv0: Adding interface: netdevsim0 [ 409.965167][T10735] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.995234][T10735] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 410.099139][T10742] netlink: 'syz.1.1786': attribute type 21 has an invalid length. [ 410.126357][T10742] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1786'. [ 410.160418][T10742] netlink: 'syz.1.1786': attribute type 4 has an invalid length. [ 410.191900][T10743] delete_channel: no stack [ 410.520948][ T5786] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 411.332162][ T5786] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6 [ 411.471043][T10767] netlink: 'syz.0.1803': attribute type 39 has an invalid length. [ 411.884435][T10777] netlink: 'syz.3.1799': attribute type 10 has an invalid length. [ 412.180907][T10779] syzkaller0: entered promiscuous mode [ 412.186436][T10779] syzkaller0: entered allmulticast mode [ 414.116219][ T5786] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 414.764369][T10801] syzkaller0: entered promiscuous mode [ 414.773284][T10801] syzkaller0: entered allmulticast mode [ 416.144624][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 421.032435][T10857] netlink: 'syz.0.1830': attribute type 16 has an invalid length. [ 421.041813][T10857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1830'. [ 421.463491][T10885] netlink: 'syz.0.1839': attribute type 6 has an invalid length. [ 421.475160][T10885] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1839'. [ 422.384532][T10897] netlink: 'syz.3.1843': attribute type 16 has an invalid length. [ 422.406812][T10897] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1843'. [ 423.312646][T10919] netlink: 'syz.1.1850': attribute type 6 has an invalid length. [ 423.321181][T10919] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1850'. [ 424.530465][T10908] netlink: 'syz.2.1856': attribute type 16 has an invalid length. [ 424.540006][T10908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1856'. [ 425.090889][ T5786] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 425.444509][T10938] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1859'. [ 425.493717][T10938] bond_slave_1: entered promiscuous mode [ 425.626620][T10940] syzkaller0: entered promiscuous mode [ 425.633104][T10940] syzkaller0: entered allmulticast mode [ 425.669929][T10943] netlink: 'syz.2.1862': attribute type 10 has an invalid length. [ 425.687273][T10943] batadv0: left allmulticast mode [ 425.693099][T10943] batadv0: left promiscuous mode [ 425.713011][T10943] bridge0: port 3(batadv0) entered disabled state [ 425.754805][T10943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.776338][T10943] : (slave batadv0): Enslaving as an active interface with an up link [ 425.858500][T10948] netlink: 'syz.3.1863': attribute type 6 has an invalid length. [ 425.881851][T10948] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1863'. [ 425.904463][T10946] : entered promiscuous mode [ 425.915592][T10946] bond_slave_1: entered promiscuous mode [ 425.921834][T10946] batadv0: entered promiscuous mode [ 428.044585][T10971] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1871'. [ 428.894822][T10978] syzkaller0: entered promiscuous mode [ 428.901880][T10978] syzkaller0: entered allmulticast mode [ 432.482650][ T5786] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 432.550543][T11032] syzkaller0: entered promiscuous mode [ 432.580795][T11032] syzkaller0: entered allmulticast mode [ 432.900273][T11038] Ÿë: port 1(erspan0) entered blocking state [ 432.910157][T11038] Ÿë: port 1(erspan0) entered disabled state [ 432.918917][T11038] erspan0: entered allmulticast mode [ 432.944177][T11038] erspan0: entered promiscuous mode [ 435.123516][T11042] netlink: 'syz.1.1896': attribute type 10 has an invalid length. [ 435.137898][T11043] bond_slave_1: left promiscuous mode [ 435.143544][T11043] bond0: entered promiscuous mode [ 435.150205][T11043] bond_slave_1: entered promiscuous mode [ 435.311029][T11047] syzkaller0: entered promiscuous mode [ 435.320489][T11047] syzkaller0: entered allmulticast mode [ 437.243102][T11052] netlink: 'syz.0.1910': attribute type 10 has an invalid length. [ 437.251462][T11052] batadv0: left allmulticast mode [ 437.256514][T11052] batadv0: left promiscuous mode [ 437.261938][T11052] bridge0: port 3(batadv0) entered disabled state [ 437.272756][T11052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.280811][T11052] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 