last executing test programs: 14m3.835077343s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x17) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 14m3.705828623s ago: executing program 32 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x17) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 14m3.446488605s ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000005c0)}, 0x20) 14m3.292392887s ago: executing program 33 (id=1): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000005c0)}, 0x20) 14m3.244970891s ago: executing program 3 (id=4): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x741f, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0xf}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0xfffe, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='@', 0x1}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8) 14m2.968434014s ago: executing program 34 (id=4): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x741f, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0xf}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0xfffe, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='@', 0x1}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8) 13m31.947516058s ago: executing program 6 (id=144): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x88}]}}}, @ip_tos_u8={{0x11}}], 0x88}, 0x0) 13m31.814275579s ago: executing program 6 (id=146): recvmsg(0xffffffffffffffff, 0x0, 0x40000100) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x5, 0x0, 0x0, 0x81, 0xa0040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x44a}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 13m29.966832688s ago: executing program 6 (id=150): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'blkio'}, {0x2d, 'devices'}]}, 0x10) 13m29.846796358s ago: executing program 6 (id=153): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 13m28.83637701s ago: executing program 6 (id=154): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc02", 0x93}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) 13m27.104294161s ago: executing program 6 (id=165): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270e7120000000000000000000000000000ac1414cf14"], 0xffdd) 13m26.832217773s ago: executing program 35 (id=165): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270e7120000000000000000000000000000ac1414cf14"], 0xffdd) 9m4.634664286s ago: executing program 1 (id=2269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x1, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) 9m4.449557601s ago: executing program 1 (id=2273): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5b}}, 0x0, 0x2}, 0x94) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 9m4.188342002s ago: executing program 1 (id=2280): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, r2, 0x1, r0, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) 9m4.175655063s ago: executing program 5 (id=2271): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 9m4.059939572s ago: executing program 5 (id=2275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x1, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) 9m4.037012224s ago: executing program 1 (id=2285): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, r2, 0x1, r0, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) 9m3.986249318s ago: executing program 5 (id=2277): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c854) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40011064) 9m3.922230434s ago: executing program 5 (id=2279): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000460000008500000029000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 9m3.84318694s ago: executing program 5 (id=2281): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 9m3.84249456s ago: executing program 1 (id=2290): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 9m3.529055965s ago: executing program 5 (id=2282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 9m3.445074032s ago: executing program 36 (id=2282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 8m51.613704851s ago: executing program 1 (id=2298): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001700)}, {&(0x7f0000001300)}, {&(0x7f0000000240)="62a1a4d7744e09eb35", 0x9}, {0x0}, {&(0x7f0000001680)="9b486a97b974b7126f90cf4d951670bc76f6a1d83f02ecffe1137706644f5cfda8f2eca5", 0x24}], 0x5, &(0x7f0000001680)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) gettid() sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) 8m51.446313825s ago: executing program 37 (id=2298): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001700)}, {&(0x7f0000001300)}, {&(0x7f0000000240)="62a1a4d7744e09eb35", 0x9}, {0x0}, {&(0x7f0000001680)="9b486a97b974b7126f90cf4d951670bc76f6a1d83f02ecffe1137706644f5cfda8f2eca5", 0x24}], 0x5, &(0x7f0000001680)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) gettid() sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) 5.951325178s ago: executing program 7 (id=6247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r0) 5.386475114s ago: executing program 7 (id=6251): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(0x0, 0x40) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000000)=r1, 0x4) recvmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40010140) 4.090791998s ago: executing program 7 (id=6257): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100), 0x120) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}, 0x0) close(r0) recvmsg$unix(r1, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x2000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 3.836275719s ago: executing program 8 (id=6268): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) 3.82431971s ago: executing program 7 (id=6260): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x13}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.612518417s ago: executing program 7 (id=6263): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x4000000) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, @perf_config_ext={0x401, 0x5}, 0x119071, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) 3.611549687s ago: executing program 8 (id=6272): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) 3.312119241s ago: executing program 4 (id=6264): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}], 0x20}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r3}, 0x18) 3.311210991s ago: executing program 9 (id=6274): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0x37}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2020) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000c0000000200000005"], 0x0, 0x26, 0x0, 0x1}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 2.695438621s ago: executing program 4 (id=6265): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="eca246a9cc72b057f5f4c3b94943cb8725fe85920c5dd8c2276f4387e901e49d10512167057e8c3e602de5e5fa28be61dc5940b86bf6dfb1a517a1c6d91bf0a3c99fe46357a176506176a7ac94349527d606fff855806bd69f81ab5cc5ef41c7e062961e5da575581eae9d2f2ed11dfb2c87b4bcfd89fa23a508c585c10dd7d986f598de0c1f7d63826111cdcffd5f55a395d78d7627c446a88bb290e5f8e9e8e6d0acdb078711b9351d7b41ae6b7eea6b6666d9882ad583d93ef563434c64fd8e94180b23c2caa8fbcd73c22d52e4a1f3ac5ed9144e65e374bf805e66", 0xdd}], 0x1, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x72}}], 0x18}, 0x20000081) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x419}], 0x1}, 0x0) close(r2) socket$kcm(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xfdef) 2.689263552s ago: executing program 8 (id=6276): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0xc010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080), 0x12) 2.616741648s ago: executing program 7 (id=6266): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x20a) socketpair(0x9, 0x6, 0x2, 0x0) 2.615515078s ago: executing program 9 (id=6278): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710031000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.458502881s ago: executing program 8 (id=6267): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'geneve0\x00', @local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 2.394608236s ago: executing program 9 (id=6269): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) close(r0) 2.134997947s ago: executing program 9 (id=6270): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) 558.274444ms ago: executing program 8 (id=6271): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x3}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) 558.037174ms ago: executing program 9 (id=6273): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000980)={r5, r3, 0x4, r0}, 0x10) 403.345817ms ago: executing program 8 (id=6275): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) 403.162727ms ago: executing program 9 (id=6277): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 403.052137ms ago: executing program 4 (id=6279): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(0x3) 296.665656ms ago: executing program 4 (id=6280): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) 183.466345ms ago: executing program 4 (id=6281): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x12, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) 0s ago: executing program 4 (id=6282): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="00000099eb0f3b270000000000000000f7ff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 581836][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.627281][ T3001] bridge_slave_0: left allmulticast mode [ 378.643143][ T3001] bridge_slave_0: left promiscuous mode [ 378.663670][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.709071][ T3001] veth1_macvtap: left promiscuous mode [ 378.714579][ T3001] veth0_macvtap: left promiscuous mode [ 378.720297][ T3001] veth1_vlan: left promiscuous mode [ 378.726994][ T3001] veth0_vlan: left promiscuous mode [ 378.848864][ T5789] Bluetooth: hci2: command tx timeout [ 379.087701][ T3001] team0 (unregistering): Port device team_slave_1 removed [ 379.155830][ T3001] team0 (unregistering): Port device team_slave_0 removed [ 379.191841][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.244672][ T3001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.639658][ T3001] bond0 (unregistering): Released all slaves [ 379.731978][T12333] syzkaller0: entered promiscuous mode [ 379.737536][T12333] syzkaller0: entered allmulticast mode [ 379.744158][T12335] pim6reg1: entered promiscuous mode [ 379.750429][T12335] pim6reg1: entered allmulticast mode [ 380.607757][ T5789] Bluetooth: hci3: command tx timeout [ 381.132907][T12353] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2392'. [ 381.211198][T12192] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.369589][T12192] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.546729][T12192] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.788428][T12192] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.338588][T12359] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.2395'. [ 383.475463][T12192] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 383.504857][ T5789] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 383.544712][T12192] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 383.565102][T12192] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 383.575241][T12192] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 383.762884][T12192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.815358][T12192] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.885246][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.892381][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.909148][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.916320][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.102051][T12192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.114347][T12192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.493656][ T3001] hsr_slave_0: left promiscuous mode [ 384.508234][ T3001] hsr_slave_1: left promiscuous mode [ 384.522366][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.535277][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.543907][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.551689][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.581150][ T3001] bridge_slave_1: left allmulticast mode [ 384.589719][ T3001] bridge_slave_1: left promiscuous mode [ 384.595500][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.611802][ T3001] bridge_slave_0: left allmulticast mode [ 384.620471][ T3001] bridge_slave_0: left promiscuous mode [ 384.626924][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.651094][ T3001] veth1_macvtap: left allmulticast mode [ 384.657022][ T3001] veth1_macvtap: left promiscuous mode [ 384.662615][ T3001] veth0_macvtap: left promiscuous mode [ 384.668694][ T3001] veth1_vlan: left promiscuous mode [ 385.240696][ T3001] team0 (unregistering): Port device team_slave_1 removed [ 385.273381][ T3001] team0 (unregistering): Port device team_slave_0 removed [ 385.304980][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.341822][ T3001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.568711][ T5789] Bluetooth: hci2: command tx timeout [ 385.661237][ T3001] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 385.669856][ T3001] bond0 (unregistering): Released all slaves [ 385.755552][T12192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.765466][T12424] netlink: 'syz.8.2417': attribute type 10 has an invalid length. [ 385.788206][T12424] batman_adv: batadv0: Adding interface: team0 [ 385.816185][T12424] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.866171][T12424] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 385.887250][T12425] netlink: 'syz.8.2417': attribute type 10 has an invalid length. [ 385.976115][T12425] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2417'. [ 385.988646][T12425] team0: entered promiscuous mode [ 385.993930][T12425] team_slave_0: entered promiscuous mode [ 386.001493][T12425] team_slave_1: entered promiscuous mode [ 386.021616][T12425] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.029440][T12425] batman_adv: batadv0: Interface activated: team0 [ 386.036461][T12425] batman_adv: batadv0: Interface deactivated: team0 [ 386.043177][T12425] batman_adv: batadv0: Removing interface: team0 [ 386.050838][T12425] bridge0: port 3(team0) entered blocking state [ 386.061696][T12425] bridge0: port 3(team0) entered disabled state [ 386.071336][T12425] team0: entered allmulticast mode [ 386.081098][T12425] team_slave_0: entered allmulticast mode [ 386.087181][T12425] team_slave_1: entered allmulticast mode [ 386.095065][T12425] bridge0: port 3(team0) entered blocking state [ 386.101428][T12425] bridge0: port 3(team0) entered forwarding state [ 386.551865][T12192] veth0_vlan: entered promiscuous mode [ 386.594977][T12192] veth1_vlan: entered promiscuous mode [ 386.700373][T12192] veth0_macvtap: entered promiscuous mode [ 386.791237][T12192] veth1_macvtap: entered promiscuous mode [ 386.938784][T12192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.965115][T12192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.976637][T12192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.990041][T12192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.011680][T12192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.045730][T12192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.067889][T12192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.085114][T12456] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2427'. [ 387.118184][T12192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.132813][T12192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.158568][T12192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.185024][T12192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.195405][T12192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.222919][T12192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.237428][T12192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.244790][T12454] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2427'. [ 387.294344][T12192] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.303661][T12192] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.313760][T12192] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.323220][T12192] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.238276][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.286566][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.305037][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.317077][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.770349][ T5789] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 