last executing test programs: 3.175486469s ago: executing program 1 (id=7574): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) 2.955909968s ago: executing program 3 (id=7576): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/ipc\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r0, 0x6, 0xc, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000290000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f0000000240), 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 2.9240905s ago: executing program 2 (id=7577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, 0x0) 2.717111548s ago: executing program 2 (id=7579): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 2.57080933s ago: executing program 1 (id=7580): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.802354986s ago: executing program 0 (id=7581): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 1.703518695s ago: executing program 2 (id=7584): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000190081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x14130}], 0x1}, 0x80d1) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) close(r0) 1.695556245s ago: executing program 1 (id=7585): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0xa, 0x2, 0x11, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.610599022s ago: executing program 3 (id=7586): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x4, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.512885961s ago: executing program 0 (id=7587): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 795.282332ms ago: executing program 1 (id=7588): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r1, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864160af36504001a0038001d00120000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) 795.100262ms ago: executing program 2 (id=7589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, 0x0) 794.946702ms ago: executing program 3 (id=7590): socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 794.239642ms ago: executing program 0 (id=7596): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000190081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x14130}], 0x1}, 0x80d1) 596.896159ms ago: executing program 0 (id=7591): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) 596.616109ms ago: executing program 2 (id=7592): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 596.367289ms ago: executing program 3 (id=7593): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 426.099823ms ago: executing program 2 (id=7594): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x22048005) socket$kcm(0x29, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab", 0x10}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) 423.914474ms ago: executing program 1 (id=7603): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 353.64892ms ago: executing program 3 (id=7595): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 307.504334ms ago: executing program 0 (id=7597): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x14130}], 0x1}, 0x80d1) close(r0) 130.641749ms ago: executing program 1 (id=7598): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r3, &(0x7f0000001940)={&(0x7f0000000480)=@abs={0x1, 0x0, 0x5c}, 0x6e, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r4, 0x0, 0x81) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, 0x0, 0x200048cc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800040000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0) 15.958439ms ago: executing program 3 (id=7599): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0xa, 0x2, 0x11, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c00000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 0s ago: executing program 0 (id=7600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, 0x0) kernel console output (not intermixed with test programs): 4.837990][ T5792] ? kobject_init+0x1e0/0x1e0 [ 854.842693][ T5792] ? _raw_spin_unlock+0x28/0x40 [ 854.847575][ T5792] ? get_device_parent+0x366/0x390 [ 854.852741][ T5792] device_add+0x408/0xc20 [ 854.857104][ T5792] hci_conn_add_sysfs+0xd5/0x1e0 [ 854.862074][ T5792] le_conn_complete_evt+0xc37/0x1220 [ 854.867665][ T5792] ? bt_warn+0x10c/0x160 [ 854.872322][ T5792] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 854.878614][ T5792] ? bt_info+0x160/0x160 [ 854.882893][ T5792] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 854.888555][ T5792] ? skb_pull_data+0xfb/0x200 [ 854.893271][ T5792] hci_le_conn_complete_evt+0x187/0x440 [ 854.898851][ T5792] ? hci_remote_host_features_evt+0x160/0x160 [ 854.905175][ T5792] hci_event_packet+0x795/0x1210 [ 854.910159][ T5792] ? bis_list+0x290/0x290 [ 854.914530][ T5792] ? lockdep_hardirqs_on+0x98/0x150 [ 854.919756][ T5792] ? hci_send_to_monitor+0xd7/0x4f0 [ 854.924989][ T5792] hci_rx_work+0x43a/0xd80 [ 854.929441][ T5792] ? process_scheduled_works+0x957/0x15b0 [ 854.935201][ T5792] process_scheduled_works+0xa45/0x15b0 [ 854.940969][ T5792] ? assign_work+0x400/0x400 [ 854.945763][ T5792] ? assign_work+0x39e/0x400 [ 854.950387][ T5792] worker_thread+0xa55/0xfc0 [ 854.955025][ T5792] kthread+0x2fa/0x390 [ 854.959110][ T5792] ? pr_cont_work+0x560/0x560 [ 854.963913][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 854.968574][ T5792] ret_from_fork+0x48/0x80 [ 854.973099][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 854.977708][ T5792] ret_from_fork_asm+0x11/0x20 [ 854.982535][ T5792] [ 854.989088][ T5792] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 855.004108][ T5792] Bluetooth: hci2: failed to register connection device [ 855.012604][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 855.128187][T16282] netlink: 'syz.1.4165': attribute type 6 has an invalid length. [ 855.136153][T16282] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4165'. [ 855.385001][T16289] Ÿë: port 3(syz_tun) entered blocking state [ 855.401614][T16289] Ÿë: port 3(syz_tun) entered disabled state [ 855.417702][T16289] syz_tun: entered allmulticast mode [ 855.451339][T16289] syz_tun: entered promiscuous mode [ 856.867686][T16316] netlink: 'syz.0.4181': attribute type 6 has an invalid length. [ 856.894092][T16316] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4181'. [ 857.081527][T16279] Bluetooth: hci2: command 0x0406 tx timeout [ 858.647851][T16346] syzkaller0: entered promiscuous mode [ 858.657012][T16346] syzkaller0: entered allmulticast mode [ 860.959392][T16351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4197'. [ 860.972521][T16352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4197'. [ 861.112477][T16363] netlink: 'syz.1.4205': attribute type 21 has an invalid length. [ 861.694803][T16385] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.4217'. [ 862.026579][T16391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4212'. [ 862.268414][T16391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4212'. [ 862.564836][T16407] netlink: 'syz.0.4219': attribute type 21 has an invalid length. [ 862.849714][T16414] netlink: 'syz.2.4222': attribute type 17 has an invalid length. [ 862.864992][T16414] netlink: 'syz.2.4222': attribute type 16 has an invalid length. [ 862.874838][T16414] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4222'. [ 863.066826][T16418] netlink: 'syz.2.4223': attribute type 10 has an invalid length. [ 863.117819][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.138711][T16418] : (slave batadv0): Enslaving as an active interface with an up link [ 863.225351][T16421] : entered promiscuous mode [ 863.230361][T16421] bond_slave_0: entered promiscuous mode [ 863.237713][T16421] bond_slave_1: entered promiscuous mode [ 863.246548][T16421] bridge_slave_1: entered promiscuous mode [ 863.257270][T16421] batadv0: entered promiscuous mode [ 864.479015][T16438] netlink: 'syz.2.4232': attribute type 21 has an invalid length. [ 864.535946][T16441] netlink: 'syz.1.4241': attribute type 10 has an invalid length. [ 864.561785][T16441] bond0: entered promiscuous mode [ 864.568257][T16441] bond_slave_0: entered promiscuous mode [ 864.575152][T16441] bond_slave_1: entered promiscuous mode [ 864.582256][T16441] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 864.589569][T16441] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 864.598525][T16441] bridge_slave_1: entered promiscuous mode [ 864.622484][T16442] netlink: 'syz.3.4233': attribute type 17 has an invalid length. [ 864.651317][T16442] netlink: 'syz.3.4233': attribute type 16 has an invalid length. [ 864.681202][T16442] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4233'. [ 865.037060][T16452] netlink: 'syz.1.4237': attribute type 9 has an invalid length. [ 865.073761][T16452] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.4237'. [ 866.663794][T16472] netlink: 'syz.0.4245': attribute type 10 has an invalid length. [ 866.699457][T16472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.719049][T16472] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 866.731520][T16471] netlink: 'syz.3.4243': attribute type 21 has an invalid length. [ 866.800643][T16472] bond0: entered promiscuous mode [ 866.813090][T16472] bond_slave_0: entered promiscuous mode [ 866.819070][T16472] bond_slave_1: entered promiscuous mode [ 866.830367][T16472] batadv0: entered promiscuous mode [ 868.522609][T16505] netlink: 'syz.3.4259': attribute type 9 has an invalid length. [ 868.561003][T16505] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.4259'. [ 870.791613][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.799847][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.199373][T16547] netlink: 'syz.3.4276': attribute type 10 has an invalid length. [ 872.229454][T16547] batadv0: left promiscuous mode [ 872.257542][T16547] batadv0: left allmulticast mode [ 872.315449][T16547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.353280][T16547] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 872.426176][T16551] bond0: entered promiscuous mode [ 872.500900][T16551] bond_slave_0: entered promiscuous mode [ 872.506826][T16551] bond_slave_1: entered promiscuous mode [ 872.513741][T16551] batadv0: entered promiscuous mode [ 875.528356][T16578] syzkaller0: entered promiscuous mode [ 875.581113][T16578] syzkaller0: entered allmulticast mode [ 875.686276][T16279] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 877.752949][T16599] syz.3.4298[16599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.753114][T16599] syz.3.4298[16599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.783363][T16599] syz.3.4298[16599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.796437][T16599] syz.3.4298[16599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 879.011849][T16594] netlink: 'syz.0.4296': attribute type 39 has an invalid length. [ 879.095285][T16594] syz_tun (unregistering): left allmulticast mode [ 879.110872][T16594] syz_tun (unregistering): left promiscuous mode [ 879.117633][T16594] Ÿë: port 3(syz_tun) entered disabled state [ 880.682056][T16279] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 885.035280][T16279] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 885.150051][T16665] netlink: 'syz.1.4324': attribute type 39 has an invalid length. [ 885.368552][T16665] syz_tun (unregistering): left allmulticast mode [ 885.392884][T16665] syz_tun (unregistering): left promiscuous mode [ 885.407541][T16665] Ÿë: port 3(syz_tun) entered disabled state [ 885.498526][T16668] syzkaller0: entered promiscuous mode [ 885.520977][T16668] syzkaller0: entered allmulticast mode [ 885.572863][T16665] syz.1.4324 (16665) used greatest stack depth: 18696 bytes left [ 885.583434][T16674] syzkaller0: entered promiscuous mode [ 885.589158][T16674] syzkaller0: entered allmulticast mode [ 891.406016][T16705] netlink: 'syz.3.4336': attribute type 39 has an invalid length. [ 891.754655][T16705] syz_tun (unregistering): left allmulticast mode [ 891.768004][T16705] syz_tun (unregistering): left promiscuous mode [ 891.813755][T16705] Ÿë: port 3(syz_tun) entered disabled state [ 891.879514][T16279] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 891.901507][T16279] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 891.911504][T16279] CPU: 1 PID: 16279 Comm: kworker/u5:1 Not tainted 6.6.102-syzkaller #0 [ 891.919879][T16279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 891.929960][T16279] Workqueue: hci1 hci_rx_work [ 891.934700][T16279] Call Trace: [ 891.937993][T16279] [ 891.940935][T16279] dump_stack_lvl+0x16c/0x230 [ 891.945636][T16279] ? show_regs_print_info+0x20/0x20 [ 891.950854][T16279] ? load_image+0x3b0/0x3b0 [ 891.955390][T16279] sysfs_create_dir_ns+0x256/0x280 [ 891.960530][T16279] ? hci_rx_work+0x43a/0xd80 [ 891.965311][T16279] ? sysfs_warn_dup+0xa0/0xa0 [ 891.970129][T16279] ? do_raw_spin_unlock+0x121/0x230 [ 891.975390][T16279] kobject_add_internal+0x6b8/0xc70 [ 891.980663][T16279] kobject_add+0x156/0x220 [ 891.985225][T16279] ? __rwlock_init+0x150/0x150 [ 891.990011][T16279] ? kobject_init+0x1e0/0x1e0 [ 891.994710][T16279] ? _raw_spin_unlock+0x28/0x40 [ 891.999626][T16279] ? get_device_parent+0x366/0x390 [ 892.004770][T16279] device_add+0x408/0xc20 [ 892.009144][T16279] hci_conn_add_sysfs+0xd5/0x1e0 [ 892.014105][T16279] le_conn_complete_evt+0xc37/0x1220 [ 892.019415][T16279] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 892.025690][T16279] ? bt_info+0x160/0x160 [ 892.029967][T16279] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 892.035641][T16279] ? skb_pull_data+0xfb/0x200 [ 892.040405][T16279] hci_le_conn_complete_evt+0x187/0x440 [ 892.045980][T16279] ? hci_remote_host_features_evt+0x160/0x160 [ 892.052350][T16279] hci_event_packet+0x795/0x1210 [ 892.057335][T16279] ? bis_list+0x290/0x290 [ 892.061693][T16279] ? lockdep_hardirqs_on+0x98/0x150 [ 892.066921][T16279] ? hci_send_to_monitor+0xd7/0x4f0 [ 892.072159][T16279] hci_rx_work+0x43a/0xd80 [ 892.076645][T16279] ? process_scheduled_works+0x957/0x15b0 [ 892.082406][T16279] process_scheduled_works+0xa45/0x15b0 [ 892.087997][T16279] ? assign_work+0x400/0x400 [ 892.092627][T16279] ? assign_work+0x39e/0x400 [ 892.097272][T16279] worker_thread+0xa55/0xfc0 [ 892.101924][T16279] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 892.107882][T16279] ? _raw_spin_unlock+0x40/0x40 [ 892.112929][T16279] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 892.119010][T16279] kthread+0x2fa/0x390 [ 892.123219][T16279] ? pr_cont_work+0x560/0x560 [ 892.127959][T16279] ? kthread_blkcg+0xd0/0xd0 [ 892.132599][T16279] ret_from_fork+0x48/0x80 [ 892.137073][T16279] ? kthread_blkcg+0xd0/0xd0 [ 892.141158][T12266] Bluetooth: hci2: adv larger than maximum supported [ 892.141693][T16279] ret_from_fork_asm+0x11/0x20 [ 892.153376][T16279] [ 892.157384][T16279] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 892.172559][T16279] Bluetooth: hci1: failed to register connection device [ 892.598725][T16730] netlink: 'syz.1.4347': attribute type 6 has an invalid length. [ 892.610122][T16730] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4347'. [ 892.660297][T16728] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4346'. [ 892.768825][T12266] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 892.776602][T12266] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 894.057059][T16753] netlink: 'syz.3.4358': attribute type 6 has an invalid length. [ 894.072299][T16753] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4358'. [ 894.233759][T16760] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.301489][T16758] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 895.634575][T16279] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 895.642378][T16279] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 897.439456][T16784] netlink: 'syz.0.4370': attribute type 6 has an invalid length. [ 897.457064][T16784] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4370'. [ 897.638993][T16779] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4369'. [ 897.782422][T12266] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 897.790454][T12266] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 897.800274][T12266] CPU: 0 PID: 12266 Comm: kworker/u5:0 Not tainted 6.6.102-syzkaller #0 [ 897.808844][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 897.818945][T12266] Workqueue: hci2 hci_rx_work [ 897.823677][T12266] Call Trace: [ 897.827012][T12266] [ 897.829978][T12266] dump_stack_lvl+0x16c/0x230 [ 897.834706][T12266] ? show_regs_print_info+0x20/0x20 [ 897.839950][T12266] ? load_image+0x3b0/0x3b0 [ 897.844516][T12266] sysfs_create_dir_ns+0x256/0x280 [ 897.849860][T12266] ? hci_rx_work+0x43a/0xd80 [ 897.854491][T12266] ? sysfs_warn_dup+0xa0/0xa0 [ 897.859315][T12266] ? do_raw_spin_unlock+0x121/0x230 [ 897.864574][T12266] kobject_add_internal+0x6b8/0xc70 [ 897.869840][T12266] kobject_add+0x156/0x220 [ 897.874326][T12266] ? __rwlock_init+0x150/0x150 [ 897.879138][T12266] ? kobject_init+0x1e0/0x1e0 [ 897.883855][T12266] ? _raw_spin_unlock+0x28/0x40 [ 897.888739][T12266] ? get_device_parent+0x366/0x390 [ 897.893884][T12266] device_add+0x408/0xc20 [ 897.898241][T12266] hci_conn_add_sysfs+0xd5/0x1e0 [ 897.903208][T12266] le_conn_complete_evt+0xc37/0x1220 [ 897.908617][T12266] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 897.914887][T12266] ? bt_info+0x160/0x160 [ 897.919148][T12266] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 