last executing test programs: 3.03386132s ago: executing program 2 (id=1300): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xfc00) 2.948217852s ago: executing program 4 (id=1301): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffff}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r1, 0x0) 2.873815831s ago: executing program 2 (id=1302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.743097263s ago: executing program 4 (id=1303): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x81082, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/137, 0x89}], 0x2}, 0x40000000) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 2.625516713s ago: executing program 2 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.62451215s ago: executing program 1 (id=1305): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031600590214000000002f1eafbcf706e105000000894f000f1112ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 2.620011124s ago: executing program 3 (id=1306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0xa, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000280)='./file0\x00', 0x1) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x4000840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xc0000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000380)={'ip6erspan0\x00', 0x200}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/76, 0xbe, 0x4c, 0x0, 0x1ff, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.444276702s ago: executing program 0 (id=1307): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0) 2.443882606s ago: executing program 2 (id=1308): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x2}, 0x5114, 0x80000001, 0x0, 0x0, 0x0, 0xffffffff, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') 2.358832183s ago: executing program 0 (id=1309): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.274462826s ago: executing program 1 (id=1310): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x20, {0xa, 0x4e23, 0xf, @mcast2, 0xff}}}, 0x80, 0x0, 0x1, 0x0, 0xfffffffffffffd88}, 0x480c0) 2.158953514s ago: executing program 0 (id=1311): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442e05d9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) 2.097607271s ago: executing program 0 (id=1312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 1.612543867s ago: executing program 3 (id=1313): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) 1.501341107s ago: executing program 3 (id=1314): r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, 0x0, 0x40000080) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8985b0808aa78", 0x14}], 0x1}, 0x0) 1.407385314s ago: executing program 4 (id=1315): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0xfe, 0x0, 0x0) 1.360249434s ago: executing program 3 (id=1316): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.187945566s ago: executing program 1 (id=1317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.102219275s ago: executing program 4 (id=1318): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 811.113004ms ago: executing program 2 (id=1319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000280)='./file0\x00', 0x1) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x4000840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xc0000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000380)={'ip6erspan0\x00', 0x200}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/76, 0xbe, 0x4c, 0x0, 0x1ff, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 810.643519ms ago: executing program 1 (id=1320): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t\t') 810.22231ms ago: executing program 4 (id=1321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0xa, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000280)='./file0\x00', 0x1) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x4000840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xc0000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000380)={'ip6erspan0\x00', 0x200}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/76, 0xbe, 0x4c, 0x0, 0x1ff, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 720.311761ms ago: executing program 0 (id=1322): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f00000020c0)=""/4089, 0xff9}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000840)=""/243, 0xf3}], 0x5}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 396.142751ms ago: executing program 3 (id=1323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0xa, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000280)='./file0\x00', 0x1) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x4000840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xc0000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000380)={'ip6erspan0\x00', 0x200}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/76, 0xbe, 0x4c, 0x0, 0x1ff, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 307.406394ms ago: executing program 1 (id=1324): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, 0x0, 0x0) 280.532555ms ago: executing program 2 (id=1325): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 184.044205ms ago: executing program 0 (id=1326): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x81082, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/137, 0x89}], 0x2}, 0x40000000) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 114.788461ms ago: executing program 4 (id=1327): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003540)=""/102, 0x66}, {&(0x7f0000001040)=""/4064, 0xfe0}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f0000000840)=""/235, 0xeb}], 0x5}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 109.179067ms ago: executing program 3 (id=1328): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x7, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 0s ago: executing program 1 (id=1329): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000001cc0)=ANY=[@ANYRES64], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000015) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x8008b705, 0x0) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='subflow_check_data_avail\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 83.967984][ T5829] cgroup: Unknown subsys name 'net' [ 84.099257][ T5829] cgroup: Unknown subsys name 'cpuset' [ 