last executing test programs: 5.732514286s ago: executing program 1 (id=6315): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$unix(r3, &(0x7f00000028c0)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xb5bca4f2212a7ef0}, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) r6 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) 5.455386297s ago: executing program 1 (id=6318): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x8, 0x3, 0x7, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700), 0x10, 0x8001}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000880)={r4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff484f}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@fwd={0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/256, 0x4a, 0x100, 0x1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000d3893699708f671a64"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="120000000c0000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f0000000500), &(0x7f0000000400)=""/198}, 0x20) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000240)) sendmsg(r3, &(0x7f0000000540)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x43, 0xca, "e9d11e0f884bf9d1dd58dee5fc3bc76fcdf6c43cebbbff25a7348ef52b41ff545c75a909a774324d6f6b9759059b44cf991d641e9c3fba4b2f8882026d8df9", 0x35}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="86d16605c6e9816033995e1b578d25978ea5ed19fb8d374dbf3c694c86ad9b67e3e44e10ff1b290fff1f9c722e85ee83f1c125d6ca40dc5feff0a93e4cd029f62acfbc2deea2dcc4f0a58ec5d33d8b85648bff7e649ada2b9bbf781171391b9cfb952b16f26649af07d02e76936f9a5db4e1fe3587f199787ae76057daada8b4ed5c4b0752821fabc01a256fab641d86665bb811f92455e48fa3a4a290419ba51005cfad18604720cd03a3ae5a7493237f2822cea1a2f30a", 0xb8}, {&(0x7f0000000900)="4f4e92f1a995c5f52285bec97297e31ae1b1b9c5a550b4a7cc4d09695336c4b482320ea7f44e9d9aa909ecbec8a3c377695430ca62ee63806092baee8f76dddaddf206ad014f51b9cc163d35b0c2ff2f0317b2571b0b8c5c85dca26b896f245139260f48f97322722adde081597314cd901d0aab7087a6a9f794637b22862808b46d60b4c0478e08f255dea8b3eab3616d2d1808d55b13a897418e907eeffede1b", 0xa1}, {&(0x7f0000001980)}], 0x3, &(0x7f0000002980)=ANY=[@ANYBLOB="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"], 0x1258}, 0x4000080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) syz_clone(0x41f, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.547288343s ago: executing program 1 (id=6328): socket$kcm(0xa, 0x2, 0x88) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac"], 0xcfa4) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000140)=r2, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x74, &(0x7f00000000c0)=[{&(0x7f0000000300)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e800a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x10300, &(0x7f0000000200)="296d89f08bb270343599a7be142d3eeeed4b65a66efffff4ca0b2d62090ad793806edcd705d33b796da8163ac1da0137b8c3c0f606beb5f285f45a7d9ab887cc881473634ebe1cf8654444689feccf5650c94e1743810e1fe518faa0cfa07524c762365e56bba7ab", 0x68, &(0x7f0000000480), &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x80, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x5, 0x400ffff, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8001}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1241, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0x12b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 4.476592552s ago: executing program 4 (id=6329): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000ad0572ce9b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close(r1) socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twmr'], 0xa) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0xb2) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup=r2, 0x4, 0x0, 0x8cf, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) 4.077856422s ago: executing program 1 (id=6332): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000"], 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 3.896267992s ago: executing program 1 (id=6334): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) 3.851961998s ago: executing program 1 (id=6335): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$can_j1939(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/126, 0x7e}, {0x0}], 0x2}, 0x22) 1.632512607s ago: executing program 2 (id=6347): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e9"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r2) 1.459939132s ago: executing program 4 (id=6350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x11, &(0x7f0000001180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xb2e1, 0xb6, &(0x7f00000002c0)=""/182, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x3, 0x9, 0x1a}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[{0x2, 0x3, 0x5, 0xa}], 0x10, 0x5}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001140)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x4, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000c80)='syzkaller\x00', 0x4, 0xd9, &(0x7f0000000cc0)=""/217, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x0, 0x9, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000e00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000e40)=[{0x5, 0x2, 0x2, 0x6}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001040)={@cgroup, 0x13, 0x0, 0xb6e, &(0x7f0000000f40)=[0x0], 0x1, 0x0, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001100)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001240)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB, @ANYRES64=r5], 0x20) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="880000000000000000000000070000000144185110000000050000010800100000000000e50000000200440cff43ac1414aa0000000c440eaca37b33c2e434127403559100830e2b053b07942ca5df4ad3e0a14434aa21ac1e0001000000080a01010100000c250a010100000000090a010100000000b40a01010200000001e0000002ffffffff001400000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001ffffffff000000001c"], 0x150}, 0x4840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x10000, 0x9, 0x140000, 0x202, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/19, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x890b, &(0x7f0000000100)) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4000080) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02009dffffff"}) 1.40772695s ago: executing program 2 (id=6351): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)='j', 0x1}], 0x1}, 0x20004800) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108907, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.304405349s ago: executing program 4 (id=6353): perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000005d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x625}, 0xc010, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x28, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000700)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}, 0x4000000) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r1, 0xc00}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 1.225278877s ago: executing program 3 (id=6355): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x9, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000003c00010325bd7000fcffffff0600000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x24040000) 1.042396788s ago: executing program 0 (id=6357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x2009, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xbbf, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x26, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x0, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x61b1}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x8000007, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0x4, 0x40, 0x863, 0x1000002}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x3, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x7fff, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xd}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 903.029575ms ago: executing program 2 (id=6358): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x30, 0x0, 0x20000) 897.086019ms ago: executing program 3 (id=6359): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x105010, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd1c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000440), 0x3d) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) close(r3) 795.740128ms ago: executing program 4 (id=6360): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4104c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x814, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000"], 0xcfa4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 773.729415ms ago: executing program 0 (id=6361): r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 684.591851ms ago: executing program 3 (id=6362): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2c, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x100) 683.48549ms ago: executing program 2 (id=6363): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2a105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0x64d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 613.34422ms ago: executing program 0 (id=6364): perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b400000000000000611008000000000063e0f0ff000000009500000c00000000fef1136beb5eae0e173d5c4de0ce7d92761cacc4224a11959cdd6d3218a5c8839bfcc231a81588e3c5f24416a5031c37edba9d3c691c557c6541b8704e5c569a1d43ea950bac4888d4bff3a9bbd40752237265"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x7}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 592.701006ms ago: executing program 3 (id=6365): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$can_j1939(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/126, 0x7e}, {0x0}], 0x2}, 0x22) 455.852251ms ago: executing program 0 (id=6366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bpf(0x0, 0x0, 0x0, 0x1004800, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) setsockopt$sock_attach_bpf(r3, 0x29, 0x30, 0x0, 0x20000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0xc, 0xec, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) 431.537059ms ago: executing program 4 (id=6367): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)='j', 0x1}], 0x1}, 0x20004800) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108907, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 339.581308ms ago: executing program 0 (id=6368): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x9, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000003c00010325bd7000fcffffff0600000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x24040000) 286.750086ms ago: executing program 2 (id=6369): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x3, 0x0, 0x5) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$sock(r1, 0x0, 0x84) close(0x3) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xe7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x80) mount$bpf(0x200000000000, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x1a4, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x2, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "1a000b0000849a7390450024000000004403000000c3d6db74b3850040000000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x1a4}}, 0x44050) 269.290532ms ago: executing program 3 (id=6370): perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000005d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x625}, 0xc010, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x28, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000700)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}, 0x4000000) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r1, 0xc00}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 79.567763ms ago: executing program 2 (id=6371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x2009, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xbbf, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x26, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x0, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x61b1}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x8000007, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0x4, 0x40, 0x863, 0x1000002}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x3, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x7fff, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xd}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 53.194731ms ago: executing program 4 (id=6372): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x36}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 8.998841ms ago: executing program 3 (id=6373): r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=6374): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x61]}}, &(0x7f0000000340)=""/81, 0x27, 0x51, 0x1, 0x5}, 0x28) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000040)="7b5515ccc8bca12641e65d58fd1a12f63952868d811b21d40ede8a2683ec657ae641e7d9876a18da8083b3", 0x0, 0x8001, 0x0, 0x0, 0x50}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x35, &(0x7f00000005c0), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ace: batadv_slave_0 [ 355.999655][T14111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.015398][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.068921][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.094769][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.101724][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.166677][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.317416][ T35] team0: left allmulticast mode [ 356.323072][ T35] team_slave_0: left allmulticast mode [ 356.328663][ T35] team_slave_1: left allmulticast mode [ 356.359393][ T35] team0: left promiscuous mode [ 356.369480][ T35] team_slave_0: left promiscuous mode [ 356.379801][ T35] team_slave_1: left promiscuous mode [ 356.390660][ T35] bridge0: port 3(team0) entered disabled state [ 356.404410][ T35] bridge_slave_1: left allmulticast mode [ 356.410073][ T35] bridge_slave_1: left promiscuous mode [ 356.433114][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.445642][ T35] bridge_slave_0: left allmulticast mode [ 356.452163][ T35] bridge_slave_0: left promiscuous mode [ 356.452976][T14134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.458500][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.633463][T14141] netlink: 'syz.0.2839': attribute type 39 has an invalid length. [ 356.961484][T13996] hsr_slave_0: entered promiscuous mode [ 356.969188][T13996] hsr_slave_1: entered promiscuous mode [ 356.978043][T13996] debugfs: 'hsr0' already exists in 'hsr' [ 356.987000][T13996] Cannot create hsr debugfs directory [ 357.112445][ T50] Bluetooth: hci5: command tx timeout [ 357.192198][T14151] netlink: 'syz.3.2844': attribute type 7 has an invalid length. [ 357.299130][T14159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.816138][T14186] netlink: 'syz.0.2855': attribute type 39 has an invalid length. [ 358.068490][T14197] netlink: 'syz.0.2859': attribute type 7 has an invalid length. [ 358.099255][T14199] __nla_validate_parse: 3 callbacks suppressed [ 358.099285][T14199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2860'. [ 358.516112][T13996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 358.530962][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 358.555656][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2865'. [ 358.640518][ T35] hsr_slave_0: left promiscuous mode [ 358.657499][ T35] hsr_slave_1: left promiscuous mode [ 358.680694][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.700968][T14232] netlink: 'syz.1.2868': attribute type 39 has an invalid length. [ 358.719710][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.938900][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.947860][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.990445][ T35] veth1_macvtap: left promiscuous mode [ 358.997037][ T35] veth0_macvtap: left promiscuous mode [ 359.004760][ T35] veth1_vlan: left promiscuous mode [ 359.010374][ T35] veth0_vlan: left promiscuous mode [ 359.202515][ T5826] Bluetooth: hci5: command tx timeout [ 359.787809][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2874'. [ 359.804604][ T35] team0 (unregistering): Port device team_slave_1 removed [ 359.839864][ T35] team0 (unregistering): Port device team_slave_0 removed [ 359.992818][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 360.071382][T13996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 360.117426][T13996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.618466][T13996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 360.978949][T13996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.000175][T13996] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.021491][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.028645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.075818][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.082984][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.272867][ T50] Bluetooth: hci5: command tx timeout [ 361.535369][T14309] netlink: 'syz.0.2895': attribute type 7 has an invalid length. [ 361.825665][T13996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.225714][T13996] veth0_vlan: entered promiscuous mode [ 363.257070][T13996] veth1_vlan: entered promiscuous mode [ 363.312117][T13996] veth0_macvtap: entered promiscuous mode [ 363.329157][T13996] veth1_macvtap: entered promiscuous mode [ 363.379699][T13996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.413964][T13996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.478944][ T63] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.489767][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.729280][ T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.738083][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.822468][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.843819][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.884278][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.894500][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.311136][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.324377][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.332522][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.341255][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.351963][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.433992][T14374] lo speed is unknown, defaulting to 1000 [ 365.467650][T14374] chnl_net:caif_netlink_parms(): no params data found [ 365.652216][ T5820] team0: Port device c@0Ù removed [ 365.981389][ T7765] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.171858][ T7765] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.327903][ T7765] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.363938][T14374] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.396080][ T50] Bluetooth: hci3: command tx timeout [ 366.404259][T14374] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.423166][T14374] bridge_slave_0: entered allmulticast mode [ 366.456051][T14374] bridge_slave_0: entered promiscuous mode [ 366.474653][T14374] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.481952][T14374] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.490099][T14374] bridge_slave_1: entered allmulticast mode [ 366.500324][T14374] bridge_slave_1: entered promiscuous mode [ 366.603043][ T7765] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.712036][T14374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.735581][T14374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.815984][T14374] team0: Port device team_slave_0 added [ 366.830627][T14374] team0: Port device team_slave_1 added [ 367.090718][T14374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.181654][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.409089][T14374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.462731][T14374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.487927][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.593342][T14374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.941186][T14374] hsr_slave_0: entered promiscuous mode [ 367.947935][T14374] hsr_slave_1: entered promiscuous mode [ 367.954731][T14374] debugfs: 'hsr0' already exists in 'hsr' [ 367.960695][T14374] Cannot create hsr debugfs directory [ 368.171668][T14455] netlink: 'syz.4.2951': attribute type 6 has an invalid length. [ 368.180907][T14455] netlink: 3652 bytes leftover after parsing attributes in process `syz.4.2951'. [ 368.191371][T14455] netlink: 'syz.4.2951': attribute type 1 has an invalid length. [ 368.472541][ T50] Bluetooth: hci3: command tx timeout [ 369.501001][T14495] netlink: 'syz.4.2968': attribute type 39 has an invalid length. [ 370.552582][ T50] Bluetooth: hci3: command tx timeout [ 370.613639][T14529] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2985'. [ 370.709992][ T7765] hsr0: left allmulticast mode [ 370.715166][ T7765] hsr_slave_0: left allmulticast mode [ 370.720556][ T7765] hsr_slave_1: left allmulticast mode [ 370.726761][ T7765] bridge0: port 3(hsr0) entered disabled state [ 370.734542][ T7765] bridge_slave_1: left allmulticast mode [ 370.740306][ T7765] bridge_slave_1: left promiscuous mode [ 370.747159][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.757597][ T7765] bridge_slave_0: left allmulticast mode [ 370.763577][ T7765] bridge_slave_0: left promiscuous mode [ 370.769405][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.905303][T14580] netlink: 'syz.0.3003': attribute type 39 has an invalid length. [ 372.633086][ T50] Bluetooth: hci3: command tx timeout [ 374.496779][T14569] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 375.321492][ T7765] hsr_slave_0: left promiscuous mode [ 375.370544][ T7765] hsr_slave_1: left promiscuous mode [ 375.393094][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.420452][T14613] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3011'. [ 375.429947][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.475003][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.492392][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.518469][ T7765] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 375.537455][ T7765] batman_adv: batadv0: Removing interface: virt_wifi0 [ 375.601584][ T7765] veth1_macvtap: left promiscuous mode [ 375.622693][ T7765] veth1_vlan: left allmulticast mode [ 375.637829][ T7765] veth1_vlan: left promiscuous mode [ 378.396592][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.404778][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.742704][ T7765] team0 (unregistering): Port device macvlan0 removed [ 378.948748][ T7765] team0 (unregistering): Port device team_slave_1 removed [ 378.984563][ T7765] team0 (unregistering): Port device team_slave_0 removed [ 379.082266][T14655] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3024'. [ 379.445701][ T5892] lo speed is unknown, defaulting to 1000 [ 379.461465][ T5892] infiniband syz1: ib_query_port failed (-19) [ 379.527788][T14374] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.588303][T14374] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.653621][T14374] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 379.665951][T14374] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 379.940461][T14374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.993837][T14374] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.007962][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.015132][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.063649][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.070783][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.890835][T14374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.020555][T14374] veth0_vlan: entered promiscuous mode [ 381.056733][T14374] veth1_vlan: entered promiscuous mode [ 381.151640][T14374] veth0_macvtap: entered promiscuous mode [ 381.176387][T14374] veth1_macvtap: entered promiscuous mode [ 381.223987][T14374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.249353][T14374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.294679][ T7765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.313253][ T7765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.333611][ T7765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.354182][ T7765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.889025][T14763] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3052'. [ 382.016921][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.043552][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.133430][ T7765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.147638][ T7765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.898448][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.913061][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.920743][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.932953][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.941371][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.963142][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.121937][T14845] netlink: 'syz.4.3078': attribute type 39 has an invalid length. [ 385.032489][ T50] Bluetooth: hci0: command tx timeout [ 386.234619][T14807] chnl_net:caif_netlink_parms(): no params data found [ 386.253234][T14850] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3081'. [ 386.278679][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.431083][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.559010][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.691803][T14807] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.708635][T14807] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.737849][T14807] bridge_slave_0: entered allmulticast mode [ 386.760084][T14807] bridge_slave_0: entered promiscuous mode [ 386.777043][T14807] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.786624][T14807] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.794302][T14807] bridge_slave_1: entered allmulticast mode [ 386.807934][T14807] bridge_slave_1: entered promiscuous mode [ 386.971862][T14888] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3095'. [ 387.007150][T14807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.037361][T14807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.112551][ T50] Bluetooth: hci0: command tx timeout [ 387.179580][T14807] team0: Port device team_slave_0 added [ 387.186590][ T63] bridge_slave_1: left allmulticast mode [ 387.192750][ T63] bridge_slave_1: left promiscuous mode [ 387.198479][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.214970][ T63] bridge_slave_0: left allmulticast mode [ 387.220623][ T63] bridge_slave_0: left promiscuous mode [ 387.231650][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.549704][ T63] team0: Port device geneve1 removed [ 387.641011][T14807] team0: Port device team_slave_1 added [ 387.821615][T14807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.839036][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.868644][T14807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.914573][ T63] : left promiscuous mode [ 387.980708][T14807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.000758][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.106714][T14807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.335754][T14807] hsr_slave_0: entered promiscuous mode [ 388.356856][T14807] hsr_slave_1: entered promiscuous mode [ 389.176053][ T63] hsr_slave_0: left promiscuous mode [ 389.192699][ T50] Bluetooth: hci0: command tx timeout [ 389.198167][ T63] hsr_slave_1: left promiscuous mode [ 389.208686][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.223073][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.275973][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.320599][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.381315][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3139'. [ 389.382239][ T63] veth1_macvtap: left promiscuous mode [ 389.415491][ T63] veth0_macvtap: left promiscuous mode [ 389.436413][T15008] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3137'. [ 389.456514][ T63] veth1_vlan: left promiscuous mode [ 389.463606][ T63] veth0_vlan: left promiscuous mode [ 389.511424][T15015] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3140'. [ 389.986307][ T63] team0 (unregistering): Port device team_slave_1 removed [ 390.012559][ T63] team0 (unregistering): Port device team_slave_0 removed [ 390.371029][T15053] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3153'. [ 390.952838][T15076] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 391.006195][T14807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.074161][T14807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.100172][T14807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.157318][T14807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.272421][ T50] Bluetooth: hci0: command tx timeout [ 391.339488][T14807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.362189][T14807] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.406342][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3170'. [ 391.417850][ T7969] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.425032][ T7969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.476176][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.483337][ T7969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.586962][T14807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.108622][T14807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.221180][T14807] veth0_vlan: entered promiscuous mode [ 392.240356][T14807] veth1_vlan: entered promiscuous mode [ 392.298885][T14807] veth0_macvtap: entered promiscuous mode [ 392.321446][T14807] veth1_macvtap: entered promiscuous mode [ 392.398569][T14807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.405821][T15166] netlink: 'syz.1.3185': attribute type 39 has an invalid length. [ 392.429919][T15167] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.3189'. [ 392.470714][T14807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.529904][ T7765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.555476][ T7765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.600323][ T7765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.623749][ T7765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.788955][ T7765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.824938][ T7765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.898065][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'. [ 392.930504][ T7765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.949438][ T7765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.151099][T15205] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.3202'. [ 393.528781][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.538012][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.548382][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.558814][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.568212][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.922930][ T50] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 394.043904][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 394.143061][T15244] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.3214'. [ 394.528319][ T386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.848956][ T386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.106542][ T50] Bluetooth: hci3: unexpected event 0x17 length: 151 > 6 [ 395.603617][ T50] Bluetooth: hci2: command tx timeout [ 396.509581][ T386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.638046][ T386] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.696072][T15218] chnl_net:caif_netlink_parms(): no params data found [ 396.956753][T15218] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.964225][T15218] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.971489][T15218] bridge_slave_0: entered allmulticast mode [ 396.979906][T15218] bridge_slave_0: entered promiscuous mode [ 396.988461][T15218] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.996272][T15218] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.005170][T15218] bridge_slave_1: entered allmulticast mode [ 397.014433][T15218] bridge_slave_1: entered promiscuous mode [ 397.169897][ T50] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 397.262969][T15218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.307396][T15218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.478709][T15218] team0: Port device team_slave_0 added [ 397.521994][T15218] team0: Port device team_slave_1 added [ 397.567236][ T386] bridge_slave_1: left allmulticast mode [ 397.578616][ T386] bridge_slave_1: left promiscuous mode [ 397.585742][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.598076][ T386] bridge_slave_0: left allmulticast mode [ 397.606478][ T386] bridge_slave_0: left promiscuous mode [ 397.622659][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.674319][ T50] Bluetooth: hci2: command tx timeout [ 397.979189][ T386] team0: Port device geneve1 removed [ 398.271466][ T50] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 398.369353][ T386] : left promiscuous mode [ 398.551535][T15352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3261'. [ 398.998874][ T50] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 399.752780][ T50] Bluetooth: hci2: command tx timeout [ 399.810344][ T50] Bluetooth: hci3: unexpected event 0x17 length: 151 > 6 [ 400.736688][T15412] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3286'. [ 401.440547][T15218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.447699][T15218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.475190][T15218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.550286][T15218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.568572][T15218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.657096][T15218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.832833][ T50] Bluetooth: hci2: command tx timeout [ 402.051440][T15218] hsr_slave_0: entered promiscuous mode [ 402.067267][T15218] hsr_slave_1: entered promiscuous mode [ 402.117483][T15218] debugfs: 'hsr0' already exists in 'hsr' [ 402.137834][T15218] Cannot create hsr debugfs directory [ 402.384323][ T50] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 405.561204][ T386] hsr_slave_0: left promiscuous mode [ 405.585236][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3299'. [ 405.588486][ T386] hsr_slave_1: left promiscuous mode [ 405.623658][ T386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.652077][ T386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.675025][ T386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.692402][ T386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.716916][ T386] veth1_macvtap: left promiscuous mode [ 405.729819][ T386] veth0_macvtap: left promiscuous mode [ 405.742774][ T386] veth1_vlan: left promiscuous mode [ 405.752748][ T386] veth0_vlan: left promiscuous mode [ 408.439539][ T50] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 408.499886][ T63] smc: removing ib device !yz2 [ 408.513890][ T386] team0 (unregistering): Port device team_slave_1 removed [ 408.531679][ T386] team0 (unregistering): Port device team_slave_0 removed [ 408.596723][T15546] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.3311'. [ 408.616974][T15546] IPv6: NLM_F_CREATE should be specified when creating new route [ 408.631330][T15548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3312'. [ 408.746886][T10993] !yz2: Port: 1 Link DOWN [ 409.263270][T15576] netlink: 'syz.4.3317': attribute type 39 has an invalid length. [ 411.371348][T15601] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.3320'. [ 411.924389][T15616] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3324'. [ 412.385373][T15635] netlink: 'syz.2.3329': attribute type 39 has an invalid length. [ 412.710759][T15218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 412.746021][T15218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 412.784821][T15218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 412.809738][T15218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.105696][T15218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.160581][T15218] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.220084][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.227290][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.362248][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.369473][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.441293][T15684] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.3338'. [ 413.764495][T15703] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.3342'. [ 414.033175][T15218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.096313][T15218] veth0_vlan: entered promiscuous mode [ 414.128956][T15218] veth1_vlan: entered promiscuous mode [ 414.214419][T15218] veth0_macvtap: entered promiscuous mode [ 414.238858][T15218] veth1_macvtap: entered promiscuous mode [ 414.287273][T15218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.316217][T15218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.355853][ T7767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.385510][ T7767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.413500][ T7767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.428994][ T7767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.446071][T15735] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.3352'. [ 414.593016][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.616960][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.695184][ T7767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.712206][ T7767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.774026][T15749] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3356'. [ 415.428249][T15788] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3366'. [ 416.388906][T15836] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.3381'. [ 417.612608][ T50] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 419.689312][ T50] Bluetooth: hci5: unexpected event 0x16 length: 151 > 6 [ 420.301760][T15988] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3441'. [ 421.140461][T16015] netlink: 'syz.4.3451': attribute type 39 has an invalid length. [ 421.328692][T16017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3453'. [ 421.891178][T16056] netlink: 'syz.1.3466': attribute type 33 has an invalid length. [ 421.903045][T16056] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3466'. [ 421.936070][T16056] `: renamed from syz_tun (while UP) [ 422.108508][T16066] netlink: 'syz.1.3467': attribute type 39 has an invalid length. [ 423.048868][T16114] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3485'. [ 423.082716][T16114] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3485'. [ 432.964045][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3538'. [ 435.931584][T16280] netlink: 'syz.1.3545': attribute type 5 has an invalid length. [ 436.328897][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3557'. [ 438.332146][T16353] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3574'. [ 438.448129][ T50] Bluetooth: hci3: unexpected event 0x16 length: 151 > 6 [ 438.857120][T16375] netlink: 'syz.0.3580': attribute type 39 has an invalid length. [ 439.836927][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.844480][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.218726][T16415] netlink: 'syz.1.3597': attribute type 39 has an invalid length. [ 440.453879][T16422] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3603'. [ 443.399573][T16455] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3615'. [ 443.456159][T16456] netlink: 'syz.1.3613': attribute type 39 has an invalid length. [ 446.106087][T16481] netlink: 822 bytes leftover after parsing attributes in process `syz.1.3624'. [ 446.116474][T16481] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 446.432068][ T50] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 446.436092][ T50] Bluetooth: hci3: connection err: -111 [ 446.635663][T16494] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3629'. [ 448.094246][T16528] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.3644'. [ 448.441379][T16539] netlink: 'syz.0.3647': attribute type 10 has an invalid length. [ 451.361583][T16564] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3658'. [ 454.967837][T16644] syzkaller0: entered promiscuous mode [ 454.982922][T16644] syzkaller0: entered allmulticast mode [ 455.018592][T16644] PF_CAN: dropped non conform CAN skbuff: dev type 63445, len 65487 [ 455.540448][ T50] Bluetooth: hci3: unexpected event 0x16 length: 151 > 6 [ 457.801442][T16683] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3705'. [ 458.157916][T16707] netlink: 'syz.2.3714': attribute type 39 has an invalid length. [ 458.192969][ T50] Bluetooth: hci5: unexpected event 0x17 length: 151 > 6 [ 459.375963][T16741] netlink: 'syz.4.3728': attribute type 39 has an invalid length. [ 459.540051][ T50] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 460.105346][T16780] netlink: 'syz.4.3745': attribute type 39 has an invalid length. [ 460.265729][T16793] netlink: 822 bytes leftover after parsing attributes in process `syz.1.3750'. [ 460.276247][T16793] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 464.069998][T16850] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3767'. [ 465.156440][T16899] syzkaller0: entered promiscuous mode [ 465.161953][T16899] syzkaller0: entered allmulticast mode [ 465.344998][T16903] netlink: 'syz.4.3789': attribute type 10 has an invalid length. [ 465.747369][ T50] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 466.096391][T16921] netlink: 'syz.0.3796': attribute type 1 has an invalid length. [ 468.750124][ T50] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 468.881906][T16948] netlink: 'syz.1.3807': attribute type 9 has an invalid length. [ 468.899604][T16948] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3807'. [ 469.432215][T16961] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3813'. [ 469.560700][ T50] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 469.650243][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3817'. [ 469.710910][ T50] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 469.840070][T16985] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3823'. [ 469.852707][T16981] netlink: 'syz.2.3821': attribute type 10 has an invalid length. [ 470.657995][ T50] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 471.069213][T17019] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3838'. [ 471.219585][T17025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3839'. [ 471.778545][ T50] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 473.447762][T17044] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3845'. [ 473.531607][T17054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3851'. [ 473.704106][T17067] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3857'. [ 473.721336][T17067] openvswitch: netlink: Key type 29 is not supported [ 473.849676][T17073] netlink: 'syz.4.3860': attribute type 10 has an invalid length. [ 474.026650][T17089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3867'. [ 474.048506][T17085] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3866'. [ 474.260693][T17106] openvswitch: netlink: Key type 29 is not supported [ 474.392821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.430277][T17114] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 474.440922][T17116] netlink: 'syz.3.3881': attribute type 10 has an invalid length. [ 474.618258][T17126] netlink: 'syz.4.3884': attribute type 61 has an invalid length. [ 474.876167][T17145] __nla_validate_parse: 2 callbacks suppressed [ 474.876200][T17145] netlink: 822 bytes leftover after parsing attributes in process `syz.1.3894'. [ 474.894835][T17145] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 475.263339][T17169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3905'. [ 475.427393][T17178] netlink: 822 bytes leftover after parsing attributes in process `syz.2.3908'. [ 475.437240][T17178] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 476.043133][T17213] netlink: 822 bytes leftover after parsing attributes in process `syz.0.3924'. [ 476.052622][T17213] bridge: RTM_NEWNEIGH with unconfigured vlan 1033 on bridge0 [ 476.077260][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3923'. [ 477.215580][T17284] netlink: 822 bytes leftover after parsing attributes in process `syz.0.3956'. [ 477.232535][T17284] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 477.373238][T17294] netlink: 'syz.0.3961': attribute type 1 has an invalid length. [ 477.403043][T17296] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3962'. [ 477.443467][T17298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3964'. [ 477.616140][T17310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3969'. [ 477.739839][T17316] netlink: 822 bytes leftover after parsing attributes in process `syz.0.3972'. [ 477.752429][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 477.776093][T17316] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 479.391064][T17402] netlink: 'syz.0.4002': attribute type 33 has an invalid length. [ 480.331184][T17446] __nla_validate_parse: 3 callbacks suppressed [ 480.331203][T17446] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4018'. [ 482.641080][T17479] netlink: 'syz.2.4024': attribute type 10 has an invalid length. [ 482.823101][T17494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4030'. [ 483.548251][T17529] netlink: 'syz.4.4045': attribute type 9 has an invalid length. [ 483.560279][T17524] netlink: 'syz.2.4043': attribute type 10 has an invalid length. [ 483.572845][T17529] netlink: 184972 bytes leftover after parsing attributes in process `syz.4.4045'. [ 483.723048][T17535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4048'. [ 483.905540][T17542] netlink: 822 bytes leftover after parsing attributes in process `syz.3.4052'. [ 483.935825][T17542] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 484.140058][ T50] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 484.448249][T17567] netlink: 'syz.0.4061': attribute type 9 has an invalid length. [ 484.474841][T17567] netlink: 184972 bytes leftover after parsing attributes in process `syz.0.4061'. [ 484.745003][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4067'. [ 484.987797][T17585] netlink: 822 bytes leftover after parsing attributes in process `syz.0.4068'. [ 485.023596][T17585] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 485.431181][ T50] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 486.163073][ T5826] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 486.622169][ T5826] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 486.983902][ T5826] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 487.992544][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 489.669237][T17677] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 489.795563][ T50] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 490.939950][ T50] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 491.124224][T17711] netlink: 'syz.2.4117': attribute type 39 has an invalid length. [ 491.578854][T17727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4124'. [ 491.880489][ T50] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 492.268687][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4138'. [ 493.412143][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4159'. [ 495.444471][T17882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4190'. [ 495.678809][T17891] netlink: 'syz.2.4196': attribute type 9 has an invalid length. [ 495.710440][T17891] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.4196'. [ 495.983400][T17910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4204'. [ 496.405326][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4210'. [ 496.777024][T17943] netlink: 'syz.4.4221': attribute type 9 has an invalid length. [ 496.789202][T17943] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.4221'. [ 496.930642][T17952] netlink: 'syz.0.4219': attribute type 39 has an invalid length. [ 497.164062][ T50] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 497.200727][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4227'. [ 497.545460][T17988] netlink: 'syz.1.4235': attribute type 39 has an invalid length. [ 497.707660][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4238'. [ 497.794914][T17999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4241'. [ 497.861380][ T50] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 498.230964][T18022] netlink: 'syz.0.4248': attribute type 10 has an invalid length. [ 498.339270][T18031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4255'. [ 498.618242][ T50] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 498.659486][T18049] netlink: 822 bytes leftover after parsing attributes in process `syz.0.4262'. [ 498.688099][T18049] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 498.829080][T18058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4267'. [ 499.323948][ T50] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 499.338879][T18079] netlink: 'syz.0.4274': attribute type 9 has an invalid length. [ 499.353804][T18077] netlink: 822 bytes leftover after parsing attributes in process `syz.4.4275'. [ 499.353859][T18077] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 499.370199][T18079] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.4274'. [ 499.616675][ T50] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 499.972166][ T50] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 500.079105][T18110] netlink: 822 bytes leftover after parsing attributes in process `syz.0.4287'. [ 500.110299][T18110] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 500.332743][ T50] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6 [ 500.460583][T18131] syz.1.4297: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 500.527199][ T50] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 500.531962][T18131] CPU: 0 UID: 0 PID: 18131 Comm: syz.1.4297 Not tainted syzkaller #0 PREEMPT(full) [ 500.531989][T18131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.532010][T18131] Call Trace: [ 500.532020][T18131] [ 500.532031][T18131] dump_stack_lvl+0xe8/0x150 [ 500.532147][T18131] warn_alloc+0x249/0x340 [ 500.532210][T18131] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 500.532372][T18131] ? __pfx_warn_alloc+0x10/0x10 [ 500.532422][T18131] ? kasan_save_track+0x4f/0x80 [ 500.532454][T18131] ? kasan_save_track+0x3e/0x80 [ 500.532473][T18131] ? __kasan_kmalloc+0x93/0xb0 [ 500.532496][T18131] ? __kmalloc_cache_noprof+0x31c/0x660 [ 500.532519][T18131] ? xskq_create+0x56/0x170 [ 500.532609][T18131] ? xsk_setsockopt+0x603/0x990 [ 500.532634][T18131] ? do_sock_setsockopt+0x17c/0x1b0 [ 500.532745][T18131] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 500.532776][T18131] ? do_syscall_64+0x14d/0xf80 [ 500.532836][T18131] __vmalloc_node_range_noprof+0x132/0x1730 [ 500.532968][T18131] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 500.533018][T18131] ? __kasan_kmalloc+0x93/0xb0 [ 500.533066][T18131] vmalloc_user_noprof+0xad/0xe0 [ 500.533093][T18131] ? xskq_create+0xbf/0x170 [ 500.533129][T18131] xskq_create+0xbf/0x170 [ 500.533172][T18131] xsk_init_queue+0x8a/0xe0 [ 500.533213][T18131] xsk_setsockopt+0x603/0x990 [ 500.533255][T18131] ? __pfx_xsk_setsockopt+0x10/0x10 [ 500.533288][T18131] ? __pfx_aa_sk_perm+0x10/0x10 [ 500.533362][T18131] ? __fget_files+0x2a/0x420 [ 500.533402][T18131] ? aa_sock_opt_perm+0xff/0x1a0 [ 500.533443][T18131] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 500.533488][T18131] ? __pfx_xsk_setsockopt+0x10/0x10 [ 500.533525][T18131] do_sock_setsockopt+0x17c/0x1b0 [ 500.533577][T18131] __x64_sys_setsockopt+0x13d/0x1b0 [ 500.533631][T18131] do_syscall_64+0x14d/0xf80 [ 500.533651][T18131] ? trace_irq_disable+0x3b/0x150 [ 500.533698][T18131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.533734][T18131] ? clear_bhb_loop+0x40/0x90 [ 500.533771][T18131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.533798][T18131] RIP: 0033:0x7fd475d9c799 [ 500.533824][T18131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.533842][T18131] RSP: 002b:00007fd476c95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 500.533865][T18131] RAX: ffffffffffffffda RBX: 00007fd476015fa0 RCX: 00007fd475d9c799 [ 500.533880][T18131] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 500.533892][T18131] RBP: 00007fd475e32c99 R08: 0000000000000004 R09: 0000000000000000 [ 500.533904][T18131] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 500.533930][T18131] R13: 00007fd476016038 R14: 00007fd476015fa0 R15: 00007fff5d2a1bb8 [ 500.534007][T18131] [ 500.833425][T18131] Mem-Info: [ 500.839986][T18131] active_anon:5721 inactive_anon:0 isolated_anon:0 [ 500.839986][T18131] active_file:22514 inactive_file:40116 isolated_file:0 [ 500.839986][T18131] unevictable:768 dirty:116 writeback:0 [ 500.839986][T18131] slab_reclaimable:11328 slab_unreclaimable:98979 [ 500.839986][T18131] mapped:29968 shmem:1359 pagetables:1186 [ 500.839986][T18131] sec_pagetables:0 bounce:0 [ 500.839986][T18131] kernel_misc_reclaimable:0 [ 500.839986][T18131] free:1299564 free_pcp:11623 free_cma:0 [ 500.908087][T18131] Node 0 active_anon:22684kB inactive_anon:0kB active_file:90056kB inactive_file:160264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119772kB dirty:464kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11780kB pagetables:4680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 500.941922][T18131] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 500.973027][T18131] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.002921][T18131] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 501.008737][T18131] Node 0 DMA32 free:1241184kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22684kB inactive_anon:0kB active_file:90056kB inactive_file:160264kB unevictable:1536kB writepending:464kB zspages:0kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:48292kB local_pcp:25060kB free_cma:0kB [ 501.044018][T18131] lowmem_reserve[]: 0 0 0 0 0 [ 501.048794][T18131] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 501.079186][T18131] lowmem_reserve[]: 0 0 0 0 0 [ 501.084019][T18131] Node 1 Normal free:3939668kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.131987][T18131] lowmem_reserve[]: 0 0 0 0 0 [ 501.145437][T18131] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 501.165478][T18131] Node 0 DMA32: 3238*4kB (UME) 1959*8kB (UM) 1187*16kB (UME) 254*32kB (ME) 491*64kB (UME) 406*128kB (UME) 170*256kB (UME) 72*512kB (UME) 39*1024kB (UME) 21*2048kB (UM) 229*4096kB (UM) = 1240448kB [ 501.221208][T18131] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 501.260591][T18131] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 8*16kB (UM) 4*32kB (UM) 5*64kB (UM) 6*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939668kB [ 501.288978][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.289040][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.326346][T18131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.346566][T18131] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 501.366957][T18131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.389510][T18131] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 501.462441][T18131] 63985 total pagecache pages [ 501.476995][T18131] 0 pages in swap cache [ 501.501750][T18131] Free swap = 124996kB [ 501.515593][T18131] Total swap = 124996kB [ 501.519772][T18131] 2097051 pages RAM [ 501.538410][T18131] 0 pages HighMem/MovableOnly [ 501.558042][T18131] 427021 pages reserved [ 501.562702][T18131] 0 pages cma reserved [ 501.825625][T18173] __nla_validate_parse: 4 callbacks suppressed [ 501.825659][T18173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4317'. [ 501.887171][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4318'. [ 