437.298570][T11057] bond0: entered promiscuous mode [ 437.303659][T11057] bond_slave_1: entered promiscuous mode [ 437.309701][T11057] bridge_slave_1: entered promiscuous mode [ 437.315748][T11057] batadv0: entered promiscuous mode [ 437.386291][T11063] netlink: 'syz.3.1915': attribute type 10 has an invalid length. [ 437.406497][T11063] batadv0: left allmulticast mode [ 437.419872][T11063] batadv0: left promiscuous mode [ 437.428228][T11063] bridge0: port 3(batadv0) entered disabled state [ 437.472480][T11063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.518429][T11063] batadv0: entered promiscuous mode [ 437.545135][T11063] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 437.603775][T11069] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1905'. [ 437.690528][T11070] bond_slave_1: left promiscuous mode [ 437.708287][T11070] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 437.720801][T11070] bridge_slave_1: left promiscuous mode [ 437.726596][T11070] batadv0: left promiscuous mode [ 437.745193][T11070] bond0: entered promiscuous mode [ 437.752626][T11070] bond_slave_1: entered promiscuous mode [ 437.767070][T11070] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 437.781173][T11070] bridge_slave_1: entered promiscuous mode [ 437.790724][T11070] batadv0: entered promiscuous mode [ 438.121870][T11084] syzkaller0: entered promiscuous mode [ 438.146900][T11084] syzkaller0: entered allmulticast mode [ 438.216138][T11091] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.331654][T11091] bridge_slave_1: left allmulticast mode [ 438.341680][T11091] bridge_slave_1: left promiscuous mode [ 438.354094][T11091] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.033285][T11094] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1919'. [ 440.260613][T11103] netlink: 'syz.3.1923': attribute type 10 has an invalid length. [ 440.312824][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.319688][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.306614][T11136] syzkaller0: entered promiscuous mode [ 441.312408][T11136] syzkaller0: entered allmulticast mode [ 443.927387][T11155] bridge0: port 3(dummy0) entered disabled state [ 443.933957][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.978110][T11156] dummy0: left allmulticast mode [ 443.983424][T11156] bridge0: port 3(dummy0) entered disabled state [ 444.028065][T11156] bridge_slave_1: left allmulticast mode [ 444.039804][T11156] bridge_slave_1: left promiscuous mode [ 444.046031][T11156] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.196722][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 550.203978][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11173 [ 550.211835][ C1] rcu: (detected by 1, t=10502 jiffies, g=72465, q=59 ncpus=2) [ 550.219504][ C1] task:syz.3.1952 state:R running task stack:27016 pid:11173 ppid:5780 flags:0x0000400a [ 550.231386][ C1] Call Trace: [ 550.234707][ C1] [ 550.237593][ C1] sched_show_task+0x481/0x5a0 [ 550.242433][ C1] ? __ia32_sys_sched_rr_get_interval_time32+0x110/0x110 [ 550.249528][ C1] ? wq_watchdog_touch+0xef/0x170 [ 550.254602][ C1] print_other_cpu_stall+0xfa7/0x1340 [ 550.260041][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 550.265496][ C1] ? print_cpu_stall+0x5a0/0x5a0 [ 550.270477][ C1] ? __bpf_trace_rcu_utilization+0xa2/0xe0 [ 550.276321][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 550.282479][ C1] rcu_sched_clock_irq+0x87c/0x1220 [ 550.287741][ C1] ? rcu_gp_set_torture_wait+0x10/0x10 [ 550.293260][ C1] ? acct_account_cputime+0xd4/0x210 [ 550.298598][ C1] update_process_times+0x147/0x1b0 [ 550.303854][ C1] tick_sched_timer+0x3a2/0x580 [ 550.308788][ C1] __hrtimer_run_queues+0x4df/0xc40 [ 550.314043][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 550.319839][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 550.324984][ C1] ? read_tsc+0x9/0x20 [ 550.329082][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 550.335220][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 550.340297][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 550.346233][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 550.351913][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 550.357943][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0xa8/0x120 [ 550.364573][ C1] Code: c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 22 1f 7e 7e 41 