389.910041][T12489] syzkaller0: entered allmulticast mode [ 391.024021][T12508] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2449'. [ 391.868560][T12550] netlink: 'syz.4.2468': attribute type 4 has an invalid length. [ 391.879749][T12550] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2468'. [ 391.912856][T12553] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.2469'. [ 391.929774][T12554] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.2470'. [ 393.282021][T12560] netlink: 'syz.8.2473': attribute type 1 has an invalid length. [ 393.289981][T12560] netlink: 'syz.8.2473': attribute type 4 has an invalid length. [ 393.297963][T12560] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2473'. [ 393.307203][T12565] bond_slave_1: mtu less than device minimum [ 393.423974][T12571] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 393.686777][T12591] ipvlan1: entered promiscuous mode [ 393.693263][T12591] ipvlan1: entered allmulticast mode [ 393.716801][T12591] veth0_vlan: entered allmulticast mode [ 393.848451][ T5789] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 393.856197][ T5789] Bluetooth: hci0: Invalid handle: 0x445a > 0x0eff [ 394.054661][T12602] netlink: 'syz.7.2488': attribute type 2 has an invalid length. [ 394.073849][T12602] netlink: 199824 bytes leftover after parsing attributes in process `syz.7.2488'. [ 395.581517][T12609] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 395.679201][ T5794] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 395.706426][T12624] ipvlan1: entered promiscuous mode [ 395.711703][T12624] ipvlan1: entered allmulticast mode [ 395.727114][T12624] veth0_vlan: entered allmulticast mode [ 395.847399][T12632] netlink: 'syz.8.2502': attribute type 2 has an invalid length. [ 395.857412][T12632] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.2502'. [ 395.875253][T12634] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 396.532187][ T5794] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 396.540241][ T5794] Bluetooth: hci2: Invalid handle: 0x641e > 0x0eff [ 397.410331][ T12] wlan1: Trigger new scan to find an IBSS to join [ 398.019298][T12653] ipvlan1: entered promiscuous mode [ 398.024540][T12653] ipvlan1: entered allmulticast mode [ 398.029905][T12653] veth0_vlan: entered allmulticast mode [ 398.075585][T12659] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 398.353636][T12673] netlink: 'syz.4.2520': attribute type 2 has an invalid length. [ 398.366877][ T1086] wlan1: Trigger new scan to find an IBSS to join [ 398.379970][ T3491] wlan1: Trigger new scan to find an IBSS to join [ 398.397623][T12673] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2520'. [ 398.538082][ T5794] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 398.545560][ T5794] Bluetooth: hci1: Invalid handle: 0x91da > 0x0eff [ 400.016982][T12691] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 400.104023][T12694] ipvlan1: entered promiscuous mode [ 400.123940][T12694] ipvlan1: entered allmulticast mode [ 400.132193][T12694] veth0_vlan: entered allmulticast mode [ 400.198362][T12700] netlink: 'syz.9.2535': attribute type 2 has an invalid length. [ 400.218532][T12700] netlink: 199824 bytes leftover after parsing attributes in process `syz.9.2535'. [ 400.248282][ T5789] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 400.259324][ T5789] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 400.430685][ T5789] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 400.438175][ T5789] Bluetooth: hci2: Invalid handle: 0x87bc > 0x0eff [ 401.406515][ T11] wlan1: Trigger new scan to find an IBSS to join [ 401.516142][ T1086] wlan1: Creating new IBSS network, BSSID 36:87:40:30:d8:bd [ 401.672186][ T5789] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 401.680215][ T5789] Bluetooth: hci2: Invalid handle: 0xa5da > 0x0eff [ 402.365966][ T42] wlan1: Trigger new scan to find an IBSS to join [ 402.372507][ T3491] wlan1: Trigger new scan to find an IBSS to join [ 402.448072][ T42] wlan1: Trigger new scan to find an IBSS to join [ 404.377091][ T3491] wlan1: Creating new IBSS network, BSSID 7a:68:f0:bd:99:b7 [ 404.384500][ T42] wlan1: Creating new IBSS network, BSSID 06:3b:d0:f0:8d:4e [ 406.368067][ T3491] wlan1: Trigger new scan to find an IBSS to join [ 406.562227][T12837] netlink: 'syz.8.2596': attribute type 10 has an invalid length. [ 406.571423][T12837] bridge0: port 3(team0) entered disabled state [ 406.578106][T12837] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.585690][T12837] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.613009][T12837] team0: Device bridge0 is already an upper device of the team interface [ 407.119856][T12869] netlink: 'syz.9.2609': attribute type 10 has an invalid length. [ 407.135350][T12869] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.142890][T12869] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.171752][T12869] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.179045][T12869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.187223][T12869] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.194346][T12869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.208694][T12869] team0: Port device bridge0 added [ 407.659809][T12901] netlink: 'syz.4.2626': attribute type 10 has an invalid length. [ 407.680704][T12901] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.688395][T12901] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.724604][T12901] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.732031][T12901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.740559][T12901] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.747785][T12901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.771303][T12901] team0: Port device bridge0 added [ 407.794216][T12907] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2628'. [ 407.910646][T12915] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2640'. [ 408.384954][T12945] netlink: 'syz.7.2643': attribute type 10 has an invalid length. [ 408.411238][T12945] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.418862][T12945] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.448378][T12945] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.455823][T12945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.463878][T12945] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.471117][T12945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.478615][ T3491] wlan1: Trigger new scan to find an IBSS to join [ 408.493974][T12945] team0: Port device bridge0 added [ 408.576567][ T42] wlan1: Creating new IBSS network, BSSID 06:ab:83:e9:94:ed [ 408.608695][T12949] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2648'. [ 409.019443][T12978] netlink: 'syz.9.2660': attribute type 10 has an invalid length. [ 409.036081][T12978] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.043331][T12978] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.206198][T12988] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2661'. [ 409.226794][T12985] netlink: 'syz.4.2671': attribute type 10 has an invalid length. [ 409.235115][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.242355][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.555115][T13004] netlink: 'syz.8.2678': attribute type 10 has an invalid length. [ 409.585814][T13004] team0: Device bridge0 is already an upper device of the team interface [ 410.827300][T13073] team0: left allmulticast mode [ 410.840927][T13073] team_slave_0: left allmulticast mode [ 410.846953][T13073] team_slave_1: left allmulticast mode [ 410.852917][T13073] bridge0: port 3(team0) entered disabled state [ 410.863576][T13073] bridge_slave_1: left allmulticast mode [ 410.876069][T13073] bridge_slave_1: left promiscuous mode [ 410.886042][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.922802][T13073] bridge_slave_0: left allmulticast mode [ 410.942740][T13073] bridge_slave_0: left promiscuous mode [ 410.973139][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.803093][T13108] bridge_slave_1: left allmulticast mode [ 411.833675][T13108] bridge_slave_1: left promiscuous mode [ 411.845052][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.886689][T13108] bridge_slave_0: left allmulticast mode [ 411.908389][T13108] bridge_slave_0: left promiscuous mode [ 411.920331][T13108] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.962028][T13108] team0: Port device bridge0 removed [ 412.654013][T13149] bridge_slave_1: left allmulticast mode [ 412.679253][T13149] bridge_slave_1: left promiscuous mode [ 412.706021][T13149] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.735206][T13149] bridge_slave_0: left allmulticast mode [ 412.745484][T13149] bridge_slave_0: left promiscuous mode [ 412.760858][T13149] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.817228][T13149] team0: Port device bridge0 removed [ 413.114623][T13170] pim6reg1: entered promiscuous mode [ 413.120175][T13170] pim6reg1: entered allmulticast mode [ 413.272698][ T5794] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 413.370621][T13182] bridge_slave_1: left allmulticast mode [ 413.385918][T13182] bridge_slave_1: left promiscuous mode [ 413.391690][T13182] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.413159][T13182] bridge_slave_0: left allmulticast mode [ 413.423078][T13182] bridge_slave_0: left promiscuous mode [ 413.430825][T13182] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.464804][T13182] team0: Port device bridge0 removed [ 413.527271][T13185] pim6reg1: entered promiscuous mode [ 413.533444][T13185] pim6reg1: entered allmulticast mode [ 414.131282][ T5789] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 414.169180][T13219] pim6reg1: entered promiscuous mode [ 414.175460][T13219] pim6reg1: entered allmulticast mode [ 414.418852][ T5789] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 414.696392][ T5789] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 414.932830][T13257] pim6reg1: entered promiscuous mode [ 414.939966][T13257] pim6reg1: entered allmulticast mode [ 415.020688][ T5794] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 415.440558][ T5794] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 415.819561][ T5794] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 416.066220][ T5789] Bluetooth: hci0: unknown advertising packet type: 0xff [ 416.066280][ T5789] Bluetooth: hci0: Malformed LE Event: 0x02 [ 416.312900][ T5789] Bluetooth: hci3: unknown advertising packet type: 0xff [ 416.312968][ T5789] Bluetooth: hci3: Malformed LE Event: 0x02 [ 416.461774][T13323] netlink: 'syz.4.2808': attribute type 29 has an invalid length. [ 416.471115][ T5789] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 416.492372][T13323] netlink: 'syz.4.2808': attribute type 29 has an invalid length. [ 416.758988][T13339] syzkaller0: entered promiscuous mode [ 416.764484][T13339] syzkaller0: entered allmulticast mode [ 418.194441][ T5789] Bluetooth: hci1: unknown advertising packet type: 0xff [ 418.194479][ T5789] Bluetooth: hci1: Malformed LE Event: 0x02 [ 418.274395][T13359] netlink: 'syz.9.2825': attribute type 29 has an invalid length. [ 418.311681][T13359] netlink: 'syz.9.2825': attribute type 29 has an invalid length. [ 418.518197][T13372] syzkaller0: entered promiscuous mode [ 418.523694][T13372] syzkaller0: entered allmulticast mode [ 419.872557][T13385] netlink: 'syz.7.2840': attribute type 29 has an invalid length. [ 419.892578][ T5789] Bluetooth: hci2: unknown advertising packet type: 0xff [ 419.892640][ T5789] Bluetooth: hci2: Malformed LE Event: 0x02 [ 419.893704][T13385] netlink: 'syz.7.2840': attribute type 29 has an invalid length. [ 420.141872][T13399] syzkaller0: entered promiscuous mode [ 420.148268][T13399] syzkaller0: entered allmulticast mode [ 420.475327][T13414] netlink: 'syz.8.2853': attribute type 29 has an invalid length. [ 421.603216][T13414] netlink: 'syz.8.2853': attribute type 29 has an invalid length. [ 421.685523][T13430] netlink: 'syz.8.2866': attribute type 29 has an invalid length. [ 421.698439][T13430] netlink: 'syz.8.2866': attribute type 29 has an invalid length. [ 422.085499][T13455] netlink: 'syz.4.2871': attribute type 29 has an invalid length. [ 422.161266][T13457] syzkaller0: entered promiscuous mode [ 422.175847][T13457] syzkaller0: entered allmulticast mode [ 422.195369][T13455] netlink: 'syz.4.2871': attribute type 29 has an invalid length. [ 422.410068][T13466] netlink: 'syz.9.2883': attribute type 29 has an invalid length. [ 424.182720][T13466] netlink: 'syz.9.2883': attribute type 29 has an invalid length. [ 424.204336][T13498] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 424.348863][T13505] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 425.042304][T13534] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 425.392906][T13547] netlink: 'syz.7.2909': attribute type 1 has an invalid length. [ 425.425827][T13547] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2909'. [ 425.560471][T13553] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 425.597168][T13553] syzkaller0: entered promiscuous mode [ 425.602653][T13553] syzkaller0: entered allmulticast mode [ 426.120911][ T5789] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 426.366756][ T3491] wlan1: Trigger new scan to find an IBSS to join [ 426.445955][ T3001] wlan1: Trigger new scan to find an IBSS to join [ 427.409102][ T58] wlan1: Trigger new scan to find an IBSS to join [ 427.432073][T13589] syzkaller0: entered promiscuous mode [ 427.446012][T13589] syzkaller0: entered allmulticast mode [ 427.570988][T13600] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.2931'. [ 428.446506][ T12] wlan1: Trigger new scan to find an IBSS to join [ 430.357965][T13618] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2938'. [ 430.367869][T13623] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.2940'. [ 430.418372][T13625] netlink: 'syz.7.2941': attribute type 21 has an invalid length. [ 430.448986][ T58] wlan1: Trigger new scan to find an IBSS to join [ 430.502593][T13627] syz.8.2942 (13627) used obsolete PPPIOCDETACH ioctl [ 430.533204][T13634] netlink: 'syz.7.2946': attribute type 10 has an invalid length. [ 430.542412][T13634] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2946'. [ 430.560901][ T5789] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 430.620609][T13637] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2947'. [ 430.806345][ T5789] Bluetooth: hci3: ISO packet for unknown connection handle 3152 [ 430.834612][T13653] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.2955'. [ 431.407380][ T58] wlan1: Trigger new scan to find an IBSS to join [ 431.578897][T13694] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.2970'. [ 431.872588][T13715] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.2980'. [ 431.920789][T13713] netlink: 'syz.7.2979': attribute type 4 has an invalid length. [ 431.932845][T13713] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2979'. [ 432.013717][T13719] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2982'. [ 432.363655][T13742] netlink: 'syz.8.2993': attribute type 4 has an invalid length. [ 432.375614][T13742] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2993'. [ 432.389014][T13744] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.2994'. [ 432.446006][ T3001] wlan1: Creating new IBSS network, BSSID 12:71:b3:e4:33:7f [ 432.451912][ T1086] wlan1: Trigger new scan to find an IBSS to join [ 432.516445][ T3001] wlan1: Creating new IBSS network, BSSID fe:23:3e:b1:94:b9 [ 432.648764][T13758] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3009'. [ 433.411684][ T58] wlan1: Creating new IBSS network, BSSID ca:c3:e9:b6:e2:f3 [ 434.463720][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.472559][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.532518][T13840] netlink: 'syz.8.3037': attribute type 21 has an invalid length. [ 434.596972][ T5789] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 434.640604][T13842] netlink: 'syz.9.3040': attribute type 10 has an invalid length. [ 435.061797][T13871] netlink: 'syz.9.3054': attribute type 21 has an invalid length. [ 435.107766][ T5789] Bluetooth: Frame is too long (len 13, expected len 4) [ 435.200544][T13880] netlink: 'syz.8.3058': attribute type 10 has an invalid length. [ 435.559168][ T5789] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 435.600441][T13905] __nla_validate_parse: 12 callbacks suppressed [ 435.600471][T13905] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.3071'. [ 435.712782][T13907] netlink: 'syz.4.3073': attribute type 10 has an invalid length. [ 435.721540][T13907] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3073'. [ 