502.484900][T18195] netlink: 'syz.4.4327': attribute type 39 has an invalid length. [ 503.333417][T18235] netlink: 'syz.1.4341': attribute type 39 has an invalid length. [ 504.163077][T18268] syzkaller0: entered promiscuous mode [ 504.180184][T18268] syzkaller0: entered allmulticast mode [ 504.939801][T18305] netlink: 'syz.1.4374': attribute type 10 has an invalid length. [ 505.511755][ T50] Bluetooth: hci3: unexpected event 0x16 length: 151 > 6 [ 506.103544][T18342] netlink: 'syz.4.4389': attribute type 10 has an invalid length. [ 506.219456][T18349] netlink: 'syz.2.4391': attribute type 39 has an invalid length. [ 506.255260][T18352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4392'. [ 507.132905][T18393] netlink: 'syz.2.4406': attribute type 10 has an invalid length. [ 508.385303][T18390] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4407'. [ 508.473058][T18364] Bluetooth: hci0: command 0x0406 tx timeout [ 508.739891][T18436] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4426'. [ 509.178905][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4431'. [ 510.595499][T18488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4443'. [ 513.450304][T18477] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4440'. [ 516.292319][ T50] Bluetooth: hci3: unexpected event 0x16 length: 151 > 6 [ 516.341192][T18535] netlink: 'syz.0.4465': attribute type 9 has an invalid length. [ 516.358954][T18535] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.4465'. [ 516.483962][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4468'. [ 516.894213][T18559] netlink: 'syz.0.4473': attribute type 9 has an invalid length. [ 516.907845][T18559] netlink: 'syz.0.4473': attribute type 11 has an invalid length. [ 516.939983][T18559] netlink: 'syz.0.4473': attribute type 12 has an invalid length. [ 516.974233][T18559] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4473'. [ 517.009701][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'. [ 517.263827][T18565] netlink: 'syz.0.4476': attribute type 39 has an invalid length. [ 518.102859][T18528] netlink: 822 bytes leftover after parsing attributes in process `syz.3.4462'. [ 518.112074][T18528] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 518.184309][T18364] Bluetooth: hci5: unexpected event 0x16 length: 151 > 6 [ 518.297786][T18577] netlink: 'syz.3.4479': attribute type 10 has an invalid length. [ 518.338679][T18577] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 518.712644][T18364] Bluetooth: hci2: command 0x0406 tx timeout [ 518.734900][T18599] netlink: 'syz.1.4491': attribute type 33 has an invalid length. [ 518.743081][T18599] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4491'. [ 518.979247][ T50] Bluetooth: hci3: unexpected event 0x16 length: 151 > 6 [ 519.832192][T18364] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 519.862775][T18364] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 519.870754][T18364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 519.879115][T18364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 519.888389][T18364] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 520.808470][T18641] syzkaller0: entered allmulticast mode [ 520.989758][T18654] netlink: 'syz.2.4509': attribute type 10 has an invalid length. [ 521.063701][T18661] netlink: 'syz.4.4512': attribute type 33 has an invalid length. [ 521.071562][T18661] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4512'. [ 521.072635][T18656] syzkaller0: entered promiscuous mode [ 521.087891][T18656] syzkaller0: entered allmulticast mode [ 521.259798][T18631] chnl_net:caif_netlink_parms(): no params data found [ 521.329895][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4516'. [ 521.360249][T18674] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4516'. [ 521.436009][T18631] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.454759][T18631] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.466199][T18631] bridge_slave_0: entered allmulticast mode [ 521.477688][T18631] bridge_slave_0: entered promiscuous mode [ 521.500267][T18631] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.514972][T18631] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.532583][T18631] bridge_slave_1: entered allmulticast mode [ 521.540533][T18631] bridge_slave_1: entered promiscuous mode [ 521.636611][T18631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.657147][T18631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.708409][T18631] team0: Port device team_slave_0 added [ 521.727867][T18631] team0: Port device team_slave_1 added [ 521.776673][T18631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.784718][T18631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.843257][T18631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.887769][T18631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.894996][T18631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.928317][T18631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.995549][ T50] Bluetooth: hci4: command tx timeout [ 522.010731][T18691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4523'. [ 522.076083][T18631] hsr_slave_0: entered promiscuous mode [ 522.082819][T18631] hsr_slave_1: entered promiscuous mode [ 522.089074][T18631] debugfs: 'hsr0' already exists in 'hsr' [ 522.096236][T18631] Cannot create hsr debugfs directory [ 522.454287][T18631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.488720][ T50] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 522.528330][T18713] netlink: 'syz.1.4533': attribute type 33 has an invalid length. [ 522.551215][T18713] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4533'. [ 522.656260][T18719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4535'. [ 522.810163][T18631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.910326][T18731] netlink: 822 bytes leftover after parsing attributes in process `syz.1.4540'. [ 522.942752][T18731] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 523.145513][T18631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.248132][T18631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.699334][T18744] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4545'. [ 523.743337][T18631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 523.794980][T18631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 523.815676][T18631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 523.848560][T18631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 523.920541][ T50] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 524.072817][ T50] Bluetooth: hci4: command tx timeout [ 524.128300][T18765] netlink: 822 bytes leftover after parsing attributes in process `syz.4.4552'. [ 524.140348][T18765] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 524.252150][T18631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.289092][T18631] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.309649][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.316842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.356469][T18773] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4556'. [ 524.384938][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.392121][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.600742][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4557'. [ 525.314232][T18631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.380079][T18631] veth0_vlan: entered promiscuous mode [ 525.396456][T18631] veth1_vlan: entered promiscuous mode [ 525.445818][T18631] veth0_macvtap: entered promiscuous mode [ 525.459508][T18631] veth1_macvtap: entered promiscuous mode [ 525.513090][T18631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.549412][T18631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.583255][ T386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.152661][ T50] Bluetooth: hci4: command tx timeout [ 527.168338][ T386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.217913][ T386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.264331][ T386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.320860][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4564'. [ 527.338259][T18798] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4564'. [ 527.399308][T18800] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4565'. [ 527.422406][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.430247][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.483367][T18803] netlink: 822 bytes leftover after parsing attributes in process `syz.3.4566'. [ 527.499520][T18805] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4567'. [ 527.506180][T18803] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 527.530514][ T7767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.548732][ T7767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.847103][T18829] syzkaller0: entered promiscuous mode [ 527.853120][T18829] syzkaller0: entered allmulticast mode [ 528.057464][T18841] netlink: 822 bytes leftover after parsing attributes in process `syz.3.4581'. [ 528.069803][T18841] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 528.233762][ T50] Bluetooth: hci4: command tx timeout [ 528.461822][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4588'. [ 530.953966][T18862] syzkaller0: entered promiscuous mode [ 530.965846][T18862] syzkaller0: entered allmulticast mode [ 531.017627][T18868] __nla_validate_parse: 1 callbacks suppressed [ 531.017656][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4592'. [ 531.104141][T18874] netlink: 822 bytes leftover after parsing attributes in process `syz.0.4595'. [ 531.116080][T18874] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 531.785026][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4607'. [ 531.928403][T18906] syzkaller0: entered promiscuous mode [ 531.946830][T18906] syzkaller0: entered allmulticast mode [ 532.251008][T18917] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 532.368014][T18928] netlink: 'syz.1.4619': attribute type 9 has an invalid length. [ 532.386786][T18928] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.4619'. [ 532.825972][T18949] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4628'. [ 532.899280][T18951] netlink: 'syz.2.4629': attribute type 10 has an invalid length. [ 532.946503][T18951] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 533.936098][T19008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4655'. [ 534.020380][T19013] netlink: 'syz.2.4658': attribute type 10 has an invalid length. [ 534.049218][T19013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4658'. [ 534.087482][T19013] ipvlan1: entered promiscuous mode [ 534.097037][T19013] ipvlan1: entered allmulticast mode [ 534.103045][T19013] veth0_vlan: entered allmulticast mode [ 534.129064][T19013] bridge0: port 3(ipvlan1) entered blocking state [ 534.137189][T19013] bridge0: port 3(ipvlan1) entered disabled state [ 534.196718][T19013] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 534.319446][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4663'. [ 534.821681][T19049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4675'. [ 534.901016][T19053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4676'. [ 535.065391][T19059] netlink: 'syz.0.4679': attribute type 10 has an invalid length. [ 535.096968][T19059] ipvlan1: entered promiscuous mode [ 535.115023][T19059] ipvlan1: entered allmulticast mode [ 535.132450][T19059] veth0_vlan: entered allmulticast mode [ 535.159547][T19059] bridge0: port 3(ipvlan1) entered blocking state [ 535.179624][T19059] bridge0: port 3(ipvlan1) entered disabled state [ 535.197844][T19059] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 536.913806][T19118] netlink: 'syz.0.4702': attribute type 9 has an invalid length. [ 536.943650][T19118] __nla_validate_parse: 2 callbacks suppressed [ 536.943669][T19118] netlink: 184972 bytes leftover after parsing attributes in process `syz.0.4702'. [ 537.847494][T19138] netlink: 'syz.2.4710': attribute type 4 has an invalid length. [ 537.868287][T19138] netlink: 'syz.2.4710': attribute type 2 has an invalid length. [ 537.884700][T19138] netlink: 5156 bytes leftover after parsing attributes in process `syz.2.4710'. [ 538.208007][T19150] netlink: 'syz.1.4714': attribute type 9 has an invalid length. [ 538.219409][T19150] netlink: 184972 bytes leftover after parsing attributes in process `syz.1.4714'. [ 538.294844][T19152] netlink: 'syz.0.4711': attribute type 3 has an invalid length. [ 538.302742][T19152] netlink: 'syz.0.4711': attribute type 3 has an invalid length. [ 538.657924][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4722'. [ 540.586683][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4736'. [ 541.951064][T19286] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4777'. [ 542.233746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.367537][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4788'. [ 542.576249][T19322] netlink: 'syz.0.4794': attribute type 1 has an invalid length. [ 542.594273][T19322] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4794'. [ 542.622453][T19322] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4794'. [ 542.846120][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4799'. [ 542.867771][T19334] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4799'. [ 543.256443][ T50] Bluetooth: hci5: unexpected subevent 0x12 length: 150 > 5 [ 543.526095][T19358] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4809'. [ 543.541074][T19358] bridge_slave_1: default FDB implementation only supports local addresses [ 544.311503][T19403] syzkaller0: entered allmulticast mode [ 544.618195][T19418] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4835'. [ 544.787057][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4838'. [ 546.449297][T19468] netlink: 'syz.0.4857': attribute type 9 has an invalid length. [ 546.457524][T19468] netlink: 184972 bytes leftover after parsing attributes in process `syz.0.4857'. [ 546.667397][T19482] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4864'. [ 546.677691][T19482] bridge_slave_1: default FDB implementation only supports local addresses [ 547.288780][T19507] syzkaller0: entered promiscuous mode [ 547.316973][T19507] syzkaller0: entered allmulticast mode [ 547.809904][T19522] syzkaller0: entered allmulticast mode [ 547.994155][T19529] netlink: 'syz.3.4884': attribute type 9 has an invalid length. [ 548.001930][T19529] netlink: 184972 bytes leftover after parsing attributes in process `syz.3.4884'. [ 548.163932][T19537] syzkaller0: entered promiscuous mode [ 548.170266][T19537] syzkaller0: entered allmulticast mode [ 548.350511][T19547] netlink: 822 bytes leftover after parsing attributes in process `syz.4.4893'. [ 548.402034][T19547] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 548.455115][ T50] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 548.771346][T19578] syzkaller0: entered promiscuous mode [ 548.785271][T19578] syzkaller0: entered allmulticast mode [ 548.890966][ T50] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 549.176304][T19603] openvswitch: netlink: IP tunnel dst address not specified [ 549.359727][ T50] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 549.389509][T19619] netlink: 'syz.0.4926': attribute type 9 has an invalid length. [ 549.404724][T19619] netlink: 184972 bytes leftover after parsing attributes in process `syz.0.4926'. [ 549.929440][ T50] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 550.177507][T19660] netlink: 822 bytes leftover after parsing attributes in process `syz.3.4944'. [ 550.217119][T19660] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 550.685749][ T50] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 550.889187][T19692] netlink: 762 bytes leftover after parsing attributes in process `syz.4.4957'. [ 550.912763][T19692] bridge: RTM_NEWNEIGH with unconfigured vlan 168 on bridge0 [ 551.019629][T19697] netlink: 822 bytes leftover after parsing attributes in process `syz.4.4958'. [ 551.029136][T19697] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 551.202109][T19701] syzkaller0: entered promiscuous mode [ 551.232439][T19701] syzkaller0: entered allmulticast mode [ 551.594211][T19718] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4966'. [ 551.739894][ T50] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 552.467990][ T50] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 555.736802][T19832] netlink: 'syz.3.5011': attribute type 9 has an invalid length. [ 555.781260][T19832] netlink: 184972 bytes leftover after parsing attributes in process `syz.3.5011'. [ 559.497987][T19862] netlink: 'syz.4.5025': attribute type 9 has an invalid length. [ 559.508945][T19862] netlink: 184972 bytes leftover after parsing attributes in process `syz.4.5025'. [ 562.320666][T19897] netlink: 'syz.0.5040': attribute type 9 has an invalid length. [ 562.330842][T19897] netlink: 184972 bytes leftover after parsing attributes in process `syz.0.5040'. [ 562.721148][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.735817][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.155411][T19931] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5054'. [ 565.077031][T19952] netlink: 'syz.4.5064': attribute type 33 has an invalid length. [ 565.085156][T19952] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5064'. [ 565.367963][T19973] netlink: 'syz.3.5072': attribute type 9 has an invalid length. [ 565.381404][T19973] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.5072'. [ 565.717748][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5076'. [ 567.643254][T19989] netlink: 'syz.3.5078': attribute type 10 has an invalid length. [ 570.881131][T20063] netlink: 822 bytes leftover after parsing attributes in process `syz.3.5109'. [ 570.902757][T20063] veth1: vlans aren't supported yet for dev_uc|mc_add() [ 570.909972][T20062] netlink: 726 bytes leftover after parsing attributes in process `syz.4.5108'. [ 571.466961][T20082] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5118'. [ 573.690306][T20113] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5132'. [ 574.520674][T20150] netlink: 'syz.2.5150': attribute type 33 has an invalid length. [ 574.528835][T20150] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5150'. [ 575.466560][T20178] netlink: 'syz.4.5163': attribute type 33 has an invalid length. [ 575.482859][T20178] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5163'. [ 576.041385][T20211] netlink: 'syz.2.5172': attribute type 9 has an invalid length. [ 576.053731][T20211] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.5172'. [ 576.493875][T20230] netlink: 'syz.2.5178': attribute type 33 has an invalid length. [ 