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 00 00 75 d9 <41> 83 b8 1c 16 00 00 00 74 cf 45 8b 98 f8 15 00 00 41 83 fb 03 75 [ 550.384221][ C1] RSP: 0018:ffffc900001f0448 EFLAGS: 00000246 [ 550.390440][ C1] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000005 [ 550.398490][ C1] RDX: ffffffff81876025 RSI: ffffffff8cd79100 RDI: 0000000000000004 [ 550.406514][ C1] RBP: 0000000000000604 R08: ffff8880193b3c00 R09: 0000000000000007 [ 550.414525][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: dffffc0000000000 [ 550.422617][ C1] R13: f800000000000000 R14: ffff88801c66d330 R15: 0000000000094284 [ 550.430656][ C1] ? rb_event_length+0x45/0x3f0 [ 550.435579][ C1] rb_event_length+0x45/0x3f0 [ 550.440304][ C1] check_buffer+0x542/0x950 [ 550.444880][ C1] __rb_reserve_next+0x511/0xd50 [ 550.449936][ C1] ring_buffer_lock_reserve+0xae1/0xed0 [ 550.455551][ C1] ? mark_lock+0x94/0x320 [ 550.459969][ C1] trace_event_buffer_lock_reserve+0x1d0/0x6e0 [ 550.466183][ C1] trace_event_buffer_reserve+0x29b/0x3c0 [ 550.471946][ C1] ? trace_event_ignore_this_pid+0x130/0x130 [ 550.478086][ C1] trace_event_raw_event_bpf_trace_printk+0x101/0x210 [ 550.484894][ C1] ? __probestub_bpf_trace_printk+0x10/0x10 [ 550.490847][ C1] ? __asan_memcpy+0x40/0x70 [ 550.495512][ C1] trace_bpf_trace_printk+0x142/0x1a0 [ 550.500934][ C1] bpf_trace_printk+0x11f/0x190 [ 550.505846][ C1] ? bpf_probe_write_user+0xe0/0xe0 [ 550.511100][ C1] ? bpf_trace_run1+0xd6/0x3b0 [ 550.515982][ C1] bpf_prog_0605f9f479290f07+0x37/0x3b [ 550.521484][ C1] bpf_trace_run1+0x1c9/0x3b0 [ 550.526204][ C1] ? bpf_trace_run1+0xd6/0x3b0 [ 550.531005][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 550.536424][ C1] ? __bpf_trace_rcu_utilization+0x95/0xe0 [ 550.542292][ C1] __bpf_trace_rcu_utilization+0xa2/0xe0 [ 550.547965][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 550.554074][ C1] ? rcu_leak_callback+0x10/0x10 [ 550.559056][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 550.565024][ C1] trace_rcu_utilization+0x179/0x1a0 [ 550.570359][ C1] rcu_core+0x1341/0x1720 [ 550.574760][ C1] ? try_to_wake_up+0x2d2/0x10b0 [ 550.579754][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 550.584817][ C1] ? __rwlock_init+0x150/0x150 [ 550.589628][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 550.594899][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 550.600149][ C1] ? sched_clock+0x3f/0x60 [ 550.604621][ C1] ? mark_lock+0x94/0x320 [ 550.609011][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 550.615053][ C1] ? lock_chain_count+0x20/0x20 [ 550.619934][ C1] ? try_to_wake_up+0x6f8/0x10b0 [ 550.624956][ C1] handle_softirqs+0x280/0x820 [ 550.629794][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 550.634630][ C1] ? do_softirq+0x180/0x180 [ 550.639186][ C1] ? irq_work_single+0x199/0x230 [ 550.644179][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 550.649429][ C1] __irq_exit_rcu+0xc7/0x190 [ 550.654083][ C1] ? irq_exit_rcu+0x20/0x20 [ 550.658657][ C1] ? rcu_is_watching+0x15/0xb0 [ 550.663471][ C1] irq_exit_rcu+0x9/0x20 [ 550.667745][ C1] sysvec_irq_work+0xa1/0xc0 [ 550.672380][ C1] [ 550.675343][ C1] [ 550.678307][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 550.683452][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 550.689666][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 a9 4e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 550.709415][ C1] RSP: 0018:ffffc90019d17c00 EFLAGS: 00000206 [ 550.715535][ C1] RAX: 0d46e5b676db3500 RBX: 1ffff920033a2f88 RCX: 0d46e5b676db3500 [ 550.723555][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780 [ 550.731564][ C1] RBP: ffffc90019d17cf0 R08: ffffffff90da3537 R09: 1ffffffff21b46a6 [ 550.739569][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a7 R12: 0000000000000000 [ 550.747585][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8cd354d8 [ 550.755677][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 550.760757][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 550.765745][ C1] ? __rwlock_init+0x150/0x150 [ 550.770552][ C1] ? read_lock_is_recursive+0x20/0x20 [ 550.775987][ C1] __rcu_read_unlock+0x7c/0xd0 [ 550.780812][ C1] rcu_read_unlock+0x85/0xa0 [ 550.785480][ C1] ? dput+0x3b/0x1e0 [ 550.789418][ C1] dput+0xe6/0x1e0 [ 550.793189][ C1] __fput+0x5e5/0x970 [ 550.797350][ C1] task_work_run+0x1ce/0x250 [ 550.801992][ C1] ? task_work_cancel+0x240/0x240 [ 550.807084][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 