last executing test programs: 27.858780248s ago: executing program 2 (id=2971): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1c00000014006b030031a6080c000af32c000000001f821a6703eec6", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034007410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000"], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 27.193725937s ago: executing program 2 (id=2976): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x40000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.874458548s ago: executing program 1 (id=3005): r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f06000800000000"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x79, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b69", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x6}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x11300, 0xd3e, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 10.969832523s ago: executing program 4 (id=3007): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) setsockopt$sock_attach_bpf(r0, 0x6, 0x16, &(0x7f0000000200)=r3, 0x4) r4 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 10.450094346s ago: executing program 3 (id=3008): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e12", 0x28}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00003a0071100100000000009500000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000300009116144f782db44b904021d08", 0x13}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 10.145039969s ago: executing program 3 (id=3009): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1c00000014006b030031a6080c000af32c000000001f821a6703eec6", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034007410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000"], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x20000800) 9.603976727s ago: executing program 4 (id=3011): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB="000000000009000000000000000000000000000000000400000000006780e7456187d608c4a664157beafec540260d88f2f495983f689bb8b934e2ae9ede585d25ef9c1f899dfa648af5111a24c1c9382cc82167f40315f0934244985770eeab588449ed6377ea53944bc3117ff681c1469edc5c5f35dff94afc27e19659df80ce5e449e68a98b72f652"], 0x50) r2 = socket$kcm(0xa, 0x6, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'memory'}, {0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x2b, 'memory'}, {0x2d, 'net'}, {0x2d, 'memory'}, {0x2b, 'hugetlb'}]}, 0x32) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x4000090) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x5, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000400)=@isdn={0x22, 0x0, 0xa, 0x8, 0xc}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffd4}, 0x240000c4) 9.595788149s ago: executing program 3 (id=3012): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1c00000014006b030031a6080c000af32c000000001f821a6703eec6", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034007410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000"], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, &(0x7f0000000580), 0x0, 0x0, 0xaa, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 8.843091568s ago: executing program 3 (id=3013): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) setsockopt$sock_attach_bpf(r0, 0x6, 0x16, &(0x7f0000000200)=r3, 0x4) r4 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 8.599222056s ago: executing program 1 (id=3014): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x40000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.560045315s ago: executing program 4 (id=3015): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) setsockopt$sock_attach_bpf(r0, 0x6, 0x16, &(0x7f0000000200)=r3, 0x4) r4 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 8.076109491s ago: executing program 1 (id=3017): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=""/4088, 0xff8}, {&(0x7f0000004700)=""/4058, 0xfda}, {0x0}], 0x3}, 0x10100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000000000)="91c9fdd197f3ab9720584ce609f33903e6b5d0fcc1b29fb28462", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 5.357742337s ago: executing program 1 (id=3018): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x40000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.09160111s ago: executing program 2 (id=2981): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.037998283s ago: executing program 1 (id=3020): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r1, 0x4) setsockopt$sock_attach_bpf(r0, 0x6, 0x16, &(0x7f0000000200)=r1, 0x4) r2 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 4.978056297s ago: executing program 0 (id=3021): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1c00000014006b030031a6080c000af32c000000001f821a6703eec6", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034007410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000"], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x20000800) 4.600124876s ago: executing program 2 (id=3022): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=r2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200)=r2, 0x4) r3 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89ed, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 4.440494354s ago: executing program 0 (id=3023): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1c00000014006b030031a6080c000af32c000000001f821a6703eec6", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034007410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000"], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, &(0x7f0000000580), 0x0, 0x0, 0xaa, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 3.734776932s ago: executing program 4 (id=3024): r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f06000800000000"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x79, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b69", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x6}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x11300, 0xd3e, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 3.202921899s ago: executing program 0 (id=3025): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB="000000000009000000000000000000000000000000000400000000006780e7456187d608c4a664157beafec540260d88f2f495983f689bb8b934e2ae9ede585d25ef9c1f899dfa648af5111a24c1c9382cc82167f40315f0934244985770eeab588449ed6377ea53944bc3117ff681c1469edc5c5f35dff94afc27e19659df80ce5e449e68a98b72f652"], 0x50) r2 = socket$kcm(0xa, 0x6, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'memory'}, {0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x2b, 'memory'}, {0x2d, 'net'}, {0x2d, 'memory'}, {0x2b, 'hugetlb'}]}, 0x32) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x4000090) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x5, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000400)=@isdn={0x22, 0x0, 0xa, 0x8, 0xc}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffd4}, 0x240000c4) 3.195732381s ago: executing program 3 (id=3026): r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f060008000000000000007127"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x79, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x1000, 0xdc, 0xe2, 0x400}, {0x1, 0x3, 0xf, 0x5}, {0x3, 0x7, 0x8, 0x5}, {0x3ff, 0x78, 0x5f, 0x6}, {0x2, 0x0, 0xe, 0x5}, {0xfff8, 0x4, 0x78, 0x7}, {0x5, 0x7, 0x2, 0x3}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b69", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x6}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x11300, 0xd3e, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 2.73547469s ago: executing program 2 (id=3027): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4}, {0x10000002, 0x0, 0xa, 0xc}]}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r3, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff0f}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x101) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027", 0x23}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=""/4088, 0x1001}, {&(0x7f0000004700)=""/4058, 0xfffffff6}, {&(0x7f0000005700)=""/4135, 0x1027}, {0x0}], 0x4}, 0x10100) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002a40)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000000000)="91c9fdd197f3ab9720584ce609f33903e6b5d0fcc1b29fb28462", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2.701284028s ago: executing program 0 (id=3028): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000100)=r5) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.420441875s ago: executing program 2 (id=3029): r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f06000800000000000000"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x79, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b69", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x6}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x11300, 0xd3e, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 267.219897ms ago: executing program 0 (id=3030): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x40000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 266.887966ms ago: executing program 4 (id=3031): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e12", 0x28}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00003a0071100100000000009500000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000300009116144f782db44b904021d08", 0x13}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 134.336108ms ago: executing program 4 (id=3032): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 77.810442ms ago: executing program 3 (id=3033): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x40000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.572439ms ago: executing program 0 (id=3034): r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f060008000000000000007127"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x79, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x1000, 0xdc, 0xe2, 0x400}, {0x1, 0x3, 0xf, 0x5}, {0x3, 0x7, 0x8, 0x5}, {0x3ff, 0x78, 0x5f, 0x6}, {0x2, 0x0, 0xe, 0x5}, {0xfff8, 0x4, 0x78, 0x7}, {0x5, 0x7, 0x2, 0x3}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b69", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x6}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x11300, 0xd3e, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 1 (id=3035): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xf91, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x1ffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe, 0xeb3}, 0xc081, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x18000, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888110", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): nk becomes ready [ 89.759610][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.763569][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.778084][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.787636][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.796588][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.806428][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.819764][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.829109][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.837790][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.865686][ T4281] device veth0_vlan entered promiscuous mode [ 89.890131][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.890711][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.909331][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.920564][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.945146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.980197][ T4281] device veth1_vlan entered promiscuous mode [ 89.996318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.998155][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 90.003598][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 90.029834][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.048699][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.059471][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.071294][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.082123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.089511][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 90.105691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.155824][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 90.163582][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 90.228829][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.228965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.245708][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.246137][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.286419][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.290459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.303316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.340133][ T4281] device veth0_macvtap entered promiscuous mode [ 90.350423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.361229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.376401][ T4281] device veth1_macvtap entered promiscuous mode [ 90.465621][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.493276][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.503640][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.518305][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.528725][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.539356][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.550551][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.561829][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.584626][ C1] hrtimer: interrupt took 59449 ns [ 90.603225][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.641915][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.661478][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.679420][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.697047][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.717928][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.737367][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.758267][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.773365][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.783982][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.802858][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.822742][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.840327][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.895030][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.905594][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.945940][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.970839][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.982488][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.021767][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.206067][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.224531][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.258940][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.310041][ T4377] Zero length message leads to an empty skb [ 91.330842][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.340273][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.351834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.574179][ T4390] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 91.592024][ T4390] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5'. [ 92.068171][ T4404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18'. [ 92.086760][ T4284] Bluetooth: hci0: unexpected event 0x18 length: 15 < 23 [ 92.881601][ T4416] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 92.908319][ T4416] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21'. [ 93.107103][ T4424] netlink: 'syz.2.25': attribute type 39 has an invalid length. [ 93.132733][ T4426] syz.0.28 uses obsolete (PF_INET,SOCK_PACKET) [ 94.012235][ T4430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28'. [ 94.132780][ T4424] syz.2.25 (4424) used greatest stack depth: 20752 bytes left [ 95.720920][ T4476] netlink: 'syz.0.44': attribute type 10 has an invalid length. [ 96.329656][ T4476] device veth0_vlan left promiscuous mode [ 96.369451][ T4476] device veth0_vlan entered promiscuous mode [ 96.417011][ T4476] team0: Device veth0_vlan failed to register rx_handler [ 97.690586][ T4508] netlink: 'syz.3.57': attribute type 10 has an invalid length. [ 97.723144][ T4508] device hsr0 entered promiscuous mode [ 97.887247][ T4508] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.920449][ T4508] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 97.958179][ T4508] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 97.990361][ T4508] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 98.704220][ T4531] netlink: 'syz.0.67': attribute type 39 has an invalid length. [ 101.156892][ T4589] netlink: 'syz.4.87': attribute type 39 has an invalid length. [ 103.049844][ T4647] netlink: 'syz.0.110': attribute type 2 has an invalid length. [ 103.089059][ T4647] netlink: 119 bytes leftover after parsing attributes in process `syz.0.110'. [ 108.241210][ T4747] netlink: 'syz.1.153': attribute type 41 has an invalid length. [ 109.534173][ T4779] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 110.256492][ T4779] device veth0_vlan left promiscuous mode [ 110.329701][ T4779] device veth0_vlan entered promiscuous mode [ 110.452509][ T4779] team0: Device veth0_vlan failed to register rx_handler [ 110.602503][ T4796] netlink: 'syz.1.173': attribute type 29 has an invalid length. [ 110.655485][ T4796] netlink: 'syz.1.173': attribute type 29 has an invalid length. [ 110.682220][ T4800] netlink: 'syz.1.173': attribute type 29 has an invalid length. [ 110.715985][ T4796] netlink: 'syz.1.173': attribute type 29 has an invalid length. [ 110.732877][ T4779] syz.2.167 (4779) used greatest stack depth: 20688 bytes left [ 110.742341][ T4796] netlink: 'syz.1.173': attribute type 29 has an invalid length. [ 110.920669][ T4807] netlink: 'syz.0.179': attribute type 3 has an invalid length. [ 110.988504][ T4807] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.179'. [ 113.403527][ T4867] netlink: 'syz.4.202': attribute type 41 has an invalid length. [ 113.899598][ T4873] can: request_module (can-proto-3) failed. [ 115.415076][ T4918] netlink: 'syz.2.223': attribute type 41 has an invalid length. [ 116.294537][ T4948] netlink: 'syz.3.234': attribute type 10 has an invalid length. [ 116.304347][ T4948] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 116.376888][ T4948] netlink: 'syz.3.234': attribute type 3 has an invalid length. [ 116.392662][ T4948] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.234'. [ 116.628408][ T4951] syz.4.235 (4951) used greatest stack depth: 20624 bytes left [ 116.714183][ T4960] netlink: 'syz.4.238': attribute type 29 has an invalid length. [ 116.744391][ T4960] netlink: 'syz.4.238': attribute type 29 has an invalid length. [ 116.766883][ T4961] netlink: 'syz.4.238': attribute type 29 has an invalid length. [ 116.806834][ T4960] netlink: 'syz.4.238': attribute type 29 has an invalid length. [ 116.842296][ T4960] netlink: 'syz.4.238': attribute type 29 has an invalid length. [ 117.087720][ T4970] netlink: 'syz.2.252': attribute type 29 has an invalid length. [ 117.939783][ T4991] netlink: 189104 bytes leftover after parsing attributes in process `syz.0.248'. [ 118.190998][ T4988] syz.0.248 (4988) used greatest stack depth: 16000 bytes left [ 118.412842][ T5014] validate_nla: 10 callbacks suppressed [ 118.412882][ T5014] netlink: 'syz.0.258': attribute type 3 has an invalid length. [ 118.438077][ T5014] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.258'. [ 118.685504][ T5026] netlink: 'syz.2.265': attribute type 2 has an invalid length. [ 119.686527][ T5051] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 120.142461][ T5058] netlink: 'syz.0.275': attribute type 21 has an invalid length. [ 120.173145][ T5058] netlink: 132 bytes leftover after parsing attributes in process `syz.0.275'. [ 120.266960][ T5062] pim6reg: tun_chr_ioctl cmd 1074025677 [ 120.304974][ T5062] pim6reg: linktype set to 778 [ 123.564818][ T5081] netlink: 'syz.0.285': attribute type 2 has an invalid length. [ 123.572542][ T5081] netlink: 'syz.0.285': attribute type 8 has an invalid length. [ 123.604697][ T5081] netlink: 'syz.0.285': attribute type 9 has an invalid length. [ 123.624680][ T5081] netlink: 'syz.0.285': attribute type 10 has an invalid length. [ 123.654412][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 123.910530][ T4284] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 125.034357][ T5121] netlink: 'syz.3.301': attribute type 2 has an invalid length. [ 125.055397][ T5121] netlink: 'syz.3.301': attribute type 8 has an invalid length. [ 125.063261][ T5121] netlink: 'syz.3.301': attribute type 9 has an invalid length. [ 125.077164][ T5121] netlink: 'syz.3.301': attribute type 10 has an invalid length. [ 125.091359][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 125.397165][ T5131] netlink: 'syz.4.304': attribute type 3 has an invalid length. [ 125.405633][ T5131] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.304'. [ 125.626314][ T4284] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 126.327042][ T5160] netlink: 830 bytes leftover after parsing attributes in process `syz.1.315'. [ 127.815025][ T5192] netlink: 'syz.2.325': attribute type 10 has an invalid length. [ 127.850023][ T5188] netlink: 156 bytes leftover after parsing attributes in process `syz.4.323'. [ 128.391410][ T4284] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 128.690333][ T5217] validate_nla: 1 callbacks suppressed [ 128.690351][ T5217] netlink: 'syz.3.336': attribute type 10 has an invalid length. [ 130.381237][ T5217] bond0: (slave veth0_to_batadv): Enslaving as an active interface with an up link [ 130.396900][ T5215] netlink: 'syz.4.337': attribute type 6 has an invalid length. [ 130.414779][ T5215] netlink: 168 bytes leftover after parsing attributes in process `syz.4.337'. [ 130.732589][ T5222] netlink: 60935 bytes leftover after parsing attributes in process `syz.3.339'. [ 130.747544][ T5222] netlink: 802 bytes leftover after parsing attributes in process `syz.3.339'. [ 130.760700][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 131.483754][ T5240] netlink: 'syz.0.344': attribute type 27 has an invalid length. [ 131.509827][ T4284] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 131.523663][ T5240] netlink: 152 bytes leftover after parsing attributes in process `syz.0.344'. [ 131.582520][ T5240] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.718362][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.725154][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.934258][ T5249] netlink: 10 bytes leftover after parsing attributes in process `syz.3.347'. [ 133.097409][ T5257] netlink: 'syz.4.350': attribute type 10 has an invalid length. [ 134.074960][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.084334][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.168854][ T5260] device bridge_slave_1 left promiscuous mode [ 134.195333][ T5260] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.239708][ T5260] device bridge_slave_0 left promiscuous mode [ 134.274989][ T5260] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.415240][ T5267] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 137.438508][ T5267] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 137.453907][ T5267] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 137.455369][ T5343] tap0: tun_chr_ioctl cmd 1074025675 [ 137.510413][ T5343] tap0: persist enabled [ 137.721898][ T4284] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 137.765451][ T5353] device syzkaller0 entered promiscuous mode [ 140.030218][ T5373] netlink: 'syz.4.369': attribute type 41 has an invalid length. [ 140.039905][ T5378] netlink: 'syz.3.371': attribute type 39 has an invalid length. [ 140.121106][ T5380] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 140.136278][ T5380] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 140.152877][ T5380] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 140.248048][ T4284] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 140.304245][ T5396] netlink: 'syz.2.379': attribute type 2 has an invalid length. [ 140.342101][ T5396] netlink: 'syz.2.379': attribute type 8 has an invalid length. [ 140.358495][ T5396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.379'. [ 140.528873][ T4284] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 142.045526][ T5442] netlink: 'syz.3.392': attribute type 41 has an invalid length. [ 142.104817][ T4284] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 143.995621][ T4284] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 145.571097][ T5486] netlink: 'syz.2.412': attribute type 41 has an invalid length. [ 145.680155][ T4284] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 148.540631][ T5518] device syzkaller0 entered promiscuous mode [ 150.712819][ T5527] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 150.743864][ T5527] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 150.774105][ T5527] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 150.970341][ T4284] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 152.074672][ T4284] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 155.256309][ T4284] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 157.025838][ T5558] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 157.043603][ T5558] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 157.053728][ T5558] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 157.062956][ T5621] netlink: 830 bytes leftover after parsing attributes in process `syz.4.471'. [ 157.306090][ T4284] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 160.747196][ T5658] Driver unsupported XDP return value 0 on prog (id 201) dev N/A, expect packet loss! [ 160.956489][ T5660] device syzkaller0 entered promiscuous mode [ 160.981006][ T5666] netlink: 'syz.3.488': attribute type 33 has an invalid length. [ 161.001556][ T5666] netlink: 152 bytes leftover after parsing attributes in process `syz.3.488'. [ 161.088468][ T5666] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 161.368330][ T4284] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 165.175933][ T4284] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 166.165349][ T5701] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 166.181759][ T5701] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 166.191794][ T5701] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 166.704109][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.733297][ T5732] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.510'. [ 166.786939][ T5728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.124157][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.136596][ T5728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.648387][ T5746] netlink: 'syz.3.517': attribute type 10 has an invalid length. [ 167.660725][ T5746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.517'. [ 167.686355][ T5746] batman_adv: batadv0: Adding interface: virt_wifi0 [ 167.693678][ T5746] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.733339][ T5750] sctp: [Deprecated]: syz.1.519 (pid 5750) Use of int in maxseg socket option. [ 167.733339][ T5750] Use struct sctp_assoc_value instead [ 167.790045][ T5746] batman_adv: batadv0: Interface activated: virt_wifi0 [ 168.121361][ T4284] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 169.783390][ T4284] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 170.117627][ T5814] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.545'. [ 170.446348][ T5824] netlink: 'syz.3.550': attribute type 29 has an invalid length. [ 170.499113][ T5824] netlink: 'syz.3.550': attribute type 29 has an invalid length. [ 170.930285][ T5831] device syzkaller0 entered promiscuous mode [ 171.437428][ T4284] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 171.777182][ T5846] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.559'. [ 172.358736][ T4284] Bluetooth: hci2: unexpected event 0x0f length: 151 > 4 [ 173.248056][ T4284] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 173.909735][ T5875] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.571'. [ 176.561175][ T5843] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 176.571124][ T5843] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 176.580812][ T5843] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 176.719749][ T5890] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.576'. [ 176.969567][ T4284] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 177.064317][ T5907] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.583'. [ 178.994191][ T4284] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 179.174005][ T5946] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.597'. [ 179.487551][ T5955] device sit0 entered promiscuous mode [ 179.778919][ T5962] netlink: 'syz.1.603': attribute type 10 has an invalid length. [ 179.821237][ T5962] team0: Port device netdevsim0 added [ 180.863979][ T5988] netlink: 'syz.3.612': attribute type 29 has an invalid length. [ 180.886714][ T4284] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 180.907191][ T5988] netlink: 'syz.3.612': attribute type 29 has an invalid length. [ 180.955960][ T5989] netlink: 'syz.3.612': attribute type 29 has an invalid length. [ 180.982857][ T5988] netlink: 'syz.3.612': attribute type 29 has an invalid length. [ 181.014104][ T5988] netlink: 'syz.3.612': attribute type 29 has an invalid length. [ 181.274386][ T5993] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.613'. [ 182.881095][ T6020] netlink: 'syz.3.631': attribute type 10 has an invalid length. [ 183.189500][ T6020] team0: Port device netdevsim0 added [ 183.456232][ T6033] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.626'. [ 183.614653][ T4284] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 183.913217][ T6038] device sit0 entered promiscuous mode [ 185.280663][ T6067] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.642'. [ 185.404112][ T4284] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 186.282513][ T6099] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.655'. [ 186.684049][ T4284] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 186.870838][ T6104] delete_channel: no stack [ 187.473498][ T6125] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.667'. [ 187.542052][ T4284] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 187.702187][ T6133] netlink: 'syz.2.671': attribute type 29 has an invalid length. [ 187.717449][ T6133] netlink: 'syz.2.671': attribute type 29 has an invalid length. [ 187.810124][ T6133] netlink: 'syz.2.671': attribute type 29 has an invalid length. [ 188.637261][ T6151] device syzkaller0 entered promiscuous mode [ 191.361742][ T6173] netlink: 'syz.4.688': attribute type 33 has an invalid length. [ 191.369754][ T6173] netlink: 152 bytes leftover after parsing attributes in process `syz.4.688'. [ 191.379954][ T6181] netlink: 'syz.3.687': attribute type 16 has an invalid length. [ 191.392553][ T6181] netlink: 156 bytes leftover after parsing attributes in process `syz.3.687'. [ 191.729222][ T6204] device syzkaller0 entered promiscuous mode [ 193.052109][ T6239] netlink: 'syz.1.712': attribute type 29 has an invalid length. [ 193.697431][ T6234] netlink: 128 bytes leftover after parsing attributes in process `syz.4.710'. [ 193.716172][ T6234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.734117][ T6239] netlink: 'syz.1.712': attribute type 29 has an invalid length. [ 193.737485][ T6237] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 193.748454][ T6240] netlink: 'syz.1.712': attribute type 29 has an invalid length. [ 193.764811][ T6237] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 193.774447][ T6237] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 193.804716][ T6241] netlink: 'syz.1.712': attribute type 29 has an invalid length. [ 193.812767][ T6242] netlink: 'syz.1.712': attribute type 29 has an invalid length. [ 194.157546][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.163992][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.494050][ T6267] device