576.513211][T20230] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5178'. [ 577.898711][T20312] netlink: 'syz.2.5204': attribute type 9 has an invalid length. [ 577.906971][T20312] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.5204'. [ 578.974158][T20318] netlink: 'syz.0.5206': attribute type 10 has an invalid length. [ 579.054036][T20318] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 579.308852][T20342] netlink: 'syz.0.5215': attribute type 9 has an invalid length. [ 579.318971][T20342] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5215'. [ 579.519915][T20359] netlink: 'syz.2.5221': attribute type 10 has an invalid length. [ 582.514576][T20359] team0: Port device geneve1 added [ 582.644361][T20380] netlink: 762 bytes leftover after parsing attributes in process `syz.2.5224'. [ 582.657012][T20380] bridge: RTM_NEWNEIGH with unconfigured vlan 168 on bridge0 [ 582.734331][T20383] netlink: 'syz.1.5226': attribute type 10 has an invalid length. [ 582.756950][T20383] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 583.016165][T20405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5238'. [ 583.280995][T20422] netlink: 770 bytes leftover after parsing attributes in process `syz.3.5242'. [ 583.722255][T20444] netlink: 'syz.4.5247': attribute type 10 has an invalid length. [ 583.750533][T20444] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 583.921962][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5250'. [ 585.465788][T20470] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5256'. [ 585.621631][T20500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5265'. [ 585.648261][ T50] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 585.653001][T20497] netlink: 'syz.1.5264': attribute type 10 has an invalid length. [ 586.022938][T20519] netlink: 'syz.4.5271': attribute type 33 has an invalid length. [ 586.041117][T20519] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5271'. [ 586.226912][T20529] netlink: 762 bytes leftover after parsing attributes in process `syz.2.5274'. [ 586.240195][T20529] bridge: RTM_NEWNEIGH with unconfigured vlan 168 on bridge0 [ 586.303803][T20533] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5277'. [ 586.370125][T20538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5279'. [ 586.435373][T20541] netlink: 'syz.2.5281': attribute type 10 has an invalid length. [ 586.601498][T20554] netlink: 'syz.2.5286': attribute type 33 has an invalid length. [ 587.935159][T20591] __nla_validate_parse: 3 callbacks suppressed [ 587.935181][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5295'. [ 588.059103][T20596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5298'. [ 588.360279][T20618] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5306'. [ 591.383139][T20642] netlink: 'syz.3.5311': attribute type 10 has an invalid length. [ 591.405737][T20646] bridge0: port 3(batadv0) entered blocking state [ 591.422769][T20646] bridge0: port 3(batadv0) entered disabled state [ 591.437279][T20646] batadv0: entered allmulticast mode [ 591.470561][T20646] batadv0: entered promiscuous mode [ 591.526200][T20646] bridge0: port 3(batadv0) entered blocking state [ 591.533035][T20646] bridge0: port 3(batadv0) entered forwarding state [ 591.566682][ T7767] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 591.576486][ T7767] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 592.694972][T20677] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5321'. [ 592.854330][T20686] netlink: 'syz.3.5324': attribute type 10 has an invalid length. [ 593.108151][ T50] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 593.619059][ T50] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 594.375675][ T50] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 595.583827][ T50] Bluetooth: hci5: unexpected event 0x2c length: 151 > 17 [ 597.504722][T20798] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5367'. [ 597.597012][T20868] netlink: 'syz.4.5400': attribute type 9 has an invalid length. [ 597.628610][T20868] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.5400'. [ 597.653317][T20873] bridge0: port 3(batadv0) entered blocking state [ 597.659825][T20873] bridge0: port 3(batadv0) entered disabled state [ 597.667033][T20873] batadv0: entered allmulticast mode [ 597.680997][T20873] batadv0: entered promiscuous mode [ 597.687695][T20873] bridge0: port 3(batadv0) entered blocking state [ 597.694242][T20873] bridge0: port 3(batadv0) entered forwarding state [ 597.701513][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 597.711361][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 597.862292][T20884] syzkaller0: entered allmulticast mode [ 598.065434][T20894] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5411'. [ 598.453855][T20916] syzkaller0: entered allmulticast mode [ 598.601233][T20927] bridge0: port 3(batadv0) entered blocking state [ 598.608844][T20927] bridge0: port 3(batadv0) entered disabled state [ 598.615922][T20927] batadv0: entered allmulticast mode [ 598.653409][T20927] batadv0: entered promiscuous mode [ 598.673804][T20927] bridge0: port 3(batadv0) entered blocking state [ 598.680362][T20927] bridge0: port 3(batadv0) entered forwarding state [ 598.783547][ T7769] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 598.792855][ T7769] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 598.881938][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5431'. [ 601.152053][ T50] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 601.273332][T20964] netlink: 'syz.1.5444': attribute type 10 has an invalid length. [ 601.444604][T20980] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5451'. [ 601.564819][T20986] netlink: 'syz.4.5453': attribute type 9 has an invalid length. [ 601.573111][T20986] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.5453'. [ 601.770767][ T50] Bluetooth: hci4: unexpected event 0x17 length: 151 > 6 [ 601.850458][T21000] netlink: 'syz.3.5461': attribute type 10 has an invalid length. [ 602.026918][T21009] syzkaller0: entered allmulticast mode [ 602.146604][T21017] netlink: 'syz.3.5469': attribute type 9 has an invalid length. [ 602.183239][T21017] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.5469'. [ 602.550180][ T50] Bluetooth: hci4: unexpected event 0x17 length: 151 > 6 [ 602.950045][T21058] netlink: 'syz.2.5487': attribute type 9 has an invalid length. [ 602.968228][T21058] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.5487'. [ 603.154979][T21073] netlink: 'syz.3.5491': attribute type 29 has an invalid length. [ 603.164404][T21069] netlink: 'syz.3.5491': attribute type 29 has an invalid length. [ 603.176818][T21073] netlink: 'syz.3.5491': attribute type 29 has an invalid length. [ 603.528714][T21090] netlink: 'syz.4.5498': attribute type 2 has an invalid length. [ 603.556359][T21094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5502'. [ 603.582570][T21090] netlink: 'syz.4.5498': attribute type 2 has an invalid length. [ 603.693227][T21105] netlink: 'syz.0.5504': attribute type 9 has an invalid length. [ 603.701148][T21105] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5504'. [ 603.965058][ T50] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 605.451793][T21135] netlink: 'syz.0.5517': attribute type 9 has an invalid length. [ 605.505974][T21135] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5517'. [ 606.277571][T21173] netlink: 'syz.3.5534': attribute type 9 has an invalid length. [ 606.310393][T21173] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.5534'. [ 606.889964][ T50] Bluetooth: hci4: unexpected event 0x17 length: 151 > 6 [ 607.282778][T21210] netlink: 770 bytes leftover after parsing attributes in process `syz.4.5550'. [ 608.914466][T21254] netlink: 'syz.4.5570': attribute type 9 has an invalid length. [ 610.501254][T21219] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5556'. [ 610.524803][T21272] netlink: 770 bytes leftover after parsing attributes in process `syz.4.5577'. [ 610.715774][T21281] netlink: 'syz.1.5581': attribute type 9 has an invalid length. [ 616.690881][ T7765] bridge_slave_1: left allmulticast mode [ 616.710406][ T7765] bridge_slave_1: left promiscuous mode [ 616.730925][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.774813][ T7765] bridge_slave_0: left allmulticast mode [ 616.790461][ T7765] bridge_slave_0: left promiscuous mode [ 616.839104][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.046470][T21325] netlink: 'syz.0.5598': attribute type 10 has an invalid length. [ 617.516493][T21313] netlink: 770 bytes leftover after parsing attributes in process `syz.4.5594'. [ 618.970319][T21377] netlink: 770 bytes leftover after parsing attributes in process `syz.1.5617'. [ 619.077123][ T7765] hsr_slave_0: left promiscuous mode [ 619.105741][ T7765] hsr_slave_1: left promiscuous mode [ 619.124670][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.132786][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.155970][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.170692][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.195984][ T7765] veth1_macvtap: left promiscuous mode [ 619.210742][ T7765] veth0_macvtap: left promiscuous mode [ 619.216609][ T7765] veth1_vlan: left promiscuous mode [ 619.222676][ T7765] veth0_vlan: left promiscuous mode [ 622.535275][ T7765] team0 (unregistering): Port device team_slave_1 removed [ 622.551857][ T7765] team0 (unregistering): Port device team_slave_0 removed [ 622.665816][T21384] bridge0: port 3(batadv0) entered blocking state [ 622.672420][T21384] bridge0: port 3(batadv0) entered disabled state [ 622.681045][T21384] batadv0: entered allmulticast mode [ 622.687658][T21384] batadv0: entered promiscuous mode [ 622.697313][T21384] bridge0: port 3(batadv0) entered blocking state [ 622.703870][T21384] bridge0: port 3(batadv0) entered forwarding state [ 622.712842][T21404] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5630'. [ 622.733998][T21416] netlink: 770 bytes leftover after parsing attributes in process `syz.1.5635'. [ 622.826750][ T7769] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 622.836055][ T7769] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 622.943864][T18364] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 623.607411][T21451] bridge0: port 3(batadv0) entered blocking state [ 623.662997][T21451] bridge0: port 3(batadv0) entered disabled state [ 623.670229][T21451] batadv0: entered allmulticast mode [ 623.682288][T21451] batadv0: entered promiscuous mode [ 623.689299][T21451] bridge0: port 3(batadv0) entered blocking state [ 623.696041][T21451] bridge0: port 3(batadv0) entered forwarding state [ 623.752609][T21453] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5650'. [ 623.902997][ T386] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 623.912303][ T386] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 624.180902][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.187359][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.652804][T18364] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 625.437408][T21490] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5666'. [ 626.671586][T21526] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5680'. [ 627.327285][T21536] netlink: 770 bytes leftover after parsing attributes in process `syz.2.5685'. [ 629.637886][T21564] netlink: 'syz.1.5697': attribute type 9 has an invalid length. [ 629.964483][T21585] netlink: 'syz.1.5704': attribute type 10 has an invalid length. [ 630.435750][T21606] netlink: 'syz.4.5713': attribute type 9 has an invalid length. [ 630.797102][T21632] netlink: 770 bytes leftover after parsing attributes in process `syz.1.5726'. [ 630.874312][T21635] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.5727'. [ 630.900945][T21635] openvswitch: netlink: Key type 29 is not supported [ 631.651754][T21681] veth0_vlan: entered allmulticast mode [ 631.682960][T21681] veth0_vlan: left promiscuous mode [ 631.693573][T21681] veth0_vlan: entered promiscuous mode [ 632.069626][T21712] netlink: 770 bytes leftover after parsing attributes in process `syz.3.5762'. [ 632.225144][T21720] netlink: 'syz.0.5766': attribute type 10 has an invalid length. [ 632.969533][T21754] netlink: 'syz.4.5780': attribute type 10 has an invalid length. [ 633.235381][T21767] netlink: 4008 bytes leftover after parsing attributes in process `syz.2.5783'. [ 636.845325][T21811] netlink: 762 bytes leftover after parsing attributes in process `syz.0.5801'. [ 636.961825][T21814] syzkaller0: entered promiscuous mode [ 636.969670][T21814] syzkaller0: entered allmulticast mode [ 639.967598][T21850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5817'. [ 641.028127][T21854] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5818'. [ 641.371013][T21881] netlink: 'syz.0.5830': attribute type 4 has an invalid length. [ 641.379032][T21881] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5830'. [ 641.504990][T21883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5831'. [ 641.607874][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 641.616692][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 641.624990][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 641.633960][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 641.644448][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 641.953743][T21884] chnl_net:caif_netlink_parms(): no params data found [ 642.076193][T21884] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.083634][T21884] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.091107][T21884] bridge_slave_0: entered allmulticast mode [ 642.099769][T21884] bridge_slave_0: entered promiscuous mode [ 642.109161][T21884] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.116608][T21884] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.124172][T21884] bridge_slave_1: entered allmulticast mode [ 642.132076][T21884] bridge_slave_1: entered promiscuous mode [ 642.177813][T21884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.191064][T21884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.238897][T21884] team0: Port device team_slave_0 added [ 642.290528][T21884] team0: Port device team_slave_1 added [ 642.331664][T21884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.338658][T21884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.382429][T21884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.407518][T21884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.424795][T21884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.482396][T21884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.620985][T21884] hsr_slave_0: entered promiscuous mode [ 642.643547][T21884] hsr_slave_1: entered promiscuous mode [ 642.663259][T21884] debugfs: 'hsr0' already exists in 'hsr' [ 642.668999][T21884] Cannot create hsr debugfs directory [ 643.672773][ T50] Bluetooth: hci1: command tx timeout [ 644.105544][T21884] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.253829][T21907] netlink: 'syz.2.5834': attribute type 10 has an invalid length. [ 644.291449][T21884] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.321688][T21904] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5835'. [ 644.424028][T21884] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.530157][T21923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5842'. [ 644.602270][T21927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5844'. [ 644.658385][T21884] bond0: (slave netdevsim0): Releasing backup interface [ 644.710002][T21884] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.054339][T21884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 645.079127][T21884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 645.113484][T21884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 645.150988][T21884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 645.196138][T21950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5855'. [ 645.213595][T21953] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5857'. [ 645.350262][T21966] netlink: 'syz.3.5860': attribute type 4 has an invalid length. [ 645.372573][T21966] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5860'. [ 645.385396][T21884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.398976][T21966] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.5860'. [ 645.417325][T21884] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.441483][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.448683][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.493960][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.501132][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.753189][T18364] Bluetooth: hci1: command tx timeout [ 645.849612][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5869'. [ 645.895091][T21884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.093216][T22005] netlink: 'syz.3.5873': attribute type 10 has an invalid length. [ 646.101332][T22005] bridge0: port 3(batadv0) entered disabled state [ 646.108177][T22005] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.116482][T22005] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.199800][T22005] bridge0: port 3(batadv0) entered blocking state [ 646.206424][T22005] bridge0: port 3(batadv0) entered forwarding state [ 646.213409][T22005] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.220564][T22005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.228074][T22005] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.235217][T22005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.279739][T22005] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 646.490305][T22025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5882'. [ 646.663376][T21884] veth0_vlan: entered promiscuous mode [ 646.708251][T21884] veth1_vlan: entered promiscuous mode [ 646.718387][T18364] Bluetooth: hci4: command 0x0406 tx timeout [ 646.862001][T21884] veth0_macvtap: entered promiscuous mode [ 646.942312][T21884] veth1_macvtap: entered promiscuous mode [ 647.046222][T21884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.115162][T21884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.166082][ T386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.187016][ T386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.209886][ T386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.237072][ T386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.732947][T22055] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.5887'. [ 647.842506][T18364] Bluetooth: hci1: command tx timeout [ 649.742391][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.750222][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.818762][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.838786][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.877613][T22064] netlink: 