550.812735][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 550.818076][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 550.823703][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 550.829218][ C1] do_syscall_64+0x61/0xb0 [ 550.833680][ C1] ? clear_bhb_loop+0x40/0x90 [ 550.838392][ C1] ? clear_bhb_loop+0x40/0x90 [ 550.843200][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.849138][ C1] RIP: 0033:0x7faa86b8eb69 [ 550.853597][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.873338][ C1] RSP: 002b:00007fff53739428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 550.881889][ C1] RAX: 0000000000000000 RBX: 000000000006ca6f RCX: 00007faa86b8eb69 [ 550.889900][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 550.898080][ C1] RBP: 00007faa86db7ba0 R08: 0000000000000001 R09: 0000000d5373971f [ 550.906179][ C1] R10: 00007faa86800000 R11: 0000000000000246 R12: 00007faa86db5fac [ 550.914339][ C1] R13: 00007faa86db5fa0 R14: ffffffffffffffff R15: 00007fff53739540 [ 550.922419][ C1] [ 550.925476][ C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g72465 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 550.936706][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 550.946801][ C1] rcu: RCU grace-period kthread stack dump: [ 550.952745][ C1] task:rcu_preempt state:R running task stack:26568 pid:17 ppid:2 flags:0x00004000 [ 550.963589][ C1] Call Trace: [ 550.966904][ C1] [ 550.969882][ C1] __schedule+0x14d2/0x44d0 [ 550.974475][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 550.980414][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 550.985668][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 550.991604][ C1] ? asan.module_dtor+0x20/0x20 [ 550.996596][ C1] ? enqueue_timer+0x4ab/0x530 [ 551.001421][ C1] ? __mod_timer+0x984/0xdb0 [ 551.006082][ C1] schedule+0xbd/0x170 [ 551.010201][ C1] schedule_timeout+0x160/0x280 [ 551.015097][ C1] ? console_conditional_schedule+0x40/0x40 [ 551.021028][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 551.026968][ C1] ? update_process_times+0x1b0/0x1b0 [ 551.032407][ C1] ? prepare_to_swait_event+0x339/0x360 [ 551.038012][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 551.042903][ C1] ? rcu_gp_init+0x110e/0x1510 [ 551.047829][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 551.054027][ C1] ? rcu_gp_init+0x1510/0x1510 [ 551.058837][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 551.063737][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 551.068981][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 551.074232][ C1] rcu_gp_kthread+0x99/0x380 [ 551.078877][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 551.084038][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 551.089020][ C1] ? __kthread_parkme+0x162/0x1c0 [ 551.094112][ C1] kthread+0x2fa/0x390 [ 551.098213][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 551.103386][ C1] ? kthread_blkcg+0xd0/0xd0 [ 551.108014][ C1] ret_from_fork+0x48/0x80 [ 551.112502][ C1] ? kthread_blkcg+0xd0/0xd0 [ 551.117129][ C1] ret_from_fork_asm+0x11/0x20 [ 551.121982][ C1] [ 551.125033][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 551.131386][ C1] Sending NMI from CPU 1 to CPUs 0: [ 551.136637][ C0] NMI backtrace for cpu 0 [ 551.136651][ C0] CPU: 0 PID: 11172 Comm: syz.0.1953 Not tainted 6.6.101-syzkaller #0 [ 551.136664][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.136674][ C0] RIP: 0010:__kasan_check_read+0x0/0x20 [ 551.136697][ C0] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 2b 1a 79 8c 4c 89 e6 eb 0a 48 c7 c7 27 75 61 8c 48 89 de e8 f5 ed 84 08 31 ed eb d4 cc 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 df ea ff ff 66 2e 0f 1f 84 [ 551.136708][ C0] RSP: 0018:ffffc90000007858 EFLAGS: 00000046 [ 551.136720][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8880193b5a00 [ 551.136729][ C0] RDX: 0000000000000100 RSI: 0000000000000008 RDI: ffffffff8e4a84e8 [ 551.136738][ C0] RBP: ffffc90000007968 R08: 0000000000000002 R09: 0000000000000000 [ 551.136746][ C0] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: 1ffff92000000f18 [ 551.136756][ C0] R13: ffffffff8cd2fba0 R14: 0000000000000000 R15: dffffc0000000000 [ 551.136765][ C0] FS: 000055555c483500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 551.136777][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.136786][ C0] CR2: 0000001b2d210ff8 CR3: 000000007eada000 CR4: 00000000003506f0 [ 