syzkaller0 entered promiscuous mode [ 197.891228][ T6317] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 197.905242][ T6312] device syzkaller0 entered promiscuous mode [ 197.913396][ T6317] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 197.929924][ T6317] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 198.612929][ T6351] device syzkaller0 entered promiscuous mode [ 199.906193][ T6392] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.769'. [ 201.117931][ T6415] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.780'. [ 201.642271][ T6361] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 201.663726][ T6361] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 201.673808][ T6361] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 201.998689][ T6438] netlink: 'syz.2.789': attribute type 29 has an invalid length. [ 202.011055][ T6438] netlink: 'syz.2.789': attribute type 29 has an invalid length. [ 202.023384][ T6438] netlink: 'syz.2.789': attribute type 29 has an invalid length. [ 202.036410][ T6438] netlink: 'syz.2.789': attribute type 29 has an invalid length. [ 202.100341][ T6440] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.791'. [ 202.194883][ T6438] netlink: 'syz.2.789': attribute type 29 has an invalid length. [ 202.224233][ T6445] delete_channel: no stack [ 202.239263][ T6445] delete_channel: no stack [ 202.252259][ T6441] device sit0 left promiscuous mode [ 202.402473][ T6444] device sit0 entered promiscuous mode [ 202.721810][ T6454] device syzkaller0 entered promiscuous mode [ 203.036686][ T6474] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.803'. [ 205.244768][ T6464] netlink: 160 bytes leftover after parsing attributes in process `syz.2.797'. [ 205.257776][ T6484] device syzkaller0 entered promiscuous mode [ 205.258687][ T6487] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 205.314645][ T6487] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 205.324289][ T6487] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 205.688737][ T6517] hsr0: VLAN not yet supported [ 206.474835][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 206.485994][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 206.492043][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 206.499048][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 206.499069][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 208.216208][ T6524] delete_channel: no stack [ 208.221405][ T6524] delete_channel: no stack [ 208.262070][ T6529] device syzkaller0 entered promiscuous mode [ 210.609667][ T6534] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 210.619262][ T6534] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 210.637513][ T6534] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 210.916123][ T6577] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.839'. [ 211.340198][ T6587] delete_channel: no stack [ 211.346266][ T6587] delete_channel: no stack [ 213.494378][ T6596] device syzkaller0 entered promiscuous mode [ 213.528315][ T6601] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.851'. [ 216.860306][ T4284] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 218.174660][ T6626] netlink: 'syz.4.863': attribute type 21 has an invalid length. [ 218.182550][ T6626] netlink: 156 bytes leftover after parsing attributes in process `syz.4.863'. [ 218.218399][ T6639] netlink: 'syz.0.868': attribute type 39 has an invalid length. [ 220.945420][ T4284] Bluetooth: hci4: unexpected event 0x12 length: 151 > 8 [ 220.967751][ T6691] device syzkaller0 entered promiscuous mode [ 224.607794][ T4284] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 228.703656][ T6754] device sit0 left promiscuous mode [ 229.801266][ T6859] device syzkaller0 entered promiscuous mode [ 230.453587][ T6881] sctp: [Deprecated]: syz.1.970 (pid 6881) Use of int in maxseg socket option. [ 230.453587][ T6881] Use struct sctp_assoc_value instead [ 231.677259][ T6920] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.991'. [ 233.185218][ T6888] netlink: 'syz.3.974': attribute type 2 has an invalid length. [ 233.192954][ T6888] netlink: 'syz.3.974': attribute type 8 has an invalid length. [ 233.201638][ T6888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.974'. [ 233.248414][ T6899] device syzkaller0 entered promiscuous mode [ 233.257116][ T6921] device sit0 left promiscuous mode [ 233.702292][ T6947] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.993'. [ 236.097661][ T6958] device syzkaller0 entered promiscuous mode [ 236.107946][ T6965] IPv6: Can't replace route, no match found [ 236.639296][ T6984] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1006'. [ 238.354336][ T6995] device syzkaller0 entered promiscuous mode [ 238.382481][ T7001] device sit0 entered promiscuous mode [ 238.410118][ T7000] delete_channel: no stack [ 238.663610][ T7010] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1017'. [ 238.755709][ T7015] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1018'. [ 239.040684][ T7023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1022'. [ 240.227480][ T7015] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1018'. [ 240.238087][ T7023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1022'. [ 240.517160][ T4284] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 240.570973][ T7036] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1029'. [ 240.733721][ T7038] device sit0 entered promiscuous mode [ 241.620666][ T7054] device syzkaller0 entered promiscuous mode [ 241.685697][ T7074] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1043'. [ 241.776198][ T4284] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 242.323227][ T7095] netlink: 'syz.1.1051': attribute type 9 has an invalid length. [ 242.340760][ T7095] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1051'. [ 242.725367][ T7107] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1055'. [ 242.949576][ T7112] netlink: 'syz.1.1057': attribute type 29 has an invalid length. [ 243.962013][ T7092] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1050'. [ 243.975826][ T7092] bridge_slave_1: default FDB implementation only supports local addresses [ 243.997964][ T7112] netlink: 'syz.1.1057': attribute type 29 has an invalid length. [ 244.193341][ T7124] IPv6: Can't replace route, no match found [ 244.232377][ T4284] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 244.391815][ T7130] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1063'. [ 244.486694][ T7137] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1066'. [ 244.612633][ T7130] team0: Port device team_slave_0 removed [ 244.630997][ T7130] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 244.664029][ T7139] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 247.115327][ T7142] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 247.194136][ T7142] team0: Port device netdevsim0 removed [ 247.221127][ T7142] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 247.576966][ T7160] device syzkaller0 entered promiscuous mode [ 247.620422][ T4284] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 247.725429][ T7178] netlink: 16187 bytes leftover after parsing attributes in process `syz.1.1080'. [ 249.819145][ T7187] netlink: 'syz.3.1082': attribute type 13 has an invalid length. [ 249.827126][ T7187] netlink: 'syz.3.1082': attribute type 58 has an invalid length. [ 249.835266][ T7187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1082'. [ 249.849714][ T7192] netlink: 'syz.2.1085': attribute type 10 has an invalid length. [ 249.878950][ T7192] team0: Port device netdevsim0 added [ 249.914864][ T7195] netlink: 'syz.2.1085': attribute type 10 has an invalid length. [ 249.962557][ T7195] team0: Port device netdevsim0 removed [ 250.007625][ T7195] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 250.022841][ T7194] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1084'. [ 250.060066][ T7194] team0: Port device team_slave_0 removed [ 250.115280][ T7194] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 250.151393][ T7202] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1088'. [ 250.262417][ T7208] device syzkaller0 entered promiscuous mode [ 250.301343][ T7211] netlink: 16187 bytes leftover after parsing attributes in process `syz.1.1091'. [ 250.498641][ T4284] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 250.817516][ T7226] device syzkaller0 entered promiscuous mode [ 251.588546][ T7245] netlink: 16187 bytes leftover after parsing attributes in process `syz.4.1104'. [ 254.959512][ T4284] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 255.610563][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.624024][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.224015][ T7236] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 256.251336][ T7239] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 256.262403][ T7239] team0: Port device netdevsim0 removed [ 256.288492][ T7239] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 256.447319][ T7271] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1115'. [ 256.491380][ T7273] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 256.508380][ T7273] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1116'. [ 256.827972][ T4284] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 259.842439][ T7298] device syzkaller0 entered promiscuous mode [ 259.858888][ T7302] netlink: 'syz.2.1128': attribute type 10 has an invalid length. [ 259.883749][ T7302] bond0: (slave netdevsim0): Releasing backup interface [ 259.915288][ T7302] team0: Port device netdevsim0 added [ 259.952776][ T7305] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1131'. [ 261.244713][ T4284] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 262.910383][ T7314] netlink: 'syz.0.1135': attribute type 10 has an invalid length. [ 262.926748][ T7314] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1135'. [ 262.948890][ T7316] veth0_to_batadv: mtu less than device minimum [ 263.129896][ T7343] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1145'. [ 263.877557][ T7366] netlink: 'syz.3.1155': attribute type 11 has an invalid length. [ 263.889478][ T7362] device syzkaller0 entered promiscuous mode [ 263.906474][ T7366] netlink: 'syz.3.1155': attribute type 11 has an invalid length. [ 263.914496][ T7366] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1155'. [ 263.934342][ T7365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.432762][ T7380] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1161'. [ 268.686202][ T7370] netlink: 'syz.3.1156': attribute type 10 has an invalid length. [ 268.694164][ T7370] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1156'. [ 268.713399][ T7370] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 268.782726][ T7370] batman_adv: batadv0: Removing interface: virt_wifi0 [ 268.820572][ T7372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1157'. [ 268.831180][ T7374] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1159'. [ 269.250010][ T7404] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1172'. [ 269.464451][ T7412] device syzkaller0 entered promiscuous mode [ 270.277474][ T7440] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1187'. [ 271.744406][ T7458] netlink: 'syz.2.1193': attribute type 1 has an invalid length. [ 271.775882][ T7458] netlink: 'syz.2.1193': attribute type 3 has an invalid length. [ 271.784414][ T7458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1193'. [ 273.609072][ T7474] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1198'. [ 274.733288][ T7458] netlink: 'syz.2.1193': attribute type 10 has an invalid length. [ 274.754589][ T7458] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1193'. [ 274.788452][ T7479] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1200'. [ 275.056345][ T7503] netlink: 'syz.0.1209': attribute type 21 has an invalid length. [ 275.075085][ T7503] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1209'. [ 275.174053][ T7507] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1211'. [ 275.970092][ T7520] device syzkaller0 entered promiscuous mode [ 276.505891][ T7537] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1223'. [ 278.443230][ T7524] device veth1_macvtap left promiscuous mode [ 278.489876][ T7548] netlink: 'syz.4.1227': attribute type 21 has an invalid length. [ 278.504736][ T7548] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.1227'. [ 278.697249][ T7565] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1234'. [ 282.448336][ T7596] device syzkaller0 entered promiscuous mode [ 282.486475][ T7600] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1247'. [ 283.860443][ T7616] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1253'. [ 287.548582][ T7616] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1253'. [ 287.568043][ T7629] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 287.599070][ T7629] team0: Device hsr_slave_0 failed to register rx_handler [ 287.780829][ T7635] device lo entered promiscuous mode [ 287.839481][ T7635] netlink: 'syz.1.1259': attribute type 10 has an invalid length. [ 287.922177][ T7635] team0: Port device virt_wifi0 added [ 288.105073][ T7644] netlink: 'syz.2.1263': attribute type 21 has an invalid length. [ 288.121804][ T7644] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1263'. [ 289.760965][ T7655] device sit0 entered promiscuous mode [ 289.825006][ T7654] netlink: 'syz.1.1267': attribute type 21 has an invalid length. [ 289.832933][ T7654] netlink: 9618 bytes leftover after parsing attributes in process `syz.1.1267'. [ 290.308848][ T7663] device veth0_macvtap left promiscuous mode [ 290.375739][ T7671] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 290.441502][ T7671] team0: Device hsr_slave_0 failed to register rx_handler [ 290.679646][ T7678] device veth1_macvtap left promiscuous mode [ 290.694946][ T7678] device macsec0 entered promiscuous mode [ 290.997220][ T7696] device lo entered promiscuous mode [ 291.077030][ T7696] netlink: 'syz.2.1280': attribute type 10 has an invalid length. [ 291.108196][ T7699] netlink: 'syz.3.1281': attribute type 21 has an invalid length. [ 291.127403][ T7699] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1281'. [ 291.169170][ T7699] device sit0 left promiscuous mode [ 293.073916][ T7701] device sit0 entered promiscuous mode [ 293.969097][ T7713] device veth0_macvtap left promiscuous mode [ 295.009627][ T7747] netlink: 'syz.1.1299': attribute type 21 has an invalid length. [ 295.050698][ T7747] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1299'. [ 295.633223][ T7747] device sit0 left promiscuous mode [ 296.051499][ T7770] netlink: 'syz.0.1308': attribute type 10 has an invalid length. [ 296.070639][ T7770] team0: Device hsr_slave_0 failed to register rx_handler [ 296.163148][ T7766] device veth0_macvtap left promiscuous mode [ 296.514364][ T7775] device lo entered promiscuous mode [ 296.617306][ T7778] netlink: 'syz.0.1309': attribute type 10 has an invalid length. [ 297.187222][ T7783] device veth1_macvtap left promiscuous mode [ 297.212946][ T7783] device macsec0 entered promiscuous mode [ 298.274047][ T7801] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 298.289845][ T7801] team0: Device hsr_slave_0 failed to register rx_handler [ 298.599222][ T7815] netlink: 'syz.2.1324': attribute type 21 has an invalid length. [ 298.608937][ T7815] netlink: 9618 bytes leftover after parsing attributes in process `syz.2.1324'. [ 300.182820][ T7856] netlink: 'syz.3.1343': attribute type 21 has an invalid length. [ 300.241203][ T7856] netlink: 9618 bytes leftover after parsing attributes in process `syz.3.1343'. [ 300.790885][ T7880] netlink: 16375 bytes leftover after parsing attributes in process `syz.2.1352'. [ 301.084180][ T7890] bridge0: port 3(batadv0) entered blocking state [ 301.104836][ T7890] bridge0: port 3(batadv0) entered disabled state [ 301.129536][ T7890] device batadv0 entered promiscuous mode [ 301.163700][ T7890] bridge0: port 3(batadv0) entered blocking state [ 301.170401][ T7890] bridge0: port 3(batadv0) entered forwarding state [ 301.499499][ T5320] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 301.509438][ T5320] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 303.275208][ T7914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1362'. [ 303.443335][ T7923] netlink: 16375 bytes leftover after parsing attributes in process `syz.1.1367'. [ 306.460021][ T7959] netlink: 16375 bytes leftover after parsing attributes in process `syz.3.1382'. [ 309.951942][ T7992] netlink: 16375 bytes leftover after parsing attributes in process `syz.3.1393'. [ 311.071036][ T7946] netlink: 'syz.0.1377': attribute type 10 has an invalid length. [ 311.079644][ T7946] team0: Device hsr_slave_0 failed to register rx_handler [ 311.102843][ T7955] netlink: 'syz.2.1381': attribute type 10 has an invalid length. [ 311.169328][ T7960] netlink: 'syz.2.1381': attribute type 10 has an invalid length. [ 311.197017][ T7960] team0: Port device netdevsim0 removed [ 311.222356][ T7960] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 311.240982][ T8014] netlink: 16375 bytes leftover after parsing attributes in process `syz.0.1404'. [ 311.887956][ T8040] netlink: 'syz.0.1416': attribute type 10 has an invalid length. [ 311.906807][ T8040] team0: Device hsr_slave_0 failed to register rx_handler [ 312.278097][ T8049] netlink: 16375 bytes leftover after parsing attributes in process `syz.3.1418'. [ 312.413876][ T8051] netlink: 'syz.0.1420': attribute type 21 has an invalid length. [ 312.432896][ T8051] netlink: 'syz.0.1420': attribute type 12 has an invalid length. [ 312.452482][ T8051] netlink: 'syz.0.1420': attribute type 13 has an invalid length. [ 312.486628][ T8051] netlink: 'syz.0.1420': attribute type 14 has an invalid length. [ 312.511902][ T8051] netlink: 'syz.0.1420': attribute type 15 has an invalid length. [ 312.524934][ T8051] netlink: 'syz.0.1420': attribute type 16 has an invalid length. [ 312.538475][ T8051] netlink: 12926 bytes leftover after parsing attributes in process `syz.0.1420'. [ 313.072823][ T8081] netlink: 16375 bytes leftover after parsing attributes in process `syz.1.1433'. [ 313.309586][ T8083] team0: Device hsr_slave_0 failed to register rx_handler [ 314.209079][ T8109] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1444'. [ 314.233139][ T8112] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 315.283604][ T8135] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1455'. [ 315.294715][ T8139] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1457'. [ 317.063585][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.070096][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.420413][ T8168] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1469'. [ 320.648372][ T4284] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 322.271747][ T8145] bridge0: port 3(batadv0) entered disabled state [ 322.285618][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.293033][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.307790][ T8156] device batadv0 left promiscuous mode [ 322.313552][ T8156] bridge0: port 3(batadv0) entered disabled state [ 322.328372][ T8156] device bridge_slave_1 left promiscuous mode [ 322.339344][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.350350][ T8156] device bridge_slave_0 left promiscuous mode [ 322.359920][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.509492][ T8206] validate_nla: 1 callbacks suppressed [ 322.509511][ T8206] netlink: 'syz.0.1487': attribute type 10 has an invalid length. [ 322.526984][ T8206] device veth0_vlan left promiscuous mode [ 322.537916][ T8206] device veth0_vlan entered promiscuous mode [ 322.544093][ T4284] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 322.551003][ T8206] team0: Device veth0_vlan failed to register rx_handler [ 326.020779][ T8255] device syzkaller0 entered promiscuous mode [ 326.073588][ T8254] device syzkaller0 entered promiscuous mode [ 329.430494][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.437951][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.463066][ T8270] device bridge_slave_1 left promiscuous mode [ 329.469447][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.479848][ T8270] device bridge_slave_0 left promiscuous mode [ 329.489881][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.872362][ T8284] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1518'. [ 330.513357][ T8300] device syzkaller0 entered promiscuous mode [ 332.991091][ T8308] device syzkaller0 entered promiscuous mode [ 332.999428][ T8323] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1532'. [ 335.224847][ T8363] device syzkaller0 entered promiscuous mode [ 337.782319][ T8370] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1552'. [ 338.184001][ T8400] device syzkaller0 entered promiscuous mode [ 342.445302][ T8393] device syzkaller0 entered promiscuous mode [ 344.881572][ T8423] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1572'. [ 344.912597][ T8427] netlink: 'syz.4.1577': attribute type 10 has an invalid length. [ 344.968343][ T8427] team0: Device hsr_slave_0 failed to register rx_handler [ 345.573449][ T8450] device syzkaller0 entered promiscuous mode [ 349.083063][ T8466] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1591'. [ 349.120511][ T8473] netlink: 'syz.1.1593': attribute type 10 has an invalid length. [ 349.136137][ T8473] team0: Device hsr_slave_0 failed to register rx_handler [ 349.238393][ T8468] device syzkaller0 entered promiscuous mode [ 351.662462][ T8502] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1604'. [ 351.685057][ T8507] netlink: 'syz.0.1606': attribute type 10 has an invalid length. [ 351.693446][ T8507] team0: Device hsr_slave_0 failed to register rx_handler [ 351.823318][ T8506] device syzkaller0 entered promiscuous mode [ 360.494048][ T8536] netlink: 'syz.0.1618': attribute type 10 has an invalid length. [ 360.517093][ T8536] team0: Device hsr_slave_0 failed to register rx_handler [ 360.905113][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.912466][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.696137][ T8608] netlink: 'syz.3.1650': attribute type 2 has an invalid length. [ 361.860335][ T8614] device syzkaller0 entered promiscuous mode [ 361.868589][ T8611] netlink: 'syz.2.1652': attribute type 21 has an invalid length. [ 361.877707][ T8611] netlink: 9618 bytes leftover after parsing attributes in process `syz.2.1652'. [ 366.180310][ T8617] netlink: 'syz.0.1654': attribute type 10 has an invalid length. [ 366.193372][ T8617] team0: Device hsr_slave_0 failed to register rx_handler [ 366.215648][ T8652] netlink: 'syz.1.1666': attribute type 21 has an invalid length. [ 366.223541][ T8652] netlink: 9618 bytes leftover after parsing attributes in process `syz.1.1666'. [ 366.368762][ T8656] netlink: 'syz.0.1667': attribute type 2 has an invalid length. [ 366.499710][ T8661] device syzkaller0 entered promiscuous mode [ 368.882054][ T8676] netlink: 'syz.1.1678': attribute type 10 has an invalid length. [ 368.890604][ T8676] team0: Device hsr_slave_0 failed to register rx_handler [ 369.077294][ T8701] netlink: 'syz.1.1685': attribute type 2 has an invalid length. [ 369.129667][ T8703] netlink: 'syz.0.1683': attribute type 21 has an invalid length. [ 369.145121][ T8703] netlink: 9618 bytes leftover after parsing attributes in process `syz.0.1683'. [ 369.820891][ T8729] netlink: 'syz.1.1695': attribute type 10 has an invalid length. [ 369.842809][ T8729] team0: Device hsr_slave_0 failed to register rx_handler [ 371.640897][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.648265][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.992029][ T8754] netlink: 'syz.1.1702': attribute type 21 has an invalid length. [ 372.067358][ T8754] netlink: 9618 bytes leftover after parsing attributes in process `syz.1.1702'. [ 374.851995][ T8790] netlink: 'syz.0.1712': attribute type 10 has an invalid length. [ 374.867321][ T8790] team0: Device hsr_slave_0 failed to register rx_handler [ 377.689282][ T8799] netlink: 'syz.1.1718': attribute type 21 has an invalid length. [ 377.697547][ T8799] netlink: 9618 bytes leftover after parsing attributes in process `syz.1.1718'. [ 377.966276][ T8816] netlink: 'syz.0.1733': attribute type 10 has an invalid length. [ 377.977312][ T8816] team0: Device hsr_slave_0 failed to register rx_handler [ 378.098750][ T8818] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 378.472965][ T8818] team0: Port device macvlan0 added [ 378.507254][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.507413][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.720430][ T8820] netlink: 'syz.4.1724': attribute type 10 has an invalid length. [ 381.727623][ T8820] team0: Port device macvlan0 added [ 381.733411][ T8824] netlink: 'syz.0.1735': attribute type 10 has an invalid length. [ 381.748069][ T8824] team0: Device hsr_slave_0 failed to register rx_handler [ 382.037411][ T8848] netlink: 'syz.4.1731': attribute type 21 has an invalid length. [ 382.074661][ T8848] netlink: 9618 bytes leftover after parsing attributes in process `syz.4.1731'. [ 382.399145][ T8860] netlink: 'syz.1.1738': attribute type 39 has an invalid length. [ 382.638922][ T8865] netlink: 'syz.4.1742': attribute type 10 has an invalid length. [ 382.661239][ T8865] team0: Device hsr_slave_0 failed to register rx_handler [ 384.079280][ T8895] netlink: 'syz.1.1757': attribute type 10 has an invalid length. [ 384.097796][ T8895] team0: Device hsr_slave_0 failed to register rx_handler [ 387.560222][ T8904] netlink: 'syz.2.1760': attribute type 39 has an invalid length. [ 387.793511][ T8913] netlink: 'syz.4.1763': attribute type 10 has an invalid length. [ 390.718769][ T8926] netlink: 'syz.1.1768': attribute type 10 has an invalid length. [ 390.788939][ T8926] team0: Device hsr_slave_0 failed to register rx_handler [ 391.020264][ T8928] netlink: 'syz.1.1771': attribute type 10 has an invalid length. [ 391.560844][ T8928] team0: Port device macvlan0 added [ 391.599153][ T8933] netlink: 'syz.3.1772': attribute type 39 has an invalid length. [ 391.624402][ T8935] netlink: 'syz.0.1773': attribute type 10 has an invalid length. [ 392.040140][ T8935] team0: Port device macvlan0 added [ 392.295316][ T8949] netlink: 'syz.3.1777': attribute type 39 has an invalid length. [ 392.491530][ T8956] netlink: 'syz.2.1781': attribute type 39 has an invalid length. [ 392.584594][ T8957] netlink: 'syz.1.1780': attribute type 10 has an invalid length. [ 393.228727][ T8969] netlink: 'syz.2.1785': attribute type 39 has an invalid length. [ 395.665515][ T9003] netlink: 'syz.2.1799': attribute type 10 has an invalid length. [ 395.901689][ T9006] netlink: 'syz.2.1801': attribute type 10 has an invalid length. [ 396.272569][ T9008] netlink: 'syz.2.1802': attribute type 10 has an invalid length. [ 396.681438][ T9022] netlink: 'syz.2.1808': attribute type 10 has an invalid length. [ 399.259049][ T9034] netlink: 'syz.0.1813': attribute type 10 has an invalid length. [ 399.854027][ T9047] netlink: 'syz.3.1817': attribute type 10 has an invalid length. [ 400.025066][ T9047] team0: Port device macvlan0 added [ 400.587471][ T9062] netlink: 'syz.0.1820': attribute type 10 has an invalid length. [ 401.273690][ T9078] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 401.976914][ T9095] netlink: 'syz.1.1836': attribute type 39 has an invalid length. [ 402.320801][ T9108] netlink: 'syz.4.1838': attribute type 10 has an invalid length. [ 402.492368][ T9112] netlink: 'syz.4.1843': attribute type 39 has an invalid length. [ 403.246966][ T9124] netlink: 'syz.2.1848': attribute type 10 has an invalid length. [ 403.573973][ T9128] netlink: 'syz.4.1850': attribute type 39 has an invalid length. [ 403.964093][ T9136] netlink: 'syz.2.1854': attribute type 10 has an invalid length. [ 405.418570][ T9141] netlink: 'syz.1.1856': attribute type 39 has an invalid length. [ 405.602993][ T9147] netlink: 'syz.0.1861': attribute type 10 has an invalid length. [ 406.559762][ T9176] netlink: 'syz.0.1872': attribute type 39 has an invalid length. [ 407.110036][ T9185] netlink: 'syz.1.1876': attribute type 10 has an invalid length. [ 408.634425][ T9206] netlink: 'syz.4.1887': attribute type 39 has an invalid length. [ 409.404905][ T9226] netlink: 'syz.3.1895': attribute type 10 has an invalid length. [ 409.734486][ T9232] netlink: 'syz.2.1898': attribute type 10 has an invalid length. [ 412.349156][ T9259] netlink: 'syz.1.1910': attribute type 10 has an invalid length. [ 412.598396][ T9261] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 412.777895][ T9264] netlink: 'syz.3.1913': attribute type 10 has an invalid length. [ 413.705840][ T9288] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 414.133869][ T9294] netlink: 'syz.0.1925': attribute type 10 has an invalid length. [ 414.157444][ T9292] netlink: 'syz.2.1927': attribute type 10 has an invalid length. [ 415.383063][ T9330] netlink: 'syz.0.1941': attribute type 10 has an invalid length. [ 415.575270][ T9332] netlink: 'syz.0.1942': attribute type 10 has an invalid length. [ 416.833827][ T9363] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 417.702985][ T9388] netlink: 'syz.4.1963': attribute type 10 has an invalid length. [ 417.725921][ T9388] team0: Device hsr_slave_0 failed to register rx_handler [ 418.047444][ T9394] netlink: 'syz.1.1977': attribute type 10 has an invalid length. [ 418.074214][ T9394] team0: Device hsr_slave_0 failed to register rx_handler [ 418.627450][ T9410] netlink: 'syz.1.1973': attribute type 10 has an invalid length. [ 419.312706][ T9437] netlink: 'syz.2.1984': attribute type 10 has an invalid length. [ 419.322635][ T9437] team0: Device hsr_slave_0 failed to register rx_handler [ 419.909363][ T9449] netlink: 'syz.2.1989': attribute type 10 has an invalid length. [ 423.043725][ T9467] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 423.077262][ T9467] team0: Device hsr_slave_0 failed to register rx_handler [ 423.248024][ T9469] netlink: 'syz.1.1997': attribute type 39 has an invalid length. [ 423.446972][ T9479] netlink: 'syz.0.2014': attribute type 10 has an invalid length. [ 423.480775][ T9479] team0: Device hsr_slave_0 failed to register rx_handler [ 423.820000][ T9489] netlink: 'syz.1.2006': attribute type 39 has an invalid length. [ 424.426396][ T9505] netlink: 'syz.3.2012': attribute type 10 has an invalid length. [ 424.947298][ T9517] netlink: 'syz.2.2019': attribute type 10 has an invalid length. [ 425.241834][ T9529] netlink: 'syz.2.2024': attribute type 39 has an invalid length. [ 425.647777][ T9537] netlink: 'syz.2.2028': attribute type 10 has an invalid length. [ 425.903973][ T9547] netlink: 'syz.2.2033': attribute type 39 has an invalid length. [ 426.277547][ T9557] netlink: 'syz.0.2037': attribute type 39 has an invalid length. [ 426.677925][ T9570] device syzkaller0 entered promiscuous mode [ 426.722948][ T9572] device syzkaller0 entered promiscuous mode [ 430.223204][ T9585] netlink: 'syz.0.2049': attribute type 10 has an invalid length. [ 430.354066][ T9588] netlink: 'syz.4.2052': attribute type 39 has an invalid length. [ 430.802534][ T9605] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2060'. [ 431.263734][ T9617] device syzkaller0 entered promiscuous mode [ 432.999656][ T9621] netlink: 'syz.4.2067': attribute type 39 has an invalid length. [ 433.009620][ T9620] netlink: 'syz.0.2066': attribute type 39 has an invalid length. [ 433.293695][ T9629] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2072'. [ 433.802833][ T9645] device syzkaller0 entered promiscuous mode [ 435.623735][ T9648] netlink: 'syz.2.2080': attribute type 39 has an invalid length. [ 435.633278][ T9658] netlink: 'syz.1.2084': attribute type 39 has an invalid length. [ 435.799928][ T9665] netlink: 'syz.2.2085': attribute type 39 has an invalid length. [ 438.850445][ T9692] device syzkaller0 entered promiscuous mode [ 438.913414][ T9689] netlink: 'syz.1.2095': attribute type 10 has an invalid length. [ 439.917954][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.924399][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.090517][ T9701] netlink: 'syz.2.2098': attribute type 10 has an invalid length. [ 443.100562][ T9702] netlink: 'syz.1.2097': attribute type 39 has an invalid length. [ 443.392015][ T9725] netlink: 'syz.0.2103': attribute