'syz.2.5892': attribute type 10 has an invalid length. [ 649.915314][ T50] Bluetooth: hci1: command tx timeout [ 649.924914][T22064] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.947594][T22064] bridge_slave_1: left allmulticast mode [ 649.965939][T22064] bridge_slave_1: left promiscuous mode [ 649.984000][T22074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5894'. [ 650.005743][T22064] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.068520][T22064] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 650.326483][T22090] netlink: 'syz.2.5899': attribute type 25 has an invalid length. [ 650.350650][T22090] netlink: 'syz.2.5899': attribute type 29 has an invalid length. [ 650.374047][T22090] netlink: 'syz.2.5899': attribute type 25 has an invalid length. [ 650.393838][T22090] netlink: 'syz.2.5899': attribute type 9 has an invalid length. [ 653.140883][T22132] netlink: 726 bytes leftover after parsing attributes in process `syz.4.5910'. [ 653.178326][T22136] nbd: must specify at least one socket [ 653.421292][T22151] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5917'. [ 654.268554][T22153] syzkaller0: entered promiscuous mode [ 654.280100][T22153] syzkaller0: entered allmulticast mode [ 654.461015][T22168] netlink: 'syz.1.5918': attribute type 10 has an invalid length. [ 654.505643][T22167] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5924'. [ 656.700095][T22168] bridge0: port 3(batadv0) entered disabled state [ 656.706947][T22168] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.714602][T22168] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.767515][T22168] bridge0: port 3(batadv0) entered blocking state [ 656.774105][T22168] bridge0: port 3(batadv0) entered forwarding state [ 656.780985][T22168] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.788172][T22168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.795669][T22168] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.802865][T22168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.816417][T22168] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 656.858660][T22174] netlink: 726 bytes leftover after parsing attributes in process `syz.0.5926'. [ 658.090480][T22208] netlink: 726 bytes leftover after parsing attributes in process `syz.0.5940'. [ 662.664646][T22291] IPv6: Can't replace route, no match found [ 662.927499][T22302] syzkaller0: entered promiscuous mode [ 663.062637][T22302] syzkaller0: entered allmulticast mode [ 663.285233][T22320] netlink: 'syz.4.5984': attribute type 1 has an invalid length. [ 663.296235][T22320] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 663.304478][T22320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5984'. [ 663.868290][T22332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5989'. [ 664.865441][T22332] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5989'. [ 664.883058][T22332] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5989'. [ 665.483755][T22366] syzkaller0: entered promiscuous mode [ 665.489949][T22366] syzkaller0: entered allmulticast mode [ 668.043357][T22384] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6013'. [ 668.052863][T22394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6018'. [ 668.080140][T22405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.233523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.173122][T22444] syzkaller0: entered promiscuous mode [ 672.178636][T22444] syzkaller0: entered allmulticast mode [ 673.010975][T22464] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6043'. [ 675.339359][T22481] netlink: 'syz.2.6045': attribute type 10 has an invalid length. [ 676.410699][T22481] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 676.620880][T22503] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.6056'. [ 676.620894][T22501] netlink: 'syz.4.6057': attribute type 10 has an invalid length. [ 676.680283][T22503] openvswitch: netlink: Key type 29 is not supported [ 676.729492][T22501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.741384][T22501] team0: Port device bond0 added [ 676.930055][T22517] syzkaller0: entered promiscuous mode [ 676.935866][T22517] syzkaller0: entered allmulticast mode [ 677.040336][T22521] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6063'. [ 677.158465][T22525] syzkaller0: entered promiscuous mode [ 677.182474][T22525] syzkaller0: entered allmulticast mode [ 678.662416][T22556] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6080'. [ 679.021418][T18364] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 679.032278][T18364] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 679.041364][T18364] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 679.053302][T18364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 679.070004][T18364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 679.364539][T22589] netlink: 'syz.3.6092': attribute type 10 has an invalid length. [ 679.425287][T22593] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6093'. [ 679.435551][T22589] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6092'. [ 679.456611][T22574] chnl_net:caif_netlink_parms(): no params data found [ 679.931485][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.000506][T22608] syzkaller0: entered promiscuous mode [ 680.006099][T22608] syzkaller0: entered allmulticast mode [ 680.014095][T22602] syzkaller0: entered promiscuous mode [ 680.020778][T22602] syzkaller0: entered allmulticast mode [ 680.068075][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.090027][T22621] netlink: 'syz.1.6102': attribute type 10 has an invalid length. [ 681.124439][ T50] Bluetooth: hci5: command tx timeout [ 683.192589][ T50] Bluetooth: hci5: command tx timeout [ 685.277700][ T50] Bluetooth: hci5: command tx timeout [ 685.597862][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.604329][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.632755][T22631] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6106'. [ 686.658531][T22652] syzkaller0: entered promiscuous mode [ 686.669921][T22652] syzkaller0: entered allmulticast mode [ 686.677403][T22574] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.702526][T22574] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.712764][T22574] bridge_slave_0: entered allmulticast mode [ 686.723556][T22574] bridge_slave_0: entered promiscuous mode [ 686.754485][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.805079][T22574] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.812478][T22574] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.819729][T22574] bridge_slave_1: entered allmulticast mode [ 686.831621][T22574] bridge_slave_1: entered promiscuous mode [ 686.856454][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 686.895151][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.198340][T22574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.226627][T22574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.275103][T22574] team0: Port device team_slave_0 added [ 687.290613][T22574] team0: Port device team_slave_1 added [ 687.329054][T22574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.338707][T22574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.368453][T22574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.381156][T22574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.388325][T22574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.418009][T22574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.472612][ T50] Bluetooth: hci5: command tx timeout [ 687.487853][T22574] hsr_slave_0: entered promiscuous mode [ 687.494947][T22574] hsr_slave_1: entered promiscuous mode [ 687.501333][T22574] debugfs: 'hsr0' already exists in 'hsr' [ 687.507345][T22574] Cannot create hsr debugfs directory [ 689.465383][T22685] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6125'. [ 689.701455][T22687] syzkaller0: entered promiscuous mode [ 689.707162][T22687] syzkaller0: entered allmulticast mode [ 689.724934][ T12] batadv0: left allmulticast mode [ 689.729985][ T12] batadv0: left promiscuous mode [ 689.735896][ T12] bridge0: port 3(batadv0) entered disabled state [ 689.756457][ T12] bridge_slave_0: left allmulticast mode [ 689.762112][ T12] bridge_slave_0: left promiscuous mode [ 689.769680][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.956895][ T12] team0: Port device geneve1 removed [ 690.068027][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.080360][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.090773][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 690.101231][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 690.114692][ T12] bond0 (unregistering): Released all slaves [ 690.126606][T22698] netlink: 'syz.4.6127': attribute type 12 has an invalid length. [ 690.134756][T22698] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6127'. [ 690.188811][T22707] syzkaller0: entered promiscuous mode [ 690.194413][T22707] syzkaller0: entered allmulticast mode [ 694.667528][T22729] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6137'. [ 694.688093][T22760] syzkaller0: entered promiscuous mode [ 694.697770][T22760] syzkaller0: entered allmulticast mode [ 694.932491][ T12] hsr_slave_0: left promiscuous mode [ 694.940079][ T12] hsr_slave_1: left promiscuous mode [ 694.952593][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.960173][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.971399][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.981580][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.005643][ T12] veth1_macvtap: left promiscuous mode [ 695.011139][ T12] veth0_macvtap: left promiscuous mode [ 695.023289][ T12] veth1_vlan: left promiscuous mode [ 695.036920][ T12] veth0_vlan: left promiscuous mode [ 695.343772][ T12] team0 (unregistering): Port device team_slave_1 removed [ 695.362107][ T12] team0 (unregistering): Port device team_slave_0 removed [ 695.473465][T22772] netlink: 'syz.0.6147': attribute type 29 has an invalid length. [ 695.490997][T22766] netlink: 'syz.0.6147': attribute type 29 has an invalid length. [ 695.514196][T22780] À: port 1(vlan0) entered blocking state [ 695.527256][T22780] À: port 1(vlan0) entered disabled state [ 695.542686][T22780] vlan0: entered allmulticast mode [ 695.548908][T22780] veth0_vlan: entered allmulticast mode [ 695.560821][T22780] vlan0: entered promiscuous mode [ 695.615123][T22574] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 695.628454][T22574] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 695.651082][T22574] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 695.695894][T22574] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 695.735839][T22797] netlink: 'syz.0.6154': attribute type 33 has an invalid length. [ 695.747408][T22797] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6154'. [ 695.921607][T22809] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6157'. [ 696.034290][T22574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.081719][T22814] syzkaller0: entered promiscuous mode [ 696.088579][T22814] syzkaller0: entered allmulticast mode [ 696.108036][T22574] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.130254][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.137423][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.174413][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.181514][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.257791][T22818] syzkaller0: entered promiscuous mode [ 696.263534][T22818] syzkaller0: entered allmulticast mode [ 696.357114][T22574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.808933][T22845] netlink: 'syz.4.6173': attribute type 4 has an invalid length. [ 696.817579][T22845] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6173'. [ 696.874090][T22848] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.6173'. [ 700.877278][T22834] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 700.891254][T22872] netlink: 'syz.1.6185': attribute type 21 has an invalid length. [ 700.905576][T22872] IPv6: NLM_F_CREATE should be specified when creating new route [ 700.979774][ T7767] batadv0: left allmulticast mode [ 701.002441][ T7767] batadv0: left promiscuous mode [ 701.007942][ T7767] bridge0: port 3(batadv0) entered disabled state [ 701.153131][ T7767] bridge_slave_1: left allmulticast mode [ 701.180157][ T7767] bridge_slave_1: left promiscuous mode [ 701.190868][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.225407][ T7767] bridge_slave_0: left allmulticast mode [ 701.248652][ T7767] bridge_slave_0: left promiscuous mode [ 701.264715][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.402162][T22892] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6193'. [ 701.417222][T22878] netlink: 'syz.0.6186': attribute type 10 has an invalid length. [ 701.425955][T22878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6186'. [ 701.600651][ T7767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.611140][ T7767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.621169][ T7767] bond0 (unregistering): Released all slaves [ 701.631685][T22882] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6189'. [ 701.647210][T22878] dummy0: entered promiscuous mode [ 701.658606][T22878] dummy0: entered allmulticast mode [ 701.798002][T22878] bridge0: port 4(dummy0) entered blocking state [ 701.805892][T22878] bridge0: port 4(dummy0) entered disabled state [ 701.901647][T22878] bridge0: port 4(dummy0) entered blocking state [ 701.908144][T22878] bridge0: port 4(dummy0) entered forwarding state [ 701.971431][T22906] netlink: 'syz.0.6197': attribute type 4 has an invalid length. [ 701.986313][T22906] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6197'. [ 702.018644][T22901] syzkaller0: entered promiscuous mode [ 702.024680][T22901] syzkaller0: entered allmulticast mode [ 702.041935][T22908] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.6197'. [ 702.232609][ T7767] hsr_slave_0: left promiscuous mode [ 702.241930][ T7767] hsr_slave_1: left promiscuous mode [ 702.254944][ T7767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.272755][ T7767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.310850][ T7767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.329254][ T7767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.364316][ T7767] veth1_macvtap: left promiscuous mode [ 702.378775][ T7767] veth0_macvtap: left promiscuous mode [ 702.387786][ T7767] veth1_vlan: left promiscuous mode [ 702.393409][ T7767] veth0_vlan: left promiscuous mode [ 702.640619][ T7767] team0 (unregistering): Port device team_slave_1 removed [ 702.674119][ T7767] team0 (unregistering): Port device team_slave_0 removed [ 703.889714][T22574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.953011][T22943] delete_channel: no stack [ 704.017832][T22943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 704.025184][T22943] IPv6: NLM_F_CREATE should be set when creating new route [ 704.032624][T22943] IPv6: NLM_F_CREATE should be set when creating new route [ 704.039951][T22943] IPv6: NLM_F_CREATE should be set when creating new route [ 704.045557][T22574] veth0_vlan: entered promiscuous mode [ 704.087291][T22574] veth1_vlan: entered promiscuous mode [ 704.104672][T22943] netlink: 'syz.3.6212': attribute type 10 has an invalid length. [ 704.125217][T22943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6212'. [ 704.163391][T22943] dummy0: entered promiscuous mode [ 704.182507][T22943] dummy0: entered allmulticast mode [ 704.204147][T22943] bridge0: port 4(dummy0) entered blocking state [ 704.205454][T22953] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.6220'. [ 704.210981][T22943] bridge0: port 4(dummy0) entered disabled state [ 704.243581][T22943] bridge0: port 4(dummy0) entered blocking state [ 704.250354][T22943] bridge0: port 4(dummy0) entered forwarding state [ 704.272197][T22574] veth0_macvtap: entered promiscuous mode [ 704.315014][T22574] veth1_macvtap: entered promiscuous mode [ 704.372178][T22574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.401854][T22574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.418414][ T7767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.723330][T22972] netlink: 'syz.4.6227': attribute type 10 has an invalid length. [ 704.744893][ T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.782862][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.827510][T22972] team0: Device vxcan1 is of different type [ 704.876769][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.965158][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.975624][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.016409][T22982] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.6232'. [ 705.017194][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.043871][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.060818][T22989] netlink: 'syz.3.6235': attribute type 28 has an invalid length. [ 705.166036][T22988] syzkaller0: entered promiscuous mode [ 705.171531][T22988] syzkaller0: entered allmulticast mode [ 705.441326][T23002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6240'. [ 705.610143][T18364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 705.618915][T18364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 705.626652][T18364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 705.634620][T18364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 705.644104][T18364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 705.838651][T23026] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.6247'. [ 705.997861][T23009] chnl_net:caif_netlink_parms(): no params data found [ 706.178813][T23036] syzkaller0: entered promiscuous mode [ 706.187786][T23036] syzkaller0: entered allmulticast mode [ 706.293924][ T386] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.371107][ T386] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.406177][T23009] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.415157][T23009] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.437074][T23009] bridge_slave_0: entered allmulticast mode [ 706.456941][T23009] bridge_slave_0: entered promiscuous mode [ 706.479601][ T386] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.507391][T23009] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.517948][T23009] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.525233][T23009] bridge_slave_1: entered allmulticast mode [ 706.537966][T23009] bridge_slave_1: entered promiscuous mode [ 706.557935][ T386] bond0: (slave netdevsim0): Releasing backup interface [ 706.585799][ T386] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.609078][T23053] __nla_validate_parse: 1 callbacks suppressed [ 