84.108675][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.713970][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.850453][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.870064][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.885272][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.893283][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.902454][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.910614][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.976857][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.978881][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.999518][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.007654][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.016576][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.023753][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.024069][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.038265][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.039831][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.045414][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.060779][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.070060][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.070926][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.077526][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.085086][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.092112][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.100781][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.108001][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.115882][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.641008][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.733913][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 90.902401][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 90.996591][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 91.066784][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.074416][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.084218][ T5840] bridge_slave_0: entered allmulticast mode [ 91.091969][ T5840] bridge_slave_0: entered promiscuous mode [ 91.102547][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.109787][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.116996][ T5840] bridge_slave_1: entered allmulticast mode [ 91.124044][ T5840] bridge_slave_1: entered promiscuous mode [ 91.159902][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.167177][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.174368][ T5844] bridge_slave_0: entered allmulticast mode [ 91.181931][ T5844] bridge_slave_0: entered promiscuous mode [ 91.223190][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 91.251128][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.258433][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.266577][ T5844] bridge_slave_1: entered allmulticast mode [ 91.273840][ T5844] bridge_slave_1: entered promiscuous mode [ 91.383797][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.399493][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.407307][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.414504][ T5850] bridge_slave_0: entered allmulticast mode [ 91.421900][ T5850] bridge_slave_0: entered promiscuous mode [ 91.451485][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.466274][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.473528][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.480834][ T5850] bridge_slave_1: entered allmulticast mode [ 91.488335][ T5850] bridge_slave_1: entered promiscuous mode [ 91.497546][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.556621][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.633527][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.640765][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.648704][ T5847] bridge_slave_0: entered allmulticast mode [ 91.656071][ T5847] bridge_slave_0: entered promiscuous mode [ 91.668978][ T5840] team0: Port device team_slave_0 added [ 91.691707][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.715102][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.722978][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.730966][ T5847] bridge_slave_1: entered allmulticast mode [ 91.738590][ T5847] bridge_slave_1: entered promiscuous mode [ 91.760944][ T5840] team0: Port device team_slave_1 added [ 91.780470][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.788520][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.795976][ T5853] bridge_slave_0: entered allmulticast mode [ 91.803070][ T5853] bridge_slave_0: entered promiscuous mode [ 91.813717][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.825862][ T5844] team0: Port device team_slave_0 added [ 91.877952][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.885361][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.892504][ T5853] bridge_slave_1: entered allmulticast mode [ 91.900266][ T5853] bridge_slave_1: entered promiscuous mode [ 91.909348][ T5844] team0: Port device team_slave_1 added [ 91.932456][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.945807][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.955944][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.962908][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.989908][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.008372][ T47] cfg80211: failed to load regulatory.db [ 92.026530][ T5850] team0: Port device team_slave_0 added [ 92.069810][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.078599][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.105549][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.106155][ T5846] Bluetooth: hci0: command tx timeout [ 92.131829][ T5850] team0: Port device team_slave_1 added [ 92.151333][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.158661][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.184959][ T5852] Bluetooth: hci2: command tx timeout [ 92.189634][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.190540][ T55] Bluetooth: hci1: command tx timeout [ 92.203920][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.207007][ T5846] Bluetooth: hci4: command tx timeout [ 92.215604][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.245327][ T5846] Bluetooth: hci3: command tx timeout [ 92.251862][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.281759][ T5847] team0: Port device team_slave_0 added [ 92.303917][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.339987][ T5847] team0: Port device team_slave_1 added [ 92.363419][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.399129][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.406321][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.432699][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.477073][ T5840] hsr_slave_0: entered promiscuous mode [ 92.483648][ T5840] hsr_slave_1: entered promiscuous mode [ 92.505550][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.512554][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.539181][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.577111][ T5853] team0: Port device team_slave_0 added [ 92.591927][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.599707][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.626267][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.672518][ T5853] team0: Port device team_slave_1 added [ 92.680898][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.688114][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.714233][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.740999][ T5844] hsr_slave_0: entered promiscuous mode [ 92.747685][ T5844] hsr_slave_1: entered promiscuous mode [ 92.753815][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.761914][ T5844] Cannot create hsr debugfs directory [ 92.852314][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.859408][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.885963][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.951501][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.958616][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.984699][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.022402][ T5847] hsr_slave_0: entered promiscuous mode [ 93.029915][ T5847] hsr_slave_1: entered promiscuous mode [ 93.036360][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.043932][ T5847] Cannot create hsr debugfs directory [ 93.071969][ T5850] hsr_slave_0: entered promiscuous mode [ 93.078477][ T5850] hsr_slave_1: entered promiscuous mode [ 93.084522][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.092835][ T5850] Cannot create hsr debugfs directory [ 93.176596][ T5853] hsr_slave_0: entered promiscuous mode [ 93.183007][ T5853] hsr_slave_1: entered promiscuous mode [ 93.189719][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.197784][ T5853] Cannot create hsr debugfs directory [ 93.639458][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.651691][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.684039][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.709960][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.773277][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.788917][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.818757][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.831415][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.879401][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.900284][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.916233][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.953163][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.030385][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.044346][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.073035][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.100543][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.147753][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.175750][ T5846] Bluetooth: hci0: command tx timeout [ 94.243127][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.254193][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.255606][ T5846] Bluetooth: hci4: command tx timeout [ 94.267210][ T55] Bluetooth: hci1: command tx timeout [ 94.267926][ T5852] Bluetooth: hci2: command tx timeout [ 94.282410][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.307056][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.314809][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.325918][ T5846] Bluetooth: hci3: command tx timeout [ 94.378007][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.385393][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.406124][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.413358][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.474508][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.500595][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.589802][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.612515][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.632086][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.639287][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.652440][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.671428][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.678594][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.738321][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.745507][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.773031][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.793548][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.800769][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.841166][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.848400][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.900132][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.907351][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.072256][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.123344][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.153885][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.202870][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.210103][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.233238][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.240478][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.416131][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.481411][ T5840] veth0_vlan: entered promiscuous mode [ 95.532446][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.562142][ T5840] veth1_vlan: entered promiscuous mode [ 95.593489][ T5844] veth0_vlan: entered promiscuous mode [ 95.662621][ T5844] veth1_vlan: entered promiscuous mode [ 95.706741][ T5840] veth0_macvtap: entered promiscuous mode [ 95.729811][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.758311][ T5840] veth1_macvtap: entered promiscuous mode [ 95.789833][ T5844] veth0_macvtap: entered promiscuous mode [ 95.799865][ T5847] veth0_vlan: entered promiscuous mode [ 95.813116][ T5844] veth1_macvtap: entered promiscuous mode [ 95.833298][ T5847] veth1_vlan: entered promiscuous mode [ 95.848931][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.891945][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.915079][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.928740][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.939151][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.948009][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.957787][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.978046][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.990964][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.013332][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.061886][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.080528][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.101590][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.114278][ T5847] veth0_macvtap: entered promiscuous mode [ 96.142605][ T5850] veth0_vlan: entered promiscuous mode [ 96.174319][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.205428][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.214204][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.223095][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.238522][ T5847] veth1_macvtap: entered promiscuous mode [ 96.249439][ T5846] Bluetooth: hci0: command tx timeout [ 96.259312][ T5850] veth1_vlan: entered promiscuous mode [ 96.324580][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.336173][ T5846] Bluetooth: hci4: command tx timeout [ 96.341624][ T5846] Bluetooth: hci1: command tx timeout [ 96.347281][ T5852] Bluetooth: hci2: command tx timeout [ 96.350225][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.362703][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.373768][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.386597][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.406429][ T5846] Bluetooth: hci3: command tx timeout [ 