type 39 has an invalid length. [ 443.960719][ T9738] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 444.363707][ T9746] netlink: 'syz.0.2114': attribute type 10 has an invalid length. [ 445.383641][ T9759] netlink: 'syz.4.2118': attribute type 10 has an invalid length. [ 446.362145][ T9768] netlink: 'syz.1.2122': attribute type 39 has an invalid length. [ 446.681552][ T9776] netlink: 'syz.1.2127': attribute type 39 has an invalid length. [ 446.814822][ T9778] netlink: 'syz.0.2126': attribute type 10 has an invalid length. [ 447.529740][ T9797] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 449.097805][ T9831] validate_nla: 1 callbacks suppressed [ 449.097824][ T9831] netlink: 'syz.4.2147': attribute type 39 has an invalid length. [ 449.426800][ T9841] netlink: 'syz.1.2149': attribute type 10 has an invalid length. [ 452.306799][ T9883] netlink: 'syz.2.2165': attribute type 39 has an invalid length. [ 452.453021][ T9885] netlink: 'syz.2.2166': attribute type 39 has an invalid length. [ 452.688275][ T9889] netlink: 'syz.3.2167': attribute type 10 has an invalid length. [ 453.532583][ T9911] netlink: 'syz.4.2178': attribute type 39 has an invalid length. [ 455.632319][ T9918] netlink: 'syz.4.2179': attribute type 39 has an invalid length. [ 455.645563][ T9919] netlink: 'syz.0.2180': attribute type 10 has an invalid length. [ 456.407512][ T9925] netlink: 'syz.2.2181': attribute type 10 has an invalid length. [ 457.061000][ T9946] netlink: 'syz.3.2190': attribute type 39 has an invalid length. [ 457.650988][ T9960] netlink: 'syz.4.2194': attribute type 10 has an invalid length. [ 459.023324][ T9975] netlink: 'syz.4.2198': attribute type 10 has an invalid length. [ 459.553185][ T9989] netlink: 'syz.4.2205': attribute type 39 has an invalid length. [ 459.848397][ T9993] netlink: 'syz.1.2207': attribute type 10 has an invalid length. [ 460.005666][ T9995] netlink: 'syz.4.2208': attribute type 10 has an invalid length. [ 460.549075][T10009] netlink: 'syz.1.2214': attribute type 10 has an invalid length. [ 460.667477][T10015] netlink: 'syz.4.2216': attribute type 39 has an invalid length. [ 461.338975][T10034] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 461.628961][ T4284] Bluetooth: hci3: unexpected event 0x20 length: 15 > 7 [ 461.801532][T10048] netlink: 'syz.0.2230': attribute type 10 has an invalid length. [ 461.959356][T10050] netlink: 'syz.1.2231': attribute type 39 has an invalid length. [ 462.580319][T10064] netlink: 'syz.0.2237': attribute type 10 has an invalid length. [ 462.809571][T10070] netlink: 'syz.0.2241': attribute type 39 has an invalid length. [ 462.919288][T10072] device syzkaller0 entered promiscuous mode [ 464.563601][T10074] netlink: 'syz.1.2243': attribute type 10 has an invalid length. [ 464.574361][T10074] team0: Device hsr_slave_0 failed to register rx_handler [ 464.626136][T10077] netlink: 'syz.3.2244': attribute type 10 has an invalid length. [ 465.080840][T10092] netlink: 'syz.2.2249': attribute type 10 has an invalid length. [ 465.336775][T10095] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 465.562917][T10106] team0: Device hsr_slave_0 failed to register rx_handler [ 468.659877][ T4284] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 468.734266][T10123] validate_nla: 1 callbacks suppressed [ 468.734286][T10123] netlink: 'syz.2.2262': attribute type 39 has an invalid length. [ 468.935791][T10128] netlink: 'syz.4.2263': attribute type 10 has an invalid length. [ 469.291919][T10136] netlink: 'syz.4.2267': attribute type 10 has an invalid length. [ 469.373582][T10138] netlink: 'syz.2.2268': attribute type 10 has an invalid length. [ 469.750987][T10148] netlink: 'syz.4.2272': attribute type 10 has an invalid length. [ 470.709328][T10162] netlink: 'syz.4.2279': attribute type 10 has an invalid length. [ 471.346422][T10171] netlink: 'syz.3.2282': attribute type 10 has an invalid length. [ 472.579336][T10193] netlink: 'syz.0.2293': attribute type 10 has an invalid length. [ 472.721349][T10195] netlink: 'syz.1.2294': attribute type 10 has an invalid length. [ 473.004332][T10203] netlink: 'syz.1.2297': attribute type 39 has an invalid length. [ 473.947927][T10215] netlink: 'syz.1.2302': attribute type 10 has an invalid length. [ 474.132697][T10222] netlink: 'syz.1.2305': attribute type 10 has an invalid length. [ 474.417914][T10225] netlink: 'syz.0.2307': attribute type 10 has an invalid length. [ 476.639630][T10231] netlink: 'syz.0.2311': attribute type 10 has an invalid length. [ 479.597084][T10248] netlink: 'syz.4.2316': attribute type 10 has an invalid length. [ 479.706604][T10250] netlink: 'syz.2.2315': attribute type 39 has an invalid length. [ 479.938579][T10256] netlink: 'syz.0.2319': attribute type 10 has an invalid length. [ 480.233672][T10269] netlink: 'syz.2.2330': attribute type 21 has an invalid length. [ 480.242393][T10269] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.2330'. [ 480.443665][T10274] netlink: 'syz.3.2323': attribute type 10 has an invalid length. [ 480.669621][T10276] netlink: 'syz.3.2324': attribute type 10 has an invalid length. [ 483.260083][T10294] netlink: 'syz.3.2332': attribute type 39 has an invalid length. [ 483.299692][T10299] netlink: 'syz.1.2342': attribute type 10 has an invalid length. [ 483.935896][T10311] netlink: 'syz.2.2336': attribute type 39 has an invalid length. [ 484.110397][T10314] netlink: 'syz.1.2337': attribute type 10 has an invalid length. [ 484.313233][T10324] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.2340'. [ 485.015313][T10345] validate_nla: 2 callbacks suppressed [ 485.015423][T10345] netlink: 'syz.1.2351': attribute type 10 has an invalid length. [ 485.245033][T10348] netlink: 'syz.2.2352': attribute type 39 has an invalid length. [ 485.343528][T10350] netlink: 'syz.4.2353': attribute type 39 has an invalid length. [ 485.500155][T10352] netlink: 'syz.1.2354': attribute type 10 has an invalid length. [ 485.722781][T10360] netlink: 'syz.4.2358': attribute type 39 has an invalid length. [ 486.064049][T10372] netlink: 'syz.4.2362': attribute type 21 has an invalid length. [ 486.083371][T10372] netlink: 14530 bytes leftover after parsing attributes in process `syz.4.2362'. [ 486.375651][T10377] netlink: 'syz.4.2364': attribute type 10 has an invalid length. [ 487.876554][T10402] netlink: 'syz.0.2373': attribute type 39 has an invalid length. [ 487.889389][T10406] netlink: 'syz.3.2375': attribute type 21 has an invalid length. [ 487.924909][T10406] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.2375'. [ 488.222598][T10408] device syzkaller0 entered promiscuous mode [ 490.641838][T10422] netlink: 'syz.3.2378': attribute type 10 has an invalid length. [ 490.650696][T10431] netlink: 'syz.0.2382': attribute type 39 has an invalid length. [ 490.877908][T10441] netlink: 'syz.4.2384': attribute type 10 has an invalid length. [ 491.155946][T10458] netlink: 'syz.4.2388': attribute type 21 has an invalid length. [ 491.184726][T10458] netlink: 14530 bytes leftover after parsing attributes in process `syz.4.2388'. [ 491.257138][T10449] device syzkaller0 entered promiscuous mode [ 493.346802][T10465] netlink: 'syz.1.2391': attribute type 10 has an invalid length. [ 493.355657][T10468] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 493.592664][T10474] netlink: 'syz.1.2397': attribute type 39 has an invalid length. [ 493.786503][T10476] netlink: 'syz.4.2399': attribute type 39 has an invalid length. [ 493.947660][T10478] device syzkaller0 entered promiscuous mode [ 495.673189][T10487] netlink: 'syz.1.2402': attribute type 21 has an invalid length. [ 495.681350][T10487] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.2402'. [ 495.856216][T10498] device syzkaller0 entered promiscuous mode [ 498.211553][T10505] netlink: 'syz.1.2407': attribute type 10 has an invalid length. [ 498.234906][T10510] netlink: 'syz.2.2408': attribute type 10 has an invalid length. [ 498.516622][T10519] device syzkaller0 entered promiscuous mode [ 498.562225][T10526] netlink: 'syz.0.2423': attribute type 10 has an invalid length. [ 500.591874][T10531] netlink: 'syz.3.2415': attribute type 21 has an invalid length. [ 500.602230][T10531] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.2415'. [ 500.617614][T10543] netlink: 'syz.4.2420': attribute type 39 has an invalid length. [ 500.962077][T10555] netlink: 'syz.4.2426': attribute type 10 has an invalid length. [ 501.358437][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.365028][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.814074][T10571] netlink: 'syz.4.2433': attribute type 21 has an invalid length. [ 503.832346][T10571] netlink: 14530 bytes leftover after parsing attributes in process `syz.4.2433'. [ 503.952537][T10577] device syzkaller0 entered promiscuous mode [ 506.255528][T10585] netlink: 'syz.1.2436': attribute type 39 has an invalid length. [ 506.263534][T10582] netlink: 'syz.4.2437': attribute type 10 has an invalid length. [ 506.276303][T10589] netlink: 'syz.0.2438': attribute type 10 has an invalid length. [ 506.552079][T10598] netlink: 'syz.0.2441': attribute type 10 has an invalid length. [ 506.859954][T10609] netlink: 'syz.0.2446': attribute type 10 has an invalid length. [ 506.889204][T10609] team0: Device hsr_slave_0 failed to register rx_handler [ 506.989259][T10611] netlink: 'syz.3.2447': attribute type 21 has an invalid length. [ 507.005611][T10611] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.2447'. [ 507.393506][T10618] device syzkaller0 entered promiscuous mode [ 507.410973][T10616] netlink: 'syz.2.2449': attribute type 10 has an invalid length. [ 507.435525][T10619] netlink: 'syz.0.2451': attribute type 10 has an invalid length. [ 509.598265][T10625] netlink: 'syz.3.2452': attribute type 10 has an invalid length. [ 509.607545][T10628] netlink: 'syz.2.2453': attribute type 39 has an invalid length. [ 510.083879][T10647] team0: Device hsr_slave_0 failed to register rx_handler [ 510.227001][T10654] netlink: 14530 bytes leftover after parsing attributes in process `syz.4.2462'. [ 510.791162][T10666] device syzkaller0 entered promiscuous mode [ 512.942209][T10685] validate_nla: 6 callbacks suppressed [ 512.942230][T10685] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 512.956935][T10685] team0: Device hsr_slave_0 failed to register rx_handler [ 513.016128][T10687] netlink: 'syz.4.2476': attribute type 21 has an invalid length. [ 513.024188][T10687] netlink: 14530 bytes leftover after parsing attributes in process `syz.4.2476'. [ 513.435447][T10696] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 513.609566][T10698] netlink: 'syz.4.2481': attribute type 39 has an invalid length. [ 513.915025][T10709] netlink: 'syz.3.2483': attribute type 10 has an invalid length. [ 514.020682][T10711] device syzkaller0 entered promiscuous mode [ 516.013618][T10720] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 516.022053][T10720] team0: Device hsr_slave_0 failed to register rx_handler [ 516.039996][T10719] netlink: 'syz.3.2488': attribute type 10 has an invalid length. [ 516.050891][T10722] netlink: 'syz.0.2490': attribute type 21 has an invalid length. [ 516.069622][T10722] netlink: 14530 bytes leftover after parsing attributes in process `syz.0.2490'. [ 516.900790][T10744] netlink: 'syz.3.2502': attribute type 10 has an invalid length. [ 516.937303][T10745] netlink: 'syz.2.2501': attribute type 10 has an invalid length. [ 517.266068][T10752] team0: Device hsr_slave_0 failed to register rx_handler [ 517.312893][T10754] netlink: 14530 bytes leftover after parsing attributes in process `syz.2.2505'. [ 519.593692][T10776] validate_nla: 2 callbacks suppressed [ 519.593725][T10776] netlink: 'syz.4.2515': attribute type 10 has an invalid length. [ 519.677828][T10778] netlink: 'syz.4.2516': attribute type 21 has an invalid length. [ 519.685901][T10778] netlink: 14530 bytes leftover after parsing attributes in process `syz.4.2516'. [ 519.815948][T10781] netlink: 'syz.1.2517': attribute type 10 has an invalid length. [ 519.982348][T10786] netlink: 'syz.1.2520': attribute type 10 has an invalid length. [ 519.992003][T10786] team0: Device hsr_slave_0 failed to register rx_handler [ 520.383690][T10794] netlink: 'syz.1.2524': attribute type 10 has an invalid length. [ 520.635300][T10800] netlink: 'syz.1.2526': attribute type 10 has an invalid length. [ 520.689293][T10804] netlink: 'syz.4.2528': attribute type 21 has an invalid length. [ 520.708714][T10804] netlink: 14350 bytes leftover after parsing attributes in process `syz.4.2528'. [ 521.534220][T10825] netlink: 'syz.1.2547': attribute type 10 has an invalid length. [ 521.790082][T10834] netlink: 'syz.2.2538': attribute type 10 has an invalid length. [ 522.204222][T10848] netlink: 'syz.0.2543': attribute type 21 has an invalid length. [ 522.214974][T10848] netlink: 14350 bytes leftover after parsing attributes in process `syz.0.2543'. [ 523.266961][T10876] netlink: 14350 bytes leftover after parsing attributes in process `syz.2.2556'. [ 523.813531][T10886] netlink: 13050 bytes leftover after parsing attributes in process `syz.2.2571'. [ 524.009466][T10892] netlink: 13050 bytes leftover after parsing attributes in process `syz.2.2573'. [ 524.677880][T10911] validate_nla: 6 callbacks suppressed [ 524.677900][T10911] netlink: 'syz.2.2568': attribute type 10 has an invalid length. [ 525.142750][T10926] netlink: 'syz.1.2576': attribute type 21 has an invalid length. [ 525.157455][T10926] netlink: 13050 bytes leftover after parsing attributes in process `syz.1.2576'. [ 525.840780][T10946] netlink: 'syz.1.2585': attribute type 10 has an invalid length. [ 526.150309][T10957] netlink: 'syz.0.2589': attribute type 10 has an invalid length. [ 527.727188][T10973] netlink: 'syz.4.2598': attribute type 10 has an invalid length. [ 528.315650][T10987] device syzkaller0 entered promiscuous mode [ 530.283459][T10991] netlink: 'syz.1.2606': attribute type 10 has an invalid length. [ 530.433534][T11006] device syzkaller0 entered promiscuous mode [ 530.579280][T11008] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 532.545301][T11017] netlink: 'syz.4.2613': attribute type 10 has an invalid length. [ 532.668221][T11026] netlink: 'syz.4.2616': attribute type 10 has an invalid length. [ 532.681483][T11026] team0: Device hsr_slave_0 failed to register rx_handler [ 532.920938][T11034] netlink: 'syz.4.2624': attribute type 10 has an invalid length. [ 532.942103][T11035] netlink: 'syz.2.2620': attribute type 10 has an invalid length. [ 533.537554][T11049] device syzkaller0 entered promiscuous mode [ 535.219044][T11053] netlink: 'syz.0.2634': attribute type 10 has an invalid length. [ 535.233590][T11053] team0: Device hsr_slave_0 failed to register rx_handler [ 535.891319][T11063] netlink: 'syz.3.2639': attribute type 10 has an invalid length. [ 536.399363][T11075] device syzkaller0 entered promiscuous mode [ 536.413563][T11077] netlink: 'syz.1.2646': attribute type 10 has an invalid length. [ 536.422666][T11077] team0: Device hsr_slave_0 failed to register rx_handler [ 538.391244][T11094] device syzkaller0 entered promiscuous mode [ 540.352480][T11102] netlink: 'syz.0.2653': attribute type 10 has an invalid length. [ 540.738830][T11118] netlink: 'syz.0.2661': attribute type 10 has an invalid length. [ 540.747820][T11118] team0: Device hsr_slave_0 failed to register rx_handler [ 540.938201][T11120] netlink: 'syz.1.2664': attribute type 21 has an invalid length. [ 540.960051][T11120] netlink: 13070 bytes leftover after parsing attributes in process `syz.1.2664'. [ 541.100917][T11126] netlink: 'syz.4.2667': attribute type 39 has an invalid length. [ 541.532783][T11133] device syzkaller0 entered promiscuous mode [ 543.422010][T11146] netlink: 'syz.2.2676': attribute type 10 has an invalid length. [ 543.430692][T11146] team0: Device hsr_slave_0 failed to register rx_handler [ 543.588990][T11152] netlink: 'syz.2.2679': attribute type 21 has an invalid length. [ 543.597704][T11152] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.2679'. [ 543.941153][T11161] netlink: 'syz.2.2682': attribute type 10 has an invalid length. [ 544.104216][T11165] device syzkaller0 entered promiscuous mode [ 