897.924804][T12266] ? skb_pull_data+0xfb/0x200 [ 897.929515][T12266] hci_le_conn_complete_evt+0x187/0x440 [ 897.935084][T12266] ? hci_remote_host_features_evt+0x160/0x160 [ 897.941179][T12266] hci_event_packet+0x795/0x1210 [ 897.946232][T12266] ? bis_list+0x290/0x290 [ 897.950589][T12266] ? lockdep_hardirqs_on+0x98/0x150 [ 897.955816][T12266] ? hci_send_to_monitor+0xd7/0x4f0 [ 897.961145][T12266] hci_rx_work+0x43a/0xd80 [ 897.965772][T12266] ? process_scheduled_works+0x957/0x15b0 [ 897.971599][T12266] process_scheduled_works+0xa45/0x15b0 [ 897.977191][T12266] ? assign_work+0x400/0x400 [ 897.981803][T12266] ? assign_work+0x39e/0x400 [ 897.986416][T12266] worker_thread+0xa55/0xfc0 [ 897.991067][T12266] kthread+0x2fa/0x390 [ 897.995242][T12266] ? pr_cont_work+0x560/0x560 [ 897.999939][T12266] ? kthread_blkcg+0xd0/0xd0 [ 898.004546][T12266] ret_from_fork+0x48/0x80 [ 898.008997][T12266] ? kthread_blkcg+0xd0/0xd0 [ 898.013606][T12266] ret_from_fork_asm+0x11/0x20 [ 898.018406][T12266] [ 898.022629][T12266] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 898.036715][T12266] Bluetooth: hci2: failed to register connection device [ 898.374438][T16279] Bluetooth: hci1: adv larger than maximum supported [ 898.808319][T16803] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 898.984800][T16279] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 898.992595][T16279] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 899.472254][T16810] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.229784][T16820] netlink: 'syz.2.4381': attribute type 6 has an invalid length. [ 902.248218][T16820] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4381'. [ 902.335388][T12266] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 902.350497][T16824] netlink: 766 bytes leftover after parsing attributes in process `syz.3.4382'. [ 902.713505][T16832] syzkaller0: entered promiscuous mode [ 902.719084][T16832] syzkaller0: entered allmulticast mode [ 905.594218][T16842] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 905.615467][T12266] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 905.623236][T12266] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 907.834047][T16279] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 908.040674][T16859] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4399'. [ 908.624065][T16871] syzkaller0: entered promiscuous mode [ 908.655272][T16871] syzkaller0: entered allmulticast mode [ 908.843814][T16279] Bluetooth: hci3: Malformed LE Event: 0x0d [ 909.278654][T16279] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 911.220715][T16906] netlink: 'syz.2.4417': attribute type 10 has an invalid length. [ 911.842475][T16906] veth0_vlan: left promiscuous mode [ 911.933426][T16906] veth0_vlan: entered promiscuous mode [ 912.068815][T16906] team0: Device veth0_vlan failed to register rx_handler [ 912.373249][T16906] syz.2.4417 (16906) used greatest stack depth: 17896 bytes left [ 912.739498][T16279] Bluetooth: hci1: Malformed LE Event: 0x0d [ 913.186516][T16928] syzkaller0: entered promiscuous mode [ 913.201020][T16928] syzkaller0: entered allmulticast mode [ 913.240367][T16928] syzkaller0: left promiscuous mode [ 913.251215][T16928] syzkaller0: left allmulticast mode [ 916.654213][T16948] netlink: 'syz.0.4432': attribute type 10 has an invalid length. [ 916.739340][T16948] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 916.928415][T16948] veth0_vlan: left promiscuous mode [ 916.999357][T16948] veth0_vlan: entered promiscuous mode [ 917.097824][T16948] batman_adv: batadv0: Interface activated: ÿÿÿÿÿÿ [ 917.112083][T16948] team0: Device veth0_vlan failed to register rx_handler [ 917.159689][T16948] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 917.490299][T16279] Bluetooth: hci0: Malformed LE Event: 0x0d [ 918.578322][T16279] Bluetooth: hci2: unknown advertising packet type: 0xc5 [ 918.593125][T16965] delete_channel: no stack [ 918.852320][T16279] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 919.086653][T16985] netlink: 'syz.3.4446': attribute type 10 has an invalid length. [ 919.124326][T16985] veth0_vlan: left promiscuous mode [ 919.167284][T16985] veth0_vlan: entered promiscuous mode [ 919.305403][T16985] team0: Device veth0_vlan failed to register rx_handler [ 919.737513][T16997] netlink: 'syz.3.4452': attribute type 21 has an invalid length. [ 919.775995][T16997] IPv6: NLM_F_CREATE should be specified when creating new route [ 919.814000][T16997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 919.821458][T16997] IPv6: NLM_F_CREATE should be set when creating new route [ 919.828837][T16997] IPv6: NLM_F_CREATE should be set when creating new route [ 919.836270][T16997] IPv6: NLM_F_CREATE should be set when creating new route [ 919.878083][T16279] Bluetooth: hci1: unknown advertising packet type: 0xc5 [ 920.391419][T16279] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 921.939925][T17020] sit0: left promiscuous mode [ 922.282965][T17022] sit0: entered promiscuous mode [ 922.858146][T17028] netlink: 'syz.1.4461': attribute type 10 has an invalid length. [ 923.287139][T17028] veth0_vlan: left promiscuous mode [ 923.571050][T17028] veth0_vlan: entered promiscuous mode [ 923.789326][T17028] team0: Device veth0_vlan failed to register rx_handler [ 924.018352][T16279] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 924.067656][T16279] Bluetooth: hci3: unknown advertising packet type: 0xc5 [ 928.567752][T17087] wg2: entered promiscuous mode [ 928.644357][T17087] wg2: entered allmulticast mode [ 930.062019][T17108] netlink: 'syz.3.4494': attribute type 15 has an invalid length. [ 930.164498][T17110] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 931.911104][T17136] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 932.061276][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.067864][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.504636][T17149] sit0: left promiscuous mode [ 932.878808][T17155] sit0: entered promiscuous mode [ 934.003753][T17168] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 935.297641][T17181] sit0: left promiscuous mode [ 935.649581][T17182] sit0: entered promiscuous mode [ 936.167029][T17191] netlink: 'syz.0.4534': attribute type 3 has an invalid length. [ 936.186403][T17191] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.4534'. [ 937.147503][T17204] netlink: 'syz.0.4531': attribute type 15 has an invalid length. [ 937.356948][T17211] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 937.658143][T17220] sit0: left promiscuous mode [ 937.820609][T17225] sit0: entered promiscuous mode [ 940.569063][T17247] netlink: 'syz.2.4545': attribute type 3 has an invalid length. [ 940.699035][T17247] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.4545'. [ 940.970161][T17252] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.4553'. [ 941.181549][T17256] netlink: 'syz.1.4546': attribute type 15 has an invalid length. [ 943.675101][T17291] netlink: 'syz.1.4559': attribute type 3 has an invalid length. [ 943.707300][T17291] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.4559'. [ 944.160597][T17294] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.4560'. [ 945.142331][T17313] netlink: set zone limit has 8 unknown bytes [ 945.308723][T17314] syzkaller0: entered promiscuous mode [ 945.314356][T17314] syzkaller0: entered allmulticast mode [ 945.345020][T17317] syzkaller0: left promiscuous mode [ 948.088462][T17321] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.4572'. [ 948.439098][T17336] netlink: set zone limit has 8 unknown bytes [ 948.688218][T17345] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4583'. [ 950.030594][T17375] netlink: set zone limit has 8 unknown bytes [ 950.175123][T17372] syzkaller0: entered promiscuous mode [ 950.180685][T17372] syzkaller0: entered allmulticast mode [ 950.216209][T17381] syzkaller0: left promiscuous mode [ 953.084223][T17390] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4597'. [ 954.263087][T17415] netlink: 'syz.1.4607': attribute type 39 has an invalid length. [ 954.370714][T17421] netlink: 'syz.3.4611': attribute type 21 has an invalid length. [ 955.961113][T17456] netlink: 'syz.2.4622': attribute type 21 has an invalid length. [ 956.349109][T17460] netlink: 'syz.2.4625': attribute type 39 has an invalid length. [ 958.450370][T17486] netlink: 'syz.1.4636': attribute type 21 has an invalid length. [ 959.103377][T17494] netlink: 'syz.3.4641': attribute type 39 has an invalid length. [ 962.132011][T17530] netlink: 'syz.0.4651': attribute type 39 has an invalid length. [ 966.522343][T17568] netlink: 'syz.2.4668': attribute type 39 has an invalid length. [ 969.920007][T17613] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4685'. [ 972.276940][T17646] lo: left promiscuous mode [ 972.423875][T17646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 973.265117][T16279] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6 [ 975.548409][T17704] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4720'. [ 975.910190][T17712] netlink: 'syz.1.4725': attribute type 1 has an invalid length. [ 977.254712][T17735] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4732'. [ 979.128637][T16279] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6 [ 979.767054][T17777] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4747'. [ 980.358884][T17783] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4748'. [ 980.901270][T17790] netlink: 'syz.1.4760': attribute type 10 has an invalid length. [ 982.117214][T17809] syzkaller0: entered promiscuous mode [ 982.131042][T17809] syzkaller0: entered allmulticast mode [ 982.196161][T17815] syzkaller0: left promiscuous mode [ 984.711185][T17819] syzkaller0: entered promiscuous mode [ 984.716754][T17819] syzkaller0: entered allmulticast mode [ 984.916369][T17822] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4761'. [ 985.912866][T17829] netlink: 'syz.0.4765': attribute type 10 has an invalid length. [ 986.127164][T16279] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 986.862093][T17848] syzkaller0: entered promiscuous mode [ 986.869694][T17848] syzkaller0: entered allmulticast mode [ 986.928176][T17849] syzkaller0: left promiscuous mode [ 989.472565][T17851] lo: left promiscuous mode [ 989.494434][T17851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 989.845342][T17875] netlink: 'syz.2.4778': attribute type 10 has an invalid length. [ 989.946229][T17875] syz_tun: left allmulticast mode [ 989.962511][T17875] Ÿë: port 3(syz_tun) entered disabled state [ 990.019304][T17875] : (slave syz_tun): Enslaving as an active interface with an up link [ 990.038071][T17873] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4777'. [ 991.298720][T17900] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4795'. [ 991.648622][T17892] syzkaller0: entered promiscuous mode [ 991.666769][T17892] syzkaller0: entered allmulticast mode [ 991.741216][T17891] syzkaller0: left promiscuous mode [ 993.484789][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.494382][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.955395][T17905] syzkaller0: entered promiscuous mode [ 993.961319][T17905] syzkaller0: entered allmulticast mode [ 994.173497][T17919] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4798'. [ 994.841906][T17923] netlink: 'syz.3.4791': attribute type 10 has an invalid length. [ 995.670113][T17946] syzkaller0: entered promiscuous mode [ 995.676108][T17946] syzkaller0: entered allmulticast mode [ 995.708845][T17943] syzkaller0: left promiscuous mode [ 998.338628][T17967] syzkaller0: entered promiscuous mode [ 998.344383][T17967] syzkaller0: entered allmulticast mode [ 998.368707][T17959] netlink: 'syz.1.4807': attribute type 10 has an invalid length. [ 998.491172][T17962] syzkaller0: left promiscuous mode [ 998.559122][T17970] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4808'. [ 1000.997450][T17996] syzkaller0: entered promiscuous mode [ 1001.005229][T17996] syzkaller0: entered allmulticast mode [ 1001.174879][T18000] syzkaller0: entered promiscuous mode [ 1001.191598][T18000] syzkaller0: entered allmulticast mode [ 1003.259646][T18010] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4822'. [ 1003.604933][T18017] syzkaller0: entered promiscuous mode [ 1003.613168][T18017] syzkaller0: entered allmulticast mode [ 1003.739185][T18022] syzkaller0: left promiscuous mode [ 1006.937084][T18024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1006.944691][T18024] IPv6: NLM_F_CREATE should be set when creating new route [ 1006.952129][T18024] IPv6: NLM_F_CREATE should be set when creating new route [ 1007.323260][T18052] syzkaller0: entered promiscuous mode [ 1007.337458][T18052] syzkaller0: entered allmulticast mode [ 1007.806590][T18063] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4836'. [ 1007.857935][T18062] syzkaller0: entered promiscuous mode [ 1007.864045][T18062] syzkaller0: entered allmulticast mode [ 1010.238144][T18078] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4841'. [ 1010.287057][T18080] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4842'. [ 1010.813554][T18097] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4850'. [ 1013.530302][T18108] netlink: 'syz.2.4854': attribute type 10 has an invalid length. [ 1013.565274][T18108] batman_adv: batadv0: Adding interface: team0 [ 1013.591046][T18108] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1013.620660][T18109] netlink: 'syz.2.4854': attribute type 10 has an invalid length. [ 1013.651413][T18109] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4854'. [ 1013.660613][T18109] team0: entered promiscuous mode [ 1013.689761][T18109] C: entered promiscuous mode [ 1013.690945][T16279] Bluetooth: hci2: adv larger than maximum supported [ 1013.695076][T18109] team_slave_1: entered promiscuous mode [ 1013.721504][T18109] hsr_slave_0: entered promiscuous mode [ 1013.727272][T18109] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 1013.746831][T18109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.755762][T18109] batman_adv: batadv0: Interface activated: team0 [ 1013.763049][T18109] batman_adv: batadv0: Interface deactivated: team0 [ 1013.781392][T18109] batman_adv: batadv0: Removing interface: team0 [ 1014.066674][T18124] syzkaller0: entered promiscuous mode [ 1014.072702][T18124] syzkaller0: entered allmulticast mode [ 1014.546877][T18141] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4867'. [ 1016.616858][T18155] netlink: 'syz.3.4873': attribute type 2 has an invalid length. [ 1017.655400][T18164] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1018.007877][T18170] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4880'. [ 1018.409652][T16279] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1019.141289][T16279] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 1022.379530][T16279] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1022.995844][T18224] syzkaller0: entered promiscuous mode [ 1023.028813][T18224] syzkaller0: entered allmulticast mode [ 1023.265472][T18235] netlink: 'syz.0.4907': attribute type 10 has an invalid length. [ 1023.291107][T18235] team0: Device ip6_vti0 is of different type [ 1025.914795][T18245] netlink: 'syz.0.4910': attribute type 10 has an invalid length. [ 1025.934665][T18245] team0: Device veth1_macvtap failed to register rx_handler [ 1026.459347][T16279] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1026.468208][T16279] Bluetooth: hci3: Injecting HCI hardware error event [ 1026.477152][T16279] Bluetooth: hci3: hardware error 0x00 [ 1027.197470][T18268] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4919'. [ 1027.222942][T18269] netlink: 'syz.0.4920': attribute type 10 has an invalid length. [ 1027.251615][T18269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4920'. [ 1027.271663][T18269] team0: entered promiscuous mode [ 1027.292476][T18269] C: entered promiscuous mode [ 1027.301692][T18269] team_slave_1: entered promiscuous mode [ 1027.318557][T18269] hsr_slave_0: entered promiscuous mode [ 1027.331250][T18269] team0: entered allmulticast mode [ 1027.348881][T18269] C: entered allmulticast mode [ 1027.359083][T18269] team_slave_1: entered allmulticast mode [ 1027.389641][T18269] hsr_slave_0: entered allmulticast mode [ 1027.397935][T18269] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1027.418400][T18268] netlink: 'syz.2.4919': attribute type 39 has an invalid length. [ 1027.753333][T18283] netlink: 'syz.0.4927': attribute type 10 has an invalid length. [ 1027.765955][T18283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.785526][T18283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.828066][T18283] batadv_slave_0: entered promiscuous mode [ 1027.839536][T18283] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1028.879830][T18307] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4937'. [ 1029.167038][T16279] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1029.633533][T18328] syzkaller0: entered promiscuous mode [ 1029.656419][T18328] syzkaller0: entered allmulticast mode [ 1030.404503][T18352] netlink: 'syz.2.4957': attribute type 10 has an invalid length. [ 1030.414980][T18352] team0: left promiscuous mode [ 1030.419815][T18352] C: left promiscuous mode [ 1030.426134][T18352] team_slave_1: left promiscuous mode [ 1030.432198][T18352] hsr_slave_0: left promiscuous mode [ 1030.438132][T18352] mac80211_hwsim hwsim24 wlan1: left