706.609113][T23053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6256'. [ 706.673731][T23009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.689707][T23057] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6258'. [ 706.689970][T23009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.840862][T23009] team0: Port device team_slave_0 added [ 706.879072][T23009] team0: Port device team_slave_1 added [ 706.969576][T23009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.977059][T23009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.004064][T23009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.050212][ T386] bridge0: port 4(dummy0) entered disabled state [ 707.079077][ T386] batadv0: left allmulticast mode [ 707.090237][ T386] batadv0: left promiscuous mode [ 707.112640][ T386] bridge0: port 3(batadv0) entered disabled state [ 707.131355][ T386] bridge_slave_1: left allmulticast mode [ 707.140587][ T386] bridge_slave_1: left promiscuous mode [ 707.150260][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.196375][ T386] bridge_slave_0: left promiscuous mode [ 707.202134][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.375186][ T386] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 707.559048][T23083] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6266'. [ 707.675738][T18364] Bluetooth: hci3: command tx timeout [ 708.281513][ T386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.299609][ T386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.313014][ T386] bond0 (unregistering): Released all slaves [ 708.347151][T23009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.372899][T23009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.419564][T23009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.536684][T23088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6269'. [ 708.628900][T23095] netlink: 'syz.2.6272': attribute type 21 has an invalid length. [ 708.640055][T23095] netlink: 'syz.2.6272': attribute type 1 has an invalid length. [ 708.650781][T23095] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6272'. [ 708.760296][T23098] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6273'. [ 708.989121][ T386] hsr_slave_0: left promiscuous mode [ 708.999220][ T386] hsr_slave_1: left promiscuous mode [ 709.010288][ T386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.032910][ T386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.090174][ T386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.119571][ T386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.230878][ T386] veth1_macvtap: left promiscuous mode [ 709.258438][ T386] veth0_macvtap: left promiscuous mode [ 709.299175][ T386] veth1_vlan: left promiscuous mode [ 709.312499][ T386] veth0_vlan: left promiscuous mode [ 709.608503][T23130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6282'. [ 709.762671][T18364] Bluetooth: hci3: command tx timeout [ 709.895154][ T386] team0 (unregistering): Port device team_slave_1 removed [ 709.926421][ T386] team0 (unregistering): Port device team_slave_0 removed [ 709.949601][T23142] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6285'. [ 710.142013][T23009] hsr_slave_0: entered promiscuous mode [ 710.159030][T23009] hsr_slave_1: entered promiscuous mode [ 710.179723][T23149] netlink: 'syz.4.6288': attribute type 4 has an invalid length. [ 710.192564][T23149] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6288'. [ 710.585978][T23163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6293'. [ 710.609511][T23164] netlink: 'syz.4.6294': attribute type 6 has an invalid length. [ 710.804834][T23177] netlink: 'syz.4.6297': attribute type 21 has an invalid length. [ 710.838935][T23177] netlink: 'syz.4.6297': attribute type 1 has an invalid length. [ 711.365554][T23009] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 711.408642][T23009] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 711.487543][T23009] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 711.519114][T23009] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 711.699740][T23219] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 711.739580][T23219] __nla_validate_parse: 5 callbacks suppressed [ 711.739598][T23219] netlink: 35347 bytes leftover after parsing attributes in process `syz.2.6310'. [ 711.779674][T23009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.805646][T23009] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.832544][T18364] Bluetooth: hci3: command tx timeout [ 711.886546][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.893713][ T7771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.926691][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.933889][ T7771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.959932][T23230] netlink: 'syz.0.6317': attribute type 4 has an invalid length. [ 711.979693][T23230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6317'. [ 712.109684][T23243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6319'. [ 712.158906][T23244] batadv0: left allmulticast mode [ 712.175264][T23244] batadv0: left promiscuous mode [ 712.193178][T23244] bridge0: port 3(batadv0) entered disabled state [ 712.220250][T23250] delete_channel: no stack [ 712.251729][T23244] bridge_slave_1: left allmulticast mode [ 712.266422][T23244] bridge_slave_1: left promiscuous mode [ 712.276331][T23244] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.300253][T23244] bridge_slave_0: left allmulticast mode [ 712.310030][T23244] bridge_slave_0: left promiscuous mode [ 712.318380][T23257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.320006][T23244] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.325615][T23257] IPv6: NLM_F_CREATE should be set when creating new route [ 712.325692][T23257] IPv6: NLM_F_CREATE should be set when creating new route [ 712.347132][T23257] IPv6: NLM_F_CREATE should be set when creating new route [ 712.446203][T23244] bond0: (slave bridge0): Releasing backup interface [ 712.698181][T23269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6322'. [ 712.711604][T23009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.843537][T23009] veth0_vlan: entered promiscuous mode [ 712.871637][T23009] veth1_vlan: entered promiscuous mode [ 713.001938][T23009] veth0_macvtap: entered promiscuous mode [ 713.032307][T23286] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6328'. [ 713.058760][T23009] veth1_macvtap: entered promiscuous mode [ 713.101817][T23009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.132460][T23009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.172207][T23295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6330'. [ 713.217959][T23295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6330'. [ 713.319917][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.350952][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.370473][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.402460][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.421019][T23303] netlink: 'syz.2.6331': attribute type 10 has an invalid length. [ 713.513247][ T7767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.533697][ T7767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.557024][T23308] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6333'. [ 713.645362][T23308] hsr_slave_0: left promiscuous mode [ 713.660459][T23308] hsr_slave_1: left promiscuous mode [ 713.784275][ T7771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.798825][ T7771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.916045][T18364] Bluetooth: hci3: command tx timeout [ 714.174124][T23338] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.6341'. [ 714.223372][T23340] raw_sendmsg: syz.0.6342 forgot to set AF_INET. Fix it! [ 714.483189][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 714.492106][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 714.505102][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 714.524919][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 714.532707][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 716.231529][T23345] chnl_net:caif_netlink_parms(): no params data found [ 716.288215][T23372] netlink: 'syz.4.6353': attribute type 10 has an invalid length. [ 716.486916][T23372] macvlan1: entered allmulticast mode [ 716.500562][T23372] veth1_vlan: entered allmulticast mode [ 716.513512][T23372] team0: Port device macvlan1 added [ 716.552792][ T50] Bluetooth: hci0: command tx timeout [ 716.664226][T23345] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.671477][T23345] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.679369][T23345] bridge_slave_0: entered allmulticast mode [ 716.689020][T23345] bridge_slave_0: entered promiscuous mode [ 716.716119][T23345] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.733108][T23345] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.742515][T23345] bridge_slave_1: entered allmulticast mode [ 716.754523][T23345] bridge_slave_1: entered promiscuous mode [ 716.810792][T23345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.847709][T23394] netlink: 'syz.4.6360': attribute type 29 has an invalid length. [ 716.859628][T23345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.954938][T23345] team0: Port device team_slave_0 added [ 716.964500][T23345] team0: Port device team_slave_1 added [ 717.017048][T23345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.024234][T23345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.054031][T23345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.067912][T23345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.076639][T23345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.105877][T23345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.178479][T23345] hsr_slave_0: entered promiscuous mode [ 717.186212][T23345] hsr_slave_1: entered promiscuous mode [ 717.203387][T23345] debugfs: 'hsr0' already exists in 'hsr' [ 717.210232][T23345] Cannot create hsr debugfs directory [ 717.303927][T23412] netlink: 'syz.3.6370': attribute type 10 has an invalid length. [ 717.397381][T23412] macvlan1: entered allmulticast mode [ 717.408849][T23412] veth1_vlan: entered allmulticast mode [ 717.431472][T23412] team0: Port device macvlan1 added [ 860.101972][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 144s! [syz.4.6372:23416] [ 860.102012][ C0] Modules linked in: [ 860.102029][ C0] irq event stamp: 11546377 [ 860.102036][ C0] hardirqs last enabled at (11546376): [] irqentry_exit+0x59e/0x620 [ 860.102136][ C0] hardirqs last disabled at (11546377): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 860.102169][ C0] softirqs last enabled at (3996): [] __irq_exit_rcu+0x5f/0x150 [ 860.102225][ C0] softirqs last disabled at (4505): [] __irq_exit_rcu+0x5f/0x150 [ 860.102264][ C0] CPU: 0 UID: 0 PID: 23416 Comm: syz.4.6372 Not tainted syzkaller #0 PREEMPT(full) [ 860.102283][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.102294][ C0] RIP: 0010:unwind_get_return_address+0x22/0x90 [ 860.102334][ C0] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 <84> c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 [ 860.102347][ C0] RSP: 0018:ffffc900000076a8 EFLAGS: 00000a02 [ 860.102361][ C0] RAX: 0000000000000000 RBX: ffffc900000076c8 RCX: 0000000000000100 [ 860.102373][ C0] RDX: 0000000000000003 RSI: ffffffff8e165585 RDI: ffffc900000076c8 [ 860.102384][ C0] RBP: ffffc90000007750 R08: ffffc900000073af R09: 0000000000000000 [ 860.102396][ C0] R10: ffffc900000073a0 R11: ffffffffa0202f08 R12: ffff888032308000 [ 860.102408][ C0] R13: 00000000000000f0 R14: dffffc0000000000 R15: ffffc900000076c8 [ 860.102420][ C0] FS: 00007f41bf4de6c0(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 860.102435][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.102447][ C0] CR2: 0000200000003ff6 CR3: 0000000021bc2000 CR4: 00000000003526f0 [ 860.102462][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 860.102472][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 860.102483][ C0] Call Trace: [ 860.102491][ C0] [ 860.102502][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 860.102543][ C0] arch_stack_walk+0xfb/0x150 [ 860.102603][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 860.102691][ C0] stack_trace_save+0xa9/0x100 [ 860.102720][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 860.102739][ C0] ? trace_call_bpf+0x7d0/0xb70 [ 860.102775][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.102830][ C0] kasan_save_track+0x3e/0x80 [ 860.102853][ C0] ? kasan_save_track+0x3e/0x80 [ 860.102872][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 860.102893][ C0] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 860.103146][ C0] __kasan_slab_alloc+0x6c/0x80 [ 860.103188][ C0] kmem_cache_alloc_node_noprof+0x384/0x690 [ 860.103223][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 860.103247][ C0] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 860.103294][ C0] __alloc_skb+0x1d0/0x7d0 [ 860.103351][ C0] new_skb+0x2f/0x2b0 [ 860.103440][ C0] ? is_aoe_netif+0x216/0x300 [ 860.103487][ C0] aoecmd_cfg+0x2b1/0x800 [ 860.103520][ C0] ? aoecmd_cfg+0x102/0x800 [ 860.103553][ C0] ? __pfx_aoecmd_cfg+0x10/0x10 [ 860.103577][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.103651][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.103729][ C0] call_timer_fn+0x192/0x640 [ 860.103767][ C0] ? __pfx_discover_timer+0x10/0x10 [ 860.103793][ C0] ? call_timer_fn+0xd4/0x640 [ 860.103822][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 860.103900][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 860.103928][ C0] ? __pfx_discover_timer+0x10/0x10 [ 860.103971][ C0] __run_timer_base+0x652/0x8b0 [ 860.104000][ C0] ? ktime_get+0x45/0x200 [ 860.104083][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 860.104145][ C0] ? sched_clock_cpu+0x74/0x440 [ 860.104209][ C0] run_timer_softirq+0xb7/0x170 [ 860.104242][ C0] handle_softirqs+0x22a/0x870 [ 860.104288][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 860.104356][ C0] __irq_exit_rcu+0x5f/0x150 [ 860.104383][ C0] irq_exit_rcu+0x9/0x30 [ 860.104407][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 860.104439][ C0] [ 860.104445][ C0] [ 860.104458][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 860.104482][ C0] RIP: 0010:unwind_next_frame+0x1821/0x23c0 [ 860.104510][ C0] Code: 19 02 00 00 80 3d be 9b ab 11 00 0f 85 0c 02 00 00 c6 05 b1 9b ab 11 01 4c 89 f7 e8 b9 0b 00 00 e9 f8 01 00 00 48 8b 54 24 08 <48> 8d 5a 02 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 860.104523][ C0] RSP: 0018:ffffc90004446d38 EFLAGS: 00000246 [ 860.104538][ C0] RAX: 0000000000000000 RBX: ffffc90004446ea0 RCX: 0000000000000000 [ 860.104549][ C0] RDX: ffffffff90a5ec78 RSI: 0000000000000001 RDI: ffffc90004446ec8 [ 860.104560][ C0] RBP: dffffc0000000000 R08: ffffc90004446ec7 R09: 0000000000000000 [ 860.104571][ C0] R10: ffffc90004446eb8 R11: fffff52000888dd9 R12: ffffc90004446eb8 [ 860.104583][ C0] R13: 1ffff92000888dcf R14: ffffc90004446e68 R15: 1ffffffff214bd8f [ 860.104667][ C0] ? unwind_next_frame+0xeae/0x23c0 [ 860.104727][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 860.104762][ C0] ? __unwind_start+0xf7/0x760 [ 860.104822][ C0] __unwind_start+0x5b8/0x760 [ 860.104875][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 860.104903][ C0] arch_stack_walk+0xe3/0x150 [ 860.104960][ C0] ? arch_stack_walk+0xe3/0x150 [ 860.105013][ C0] stack_trace_save+0xa9/0x100 [ 860.105041][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 860.105074][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.105138][ C0] save_stack+0x122/0x230 [ 860.105202][ C0] ? __pfx_save_stack+0x10/0x10 [ 860.105283][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.105353][ C0] __set_page_owner+0x8d/0x4c0 [ 860.105394][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 860.105466][ C0] post_alloc_hook+0x231/0x280 [ 860.105515][ C0] get_page_from_freelist+0x24dc/0x2580 [ 860.105568][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.105649][ C0] ? trace_call_bpf+0x7d0/0xb70 [ 860.105683][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.105744][ C0] ? prepare_alloc_pages+0x22a/0x650 [ 860.105810][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 860.105856][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 860.105903][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 860.105977][ C0] alloc_pages_mpol+0x232/0x4a0 [ 860.106035][ C0] ___kmalloc_large_node+0x4e/0x150 [ 860.106078][ C0] __kmalloc_large_node_noprof+0x18/0x90 [ 860.106117][ C0] __kvmalloc_node_noprof+0x7b/0x8a0 [ 860.106148][ C0] ? bpf_check+0x102/0x1ce00 [ 860.106186][ C0] ? ktime_get+0x45/0x200 [ 860.106203][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 860.106230][ C0] ? read_tsc+0x9/0x20 [ 860.106275][ C0] bpf_check+0x102/0x1ce00 [ 860.106310][ C0] ? perf_trace_buf_alloc+0x11b/0x280 [ 860.106356][ C0] ? perf_trace_lock+0x1a0/0x410 [ 860.106415][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.106450][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.106505][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.106555][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.106603][ C0] ? trace_call_bpf+0x7d0/0xb70 [ 860.106638][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.106702][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 860.106734][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 860.106798][ C0] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 860.106848][ C0] ? perf_trace_lock+0x32d/0x410 [ 860.106882][ C0] ? perf_trace_lock+0x32d/0x410 [ 860.106934][ C0] ? __pfx_bpf_check+0x10/0x10 [ 860.106967][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.107032][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 860.107069][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 860.107098][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 860.107144][ C0] ? __asan_memset+0x22/0x50 [ 860.107172][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 860.107203][ C0] ? security_bpf_prog_load+0x125/0x3c0 [ 860.107315][ C0] bpf_prog_load+0x1484/0x1ae0 [ 860.107410][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 860.107438][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.107558][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 860.107582][ C0] ? security_bpf+0x7e/0x2d0 [ 860.107623][ C0] __sys_bpf+0x618/0x950 [ 860.107671][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 860.107851][ C0] __x64_sys_bpf+0x7c/0x90 [ 860.107890][ C0] do_syscall_64+0x14d/0xf80 [ 860.107914][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.107937][ C0] ? clear_bhb_loop+0x40/0x90 [ 860.107978][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.107999][ C0] RIP: 0033:0x7f41be59c799 [ 