551.136798][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 551.136806][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 551.136814][ C0] Call Trace: [ 551.136820][ C0] [ 551.136825][ C0] lock_acquire+0xbc/0x410 [ 551.136844][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 551.136874][ C0] ? read_lock_is_recursive+0x20/0x20 [ 551.136889][ C0] ? bpf_trace_run1+0xd6/0x3b0 [ 551.136918][ C0] trace_call_bpf+0xe4/0x690 [ 551.136937][ C0] ? trace_call_bpf+0xc3/0x690 [ 551.136957][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 551.136972][ C0] ? trace_call_bpf+0xc3/0x690 [ 551.136998][ C0] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 551.137025][ C0] ? bpf_trace_run1+0x267/0x3b0 [ 551.137045][ C0] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 551.137068][ C0] perf_trace_lock_acquire+0x32a/0x3e0 [ 551.137098][ C0] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 551.137121][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 551.137140][ C0] ? perf_trace_lock+0xf7/0x380 [ 551.137174][ C0] lock_acquire+0x3e2/0x410 [ 551.137189][ C0] ? try_to_wake_up+0x61/0x10b0 [ 551.137217][ C0] ? try_to_wake_up+0x2d2/0x10b0 [ 551.137240][ C0] ? read_lock_is_recursive+0x20/0x20 [ 551.137257][ C0] ? __rwlock_init+0x150/0x150 [ 551.137276][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 551.137299][ C0] _raw_spin_lock_irqsave+0xa8/0xf0 [ 551.137320][ C0] ? try_to_wake_up+0x61/0x10b0 [ 551.137341][ C0] ? _raw_spin_lock+0x40/0x40 [ 551.137359][ C0] ? mark_lock+0x94/0x320 [ 551.137384][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 551.137405][ C0] try_to_wake_up+0x61/0x10b0 [ 551.137440][ C0] handle_softirqs+0x5fe/0x820 [ 551.137459][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 551.137480][ C0] ? do_softirq+0x180/0x180 [ 551.137499][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 551.137522][ C0] __irq_exit_rcu+0xc7/0x190 [ 551.137536][ C0] ? irq_exit_rcu+0x20/0x20 [ 551.137555][ C0] ? rcu_is_watching+0x15/0xb0 [ 551.137576][ C0] irq_exit_rcu+0x9/0x20 [ 551.137588][ C0] sysvec_irq_work+0xa1/0xc0 [ 551.137606][ C0] [ 551.137610][ C0] [ 551.137615][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 551.137629][ C0] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 551.137650][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 a9 4e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 551.137660][ C0] RSP: 0018:ffffc90019a8fc00 EFLAGS: 00000206 [ 551.137671][ C0] RAX: c56ae06bb52dfc00 RBX: 1ffff92003351f88 RCX: c56ae06bb52dfc00 [ 551.137680][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780 [ 551.137690][ C0] RBP: ffffc90019a8fcf0 R08: ffffffff90da3537 R09: 1ffffffff21b46a6 [ 551.137700][ C0] R10: dffffc0000000000 R11: fffffbfff21b46a7 R12: 0000000000000000 [ 551.137708][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8cd354d8 [ 551.137744][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 551.137762][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 551.137783][ C0] ? __rwlock_init+0x150/0x150 [ 551.137802][ C0] ? read_lock_is_recursive+0x20/0x20 [ 551.137828][ C0] __rcu_read_unlock+0x7c/0xd0 [ 551.137851][ C0] rcu_read_unlock+0x85/0xa0 [ 551.137869][ C0] ? dput+0x3b/0x1e0 [ 551.137885][ C0] dput+0xe6/0x1e0 [ 551.137904][ C0] __fput+0x5e5/0x970 [ 551.137942][ C0] task_work_run+0x1ce/0x250 [ 551.137965][ C0] ? task_work_cancel+0x240/0x240 [ 551.137991][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 551.138015][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 551.138035][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 551.138056][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 551.138075][ C0] do_syscall_64+0x61/0xb0 [ 551.138090][ C0] ? clear_bhb_loop+0x40/0x90 [ 551.138102][ C0] ? clear_bhb_loop+0x40/0x90 [ 551.138118][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.138138][ C0] RIP: 0033:0x7f022878eb69 [ 551.138152][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.138162][ C0] RSP: 002b:00007ffda99e5308 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 551.138175][ C0] RAX: 0000000000000000 RBX: 00007f02289b7ba0 RCX: 00007f022878eb69 [ 551.138184][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 551.138191][ C0] RBP: 00007f02289b7ba0 R08: 000000000000ec64 R09: 0000000da99e55ff [ 551.138200][ C0] R10: 00007f02289b7ac0 R11: 0000000000000246 R12: 000000000006cd9e [ 551.138209][ C0] R13: 00007ffda99e5400 R14: ffffffffffffffff R15: 00007ffda99e5420 [ 551.138238][ C0]