promiscuous mode [ 1030.493836][T18352] wlan1: mtu less than device minimum [ 1030.499462][T18352] team0: Device wlan1 failed to change mtu [ 1030.517306][T18352] : (slave team0): Error -22 calling dev_set_mtu [ 1030.637970][T18357] syzkaller0: entered promiscuous mode [ 1030.643795][T18357] syzkaller0: entered allmulticast mode [ 1032.866779][T16279] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 1033.780545][T18373] syzkaller0: entered promiscuous mode [ 1033.827059][T18373] syzkaller0: entered allmulticast mode [ 1037.479749][T18419] syzkaller0: entered allmulticast mode [ 1037.582187][T18420] syzkaller0: entered promiscuous mode [ 1037.588146][T18420] syzkaller0: entered allmulticast mode [ 1040.094443][T18442] syzkaller0: entered promiscuous mode [ 1040.107065][T18442] syzkaller0: entered allmulticast mode [ 1040.441553][T18454] netlink: 'syz.3.4998': attribute type 21 has an invalid length. [ 1040.553944][T16279] Bluetooth: hci0: adv larger than maximum supported [ 1040.722445][T18464] syzkaller0: entered promiscuous mode [ 1040.750933][T18464] syzkaller0: entered allmulticast mode [ 1041.117766][T18474] netlink: 'syz.2.5008': attribute type 29 has an invalid length. [ 1041.130153][T18471] netlink: 'syz.2.5008': attribute type 10 has an invalid length. [ 1041.159455][T18471] batman_adv: batadv0: Adding interface: wlan0 [ 1041.176584][T18471] batman_adv: batadv0: Interface activated: wlan0 [ 1041.238756][T18474] netlink: 'syz.2.5008': attribute type 29 has an invalid length. [ 1041.312864][T18480] netlink: 'syz.3.5010': attribute type 9 has an invalid length. [ 1041.336652][T18480] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.5010'. [ 1041.591068][T18489] syzkaller0: entered promiscuous mode [ 1041.597398][T18489] syzkaller0: entered allmulticast mode [ 1043.788746][T18498] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.5017'. [ 1043.800055][T18499] netlink: 'syz.2.5017': attribute type 12 has an invalid length. [ 1043.808261][T18499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5017'. [ 1043.820232][T18505] netlink: 'syz.3.5019': attribute type 2 has an invalid length. [ 1043.841050][T18505] netlink: 'syz.3.5019': attribute type 9 has an invalid length. [ 1043.863598][T18505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5019'. [ 1045.038784][T18531] netlink: 'syz.3.5031': attribute type 29 has an invalid length. [ 1045.054371][T18531] netlink: 'syz.3.5031': attribute type 29 has an invalid length. [ 1045.130484][T16279] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 1045.130532][T16279] Bluetooth: hci0: unexpected event for opcode 0x656e [ 1045.422744][T16279] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 1045.425386][T18550] @ÿ: renamed from bond_slave_0 (while UP) [ 1046.043372][T18564] validate_nla: 1 callbacks suppressed [ 1046.043411][T18564] netlink: 'syz.1.5044': attribute type 29 has an invalid length. [ 1046.101296][T18564] netlink: 'syz.1.5044': attribute type 29 has an invalid length. [ 1046.738706][T18587] netlink: 'syz.2.5054': attribute type 10 has an invalid length. [ 1046.805549][T18587] team0: Port device dummy0 added [ 1047.149162][T18597] veth1_to_bond: entered allmulticast mode [ 1047.743478][T18612] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.5062'. [ 1047.768203][T18612] openvswitch: netlink: Duplicate key (type 0). [ 1048.119021][T18617] netlink: 'syz.0.5064': attribute type 9 has an invalid length. [ 1048.131265][T18617] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.5064'. [ 1048.279672][T18624] netlink: 'syz.1.5065': attribute type 28 has an invalid length. [ 1048.334978][T18624] netlink: 'syz.1.5065': attribute type 29 has an invalid length. [ 1048.409723][T18624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5065'. [ 1049.575397][T16279] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 1049.861144][T16279] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 1050.351725][T18689] netlink: 'syz.3.5094': attribute type 23 has an invalid length. [ 1050.496054][T18697] netlink: 'syz.1.5097': attribute type 10 has an invalid length. [ 1050.511721][T18697] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1050.948439][T16279] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7 [ 1051.358095][T18706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.588072][T18710] netlink: 'syz.0.5103': attribute type 29 has an invalid length. [ 1051.604424][T18710] netlink: 'syz.0.5103': attribute type 29 has an invalid length. [ 1051.822908][T18712] syzkaller0: entered promiscuous mode [ 1051.828634][T18712] syzkaller0: entered allmulticast mode [ 1051.869864][T18718] syzkaller0: entered promiscuous mode [ 1051.878233][T18718] syzkaller0: entered allmulticast mode [ 1051.907859][T18718] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5107'. [ 1051.931363][T18718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.949378][T18718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.959961][T18718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.971185][T18718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.982752][T18718] batadv_slave_1: entered promiscuous mode [ 1054.941303][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.947809][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.995930][T18784] erspan0: left allmulticast mode [ 1057.006311][T18784] erspan0: left promiscuous mode [ 1057.015593][T18784] Ÿë: port 2(erspan0) entered disabled state [ 1057.034370][T18784] veth0_to_bridge: left allmulticast mode [ 1057.040271][T18784] veth0_to_bridge: left promiscuous mode [ 1057.047223][T18784] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1057.265084][T18791] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5133'. [ 1059.705928][T16279] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1059.797132][T18833] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5145'. [ 1060.253779][T18843] netlink: 'syz.2.5150': attribute type 12 has an invalid length. [ 1060.269723][T18843] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5150'. [ 1060.349764][T18842] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 1060.379555][T18842] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 1060.872609][T16279] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1064.270564][T18867] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1064.280896][T18868] syzkaller0: entered promiscuous mode [ 1064.286512][T18868] syzkaller0: entered allmulticast mode [ 1064.789644][T18886] netlink: 'syz.2.5161': attribute type 3 has an invalid length. [ 1064.800293][T16279] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 1064.841046][T18886] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.5161'. [ 1064.923284][T16279] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1064.932532][T16279] Bluetooth: hci1: Injecting HCI hardware error event [ 1064.941470][T12266] Bluetooth: hci1: hardware error 0x00 [ 1065.730650][T18899] netlink: 'syz.0.5167': attribute type 29 has an invalid length. [ 1065.748213][T18899] netlink: 'syz.0.5167': attribute type 29 has an invalid length. [ 1067.086520][T12266] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1067.352546][T12266] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11 [ 1067.360517][T12266] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1067.391409][T18916] team0: Port device C removed [ 1067.397181][T18916] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1067.809144][T18930] syzkaller0: create flow: hash 3673065365 index 1 [ 1067.881246][T18932] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1067.946613][T18926] syzkaller0: delete flow: hash 3673065365 index 1 [ 1070.762830][T18945] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 1070.785360][T18945] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 1071.059389][T18949] syzkaller0: entered promiscuous mode [ 1071.068664][T18949] syzkaller0: entered allmulticast mode [ 1071.402211][T12266] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1071.411599][T12266] Bluetooth: hci2: Injecting HCI hardware error event [ 1071.421868][T16279] Bluetooth: hci2: hardware error 0x00 [ 1073.481215][T16279] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1073.822051][T18960] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1073.834369][T18962] netlink: 'syz.3.5193': attribute type 10 has an invalid length. [ 1073.844694][T18962] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1073.858603][T18962] team0: Port device wlan1 removed [ 1073.866990][T18962] bond0: (slave wlan1): Opening slave failed [ 1078.936007][T18990] macsec0: entered promiscuous mode [ 1078.941687][T18990] macsec0: entered allmulticast mode [ 1078.947114][T18990] veth1_macvtap: entered allmulticast mode [ 1079.052910][T19014] wg2: entered promiscuous mode [ 1079.059538][T19014] wg2: entered allmulticast mode [ 1079.311579][T19024] syzkaller0: entered promiscuous mode [ 1079.317161][T19024] syzkaller0: entered allmulticast mode [ 1080.994642][T19058] netlink: 'syz.3.5224': attribute type 3 has an invalid length. [ 1081.120963][T19058] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.5224'. [ 1081.844251][T19072] netlink: 'syz.2.5230': attribute type 10 has an invalid length. [ 1081.922930][T19072] wlan1: mtu less than device minimum [ 1081.950357][T19072] team0: Device wlan1 failed to change mtu [ 1081.965931][T19072] : (slave team0): Error -22 calling dev_set_mtu [ 1082.217249][T19081] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5233'. [ 1082.273837][T19072] syz.2.5230 (19072) used greatest stack depth: 17576 bytes left [ 1082.452649][T19081] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5233'. [ 1084.460988][T19078] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5233'. [ 1086.916975][T19107] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5240'. [ 1087.343471][T19118] netlink: 'syz.3.5242': attribute type 3 has an invalid length. [ 1087.572096][T19118] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1087.586917][T19121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1089.887023][T19149] netlink: 'syz.0.5252': attribute type 29 has an invalid length. [ 1090.145292][T19149] netlink: 'syz.0.5252': attribute type 29 has an invalid length. [ 1090.339694][T19152] netlink: 'syz.0.5252': attribute type 29 has an invalid length. [ 1090.597044][T19155] netlink: 'syz.0.5252': attribute type 29 has an invalid length. [ 1090.882934][T19149] netlink: 'syz.0.5252': attribute type 29 has an invalid length. [ 1093.905232][T19174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1093.970492][T19182] netlink: 'syz.2.5260': attribute type 3 has an invalid length. [ 1093.991228][T19182] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.5260'. [ 1094.060640][T19182] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.5260'. [ 1094.775876][T19197] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5265'. [ 1095.513109][T19211] netlink: 'syz.1.5270': attribute type 12 has an invalid length. [ 1095.540887][T19211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5270'. [ 1095.739541][T19214] syzkaller0: entered promiscuous mode [ 1095.749194][T19214] syzkaller0: entered allmulticast mode [ 1095.784686][T19218] sit0: left promiscuous mode [ 1095.910373][T19219] sit0: entered promiscuous mode [ 1097.234604][T19236] netlink: 'syz.1.5278': attribute type 29 has an invalid length. [ 1097.256795][T19236] netlink: 'syz.1.5278': attribute type 29 has an invalid length. [ 1098.511557][T19259] mac80211_hwsim hwsim24 wlan1: left allmulticast mode [ 1099.948488][T19277] mac80211_hwsim hwsim8 .3ãc¤±: renamed from wlan1 [ 1100.106584][T19285] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1100.161027][T19287] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1100.220642][T19290] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1100.271681][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5295'. [ 1100.397718][T19290] netlink: 'syz.1.5295': attribute type 10 has an invalid length. [ 1100.428736][T19290] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1101.117917][T19308] macvtap0: entered promiscuous mode [ 1101.132897][T19308] macvtap0: entered allmulticast mode [ 1101.139033][T19308] veth0_macvtap: entered allmulticast mode [ 1101.403565][T19316] netlink: 'syz.3.5304': attribute type 1 has an invalid length. [ 1105.395554][T19377] netlink: 'syz.0.5326': attribute type 10 has an invalid length. [ 1105.406134][T19377] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5326'. [ 1106.231564][T19382] netlink: 'syz.2.5329': attribute type 39 has an invalid length. [ 1108.761698][T19426] À: port 1(vlan0) entered blocking state [ 1108.768965][T19426] À: port 1(vlan0) entered disabled state [ 1108.776058][T19426] vlan0: entered allmulticast mode [ 1108.787306][T19426] vlan0: entered promiscuous mode [ 1112.118284][T19504] netlink: 'syz.2.5363': attribute type 9 has an invalid length. [ 1112.147643][T19504] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5363'. [ 1113.476513][T19528] netlink: 'syz.1.5372': attribute type 2 has an invalid length. [ 1113.503256][T19528] netlink: 'syz.1.5372': attribute type 8 has an invalid length. [ 1113.529810][T19528] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1113.843106][T19540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5377'. [ 1113.942422][T19538] syzkaller0: entered promiscuous mode [ 1113.952887][T19538] syzkaller0: entered allmulticast mode [ 1113.970344][T19540] netlink: 'syz.2.5377': attribute type 10 has an invalid length. [ 1114.018054][T19540] team0: Port device wlan1 removed [ 1114.024079][T19540] wlan1: mtu less than device minimum [ 1114.048611][T19540] : (slave wlan1): Error -22 calling dev_set_mtu [ 1116.367160][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.374048][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.402703][T19552] netlink: 'syz.3.5380': attribute type 10 has an invalid length. [ 1117.410599][T19552] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5380'. [ 1117.422365][T19552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.718053][T19569] sit0: left promiscuous mode [ 1117.833167][T19570] netlink: 'syz.0.5385': attribute type 15 has an invalid length. [ 1117.851005][T19570] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.5385'. [ 1118.625627][T19582] netlink: 'syz.2.5390': attribute type 10 has an invalid length. [ 1118.640204][T19582] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.5390'. [ 1119.226806][T19587] syzkaller0: entered promiscuous mode [ 1119.237361][T19587] syzkaller0: entered allmulticast mode [ 1119.273770][T19595] netlink: 'syz.3.5395': attribute type 2 has an invalid length. [ 1119.292293][T19595] netlink: 'syz.3.5395': attribute type 8 has an invalid length. [ 1119.301171][T19595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1123.338668][T19614] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 [ 1124.194768][T19632] netlink: 'syz.3.5406': attribute type 64 has an invalid length. [ 1124.373027][T19634] ÿÿÿÿÿÿ: renamed from vlan1 [ 1124.745603][T19644] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5410'. [ 1124.797020][T19644] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5410'. [ 1124.838832][T19640] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5410'. [ 1125.057284][T19651] netlink: 'syz.2.5413': attribute type 29 has an invalid length. [ 1125.070109][T19651] netlink: 'syz.2.5413': attribute type 29 has an invalid length. [ 1125.094758][T19652] netlink: 'syz.2.5413': attribute type 29 has an invalid length. [ 1125.128524][T19651] netlink: 'syz.2.5413': attribute type 29 has an invalid length. [ 1125.734940][T19664] netlink: 'syz.3.5417': attribute type 10 has an invalid length. [ 1125.753402][T19664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5417'. [ 1125.770507][T19664] team0: entered allmulticast mode [ 1125.778621][T19664] C: entered allmulticast mode [ 1125.796459][T19664] team_slave_1: entered allmulticast mode [ 1125.803737][T19664] hsr_slave_0: entered allmulticast mode [ 1125.816599][T19664] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1125.860922][T16279] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 1126.280537][T19680] netlink: 'syz.1.5422': attribute type 39 has an invalid length. [ 1126.431050][T19680] team0: Port device hsr_slave_0 removed [ 1126.998900][T19697] netlink: 'syz.3.5427': attribute type 16 has an invalid length. [ 1127.009617][T19697] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5427'. [ 1127.642611][T19710] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1127.754510][T19715] netlink: 'syz.0.5433': attribute type 2 has an invalid length. [ 1127.781102][T19715] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1127.833316][T19719] netlink: 'syz.0.5433': attribute type 25 has an invalid length. [ 1127.867194][T19719] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1127.883882][T19715] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1127.911358][T19715] netlink: get zone limit has 4 unknown bytes [ 1128.060538][T19722] netlink: 13822 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1128.341020][T19729] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5439'. [ 1128.398208][T16279] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 1128.713181][T19743] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1129.894114][T19781] validate_nla: 2 callbacks suppressed [ 