544.115544][T11163] netlink: 'syz.2.2684': attribute type 39 has an invalid length. [ 546.009410][T11174] device syzkaller0 entered promiscuous mode [ 546.036915][T11181] netlink: 'syz.2.2689': attribute type 10 has an invalid length. [ 546.051340][T11181] team0: Device hsr_slave_0 failed to register rx_handler [ 548.012883][T11186] netlink: 'syz.3.2691': attribute type 21 has an invalid length. [ 548.020871][T11186] netlink: 13070 bytes leftover after parsing attributes in process `syz.3.2691'. [ 548.035327][T11196] netlink: 'syz.4.2694': attribute type 10 has an invalid length. [ 548.464724][T11211] device syzkaller0 entered promiscuous mode [ 548.502814][T11213] netlink: 'syz.3.2702': attribute type 10 has an invalid length. [ 548.513776][T11213] team0: Device hsr_slave_0 failed to register rx_handler [ 550.492694][T11227] netlink: 'syz.3.2707': attribute type 10 has an invalid length. [ 550.500851][T11232] netlink: 'syz.2.2708': attribute type 21 has an invalid length. [ 550.512752][T11232] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.2708'. [ 550.729975][T11238] device syzkaller0 entered promiscuous mode [ 552.779401][T11242] netlink: 'syz.1.2712': attribute type 10 has an invalid length. [ 552.791289][T11250] netlink: 'syz.0.2726': attribute type 10 has an invalid length. [ 552.985963][T11256] netlink: 'syz.1.2716': attribute type 10 has an invalid length. [ 553.009713][T11256] team0: Device hsr_slave_0 failed to register rx_handler [ 553.172548][T11263] device syzkaller0 entered promiscuous mode [ 553.409915][T11269] netlink: 'syz.1.2723': attribute type 21 has an invalid length. [ 553.434608][T11269] netlink: 13070 bytes leftover after parsing attributes in process `syz.1.2723'. [ 555.374187][T11280] netlink: 'syz.1.2729': attribute type 10 has an invalid length. [ 555.611800][T11284] device syzkaller0 entered promiscuous mode [ 555.739913][T11291] netlink: 'syz.3.2734': attribute type 10 has an invalid length. [ 555.750741][T11291] team0: Device hsr_slave_0 failed to register rx_handler [ 557.800488][T11305] netlink: 'syz.2.2739': attribute type 21 has an invalid length. [ 557.855685][T11305] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.2739'. [ 560.257933][T11337] netlink: 'syz.0.2751': attribute type 10 has an invalid length. [ 560.961776][T11343] netlink: 'syz.1.2754': attribute type 21 has an invalid length. [ 560.970619][T11343] netlink: 13070 bytes leftover after parsing attributes in process `syz.1.2754'. [ 562.797109][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.803531][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.676880][T11367] netlink: 'syz.1.2763': attribute type 10 has an invalid length. [ 566.623577][T11381] netlink: 'syz.2.2766': attribute type 21 has an invalid length. [ 566.639516][T11381] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.2766'. [ 567.730919][T11397] device syzkaller0 entered promiscuous mode [ 573.205717][T11411] netlink: 'syz.0.2780': attribute type 21 has an invalid length. [ 573.213836][T11411] netlink: 13070 bytes leftover after parsing attributes in process `syz.0.2780'. [ 573.933434][T11424] device syzkaller0 entered promiscuous mode [ 579.291998][T11448] netlink: 14566 bytes leftover after parsing attributes in process `syz.4.2795'. [ 586.383759][T11488] netlink: 'syz.0.2813': attribute type 10 has an invalid length. [ 589.351881][T11523] netlink: 'syz.3.2826': attribute type 10 has an invalid length. [ 594.396361][T11561] netlink: 'syz.4.2839': attribute type 10 has an invalid length. [ 595.029476][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 595.039089][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 595.048299][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 595.059026][T11569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 595.066723][T11569] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 595.075409][T11569] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 595.253937][ T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.405951][ T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.504231][ T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.681669][ T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.903906][T11568] chnl_net:caif_netlink_parms(): no params data found [ 596.311022][T11568] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.325728][T11568] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.334287][T11568] device bridge_slave_0 entered promiscuous mode [ 596.374801][T11568] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.382229][T11568] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.390789][T11568] device bridge_slave_1 entered promiscuous mode [ 596.567529][T11568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.590705][T11568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.681897][T11568] team0: Port device team_slave_0 added [ 596.713313][T11568] team0: Port device team_slave_1 added [ 596.941482][T11568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.961111][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.028292][T11568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.111954][T11568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.124467][T11569] Bluetooth: hci5: command 0x0409 tx timeout [ 597.134081][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.161265][T11568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.285048][T11568] device hsr_slave_0 entered promiscuous mode [ 597.305925][T11568] device hsr_slave_1 entered promiscuous mode [ 597.326601][T11568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.350002][T11568] Cannot create hsr debugfs directory [ 598.340582][ T47] device hsr_slave_0 left promiscuous mode [ 598.361276][ T47] device hsr_slave_1 left promiscuous mode [ 598.369421][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.384539][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.393278][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.401430][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.414839][ T47] device bridge_slave_1 left promiscuous mode [ 598.422385][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.433583][ T47] device bridge_slave_0 left promiscuous mode [ 598.440053][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.471051][ T47] device veth1_vlan left promiscuous mode [ 598.477548][ T47] device veth0_vlan left promiscuous mode [ 598.745126][ T47] team0 (unregistering): Port device macvlan0 removed [ 599.078884][ T47] team0 (unregistering): Port device team_slave_1 removed [ 599.158499][ T47] team0 (unregistering): Port device team_slave_0 removed [ 599.194901][T11569] Bluetooth: hci5: command 0x041b tx timeout [ 599.266189][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.423693][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.169088][ T47] bond0 (unregistering): Released all slaves [ 600.273503][T11622] netlink: 'syz.2.2856': attribute type 10 has an invalid length. [ 600.906877][T11568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.937456][T11568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.957724][T11568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.977255][T11568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 601.185125][T11568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.260305][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 601.274494][T11569] Bluetooth: hci5: command 0x040f tx timeout [ 601.289583][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 601.342579][T11568] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.425387][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 601.475666][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 601.488664][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.495953][ T5330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.586980][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 601.601645][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 601.621274][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 601.633660][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.640912][ T5330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.658476][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.671644][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.725738][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.736340][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.773623][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.782789][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.794687][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.803996][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.817999][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.849122][T11568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.861651][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.879600][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.889393][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 602.802469][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.810567][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.857607][T11568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.364763][T11569] Bluetooth: hci5: command 0x0419 tx timeout [ 603.412760][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 603.427964][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 603.464226][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 603.479304][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 603.492778][T11568] device veth0_vlan entered promiscuous mode [ 603.508723][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 603.521473][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 603.543814][T11568] device veth1_vlan entered promiscuous mode [ 603.584044][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 603.601635][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 603.619379][T11568] device veth0_macvtap entered promiscuous mode [ 603.640754][T11568] device veth1_macvtap entered promiscuous mode [ 603.671811][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.683747][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.698451][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.710194][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.724795][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.738886][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.751707][T11568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.766802][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 603.775783][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 603.784082][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 603.793614][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 603.806897][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.819921][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.835843][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.848861][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.859180][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.870111][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.889545][T11568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.900685][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 603.911210][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.926434][T11568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.943595][T11568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.954100][T11568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.964170][T11568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.099938][ T5336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.117748][ T5336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.133677][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 604.173849][ T5334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.195727][ T5334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.206884][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 604.552828][T11695] netlink: 'syz.1.2874': attribute type 39 has an invalid length. [ 606.205453][T11726] netlink: 'syz.2.2880': attribute type 10 has an invalid length. [ 607.089604][T11744] netlink: 'syz.1.2870': attribute type 10 has an invalid length. [ 607.905302][T11754] netlink: 'syz.4.2875': attribute type 10 has an invalid length. [ 607.975306][T11754] team0: Port device macvlan0 added [ 608.654208][T11758] netlink: 'syz.3.2879': attribute type 39 has an invalid length. [ 608.903197][T11762] netlink: 'syz.2.2881': attribute type 10 has an invalid length. [ 610.906939][T11780] netlink: 'syz.0.2887': attribute type 10 has an invalid length. [ 611.765698][T11788] netlink: 'syz.1.2890': attribute type 10 has an invalid length. [ 612.787624][T11792] netlink: 'syz.1.2893': attribute type 10 has an invalid length. [ 613.322270][T11798] netlink: 'syz.2.2895': attribute type 39 has an invalid length. [ 615.145506][T11813] netlink: 'syz.4.2900': attribute type 10 has an invalid length. [ 616.990613][T11823] netlink: 'syz.3.2905': attribute type 10 has an invalid length. [ 617.270418][T11826] netlink: 'syz.3.2907': attribute type 39 has an invalid length. [ 619.811766][T11847] netlink: 'syz.0.2915': attribute type 10 has an invalid length. [ 621.523305][T11861] netlink: 'syz.3.2921': attribute type 10 has an invalid length. [ 623.928373][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 623.939363][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 623.947706][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 623.967157][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 623.975065][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 623.982502][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 624.188208][ T5320] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.237503][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.243960][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.284862][ T5320] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.349214][ T5320] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.423460][T11881] chnl_net:caif_netlink_parms(): no params data found [ 624.510880][ T5320] bond0: (slave netdevsim0): Releasing backup interface [ 624.531047][ T5320] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.561912][T11884] netlink: 'syz.2.2929': attribute type 10 has an invalid length. [ 624.625216][T11881] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.632478][T11881] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.642661][T11881] device bridge_slave_0 entered promiscuous mode [ 624.651551][T11881] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.659269][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.668140][T11881] device bridge_slave_1 entered promiscuous mode [ 624.780052][T11881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.831277][T11881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.911338][T11881] team0: Port device team_slave_0 added [ 624.984947][T11881] team0: Port device team_slave_1 added [ 625.340752][T11881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.352031][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.397142][T11881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.453175][T11881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.465727][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.543866][T11881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.814175][T11881] device hsr_slave_0 entered promiscuous mode [ 625.829334][T11881] device hsr_slave_1 entered promiscuous mode [ 625.847034][T11881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.860471][T11881] Cannot create hsr debugfs directory [ 626.074689][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 626.868853][ T5320] device hsr_slave_0 left promiscuous mode [ 626.889596][ T5320] device hsr_slave_1 left promiscuous mode [ 626.899413][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.912231][ T5320] device bridge_slave_0 left promiscuous mode [ 626.921472][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.948353][ T5320] device veth1_vlan left promiscuous mode [ 626.958628][ T5320] device veth0_vlan left promiscuous mode [ 