96.431782][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.443386][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.453718][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.464381][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.477726][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.501448][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.508795][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.518536][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.524364][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.536019][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.544748][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.556515][ T5853] veth0_vlan: entered promiscuous mode [ 96.595028][ T5853] veth1_vlan: entered promiscuous mode [ 96.651429][ T5850] veth0_macvtap: entered promiscuous mode [ 96.652314][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.670770][ T5850] veth1_macvtap: entered promiscuous mode [ 96.678883][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.754049][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.758467][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.773278][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.784169][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.791465][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.794761][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.812382][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.822920][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.838641][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.871328][ T5853] veth0_macvtap: entered promiscuous mode [ 96.893312][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.904113][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.914253][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.926448][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.936617][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.948622][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.960909][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.977390][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.011080][ T5853] veth1_macvtap: entered promiscuous mode [ 97.016897][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.016922][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.040600][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052882][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.063075][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.072028][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.193902][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.215040][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.237733][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.254949][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.266540][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.281163][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.293084][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.305358][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.316937][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.328850][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.341558][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.472242][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.505175][ C1] hrtimer: interrupt took 48982 ns [ 97.510946][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.524342][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.536481][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.546987][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.558851][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.569005][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.579597][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.591694][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.622081][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.637667][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.652721][ T5853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.668412][ T5853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.677596][ T5853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.687313][ T5853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.758858][ T5933] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 97.787399][ T5933] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 97.802878][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.842259][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.012047][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.022489][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.068014][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.097583][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.250979][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.273459][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.327344][ T5846] Bluetooth: hci0: command tx timeout [ 98.407393][ T5846] Bluetooth: hci4: command tx timeout [ 98.412882][ T5846] Bluetooth: hci1: command tx timeout [ 98.418537][ T5852] Bluetooth: hci2: command tx timeout [ 98.488006][ T5846] Bluetooth: hci3: command tx timeout [ 98.594654][ T5933] syz.1.6 (5933) used greatest stack depth: 18968 bytes left [ 98.767224][ T5948] netlink: 763 bytes leftover after parsing attributes in process `syz.0.8'. [ 99.020243][ T5950] bridge_slave_1: left allmulticast mode [ 99.061020][ T5950] bridge_slave_1: left promiscuous mode [ 99.088861][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.159801][ T5846] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 99.220438][ T5950] bridge_slave_0: left allmulticast mode [ 99.232773][ T5950] bridge_slave_0: left promiscuous mode [ 99.240016][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.308614][ T5965] netlink: 'syz.2.11': attribute type 2 has an invalid length. [ 99.316851][ T5965] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 99.325801][ T5965] netlink: 125828 bytes leftover after parsing attributes in process `syz.2.11'. [ 99.352297][ T5965] netlink: 'syz.2.11': attribute type 2 has an invalid length. [ 99.375962][ T5965] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 99.600998][ T5968] warning: `syz.0.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.619628][ T5972] netlink: 'syz.0.13': attribute type 11 has an invalid length. [ 99.935114][ T5976] sit0: entered allmulticast mode [ 100.098619][ T5976] sit0: entered promiscuous mode [ 100.724318][ T5987] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16'. [ 100.931817][ T5983] syzkaller0: entered promiscuous mode [ 100.939858][ T5983] syzkaller0: entered allmulticast mode [ 101.200811][ T5984] sit0: entered allmulticast mode [ 101.221688][ T5986] sit0: entered promiscuous mode [ 101.764968][ T6002] Zero length message leads to an empty skb [ 105.418303][ T6034] netlink: 'syz.1.30': attribute type 10 has an invalid length. [ 105.496617][ T6038] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.800217][ T6034] team0: Port device macvlan0 added [ 105.897140][ T6046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.059734][ T6049] netlink: 2451 bytes leftover after parsing attributes in process `syz.0.35'. [ 106.075751][ T6047] netlink: 10 bytes leftover after parsing attributes in process `syz.4.34'. [ 106.318667][ T6046] netlink: 180 bytes leftover after parsing attributes in process `syz.4.34'. [ 106.382901][ T6049] netlink: 