1129.894134][T19781] netlink: 'syz.1.5457': attribute type 10 has an invalid length. [ 1130.584353][T19794] netlink: 'syz.1.5463': attribute type 10 has an invalid length. [ 1130.674581][T19794] __nla_validate_parse: 7 callbacks suppressed [ 1130.674616][T19794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5463'. [ 1130.781236][T19794] team0: entered promiscuous mode [ 1130.786976][T19794] C: entered promiscuous mode [ 1130.806857][T19794] team_slave_1: entered promiscuous mode [ 1130.815338][T19794] team0: entered allmulticast mode [ 1130.822329][T19794] C: entered allmulticast mode [ 1130.827658][T19794] team_slave_1: entered allmulticast mode [ 1130.867455][T19794] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1130.886818][T19801] sit0: left promiscuous mode [ 1131.114228][T19796] netlink: 'syz.2.5464': attribute type 10 has an invalid length. [ 1131.518634][T19803] sit0: entered promiscuous mode [ 1131.754987][T19819] batman_adv: batadv0: Interface deactivated: wlan0 [ 1131.834856][T19819] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 1131.848307][T19823] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1131.860643][T19825] netlink: 'syz.2.5470': attribute type 9 has an invalid length. [ 1131.868798][T19825] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5470'. [ 1131.897137][T19822] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1131.911224][T19822] batman_adv: batadv0: Interface activated: wlan0 [ 1131.919328][T19823] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1131.968957][T19821] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1132.163912][T19827] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1132.530979][T19833] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1132.561536][T19833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5473'. [ 1132.588857][T19833] netlink: 'syz.1.5473': attribute type 10 has an invalid length. [ 1132.672236][T19838] kfree: port 1(team0) entered blocking state [ 1132.678573][T19838] kfree: port 1(team0) entered disabled state [ 1132.731132][T19838] team0: entered allmulticast mode [ 1132.736425][T19838] team_slave_1: entered allmulticast mode [ 1132.770108][T19838] hsr_slave_0: entered allmulticast mode [ 1132.842437][T19838] dummy0: entered allmulticast mode [ 1132.956999][T19838] team0: entered promiscuous mode [ 1132.979704][T19838] team_slave_1: entered promiscuous mode [ 1133.002220][T19838] hsr_slave_0: entered promiscuous mode [ 1133.031653][T19838] dummy0: entered promiscuous mode [ 1133.097154][T19843] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5476'. [ 1133.301694][T19852] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5478'. [ 1133.336607][T19852] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5478'. [ 1134.100910][T19864] netlink: 'syz.1.5481': attribute type 10 has an invalid length. [ 1134.535845][T19878] netlink: 'syz.3.5488': attribute type 153 has an invalid length. [ 1134.587772][T19878] netlink: 'syz.3.5488': attribute type 4 has an invalid length. [ 1135.939950][T19906] sit0: left promiscuous mode [ 1136.829701][T19925] netlink: 'syz.2.5504': attribute type 10 has an invalid length. [ 1137.409702][T19939] netlink: 'syz.0.5509': attribute type 10 has an invalid length. [ 1137.462446][T19939] team0: Device .3ãc¤± is of different type [ 1137.493067][T19938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1138.365589][T19955] netlink: 'syz.0.5511': attribute type 39 has an invalid length. [ 1138.428116][T19955] veth0_macvtap: left promiscuous mode [ 1142.366757][T20014] netlink: 'syz.3.5533': attribute type 9 has an invalid length. [ 1142.390824][T20014] __nla_validate_parse: 5 callbacks suppressed [ 1142.390840][T20014] netlink: 399 bytes leftover after parsing attributes in process `syz.3.5533'. [ 1142.436464][T20016] netlink: 'syz.2.5534': attribute type 39 has an invalid length. [ 1142.598657][T20016] : (slave syz_tun): Releasing backup interface [ 1142.711386][T20018] netlink: 'syz.1.5535': attribute type 1 has an invalid length. [ 1142.719480][T20018] netlink: 'syz.1.5535': attribute type 4 has an invalid length. [ 1142.749673][T20018] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5535'. [ 1142.763827][T20023] netlink: 'syz.0.5536': attribute type 3 has an invalid length. [ 1142.791319][T20023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5536'. [ 1142.816540][T20020] netlink: 'syz.0.5536': attribute type 39 has an invalid length. [ 1142.846783][T20021] C: left promiscuous mode [ 1142.858077][T20021] C: left allmulticast mode [ 1142.941491][T20021] team0: Port device C removed [ 1142.968106][T20021] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1143.529502][T16279] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 1144.800358][T20057] netlink: 'syz.3.5548': attribute type 39 has an invalid length. [ 1145.492951][T16279] Bluetooth: hci0: unexpected event 0x18 length: 151 > 23 [ 1145.769058][T20075] netlink: 'syz.3.5556': attribute type 10 has an invalid length. [ 1146.146068][T20079] netlink: 'syz.2.5558': attribute type 39 has an invalid length. [ 1147.286090][T20091] sit0: entered promiscuous mode [ 1147.537431][T20093] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5562'. [ 1149.692391][T20132] netlink: 'syz.0.5575': attribute type 10 has an invalid length. [ 1149.711201][T20132] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5575'. [ 1150.264437][T20146] netlink: 'syz.1.5577': attribute type 39 has an invalid length. [ 1150.881981][T20156] netlink: 'syz.3.5583': attribute type 10 has an invalid length. [ 1150.963180][T20155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1151.090357][T20158] netlink: 'syz.0.5584': attribute type 10 has an invalid length. [ 1151.155588][T20158] veth0_vlan: left promiscuous mode [ 1151.203380][T20158] veth0_vlan: entered promiscuous mode [ 1151.305826][T20158] batman_adv: batadv0: Interface activated: ÿÿÿÿÿÿ [ 1151.320163][T20158] team0: Device veth0_vlan failed to register rx_handler [ 1151.366698][T20158] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 1151.500598][T20166] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5587'. [ 1151.891115][T20182] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5590'. [ 1151.965115][T20180] netlink: 71 bytes leftover after parsing attributes in process `syz.3.5590'. [ 1156.756917][T20215] netlink: 'syz.2.5601': attribute type 10 has an invalid length. [ 1156.766741][T20215] : (slave bond_slave_0): Releasing backup interface [ 1156.776724][T20215] bond_slave_0: left promiscuous mode [ 1156.814160][T20221] netlink: 'syz.0.5603': attribute type 10 has an invalid length. [ 1156.838112][T20221] dummy0: entered promiscuous mode [ 1156.861420][T20221] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1157.099348][T20226] netlink: 'syz.3.5605': attribute type 3 has an invalid length. [ 1157.118865][T20226] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5605'. [ 1161.555511][T20251] netlink: 'syz.2.5610': attribute type 10 has an invalid length. [ 1161.675111][T20251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5610'. [ 1162.038972][T20264] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1162.670565][T20277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5619'. [ 1162.765997][T20277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5619'. [ 1162.809726][T20279] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5619'. [ 1163.919411][T20292] netlink: 'syz.2.5623': attribute type 4 has an invalid length. [ 1163.928695][T20292] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5623'. [ 1163.954313][T20292] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1164.000603][T20292] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1164.525753][T20303] netlink: 'syz.1.5625': attribute type 10 has an invalid length. [ 1164.534341][T20303] bond0: left promiscuous mode [ 1164.540073][T20303] @ÿ: left promiscuous mode [ 1164.545260][T20303] bond_slave_1: left promiscuous mode [ 1164.551497][T20303] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1164.558700][T20303] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1164.566467][T20303] bridge_slave_1: left promiscuous mode [ 1164.584425][T20303] @ÿ: entered promiscuous mode [ 1164.589898][T20303] bond_slave_1: entered promiscuous mode [ 1164.595838][T20303] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1164.603705][T20303] bridge_slave_1: entered promiscuous mode [ 1164.611235][T20303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.619641][T20303] bond0: entered promiscuous mode [ 1164.660814][T20303] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1164.671595][T20303] bond0: entered allmulticast mode [ 1164.690892][T20303] @ÿ: entered allmulticast mode [ 1164.700947][T20303] bond_slave_1: entered allmulticast mode [ 1164.706760][T20303] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1164.740867][T20303] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1164.769076][T20303] bridge_slave_1: entered allmulticast mode [ 1164.785942][T20303] team0: Port device bond0 added [ 1168.059109][T20316] netlink: 'syz.3.5627': attribute type 10 has an invalid length. [ 1168.067513][T20316] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1168.077089][T20316] batadv_slave_1: entered promiscuous mode [ 1168.088467][T20316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.097188][T20316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.706514][T20325] netlink: 'syz.3.5632': attribute type 10 has an invalid length. [ 1169.103924][T20338] netlink: 'syz.3.5636': attribute type 3 has an invalid length. [ 1169.130834][T20338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5636'. [ 1169.557933][T20341] netlink: 'syz.2.5637': attribute type 29 has an invalid length. [ 1169.588718][T20341] netlink: 'syz.2.5637': attribute type 29 has an invalid length. [ 1169.604727][T20345] netlink: 'syz.2.5637': attribute type 29 has an invalid length. [ 1169.629558][T20346] netlink: 'syz.2.5637': attribute type 29 has an invalid length. [ 1169.638768][T20343] netlink: 'syz.0.5638': attribute type 10 has an invalid length. [ 1169.788726][T20353] netlink: 'syz.3.5640': attribute type 10 has an invalid length. [ 1169.797330][T20353] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5640'. [ 1169.833800][T20353] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5640'. [ 1169.923380][T20358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5640'. [ 1169.932895][T20358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5640'. [ 1169.946690][T20353] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5640'. [ 1169.972863][T20358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5640'. [ 1170.034154][T20359] netlink: 'syz.2.5641': attribute type 10 has an invalid length. [ 1170.043776][T20359] team0: Device wlan1 is of different type [ 1171.133376][T20384] netlink: 'syz.2.5647': attribute type 39 has an invalid length. [ 1171.964721][T20408] netlink: 'syz.2.5654': attribute type 1 has an invalid length. [ 1172.000856][T20408] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5654'. [ 1172.220876][T20408] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5654'. [ 1173.072708][T20420] syz.3.5656: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1173.291498][T20420] CPU: 1 PID: 20420 Comm: syz.3.5656 Not tainted 6.6.102-syzkaller #0 [ 1173.299839][T20420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1173.309946][T20420] Call Trace: [ 1173.313262][T20420] [ 1173.316230][T20420] dump_stack_lvl+0x16c/0x230 [ 1173.320974][T20420] ? show_regs_print_info+0x20/0x20 [ 1173.326217][T20420] ? load_image+0x3b0/0x3b0 [ 1173.330784][T20420] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1173.337240][T20420] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1173.343767][T20420] warn_alloc+0x210/0x300 [ 1173.348133][T20420] ? stack_trace_save+0x9c/0xe0 [ 1173.353184][T20420] ? zone_watermark_ok_safe+0x230/0x230 [ 1173.358766][T20420] ? kasan_set_track+0x5f/0x70 [ 1173.363561][T20420] ? kasan_set_track+0x4e/0x70 [ 1173.368348][T20420] ? __kasan_kmalloc+0x8f/0xa0 [ 1173.373147][T20420] ? xsk_init_queue+0xb0/0x110 [ 1173.378101][T20420] ? xsk_setsockopt+0x4db/0x6f0 [ 1173.382978][T20420] ? do_sock_setsockopt+0x175/0x1a0 [ 1173.388203][T20420] ? __x64_sys_setsockopt+0x184/0x200 [ 1173.393685][T20420] __vmalloc_node_range+0x126/0x1320 [ 1173.399025][T20420] ? free_vm_area+0x50/0x50 [ 1173.403561][T20420] vmalloc_user+0x74/0x80 [ 1173.407934][T20420] ? xskq_create+0xbf/0x170 [ 1173.412459][T20420] xskq_create+0xbf/0x170 [ 1173.416809][T20420] xsk_init_queue+0xb0/0x110 [ 1173.421415][T20420] xsk_setsockopt+0x4db/0x6f0 [ 1173.426146][T20420] ? xsk_poll+0x670/0x670 [ 1173.430522][T20420] ? __fget_files+0x28/0x4d0 [ 1173.435423][T20420] ? aa_sock_opt_perm+0x74/0x100 [ 1173.440406][T20420] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1173.445985][T20420] ? security_socket_setsockopt+0x7e/0xa0 [ 1173.451841][T20420] ? xsk_poll+0x670/0x670 [ 1173.456675][T20420] do_sock_setsockopt+0x175/0x1a0 [ 1173.461749][T20420] ? __fdget+0x180/0x210 [ 1173.466020][T20420] __x64_sys_setsockopt+0x184/0x200 [ 1173.471335][T20420] do_syscall_64+0x55/0xb0 [ 1173.475861][T20420] ? clear_bhb_loop+0x40/0x90 [ 1173.480565][T20420] ? clear_bhb_loop+0x40/0x90 [ 1173.485538][T20420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1173.491461][T20420] RIP: 0033:0x7f7d08f8ebe9 [ 1173.495907][T20420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.515624][T20420] RSP: 002b:00007f7d09d69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1173.524086][T20420] RAX: ffffffffffffffda RBX: 00007f7d091b6090 RCX: 00007f7d08f8ebe9 [ 1173.532095][T20420] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 1173.540100][T20420] RBP: 00007f7d09011e19 R08: 0000000000000004 R09: 0000000000000000 [ 1173.548351][T20420] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1173.556364][T20420] R13: 00007f7d091b6128 R14: 00007f7d091b6090 R15: 00007ffe048d1548 [ 1173.564416][T20420] [ 1173.647092][T20420] Mem-Info: [ 1173.657232][T20420] active_anon:18786 inactive_anon:0 isolated_anon:0 [ 1173.657232][T20420] active_file:18509 inactive_file:40244 isolated_file:0 [ 1173.657232][T20420] unevictable:768 dirty:107 writeback:0 [ 1173.657232][T20420] slab_reclaimable:11578 slab_unreclaimable:103680 [ 1173.657232][T20420] mapped:31032 shmem:9000 pagetables:431 [ 1173.657232][T20420] sec_pagetables:0 bounce:0 [ 1173.657232][T20420] kernel_misc_reclaimable:0 [ 1173.657232][T20420] free:1322929 free_pcp:7013 free_cma:0 [ 1173.850856][T20420] Node 0 active_anon:78344kB inactive_anon:0kB active_file:49620kB inactive_file:160780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111588kB dirty:428kB writeback:0kB shmem:37564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10768kB pagetables:1724kB sec_pagetables:0kB all_unreclaimable? no [ 1173.889718][T20428] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1173.901776][T20420] Node 1 active_anon:0kB inactive_anon:0kB active_file:24416kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:15540kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1173.901895][T20420] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1173.901960][T20420] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1173.902015][T20420] Node 0 DMA32 free:1389240kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:78296kB inactive_anon:0kB active_file:49620kB inactive_file:159460kB unevictable:1536kB writepending:428kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:21824kB local_pcp:19036kB free_cma:0kB [ 1173.902083][T20420] lowmem_reserve[]: 0 0 1 1 1 [ 1173.902134][T20420] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1173.902193][T20420] lowmem_reserve[]: 0 0 0 0 0 [ 1173.902246][T20420] Node 1 Normal free:3883824kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24416kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:6656kB local_pcp:1216kB free_cma:0kB [ 1173.902371][T20420] lowmem_reserve[]: 0 0 0 0 0 [ 1173.902424][T20420] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1173.902587][T20420] Node 0 DMA32: 102*4kB (UE) 330*8kB (UME) 69*16kB (U) 228*32kB (UME) 748*64kB (UM) 336*128kB (UME) 107*256kB (UM) 38*512kB (UM) 19*1024kB (UME) 12*2048kB (UM) 292*4096kB (UM) = 1389240kB [ 1173.902816][T20420] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1173.902962][T20420] Node 1 Normal: 268*4kB (UM) 66*8kB (UME) 29*16kB (UME) 243*32kB (UME) 99*64kB (UME) 12*128kB (UM) 2*256kB (U) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 942*4096kB (M) = 3883824kB [ 1173.903185][T20420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1173.903204][T20420] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1173.903222][T20420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1173.903241][T20420] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1173.903259][T20420] 68528 total pagecache pages [ 1173.903269][T20420] 0 pages in swap cache [ 1173.903277][T20420] Free swap = 124996kB [ 1173.903286][T20420] Total swap = 124996kB [ 1173.903296][T20420] 2097051 pages RAM [ 1173.903305][T20420] 0 pages HighMem/MovableOnly [ 1173.903313][T20420] 416138 pages reserved [ 1173.903322][T20420] 0 pages cma reserved [ 1174.303476][T20435] validate_nla: 1 callbacks suppressed [ 1174.303506][T20435] netlink: 'syz.1.5661': attribute type 29 has an invalid length. [ 1174.489241][T20428] : (slave netdevsim0): Enslaving