435.974248][T13918] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.3084'. [ 436.619259][T13930] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.3090'. [ 436.621672][T13931] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.3078'. [ 436.663250][T13927] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3079'. [ 436.864418][T13940] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3083'. [ 436.920838][T13942] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.3096'. [ 437.073613][ T5789] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 437.141824][T13958] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.3099'. [ 437.196511][T13961] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 437.222443][T13961] syzkaller0: entered promiscuous mode [ 437.235869][T13961] syzkaller0: entered allmulticast mode [ 438.811658][T13968] syzkaller0: entered promiscuous mode [ 438.817184][T13968] syzkaller0: entered allmulticast mode [ 440.325490][ T5789] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 440.340358][T13988] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.3108'. [ 440.837027][T14016] syzkaller0: entered allmulticast mode [ 441.032452][T14026] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.3125'. [ 442.215544][T14035] syzkaller0: entered allmulticast mode [ 443.674151][T14063] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.3140'. [ 445.906706][T14085] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3149'. [ 446.464438][ T5789] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 446.957432][ T5789] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 447.875875][ T5789] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 448.526083][ T5789] Bluetooth: hci0: command tx timeout [ 449.006601][ T5789] Bluetooth: hci3: command tx timeout [ 449.732030][T14248] syz.9.3221[14248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.732199][T14248] syz.9.3221[14248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.014559][ T5789] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 450.463905][T14300] netlink: 'syz.7.3247': attribute type 10 has an invalid length. [ 450.522651][T14300] veth1_macvtap: left promiscuous mode [ 451.832036][T14339] syz.8.3273[14339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.832197][T14339] syz.8.3273[14339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.917512][T14345] netlink: 'syz.9.3265': attribute type 10 has an invalid length. [ 451.946581][T14345] veth1_macvtap: left promiscuous mode [ 451.991414][T14351] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3269'. [ 452.441247][T14377] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.3283'. [ 453.338843][T14390] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3296'. [ 460.575232][T14463] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3316'. [ 460.632748][T14457] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3316'. [ 463.223156][T14496] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3339'. [ 464.800343][T14531] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 464.925604][T14535] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.3348'. [ 465.898420][T14551] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 466.142179][T14560] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.3360'. [ 466.225408][T14558] syzkaller0: entered promiscuous mode [ 466.232715][T14558] syzkaller0: entered allmulticast mode [ 468.455948][ T3001] wlan1: Trigger new scan to find an IBSS to join [ 468.557394][T14584] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 471.232972][T14624] syzkaller0: entered promiscuous mode [ 471.238537][T14624] syzkaller0: entered allmulticast mode [ 472.367426][ T12] wlan1: Trigger new scan to find an IBSS to join [ 473.961140][T14633] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.3391'. [ 474.446533][ T3491] wlan1: Trigger new scan to find an IBSS to join [ 475.730589][T14670] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3399'. [ 476.446015][ T1086] wlan1: Creating new IBSS network, BSSID 8a:63:cd:e0:d6:4d [ 477.328905][ T5789] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 479.734871][T14782] syzkaller0: entered promiscuous mode [ 479.741259][T14782] syzkaller0: entered allmulticast mode [ 481.225196][ T5794] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 [ 482.617702][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 482.817037][ T5789] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 483.248740][ T5789] Bluetooth: hci3: command tx timeout [ 487.735759][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 488.409313][T14940] netlink: 'syz.8.3514': attribute type 10 has an invalid length. [ 488.439928][T14940] team0: left promiscuous mode [ 488.444724][T14940] team_slave_0: left promiscuous mode [ 488.463453][T14940] team_slave_1: left promiscuous mode [ 488.493153][T14940] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.850015][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 493.585151][T15040] netlink: 'syz.7.3557': attribute type 3 has an invalid length. [ 493.594298][T15040] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.3557'. [ 495.434938][T15061] netlink: 'syz.7.3564': attribute type 10 has an invalid length. [ 495.474450][T15065] netlink: 'syz.4.3567': attribute type 3 has an invalid length. [ 495.485154][T15061] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.506526][T15065] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3567'. [ 495.902008][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.915906][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.634821][T15093] netlink: 'syz.9.3580': attribute type 3 has an invalid length. [ 496.655115][T15093] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.3580'. [ 497.921550][T15109] netlink: 'syz.4.3583': attribute type 10 has an invalid length. [ 497.955377][T15109] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.976048][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 500.408940][T15159] netlink: 'syz.7.3602': attribute type 29 has an invalid length. [ 500.434616][T15159] netlink: 'syz.7.3602': attribute type 29 has an invalid length. [ 500.481466][T15161] netlink: 'syz.9.3601': attribute type 10 has an invalid length. [ 500.522826][T15161] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.047420][ T5789] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 502.054890][ T5789] Bluetooth: hci1: Invalid handle: 0x2e9e > 0x0eff [ 502.597275][T15200] __sock_release: fasync list not empty! [ 506.430088][T15278] syz.8.3655[15278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.430357][T15278] syz.8.3655[15278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.254847][T15282] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.3666'. [ 509.692706][T15311] Â: renamed from pim6reg1 [ 510.418756][T15336] syz.8.3680[15336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.418926][T15336] syz.8.3680[15336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.576622][T15358] syz.7.3690[15358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.591369][T15358] syz.7.3690[15358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.393431][T15360] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3691'. [ 513.510175][T15392] syz.9.3703[15392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.510327][T15392] syz.9.3703[15392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.580232][T15394] netlink: 'syz.8.3706': attribute type 29 has an invalid length. [ 513.612964][T15394] netlink: 'syz.8.3706': attribute type 29 has an invalid length. [ 513.623079][T15394] netlink: 'syz.8.3706': attribute type 29 has an invalid length. [ 513.666878][T15394] syzkaller0: entered promiscuous mode [ 513.672376][T15394] syzkaller0: entered allmulticast mode [ 513.689000][ T5789] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 513.697079][ T5789] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 515.659851][T15413] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.3713'. [ 516.377889][T15423] syz.4.3717[15423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.378043][T15423] syz.4.3717[15423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.438486][T15429] syz.9.3719[15429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.460534][T15426] Â: renamed from pim6reg1 [ 516.463309][T15429] syz.9.3719[15429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.535037][T15433] syz.8.3730[15433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.566199][T15433] syz.8.3730[15433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.099890][T15462] syz.7.3733[15462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.120235][T15462] syz.7.3733[15462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.253992][T15465] Â: renamed from pim6reg1 [ 517.851354][ T5789] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 517.934932][T15496] netlink: 'syz.4.3752': attribute type 19 has an invalid length. [ 517.953094][T15496] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3752'. [ 518.156666][T15498] Â: renamed from pim6reg1 [ 519.072145][T15525] netlink: 'syz.4.3761': attribute type 10 has an invalid length. [ 519.085947][T15525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.166740][T15525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.271038][T15525] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 521.778995][T15562] netlink: 'syz.7.3776': attribute type 15 has an invalid length. [ 521.973883][T15565] syzkaller0: create flow: hash 381217974 index 1 [ 522.523550][T15564] syzkaller0: delete flow: hash 381217974 index 1 [ 523.728706][ T12] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:a8:6c [ 523.737653][ T12] wlan1: Creating new IBSS network, BSSID 00:00:00:00:a8:6c [ 523.820378][T15580] netlink: 'syz.9.3785': attribute type 4 has an invalid length. [ 523.836757][T15580] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3785'. [ 523.855861][T15580] netlink: 'syz.9.3785': attribute type 2 has an invalid length. [ 523.869769][T15580] netlink: 'syz.9.3785': attribute type 8 has an invalid length. [ 523.882696][T15580] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3785'. [ 524.790271][ T5794] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 527.147487][ T5794] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 527.169677][ T5794] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 527.587350][T15643] netlink: 'syz.9.3811': attribute type 10 has an invalid length. [ 527.605852][T15643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.640117][T15643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.720203][T15643] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 528.411880][ T5794] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 528.534519][ T5789] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 528.548066][ T5789] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 528.975252][T15684] netlink: 'syz.7.3824': attribute type 10 has an invalid length. [ 529.026399][T15684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.152109][T15684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.256294][T15684] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 530.215783][ T5789] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 530.925960][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 531.169313][T15744] syzkaller0: entered promiscuous mode [ 531.174848][T15744] syzkaller0: entered allmulticast mode [ 531.291578][T15751] syz.9.3851[15751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.291682][T15751] syz.9.3851[15751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.692074][T15753] netlink: 'syz.4.3852': attribute type 21 has an invalid length. [ 533.711507][T15753] IPv6: NLM_F_CREATE should be specified when creating new route [ 533.720140][T15753] IPv6: Can't replace route, no match found [ 533.870253][T15770] netlink: 'syz.9.3865': attribute type 15 has an invalid length. [ 533.958595][ T5794] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 533.970899][ T5794] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 533.983686][T15779] macsec0: entered promiscuous mode [ 533.989145][T15779] macsec0: entered allmulticast mode [ 533.994490][T15779] veth1_macvtap: entered allmulticast mode [ 534.330937][T15789] netlink: 'syz.9.3863': attribute type 29 has an invalid length. [ 534.456560][T15789] netlink: 'syz.9.3863': attribute type 29 has an invalid length. [ 534.479298][T15791] netlink: 'syz.9.3863': attribute type 29 has an invalid length. [ 534.631447][T15789] syzkaller0: entered promiscuous mode [ 534.641993][T15789] syzkaller0: entered allmulticast mode [ 534.877693][ T5794] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 535.027629][T15810] syz.4.3872[15810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.040479][T15810] syz.4.3872[15810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.336489][ T5794] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 535.356693][ T5794] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 536.317418][T15819] netlink: 'syz.8.3877': attribute type 12 has an invalid length. [ 536.325413][T15819] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3877'. [ 536.501551][ T5794] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 536.504805][T15828] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3878'. [ 536.537445][T15827] netlink: 'syz.4.3887': attribute type 29 has an invalid length. [ 536.569693][T15827] netlink: 'syz.4.3887': attribute type 29 has an invalid length. [ 536.625407][T15834] syz.7.3883[15834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 536.625501][T15834] syz.7.3883[15834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.981838][T15832] netlink: 'syz.4.3887': attribute type 29 has an invalid length. [ 538.028045][T15837] syzkaller0: entered promiscuous mode [ 538.033543][T15837] syzkaller0: entered allmulticast mode [ 539.279641][ T5794] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 539.288743][ T5794] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 541.008892][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 541.152109][ T5789] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 541.346192][T15871] syz.8.3895[15871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.356330][T15871] syz.8.3895[15871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.413056][T15879] netlink: 'syz.4.3899': attribute type 4 has an invalid length. [ 542.439626][T15879] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3899'. [ 542.455725][ T1086] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:a8:6c [ 542.465517][T15881] netlink: 'syz.4.3899': attribute type 2 has an invalid length. [ 542.491485][ T1086] wlan1: Creating new IBSS network, BSSID 00:00:00:00:a8:6c [ 542.494601][T15881] netlink: 'syz.4.3899': attribute type 8 has an invalid length. [ 542.510211][T15881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3899'. [ 542.605984][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 542.717231][T15886] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3900'. [ 544.035438][T15901] syz.9.3908[15901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.035531][T15901] syz.9.3908[15901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.132770][ T5789] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 544.434536][T15907] netlink: 'syz.9.3911': attribute type 2 has an invalid length. [ 544.454518][T15907] netlink: 164 bytes leftover after parsing attributes in process `syz.9.3911'. [ 544.498322][ T1086] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:a8:6c [ 544.508362][ T1086] wlan1: Creating new IBSS network, BSSID 00:00:00:00:a8:6c [ 544.525324][T15911] netlink: 'syz.7.3912': attribute type 4 has an invalid length. [ 544.572708][T15911] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3912'. [ 544.633864][T15911] netlink: 'syz.7.3912': attribute type 2 has an invalid length. [ 544.685848][T15911] netlink: 'syz.7.3912': attribute type 8 has an invalid length. [ 544.697811][T15911] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3912'. [ 544.727916][T15916] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3913'. [ 546.098344][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 547.248303][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 548.023397][T15943] syzkaller0: entered promiscuous mode [ 548.029044][T15943] syzkaller0: entered allmulticast mode [ 549.564129][T15955] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3925'. [ 552.822051][T15977] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.013794][T15994] syzkaller0: entered promiscuous mode [ 553.023196][T15994] syzkaller0: entered allmulticast mode [ 554.522685][T16009] netlink: 