'syz.0.35': attribute type 10 has an invalid length. [ 106.426890][ T6049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.35'. [ 106.635540][ T6049] team0: Port device geneve0 added [ 106.668133][ T6056] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 106.819337][ T6059] netlink: 'syz.4.39': attribute type 10 has an invalid length. [ 106.889088][ T6059] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.934669][ T6062] sctp: [Deprecated]: syz.2.40 (pid 6062) Use of int in maxseg socket option. [ 106.934669][ T6062] Use struct sctp_assoc_value instead [ 107.941357][ T6073] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 108.037066][ T6073] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 108.061067][ T6073] netlink: 125828 bytes leftover after parsing attributes in process `syz.0.43'. [ 108.134323][ T6073] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 108.178439][ T6073] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 109.517463][ T6112] netlink: 2451 bytes leftover after parsing attributes in process `syz.3.52'. [ 109.800482][ T6112] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 109.824793][ T6112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.52'. [ 110.530858][ T6099] netlink: 'syz.0.51': attribute type 29 has an invalid length. [ 110.630278][ T6112] team0: Port device geneve0 added [ 110.854013][ T6115] sctp: [Deprecated]: syz.4.54 (pid 6115) Use of int in maxseg socket option. [ 110.854013][ T6115] Use struct sctp_assoc_value instead [ 110.881672][ T6117] sit0: entered allmulticast mode [ 110.958467][ T6123] sit0: entered promiscuous mode [ 112.568915][ T6151] netlink: 2451 bytes leftover after parsing attributes in process `syz.4.68'. [ 112.614827][ T6142] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.64'. [ 112.629151][ T6141] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.64'. [ 112.761269][ T5846] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 112.773434][ T6151] netlink: 'syz.4.68': attribute type 10 has an invalid length. [ 112.837723][ T6151] netlink: 40 bytes leftover after parsing attributes in process `syz.4.68'. [ 113.476177][ T6151] team0: Port device geneve0 added [ 115.734198][ T6191] netlink: 'syz.1.79': attribute type 2 has an invalid length. [ 115.827261][ T6191] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 115.915535][ T6199] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.77'. [ 115.978652][ T6187] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.77'. [ 116.149432][ T6201] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.77'. [ 116.187789][ T6204] netlink: 'syz.0.84': attribute type 6 has an invalid length. [ 116.745520][ T5846] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 116.810714][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 116.828168][ T5846] Bluetooth: hci2: Injecting HCI hardware error event [ 116.837829][ T5846] Bluetooth: hci2: hardware error 0x00 [ 116.844645][ T5852] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 118.581980][ T6242] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 118.846270][ T6246] netlink: 'syz.2.93': attribute type 2 has an invalid length. [ 118.855590][ T6246] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 118.961236][ T5846] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 120.173454][ T6270] netlink: 'syz.2.100': attribute type 6 has an invalid length. [ 120.783204][ T5846] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 120.955868][ T5846] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 120.971565][ T5846] Bluetooth: hci0: Injecting HCI hardware error event [ 120.979381][ T5846] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 120.986683][ T55] Bluetooth: hci0: hardware error 0x00 [ 120.988343][ T5846] Bluetooth: hci4: Injecting HCI hardware error event [ 121.006079][ T5846] Bluetooth: hci4: hardware error 0x00 [ 121.356558][ T6287] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.106'. [ 121.418945][ T6291] netlink: 'syz.3.106': attribute type 10 has an invalid length. [ 121.731253][ T6291] bond0: (slave bond_slave_0): Releasing backup interface [ 123.216720][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 123.738557][ T6309] netlink: 'syz.1.111': attribute type 17 has an invalid length. [ 123.766435][ T5846] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 123.916718][ T6309] netlink: 'syz.1.111': attribute type 41 has an invalid length. [ 124.359157][ T6309] netlink: 152 bytes leftover after parsing attributes in process `syz.1.111'. [ 125.751629][ T6333] netlink: 'syz.0.118': attribute type 6 has an invalid length. [ 126.828456][ T6359] netlink: 'syz.0.126': attribute type 10 has an invalid length. [ 127.214716][ T6366] syz.1.128 uses obsolete (PF_INET,SOCK_PACKET) [ 127.349714][ T6359] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.391960][ T6394] netlink: 'syz.1.136': attribute type 6 has an invalid length. [ 129.282024][ T6402] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.138'. [ 130.682873][ T6424] netlink: 'syz.0.148': attribute type 10 has an invalid length. [ 130.728245][ T6424] netlink: 55 bytes leftover after parsing attributes in process `syz.0.148'. [ 131.521171][ T6430] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.149'. [ 131.644996][ T6443] netlink: 166 bytes leftover after parsing attributes in process `syz.3.153'. [ 133.018451][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.025036][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.412956][ T6479] netlink: 'syz.0.165': attribute type 2 has an invalid length. [ 133.437945][ T6479] netlink: 'syz.0.165': attribute type 1 has an invalid length. [ 133.464839][ T6481] netlink: 'syz.4.166': attribute type 6 has an invalid length. [ 134.713085][ T5846] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 137.323915][ T6529] netlink: 'syz.3.183': attribute type 6 has an invalid length. [ 137.984762][ T6540] netlink: 'syz.2.185': attribute type 6 has an invalid length. [ 138.746340][ T5846] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 138.755741][ T5846] Bluetooth: hci3: Injecting HCI hardware error event [ 138.763956][ T55] Bluetooth: hci3: hardware error 0x00 [ 138.924180][ T6550] sctp: [Deprecated]: syz.3.188 (pid 6550) Use of int in maxseg socket option. [ 138.924180][ T6550] Use struct sctp_assoc_value instead [ 139.499634][ T6560] netlink: 'syz.2.190': attribute type 17 has an invalid length. [ 139.538551][ T6560] netlink: 'syz.2.190': attribute type 41 has an invalid length. [ 139.635250][ T6560] netlink: 152 bytes leftover after parsing attributes in process `syz.2.190'. [ 139.890762][ T5846] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 139.890823][ T5846] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 140.731016][ T6589] netlink: 'syz.1.200': attribute type 6 has an invalid length. [ 140.965983][ T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 142.019516][ T6613] netlink: 'syz.0.206': attribute type 10 has an invalid length. [ 142.045854][ T6613] netlink: 55 bytes leftover after parsing attributes in process `syz.0.206'. [ 143.089116][ T6637] netlink: 'syz.4.214': attribute type 6 has an invalid length. [ 143.090124][ T6633] netlink: 'syz.0.212': attribute