as an active interface with an up link [ 1174.568255][T20435] netlink: 'syz.1.5661': attribute type 29 has an invalid length. [ 1174.902357][T20449] netlink: 'syz.2.5664': attribute type 10 has an invalid length. [ 1174.926964][T20452] netlink: 'syz.2.5664': attribute type 10 has an invalid length. [ 1174.951043][T20452] dummy0: left promiscuous mode [ 1174.956127][T20452] dummy0: left allmulticast mode [ 1174.975502][T20452] team0: Port device dummy0 removed [ 1175.001291][T20452] dummy0: entered promiscuous mode [ 1175.007206][T20452] : (slave dummy0): Enslaving as an active interface with an up link [ 1175.667015][T20465] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5669'. [ 1176.122527][T20470] netlink: 'syz.0.5670': attribute type 29 has an invalid length. [ 1176.166759][T20470] netlink: 'syz.0.5670': attribute type 29 has an invalid length. [ 1176.212988][T20469] netlink: 'syz.0.5670': attribute type 29 has an invalid length. [ 1176.287643][T20469] netlink: 'syz.0.5670': attribute type 29 has an invalid length. [ 1176.424224][T20477] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5672'. [ 1176.476939][T20477] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.5672'. [ 1176.725818][T20487] netlink: 'syz.1.5675': attribute type 10 has an invalid length. [ 1177.926508][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.933524][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.712727][T20494] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5676'. [ 1180.738500][T20510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1181.090096][T20525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5684'. [ 1181.346317][T20524] netlink: 'syz.2.5685': attribute type 29 has an invalid length. [ 1181.399059][T20524] netlink: 'syz.2.5685': attribute type 29 has an invalid length. [ 1181.425742][T20526] netlink: 'syz.2.5685': attribute type 29 has an invalid length. [ 1184.830255][T20541] netlink: 'syz.0.5689': attribute type 10 has an invalid length. [ 1185.034877][T20548] netlink: 'syz.3.5690': attribute type 29 has an invalid length. [ 1185.072442][T20548] netlink: 'syz.3.5690': attribute type 29 has an invalid length. [ 1185.087697][T20543] netlink: 'syz.3.5690': attribute type 29 has an invalid length. [ 1185.141397][T20547] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5692'. [ 1185.154129][T20543] netlink: 'syz.3.5690': attribute type 29 has an invalid length. [ 1186.679002][T20568] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1187.039871][T20575] netlink: 'syz.0.5700': attribute type 4 has an invalid length. [ 1187.164088][T20575] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5700'. [ 1188.035485][T20573] syzkaller0: entered promiscuous mode [ 1188.045858][T20573] syzkaller0: entered allmulticast mode [ 1188.239714][T20591] netlink: 'syz.1.5704': attribute type 16 has an invalid length. [ 1188.271785][T20591] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5704'. [ 1188.311831][T20591] bridge_slave_0: entered allmulticast mode [ 1188.602557][T20602] netlink: 'syz.2.5705': attribute type 64 has an invalid length. [ 1188.748425][T20596] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.5706'. [ 1188.821727][T20604] netlink: 'syz.3.5708': attribute type 10 has an invalid length. [ 1188.892119][T20600] netlink: 'syz.1.5707': attribute type 9 has an invalid length. [ 1188.901639][T20600] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5707'. [ 1190.281652][T20621] wg2: left promiscuous mode [ 1190.298138][T20620] netlink: 'syz.2.5712': attribute type 33 has an invalid length. [ 1190.308274][T20621] wg2: left allmulticast mode [ 1190.350871][T20620] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5712'. [ 1190.556157][T20627] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5713'. [ 1191.448760][T20631] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5714'. [ 1191.701101][T20628] @: entered promiscuous mode [ 1191.705893][T20628] @: entered allmulticast mode [ 1191.831191][T20637] @: entered promiscuous mode [ 1191.835959][T20637] @: entered allmulticast mode [ 1192.653559][T20655] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5719'. [ 1194.438185][T20682] netlink: 'syz.1.5727': attribute type 10 has an invalid length. [ 1194.723040][T20685] veth1_macvtap: entered promiscuous mode [ 1194.753725][T20685] veth1_macvtap: entered allmulticast mode [ 1194.798956][T20685] netlink: 'syz.3.5728': attribute type 39 has an invalid length. [ 1196.664110][T20710] netlink: 'syz.1.5735': attribute type 10 has an invalid length. [ 1196.680149][T20710] team0: left promiscuous mode [ 1196.689167][T20710] team_slave_1: left promiscuous mode [ 1196.696640][T20710] bond0: left promiscuous mode [ 1196.705351][T20710] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1196.722225][T20710] team0: left allmulticast mode [ 1196.731604][T20710] team_slave_1: left allmulticast mode [ 1196.740883][T20710] bond0: left allmulticast mode [ 1196.749894][T20710] @ÿ: left allmulticast mode [ 1196.760878][T20710] bond_slave_1: left allmulticast mode [ 1196.775491][T20710] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1196.891041][T20710] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1196.944446][T20715] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5738'. [ 1196.961128][T20710] bridge_slave_1: left allmulticast mode [ 1196.993920][T20710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.380997][T20722] netlink: 'syz.2.5737': attribute type 10 has an invalid length. [ 1197.389541][T20722] team0: left allmulticast mode [ 1197.409830][T20722] team_slave_1: left allmulticast mode [ 1197.429026][T20722] hsr_slave_0: left allmulticast mode [ 1197.458725][T20722] team0: left promiscuous mode [ 1197.470248][T20722] team_slave_1: left promiscuous mode [ 1197.477937][T20722] hsr_slave_0: left promiscuous mode [ 1197.492199][T20722] kfree: port 1(team0) entered disabled state [ 1197.606712][T20722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.673466][T20722] team0: entered promiscuous mode [ 1197.679437][T20722] team_slave_1: entered promiscuous mode [ 1197.726971][T20722] hsr_slave_0: entered promiscuous mode [ 1197.743436][T20722] : (slave team0): Enslaving as an active interface with an up link [ 1197.792960][T20730] netlink: 'syz.3.5739': attribute type 9 has an invalid length. [ 1197.802014][T20730] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5739'. [ 1197.995899][T20735] IPv6: Can't replace route, no match found [ 1198.221833][T20739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1198.239218][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1199.160624][T20750] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5745'. [ 1199.736971][T20762] netlink: 'syz.1.5746': attribute type 10 has an invalid length. [ 1199.764282][T20762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.709880][T20779] wg2: left promiscuous mode [ 1200.756719][T20779] wg2: left allmulticast mode [ 1201.359979][T20790] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5755'. [ 1201.984425][T20800] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1202.015369][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5760'. [ 1202.113081][T20805] netlink: 'syz.2.5759': attribute type 10 has an invalid length. [ 1202.171550][T20802] bridge0: port 1(team0) entered blocking state [ 1202.186717][T20802] bridge0: port 1(team0) entered disabled state [ 1202.336235][T20816] netlink: 'syz.0.5763': attribute type 10 has an invalid length. [ 1202.400267][T20817] netlink: 16142 bytes leftover after parsing attributes in process `syz.1.5761'. [ 1202.474443][T20817] netlink: 'syz.1.5761': attribute type 29 has an invalid length. [ 1202.601252][T20817] netlink: 'syz.1.5761': attribute type 29 has an invalid length. [ 1202.620172][T20822] netlink: 'syz.1.5761': attribute type 29 has an invalid length. [ 1202.677763][T20817] netlink: 'syz.1.5761': attribute type 29 has an invalid length. [ 1202.761440][T20822] netlink: 'syz.1.5761': attribute type 29 has an invalid length. [ 1203.790537][T20821] netlink: 'syz.3.5764': attribute type 10 has an invalid length. [ 1203.799156][T20821] netlink: 'syz.3.5764': attribute type 19 has an invalid length. [ 1203.820242][T20821] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1204.119852][T20845] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5769'. [ 1204.890284][T20853] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1204.913793][T20855] bridge0: port 1(team0) entered blocking state [ 1204.922353][T20855] bridge0: port 1(team0) entered disabled state [ 1204.929409][T20855] team0: entered allmulticast mode [ 1204.936307][T20855] team_slave_1: entered allmulticast mode [ 1204.943301][T20855] bond0: entered allmulticast mode [ 1204.949471][T20855] @ÿ: entered allmulticast mode [ 1204.955967][T20855] bond_slave_1: entered allmulticast mode [ 1204.966202][T20855] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1204.974939][T20855] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1204.985096][T20855] bridge_slave_1: entered allmulticast mode [ 1205.008399][T20855] team0: entered promiscuous mode [ 1205.014547][T20855] team_slave_1: entered promiscuous mode [ 1205.025580][T20855] bond0: entered promiscuous mode [ 1205.033234][T20855] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1205.070761][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5772'. [ 1205.217267][T20862] validate_nla: 2 callbacks suppressed [ 1205.217305][T20862] netlink: 'syz.2.5775': attribute type 10 has an invalid length. [ 1205.240160][T20862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.363224][T20862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.453076][T20862] batadv_slave_0: entered promiscuous mode [ 1205.509819][T20862] : (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1205.546778][T20872] netlink: 16142 bytes leftover after parsing attributes in process `syz.3.5776'. [ 1205.688447][T20872] netlink: 'syz.3.5776': attribute type 29 has an invalid length. [ 1205.716197][T20872] netlink: 'syz.3.5776': attribute type 29 has an invalid length. [ 1205.730103][T20873] netlink: 'syz.3.5776': attribute type 29 has an invalid length. [ 1205.763904][T20872] netlink: 'syz.3.5776': attribute type 29 has an invalid length. [ 1205.785829][T20872] netlink: 'syz.3.5776': attribute type 29 has an invalid length. [ 1206.137127][T20879] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5781'. [ 1207.030052][T20886] netlink: 'syz.3.5784': attribute type 10 has an invalid length. [ 1207.700604][T16279] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 1207.791609][T20897] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1207.849201][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5786'. [ 1209.344645][T20922] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5794'. [ 1210.060846][T20932] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5805'. [ 1210.250198][T20931] netlink: 'syz.0.5796': attribute type 10 has an invalid length. [ 1220.275841][T21059] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5853'. [ 1220.382138][T21061] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5855'. [ 1222.423774][T21081] syzkaller0: entered promiscuous mode [ 1222.437614][T21081] syzkaller0: entered allmulticast mode [ 1231.472359][T21173] netlink: 'syz.2.5885': attribute type 2 has an invalid length. [ 1234.341979][T16279] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 1239.251211][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.264657][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.927232][T21252] syzkaller0: entered promiscuous mode [ 1239.955490][T21252] syzkaller0: entered allmulticast mode [ 1243.790740][T21272] netlink: 'syz.2.5922': attribute type 10 has an invalid length. [ 1245.668013][T21291] netlink: 'syz.3.5932': attribute type 10 has an invalid length. [ 1245.677749][T21291] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5932'. [ 1245.688135][T21291] bridge0: port 1(team0) entered disabled state [ 1245.702063][T21291] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1245.760333][T21295] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5933'. [ 1245.906500][T21295] netlink: 'syz.0.5933': attribute type 39 has an invalid length. [ 1246.350496][T21311] netlink: 'syz.3.5942': attribute type 10 has an invalid length. [ 1246.358682][T21311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1246.382146][T21311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.400349][T21311] batadv_slave_0: entered promiscuous mode [ 1246.407198][T21311] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1247.774920][T21338] syzkaller0: entered promiscuous mode [ 1247.780561][T21338] syzkaller0: entered allmulticast mode [ 1248.171774][T16279] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1248.179261][T16279] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1248.886136][T21362] netlink: 'syz.0.5965': attribute type 10 has an invalid length. [ 1248.912524][T21362] team0: left promiscuous mode [ 1248.921739][T21362] C: left promiscuous mode [ 1248.926391][T21362] team_slave_1: left promiscuous mode [ 1248.934627][T21362] hsr_slave_0: left promiscuous mode [ 1248.940113][T21362] team0: left allmulticast mode [ 1248.945673][T21362] C: left allmulticast mode [ 1248.950307][T21362] team_slave_1: left allmulticast mode [ 1248.963019][T21362] hsr_slave_0: left allmulticast mode [ 1248.990516][T21362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.005105][T21362] team0: entered promiscuous mode [ 1249.017085][T21362] C: entered promiscuous mode [ 1249.031059][T21362] team_slave_1: entered promiscuous mode [ 1249.037074][T21362] hsr_slave_0: entered promiscuous mode [ 1249.043926][T21362] bond0: (slave team0): Enslaving as an active interface with an up link [ 1249.247611][T21375] bridge0: entered promiscuous mode [ 1249.256193][T21375] bridge0: entered allmulticast mode [ 1250.625995][T21386] syzkaller0: entered promiscuous mode [ 1250.631791][T21386] syzkaller0: entered allmulticast mode [ 1254.148972][T21415] syzkaller0: entered promiscuous mode [ 1254.162618][T21415] syzkaller0: entered allmulticast mode [ 1254.264505][T21416] syzkaller0: entered allmulticast mode [ 1256.570347][T21426] syzkaller0: entered promiscuous mode [ 1256.903228][T21436] netlink: 'syz.0.6006': attribute type 10 has an invalid length. [ 1256.912586][T21436] batman_adv: batadv0: Adding interface: wlan0 [ 1256.918792][T21436] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.945512][T21436] batman_adv: batadv0: Interface activated: wlan0 [ 1257.083289][T21436] netlink: 'syz.0.6006': attribute type 29 has an invalid length. [ 1257.334976][T21436] netlink: 'syz.0.6006': attribute type 29 has an invalid length. [ 1257.994932][T21455] netlink: 'syz.0.6003': attribute type 21 has an invalid length. [ 1258.209465][T21470] netlink: 'syz.1.6008': attribute type 9 has an invalid length. [ 1258.221477][T21470] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.6008'. [ 1258.359439][T21475] syzkaller0: entered promiscuous mode [ 1258.365269][T21475] syzkaller0: entered allmulticast mode [ 1261.552338][T21505] netlink: 'syz.1.6023': attribute type 29 has an invalid length. [ 1261.577672][T21505] netlink: 'syz.1.6023': attribute type 29 has an invalid length. [ 1261.615870][T21509] @ÿ: renamed from bond_slave_0 (while UP) [ 1262.285861][T21533] netlink: 'syz.3.6031': attribute type 64 has an invalid length. [ 1262.773699][T21546] netlink: 'syz.1.6039': attribute type 10 has an invalid length. [ 1262.819457][T21546] dummy0: entered promiscuous mode [ 1262.837165][T21546] dummy0: entered allmulticast mode [ 1262.846086][T21546] team0: Port device dummy0 added [ 1263.245329][T21555] veth1_to_bond: entered allmulticast mode [ 1263.399610][T21563] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.6048'. [ 1263.458423][T21563] openvswitch: netlink: Duplicate key (type 0). [ 1263.714068][T21567] netlink: 'syz.2.6049': attribute type 9 has an invalid length. [ 1263.739739][T21567] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.6049'. [ 1264.138933][T21573] netlink: 'syz.2.6050': attribute type 28 has an invalid length. [ 1264.149518][T21573] netlink: 'syz.2.6050': attribute type 29 has an invalid length. [ 1264.162437][T21573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6050'. [ 1265.464921][T21618] netlink: 'syz.0.6078': attribute type 23 has an invalid length. [ 1266.041818][T12266] Bluetooth: hci0: unexpected event 0x36 length: 15 > 7 [ 1266.162038][T21640] netlink: 'syz.2.6079': attribute type 10 has an invalid length. [ 1266.201703][T21640] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6079'. [ 1267.097031][T21650] netlink: 'syz.3.6083': attribute type 29 has an invalid length. [ 1267.213545][T21642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1267.229944][T21650] netlink: 'syz.3.6083': attribute type 29 has an invalid length. [ 1267.719148][T21660] syzkaller0: entered promiscuous mode [ 1267.749910][T21660] syzkaller0: entered allmulticast mode [ 1271.038696][T21682] syzkaller0: entered promiscuous mode [ 1271.050804][T21682] syzkaller0: entered allmulticast mode [ 1271.077938][T21686] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1271.101624][T21686] batadv_slave_1: entered promiscuous mode [ 1273.109097][T21719] erspan0: left allmulticast mode [ 1273.130796][T21719] erspan0: left promiscuous mode [ 1273.136335][T21719] Ÿë: port 2(erspan0) entered disabled state [ 1273.155783][T21719] veth0_to_bridge: left allmulticast mode [ 1273.168280][T21719] veth0_to_bridge: left promiscuous mode [ 1273.177209][T21719] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1276.666008][T21768] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1276.702516][T21768] netlink: 'syz.2.6120': attribute type 10 has an invalid length. [ 1276.721481][T21768] wlan1: mtu less than device minimum [ 1276.732550][T21768] : (slave wlan1): Error -22 calling dev_set_mtu [ 1276.988782][T21774] netlink: 'syz.2.6123': attribute type 29 has an invalid length. [ 1277.033946][T21774] netlink: 'syz.2.6123': attribute type 29 has an invalid length. [ 1278.676981][T21794] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1280.023735][T21817] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6136'. [ 1280.383364][T21826] netlink: 'syz.0.6138': attribute type 3 has an invalid length. [ 1280.450213][T21826] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.6138'. [ 1282.867911][T21841] netlink: 'syz.1.6143': attribute type 3 has an invalid length. [ 1282.906651][T21841] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.6143'. [ 1284.561545][T21851] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1285.927084][T21841] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.6143'. [ 1286.175783][T21860] sit0: entered promiscuous mode [ 1287.830586][T21884] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.6156'. [ 1289.078854][T21900] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 1289.113847][T21900] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 1289.348627][T21903] syzkaller0: left promiscuous mode [ 1289.360149][T21903] syzkaller0: left allmulticast mode [ 1290.318624][T21928] netlink: 'syz.2.6181': attribute type 10 has an invalid length. [ 1290.327572][T21928] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6181'. [ 1290.340955][T21928] 8021q: adding VLAN 0 to HW filter on device  [ 1290.438608][T21930] netlink: 'syz.3.6171': attribute type 9 has an invalid length. [ 1290.448328][T21930] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1291.773385][T21945] netlink: 'syz.2.6176': attribute type 2 has an invalid length. [ 1291.784377][T21945] netlink: 'syz.2.6176': attribute type 8 has an invalid length. [ 1291.801684][T21945] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6176'. [ 1291.832782][T21950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6177'. [ 1291.873696][T21948] netlink: 'syz.1.6177': attribute type 10 has an invalid length. [ 1291.966080][T21954] erspan0: left allmulticast mode [ 1291.972458][T21954] erspan0: left promiscuous mode [ 1291.985647][T21954] Ÿë: port 2(erspan0) entered disabled state [ 1291.994983][T21954] veth0_to_bridge: left allmulticast mode [ 1292.005909][T21954] veth0_to_bridge: left promiscuous mode [ 1292.012367][T21954] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1292.098912][T21952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6180'. [ 1292.362301][T21964] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 [ 1295.138932][T22008] syzkaller0: entered promiscuous mode [ 1295.145248][T22008] syzkaller0: entered allmulticast mode [ 1296.194162][T22027] bridge0: left promiscuous mode [ 1296.203792][T22027] bridge0: left allmulticast mode [ 1296.268670][T22030] team0: left allmulticast mode [ 1296.297310][T22030] team_slave_1: left allmulticast mode [ 1296.309051][T22030] bond0: left allmulticast mode [ 1296.314529][T22030] @ÿ: left allmulticast mode [ 1296.319465][T22030] bond_slave_1: left allmulticast mode [ 1296.330151][T22030] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1296.338937][T22030] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1296.350462][T22030] bridge_slave_1: left allmulticast mode [ 1296.356990][T22030] dummy0: left allmulticast mode [ 1296.377202][T22030] team0: left promiscuous mode [ 1296.391269][T22030] team_slave_1: left promiscuous mode [ 1296.396948][T22030] bond0: left promiscuous mode [ 1296.413785][T22030] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1296.422383][T22030] dummy0: left promiscuous mode [ 1296.428164][T22030] bridge0: port 1(team0) entered disabled state [ 1296.692525][T22035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1297.820766][T22059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6218'. [ 1297.830179][T22059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6218'. [ 1297.879767][T22058] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6218'. [ 1298.605536][T22070] netlink: 'syz.2.6222': attribute type 10 has an invalid length. [ 1299.520004][T22088] batman_adv: batadv0: Interface deactivated: wlan0 [ 1299.538956][T22088] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1299.566182][T22086] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1299.593387][T22086] batman_adv: batadv0: Interface activated: wlan0 [ 1299.706262][T22088] netlink: 'syz.0.6236': attribute type 9 has an invalid length. [ 1299.714270][T22088] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6236'. [ 1299.867721][T22092] netlink: 766 bytes leftover after parsing attributes in process `syz.3.6226'. [ 1299.902411][T22094] kfree: port 1(team0) entered blocking state [ 1299.909979][T22094] kfree: port 1(team0) entered disabled state [ 1299.916928][T22094] team0: entered allmulticast mode [ 1299.940861][T22094] team_slave_1: entered allmulticast mode [ 1299.960383][T22094] bond0: entered allmulticast mode [ 1299.969936][T22094] @ÿ: entered allmulticast mode [ 1299.983311][T22094] bond_slave_1: entered allmulticast mode [ 1300.002968][T22094] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1300.022202][T22094] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1300.059911][T22094] bridge_slave_1: entered allmulticast mode [ 1300.071870][T22094] dummy0: entered allmulticast mode [ 1300.079279][T22094] team0: entered promiscuous mode [ 1300.085245][T22094] team_slave_1: entered promiscuous mode [ 1300.091758][T22094] bond0: entered promiscuous mode [ 1300.097583][T22094] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1300.105930][T22094] dummy0: entered promiscuous mode [ 1300.113453][T22103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1300.136257][T22103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1300.143049][T22102] netlink: 'syz.0.6231': attribute type 153 has an invalid length. [ 1300.155360][T22099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1300.172800][T22103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1300.182479][T22102] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1300.218795][T22104] netlink: 'syz.0.6231': attribute type 4 has an invalid length. [ 1300.695758][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.702428][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.144749][T22123] sit0: left promiscuous mode [ 1301.299096][T22125] sit0: entered promiscuous mode [ 1302.026508][T22124] netlink: 'syz.1.6239': attribute type 10 has an invalid length. [ 1302.036289][T22124] bond0: (slave wlan1): Releasing backup interface [ 1302.047496][T22124] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1302.055002][T22124] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1302.082113][T22124] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1302.089602][T22124] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1302.098364][T22124] team0: Port device wlan1 added [ 1302.112062][T22138] sit0: left promiscuous mode [ 1302.218617][T22141] sit0: entered promiscuous mode [ 1302.362652][T22144] syzkaller0: left promiscuous mode [ 1302.373655][T22144] syzkaller0: left allmulticast mode [ 1303.396792][T22181] netlink: 'syz.2.6258': attribute type 39 has an invalid length. [ 1303.444037][T22181] netlink: 'syz.2.6258': attribute type 3 has an invalid length. [ 1303.475402][T22181] __nla_validate_parse: 1 callbacks suppressed [ 1303.475422][T22181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6258'. [ 1303.504807][T22179] netlink: 'syz.0.6257': attribute type 39 has an invalid length. [ 1303.776584][T22187] netlink: 'syz.0.6260': attribute type 1 has an invalid length. [ 1303.788587][T22187] netlink: 'syz.0.6260': attribute type 4 has an invalid length. [ 1303.797215][T22187] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6260'. [ 1303.865517][T22187] C: left promiscuous mode [ 1303.931645][T22187] team0: Port device C removed [ 1303.965007][T22187] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1304.690326][T22208] netlink: 'syz.0.6269': attribute type 39 has an invalid length. [ 1305.456936][T22222] netlink: 'syz.2.6276': attribute type 10 has an invalid length. [ 1305.545432][T22225] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6278'. [ 1305.943177][T22232] sit0: left promiscuous mode [ 1306.107498][T22231] sit0: entered promiscuous mode [ 1306.902170][T22254] netlink: 'syz.2.6286': attribute type 39 has an invalid length. [ 1307.057230][T22256] netlink: 'syz.1.6288': attribute type 10 has an invalid length. [ 1307.447860][T22259] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6289'. [ 1307.641871][T22263] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6290'. [ 1307.711636][T22263] netlink: 71 bytes leftover after parsing attributes in process `syz.0.6290'. [ 1308.282792][T22276] syzkaller0: left promiscuous mode [ 1308.310487][T22276] syzkaller0: left allmulticast mode [ 1308.844347][T22282] netlink: 'syz.0.6298': attribute type 3 has an invalid length. [ 1308.895604][T22282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6298'. [ 1309.009899][T22284] netlink: 'syz.2.6297': attribute type 10 has an invalid length. [ 1310.190972][T22294] netlink: 'syz.3.6301': attribute type 10 has an invalid length. [ 1310.208927][T22297] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6301'. [ 1311.483438][T22325] netlink: 'syz.3.6310': attribute type 10 has an invalid length. [ 1311.505618][T22325] bond0: left promiscuous mode [ 1311.520380][T22325] @ÿ: left promiscuous mode [ 1311.526004][T22325] bond_slave_1: left promiscuous mode [ 1311.532636][T22325] batadv_slave_0: left promiscuous mode [ 1311.562035][T22325] @ÿ: entered promiscuous mode [ 1311.567625][T22325] bond_slave_1: entered promiscuous mode [ 1311.573609][T22325] batadv_slave_0: entered promiscuous mode [ 1311.586429][T22325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.615062][T22325] bond0: entered promiscuous mode [ 1311.624120][T22325] bond0: entered allmulticast mode [ 1311.629644][T22325] @ÿ: entered allmulticast mode [ 1311.636255][T22325] bond_slave_1: entered allmulticast mode [ 1311.643571][T22325] batadv0: entered allmulticast mode [ 1311.649617][T22325] batadv_slave_0: entered allmulticast mode [ 1311.662559][T22325] team0: Port device bond0 added [ 1311.669019][T22317] netlink: 'syz.0.6308': attribute type 4 has an invalid length. [ 1311.701035][T22317] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6308'. [ 1311.770364][T22317] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1312.076853][T22330] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6311'. [ 1312.093715][T22330] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6311'. [ 1312.110253][T22329] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6311'. [ 1312.196478][T22332] netlink: 'syz.3.6315': attribute type 10 has an invalid length. [ 1313.099220][T22332] bond0: (slave c@ÿ): Releasing backup interface [ 1313.209532][T22332] @ÿ: left allmulticast mode [ 1313.222413][T22332] @ÿ: left promiscuous mode [ 1313.268743][T22342] netlink: 'syz.0.6314': attribute type 10 has an invalid length. [ 1313.287939][T22342] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6314'. [ 1313.312171][T22342] batadv_slave_1: entered promiscuous mode [ 1313.341553][T22342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1313.349112][T22342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.068114][T22354] netlink: 'syz.3.6319': attribute type 10 has an invalid length. [ 1314.141821][T22354] team0: Device wlan1 is of different type [ 1314.532864][T22363] netlink: 'syz.0.6323': attribute type 1 has an invalid length. [ 1314.590768][T22363] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6323'. [ 1314.691225][T22357] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1314.889622][T22363] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6323'. [ 1315.102865][T22374] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 1315.123926][T22374] batman_adv: batadv0: Interface deactivated: wlan0 [ 1315.141113][T22374] batman_adv: batadv0: Removing interface: wlan0 [ 1315.297072][T22374] bond0: (slave batadv0): Releasing backup interface [ 1315.750328][T22382] netlink: 'syz.3.6327': attribute type 29 has an invalid length. [ 1315.821422][T22382] netlink: 'syz.3.6327': attribute type 29 has an invalid length. [ 1319.001235][T22408] netlink: 'syz.2.6333': attribute type 29 has an invalid length. [ 1319.055195][T22408] netlink: 'syz.2.6333': attribute type 29 has an invalid length. [ 1319.205433][T22412] netlink: 'syz.2.6333': attribute type 29 has an invalid length. [ 1319.376535][T22413] netlink: 'syz.2.6333': attribute type 29 has an invalid length. [ 1319.646158][T22419] netlink: 'syz.3.6335': attribute type 10 has an invalid length. [ 1319.682952][T22419] dummy0: entered promiscuous mode [ 1319.704529][T22419] dummy0: entered allmulticast mode [ 1319.723923][T22419] team0: Port device dummy0 added [ 1319.746657][T22420] netlink: 'syz.3.6335': attribute type 10 has an invalid length. [ 1319.864928][T22420] dummy0: left promiscuous mode [ 1319.870152][T22420] dummy0: left allmulticast mode [ 1319.928723][T22420] team0: Port device dummy0 removed [ 1319.957012][T22420] dummy0: entered promiscuous mode [ 1319.991048][T22420] dummy0: entered allmulticast mode [ 1319.997794][T22420] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1320.515152][T22432] netlink: 'syz.1.6340': attribute type 10 has an invalid length. [ 1320.557113][T22428] À: port 1(vlan0) entered blocking state [ 1320.575785][T22428] À: port 1(vlan0) entered disabled state [ 1320.585532][T22428] vlan0: entered allmulticast mode [ 1320.593182][T22428] vlan0: entered promiscuous mode [ 1320.986973][T22438] netlink: 'syz.1.6342': attribute type 33 has an invalid length. [ 1321.034408][T22438] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6342'. [ 1321.851838][T22447] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6343'. [ 1322.244004][T22454] @: entered promiscuous mode [ 1322.248812][T22454] @: entered allmulticast mode [ 1324.518834][T22476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1324.585316][T22481] netlink: 'syz.3.6350': attribute type 10 has an invalid length. [ 1324.639432][T22481] team0: left promiscuous mode [ 1324.690716][T22481] C: left promiscuous mode [ 1324.695591][T22481] team_slave_1: left promiscuous mode [ 1324.787185][T22481] hsr_slave_0: left promiscuous mode [ 1324.808099][T22481] bond0: left promiscuous mode [ 1324.839660][T22481] team0: left allmulticast mode [ 1324.865243][T22481] C: left allmulticast mode [ 1324.890878][T22481] team_slave_1: left allmulticast mode [ 1324.927904][T22481] hsr_slave_0: left allmulticast mode [ 1324.939868][T22481] bond0: left allmulticast mode [ 1324.956925][T22481] bond_slave_1: left allmulticast mode [ 1324.973270][T22481] batadv0: left allmulticast mode [ 1324.989794][T22481] batadv_slave_0: left allmulticast mode [ 1325.004065][T22481] dummy0: left allmulticast mode [ 1325.125095][T22481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.310997][T22488] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6352'. [ 1325.354465][T22490] netlink: 'syz.2.6353': attribute type 10 has an invalid length. [ 1325.458876][T22489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1326.081107][T22502] netlink: 'syz.2.6357': attribute type 10 has an invalid length. [ 1327.055913][T22520] IPv6: Can't replace route, no match found [ 1327.102924][T22520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6362'. [ 1327.236060][T22527] netlink: 'syz.1.6365': attribute type 9 has an invalid length. [ 1327.257069][T22527] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6365'. [ 1327.422133][T22526] netlink: 'syz.0.6364': attribute type 10 has an invalid length. [ 1327.440103][T22526] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6364'. [ 1327.593454][T22526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.657709][T22535] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6364'. [ 1327.781364][T22542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6364'. [ 1327.802103][T22532] netlink: 'syz.3.6366': attribute type 10 has an invalid length. [ 1327.840311][T22532] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.890363][T22542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6364'. [ 1327.915846][T22540] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6364'. [ 1328.081245][T22526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6364'. [ 1329.328149][T22559] netlink: 'syz.0.6370': attribute type 10 has an invalid length. [ 1329.615295][T22559] netdevsim netdevsim0 ªªªªªª: entered promiscuous mode [ 1329.668456][T22559] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 1332.117735][T22603] netlink: 'syz.1.6382': attribute type 29 has an invalid length. [ 1332.141686][T22603] netlink: 'syz.1.6382': attribute type 29 has