'syz.7.3948': attribute type 2 has an invalid length. [ 554.532275][T16009] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3948'. [ 555.402276][T16044] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3966'. [ 555.473884][T16047] netlink: 'syz.8.3964': attribute type 2 has an invalid length. [ 555.535708][T16047] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3964'. [ 556.434468][T16069] syzkaller0: create flow: hash 381217974 index 1 [ 556.517480][T16067] syzkaller0: delete flow: hash 381217974 index 1 [ 557.377857][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.384331][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.494043][ T3491] syzkaller0: tun_net_xmit 76 [ 560.500623][ T3491] syzkaller0: tun_net_xmit 48 [ 560.510217][T16132] syzkaller0: create flow: hash 381217974 index 1 [ 560.526057][ T5873] syzkaller0: tun_net_xmit 76 [ 560.650561][T16128] syzkaller0: delete flow: hash 381217974 index 1 [ 563.011703][T16154] netlink: 'syz.9.4007': attribute type 17 has an invalid length. [ 563.019666][T16154] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4007'. [ 563.664969][T16181] netlink: 144 bytes leftover after parsing attributes in process `syz.8.4018'. [ 563.794192][T16187] syzkaller0: entered promiscuous mode [ 563.800510][T16187] syzkaller0: entered allmulticast mode [ 565.677501][T16218] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.4034'. [ 565.696438][T16218] netlink: zone id is out of range [ 565.701591][T16218] netlink: zone id is out of range [ 565.716321][T16218] netlink: zone id is out of range [ 565.725997][T16218] netlink: zone id is out of range [ 565.736648][T16218] netlink: zone id is out of range [ 565.750476][T16218] netlink: zone id is out of range [ 565.757730][T16218] netlink: zone id is out of range [ 565.762982][T16218] netlink: zone id is out of range [ 565.768532][T16218] netlink: zone id is out of range [ 565.773995][T16218] netlink: zone id is out of range [ 565.931159][T16231] netlink: 'syz.8.4043': attribute type 10 has an invalid length. [ 567.471773][T16250] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.4049'. [ 571.234593][T16322] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.4078'. [ 573.648563][T16347] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4090'. [ 574.060469][T16364] netlink: 'syz.9.4097': attribute type 21 has an invalid length. [ 574.069011][T16364] netlink: 'syz.9.4097': attribute type 1 has an invalid length. [ 574.312732][T16368] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.4099'. [ 575.669900][T16401] netlink: 'syz.8.4110': attribute type 21 has an invalid length. [ 575.704808][T16401] netlink: 'syz.8.4110': attribute type 1 has an invalid length. [ 576.036696][ T5789] Bluetooth: hci1: unknown advertising packet type: 0xff [ 576.036724][ T5789] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 577.027720][ T5789] Bluetooth: hci3: unknown advertising packet type: 0xff [ 577.034793][ T5789] Bluetooth: hci3: unknown advertising packet type: 0x80 [ 577.288188][ T5789] Bluetooth: hci2: unknown advertising packet type: 0xff [ 577.295436][ T5789] Bluetooth: hci2: unknown advertising packet type: 0x80 [ 578.126621][ T5789] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 583.909841][T16640] netlink: 'syz.8.4214': attribute type 33 has an invalid length. [ 583.917789][T16640] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4214'. [ 583.928300][T16644] netlink: 'syz.7.4216': attribute type 21 has an invalid length. [ 583.936293][T16644] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4216'. [ 584.036697][T16650] netlink: 'syz.8.4225': attribute type 7 has an invalid length. [ 585.222520][T16690] netlink: 'syz.9.4235': attribute type 7 has an invalid length. [ 585.749180][T16719] netlink: 'syz.7.4247': attribute type 7 has an invalid length. [ 585.869189][T16724] syzkaller0: entered promiscuous mode [ 585.874720][T16724] syzkaller0: entered allmulticast mode [ 586.947149][T16770] warn_alloc: 1 callbacks suppressed [ 586.947163][T16770] syz.7.4267: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 586.984647][T16770] CPU: 0 PID: 16770 Comm: syz.7.4267 Not tainted 6.6.101-syzkaller #0 [ 586.992880][T16770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.003071][T16770] Call Trace: [ 587.006371][T16770] [ 587.009321][T16770] dump_stack_lvl+0x16c/0x230 [ 587.014025][T16770] ? show_regs_print_info+0x20/0x20 [ 587.019235][T16770] ? load_image+0x3b0/0x3b0 [ 587.023764][T16770] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 587.030193][T16770] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 587.036710][T16770] warn_alloc+0x210/0x300 [ 587.041053][T16770] ? stack_trace_save+0x9c/0xe0 [ 587.045922][T16770] ? zone_watermark_ok_safe+0x230/0x230 [ 587.051516][T16770] ? kasan_set_track+0x5f/0x70 [ 587.056282][T16770] ? kasan_set_track+0x4e/0x70 [ 587.061049][T16770] ? __kasan_kmalloc+0x8f/0xa0 [ 587.065844][T16770] ? xsk_init_queue+0xb0/0x110 [ 587.070628][T16770] ? xsk_setsockopt+0x4db/0x6f0 [ 587.075508][T16770] ? do_sock_setsockopt+0x175/0x1a0 [ 587.080731][T16770] ? __x64_sys_setsockopt+0x184/0x200 [ 587.086143][T16770] __vmalloc_node_range+0x126/0x1320 [ 587.091552][T16770] ? free_vm_area+0x50/0x50 [ 587.096121][T16770] vmalloc_user+0x74/0x80 [ 587.100490][T16770] ? xskq_create+0xbf/0x170 [ 587.104999][T16770] xskq_create+0xbf/0x170 [ 587.109367][T16770] xsk_init_queue+0xb0/0x110 [ 587.113990][T16770] xsk_setsockopt+0x4db/0x6f0 [ 587.118701][T16770] ? xsk_poll+0x670/0x670 [ 587.123077][T16770] ? __fget_files+0x28/0x4d0 [ 587.127696][T16770] ? aa_sock_opt_perm+0x74/0x100 [ 587.132662][T16770] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 587.138215][T16770] ? security_socket_setsockopt+0x7e/0xa0 [ 587.143938][T16770] ? xsk_poll+0x670/0x670 [ 587.148295][T16770] do_sock_setsockopt+0x175/0x1a0 [ 587.153329][T16770] ? __fdget+0x180/0x210 [ 587.157595][T16770] __x64_sys_setsockopt+0x184/0x200 [ 587.162922][T16770] do_syscall_64+0x55/0xb0 [ 587.167347][T16770] ? clear_bhb_loop+0x40/0x90 [ 587.172022][T16770] ? clear_bhb_loop+0x40/0x90 [ 587.176723][T16770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.182625][T16770] RIP: 0033:0x7fea5718ebe9 [ 587.187050][T16770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.206658][T16770] RSP: 002b:00007fea580d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 587.215091][T16770] RAX: ffffffffffffffda RBX: 00007fea573b5fa0 RCX: 00007fea5718ebe9 [ 587.223065][T16770] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 587.231042][T16770] RBP: 00007fea57211e19 R08: 0000000000000004 R09: 0000000000000000 [ 587.239017][T16770] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 587.246993][T16770] R13: 00007fea573b6038 R14: 00007fea573b5fa0 R15: 00007fff77cf11a8 [ 587.255021][T16770] [ 587.284569][T16770] Mem-Info: [ 587.287914][T16770] active_anon:19610 inactive_anon:0 isolated_anon:0 [ 587.287914][T16770] active_file:18560 inactive_file:40042 isolated_file:0 [ 587.287914][T16770] unevictable:768 dirty:222 writeback:0 [ 587.287914][T16770] slab_reclaimable:11412 slab_unreclaimable:101966 [ 587.287914][T16770] mapped:24851 shmem:1418 pagetables:427 [ 587.287914][T16770] sec_pagetables:0 bounce:0 [ 587.287914][T16770] kernel_misc_reclaimable:0 [ 587.287914][T16770] free:1319206 free_pcp:5768 free_cma:0 [ 587.340115][T16770] Node 0 active_anon:78440kB inactive_anon:0kB active_file:64392kB inactive_file:159964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99396kB dirty:880kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10724kB pagetables:1708kB sec_pagetables:0kB all_unreclaimable? no [ 587.381108][T16770] Node 1 active_anon:0kB inactive_anon:0kB active_file:9848kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 587.428776][T16770] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.460230][T16770] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 587.466491][T16770] Node 0 DMA32 free:1366128kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:78488kB inactive_anon:0kB active_file:64392kB inactive_file:158648kB unevictable:1536kB writepending:880kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:11848kB local_pcp:5952kB free_cma:0kB [ 587.502026][T16770] lowmem_reserve[]: 0 0 1 1 1 [ 587.507147][T16770] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 587.535764][T16770] lowmem_reserve[]: 0 0 0 0 0 [ 587.540568][T16770] Node 1 Normal free:3895328kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:9848kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11680kB local_pcp:5888kB free_cma:0kB [ 587.570622][T16770] lowmem_reserve[]: 0 0 0 0 0 [ 587.575429][T16770] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 587.588451][T16770] Node 0 DMA32: 175*4kB (U) 563*8kB (UM) 508*16kB (UME) 531*32kB (UME) 508*64kB (UM) 212*128kB (UME) 94*256kB (UME) 49*512kB (UME) 20*1024kB (UM) 7*2048kB (UME) 291*4096kB (M) = 1365876kB [ 587.612018][T16770] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 587.624235][T16770] Node 1 Normal: 230*4kB (UM) 57*8kB (UE) 32*16kB (UE) 234*32kB (UE) 68*64kB (UME) 7*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UM) 3*2048kB (UME) 945*4096kB (M) = 3895328kB [ 587.649908][T16770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.663222][T16770] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 587.672977][T16770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.685644][T16770] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 587.698205][T16770] 60020 total pagecache pages [ 587.702959][T16770] 0 pages in swap cache [ 587.708353][T16770] Free swap = 124996kB [ 587.712543][T16770] Total swap = 124996kB [ 587.724063][T16770] 2097051 pages RAM [ 587.728056][T16770] 0 pages HighMem/MovableOnly [ 587.732755][T16770] 416137 pages reserved [ 587.737739][T16770] 0 pages cma reserved [ 591.660419][T16803] syzkaller0: entered promiscuous mode [ 591.678595][T16803] syzkaller0: entered allmulticast mode [ 598.788773][T17020] netlink: 'syz.7.4367': attribute type 10 has an invalid length. [ 598.815681][T17020] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4367'. [ 598.824680][T17020] dummy0: entered promiscuous mode [ 598.830526][T17020] net_ratelimit: 163 callbacks suppressed [ 598.830552][T17020] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 599.082494][T17037] netlink: 'syz.9.4376': attribute type 39 has an invalid length. [ 599.484478][T17048] pim6reg1: entered promiscuous mode [ 599.493177][T17048] pim6reg1: entered allmulticast mode [ 599.512770][T17037] syz.9.4376 (17037) used greatest stack depth: 19432 bytes left [ 600.077653][T17069] syzkaller0: entered promiscuous mode [ 600.110051][T17069] syzkaller0: entered allmulticast mode [ 600.126497][T17069] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 600.213727][T17074] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4390'. [ 600.245686][T17074] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 601.332166][T17101] netlink: 207496 bytes leftover after parsing attributes in process `syz.7.4404'. [ 603.370288][T17147] netlink: 'syz.4.4422': attribute type 39 has an invalid length. [ 603.652300][T17148] syzkaller0: entered promiscuous mode [ 603.661274][T17155] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4424'. [ 603.670943][T17148] syzkaller0: entered allmulticast mode [ 603.677002][T17155] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 604.010105][T17165] syzkaller0: entered promiscuous mode [ 604.020201][T17165] syzkaller0: entered allmulticast mode [ 604.299057][T17181] netlink: 'syz.7.4436': attribute type 39 has an invalid length. [ 604.352075][T17184] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.4438'. [ 604.371190][T17184] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 604.832929][T17191] netlink: 'syz.4.4441': attribute type 3 has an invalid length. [ 604.857258][T17191] netlink: 'syz.4.4441': attribute type 1 has an invalid length. [ 604.878019][T17191] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.4441'. [ 605.666108][T17198] syzkaller0: entered promiscuous mode [ 605.671612][T17198] syzkaller0: entered allmulticast mode [ 605.980148][T17213] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.4450'. [ 605.989684][T17213] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 607.327461][T17223] netlink: 'syz.8.4452': attribute type 39 has an invalid length. [ 607.800084][T17234] syzkaller0: entered promiscuous mode [ 607.811413][T17234] syzkaller0: entered allmulticast mode [ 607.882263][T17237] netlink: 207496 bytes leftover after parsing attributes in process `syz.8.4460'. [ 608.703028][T17252] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4465'. [ 608.732381][T17252] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 611.725430][T17331] syzkaller0: entered promiscuous mode [ 611.734125][T17331] syzkaller0: entered allmulticast mode [ 612.077208][T17342] netlink: 'syz.7.4498': attribute type 3 has an invalid length. [ 612.094328][T17342] netlink: 'syz.7.4498': attribute type 1 has an invalid length. [ 612.107884][T17342] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.4498'. [ 618.088617][T17367] netlink: 'syz.9.4509': attribute type 3 has an invalid length. [ 618.115723][T17367] netlink: 'syz.9.4509': attribute type 1 has an invalid length. [ 618.123489][T17367] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.4509'. [ 618.346009][T17373] syzkaller0: entered promiscuous mode [ 618.351605][T17373] syzkaller0: entered allmulticast mode [ 618.794658][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.801084][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.073630][T17417] syzkaller0: entered promiscuous mode [ 620.088484][T17417] syzkaller0: entered allmulticast mode [ 622.052956][T17434] netlink: 'syz.8.4536': attribute type 33 has an invalid length. [ 622.061423][T17434] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4536'. [ 622.071614][T17434] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 622.293229][T17443] syzkaller0: entered promiscuous mode [ 622.299169][T17443] syzkaller0: entered allmulticast mode [ 630.111749][T17494] …: port 1(ip6gretap0) entered blocking state [ 630.118395][T17494] …: port 1(ip6gretap0) entered disabled state [ 630.124644][T17494] ip6gretap0: entered allmulticast mode [ 630.131441][T17494] ip6gretap0: entered promiscuous mode [ 630.350494][T17511] netlink: 'syz.7.4566': attribute type 1 has an invalid length. [ 630.373792][T17511] netlink: 'syz.7.4566': attribute type 4 has an invalid length. [ 630.382386][T17511] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4566'. [ 630.765310][T17530] …: port 1(ip6gretap0) entered blocking state [ 630.771841][T17530] …: port 1(ip6gretap0) entered disabled state [ 630.778766][T17530] ip6gretap0: entered allmulticast mode [ 630.787026][T17530] ip6gretap0: entered promiscuous mode [ 631.072652][T17544] netlink: 'syz.8.4579': attribute type 1 has an invalid length. [ 631.080653][T17544] netlink: 'syz.8.4579': attribute type 4 has an invalid length. [ 631.090031][T17544] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4579'. [ 631.501173][T17558] netlink: 'syz.4.4594': attribute type 1 has an invalid length. [ 631.522718][T17558] netlink: 'syz.4.4594': attribute type 4 has an invalid length. [ 631.555354][T17558] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4594'. [ 631.576445][T17562] …: port 1(ip6gretap0) entered blocking state [ 631.582909][T17562] …: port 1(ip6gretap0) entered disabled state [ 631.592656][T17562] ip6gretap0: entered allmulticast mode [ 631.602913][T17562] ip6gretap0: entered promiscuous mode [ 632.277745][T17587] …: port 1(ip6gretap0) entered blocking state [ 632.285528][T17587] …: port 1(ip6gretap0) entered disabled state [ 632.294372][T17587] ip6gretap0: entered allmulticast mode [ 632.302514][T17587] ip6gretap0: entered promiscuous mode [ 632.709010][T17595] netlink: 'syz.9.4604': attribute type 19 has an invalid length. [ 632.730907][T17595] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4604'. [ 632.947559][T17601] Zero length message leads to an empty skb [ 633.211581][ T5789] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 633.592800][T17627] syzkaller0: entered promiscuous mode [ 633.599266][T17627] syzkaller0: entered allmulticast mode [ 634.089777][T17639] syzkaller0: entered promiscuous mode [ 636.900109][T17659] syzkaller0: entered promiscuous mode [ 636.905751][T17659] syzkaller0: entered allmulticast mode [ 638.813549][T17669] netlink: 'syz.8.4640': attribute type 19 has an invalid length. [ 638.821593][T17669] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4640'. [ 638.846155][T17685] syzkaller0: entered allmulticast mode [ 638.924909][ T5794] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 638.966065][T17695] syzkaller0: entered promiscuous mode [ 638.971577][T17695] syzkaller0: entered allmulticast mode [ 641.093531][T17724] netlink: 'syz.7.4649': attribute type 19 has an invalid length. [ 641.115806][T17724] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4649'. [ 641.243424][ T5794] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 646.502199][T17774] netlink: 'syz.4.4664': attribute type 19 has an invalid length. [ 646.596485][T17774] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4664'. [ 646.832860][T17784] bridge_slave_0: entered promiscuous mode [ 646.861405][T17784] bridge_slave_0: entered allmulticast mode [ 647.822177][T17814] netlink: 'syz.8.4681': attribute type 19 has an invalid length. [ 647.843962][T17814] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4681'. [ 648.943740][ T5789] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 649.656432][T17866] syzkaller0: entered promiscuous mode [ 649.669092][T17866] syzkaller0: entered allmulticast mode [ 651.015719][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 651.259258][ T5789] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 651.267058][ T5789] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff [ 653.553168][ T5794] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 655.171407][T17962] C: renamed from team_slave_0 [ 655.186423][T17962] netlink: 'syz.9.4726': attribute type 3 has an invalid length. [ 655.194167][T17962] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4726'. [ 655.203503][T17962] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 655.287424][T17970] syzkaller0: entered promiscuous mode [ 658.336112][T18007] syzkaller0: entered promiscuous mode [ 658.341793][T18007] syzkaller0: entered allmulticast mode [ 658.377736][T18014] bridge_slave_0: entered promiscuous mode [ 658.383654][T18014] bridge_slave_0: entered allmulticast mode [ 658.600324][ T5794] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 660.120855][T18043] bridge_slave_0: entered promiscuous mode [ 660.135123][T18043] bridge_slave_0: entered allmulticast mode [ 660.249523][ T5794] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 660.605645][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 661.039593][ T5794] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 661.494247][T18101] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.4773'. [ 661.687141][T18110] netlink: 'syz.8.4778': attribute type 10 has an invalid length. [ 662.287074][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 662.644918][T18149] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.4793'. [ 662.659941][T18149] netlink: zone id is out of range [ 662.665075][T18149] netlink: zone id is out of range [ 662.671373][T18149] netlink: zone id is out of range [ 662.676857][T18149] netlink: zone id is out of range [ 662.682046][T18149] netlink: zone id is out of range [ 662.690425][T18149] netlink: zone id is out of range [ 662.699112][T18149] netlink: zone id is out of range [ 662.704222][T18149] netlink: zone id is out of range [ 662.715679][T18149] netlink: get zone limit has 4 unknown bytes [ 663.434869][T18178] syzkaller0: entered promiscuous mode [ 663.445998][T18178] syzkaller0: entered allmulticast mode [ 663.560907][T18187] netlink: 209588 bytes leftover after parsing attributes in process `syz.7.4811'. [ 663.597882][T18187] netlink: zone id is out of range [ 664.914969][T18194] sit0: entered allmulticast mode [ 664.922419][T18195] sit0: entered promiscuous mode [ 665.372261][T18220] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4824'. [ 665.393510][T18220] netlink: 'syz.7.4824': attribute type 10 has an invalid length. [ 665.414350][T18220] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 665.423289][T18218] C: renamed from team_slave_0 [ 665.441928][T18218] netlink: 'syz.4.4822': attribute type 3 has an invalid length. [ 665.450113][T18218] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4822'. [ 665.486136][T18222] netlink: 'syz.9.4825': attribute type 10 has an invalid length. [ 665.519923][T18222] bond0: (slave bond_slave_0): Releasing backup interface [ 665.643437][T18224] syzkaller0: entered promiscuous mode [ 665.651310][T18224] syzkaller0: entered allmulticast mode [ 668.560679][T18261] netlink: 'syz.7.4842': attribute type 10 has an invalid length. [ 668.572869][T18261] bond0: (slave bond_slave_0): Releasing backup interface [ 668.865188][T18264] C: renamed from team_slave_0 (while UP) [ 669.016855][T18264] netlink: 'syz.8.4843': attribute type 3 has an invalid length. [ 669.026046][T18264] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4843'. [ 669.042829][T18264] net_ratelimit: 9 callbacks suppressed [ 669.042865][T18264] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 669.926320][T18291] netlink: 'syz.4.4854': attribute type 10 has an invalid length. [ 669.947195][T18291] bond0: (slave bond_slave_0): Releasing backup interface [ 670.477514][T18295] netlink: 'syz.7.4863': attribute type 10 has an invalid length. [ 670.821782][T18299] syzkaller0: entered promiscuous mode [ 670.839459][T18299] syzkaller0: entered allmulticast mode [ 672.793825][T18306] netlink: 'syz.8.4859': attribute type 39 has an invalid length. [ 673.100726][T18322] netlink: 'syz.8.4865': attribute type 10 has an invalid length. [ 673.103000][T18320] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.4873'. [ 673.120011][T18322] bond0: (slave bond_slave_0): Releasing backup interface [ 673.344085][T18327] netlink: 'syz.7.4877': attribute type 10 has an invalid length. [ 673.525394][T18329] netlink: 'syz.4.4868': attribute type 10 has an invalid length. [ 674.368267][T18342] wg2: entered promiscuous mode [ 674.381854][T18342] wg2: entered allmulticast mode [ 674.926001][T18358] netlink: 'syz.8.4881': attribute type 10 has an invalid length. [ 674.958015][T18358] veth1_macvtap: left allmulticast mode [ 674.971325][T18358] veth1_macvtap: left promiscuous mode [ 675.487971][T18364] wg2: entered promiscuous mode [ 675.535895][T18364] wg2: entered allmulticast mode [ 676.899050][T18392] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 678.089245][T18424] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4909'. [ 678.125235][T18424] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 680.184838][T18449] syzkaller0: entered allmulticast mode [ 680.224749][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.231470][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.384220][ T5794] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 680.503266][ T5794] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 682.528348][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 682.638378][T18482] syzkaller0: entered promiscuous mode [ 682.645657][T18482] syzkaller0: entered allmulticast mode [ 682.912971][T18487] syzkaller0: entered allmulticast mode [ 683.123802][T18489] netlink: 'syz.4.4936': attribute type 10 has an invalid length. [ 683.137661][T18489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4936'. [ 683.175711][T18489] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 683.192908][T18489] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.260263][T18489] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 684.202411][T18502] syzkaller0: entered promiscuous mode [ 684.219376][T18502] syzkaller0: entered allmulticast mode [ 684.493664][T18505] netlink: 'syz.9.4943': attribute type 2 has an invalid length. [ 684.736892][T18516] syzkaller0: entered allmulticast mode [ 684.887404][T18520] netlink: 'syz.9.4948': attribute type 10 has an invalid length. [ 684.895301][T18520] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4948'. [ 684.914146][T18520] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 684.921302][T18520] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.957459][T18520] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 685.774607][T18533] netlink: 'syz.7.4955': attribute type 2 has an invalid length. [ 685.832274][T18534] syzkaller0: entered promiscuous mode [ 685.846997][T18534] syzkaller0: entered allmulticast mode [ 689.915806][T18563] ÿÿÿÿÿÿ: renamed from vlan1 [ 689.926474][T18570] netlink: 'syz.8.4967': attribute type 2 has an invalid length. [ 689.976142][T18574] syzkaller0: entered promiscuous mode [ 689.985961][T18574] syzkaller0: entered allmulticast mode [ 690.429618][T18594] ÿÿÿÿÿÿ: renamed from vlan1 [ 692.179589][T18620] ÿÿÿÿÿÿ: renamed from vlan1 [ 692.913628][T18641] veth0_vlan: left promiscuous mode [ 692.990779][T18641] veth0_vlan: entered promiscuous mode [ 693.205812][T18651] veth0_vlan: left promiscuous mode [ 693.433850][T18651] veth0_vlan: entered promiscuous mode [ 695.169011][T18677] veth0_vlan: left promiscuous mode [ 695.255441][T18677] veth0_vlan: entered promiscuous mode [ 697.915810][T18720] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5029'. [ 697.981757][T18720] hsr_slave_0: left promiscuous mode [ 697.991112][T18720] hsr_slave_1: left promiscuous mode [ 698.108788][T18719] veth0_vlan: left promiscuous mode [ 698.167569][T18719] veth0_vlan: entered promiscuous mode [ 698.956812][T18751] netlink: 'syz.9.5040': attribute type 10 has an invalid length. [ 698.964748][T18751] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5040'. [ 699.029397][T18751] batman_adv: batadv0: Adding interface: ÿÿÿÿÿÿ [ 699.075704][T18751] batman_adv: batadv0: The MTU of interface ÿÿÿÿÿÿ is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.160318][T18751] batman_adv: batadv0: Interface activated: ÿÿÿÿÿÿ [ 699.838473][T18759] veth0_vlan: left promiscuous mode [ 700.010312][T18759] veth0_vlan: entered promiscuous mode [ 700.210019][T18763] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5037'. [ 700.225135][T18763] hsr_slave_0: left promiscuous mode [ 700.242513][T18763] hsr_slave_1: left promiscuous mode [ 704.092209][T18802] veth0_vlan: left promiscuous mode [ 704.235656][T18802] veth0_vlan: entered promiscuous mode [ 704.700674][T18808] netlink: 61211 bytes leftover after parsing attributes in process `syz.9.5052'. [ 704.797857][T18810] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5053'. [ 704.828137][T18810] hsr_slave_0: left promiscuous mode [ 704.900652][T18810] hsr_slave_1: left promiscuous mode [ 706.115829][T18836] pim6reg1: entered promiscuous mode [ 706.132498][T18836] pim6reg1: entered allmulticast mode [ 706.351898][T18840] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.5065'. [ 706.684466][T18842] syzkaller0: entered promiscuous mode [ 706.703936][T18842] syzkaller0: entered allmulticast mode [ 706.807177][T18844] netlink: 'syz.4.5067': attribute type 4 has an invalid length. [ 706.821628][T18844] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.5067'. [ 707.190467][T18855] syzkaller0: entered promiscuous mode [ 707.210998][T18855] syzkaller0: entered allmulticast mode [ 707.527763][T18865] netlink: 61211 bytes leftover after parsing attributes in process `syz.8.5075'. [ 707.918846][T18876] netlink: 'syz.7.5081': attribute type 4 has an invalid length. [ 707.959974][T18876] netlink: 14345 bytes leftover after parsing attributes in process `syz.7.5081'. [ 709.022091][T18890] pim6reg1: entered promiscuous mode [ 709.035720][T18890] pim6reg1: entered allmulticast mode [ 709.128780][T18895] syzkaller0: entered promiscuous mode [ 709.135194][T18895] syzkaller0: entered allmulticast mode [ 710.651087][T18924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.659125][T18924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.687155][T18924] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 710.705323][T18924] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 710.724957][T18924] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 710.733313][T18924] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 710.912471][T18927] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5100'. [ 710.938382][T18927] hsr_slave_0: left promiscuous mode [ 710.953930][T18927] hsr_slave_1: left promiscuous mode [ 711.518238][T18933] syzkaller0: entered promiscuous mode [ 711.533801][T18933] syzkaller0: entered allmulticast mode [ 711.910647][T18951] netlink: 'syz.9.5111': attribute type 27 has an invalid length. [ 713.010029][T18957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.042844][T18957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.104585][T18957] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 713.126255][T18957] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 713.737380][T18970] netlink: 'syz.9.5119': attribute type 4 has an invalid length. [ 713.745301][T18970] netlink: 14345 bytes leftover after parsing attributes in process `syz.9.5119'. [ 713.915947][T18974] syzkaller0: entered promiscuous mode [ 713.923908][T18974] syzkaller0: entered allmulticast mode [ 713.942898][T18976] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5122'. [ 718.130772][ T5789] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 718.370225][T19034] sit0: entered allmulticast mode [ 718.698162][T19039] __sock_release: fasync list not empty! [ 720.200752][T19071] sit0: entered allmulticast mode [ 720.355000][T19067] __sock_release: fasync list not empty! [ 720.578637][T19082] sit0: left promiscuous mode [ 720.586918][T19077] __sock_release: fasync list not empty! [ 722.470659][T19125] sit0: entered allmulticast mode [ 722.591406][T19124] __sock_release: fasync list not empty! [ 723.106244][T19132] netlink: 'syz.9.5181': attribute type 10 has an invalid length. [ 723.452751][T19132] team0: Port device wlan1 added [ 723.525151][T19131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.602791][T19132] syz.9.5181 (19132) used greatest stack depth: 18672 bytes left [ 723.990974][T19152] __sock_release: fasync list not empty! [ 725.416800][T19173] syzkaller0: entered promiscuous mode [ 725.422558][T19173] syzkaller0: entered allmulticast mode [ 725.632006][T19183] __sock_release: fasync list not empty! [ 727.640568][ T5789] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 728.758497][T19223] netlink: 'syz.4.5215': attribute type 11 has an invalid length. [ 728.807964][T19223] netlink: 195824 bytes leftover after parsing attributes in process `syz.4.5215'. [ 729.537276][T19237] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.5219'. [ 729.999642][T19256] netlink: 'syz.9.5227': attribute type 1 has an invalid length. [ 730.029856][T19256] netlink: 112860 bytes leftover after parsing attributes in process `syz.9.5227'. [ 730.045233][T19256] netlink: 9 bytes leftover after parsing attributes in process `syz.9.5227'. [ 730.393836][ T5789] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 730.883274][T19270] »»»»»»: renamed from vlan0 (while UP) [ 732.368726][T19295] veth0_vlan: left promiscuous mode [ 732.401307][T19295] veth0_vlan: entered promiscuous mode [ 735.183948][T19322] netlink: 'syz.8.5251': attribute type 10 has an invalid length. [ 735.781685][T19350] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 735.805771][T19350] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 735.814579][T19350] veth0_to_bridge: entered allmulticast mode [ 735.835254][T19350] veth0_to_bridge: entered promiscuous mode [ 735.858488][T19350] Ÿë: port 2(erspan0) entered blocking state [ 735.872708][T19350] Ÿë: port 2(erspan0) entered disabled state [ 735.889398][T19350] erspan0: entered allmulticast mode [ 735.907317][T19350] erspan0: entered promiscuous mode [ 736.261123][T19366] netlink: 'syz.7.5269': attribute type 3 has an invalid length. [ 736.269195][T19366] netlink: 'syz.7.5269': attribute type 4 has an invalid length. [ 736.278122][T19366] netlink: 9067 bytes leftover after parsing attributes in process `syz.7.5269'. [ 736.799775][T19380] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 736.811410][T19381] netlink: 'syz.9.5276': attribute type 29 has an invalid length. [ 736.823083][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5277'. [ 736.840657][T19381] netlink: 'syz.9.5276': attribute type 29 has an invalid length. [ 736.982967][ T5789] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 737.117570][ T5794] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 737.503786][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 737.621511][T19413] syz.9.5289[19413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 737.621673][T19413] syz.9.5289[19413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 737.639153][T19415] netlink: 'syz.4.5290': attribute type 21 has an invalid length. [ 737.661595][T19415] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5290'. [ 738.145998][T19425] netlink: 'syz.4.5294': attribute type 4 has an invalid length. [ 738.154297][T19425] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5294'. [ 738.180520][T19425] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 