type 6 has an invalid length. [ 144.751405][ T6652] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 144.843567][ T6652] geneve0: entered promiscuous mode [ 144.944413][ T6652] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 145.623487][ T6659] netlink: 830 bytes leftover after parsing attributes in process `syz.1.222'. [ 145.641013][ T6659] bond_slave_0: entered promiscuous mode [ 145.649273][ T6659] bond_slave_1: entered promiscuous mode [ 147.479105][ T6694] netlink: 'syz.3.231': attribute type 6 has an invalid length. [ 149.706213][ T6733] netlink: 'syz.3.241': attribute type 33 has an invalid length. [ 149.714497][ T6733] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.241'. [ 149.834662][ T6732] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 149.859233][ T6732] netlink: 2 bytes leftover after parsing attributes in process `syz.0.243'. [ 149.938900][ T6732] bond0: entered promiscuous mode [ 149.948139][ T6732] bond_slave_0: entered promiscuous mode [ 149.966543][ T6732] bond_slave_1: entered promiscuous mode [ 149.982749][ T6732] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 150.049167][ T6732] bridge0: port 3(bond0) entered blocking state [ 150.321401][ T6732] bridge0: port 3(bond0) entered disabled state [ 150.343691][ T6732] bond0: entered allmulticast mode [ 150.350119][ T6732] bond_slave_0: entered allmulticast mode [ 150.358358][ T6732] bond_slave_1: entered allmulticast mode [ 150.366283][ T6732] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 150.502944][ T6743] netlink: 'syz.3.246': attribute type 3 has an invalid length. [ 150.562582][ T6743] netlink: 132 bytes leftover after parsing attributes in process `syz.3.246'. [ 150.602666][ T6732] bridge0: port 3(bond0) entered blocking state [ 150.609133][ T6732] bridge0: port 3(bond0) entered forwarding state [ 150.617076][ T6740] netlink: 'syz.4.244': attribute type 10 has an invalid length. [ 150.636336][ T6737] netlink: 830 bytes leftover after parsing attributes in process `syz.0.243'. [ 150.766574][ T6751] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 150.798026][ T6740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.818626][ T6740] team0: Port device bond0 added [ 152.893542][ T6779] veth0_vlan: entered allmulticast mode [ 154.262000][ T6797] netlink: 132 bytes leftover after parsing attributes in process `syz.1.260'. [ 154.343210][ T6797] netlink: 'syz.1.260': attribute type 58 has an invalid length. [ 154.458314][ T6797] netlink: 144 bytes leftover after parsing attributes in process `syz.1.260'. [ 154.770895][ T6805] netlink: 'syz.2.261': attribute type 10 has an invalid length. [ 155.098043][ T6812] netlink: 'syz.3.263': attribute type 6 has an invalid length. [ 155.876366][ T6823] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.267'. [ 156.874587][ T6844] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.274'. [ 157.024127][ T6849] netlink: 'syz.2.276': attribute type 10 has an invalid length. [ 157.088684][ T6849] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 157.268186][ T6856] netlink: 'syz.4.278': attribute type 6 has an invalid length. [ 159.212639][ T6893] netlink: 'syz.3.292': attribute type 10 has an invalid length. [ 159.264731][ T6893] geneve0: entered promiscuous mode [ 159.480375][ T6893] team0: Port device geneve0 removed [ 159.523289][ T6893] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 159.772210][ T6907] netlink: 'syz.1.295': attribute type 6 has an invalid length. [ 160.047519][ T6920] sctp: [Deprecated]: syz.3.298 (pid 6920) Use of int in maxseg socket option. [ 160.047519][ T6920] Use struct sctp_assoc_value instead [ 160.972946][ T6936] netlink: 830 bytes leftover after parsing attributes in process `syz.2.304'. [ 160.996967][ T6936] bond_slave_0: entered promiscuous mode [ 161.006944][ T6936] bond_slave_1: entered promiscuous mode [ 161.019976][ T6936] dummy0: entered promiscuous mode [ 161.618095][ T6957] netlink: 'syz.2.311': attribute type 6 has an invalid length. [ 161.737110][ T6953] netlink: 'syz.3.308': attribute type 10 has an invalid length. [ 162.012538][ T6960] sctp: [Deprecated]: syz.1.312 (pid 6960) Use of int in maxseg socket option. [ 162.012538][ T6960] Use struct sctp_assoc_value instead [ 163.590927][ T6996] netlink: 'syz.4.325': attribute type 2 has an invalid length. [ 163.601778][ T6996] netlink: 'syz.4.325': attribute type 1 has an invalid length. [ 163.960287][ T7004] netlink: 'syz.3.326': attribute type 10 has an invalid length. [ 165.239915][ T7024] netlink: 'syz.1.334': attribute type 17 has an invalid length. [ 165.280101][ T7024] netlink: 'syz.1.334': attribute type 41 has an invalid length. [ 165.301772][ T7024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.334'. [ 166.076744][ T7043] netlink: 'syz.4.340': attribute type 10 has an invalid length. [ 166.188948][ T7043] netlink: 2 bytes leftover after parsing attributes in process `syz.4.340'. [ 166.214412][ T7042] netlink: 830 bytes leftover after parsing attributes in process `syz.4.340'. [ 166.229131][ T7042] bond_slave_0: entered promiscuous mode [ 166.237281][ T7042] bond_slave_1: entered promiscuous mode [ 166.244069][ T7042] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 166.400230][ T7043] bond0: entered promiscuous mode [ 166.432158][ T7043] team0: Port device bond0 removed [ 166.438551][ T7043] bridge0: port 3(bond0) entered blocking state [ 166.449825][ T7043] bridge0: port 3(bond0) entered disabled state [ 166.457914][ T7043] bond0: entered allmulticast mode [ 166.464379][ T7043] bond_slave_0: entered allmulticast mode [ 166.481163][ T7043] bond_slave_1: entered allmulticast mode [ 166.488265][ T7043] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 166.508044][ T7049] sctp: [Deprecated]: syz.2.342 (pid 7049) Use of int in maxseg socket option. [ 166.508044][ T7049] Use struct sctp_assoc_value instead [ 166.753787][ T7054] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 166.793312][ T7054] netlink: 55 bytes leftover after parsing attributes in process `syz.2.344'. [ 167.411764][ T7063] netlink: 'syz.0.347': attribute type 6 has an invalid length. [ 168.778153][ T7079] netlink: 'syz.0.353': attribute type 6 has an invalid length. [ 169.243288][ T7084] sctp: [Deprecated]: syz.3.355 (pid 7084) Use of int in maxseg socket option. [ 169.243288][ T7084] Use struct sctp_assoc_value instead [ 169.830194][ T7092] netlink: 'syz.3.357': attribute type 10 has an invalid length. [ 170.307534][ T7104] netlink: 'syz.4.361': attribute type 6 has an invalid length. [ 170.771490][ T7108] netlink: 'syz.1.362': attribute type 3 has an invalid length. [ 170.825273][ T7108] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.362'. [ 171.558900][ T7120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.366'. [ 171.754625][ T7124] sctp: [Deprecated]: syz.3.367 (pid 7124) Use of int in maxseg socket option. [ 171.754625][ T7124] Use struct sctp_assoc_value instead [ 172.231200][ T7131] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 172.264909][ T7135] netlink: 'syz.3.369': attribute type 6 has an invalid length. [ 172.283956][ T7131] geneve0: entered promiscuous mode [ 172.357596][ T7131] team0: Port device geneve0 removed [ 172.431454][ T7131] geneve0: entered allmulticast mode [ 172.441894][ T7131] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 174.190763][ T7162] netlink: 'syz.3.381': attribute type 10 has an invalid length. [ 174.228349][ T7167] netlink: 'syz.4.382': attribute type 3 has an invalid length. [ 174.265724][ T7162] netlink: 2 bytes leftover after parsing attributes in process `syz.3.381'. [ 174.278043][ T7167] netlink: 132 bytes leftover after parsing attributes in process `syz.4.382'. [ 174.289299][ T7162] bond0: entered promiscuous mode [ 174.308181][ T7162] bond_slave_1: entered promiscuous mode [ 174.310943][ T7174] netlink: 'syz.2.384': attribute type 6 has an invalid length. [ 174.336692][ T7162] bridge0: port 3(bond0) entered blocking state [ 174.348680][ T7162] bridge0: port 3(bond0) entered disabled state [ 174.393536][ T7162] bond0: entered allmulticast mode [ 174.410678][ T7162] bond_slave_1: entered allmulticast mode [ 174.431885][ T7162] geneve0: entered allmulticast mode [ 174.553930][ T7181] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 174.664690][ T7162] bridge0: port 3(bond0) entered blocking state [ 174.677458][ T7162] bridge0: port 3(bond0) entered forwarding state [ 174.714745][ T7172] netlink: 830 bytes leftover after parsing attributes in process `syz.3.381'. [ 175.012450][ T7186] netlink: 'syz.4.387': attribute type 39 has an invalid length. [ 177.249213][ T7230] netlink: 'syz.2.398': attribute type 3 has an invalid length. [ 177.268725][ T7230] netlink: 132 bytes leftover after parsing attributes in process `syz.2.398'. [ 177.338845][ T7237] netlink: 'syz.0.399': attribute type 6 has an invalid length. [ 177.452013][ T7235] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 177.542431][ T7235] geneve0: entered promiscuous mode [ 177.637758][ T7235] team0: Port device geneve0 removed [ 177.791203][ T7235] geneve0: entered allmulticast mode [ 177.846221][ T7235] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 178.251828][ T7235] syz.4.400 (7235) used greatest stack depth: 18880 bytes left [ 178.752070][ T7259] netlink: 'syz.1.406': attribute type 10 has an invalid length. [ 178.797786][ T7259] netlink: 55 bytes leftover after parsing attributes in process `syz.1.406'. [ 179.768018][ T55] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 179.947640][ T7281] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 180.085629][ T7280] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 180.197536][ T7281] team0: Port device wlan1 added [ 181.828477][ T7326] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 182.064682][ T7330] netlink: 'syz.0.430': attribute type 3 has an invalid length. [ 182.104157][ T7330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.430'. [ 182.660809][ T7351] netlink: 'syz.3.437': attribute type 10 has an invalid length. [ 182.720857][ T7351] netlink: 55 bytes leftover after parsing attributes in process `syz.3.437'. [ 183.802732][ T7371] netlink: 'syz.0.444': attribute type 10 has an invalid length. [ 184.417678][ T7388] sctp: [Deprecated]: syz.1.449 (pid 7388) Use of int in maxseg socket option. [ 184.417678][ T7388] Use struct sctp_assoc_value instead [ 185.904803][ T7418] netlink: 'syz.0.458': attribute type 10 has an invalid length. [ 186.028065][ T7423] netlink: 'syz.4.460': attribute type 39 has an invalid length. [ 186.961950][ T7442] netlink: 'syz.4.468': attribute type 6 has an invalid length. [ 187.141406][ T7452] netlink: 'syz.2.471': attribute type 10 has an invalid length. [ 188.986651][ T7496] netlink: 'syz.2.483': attribute type 10 has an invalid length. [ 189.410100][ T7504] netlink: 'syz.3.486': attribute type 6 has an invalid length. [ 190.483239][ T7532] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 (while UP) [ 191.188122][ T7550] netlink: 'syz.3.498': attribute type 6 has an invalid length. [ 191.448169][ T7561] netlink: 'syz.2.503': attribute type 6 has an invalid length. [ 191.673018][ T7564] netlink: 'syz.1.502': attribute type 10 has an invalid length. [ 191.755151][ T7564] netlink: 2 bytes leftover after parsing attributes in process `syz.1.502'. [ 191.827117][ T7564] bond0: entered promiscuous mode [ 194.311648][ T7621] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.522'. [ 194.410356][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.417360][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.430903][ T7616] delete_channel: no stack [ 194.681527][ T7628] delete_channel: no stack [ 195.239260][ T55] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 195.346993][ T7645] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 195.786306][ T7654] netlink: 'syz.2.531': attribute type 6 has an invalid length. [ 195.842365][ T7645] team0: Port device wlan1 removed [ 196.023593][ T7645] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 196.072932][ T7640] syz.4.527 (7640) used greatest stack depth: 18560 bytes left [ 196.091388][ T7645] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 197.258023][ T7684] netlink: 'syz.3.537': attribute type 39 has an invalid length. [ 197.518891][ T7675] netlink: 'syz.0.536': attribute type 6 has an invalid length. [ 198.338452][ T7706] netlink: 'syz.2.544': attribute type 6 has an invalid length. [ 200.551568][ T7736] netlink: 'syz.3.553': attribute type 6 has an invalid length. [ 200.830434][ T7737] netlink: 132 bytes leftover after parsing attributes in process `syz.4.554'. [ 201.708435][ T7752] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.556'. [ 202.778911][ T7778] netlink: 'syz.3.568': attribute type 6 has an invalid length. [ 203.191659][ T7784] netlink: 'syz.0.569': attribute type 6 has an invalid length. [ 204.132868][ T7791] netlink: 132 bytes leftover after parsing attributes in process `syz.1.571'. [ 205.512485][ T7822] netlink: 'syz.2.576': attribute type 10 has an invalid length. [ 205.634340][ T7824] netlink: 'syz.3.578': attribute type 19 has an invalid length. [ 206.548910][ T7830] netlink: 'syz.1.580': attribute type 6 has an invalid length. [ 206.881146][ T7846] netlink: 'syz.1.585': attribute type 6 has an invalid length. [ 207.034785][ T7853] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 207.158463][ T7860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.589'. [ 207.174950][ T7860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.263283][ T7863] netlink: 'syz.1.590': attribute type 16 has an invalid length. [ 207.281168][ T7860] netdevsim netdevsim3: Direct firmware load for \ failed with error -2 [ 207.290348][ T7860] netdevsim netdevsim3: Falling back to sysfs fallback for: \ [ 207.314162][ T7863] netlink: 'syz.1.590': attribute type 3 has an invalid length. [ 207.329210][ T7863] netlink: 132 bytes leftover after parsing attributes in process `syz.1.590'. [ 207.916946][ T7879] netlink: 'syz.1.595': attribute type 6 has an invalid length. [ 209.527978][ T7898] netlink: 132 bytes leftover after parsing attributes in process `syz.4.602'. [ 209.590488][ T7900] syzkaller0: entered allmulticast mode [ 211.259247][ T7929] netlink: 'syz.4.613': attribute type 10 has an invalid length. [ 211.846913][ T7948] sctp: [Deprecated]: syz.0.620 (pid 7948) Use of int in maxseg socket option. [ 211.846913][ T7948] Use struct