an invalid length. [ 1332.155350][T22605] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6383'. [ 1332.171796][T22606] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6381'. [ 1332.183677][T22602] netlink: 'syz.1.6382': attribute type 29 has an invalid length. [ 1332.263221][T22602] netlink: 'syz.1.6382': attribute type 29 has an invalid length. [ 1332.325994][T22608] netlink: 'syz.3.6384': attribute type 10 has an invalid length. [ 1334.467304][T22633] netlink: 'syz.0.6399': attribute type 10 has an invalid length. [ 1334.587227][T22635] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6391'. [ 1334.771024][T22643] netlink: 'syz.1.6392': attribute type 64 has an invalid length. [ 1335.352951][T22647] wg2: left promiscuous mode [ 1335.357881][T22647] wg2: left allmulticast mode [ 1336.485420][T22659] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6398'. [ 1339.218206][T22690] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6416'. [ 1339.538805][T22696] syzkaller0: entered promiscuous mode [ 1339.545902][T22696] syzkaller0: entered allmulticast mode [ 1343.778574][T22732] syzkaller0: entered promiscuous mode [ 1343.784339][T22732] syzkaller0: entered allmulticast mode [ 1347.733141][T12266] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 1362.125373][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.139193][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.301177][T22965] netlink: 'syz.1.6519': attribute type 10 has an invalid length. [ 1375.951003][T23051] netlink: 'syz.3.6542': attribute type 10 has an invalid length. [ 1375.991704][T23051] veth1_macvtap: left promiscuous mode [ 1376.004236][T23051] veth1_macvtap: left allmulticast mode [ 1376.083728][T23051] team0: Port device veth1_macvtap added [ 1378.700968][T23070] syzkaller0: entered promiscuous mode [ 1378.706524][T23070] syzkaller0: entered allmulticast mode [ 1379.057655][T23079] netlink: 'syz.2.6558': attribute type 10 has an invalid length. [ 1379.289044][T23086] netlink: 'syz.2.6560': attribute type 10 has an invalid length. [ 1379.316228][T23086] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1379.339591][T23086] team0: entered allmulticast mode [ 1379.352853][T23086] team_slave_1: entered allmulticast mode [ 1379.381066][T23086] hsr_slave_0: entered allmulticast mode [ 1379.454636][T23086] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.549849][T23086] : (slave team0): Releasing backup interface [ 1379.569929][T23086] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1379.637048][T23091] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6562'. [ 1379.775931][T23091] netlink: 'syz.1.6562': attribute type 39 has an invalid length. [ 1380.076301][T23101] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6575'. [ 1380.201952][T23101] netlink: 'syz.3.6575': attribute type 39 has an invalid length. [ 1381.265231][T23101] veth0_macvtap: left allmulticast mode [ 1381.274080][T23101] veth0_macvtap: left promiscuous mode [ 1381.401930][T23105] syzkaller0: entered promiscuous mode [ 1381.407953][T23105] syzkaller0: entered allmulticast mode [ 1382.251666][T23128] netlink: 'syz.1.6574': attribute type 10 has an invalid length. [ 1382.259612][T23128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6574'. [ 1382.302971][T23128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.331514][T23128] kfree: port 1(team0) entered disabled state [ 1382.364819][T23128] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1382.726898][T23141] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6581'. [ 1382.751207][T23139] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 1383.604393][T23141] netlink: 'syz.3.6581': attribute type 39 has an invalid length. [ 1383.612710][T23142] netlink: 'syz.1.6580': attribute type 10 has an invalid length. [ 1383.647103][T23142] batadv_slave_0: entered promiscuous mode [ 1383.661258][T23142] batadv_slave_0: entered allmulticast mode [ 1383.668551][T23142] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1385.663286][T23163] netlink: 'syz.1.6592': attribute type 10 has an invalid length. [ 1385.687789][T23163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6592'. [ 1385.711793][T23163] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1387.294624][T23183] netlink: 'syz.2.6596': attribute type 10 has an invalid length. [ 1392.279839][T23277] syzkaller0: entered promiscuous mode [ 1392.286998][T23277] syzkaller0: entered allmulticast mode [ 1392.953153][T23295] netlink: 'syz.3.6640': attribute type 10 has an invalid length. [ 1392.963676][T23295] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.084047][T12266] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 1393.498269][T23309] bridge0: entered promiscuous mode [ 1393.507793][T23309] bridge0: entered allmulticast mode [ 1394.107810][T23335] netlink: 'syz.1.6657': attribute type 10 has an invalid length. [ 1394.123328][T23335] team0: left promiscuous mode [ 1394.128190][T23335] team_slave_1: left promiscuous mode [ 1394.142581][T23335] bond0: left promiscuous mode [ 1394.148311][T23335] dummy0: left promiscuous mode [ 1394.154062][T23335] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1394.170933][T23335] team0: left allmulticast mode [ 1394.180778][T23335] team_slave_1: left allmulticast mode [ 1394.198736][T23335] bond0: left allmulticast mode [ 1394.213252][T23335] @ÿ: left allmulticast mode [ 1394.224546][T23335] bond_slave_1: left allmulticast mode [ 1394.239144][T23335] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1394.257074][T23335] bridge_slave_1: left allmulticast mode [ 1394.270269][T23335] batadv_slave_0: left allmulticast mode [ 1394.280758][T23335] dummy0: left allmulticast mode [ 1394.285980][T23335] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1394.315088][T23335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.980460][T23349] netlink: 'syz.0.6672': attribute type 10 has an invalid length. [ 1396.281685][T23368] syzkaller0: entered promiscuous mode [ 1396.287268][T23368] syzkaller0: entered allmulticast mode [ 1397.588165][T23395] syzkaller0: entered promiscuous mode [ 1397.601301][T23395] syzkaller0: entered allmulticast mode [ 1397.779992][T23399] syzkaller0: left promiscuous mode [ 1399.700208][T23434] syzkaller0: entered allmulticast mode [ 1400.922866][T23460] syzkaller0: entered promiscuous mode [ 1400.928467][T23460] syzkaller0: entered allmulticast mode [ 1401.274813][T23470] syzkaller0: entered promiscuous mode [ 1403.296119][T23492] syzkaller0: left promiscuous mode [ 1403.535794][T23496] syzkaller0: entered promiscuous mode [ 1404.013430][T23515] syzkaller0: left promiscuous mode [ 1404.749051][T23531] syzkaller0: entered promiscuous mode [ 1405.479143][T23545] syzkaller0: left promiscuous mode [ 1406.038310][T23561] syzkaller0: entered promiscuous mode [ 1406.057233][T23561] syzkaller0: entered allmulticast mode [ 1407.298712][T23605] syzkaller0: left promiscuous mode [ 1407.732613][T23623] syzkaller0: entered promiscuous mode [ 1407.939740][T23625] netlink: 'syz.1.6773': attribute type 21 has an invalid length. [ 1408.077398][T23636] syzkaller0: entered promiscuous mode [ 1408.466380][T23647] syzkaller0: left promiscuous mode [ 1409.180033][T23666] syzkaller0: left promiscuous mode [ 1409.333591][T23668] syzkaller0: entered allmulticast mode [ 1409.425233][T23670] netlink: 'syz.3.6795': attribute type 10 has an invalid length. [ 1409.478830][T23670] batman_adv: batadv0: Adding interface: wlan0 [ 1409.540802][T23675] netlink: 'syz.3.6795': attribute type 29 has an invalid length. [ 1409.624403][T23670] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1409.811042][T23670] batman_adv: batadv0: Interface activated: wlan0 [ 1409.873919][T23678] netlink: 'syz.2.6796': attribute type 21 has an invalid length. [ 1409.905108][T23675] netlink: 'syz.3.6795': attribute type 29 has an invalid length. [ 1410.072773][T23682] syzkaller0: entered promiscuous mode [ 1410.078636][T23682] syzkaller0: entered allmulticast mode [ 1410.415365][T23688] netlink: 'syz.2.6802': attribute type 9 has an invalid length. [ 1410.440806][T23688] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.6802'. [ 1410.465277][T23691] syzkaller0: entered promiscuous mode [ 1410.471059][T23691] syzkaller0: entered allmulticast mode [ 1412.136103][T23727] netlink: 'syz.0.6812': attribute type 21 has an invalid length. [ 1412.151224][T23726] netlink: 'syz.1.6813': attribute type 10 has an invalid length. [ 1412.235595][T23726] netlink: 'syz.1.6813': attribute type 29 has an invalid length. [ 1412.248304][T23726] netlink: 'syz.1.6813': attribute type 29 has an invalid length. [ 1412.906374][T23732] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.6814'. [ 1412.939129][T23733] syzkaller0: entered allmulticast mode [ 1413.222110][T23743] syzkaller0: entered allmulticast mode [ 1413.334833][T23747] validate_nla: 1 callbacks suppressed [ 1413.334854][T23747] netlink: 'syz.3.6825': attribute type 10 has an invalid length. [ 1413.452888][T23747] netlink: 'syz.3.6825': attribute type 29 has an invalid length. [ 1413.608126][T23747] netlink: 'syz.3.6825': attribute type 29 has an invalid length. [ 1413.817129][T23752] netlink: 'syz.1.6826': attribute type 21 has an invalid length. [ 1414.717817][T23777] syzkaller0: entered promiscuous mode [ 1415.031168][T23781] syzkaller0: left promiscuous mode [ 1415.379354][T23787] syzkaller0: entered allmulticast mode [ 1415.622517][T23793] netlink: 'syz.0.6837': attribute type 10 has an invalid length. [ 1415.716973][T23793] netlink: 'syz.0.6837': attribute type 29 has an invalid length. [ 1415.770828][T23793] netlink: 'syz.0.6837': attribute type 29 has an invalid length. [ 1415.808445][T23794] netlink: 'syz.3.6840': attribute type 21 has an invalid length. [ 1416.923470][T23809] syzkaller0: entered promiscuous mode [ 1416.992262][T23813] syzkaller0: entered promiscuous mode [ 1417.001308][T23813] syzkaller0: entered allmulticast mode [ 1417.645488][T23819] syzkaller0: entered promiscuous mode [ 1418.521930][T23830] syzkaller0: left promiscuous mode [ 1418.804090][T23835] netlink: 'syz.3.6854': attribute type 10 has an invalid length. [ 1419.114651][T23835] netlink: 'syz.3.6854': attribute type 29 has an invalid length. [ 1419.245595][T23835] netlink: 'syz.3.6854': attribute type 29 has an invalid length. [ 1419.878841][T23844] netlink: 'syz.0.6856': attribute type 21 has an invalid length. [ 1421.637901][T23873] netlink: 'syz.0.6870': attribute type 29 has an invalid length. [ 1421.843880][T23871] netlink: 'syz.0.6870': attribute type 10 has an invalid length. [ 1421.879844][T23873] netlink: 'syz.0.6870': attribute type 29 has an invalid length. [ 1421.962687][T23876] syzkaller0: entered allmulticast mode [ 1423.311082][T23893] netlink: 'syz.0.6876': attribute type 21 has an invalid length. [ 1423.615161][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.621651][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.458880][T23920] syzkaller0: left promiscuous mode [ 1425.515768][T23924] netlink: 'syz.2.6884': attribute type 10 has an invalid length. [ 1425.744440][T23924] netlink: 'syz.2.6884': attribute type 29 has an invalid length. [ 1425.995014][T23924] netlink: 'syz.2.6884': attribute type 29 has an invalid length. [ 1426.409801][T23940] netlink: 'syz.0.6889': attribute type 21 has an invalid length. [ 1427.983394][T23965] netlink: 'syz.0.6901': attribute type 10 has an invalid length. [ 1428.204863][T23965] netlink: 'syz.0.6901': attribute type 29 has an invalid length. [ 1428.226685][T23965] netlink: 'syz.0.6901': attribute type 29 has an invalid length. [ 1429.712651][T23987] netlink: 'syz.3.6908': attribute type 21 has an invalid length. [ 1429.823113][T23999] netlink: 'syz.2.6913': attribute type 10 has an invalid length. [ 1430.036696][T23999] netlink: 'syz.2.6913': attribute type 29 has an invalid length. [ 1437.534096][T24137] syzkaller0: entered allmulticast mode [ 1440.826920][T24181] syzkaller0: entered allmulticast mode [ 1441.295356][T24194] syzkaller0: left promiscuous mode [ 1442.014367][T24209] syzkaller0: entered promiscuous mode [ 1443.173088][T24234] syzkaller0: entered promiscuous mode [ 1443.987045][T24243] syzkaller0: entered allmulticast mode [ 1444.003850][T24245] syzkaller0: left promiscuous mode [ 1444.930761][T24269] syzkaller0: left promiscuous mode [ 1445.821119][T24287] syzkaller0: entered promiscuous mode [ 1446.236330][T24299] syzkaller0: left promiscuous mode [ 1450.102238][T24373] syzkaller0: entered promiscuous mode [ 1450.204552][T24379] syzkaller0: entered allmulticast mode [ 1451.081024][T24390] syzkaller0: left promiscuous mode [ 1453.603577][T24434] syzkaller0: entered allmulticast mode [ 1453.974737][T24445] syzkaller0: entered promiscuous mode [ 1457.473765][T24499] syzkaller0: entered promiscuous mode [ 1457.988730][T24513] syzkaller0: left promiscuous mode [ 1459.962726][T24547] syzkaller0: left promiscuous mode [ 1464.432344][T24627] syzkaller0: entered allmulticast mode [ 1478.212558][T24894] syzkaller0: entered promiscuous mode [ 1479.959199][T24919] syzkaller0: entered promiscuous mode [ 1482.049665][T24963] syzkaller0: entered promiscuous mode [ 1482.087212][T24967] syzkaller0: left promiscuous mode [ 1484.898646][T25021] syzkaller0: entered promiscuous mode [ 1484.908447][T25021] syzkaller0: entered allmulticast mode [ 1485.016815][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.025676][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.389863][T25037] syzkaller0: left promiscuous mode [ 1486.523314][T25043] syzkaller0: entered promiscuous mode [ 1486.797241][T25054] syzkaller0: left promiscuous mode [ 1488.338183][T25066] @ÿ: renamed from bond_slave_0 [ 1490.705539][T25108] syzkaller0: entered allmulticast mode [ 1492.060266][T25131] syzkaller0: entered promiscuous mode [ 1492.688945][T25143] syzkaller0: left promiscuous mode [ 1493.643949][T25157] syzkaller0: entered promiscuous mode [ 1493.670786][T25157] syzkaller0: entered allmulticast mode [ 1494.058279][T25168] syzkaller0: left promiscuous mode [ 1494.622625][T25177] validate_nla: 1 callbacks suppressed [ 1494.622648][T25177] netlink: 'syz.1.7377': attribute type 64 has an invalid length. [ 1496.550473][T25204] syzkaller0: entered promiscuous mode [ 1499.618769][T25248] syzkaller0: entered promiscuous mode [ 1499.714192][T25247] veth1_to_bond: entered allmulticast mode [ 1500.582892][T25262] netlink: 'syz.2.7410': attribute type 29 has an invalid length. [ 1500.601859][T25264] netlink: 'syz.0.7408': attribute type 64 has an invalid length. [ 1500.640956][T25262] netlink: 'syz.2.7410': attribute type 29 has an invalid length. [ 1501.313257][T25272] syzkaller0: left promiscuous mode [ 1502.528964][T25290] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.7422'. [ 1502.539221][T25290] openvswitch: netlink: Duplicate key (type 0). [ 1502.565843][T25289] netlink: 'syz.0.7421': attribute type 10 has an invalid length. [ 1502.589608][T25289] bond0: (slave dummy0): Releasing backup interface [ 1502.601938][T25289] dummy0: left promiscuous mode [ 1502.612828][T25289] dummy0: entered promiscuous mode [ 1502.622189][T25289] team0: Port device dummy0 added [ 1503.908930][T25306] syzkaller0: entered allmulticast mode [ 1505.285698][T25325] netlink: 'syz.3.7433': attribute type 10 has an invalid length. [ 1505.375157][T25325] bond0: (slave dummy0): Releasing backup interface [ 1505.417692][T25325] dummy0: left promiscuous mode [ 1505.485268][T25325] team0: Port device dummy0 added [ 1505.687828][T25328] netlink: 'syz.1.7435': attribute type 9 has an invalid length. [ 1505.706545][T25328] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.7435'. [ 1506.104385][T25335] netlink: 'syz.3.7447': attribute type 10 has an invalid length. [ 1506.264997][T25338] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.7437'. [ 1506.302158][T25338] openvswitch: netlink: Duplicate key (type 0). [ 1514.088287][T12266] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 1514.194649][T25498] syzkaller0: left promiscuous mode [ 1515.425083][T25551] netlink: 'syz.2.7534': attribute type 23 has an invalid length. [ 1515.866783][T25567] netlink: 'syz.3.7538': attribute type 28 has an invalid length. [ 1515.887848][T25567] netlink: 'syz.3.7538': attribute type 29 has an invalid length. [ 1515.904046][T25567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7538'. [ 1516.634092][T25577] lo: left promiscuous mode [ 1516.660652][T25577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1517.018699][T25586] netlink: 'syz.1.7549': attribute type 23 has an invalid length. [ 1517.324139][T25595] netlink: 'syz.0.7552': attribute type 28 has an invalid length. [ 1517.342094][T25595] netlink: 'syz.0.7552': attribute type 29 has an invalid length. [ 1517.350173][T25595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7552'. [ 1518.321455][T25616] netlink: 'syz.0.7559': attribute type 10 has an invalid length. [ 1518.333649][T25616] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7559'. [ 1518.613199][T25616] vlan0 (unregistering): left allmulticast mode [ 1518.620145][T25616] vlan0 (unregistering): left promiscuous mode [ 1518.634229][T25616] À: port 1(vlan0) entered disabled state [ 1519.072822][T25628] syzkaller0: entered allmulticast mode [ 1519.222253][T25632] netlink: 'syz.3.7566': attribute type 28 has an invalid length. [ 1519.230257][T25632] netlink: 