628.159851][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 630.036594][ T5320] team0 (unregistering): Port device macvlan0 removed [ 630.158312][ T5320] team0 (unregistering): Port device virt_wifi0 removed [ 630.234587][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 630.427972][ T5320] team0 (unregistering): Port device team_slave_1 removed [ 630.517614][ T5320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.569751][ T5320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.916047][ T5320] bond0 (unregistering): Released all slaves [ 631.103792][T11881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 631.157514][T11881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 631.210018][T11881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 631.240535][T11881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 631.421713][T11881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.456889][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 631.467006][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 631.481611][T11881] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.496543][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 631.506730][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 631.517023][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.524185][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.549829][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 631.559170][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 631.569469][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 631.580090][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.587304][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.597776][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 631.608206][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 631.631434][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 631.642903][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 631.667553][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 631.682266][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 631.692504][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 631.720546][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 631.729970][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 631.739715][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 631.749116][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 631.762814][T11881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 632.324954][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 632.362571][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 632.375912][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 632.407495][T11881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.445863][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.465606][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.520274][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 632.533518][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.566523][T11881] device veth0_vlan entered promiscuous mode [ 632.583131][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 632.593310][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 632.607984][T11881] device veth1_vlan entered promiscuous mode [ 632.673421][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 632.686133][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 632.702035][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 632.711883][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 632.732899][T11881] device veth0_macvtap entered promiscuous mode [ 632.758040][T11881] device veth1_macvtap entered promiscuous mode [ 633.098776][T11881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.144500][T11881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.185091][T11881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.211191][T11881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.222111][T11881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.234605][T11881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.245063][T11881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.256865][T11881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.313465][T11881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.339072][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 633.356974][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 633.390452][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 633.400167][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 633.429806][T11881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.450825][T11881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.471238][T11881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.491415][T11881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.502061][T11881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.514025][T11881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.524898][T11881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.535931][T11881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.549341][T11881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.560491][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 633.582459][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 633.621491][T11881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.631152][T11881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.654705][T11881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.673862][T11881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.896956][ T5336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.910501][ T5336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.929824][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 633.940999][ T5320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.950476][ T5320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.960149][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 634.083949][T11967] netlink: 14566 bytes leftover after parsing attributes in process `syz.1.2936'. [ 636.540408][T11569] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 636.555880][T11569] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 636.565456][T11569] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 636.573981][T11569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 636.582860][T11569] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 636.590367][T11569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 636.844163][T11985] chnl_net:caif_netlink_parms(): no params data found [ 636.932652][T11985] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.940278][T11985] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.949680][T11985] device bridge_slave_0 entered promiscuous mode [ 636.966394][T11985] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.974267][T11985] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.983147][T11985] device bridge_slave_1 entered promiscuous mode [ 637.013820][T11985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.026559][T11985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.062946][T11985] team0: Port device team_slave_0 added [ 637.072537][T11985] team0: Port device team_slave_1 added [ 637.101420][T11985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.109047][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.135874][T11985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.148915][T11985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.169282][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.226727][T11985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.578275][T11985] device hsr_slave_0 entered promiscuous mode [ 637.617756][T11985] device hsr_slave_1 entered promiscuous mode [ 637.625156][T11985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.632955][T11985] Cannot create hsr debugfs directory [ 638.008487][T11985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.176140][T11985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.269944][T11985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.393105][T11985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.628285][T11985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 638.636023][T11569] Bluetooth: hci3: command 0x0409 tx timeout [ 638.649883][T11985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.673326][T11985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 638.684066][T11985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.781868][T11985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.802804][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 638.812341][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 638.840657][T11985] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.852206][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 638.865185][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 638.873977][ T5322] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.881151][ T5322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.893541][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 638.904297][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 638.913746][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 638.922424][ T5322] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.929634][ T5322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.967486][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 638.977572][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 639.024063][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 639.033882][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 639.043986][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 639.057016][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 639.070146][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.156290][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.166014][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.181219][T11985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.197313][T11985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 639.265299][ T47] device hsr_slave_0 left promiscuous mode [ 639.272567][ T47] device hsr_slave_1 left promiscuous mode [ 639.285959][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.296711][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.308224][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.317313][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.385917][ T47] device veth0_macvtap left promiscuous mode [ 639.402524][ T47] device veth1_vlan left promiscuous mode [ 640.062898][ T47] team0 (unregistering): Port device macvlan0 removed [ 640.723430][T11569] Bluetooth: hci3: command 0x041b tx timeout [ 640.841101][ T47] team0 (unregistering): Port device team_slave_1 removed [ 640.886837][ T47] team0 (unregistering): Port device team_slave_0 removed [ 640.927897][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.976621][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.278699][ T47] bond0 (unregistering): Released all slaves [ 641.314262][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 641.324053][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 641.349020][T11998] netlink: 14566 bytes leftover after parsing attributes in process `syz.3.2956'. [ 641.369664][T12006] netlink: 'syz.2.2958': attribute type 10 has an invalid length. [ 641.543665][T12011] netlink: 14566 bytes leftover after parsing attributes in process `syz.1.2968'. [ 641.981818][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 642.003510][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 642.074822][T11985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.159440][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 642.194766][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 642.393824][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 642.415564][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 642.434059][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 642.442329][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 642.467916][T11985] device veth0_vlan entered promiscuous mode [ 642.583597][T11985] device veth1_vlan entered promiscuous mode [ 642.779100][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 642.796771][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 642.813747][T11569] Bluetooth: hci3: command 0x040f tx timeout [ 642.825506][T11985] device veth0_macvtap entered promiscuous mode [ 642.842794][T11985] device veth1_macvtap entered promiscuous mode [ 642.880999][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.894490][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.904965][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.915979][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.926368][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.938550][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.948968][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.960318][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.972285][T11985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.984176][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.995230][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.005576][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.016575][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.026995][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.039692][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.050199][T11985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.062876][T11985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.080644][T11985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.088699][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 643.103990][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 643.112974][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 643.125983][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 643.140174][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 643.153147][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 643.171296][T11985] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.181365][T11985] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.192527][T11985] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.203487][T11985] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.884676][T11569] Bluetooth: hci3: command 0x0419 tx timeout [ 644.923991][ T5334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.947604][ T5334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.992961][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 645.029902][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.049529][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.087224][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 645.924108][T12053] netlink: 14566 bytes leftover after parsing attributes in process `syz.0.2972'. [ 646.182536][T12055] device syzkaller0 entered promiscuous mode [ 646.276839][T12051] netlink: 'syz.2.2971': attribute type 10 has an invalid length. [ 652.695726][T12087] netlink: 14566 bytes leftover after parsing attributes in process `syz.3.2985'. [ 653.072070][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 653.089202][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 653.100735][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 653.109925][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 653.125283][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 653.132943][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 653.166955][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.249537][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.329530][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.414253][ T47] bond0: (slave netdevsim0): Releasing backup interface [ 653.429729][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.588687][T12092] chnl_net:caif_netlink_parms(): no params data found [ 653.651634][T12098] netlink: 14566 bytes leftover after parsing attributes in process `syz.3.2996'. [ 654.445093][T12105] netlink: 'syz.3.2988': attribute type 10 has an invalid length. [ 