738.233955][T19429] syzkaller0: entered promiscuous mode [ 738.239553][T19429] syzkaller0: entered allmulticast mode [ 740.188083][T19432] netlink: 'syz.4.5296': attribute type 10 has an invalid length. [ 740.207442][T19432] team0: Port device hsr_slave_0 added [ 740.763763][T19461] wg2: left promiscuous mode [ 740.773983][T19461] wg2: left allmulticast mode [ 740.848250][T19461] wg2: entered promiscuous mode [ 740.853340][T19461] wg2: entered allmulticast mode [ 741.011554][T19470] netlink: 'syz.4.5310': attribute type 4 has an invalid length. [ 741.046604][T19466] netlink: 209820 bytes leftover after parsing attributes in process `syz.9.5309'. [ 741.075676][T19470] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5310'. [ 741.678601][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.685136][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.354265][ T5794] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 742.362295][ T5794] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 742.371839][ T5794] CPU: 0 PID: 5794 Comm: kworker/u5:8 Not tainted 6.6.101-syzkaller #0 [ 742.380152][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 742.390248][ T5794] Workqueue: hci2 hci_rx_work [ 742.394973][ T5794] Call Trace: [ 742.398301][ T5794] [ 742.401260][ T5794] dump_stack_lvl+0x16c/0x230 [ 742.405973][ T5794] ? show_regs_print_info+0x20/0x20 [ 742.411212][ T5794] ? load_image+0x3b0/0x3b0 [ 742.415773][ T5794] sysfs_create_dir_ns+0x256/0x280 [ 742.420921][ T5794] ? hci_rx_work+0x43a/0xd80 [ 742.425545][ T5794] ? sysfs_warn_dup+0xa0/0xa0 [ 742.430272][ T5794] ? do_raw_spin_unlock+0x121/0x230 [ 742.435520][ T5794] kobject_add_internal+0x6b8/0xc70 [ 742.440770][ T5794] kobject_add+0x156/0x220 [ 742.445230][ T5794] ? __rwlock_init+0x150/0x150 [ 742.450041][ T5794] ? kobject_init+0x1e0/0x1e0 [ 742.454757][ T5794] ? _raw_spin_unlock+0x28/0x40 [ 742.459629][ T5794] ? get_device_parent+0x366/0x390 [ 742.464761][ T5794] device_add+0x408/0xc20 [ 742.469115][ T5794] hci_conn_add_sysfs+0xd5/0x1e0 [ 742.474078][ T5794] le_conn_complete_evt+0xc37/0x1220 [ 742.479384][ T5794] ? bt_warn+0x10c/0x160 [ 742.483639][ T5794] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 742.489894][ T5794] ? bt_info+0x160/0x160 [ 742.494148][ T5794] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 742.499798][ T5794] ? skb_pull_data+0xfb/0x200 [ 742.504494][ T5794] hci_le_enh_conn_complete_evt+0x189/0x460 [ 742.510509][ T5794] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 742.516936][ T5794] ? hci_remote_host_features_evt+0x160/0x160 [ 742.523022][ T5794] hci_event_packet+0x795/0x1210 [ 742.527990][ T5794] ? bis_list+0x290/0x290 [ 742.532339][ T5794] ? lockdep_hardirqs_on+0x98/0x150 [ 742.537557][ T5794] ? hci_send_to_monitor+0xd7/0x4f0 [ 742.542781][ T5794] hci_rx_work+0x43a/0xd80 [ 742.547229][ T5794] ? process_scheduled_works+0x957/0x15b0 [ 742.552980][ T5794] process_scheduled_works+0xa45/0x15b0 [ 742.558578][ T5794] ? assign_work+0x400/0x400 [ 742.563195][ T5794] ? assign_work+0x39e/0x400 [ 742.567824][ T5794] worker_thread+0xa55/0xfc0 [ 742.572463][ T5794] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 742.578387][ T5794] ? _raw_spin_unlock+0x40/0x40 [ 742.583258][ T5794] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 742.589202][ T5794] kthread+0x2fa/0x390 [ 742.593301][ T5794] ? pr_cont_work+0x560/0x560 [ 742.597997][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 742.602600][ T5794] ret_from_fork+0x48/0x80 [ 742.607029][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 742.611630][ T5794] ret_from_fork_asm+0x11/0x20 [ 742.616420][ T5794] [ 742.620394][ T5794] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 742.634419][ T5794] Bluetooth: hci2: failed to register connection device [ 744.685699][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 744.790630][T19548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.799033][T19548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.813999][T19548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.824079][T19548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.975431][ T5794] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 746.088610][T19565] syzkaller0: entered promiscuous mode [ 746.101820][T19565] syzkaller0: entered allmulticast mode [ 746.165968][T19565] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 746.185802][T19565] syzkaller0: Linktype set failed because interface is up [ 747.706811][ T5155] udevd[5155]: worker [19389] terminated by signal 33 (Unknown signal 33) [ 747.723528][ T5155] udevd[5155]: worker [19389] failed while handling '/fs/nfs/net/nfs_client' [ 749.377791][T19577] netlink: 'syz.8.5351': attribute type 10 has an invalid length. [ 749.391489][T19577] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 750.849003][T19599] netlink: 'syz.9.5359': attribute type 10 has an invalid length. [ 750.862537][T19599] team0: Cannot enslave team device to itself [ 754.223925][T19632] warn_alloc: 2 callbacks suppressed [ 754.223942][T19632] syz.8.5370: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 754.253597][T19632] CPU: 1 PID: 19632 Comm: syz.8.5370 Not tainted 6.6.101-syzkaller #0 [ 754.261914][T19632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 754.272003][T19632] Call Trace: [ 754.275284][T19632] [ 754.278215][T19632] dump_stack_lvl+0x16c/0x230 [ 754.282900][T19632] ? show_regs_print_info+0x20/0x20 [ 754.288100][T19632] ? load_image+0x3b0/0x3b0 [ 754.292635][T19632] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 754.299072][T19632] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 754.305597][T19632] warn_alloc+0x210/0x300 [ 754.309955][T19632] ? stack_trace_save+0x9c/0xe0 [ 754.314813][T19632] ? zone_watermark_ok_safe+0x230/0x230 [ 754.320375][T19632] ? kasan_set_track+0x5f/0x70 [ 754.325132][T19632] ? kasan_set_track+0x4e/0x70 [ 754.329887][T19632] ? __kasan_kmalloc+0x8f/0xa0 [ 754.334646][T19632] ? xsk_init_queue+0xb0/0x110 [ 754.339403][T19632] ? xsk_setsockopt+0x4db/0x6f0 [ 754.344248][T19632] ? do_sock_setsockopt+0x175/0x1a0 [ 754.349443][T19632] ? __x64_sys_setsockopt+0x184/0x200 [ 754.354817][T19632] __vmalloc_node_range+0x126/0x1320 [ 754.360173][T19632] ? free_vm_area+0x50/0x50 [ 754.364715][T19632] vmalloc_user+0x74/0x80 [ 754.369043][T19632] ? xskq_create+0xbf/0x170 [ 754.373544][T19632] xskq_create+0xbf/0x170 [ 754.377877][T19632] xsk_init_queue+0xb0/0x110 [ 754.382469][T19632] xsk_setsockopt+0x4db/0x6f0 [ 754.387149][T19632] ? xsk_poll+0x670/0x670 [ 754.391484][T19632] ? __fget_files+0x28/0x4d0 [ 754.396070][T19632] ? aa_sock_opt_perm+0x74/0x100 [ 754.401019][T19632] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 754.406585][T19632] ? security_socket_setsockopt+0x7e/0xa0 [ 754.412362][T19632] ? xsk_poll+0x670/0x670 [ 754.416776][T19632] do_sock_setsockopt+0x175/0x1a0 [ 754.421863][T19632] ? __fdget+0x180/0x210 [ 754.426188][T19632] __x64_sys_setsockopt+0x184/0x200 [ 754.431432][T19632] do_syscall_64+0x55/0xb0 [ 754.435886][T19632] ? clear_bhb_loop+0x40/0x90 [ 754.440576][T19632] ? clear_bhb_loop+0x40/0x90 [ 754.445265][T19632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.451156][T19632] RIP: 0033:0x7f89ff18ebe9 [ 754.455580][T19632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.475223][T19632] RSP: 002b:00007f89fd3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 754.483651][T19632] RAX: ffffffffffffffda RBX: 00007f89ff3b5fa0 RCX: 00007f89ff18ebe9 [ 754.491619][T19632] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 754.499583][T19632] RBP: 00007f89ff211e19 R08: 0000000000000004 R09: 0000000000000000 [ 754.507581][T19632] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 754.515588][T19632] R13: 00007f89ff3b6038 R14: 00007f89ff3b5fa0 R15: 00007ffe181479d8 [ 754.523598][T19632] [ 754.535796][T19632] Mem-Info: [ 754.539253][T19632] active_anon:19662 inactive_anon:0 isolated_anon:0 [ 754.539253][T19632] active_file:18560 inactive_file:40104 isolated_file:0 [ 754.539253][T19632] unevictable:768 dirty:164 writeback:0 [ 754.539253][T19632] slab_reclaimable:11422 slab_unreclaimable:105363 [ 754.539253][T19632] mapped:23826 shmem:1418 pagetables:492 [ 754.539253][T19632] sec_pagetables:0 bounce:0 [ 754.539253][T19632] kernel_misc_reclaimable:0 [ 754.539253][T19632] free:1324577 free_pcp:2647 free_cma:0 [ 754.588302][T19632] Node 0 active_anon:78648kB inactive_anon:0kB active_file:64392kB inactive_file:160212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95296kB dirty:648kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10320kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no [ 754.642232][T19632] Node 1 active_anon:0kB inactive_anon:0kB active_file:9848kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 754.673715][T19632] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 754.701672][T19632] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 754.708149][T19632] Node 0 DMA32 free:1382876kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:78600kB inactive_anon:0kB active_file:64392kB inactive_file:158896kB unevictable:1536kB writepending:648kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:4480kB local_pcp:3696kB free_cma:0kB [ 754.743292][T19632] lowmem_reserve[]: 0 0 1 1 1 [ 754.748618][T19632] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 754.785774][T19632] lowmem_reserve[]: 0 0 0 0 0 [ 754.790667][T19632] Node 1 Normal free:3899168kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:9848kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7840kB local_pcp:4864kB free_cma:0kB [ 754.820993][T19632] lowmem_reserve[]: 0 0 0 0 0 [ 754.825971][T19632] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 754.843884][T19632] Node 0 DMA32: 1757*4kB (UME) 1247*8kB (UME) 877*16kB (UME) 672*32kB (UME) 711*64kB (UME) 266*128kB (UME) 95*256kB (UM) 47*512kB (UME) 20*1024kB (M) 7*2048kB (ME) 285*4096kB (UM) = 1382652kB [ 754.871537][T19632] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 754.887980][T19632] Node 1 Normal: 230*4kB (UM) 57*8kB (UE) 32*16kB (UE) 260*32kB (UE) 93*64kB (UME) 12*128kB (UE) 4*256kB (UE) 3*512kB (UE) 2*1024kB (UM) 3*2048kB (UME) 945*4096kB (M) = 3899168kB [ 754.906237][T19632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 754.920508][T19632] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 754.930381][T19632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 754.949071][T19632] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 754.964363][T19632] 60082 total pagecache pages [ 754.973886][T19632] 0 pages in swap cache [ 754.978388][T19632] Free swap = 124996kB [ 754.982749][T19632] Total swap = 124996kB [ 754.991121][T19632] 2097051 pages RAM [ 754.995047][T19632] 0 pages HighMem/MovableOnly [ 754.999936][T19632] 416137 pages reserved [ 755.004152][T19632] 0 pages cma reserved [ 756.573851][T19661] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 756.749559][T19668] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5382'. [ 757.866735][ T5794] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 758.314117][T19718] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.5402'. [ 758.445448][T19713] syzkaller0: entered promiscuous mode [ 758.455427][T19713] syzkaller0: entered allmulticast mode [ 761.393574][T19725] netlink: 766 bytes leftover after parsing attributes in process `syz.7.5404'. [ 761.403253][T19725] bond_slave_1: entered promiscuous mode [ 761.409303][T19725] batadv_slave_0: entered promiscuous mode [ 761.722902][T19742] sit0: entered promiscuous mode [ 762.238033][T19755] netlink: 'syz.4.5417': attribute type 10 has an invalid length. [ 762.299219][T19755] bond0: entered promiscuous mode [ 762.321336][ T5794] Bluetooth: hci3: adv larger than maximum supported [ 762.322611][T19755] bond_slave_1: entered promiscuous mode [ 762.337719][T19755] batadv_slave_0: entered promiscuous mode [ 763.114653][T19783] syzkaller0: entered promiscuous mode [ 763.120482][T19783] syzkaller0: entered allmulticast mode [ 763.135027][T19783] syzkaller0: left promiscuous mode [ 763.140508][T19783] syzkaller0: left allmulticast mode [ 765.308051][T19792] netlink: 'syz.7.5430': attribute type 6 has an invalid length. [ 765.315926][T19792] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5430'. [ 765.496372][T19806] syzkaller0: entered promiscuous mode [ 765.502234][T19806] syzkaller0: entered allmulticast mode [ 767.755294][T19810] netlink: 'syz.9.5437': attribute type 21 has an invalid length. [ 767.763405][T19810] IPv6: NLM_F_CREATE should be specified when creating new route [ 767.775096][T19810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 767.782349][T19810] IPv6: NLM_F_CREATE should be set when creating new route [ 767.789718][T19810] IPv6: NLM_F_CREATE should be set when creating new route [ 767.796976][T19810] IPv6: NLM_F_CREATE should be set when creating new route [ 767.804481][T19818] netlink: 'syz.7.5440': attribute type 10 has an invalid length. [ 767.825371][T19818] veth0_vlan: left promiscuous mode [ 767.837017][T19818] veth0_vlan: entered promiscuous mode [ 767.847806][T19818] team0: Device veth0_vlan failed to register rx_handler [ 767.899918][T19820] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5441'. [ 767.912478][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5441'. [ 768.006500][T19826] delete_channel: no stack [ 770.740880][T19856] netlink: 'syz.8.5454': attribute type 10 has an invalid length. [ 770.882136][T19860] netlink: 17279 bytes leftover after parsing attributes in process `syz.8.5456'. [ 770.914121][T19863] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 771.214204][ T5794] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 773.824251][T19887] pim6reg1: entered allmulticast mode [ 774.233571][T19896] netlink: 'syz.9.5471': attribute type 10 has an invalid length. [ 775.325313][ T5794] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 777.235670][T19941] netlink: 'syz.9.5490': attribute type 39 has an invalid length. [ 777.850104][T19962] netlink: 'syz.8.5499': attribute type 39 has an invalid length. [ 778.133345][T19974] netlink: 'syz.8.5504': attribute type 17 has an invalid length. [ 778.166203][T19974] netlink: 'syz.8.5504': attribute type 16 has an invalid length. [ 778.174858][T19974] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5504'. [ 778.453540][T19986] netlink: 'syz.9.5507': attribute type 21 has an invalid length. [ 778.470927][T19986] netlink: 128 bytes leftover after parsing attributes in process `syz.9.5507'. [ 778.482683][T19986] netlink: 'syz.9.5507': attribute type 4 has an invalid length. [ 779.377793][T20014] netlink: 'syz.9.5517': attribute type 16 has an invalid length. [ 779.390894][T20014] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5517'. [ 781.493981][ T5794] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 781.502027][ T5794] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 781.511837][ T5794] CPU: 1 PID: 5794 Comm: kworker/u5:8 Not tainted 6.6.101-syzkaller #0 [ 781.520113][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.530180][ T5794] Workqueue: hci2 hci_rx_work [ 781.534876][ T5794] Call Trace: [ 781.538165][ T5794] [ 781.541103][ T5794] dump_stack_lvl+0x16c/0x230 [ 781.545803][ T5794] ? show_regs_print_info+0x20/0x20 [ 781.551015][ T5794] ? load_image+0x3b0/0x3b0 [ 781.555557][ T5794] sysfs_create_dir_ns+0x256/0x280 [ 781.560684][ T5794] ? hci_rx_work+0x43a/0xd80 [ 781.565284][ T5794] ? sysfs_warn_dup+0xa0/0xa0 [ 781.569982][ T5794] ? do_raw_spin_unlock+0x121/0x230 [ 781.575205][ T5794] kobject_add_internal+0x6b8/0xc70 [ 781.580427][ T5794] kobject_add+0x156/0x220 [ 781.584856][ T5794] ? __rwlock_init+0x150/0x150 [ 781.589640][ T5794] ? kobject_init+0x1e0/0x1e0 [ 781.594331][ T5794] ? _raw_spin_unlock+0x28/0x40 [ 781.599198][ T5794] ? get_device_parent+0x366/0x390 [ 781.604331][ T5794] device_add+0x408/0xc20 [ 781.608692][ T5794] hci_conn_add_sysfs+0xd5/0x1e0 [ 781.613647][ T5794] le_conn_complete_evt+0xc37/0x1220 [ 781.618960][ T5794] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 781.625215][ T5794] ? bt_info+0x160/0x160 [ 781.629466][ T5794] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 781.635199][ T5794] ? skb_pull_data+0xfb/0x200 [ 781.639896][ T5794] hci_le_conn_complete_evt+0x187/0x440 [ 781.645455][ T5794] ? hci_remote_host_features_evt+0x160/0x160 [ 781.651546][ T5794] hci_event_packet+0x795/0x1210 [ 781.656505][ T5794] ? bis_list+0x290/0x290 [ 781.660854][ T5794] ? lockdep_hardirqs_on+0x98/0x150 [ 781.666072][ T5794] ? hci_send_to_monitor+0xd7/0x4f0 [ 781.671287][ T5794] hci_rx_work+0x43a/0xd80 [ 781.675722][ T5794] ? process_scheduled_works+0x957/0x15b0 [ 781.681458][ T5794] process_scheduled_works+0xa45/0x15b0 [ 781.687045][ T5794] ? assign_work+0x400/0x400 [ 781.691653][ T5794] ? assign_work+0x39e/0x400 [ 781.696259][ T5794] worker_thread+0xa55/0xfc0 [ 781.700865][ T5794] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 781.706786][ T5794] ? _raw_spin_unlock+0x40/0x40 [ 781.711649][ T5794] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 781.717577][ T5794] kthread+0x2fa/0x390 [ 781.721659][ T5794] ? pr_cont_work+0x560/0x560 [ 781.726345][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 781.730946][ T5794] ret_from_fork+0x48/0x80 [ 781.735373][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 781.740023][ T5794] ret_from_fork_asm+0x11/0x20 [ 781.744819][ T5794] [ 781.748904][ T5794] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 781.762869][ T5794] Bluetooth: hci2: failed to register connection device [ 782.416314][T20059] netlink: 'syz.7.5538': attribute type 10 has an invalid length. [ 782.424218][T20059] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5538'. [ 783.865082][T20094] wg2: left promiscuous mode [ 783.881878][T20094] wg2: left allmulticast mode [ 784.322022][ T5789] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 784.688872][T20120] netlink: 'syz.9.5561': attribute type 6 has an invalid length. [ 784.721421][T20120] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.5561'. [ 785.351578][T20119] netlink: 'syz.8.5560': attribute type 39 has an invalid length. [ 785.481517][T20127] delete_channel: no stack [ 785.801749][ T5789] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 785.888548][T20137] syzkaller0: entered promiscuous mode [ 785.894095][T20137] syzkaller0: entered allmulticast mode [ 785.951619][T20147] netlink: 'syz.8.5572': attribute type 21 has an invalid length. [ 786.375594][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 788.592113][ T5789] Bluetooth: hci0: unknown advertising packet type: 0xc5 [ 789.759376][T20190] syz.7.5587[20190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 789.767249][T20190] syz.7.5587[20190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 789.782140][T20190] syz.7.5587[20190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 789.793915][T20190] syz.7.5587[20190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.236398][T20219] netlink: 'syz.8.5596': attribute type 2 has an invalid length. [ 792.591663][T20219] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5596'. [ 792.727896][T20225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5598'. [ 792.748412][T20225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5598'. [ 792.781886][T20227] netlink: 'syz.9.5599': attribute type 39 has an invalid length. [ 793.771316][T20254] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 793.920632][T20260] netlink: 'syz.7.5613': attribute type 10 has an invalid length. [ 793.952040][T20260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.975356][T20260] batadv0: entered promiscuous mode [ 793.986541][T20260] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 794.071931][T20263] bond_slave_1: left promiscuous mode [ 794.093058][T20263] batadv_slave_0: left promiscuous mode [ 794.117821][T20263] batadv0: left promiscuous mode [ 794.161041][T20263] bond0: entered promiscuous mode [ 794.190941][T20263] bond_slave_1: entered promiscuous mode [ 794.243526][T20263] batadv_slave_0: entered promiscuous mode [ 794.301750][T20263] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 794.324848][T20263] batadv0: entered promiscuous mode [ 794.820469][T20274] syzkaller0: entered promiscuous mode [ 794.835843][T20274] syzkaller0: entered allmulticast mode [ 794.952782][T20277] netlink: 'syz.9.5620': attribute type 39 has an invalid length. [ 795.507045][T20290] netlink: 'syz.8.5625': attribute type 10 has an invalid length. [ 795.516467][T20290] netlink: 'syz.8.5625': attribute type 10 has an invalid length. [ 795.524426][T20290] netlink: 2 bytes leftover after parsing attributes in process `syz.8.5625'. [ 795.533971][T20290] team0: entered promiscuous mode [ 795.539208][T20290] C: entered promiscuous mode [ 795.544358][T20290] team_slave_1: entered promiscuous mode [ 795.552020][T20290] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.546904][T20317] netlink: 830 bytes leftover after parsing attributes in process `syz.8.5633'. [ 797.160759][T20328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 797.833338][T20343] syzkaller0: entered promiscuous mode [ 797.842407][T20343] syzkaller0: entered allmulticast mode [ 800.480717][T20351] bridge0: port 1(team0) entered blocking state [ 800.525792][T20351] bridge0: port 1(team0) entered disabled state [ 800.532305][T20351] team0: entered allmulticast mode [ 800.555084][T20351] C: entered allmulticast mode [ 800.560632][T20351] team_slave_1: entered allmulticast mode [ 800.567646][T20351] hsr_slave_0: entered allmulticast mode [ 800.587502][T20351] team0: entered promiscuous mode [ 800.592596][T20351] C: entered promiscuous mode [ 800.610230][T20351] team_slave_1: entered promiscuous mode [ 800.616554][T20351] hsr_slave_0: entered promiscuous mode [ 800.698338][T20370] netlink: 'syz.7.5653': attribute type 21 has an invalid length. [ 800.772524][T20373] netlink: 'syz.4.5655': attribute type 10 has an invalid length. [ 800.784981][T20375] netlink: set zone limit has 8 unknown bytes [ 801.030515][T20377] netlink: 'syz.7.5657': attribute type 15 has an invalid length. [ 801.053046][T20382] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.5659'. [ 801.704454][T20408] syzkaller0: entered promiscuous mode [ 801.714192][T20408] syzkaller0: entered allmulticast mode [ 802.594993][ T5789] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6 [ 803.097169][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.114612][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.107847][T20468] netlink: 'syz.4.5691': attribute type 10 has an invalid length. [ 804.177143][T20468] veth0_vlan: left promiscuous mode [ 804.184074][T20468] veth0_vlan: entered promiscuous mode [ 804.203545][T20468] team0: Device veth0_vlan failed to register rx_handler [ 804.694491][ T5789] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17 [ 804.694839][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 804.711837][ T5789] CPU: 1 PID: 5789 Comm: kworker/u5:4 Not tainted 6.6.101-syzkaller #0 [ 804.720112][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 804.730193][ T5789] Workqueue: hci0 hci_rx_work [ 804.734919][ T5789] Call Trace: [ 804.738230][ T5789] [ 804.741186][ T5789] dump_stack_lvl+0x16c/0x230 [ 804.745910][ T5789] ? show_regs_print_info+0x20/0x20 [ 804.751137][ T5789] ? load_image+0x3b0/0x3b0 [ 804.755691][ T5789] sysfs_create_dir_ns+0x256/0x280 [ 804.760851][ T5789] ? sysfs_warn_dup+0xa0/0xa0 [ 804.765575][ T5789] ? do_raw_spin_unlock+0x121/0x230 [ 804.770812][ T5789] kobject_add_internal+0x6b8/0xc70 [ 804.776053][ T5789] kobject_add+0x156/0x220 [ 804.780515][ T5789] ? kobject_init+0x1e0/0x1e0 [ 804.785234][ T5789] ? kobject_put+0x435/0x470 [ 804.789864][ T5789] ? get_device_parent+0x366/0x390 [ 804.795025][ T5789] device_add+0x408/0xc20 [ 804.799403][ T5789] hci_conn_add_sysfs+0xd5/0x1e0 [ 804.804383][ T5789] hci_sync_conn_complete_evt+0x6ff/0xa10 [ 804.810140][ T5789] ? hci_remote_ext_features_evt+0xa90/0xa90 [ 804.816135][ T5789] hci_event_packet+0x7ed/0x1210 [ 804.821098][ T5789] ? bis_list+0x290/0x290 [ 804.825444][ T5789] ? kcov_remote_start+0x2b/0x7f0 [ 804.830504][ T5789] ? hci_send_to_monitor+0xd7/0x4f0 [ 804.835717][ T5789] hci_rx_work+0x43a/0xd80 [ 804.840154][ T5789] ? process_scheduled_works+0x957/0x15b0 [ 804.845886][ T5789] process_scheduled_works+0xa45/0x15b0 [ 804.851467][ T5789] ? assign_work+0x400/0x400 [ 804.856095][ T5789] ? assign_work+0x39e/0x400 [ 804.860722][ T5789] worker_thread+0xa55/0xfc0 [ 804.865372][ T5789] kthread+0x2fa/0x390 [ 804.869457][ T5789] ? pr_cont_work+0x560/0x560 [ 804.874167][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 804.878774][ T5789] ret_from_fork+0x48/0x80 [ 804.883208][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 804.887811][ T5789] ret_from_fork_asm+0x11/0x20 [ 804.892609][ T5789] [ 804.898786][ T5789] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 804.912742][ T5789] Bluetooth: hci0: failed to register connection device [ 805.354266][T20494] netlink: 'syz.8.5701': attribute type 10 has an invalid length. [ 805.364798][T20494] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5701'. [ 805.762110][ T5789] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 807.855991][T20548] netlink: 'syz.7.5719': attribute type 10 has an invalid length. [ 809.193184][T20567] netlink: 11254 bytes leftover after parsing attributes in process `syz.9.5726'. [ 809.209962][T20569] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5727'. [ 809.807240][ T5789] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 809.816613][ T5789] Bluetooth: hci2: Injecting HCI hardware error event [ 809.824898][ T5794] Bluetooth: hci2: hardware error 0x00 [ 809.927903][ T5789] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 809.927939][ T5789] Bluetooth: hci3: Malformed LE Event: 0x0d [ 811.143951][T20623] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 811.342750][T20626] netlink: 'syz.9.5748': attribute type 17 has an invalid length. [ 811.489865][T20626] netlink: 'syz.9.5748': attribute type 16 has an invalid length. [ 811.513596][T20626] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5748'. [ 811.853111][T20635] syzkaller0: entered promiscuous mode [ 811.858814][T20635] syzkaller0: entered allmulticast mode [ 811.885917][ T5794] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 814.393777][T20655] syzkaller0: entered promiscuous mode [ 814.415716][T20655] syzkaller0: entered allmulticast mode [ 816.835918][T20683] syzkaller0: entered promiscuous mode [ 816.841574][T20683] syzkaller0: entered allmulticast mode [ 819.159132][T20694] netlink: 11254 bytes leftover after parsing attributes in process `syz.9.5768'. [ 819.464558][T20711] netlink: 'syz.8.5776': attribute type 2 has an invalid length. [ 820.030632][T20721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.038498][T20721] IPv6: NLM_F_CREATE should be set when creating new route [ 820.046094][T20721] IPv6: NLM_F_CREATE should be set when creating new route [ 820.053722][T20721] IPv6: NLM_F_CREATE should be set when creating new route [ 821.611399][T20754] netlink: 'syz.4.5791': attribute type 39 has an invalid length. [ 824.143539][T20805] netlink: 'syz.4.5812': attribute type 3 has an invalid length. [ 824.182460][T20805] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.5812'. [ 826.085015][T20819] syzkaller0: entered promiscuous mode [ 826.112976][T20819] syzkaller0: entered allmulticast mode [ 826.142644][T20818] syzkaller0: left promiscuous mode [ 827.611049][T20845] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.5824'. [ 829.252624][ T5794] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 830.575603][T20836] wg2: entered promiscuous mode [ 830.587977][T20836] wg2: entered allmulticast mode [ 831.272867][T20867] netlink: 'syz.9.5835': attribute type 10 has an invalid length. [ 831.285637][T20867] team0: Device ip6_vti0 is of different type [ 831.461966][ T5794] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 831.796237][T20891] syzkaller0: entered promiscuous mode [ 831.811618][T20891] syzkaller0: entered allmulticast mode [ 832.132956][T20904] netlink: 'syz.7.5850': attribute type 10 has an invalid length. [ 832.642902][T20915] netlink: 'syz.9.5855': attribute type 10 has an invalid length. [ 832.657524][T20915] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.677484][T20915] bond0: (slave team0): Enslaving as an active interface with an up link [ 833.667930][T20933] netlink: 'syz.4.5862': attribute type 10 has an invalid length. [ 833.694455][T20933] veth1_macvtap: entered promiscuous mode [ 833.709316][T20933] veth1_macvtap: entered allmulticast mode [ 833.716765][T20933] team0: Port device veth1_macvtap added [ 834.183779][T20947] syzkaller0: entered promiscuous mode [ 834.205587][T20947] syzkaller0: entered allmulticast mode [ 835.259103][ T5794] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 837.408372][T20957] netlink: 'syz.4.5872': attribute type 27 has an invalid length. [ 838.961017][T20999] syzkaller0: entered promiscuous mode [ 838.968492][T20999] syzkaller0: entered allmulticast mode [ 838.980953][T21001] netlink: 'syz.4.5888': attribute type 10 has an invalid length. [ 841.664927][ T5794] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 841.680063][T21034] sit0: entered promiscuous mode [ 842.478497][T21045] syzkaller0: entered promiscuous mode [ 842.484047][T21045] syzkaller0: entered allmulticast mode [ 842.803080][T21056] bridge0: entered promiscuous mode [ 842.811430][T21056] bridge0: entered allmulticast mode [ 845.241405][T21101] syzkaller0: entered promiscuous mode [ 845.251683][T21101] syzkaller0: entered allmulticast mode [ 845.279559][T21106] netlink: 'syz.9.5923': attribute type 9 has an invalid length. [ 845.295392][T21106] netlink: 49779 bytes leftover after parsing attributes in process `syz.9.5923'. [ 845.978492][T21122] netlink: 'syz.9.5928': attribute type 29 has an invalid length. [ 847.417284][T21117] netlink: 'syz.9.5928': attribute type 10 has an invalid length. [ 847.431856][T21119] netlink: 'syz.8.5929': attribute type 39 has an invalid length. [ 847.441474][T21119] veth0_macvtap: left promiscuous mode [ 847.513156][T21122] netlink: 'syz.9.5928': attribute type 29 has an invalid length. [ 849.011582][ T5794] Bluetooth: hci1: Malformed LE Event: 0x0d [ 849.368811][T21154] netlink: 'syz.4.5941': attribute type 10 has an invalid length. [ 849.599843][T21154] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 849.644282][T21154] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 849.666714][T21154] team0: Port device wlan1 added [ 849.690738][T21160] syzkaller0: entered promiscuous mode [ 849.698229][T21160] syzkaller0: entered allmulticast mode [ 849.864652][T21164] netlink: 830 bytes leftover after parsing attributes in process `syz.9.5946'. [ 850.509153][T21175] syzkaller0: entered promiscuous mode [ 850.522346][T21175] syzkaller0: entered allmulticast mode [ 854.815720][T21233] netlink: 'syz.7.5976': attribute type 2 has an invalid length. [ 854.824730][T21233] netlink: 'syz.7.5976': attribute type 9 has an invalid length. [ 854.832667][T21233] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5976'. [ 855.015712][T21236] netlink: 'syz.4.5974': attribute type 9 has an invalid length. [ 855.033769][T21236] netlink: 49779 bytes leftover after parsing attributes in process `syz.4.5974'. [ 855.238973][T21249] netlink: 'syz.7.5978': attribute type 64 has an invalid length. [ 855.515322][T21251] netlink: 'syz.9.5982': attribute type 10 has an invalid length. [ 855.539574][T21251] syz_tun: entered promiscuous mode [ 855.582556][T21251] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 855.777380][T21256] syzkaller0: entered promiscuous mode [ 855.782911][T21256] syzkaller0: entered allmulticast mode [ 856.245147][T21274] netlink: 'syz.9.5990': attribute type 10 has an invalid length. [ 856.304491][T21274] team0: Port device dummy0 added [ 856.645891][T21278] netlink: 'syz.4.5991': attribute type 29 has an invalid length. [ 856.704268][T21278] netlink: 'syz.4.5991': attribute type 29 has an invalid length. [ 857.140513][ T5794] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 857.259915][T21297] netlink: 'syz.8.5999': attribute type 10 has an invalid length. [ 857.632408][T21305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 858.091553][T21311] netlink: 'syz.7.6005': attribute type 29 has an invalid length. [ 858.321668][T21314] bridge0: left promiscuous mode [ 858.478901][T21316] team0: left allmulticast mode [ 858.484214][T21316] C: left allmulticast mode [ 858.498989][T21316] team_slave_1: left allmulticast mode [ 858.504717][T21316] hsr_slave_0: left allmulticast mode [ 858.514914][T21316] veth1_macvtap: left allmulticast mode [ 858.520760][T21316] mac80211_hwsim hwsim34 wlan1: left allmulticast mode [ 858.536845][T21316] team0: left promiscuous mode [ 858.541667][T21316] C: left promiscuous mode [ 858.547442][T21316] team_slave_1: left promiscuous mode [ 858.552928][T21316] hsr_slave_0: left promiscuous mode [ 858.569098][T21316] veth1_macvtap: left promiscuous mode [ 858.575263][T21316] mac80211_hwsim hwsim34 wlan1: left promiscuous mode [ 858.591238][T21316] bridge0: port 1(team0) entered disabled state [ 859.282123][T21328] veth1_to_bond: entered allmulticast mode [ 860.066797][ T5794] Bluetooth: hci3: unexpected event 0x36 length: 15 > 7 [ 861.023479][T21362] validate_nla: 1 callbacks suppressed [ 