'syz.3.7566': attribute type 29 has an invalid length. [ 1519.238404][T25632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7566'. [ 1519.601154][T25643] netlink: 'syz.2.7571': attribute type 29 has an invalid length. [ 1520.502755][T25649] syzkaller0: entered promiscuous mode [ 1520.508797][T25649] syzkaller0: entered allmulticast mode [ 1520.678454][T25658] validate_nla: 1 callbacks suppressed [ 1520.678489][T25658] netlink: 'syz.3.7576': attribute type 10 has an invalid length. [ 1520.700690][T25658] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7576'. [ 1521.195611][T25658] vlan0 (unregistering): left allmulticast mode [ 1521.203101][T25658] vlan0 (unregistering): left promiscuous mode [ 1521.210719][T25658] À: port 1(vlan0) entered disabled state [ 1521.843598][T25673] netlink: 'syz.2.7584': attribute type 23 has an invalid length. [ 1522.715686][T25685] netlink: 'syz.0.7596': attribute type 23 has an invalid length. [ 1522.753287][T25688] netlink: 'syz.1.7588': attribute type 29 has an invalid length. [ 1522.763879][T25688] netlink: 'syz.1.7588': attribute type 29 has an invalid length. [ 1522.997684][T25694] syzkaller0: entered promiscuous mode [ 1628.650494][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1628.657420][ C1] rcu: 1-...!: (10501 ticks this GP) idle=aca4/1/0x4000000000000000 softirq=141840/1866660 fqs=0 [ 1628.669593][ C1] rcu: (t=10502 jiffies g=223149 q=15 ncpus=2) [ 1628.675998][ C1] rcu: rcu_preempt kthread starved for 10503 jiffies! g223149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1628.687347][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1628.697382][ C1] rcu: RCU grace-period kthread stack dump: [ 1628.703395][ C1] task:rcu_preempt state:R running task stack:26728 pid:17 ppid:2 flags:0x00004000 [ 1628.714551][ C1] Call Trace: [ 1628.717898][ C1] [ 1628.720899][ C1] __schedule+0x14d2/0x44d0 [ 1628.725502][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1628.731476][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1628.736755][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1628.742980][ C1] ? asan.module_dtor+0x20/0x20 [ 1628.748003][ C1] ? enqueue_timer+0x225/0x530 [ 1628.753035][ C1] ? __mod_timer+0x984/0xdb0 [ 1628.757721][ C1] schedule+0xbd/0x170 [ 1628.761947][ C1] schedule_timeout+0x160/0x280 [ 1628.766886][ C1] ? console_conditional_schedule+0x40/0x40 [ 1628.772960][ C1] ? update_process_times+0x1b0/0x1b0 [ 1628.778435][ C1] ? prepare_to_swait_event+0x339/0x360 [ 1628.784093][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 1628.789028][ C1] ? rcu_gp_init+0x110e/0x1510 [ 1628.793960][ C1] ? rcu_gp_kthread+0x380/0x380 [ 1628.798874][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1628.804866][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1628.810205][ C1] ? rcu_gp_init+0x1510/0x1510 [ 1628.815026][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1628.821020][ C1] ? finish_swait+0xc7/0x1d0 [ 1628.825671][ C1] rcu_gp_kthread+0x99/0x380 [ 1628.830339][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1628.835517][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 1628.840511][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1628.845628][ C1] kthread+0x2fa/0x390 [ 1628.849746][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1628.855126][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1628.859766][ C1] ret_from_fork+0x48/0x80 [ 1628.864244][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1628.868938][ C1] ret_from_fork_asm+0x11/0x20 [ 1628.873841][ C1] [ 1628.876919][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1628.883312][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1628.888573][ C0] NMI backtrace for cpu 0 [ 1628.888591][ C0] CPU: 0 PID: 25707 Comm: syz.3.7599 Not tainted 6.6.102-syzkaller #0 [ 1628.888609][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1628.888618][ C0] RIP: 0010:__lock_acquire+0x3a7/0x7c80 [ 1628.888644][ C0] Code: 20 48 89 4c 24 10 48 c1 e9 03 48 89 4c 24 48 42 0f b6 04 01 84 c0 0f 85 bd 64 00 00 4c 8b 75 18 b8 00 e0 ff ff 41 23 44 24 20 <41> 81 e5 ff 1f 00 00 44 09 e8 41 89 44 24 20 4c 89 a4 24 90 00 00 [ 1628.888658][ C0] RSP: 0018:ffffc900000075e0 EFLAGS: 00000006 [ 1628.888672][ C0] RAX: 00000000000c4000 RBX: 0000000000000000 RCX: 1ffff11004166525 [ 1628.888683][ C0] RDX: ffff888020b32900 RSI: 0000000000000001 RDI: ffffffff8cd2fbe0 [ 1628.888695][ C0] RBP: ffffc90000007828 R08: dffffc0000000000 R09: 0000000000000001 [ 1628.888707][ C0] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: ffff888020b32908 [ 1628.888719][ C0] R13: 0000000000000021 R14: ffffffff81ac4d14 R15: 0000000000000000 [ 1628.888730][ C0] FS: 00007f7d09d8a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1628.888745][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1628.888756][ C0] CR2: 0000000100000000 CR3: 000000005d54f000 CR4: 00000000003506f0 [ 1628.888771][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1628.888780][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1628.888790][ C0] Call Trace: [ 1628.888795][ C0] [ 1628.888839][ C0] ? perf_trace_buf_alloc+0x131/0x290 [ 1628.888870][ C0] ? perf_trace_lock+0x193/0x380 [ 1628.888903][ C0] ? verify_lock_unused+0x140/0x140 [ 1628.888930][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 1628.888957][ C0] ? perf_swevent_get_recursion_context+0xde/0x150 [ 1628.888991][ C0] ? trace_call_bpf+0xc3/0x690 [ 1628.889032][ C0] lock_acquire+0x197/0x410 [ 1628.889050][ C0] ? perf_event_output_forward+0x94/0x3a0 [ 1628.889074][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1628.889105][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1628.889126][ C0] ? trace_call_bpf+0xc3/0x690 [ 1628.889150][ C0] ? trace_call_bpf+0xc3/0x690 [ 1628.889177][ C0] ? trace_call_bpf+0x5ba/0x690 [ 1628.889215][ C0] perf_event_output_forward+0xb5/0x3a0 [ 1628.889231][ C0] ? perf_event_output_forward+0x94/0x3a0 [ 1628.889252][ C0] ? perf_event_output_forward+0x94/0x3a0 [ 1628.889270][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 1628.889304][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1628.889330][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1628.889356][ C0] __perf_event_overflow+0x447/0x630 [ 1628.889389][ C0] perf_swevent_hrtimer+0x3bc/0x530 [ 1628.889429][ C0] ? cpu_clock_event_read+0x40/0x40 [ 1628.889507][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1628.889536][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1628.889559][ C0] ? debug_object_deactivate+0x67/0x350 [ 1628.889603][ C0] __hrtimer_run_queues+0x4df/0xc40 [ 1628.889634][ C0] ? cpu_clock_event_read+0x40/0x40 [ 1628.889681][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1628.889700][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1628.889738][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 1628.889806][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1628.889834][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1628.889860][ C0] [ 1628.889865][ C0] [ 1628.889872][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1628.889905][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x532/0x9d0 [ 1628.889923][ C0] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1b 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 1628.889937][ C0] RSP: 0018:ffffc90003187560 EFLAGS: 00000206 [ 1628.889950][ C0] RAX: 0000000000000000 RBX: ffffffff8ce135e0 RCX: 0000000000080000 [ 1628.889961][ C0] RDX: ffffc9000da2d000 RSI: 00000000000119a9 RDI: 00000000000119aa [ 1628.889972][ C0] RBP: ffffc90003187650 R08: ffffffff90da350f R09: 1ffffffff21b46a1 [ 1628.889984][ C0] R10: dffffc0000000000 R11: fffffbfff21b46a2 R12: 1ffff110171c0001 [ 1628.889997][ C0] R13: 00000000fffff95d R14: 1ffffffff19c26bc R15: dffffc0000000000 [ 1628.890057][ C0] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 1628.890096][ C0] do_raw_spin_lock+0x24e/0x2c0 [ 1628.890126][ C0] ? __rwlock_init+0x150/0x150 [ 1628.890146][ C0] ? rcu_is_watching+0x15/0xb0 [ 1628.890170][ C0] ? kmem_cache_alloc_node+0x17f/0x330 [ 1628.890196][ C0] ? alloc_vmap_area+0x1c4/0x1c70 [ 1628.890228][ C0] alloc_vmap_area+0x287/0x1c70 [ 1628.890290][ C0] ? vm_map_ram+0xcb0/0xcb0 [ 1628.890317][ C0] ? rcu_is_watching+0x15/0xb0 [ 1628.890349][ C0] __get_vm_area_node+0x162/0x370 [ 1628.890386][ C0] __vmalloc_node_range+0x36e/0x1320 [ 1628.890410][ C0] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1628.890431][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1628.890448][ C0] ? mark_lock+0x94/0x320 [ 1628.890491][ C0] ? trace_call_bpf+0x5ba/0x690 [ 1628.890520][ C0] ? trace_call_bpf+0xc3/0x690 [ 1628.890555][ C0] ? free_vm_area+0x50/0x50 [ 1628.890575][ C0] ? preempt_schedule_common+0x82/0xc0 [ 1628.890597][ C0] ? end_current_label_crit_section+0x170/0x170 [ 1628.890617][ C0] ? preempt_schedule+0xab/0xc0 [ 1628.890638][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1628.890659][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1628.890692][ C0] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1628.890711][ C0] __vmalloc+0x7a/0x90 [ 1628.890733][ C0] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1628.890754][ C0] bpf_prog_alloc_no_stats+0x47/0x440 [ 1628.890770][ C0] ? bpf_prog_alloc+0x2b/0x1b0 [ 1628.890795][ C0] bpf_prog_alloc+0x3d/0x1b0 [ 1628.890821][ C0] bpf_prog_load+0x6b8/0x16d0 [ 1628.890862][ C0] ? map_freeze+0x420/0x420 [ 1628.890898][ C0] ? __might_fault+0xaa/0x120 [ 1628.890918][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1628.890935][ C0] ? bpf_obj_get_user+0x308/0x460 [ 1628.890963][ C0] ? __might_fault+0xaa/0x120 [ 1628.890979][ C0] ? __might_fault+0xc6/0x120 [ 1628.890993][ C0] ? __might_fault+0xaa/0x120 [ 1628.891011][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 1628.891032][ C0] ? security_bpf+0x7e/0xa0 [ 1628.891058][ C0] __sys_bpf+0x55a/0x800 [ 1628.891081][ C0] ? bpf_link_show_fdinfo+0x350/0x350 [ 1628.891129][ C0] ? lock_chain_count+0x20/0x20 [ 1628.891166][ C0] __x64_sys_bpf+0x7c/0x90 [ 1628.891185][ C0] do_syscall_64+0x55/0xb0 [ 1628.891203][ C0] ? clear_bhb_loop+0x40/0x90 [ 1628.891217][ C0] ? clear_bhb_loop+0x40/0x90 [ 1628.891237][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1628.891263][ C0] RIP: 0033:0x7f7d08f8ebe9 [ 1628.891279][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1628.891293][ C0] RSP: 002b:00007f7d09d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1628.891309][ C0] RAX: ffffffffffffffda RBX: 00007f7d091b5fa0 RCX: 00007f7d08f8ebe9 [ 1628.891320][ C0] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1628.891331][ C0] RBP: 00007f7d09011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1628.891341][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1628.891351][ C0] R13: 00007f7d091b6038 R14: 00007f7d091b5fa0 R15: 00007ffe048d1548 [ 1628.891391][ C0] [ 1628.891578][ C1] CPU: 1 PID: 22128 Comm: kworker/1:1 Not tainted 6.6.102-syzkaller #0 [ 1629.603808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1629.613903][ C1] Workqueue: events drain_vmap_area_work [ 1629.619852][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x81/0x120 [ 1629.626514][ C1] Code: 00 00 00 b9 01 00 00 00 48 85 c0 0f 84 ae 00 00 00 41 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 05 a4 29 7e 7e 45 31 c9 eb 08 <49> ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 92 29 7e 7e 41 [ 1629.646291][ C1] RSP: 0018:ffffc900001f0470 EFLAGS: 00000246 [ 1629.652547][ C1] RAX: 0000000000000020 RBX: 0000017b33337f1e RCX: 0000000000000005 [ 1629.660574][ C1] RDX: ffffffff8188902d RSI: ffffffff8cd79820 RDI: 0000000000000004 [ 1629.668629][ C1] RBP: 0000000000000004 R08: ffff888022fa3c00 R09: 0000000000000009 [ 1629.676665][ C1] R10: 0000000000000009 R11: 0000000000000100 R12: ffff88801c676024 [ 1629.684688][ C1] R13: f800000000000000 R14: 0000000000000014 R15: 0000000000028ec4 [ 1629.692699][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1629.701745][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1629.708388][ C1] CR2: 0000001b2e511ff8 CR3: 0000000061718000 CR4: 00000000003506e0 [ 1629.716436][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1629.724560][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1629.732605][ C1] Call Trace: [ 1629.735934][ C1] [ 1629.738830][ C1] check_buffer+0x24d/0x950 [ 1629.743421][ C1] __rb_reserve_next+0x511/0xd50 [ 1629.748494][ C1] ring_buffer_lock_reserve+0xae1/0xed0 [ 1629.754103][ C1] ? mark_lock+0x94/0x320 [ 1629.758556][ C1] trace_event_buffer_lock_reserve+0x1d0/0x6e0 [ 1629.764787][ C1] trace_event_buffer_reserve+0x29b/0x3c0 [ 1629.770574][ C1] ? trace_event_ignore_this_pid+0x130/0x130 [ 1629.776664][ C1] trace_event_raw_event_bpf_trace_printk+0x101/0x210 [ 1629.783500][ C1] ? __probestub_bpf_trace_printk+0x10/0x10 [ 1629.789497][ C1] ? __asan_memcpy+0x40/0x70 [ 1629.794151][ C1] trace_bpf_trace_printk+0x142/0x1a0 [ 1629.799620][ C1] bpf_trace_printk+0x11f/0x190 [ 1629.804639][ C1] ? bpf_probe_write_user+0xe0/0xe0 [ 1629.810187][ C1] ? trace_call_bpf+0xc3/0x690 [ 1629.815121][ C1] ? trace_call_bpf+0x5ba/0x690 [ 1629.820072][ C1] bpf_prog_0605f9f479290f07+0x37/0x3b [ 1629.825689][ C1] bpf_trace_run1+0x1c9/0x3b0 [ 1629.830433][ C1] ? bpf_trace_run1+0xd6/0x3b0 [ 1629.835269][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 1629.840733][ C1] ? __bpf_trace_rcu_utilization+0x95/0xe0 [ 1629.846861][ C1] __bpf_trace_rcu_utilization+0xa2/0xe0 [ 1629.852668][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 1629.858923][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 1629.864909][ C1] trace_rcu_utilization+0x179/0x1a0 [ 1629.870300][ C1] rcu_core+0x12d/0x1720 [ 1629.874817][ C1] ? try_to_wake_up+0x454/0x1140 [ 1629.879865][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1629.884981][ C1] ? __rwlock_init+0x150/0x150 [ 1629.889823][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1629.895098][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1629.900390][ C1] ? sched_clock+0x3f/0x60 [ 1629.904873][ C1] ? mark_lock+0x94/0x320 [ 1629.909275][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1629.915339][ C1] ? lock_chain_count+0x20/0x20 [ 1629.920256][ C1] ? try_to_wake_up+0x724/0x1140 [ 1629.925290][ C1] handle_softirqs+0x280/0x820 [ 1629.930127][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1629.934938][ C1] ? do_softirq+0x180/0x180 [ 1629.939507][ C1] ? irq_work_single+0x199/0x230 [ 1629.944504][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1629.950212][ C1] __irq_exit_rcu+0xc7/0x190 [ 1629.954895][ C1] ? irq_exit_rcu+0x20/0x20 [ 1629.959550][ C1] ? rcu_is_watching+0x15/0xb0 [ 1629.964368][ C1] irq_exit_rcu+0x9/0x20 [ 1629.968671][ C1] sysvec_irq_work+0xa1/0xc0 [ 1629.973338][ C1] [ 1629.976396][ C1] [ 1629.979386][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 1629.984393][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 1629.990623][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 39 58 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 1630.010294][ C1] RSP: 0018:ffffc90016d5f6e0 EFLAGS: 00000206 [ 1630.016453][ C1] RAX: ffe55881077dda00 RBX: 1ffff92002dabee4 RCX: ffe55881077dda00 [ 1630.024568][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 1630.032601][ C1] RBP: ffffc90016d5f7d8 R08: ffffffff90da3507 R09: 1ffffffff21b46a0 [ 1630.040621][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a1 R12: ffffffff8cd35400 [ 1630.048632][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002 [ 1630.056710][ C1] ? free_unref_page_prepare+0x7ce/0x8e0 [ 1630.062431][ C1] ? free_unref_page+0x32/0x2e0 [ 1630.067443][ C1] ? kasan_depopulate_vmalloc_pte+0x75/0x90 [ 1630.073491][ C1] ? __apply_to_page_range+0x84c/0xd50 [ 1630.079024][ C1] ? kasan_populate_vmalloc_pte+0xf0/0x100 [ 1630.084919][ C1] ? drain_vmap_area_work+0x40/0xd0 [ 1630.090223][ C1] ? process_scheduled_works+0xa45/0x15b0 [ 1630.096019][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1630.101016][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1630.106025][ C1] ? page_ext_get+0x22/0x2b0 [ 1630.110689][ C1] ? page_ext_get+0x1e2/0x2b0 [ 1630.115536][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1630.120377][ C1] page_ext_put+0x95/0xb0 [ 1630.124791][ C1] free_unref_page_prepare+0x7ce/0x8e0 [ 1630.130518][ C1] free_unref_page+0x32/0x2e0 [ 1630.135277][ C1] kasan_depopulate_vmalloc_pte+0x75/0x90 [ 1630.141058][ C1] __apply_to_page_range+0x84c/0xd50 [ 1630.146443][ C1] ? kasan_release_vmalloc+0xb0/0xb0 [ 1630.151811][ C1] ? apply_to_page_range+0x50/0x50 [ 1630.156983][ C1] ? slab_free_freelist_hook+0x130/0x1b0 [ 1630.162692][ C1] ? __purge_vmap_area_lazy+0x1204/0x1990 [ 1630.168469][ C1] ? kmem_cache_free+0xf8/0x280 [ 1630.173477][ C1] kasan_release_vmalloc+0x97/0xb0 [ 1630.178647][ C1] __purge_vmap_area_lazy+0x1640/0x1990 [ 1630.184333][ C1] ? purge_fragmented_block+0x3e0/0x3e0 [ 1630.190038][ C1] drain_vmap_area_work+0x40/0xd0 [ 1630.195116][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1630.200877][ C1] process_scheduled_works+0xa45/0x15b0 [ 1630.206536][ C1] ? assign_work+0x400/0x400 [ 1630.211229][ C1] ? assign_work+0x39e/0x400 [ 1630.215887][ C1] worker_thread+0xa55/0xfc0 [ 1630.220694][ C1] kthread+0x2fa/0x390 [ 1630.224846][ C1] ? pr_cont_work+0x560/0x560 [ 1630.229583][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1630.234211][ C1] ret_from_fork+0x48/0x80 [ 1630.238689][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1630.243355][ C1] ret_from_fork_asm+0x11/0x20 [ 1630.248291][ C1]