860.108027][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.108041][ C0] RSP: 002b:00007f41bf4de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 860.108057][ C0] RAX: ffffffffffffffda RBX: 00007f41be815fa0 RCX: 00007f41be59c799 [ 860.108069][ C0] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 860.108080][ C0] RBP: 00007f41be632c99 R08: 0000000000000000 R09: 0000000000000000 [ 860.108090][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.108100][ C0] R13: 00007f41be816038 R14: 00007f41be815fa0 R15: 00007fff8cc481b8 [ 860.108197][ C0] [ 860.108213][ C0] Sending NMI from CPU 0 to CPUs 1: [ 860.933791][ C1] ------------[ cut here ]------------ [ 860.940181][ C1] NMI backtrace for cpu 1 [ 860.940194][ C1] CPU: 1 UID: 0 PID: 23420 Comm: syz.0.6374 Not tainted syzkaller #0 PREEMPT(full) [ 860.940211][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.940220][ C1] RIP: 0010:put_dec_trunc8+0xd0/0x340 [ 860.940317][ C1] Code: 10 27 00 00 89 ee e8 6f 51 1b f6 81 fd 0f 27 00 00 77 10 e8 22 4d 1b f6 4c 89 fb 44 89 f5 e9 f6 00 00 00 4d 69 ee 29 5c 8f 02 <49> c1 ed 20 41 6b c5 9c 41 01 c6 bf 64 00 00 00 4c 89 f6 e8 d8 51 [ 860.940330][ C1] RSP: 0018:ffffc90000a080c8 EFLAGS: 00000002 [ 860.940344][ C1] RAX: ffffffff8baa5081 RBX: ffffc90000a08180 RCX: 0000000000000100 [ 860.940355][ C1] RDX: ffff8880308fdb80 RSI: 000000000001a619 RDI: 0000000000002710 [ 860.940365][ C1] RBP: 000000000001a619 R08: ffffc90000a08197 R09: 0000000000000000 [ 860.940375][ C1] R10: ffffc90000a08180 R11: fffff52000141033 R12: dffffc0000000000 [ 860.940385][ C1] R13: 0000000accccccf8 R14: 0000000000000438 R15: ffffc90000a08182 [ 860.940396][ C1] FS: 00007fa1c2a186c0(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 860.940409][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.940419][ C1] CR2: 00007fa1c29f7d58 CR3: 0000000060600000 CR4: 00000000003526f0 [ 860.940432][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 860.940440][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 860.940449][ C1] Call Trace: [ 860.940456][ C1] [ 860.940474][ C1] number+0x306/0xf80 [ 860.940508][ C1] ? number+0xb1/0xf80 [ 860.940537][ C1] ? __pfx_number+0x10/0x10 [ 860.940574][ C1] ? format_decode+0x5a3/0xe10 [ 860.940614][ C1] vsnprintf+0x8e5/0xee0 [ 860.940668][ C1] sprintf+0xe7/0x140 [ 860.940706][ C1] ? __pfx_sprintf+0x10/0x10 [ 860.940733][ C1] ? desc_read+0x208/0x3f0 [ 860.940783][ C1] info_print_prefix+0x16b/0x360 [ 860.940814][ C1] ? __pfx_info_print_prefix+0x10/0x10 [ 860.940831][ C1] ? _prb_read_valid+0xa6f/0xa80 [ 860.940882][ C1] record_print_text+0x176/0x450 [ 860.940920][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 860.940946][ C1] ? __pfx_record_print_text+0x10/0x10 [ 860.940961][ C1] ? perf_trace_buf_alloc+0x11b/0x280 [ 860.940994][ C1] ? perf_trace_lock+0x1a0/0x410 [ 860.941015][ C1] ? lock_release+0x4b/0x3d0 [ 860.941032][ C1] ? is_module_text_address+0x1d/0x1e0 [ 860.941049][ C1] ? lock_release+0x4b/0x3d0 [ 860.941097][ C1] printk_get_next_message+0x29c/0x880 [ 860.941142][ C1] ? __pfx_printk_get_next_message+0x10/0x10 [ 860.941164][ C1] ? trace_call_bpf+0xc2/0xb70 [ 860.941222][ C1] ? lock_acquire+0xf0/0x2e0 [ 860.941258][ C1] ? console_flush_all+0x4ac/0xb20 [ 860.941292][ C1] console_flush_all+0x501/0xb20 [ 860.941322][ C1] ? console_flush_all+0x123/0xb20 [ 860.941358][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 860.941389][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 860.941421][ C1] console_unlock+0xd1/0x1c0 [ 860.941456][ C1] ? __pfx_console_unlock+0x10/0x10 [ 860.941490][ C1] ? vprintk_emit+0x2cf/0x560 [ 860.941513][ C1] ? vprintk_emit+0x2cf/0x560 [ 860.941533][ C1] ? vprintk_emit+0x2cf/0x560 [ 860.941564][ C1] vprintk_emit+0x485/0x560 [ 860.941598][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 860.941652][ C1] _printk+0xdd/0x130 [ 860.941700][ C1] ? __pfx__printk+0x10/0x10 [ 860.941730][ C1] ? ktime_get+0x45/0x200 [ 860.941746][ C1] ? find_bug+0xa5/0x370 [ 860.941816][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 860.941840][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 860.941864][ C1] __report_bug+0x317/0x540 [ 860.941885][ C1] ? ktime_get+0x1d2/0x200 [ 860.941917][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 860.941940][ C1] ? __pfx___report_bug+0x10/0x10 [ 860.941969][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 860.942008][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 860.942044][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 860.942064][ C1] report_bug+0x16a/0x220 [ 860.942096][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 860.942113][ C1] ? rcu_check_gp_start_stall+0x2e6/0x470 [ 860.942131][ C1] handle_bug+0x9c/0x200 [ 860.942154][ C1] exc_invalid_op+0x1a/0x50 [ 860.942175][ C1] asm_exc_invalid_op+0x1a/0x20 [ 860.942192][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 860.942210][ C1] Code: ff ff 48 c7 c7 c0 65 2b 9a be 04 00 00 00 e8 93 a7 84 00 4c 89 f7 b8 01 00 00 00 87 05 d5 22 80 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 3f 76 8e 74 47 48 c7 c0 c0 be 11 90 48 c1 e8 [ 860.942222][ C1] RSP: 0018:ffffc90000a08db8 EFLAGS: 00010046 [ 860.942234][ C1] RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81ab42dd [ 860.942244][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e763f00 [ 860.942254][ C1] RBP: ffffc90000a08f28 R08: 0000000000000003 R09: 0000000000000004 [ 860.942263][ C1] R10: dffffc0000000000 R11: fffffbfff3456cb8 R12: 0000000000002904 [ 860.942273][ C1] R13: dffffc0000000000 R14: ffffffff8e763f00 R15: dffffc0000000000 [ 860.942306][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 860.942340][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 860.942364][ C1] rcu_core+0x3fe/0x1070 [ 860.942383][ C1] ? irqentry_exit+0x59e/0x620 [ 860.942408][ C1] ? irqentry_exit+0x59e/0x620 [ 860.942453][ C1] ? __pfx_rcu_core+0x10/0x10 [ 860.942509][ C1] handle_softirqs+0x22a/0x870 [ 860.942542][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 860.942587][ C1] __irq_exit_rcu+0x5f/0x150 [ 860.942609][ C1] irq_exit_rcu+0x9/0x30 [ 860.942627][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 860.942652][ C1] [ 860.942656][ C1] [ 860.942665][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 860.942683][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 860.942704][ C1] Code: e8 eb 4a 03 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 d7 1a 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 ec 35 85 00 48 c7 c3 58 09 1d 93 49 03 1e 48 89 [ 860.942715][ C1] RSP: 0018:ffffc900041d7500 EFLAGS: 00000246 [ 860.942727][ C1] RAX: 1ffffffff1c35af3 RBX: 0000000000000001 RCX: 0000000000000002 [ 860.942736][ C1] RDX: 0000000000000000 RSI: ffffffff8c27b3e0 RDI: ffffffff8c27b3a0 [ 860.942746][ C1] RBP: ffffc900041d7720 R08: ffffffff90118bb7 R09: 1ffffffff2023176 [ 860.942757][ C1] R10: dffffc0000000000 R11: fffffbfff2023177 R12: dffffc0000000000 [ 860.942768][ C1] R13: 0000000000000001 R14: ffffffff8e1ad798 R15: dffffc0000000000 [ 860.942827][ C1] __schedule+0xe4/0x52d0 [ 860.942854][ C1] ? perf_trace_preemptirq_template+0xb2/0x350 [ 860.942880][ C1] ? irqentry_enter+0xac/0x130 [ 860.942907][ C1] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 860.942956][ C1] ? irqentry_exit+0x59e/0x620 [ 860.942980][ C1] ? irqentry_exit+0x59e/0x620 [ 860.942996][ C1] ? trace_irq_disable+0x3b/0x150 [ 860.943027][ C1] ? __pfx___schedule+0x10/0x10 [ 860.943105][ C1] preempt_schedule_notrace+0x57/0x90 [ 860.943131][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 860.943158][ C1] ? 0xffffffffa0202f08 [ 860.943193][ C1] perf_trace_lock+0x38b/0x410 [ 860.943215][ C1] ? perf_trace_lock+0x32d/0x410 [ 860.943251][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.943277][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.943296][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 860.943336][ C1] ? mntput_no_expire+0x1c/0x1c0 [ 860.943357][ C1] ? mntput_no_expire+0x1c/0x1c0 [ 860.943375][ C1] lock_release+0x392/0x3d0 [ 860.943403][ C1] ? mntput_no_expire+0x1c/0x1c0 [ 860.943422][ C1] ? mntput_no_expire+0x1c/0x1c0 [ 860.943449][ C1] mntput_no_expire+0x190/0x1c0 [ 860.943477][ C1] step_into_slowpath+0x2ff/0x7e0 [ 860.943527][ C1] ? __pfx_step_into_slowpath+0x10/0x10 [ 860.943560][ C1] ? inode_permission+0x346/0x5f0 [ 860.943599][ C1] link_path_walk+0xd50/0x18d0 [ 860.943677][ C1] __filename_parentat+0x27f/0x6f0 [ 860.943720][ C1] ? __pfx___filename_parentat+0x10/0x10 [ 860.943847][ C1] filename_create+0xd9/0x370 [ 860.943871][ C1] ? irqentry_exit+0x59e/0x620 [ 860.943899][ C1] ? __pfx_filename_create+0x10/0x10 [ 860.943949][ C1] filename_mkdirat+0xd2/0x510 [ 860.943988][ C1] ? __pfx_filename_mkdirat+0x10/0x10 [ 860.944019][ C1] ? do_getname+0x151/0x250 [ 860.944052][ C1] __se_sys_mkdir+0x34/0x150 [ 860.944083][ C1] do_syscall_64+0x14d/0xf80 [ 860.944102][ C1] ? trace_irq_disable+0x3b/0x150 [ 860.944122][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.944140][ C1] ? clear_bhb_loop+0x40/0x90 [ 860.944168][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.944185][ C1] RIP: 0033:0x7fa1c1b9c799 [ 860.944202][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.944214][ C1] RSP: 002b:00007fa1c2a18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 860.944228][ C1] RAX: ffffffffffffffda RBX: 00007fa1c1e15fa0 RCX: 00007fa1c1b9c799 [ 860.944238][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 860.944248][ C1] RBP: 00007fa1c1c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 860.944257][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.944265][ C1] R13: 00007fa1c1e16038 R14: 00007fa1c1e15fa0 R15: 00007ffd0f176da8 [ 860.944323][ C1] [ 860.945197][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 860.945219][ C0] CPU: 0 UID: 0 PID: 23416 Comm: syz.4.6372 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.945245][ C0] Tainted: [L]=SOFTLOCKUP [ 860.945253][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.945265][ C0] Call Trace: [ 860.945278][ C0] [ 860.945290][ C0] vpanic+0x56c/0xa60 [ 860.945339][ C0] ? __pfx_vpanic+0x10/0x10 [ 860.945379][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 860.945438][ C0] panic+0xc5/0xd0 [ 860.945469][ C0] ? __pfx_panic+0x10/0x10 [ 860.945493][ C0] ? printk_trigger_flush+0x13d/0x180 [ 860.945603][ C0] watchdog_timer_fn+0x785/0x790 [ 860.945640][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 860.945666][ C0] __hrtimer_run_queues+0x4e7/0xcc0 [ 860.945777][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 860.945803][ C0] ? read_tsc+0x9/0x20 [ 860.945872][ C0] hrtimer_interrupt+0x42b/0x1010 [ 860.946022][ C0] __sysvec_apic_timer_interrupt+0x102/0x460 [ 860.946064][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 860.946100][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 860.946124][ C0] RIP: 0010:unwind_get_return_address+0x22/0x90 [ 860.946152][ C0] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 <84> c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 [ 860.946168][ C0] RSP: 0018:ffffc900000076a8 EFLAGS: 00000a02 [ 860.946187][ C0] RAX: 0000000000000000 RBX: ffffc900000076c8 RCX: 0000000000000100 [ 860.946201][ C0] RDX: 0000000000000003 RSI: ffffffff8e165585 RDI: ffffc900000076c8 [ 860.946214][ C0] RBP: ffffc90000007750 R08: ffffc900000073af R09: 0000000000000000 [ 860.946228][ C0] R10: ffffc900000073a0 R11: ffffffffa0202f08 R12: ffff888032308000 [ 860.946242][ C0] R13: 00000000000000f0 R14: dffffc0000000000 R15: ffffc900000076c8 [ 860.946279][ C0] ? 0xffffffffa0202f08 [ 860.946352][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 860.946378][ C0] arch_stack_walk+0xfb/0x150 [ 860.946435][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 860.946486][ C0] stack_trace_save+0xa9/0x100 [ 860.946514][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 860.946534][ C0] ? trace_call_bpf+0x7d0/0xb70 [ 860.946569][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.946627][ C0] kasan_save_track+0x3e/0x80 [ 860.946651][ C0] ? kasan_save_track+0x3e/0x80 [ 860.946671][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 860.946693][ C0] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 860.946931][ C0] __kasan_slab_alloc+0x6c/0x80 [ 860.946967][ C0] kmem_cache_alloc_node_noprof+0x384/0x690 [ 860.947002][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 860.947027][ C0] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 860.947073][ C0] __alloc_skb+0x1d0/0x7d0 [ 860.947128][ C0] new_skb+0x2f/0x2b0 [ 860.947163][ C0] ? is_aoe_netif+0x216/0x300 [ 860.947208][ C0] aoecmd_cfg+0x2b1/0x800 [ 860.947241][ C0] ? aoecmd_cfg+0x102/0x800 [ 860.947275][ C0] ? __pfx_aoecmd_cfg+0x10/0x10 [ 860.947300][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.947371][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.947434][ C0] call_timer_fn+0x192/0x640 [ 860.947466][ C0] ? __pfx_discover_timer+0x10/0x10 [ 860.947492][ C0] ? call_timer_fn+0xd4/0x640 [ 860.947522][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 860.947610][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 860.947638][ C0] ? __pfx_discover_timer+0x10/0x10 [ 860.947680][ C0] __run_timer_base+0x652/0x8b0 [ 860.947711][ C0] ? ktime_get+0x45/0x200 [ 860.947790][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 860.947850][ C0] ? sched_clock_cpu+0x74/0x440 [ 860.947906][ C0] run_timer_softirq+0xb7/0x170 [ 860.947940][ C0] handle_softirqs+0x22a/0x870 [ 860.947985][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 860.948050][ C0] __irq_exit_rcu+0x5f/0x150 [ 860.948079][ C0] irq_exit_rcu+0x9/0x30 [ 860.948104][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 860.948137][ C0] [ 860.948144][ C0] [ 860.948158][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 860.948182][ C0] RIP: 0010:unwind_next_frame+0x1821/0x23c0 [ 860.948210][ C0] Code: 19 02 00 00 80 3d be 9b ab 11 00 0f 85 0c 02 00 00 c6 05 b1 9b ab 11 01 4c 89 f7 e8 b9 0b 00 00 e9 f8 01 00 00 48 8b 54 24 08 <48> 8d 5a 02 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 860.948227][ C0] RSP: 0018:ffffc90004446d38 EFLAGS: 00000246 [ 860.948244][ C0] RAX: 0000000000000000 RBX: ffffc90004446ea0 RCX: 0000000000000000 [ 860.948257][ C0] RDX: ffffffff90a5ec78 RSI: 0000000000000001 RDI: ffffc90004446ec8 [ 860.948271][ C0] RBP: dffffc0000000000 R08: ffffc90004446ec7 R09: 0000000000000000 [ 860.948284][ C0] R10: ffffc90004446eb8 R11: fffff52000888dd9 R12: ffffc90004446eb8 [ 860.948298][ C0] R13: 1ffff92000888dcf R14: ffffc90004446e68 R15: 1ffffffff214bd8f [ 860.948378][ C0] ? unwind_next_frame+0xeae/0x23c0 [ 860.948436][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 860.948471][ C0] ? __unwind_start+0xf7/0x760 [ 860.948529][ C0] __unwind_start+0x5b8/0x760 [ 860.948581][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 860.948614][ C0] arch_stack_walk+0xe3/0x150 [ 860.948671][ C0] ? arch_stack_walk+0xe3/0x150 [ 860.948722][ C0] stack_trace_save+0xa9/0x100 [ 860.948750][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 860.948783][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.948847][ C0] save_stack+0x122/0x230 [ 860.948891][ C0] ? __pfx_save_stack+0x10/0x10 [ 860.948968][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.949036][ C0] __set_page_owner+0x8d/0x4c0 [ 860.949078][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 860.949145][ C0] post_alloc_hook+0x231/0x280 [ 860.949194][ C0] get_page_from_freelist+0x24dc/0x2580 [ 860.949244][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.949322][ C0] ? trace_call_bpf+0x7d0/0xb70 [ 860.949356][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.949414][ C0] ? prepare_alloc_pages+0x22a/0x650 [ 860.949478][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 860.949522][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 860.949569][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 860.949644][ C0] alloc_pages_mpol+0x232/0x4a0 [ 860.949700][ C0] ___kmalloc_large_node+0x4e/0x150 [ 860.949742][ C0] __kmalloc_large_node_noprof+0x18/0x90 [ 860.949781][ C0] __kvmalloc_node_noprof+0x7b/0x8a0 [ 860.949811][ C0] ? bpf_check+0x102/0x1ce00 [ 860.949839][ C0] ? ktime_get+0x45/0x200 [ 860.949857][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 860.949884][ C0] ? read_tsc+0x9/0x20 [ 860.949927][ C0] bpf_check+0x102/0x1ce00 [ 860.949963][ C0] ? perf_trace_buf_alloc+0x11b/0x280 [ 860.950007][ C0] ? perf_trace_lock+0x1a0/0x410 [ 860.950064][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.950098][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.950152][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.950201][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.950248][ C0] ? trace_call_bpf+0x7d0/0xb70 [ 860.950282][ C0] ? trace_call_bpf+0xc2/0xb70 [ 860.950344][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 860.950375][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 860.950438][ C0] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 860.950485][ C0] ? perf_trace_lock+0x32d/0x410 [ 860.950520][ C0] ? perf_trace_lock+0x32d/0x410 [ 860.950570][ C0] ? __pfx_bpf_check+0x10/0x10 [ 860.950609][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.950672][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 860.950709][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 860.950739][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 860.950784][ C0] ? __asan_memset+0x22/0x50 [ 860.950813][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 860.950839][ C0] ? security_bpf_prog_load+0x125/0x3c0 [ 860.950885][ C0] bpf_prog_load+0x1484/0x1ae0 [ 860.950975][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 860.951004][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.951118][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 860.951141][ C0] ? security_bpf+0x7e/0x2d0 [ 860.951182][ C0] __sys_bpf+0x618/0x950 [ 860.951229][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 860.951398][ C0] __x64_sys_bpf+0x7c/0x90 [ 860.951437][ C0] do_syscall_64+0x14d/0xf80 [ 860.951461][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.951485][ C0] ? clear_bhb_loop+0x40/0x90 [ 860.951525][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.951547][ C0] RIP: 0033:0x7f41be59c799 [ 860.951572][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.951592][ C0] RSP: 002b:00007f41bf4de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 860.951613][ C0] RAX: ffffffffffffffda RBX: 00007f41be815fa0 RCX: 00007f41be59c799 [ 860.951627][ C0] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 860.951639][ C0] RBP: 00007f41be632c99 R08: 0000000000000000 R09: 0000000000000000 [ 860.951652][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.951664][ C0] R13: 00007f41be816038 R14: 00007f41be815fa0 R15: 00007fff8cc481b8 [ 860.951751][ C0] [ 862.753516][ C0] Kernel Offset: disabled [ 862.757826][ C0] Rebooting in 86400 seconds..