654.647688][T12092] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.676624][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.691290][T12092] device bridge_slave_0 entered promiscuous mode [ 654.799379][T12092] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.824628][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.846133][T12092] device bridge_slave_1 entered promiscuous mode [ 655.021992][T12092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.122718][T12118] device syzkaller0 entered promiscuous mode [ 655.155136][T12092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.196858][T11569] Bluetooth: hci0: command 0x0409 tx timeout [ 655.240500][T12092] team0: Port device team_slave_0 added [ 655.249852][T12092] team0: Port device team_slave_1 added [ 657.188007][T12092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.196469][T12092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.224811][T12092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.284709][T11569] Bluetooth: hci0: command 0x041b tx timeout [ 657.345051][T12092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.352163][T12092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.419081][T12092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.568404][T12092] device hsr_slave_0 entered promiscuous mode [ 657.585360][T12092] device hsr_slave_1 entered promiscuous mode [ 657.604507][T12092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.620237][T12092] Cannot create hsr debugfs directory [ 657.654567][ T47] device hsr_slave_0 left promiscuous mode [ 657.673357][ T47] device hsr_slave_1 left promiscuous mode [ 657.698878][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.711521][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.722450][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.752938][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.802669][ T47] device veth1_vlan left promiscuous mode [ 658.632820][ T47] team0 (unregistering): Port device macvlan0 removed [ 659.089148][ T47] team0 (unregistering): Port device team_slave_1 removed [ 659.190312][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.239371][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.354756][T11569] Bluetooth: hci0: command 0x040f tx timeout [ 659.548479][ T47] bond0 (unregistering): Released all slaves [ 659.805057][T12164] netlink: 14566 bytes leftover after parsing attributes in process `syz.3.2998'. [ 660.922193][T12092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 660.979551][T12092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 661.026056][T12092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 661.083483][T12092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 661.435141][T11569] Bluetooth: hci0: command 0x0419 tx timeout [ 661.747248][T12092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.941059][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 661.980049][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.109296][T12092] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.202851][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.212959][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.222681][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.229917][ T5332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.249456][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.270402][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 662.307607][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.328970][T12156] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.336266][T12156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.384675][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.401361][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.426653][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.462648][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 662.487726][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.510475][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.543084][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 662.552890][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.573467][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.591115][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.601515][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.613677][T12092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.376790][T12222] netlink: 'syz.3.3008': attribute type 21 has an invalid length. [ 663.392219][T12222] netlink: 14542 bytes leftover after parsing attributes in process `syz.3.3008'. [ 663.643663][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.658565][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 663.751678][T12092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.867593][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 663.882596][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 663.952194][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 663.963242][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 663.984616][T12092] device veth0_vlan entered promiscuous mode [ 664.002126][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 664.021938][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 664.071743][T12092] device veth1_vlan entered promiscuous mode [ 664.264795][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 664.280402][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 664.318613][T12092] device veth0_macvtap entered promiscuous mode [ 664.346254][T12092] device veth1_macvtap entered promiscuous mode [ 664.360497][T12234] netlink: 'syz.3.3012': attribute type 10 has an invalid length. [ 664.482908][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.535767][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.573342][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.611905][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.644744][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.655373][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.665404][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.676074][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.688136][T12092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.710654][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 664.742249][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 664.763611][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 664.775029][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 664.787116][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.804473][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.834492][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.854573][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.865104][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.876521][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.886719][T12092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.909775][T12092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.931671][T12092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.035264][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 665.111487][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 665.127634][T12092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.136887][T12092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.159676][T12092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.213483][T12092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.511254][T12249] device syzkaller0 entered promiscuous mode [ 668.162179][T12258] netlink: 'syz.1.3017': attribute type 39 has an invalid length. [ 668.247181][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.271923][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.308245][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 668.366067][ T5320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.383354][ T5320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.423189][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 668.483311][T12289] netlink: 'syz.0.3019': attribute type 21 has an invalid length. [ 668.494170][T12289] netlink: 14542 bytes leftover after parsing attributes in process `syz.0.3019'. [ 670.204691][T12306] netlink: 'syz.0.3023': attribute type 10 has an invalid length. [ 670.259655][T12306] team0: Port device macvlan0 added [ 671.106707][T12327] device syzkaller0 entered promiscuous mode [ 673.395602][T12341] netlink: 'syz.4.3031': attribute type 21 has an invalid length. [ 673.403607][T12341] netlink: 14542 bytes leftover after parsing attributes in process `syz.4.3031'. [ 676.647973][T12349] ------------[ cut here ]------------ [ 676.653591][T12349] WARNING: CPU: 1 PID: 12349 at kernel/events/core.c:6602 perf_pending_task+0x353/0x480 [ 676.663669][T12349] Modules linked in: [ 676.667689][T12349] CPU: 1 PID: 12349 Comm: syz.0.3034 Not tainted syzkaller #0 [ 676.675349][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 676.685700][T12349] RIP: 0010:perf_pending_task+0x353/0x480 [ 676.691473][T12349] Code: e8 a2 72 da ff 84 db 75 10 e8 39 70 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 70 da ff e8 bc c0 58 ff eb e9 e8 1d 70 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 676.711517][T12349] RSP: 0018:ffffc900036bf8e8 EFLAGS: 00010293 [ 676.719061][T12349] RAX: ffffffff81a7c2c3 RBX: ffff88807824e458 RCX: ffff88802e1bda00 [ 676.727151][T12349] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 676.735224][T12349] RBP: ffff88807824e220 R08: ffff88802e1be403 R09: 1ffff11005c37c80 [ 676.743260][T12349] R10: dffffc0000000000 R11: ffffed1005c37c81 R12: ffff88802e1bda00 [ 676.751338][T12349] R13: ffff888054f5f160 R14: 0000000000000000 R15: 1ffff1100f049c44 [ 676.759394][T12349] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 676.768423][T12349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 676.775086][T12349] CR2: 0000001b33121ff8 CR3: 0000000059497000 CR4: 00000000003506e0 [ 676.783116][T12349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 676.791181][T12349] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 676.799269][T12349] Call Trace: [ 676.802593][T12349] [ 676.805625][T12349] task_work_run+0x1d0/0x260 [ 676.810409][T12349] ? task_work_cancel+0x220/0x220 [ 676.815577][T12349] ? do_raw_spin_unlock+0x11d/0x230 [ 676.820940][T12349] do_exit+0x9d5/0x2570 [ 676.825237][T12349] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 676.831309][T12349] ? put_task_struct+0x80/0x80 [ 676.836194][T12349] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 676.842497][T12349] ? lockdep_hardirqs_on+0x94/0x140 [ 676.847833][T12349] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 676.854051][T12349] do_group_exit+0x229/0x2e0 [ 676.858753][T12349] ? _raw_spin_unlock_irq+0x25/0x40 [ 676.864101][T12349] get_signal+0x1259/0x1340 [ 676.868873][T12349] arch_do_signal_or_restart+0xc4/0x1310 [ 676.874627][T12349] ? perf_trace_preemptirq_template+0x268/0x320 [ 676.881019][T12349] ? irqentry_enter+0x33/0x50 [ 676.885796][T12349] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 676.891867][T12349] ? get_sigframe_size+0x10/0x10 [ 676.896905][T12349] ? lock_chain_count+0x20/0x20 [ 676.901818][T12349] ? rcu_is_watching+0x11/0xa0 [ 676.906794][T12349] exit_to_user_mode_loop+0x70/0x110 [ 676.912211][T12349] exit_to_user_mode_prepare+0xee/0x180 [ 676.917872][T12349] syscall_exit_to_user_mode+0x16/0x40 [ 676.923389][T12349] do_syscall_64+0x58/0xa0 [ 676.927899][T12349] ? clear_bhb_loop+0x60/0xb0 [ 676.932629][T12349] ? clear_bhb_loop+0x60/0xb0 [ 676.937398][T12349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.943359][T12349] RIP: 0033:0x7fe98199e159 [ 676.947876][T12349] Code: Unable to access opcode bytes at 0x7fe98199e12f. [ 676.954974][T12349] RSP: 002b:00007fe9828dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 676.963440][T12349] RAX: fffffffffffffe00 RBX: 00007fe981c25fa8 RCX: 00007fe98199e159 [ 676.971526][T12349] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe981c25fa8 [ 676.979593][T12349] RBP: 00007fe981c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 676.987666][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.995723][T12349] R13: 00007fe981c26038 R14: 00007fffe0c08e10 R15: 00007fffe0c08ef8 [ 677.003770][T12349] [ 677.006889][T12349] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 677.014211][T12349] CPU: 1 PID: 12349 Comm: syz.0.3034 Not tainted syzkaller #0 [ 677.021717][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 677.031914][T12349] Call Trace: [ 677.035243][T12349] [ 677.038210][T12349] dump_stack_lvl+0x188/0x24e [ 677.042920][T12349] ? memcpy+0x3c/0x60 [ 677.046999][T12349] ? show_regs_print_info+0x12/0x12 [ 677.052230][T12349] ? load_image+0x410/0x410 [ 677.056798][T12349] panic+0x2d3/0x710 [ 677.060723][T12349] ? bpf_jit_dump+0xd0/0xd0 [ 677.065263][T12349] __warn+0x2f8/0x4f0 [ 677.069288][T12349] ? perf_pending_task+0x353/0x480 [ 677.074438][T12349] ? perf_pending_task+0x353/0x480 [ 677.079594][T12349] report_bug+0x2ba/0x4f0 [ 677.083972][T12349] ? perf_pending_task+0x353/0x480 [ 677.089128][T12349] handle_bug+0x3a/0x70 [ 677.093307][T12349] exc_invalid_op+0x16/0x40 [ 677.097836][T12349] asm_exc_invalid_op+0x16/0x20 [ 677.102706][T12349] RIP: 0010:perf_pending_task+0x353/0x480 [ 677.108459][T12349] Code: e8 a2 72 da ff 84 db 75 10 e8 39 70 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 70 da ff e8 bc c0 58 ff eb e9 e8 1d 70 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 677.128093][T12349] RSP: 0018:ffffc900036bf8e8 EFLAGS: 00010293 [ 677.134179][T12349] RAX: ffffffff81a7c2c3 RBX: ffff88807824e458 RCX: ffff88802e1bda00 [ 677.142172][T12349] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 677.150167][T12349] RBP: ffff88807824e220 R08: ffff88802e1be403 R09: 1ffff11005c37c80 [ 677.158177][T12349] R10: dffffc0000000000 R11: ffffed1005c37c81 R12: ffff88802e1bda00 [ 677.166224][T12349] R13: ffff888054f5f160 R14: 0000000000000000 R15: 1ffff1100f049c44 [ 677.174229][T12349] ? perf_pending_task+0x353/0x480 [ 677.179379][T12349] ? perf_pending_task+0x353/0x480 [ 677.184530][T12349] task_work_run+0x1d0/0x260 [ 677.189165][T12349] ? task_work_cancel+0x220/0x220 [ 677.194230][T12349] ? do_raw_spin_unlock+0x11d/0x230 [ 677.199462][T12349] do_exit+0x9d5/0x2570 [ 677.203658][T12349] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 677.209689][T12349] ? put_task_struct+0x80/0x80 [ 677.214484][T12349] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 677.220665][T12349] ? lockdep_hardirqs_on+0x94/0x140 [ 677.225891][T12349] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 677.232073][T12349] do_group_exit+0x229/0x2e0 [ 677.236695][T12349] ? _raw_spin_unlock_irq+0x25/0x40 [ 677.241923][T12349] get_signal+0x1259/0x1340 [ 677.246477][T12349] arch_do_signal_or_restart+0xc4/0x1310 [ 677.252158][T12349] ? perf_trace_preemptirq_template+0x268/0x320 [ 677.258431][T12349] ? irqentry_enter+0x33/0x50 [ 677.263145][T12349] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 677.269155][T12349] ? get_sigframe_size+0x10/0x10 [ 677.274125][T12349] ? lock_chain_count+0x20/0x20 [ 677.279006][T12349] ? rcu_is_watching+0x11/0xa0 [ 677.283819][T12349] exit_to_user_mode_loop+0x70/0x110 [ 677.289155][T12349] exit_to_user_mode_prepare+0xee/0x180 [ 677.294729][T12349] syscall_exit_to_user_mode+0x16/0x40 [ 677.300214][T12349] do_syscall_64+0x58/0xa0 [ 677.304648][T12349] ? clear_bhb_loop+0x60/0xb0 [ 677.309343][T12349] ? clear_bhb_loop+0x60/0xb0 [ 677.314048][T12349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.319972][T12349] RIP: 0033:0x7fe98199e159 [ 677.324422][T12349] Code: Unable to access opcode bytes at 0x7fe98199e12f. [ 677.331495][T12349] RSP: 002b:00007fe9828dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 677.339938][T12349] RAX: fffffffffffffe00 RBX: 00007fe981c25fa8 RCX: 00007fe98199e159 [ 677.347938][T12349] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe981c25fa8 [ 677.355948][T12349] RBP: 00007fe981c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 677.363951][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.371953][T12349] R13: 00007fe981c26038 R14: 00007fffe0c08e10 R15: 00007fffe0c08ef8 [ 677.379967][T12349] [ 677.383172][T12349] Kernel Offset: disabled [ 677.387520][T12349] Rebooting in 86400 seconds..