861.023497][T21362] netlink: 'syz.4.6025': attribute type 17 has an invalid length. [ 861.083763][T21362] netlink: 'syz.4.6025': attribute type 16 has an invalid length. [ 861.115553][T21362] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6025'. [ 862.144699][T21382] pim6reg1: entered promiscuous mode [ 862.181001][T21382] pim6reg1: entered allmulticast mode [ 862.222970][T21382] netlink: 'syz.7.6031': attribute type 27 has an invalid length. [ 862.342634][T21388] netlink: 'syz.7.6031': attribute type 8 has an invalid length. [ 862.384853][T21388] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6031'. [ 862.525888][T21389] netlink: 'syz.4.6032': attribute type 10 has an invalid length. [ 862.701406][T21393] netlink: 'syz.9.6034': attribute type 10 has an invalid length. [ 862.712033][T21393] netlink: 'syz.9.6034': attribute type 4 has an invalid length. [ 862.952768][ T5794] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 863.312684][T21415] netlink: 'syz.4.6044': attribute type 10 has an invalid length. [ 863.334557][T21415] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6044'. [ 864.661933][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.668600][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.179369][T21461] netlink: 192436 bytes leftover after parsing attributes in process `syz.8.6063'. [ 865.193840][T21461] openvswitch: netlink: Duplicate key (type 0). [ 866.084867][T21473] netlink: 'syz.9.6064': attribute type 28 has an invalid length. [ 866.106718][T21473] netlink: 'syz.9.6064': attribute type 29 has an invalid length. [ 866.120823][T21473] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6064'. [ 866.555055][T21489] syzkaller0: entered promiscuous mode [ 866.564157][T21486] netlink: 'syz.7.6070': attribute type 28 has an invalid length. [ 866.567806][T21489] syzkaller0: entered allmulticast mode [ 866.575528][T21486] netlink: 'syz.7.6070': attribute type 29 has an invalid length. [ 866.595363][T21486] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6070'. [ 866.717830][ T5794] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 868.951776][ T5794] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 869.790887][ T5794] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11 [ 870.337480][T21552] syz.9.6093[21552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.337617][T21552] syz.9.6093[21552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 872.583467][T21585] syzkaller0: entered promiscuous mode [ 872.776580][T21585] syzkaller0: entered allmulticast mode [ 873.005751][ T5794] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 873.014496][ T5794] Bluetooth: hci3: Injecting HCI hardware error event [ 873.023296][ T5794] Bluetooth: hci3: hardware error 0x00 [ 873.297340][T21598] wg2: entered promiscuous mode [ 873.315245][T21598] wg2: entered allmulticast mode [ 873.500992][T21595] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11 [ 873.787369][T21615] netlink: 'syz.4.6107': attribute type 10 has an invalid length. [ 873.808040][T21595] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 873.817037][T21595] Bluetooth: hci1: Injecting HCI hardware error event [ 873.825240][T21595] Bluetooth: hci1: hardware error 0x00 [ 874.360098][T21629] team0: Port device C removed [ 874.366168][T21629] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 874.732563][T21635] netdevsim netdevsim8: Direct firmware load for Ö failed with error -2 [ 874.756700][T21635] netdevsim netdevsim8: Falling back to sysfs fallback for: Ö [ 875.086211][ T5794] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 875.909840][T21595] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 878.144885][T21671] netlink: 61211 bytes leftover after parsing attributes in process `syz.9.6129'. [ 878.213421][T21680] bridge_slave_1: mtu less than device minimum [ 878.411153][T21688] netlink: 129384 bytes leftover after parsing attributes in process `syz.7.6133'. [ 879.183431][T21710] erspan0: left allmulticast mode [ 879.189184][T21710] erspan0: left promiscuous mode [ 879.194376][T21710] Ÿë: port 2(erspan0) entered disabled state [ 879.203445][T21710] veth0_to_bridge: left allmulticast mode [ 879.209324][T21710] veth0_to_bridge: left promiscuous mode [ 879.216075][T21710] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 880.368900][T21719] netlink: 129384 bytes leftover after parsing attributes in process `syz.8.6146'. [ 881.549337][T21751] netlink: 129384 bytes leftover after parsing attributes in process `syz.9.6157'. [ 882.867589][T21595] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 883.119009][T21781] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6166'. [ 886.371601][T21595] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 887.765698][T21842] netlink: 'syz.8.6196': attribute type 10 has an invalid length. [ 887.986801][T21842] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 888.032169][T21842] team0: Port device wlan1 added [ 888.106630][T21838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.314152][T21876] netlink: 'syz.7.6201': attribute type 10 has an invalid length. [ 889.323131][T21876] mac80211_hwsim hwsim39 wlan1: left allmulticast mode [ 889.352907][T21876] bond0: (slave wlan1): Releasing backup interface [ 889.445423][T21876] mac80211_hwsim hwsim39 wlan1: left promiscuous mode [ 889.998811][T21876] team0: Port device wlan1 added [ 890.144701][T21875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.581606][T21901] syzkaller0: entered promiscuous mode [ 890.615525][T21901] syzkaller0: entered allmulticast mode [ 890.654304][T21908] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.6209'. [ 890.664797][T21908] netlink: 6324 bytes leftover after parsing attributes in process `syz.7.6209'. [ 890.674994][T21908] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6209'. [ 892.003474][T21924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.000926][T21926] netlink: 'syz.4.6216': attribute type 10 has an invalid length. [ 893.633222][T21947] netlink: 'syz.7.6226': attribute type 11 has an invalid length. [ 893.650618][T21947] netlink: 195824 bytes leftover after parsing attributes in process `syz.7.6226'. [ 893.860118][T21954] netlink: 'syz.4.6237': attribute type 1 has an invalid length. [ 893.875862][T21954] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.6237'. [ 893.885207][T21954] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6237'. [ 895.218786][T21987] netlink: 'syz.9.6241': attribute type 10 has an invalid length. [ 895.250604][T21987] mac80211_hwsim hwsim36 wlan1: left allmulticast mode [ 895.279895][T21986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.324754][T21993] netlink: 9275 bytes leftover after parsing attributes in process `syz.8.6243'. [ 896.764836][T22022] veth0_vlan: left promiscuous mode [ 896.776619][T22022] veth0_vlan: entered promiscuous mode [ 897.478760][T22035] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.6256'. [ 897.490093][T22035] netlink: 6324 bytes leftover after parsing attributes in process `syz.9.6256'. [ 897.500054][T22035] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6256'. [ 898.374739][T22056] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 898.394917][T22056] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 898.407203][T22056] veth0_to_bridge: entered allmulticast mode [ 898.456081][T22056] veth0_to_bridge: entered promiscuous mode [ 898.488353][T22060] Ÿë: port 2(erspan0) entered blocking state [ 898.505948][T22060] Ÿë: port 2(erspan0) entered disabled state [ 898.512613][T22060] erspan0: entered allmulticast mode [ 898.522964][T22060] erspan0: entered promiscuous mode [ 898.818274][T22065] syzkaller0: entered promiscuous mode [ 898.823853][T22065] syzkaller0: entered allmulticast mode [ 901.239814][T22096] netlink: 'syz.4.6281': attribute type 3 has an invalid length. [ 901.248364][T22096] netlink: 'syz.4.6281': attribute type 4 has an invalid length. [ 901.257193][T22096] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.6281'. [ 925.994510][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.000900][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.452149][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.459720][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1006.535415][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1006.542397][ C0] rcu: 1-....: (1 GPs behind) idle=d134/1/0x4000000000000000 softirq=105916/105917 fqs=2100 [ 1006.553558][ C0] rcu: hardirqs softirqs csw/system [ 1006.559992][ C0] rcu: number: 17332319 0 0 [ 1006.566438][ C0] rcu: cputime: 6454 46063 0 ==> 52500(ms) [ 1006.574257][ C0] rcu: (detected by 0, t=10505 jiffies, g=139993, q=169 ncpus=2) [ 1006.582132][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1006.587357][ C1] NMI backtrace for cpu 1 [ 1006.587368][ C1] CPU: 1 PID: 22098 Comm: syz.4.6282 Not tainted 6.6.101-syzkaller #0 [ 1006.587383][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1006.587390][ C1] RIP: 0010:lock_acquire+0xa4/0x410 [ 1006.587414][ C1] Code: f2 f2 f2 4b 89 04 3c 66 43 c7 44 3c 09 f3 f3 43 c6 44 3c 0b f3 0f 1f 44 00 00 65 8b 05 51 b1 9c 7e 83 f8 08 0f 83 8a 01 00 00 <41> 89 c6 c1 e8 06 48 8d 3c c5 e8 84 4a 8e be 08 00 00 00 e8 74 d4 [ 1006.587426][ C1] RSP: 0018:ffffc900001f0120 EFLAGS: 00000097 [ 1006.587440][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 1006.587450][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cd2fc60 [ 1006.587459][ C1] RBP: ffffc900001f0228 R08: 0000000000000000 R09: 0000000000000000 [ 1006.587469][ C1] R10: dffffc0000000000 R11: ffffed10171e7a70 R12: 1ffff9200003e030 [ 1006.587480][ C1] R13: ffffffff8cd2fc60 R14: ffffffff813c0a9c R15: dffffc0000000000 [ 1006.587492][ C1] FS: 00007ff3212286c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1006.587506][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1006.587516][ C1] CR2: 0000200000001b00 CR3: 0000000049e8a000 CR4: 00000000003506e0 [ 1006.587531][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1006.587541][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1006.587550][ C1] Call Trace: [ 1006.587557][ C1] [ 1006.587569][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1006.587590][ C1] ? rcu_read_unlock+0x8c/0xa0 [ 1006.587605][ C1] ? __virt_addr_valid+0x18c/0x540 [ 1006.587623][ C1] __virt_addr_valid+0x1a9/0x540 [ 1006.587640][ C1] ? __virt_addr_valid+0x18c/0x540 [ 1006.587658][ C1] kasan_addr_to_slab+0xd/0xd0 [ 1006.587673][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 1006.587691][ C1] irq_work_queue_on+0xf5/0x220 [ 1006.587709][ C1] rcu_read_unlock_special+0x3a7/0x4c0 [ 1006.587733][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1006.587753][ C1] ? __perf_cgroup_move+0x60/0x60 [ 1006.587782][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1006.587803][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1006.587823][ C1] perf_event_output_forward+0x2e6/0x3a0 [ 1006.587841][ C1] ? perf_event_output_forward+0x94/0x3a0 [ 1006.587856][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 1006.587873][ C1] ? perf_event_output_forward+0x2f7/0x3a0 [ 1006.587888][ C1] ? perf_event_output_forward+0x94/0x3a0 [ 1006.587905][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1006.587923][ C1] __perf_event_overflow+0x447/0x630 [ 1006.587938][ C1] ? mark_lock+0x94/0x320 [ 1006.587957][ C1] perf_swevent_event+0x2f5/0x5c0 [ 1006.587977][ C1] ? perf_tp_event+0x13a0/0x13a0 [ 1006.587997][ C1] perf_tp_event+0x4f9/0x13a0 [ 1006.588014][ C1] ? verify_lock_unused+0x140/0x140 [ 1006.588031][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1006.588047][ C1] ? perf_tp_event+0x12d7/0x13a0 [ 1006.588078][ C1] ? sched_clock+0x3f/0x60 [ 1006.588094][ C1] ? sched_clock_cpu+0x75/0x430 [ 1006.588107][ C1] ? irq_work_single+0x122/0x230 [ 1006.588122][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1006.588140][ C1] perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1006.588159][ C1] perf_trace_preemptirq_template+0x281/0x340 [ 1006.588180][ C1] ? asm_sysvec_irq_work+0x1a/0x20 [ 1006.588196][ C1] ? trace_event_raw_event_preemptirq_template+0x1e0/0x1e0 [ 1006.588216][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1006.588230][ C1] ? irq_exit_rcu+0x20/0x20 [ 1006.588246][ C1] ? asm_sysvec_irq_work+0x1a/0x20 [ 1006.588260][ C1] trace_irq_enable+0xbf/0xe0 [ 1006.588278][ C1] trace_hardirqs_on+0x18/0x40 [ 1006.588295][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 1006.588309][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 1006.588329][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 a9 4e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 1006.588341][ C1] RSP: 0018:ffffc900001f0b00 EFLAGS: 00000206 [ 1006.588353][ C1] RAX: 1b3c8b8fece42100 RBX: 1ffff9200003e168 RCX: 1b3c8b8fece42100 [ 1006.588363][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780 [ 1006.588374][ C1] RBP: ffffc900001f0bf0 R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d [ 1006.588384][ C1] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: ffffffff8cd35400 [ 1006.588394][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002 [ 1006.588414][ C1] ? mac80211_hwsim_beacon_tx+0x3e9/0x780 [ 1006.588434][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1006.588461][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1006.588479][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1006.588498][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1006.588514][ C1] ieee80211_iterate_active_interfaces_atomic+0x15a/0x180 [ 1006.588533][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1006.588551][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 1006.588570][ C1] ? hw_scan_work+0xf40/0xf40 [ 1006.588589][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1006.588603][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1006.588625][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1006.588642][ C1] handle_softirqs+0x280/0x820 [ 1006.588658][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1006.588674][ C1] ? do_softirq+0x180/0x180 [ 1006.588693][ C1] __irq_exit_rcu+0xc7/0x190 [ 1006.588706][ C1] ? irq_exit_rcu+0x20/0x20 [ 1006.588723][ C1] irq_exit_rcu+0x9/0x20 [ 1006.588736][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1006.588762][ C1] [ 1006.588766][ C1] [ 1006.588771][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1006.588792][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 1006.588811][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 1006.588822][ C1] RSP: 0018:ffffc9000cc3fa18 EFLAGS: 00000206 [ 1006.588833][ C1] RAX: 1b3c8b8fece42100 RBX: ffff888027c75a00 RCX: 1b3c8b8fece42100 [ 1006.588843][ C1] RDX: 0000000000000000 RSI: ffffffff8aaacbc0 RDI: ffffffff8afc6780 [ 1006.588853][ C1] RBP: 0000000000000000 R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d [ 1006.588863][ C1] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: 0000000000000000 [ 1006.588872][ C1] R13: 0000000000000246 R14: ffffffff8cd2fc60 R15: 00000000ffffffff [ 1006.588895][ C1] __might_resched+0xf6/0x610 [ 1006.588915][ C1] ? __might_sleep+0xe0/0xe0 [ 1006.588931][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1006.588950][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 1006.588971][ C1] slab_pre_alloc_hook+0x4a/0x310 [ 1006.588992][ C1] ? apparmor_sk_alloc_security+0x77/0x100 [ 1006.589008][ C1] __kmem_cache_alloc_node+0x53/0x260 [ 1006.589029][ C1] ? apparmor_sk_alloc_security+0x77/0x100 [ 1006.589044][ C1] kmalloc_trace+0x2a/0xe0 [ 1006.589063][ C1] apparmor_sk_alloc_security+0x77/0x100 [ 1006.589079][ C1] security_sk_alloc+0x6e/0xa0 [ 1006.589095][ C1] sk_prot_alloc+0x101/0x210 [ 1006.589112][ C1] sk_alloc+0x3a/0x360 [ 1006.589128][ C1] unix_create1+0xb0/0x790 [ 1006.589149][ C1] unix_create+0x154/0x1f0 [ 1006.589167][ C1] __sock_create+0x4a6/0x940 [ 1006.589189][ C1] __sys_socketpair+0x1c1/0x550 [ 1006.589209][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 1006.589227][ C1] do_syscall_64+0x55/0xb0 [ 1006.589242][ C1] ? clear_bhb_loop+0x40/0x90 [ 1006.589255][ C1] ? clear_bhb_loop+0x40/0x90 [ 1006.589268][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.589288][ C1] RIP: 0033:0x7ff32038ebe9 [ 1006.589300][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.589311][ C1] RSP: 002b:00007ff321228038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1006.589325][ C1] RAX: ffffffffffffffda RBX: 00007ff3205b5fa0 RCX: 00007ff32038ebe9 [ 1006.589335][ C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1006.589343][ C1] RBP: 00007ff320411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1006.589352][ C1] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.589361][ C1] R13: 00007ff3205b6038 R14: 00007ff3205b5fa0 R15: 00007ffd21e70548 [ 1006.589378][ C1]