sctp_assoc_value instead [ 212.083154][ T7954] netlink: 68 bytes leftover after parsing attributes in process `syz.3.623'. [ 212.115192][ T7950] netlink: 'syz.4.621': attribute type 10 has an invalid length. [ 212.649093][ T7950] bond0: (slave wlan1): Releasing backup interface [ 212.670366][ T7950] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 212.682279][ T7950] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 212.699801][ T7950] team0: Port device wlan1 added [ 212.712681][ T7956] @ÿ: renamed from bond_slave_0 [ 213.283515][ T7979] sctp: [Deprecated]: syz.1.631 (pid 7979) Use of int in maxseg socket option. [ 213.283515][ T7979] Use struct sctp_assoc_value instead [ 214.489007][ T8012] netlink: 'syz.0.644': attribute type 6 has an invalid length. [ 214.866948][ T8017] sctp: [Deprecated]: syz.3.646 (pid 8017) Use of int in maxseg socket option. [ 214.866948][ T8017] Use struct sctp_assoc_value instead [ 216.967925][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 216.974561][ T8059] sctp: [Deprecated]: syz.0.658 (pid 8059) Use of int in maxseg socket option. [ 216.974561][ T8059] Use struct sctp_assoc_value instead [ 217.173940][ T8065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.659'. [ 220.067621][ T8131] netlink: 132 bytes leftover after parsing attributes in process `syz.0.685'. [ 221.522785][ T8156] netlink: 'syz.0.692': attribute type 17 has an invalid length. [ 221.545434][ T8156] netlink: 'syz.0.692': attribute type 41 has an invalid length. [ 221.559752][ T8156] netlink: 152 bytes leftover after parsing attributes in process `syz.0.692'. [ 221.602151][ T8163] netlink: 'syz.3.694': attribute type 3 has an invalid length. [ 221.614325][ T8163] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.694'. [ 224.182502][ T8218] netlink: 132 bytes leftover after parsing attributes in process `syz.4.710'. [ 224.235664][ T8217] netlink: 'syz.0.712': attribute type 3 has an invalid length. [ 224.245241][ T8217] netlink: 'syz.0.712': attribute type 1 has an invalid length. [ 224.265590][ T8217] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.712'. [ 224.861820][ T8234] netlink: 'syz.3.713': attribute type 10 has an invalid length. [ 225.139944][ T8234] team0: Port device wlan1 added [ 227.493345][ T8266] netlink: 'syz.3.727': attribute type 10 has an invalid length. [ 228.146255][ T8266] team0: Port device wlan1 removed [ 228.192651][ T8266] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 228.200548][ T8266] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 228.210473][ T8266] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.716251][ T8295] lo: entered allmulticast mode [ 230.621969][ T8313] netlink: 'syz.4.738': attribute type 29 has an invalid length. [ 230.666184][ T8313] netlink: 'syz.4.738': attribute type 29 has an invalid length. [ 230.698125][ T8313] netlink: 'syz.4.738': attribute type 29 has an invalid length. [ 230.827783][ T8325] netlink: 'syz.4.738': attribute type 29 has an invalid length. [ 231.389478][ T8334] netlink: 'syz.0.745': attribute type 25 has an invalid length. [ 232.807550][ T8369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.758'. [ 233.419082][ T8384] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.764'. [ 233.434655][ T8384] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 233.486757][ T8384] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 233.970751][ T8395] delete_channel: no stack [ 234.771900][ T8419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.774'. [ 237.892421][ T8469] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 238.034489][ T8469] netlink: 55 bytes leftover after parsing attributes in process `syz.2.790'. [ 241.455584][ T8527] netlink: 'syz.0.807': attribute type 6 has an invalid length. [ 242.669716][ T8548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.813'. [ 243.143037][ T8557] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.815'. [ 243.164526][ T8557] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 243.226247][ T8557] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 243.337139][ T8559] netlink: 'syz.1.815': attribute type 10 has an invalid length. [ 244.013112][ T8565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.818'. [ 244.312944][ T8586] netlink: 'syz.0.823': attribute type 6 has an invalid length. [ 244.784168][ T8591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.825'. [ 245.196885][ T8591] @ÿ: renamed from bond_slave_0 (while UP) [ 246.305629][ T8599] netlink: 830 bytes leftover after parsing attributes in process `syz.3.826'. [ 246.923628][ T8605] netlink: 132 bytes leftover after parsing attributes in process `syz.1.828'. [ 247.736660][ T8620] netlink: 703 bytes leftover after parsing attributes in process `syz.3.832'. [ 248.515747][ T8630] netlink: 132 bytes leftover after parsing attributes in process `syz.2.833'. [ 249.654715][ T8649] tap0: tun_chr_ioctl cmd 1074025677 [ 249.661560][ T8649] tap0: linktype set to 781 [ 249.742548][ T8649] netlink: 'syz.3.839': attribute type 10 has an invalid length. [ 250.308069][ T8658] raw_sendmsg: syz.0.843 forgot to set AF_INET. Fix it! [ 250.915178][ T8670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.846'. [ 251.965048][ T8677] netlink: 'syz.2.848': attribute type 28 has an invalid length. [ 252.722571][ T8713] netlink: 132 bytes leftover after parsing attributes in process `syz.2.861'. [ 253.862468][ T8737] can: request_module (can-proto-0) failed. [ 254.927303][ T8758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.875'. [ 255.120361][ T8767] netlink: 132 bytes leftover after parsing attributes in process `syz.4.876'. [ 255.351604][ T8769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.879'. [ 255.866287][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.875721][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.334121][ T8826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.895'. [ 259.561385][ T8851] delete_channel: no stack [ 261.795902][ T8877] netlink: 152 bytes leftover after parsing attributes in process `syz.4.909'. [ 261.850161][ T8877] netlink: 104 bytes leftover after parsing attributes in process `syz.4.909'. [ 262.171607][ T8885] netlink: 'syz.1.912': attribute type 2 has an invalid length. [ 262.200684][ T8885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.912'. [ 263.124756][ T8913] netlink: 24576 bytes leftover after parsing attributes in process `syz.2.921'. [ 265.213768][ T8938] netlink: 60 bytes leftover after parsing attributes in process `syz.3.928'. [ 265.484811][ T8954] netlink: 'syz.4.933': attribute type 10 has an invalid length. [ 265.493062][ T8954] netlink: 156 bytes leftover after parsing attributes in process `syz.4.933'. [ 265.804060][ T8961] netlink: 180 bytes leftover after parsing attributes in process `syz.0.936'. [ 268.135745][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 268.672005][ T9028] netlink: 10 bytes leftover after parsing attributes in process `syz.0.957'. [ 274.472883][ T9124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.985'. [ 275.510776][ T9150] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.992'. [ 276.331578][ T9164] netlink: 132 bytes leftover after parsing attributes in process `syz.3.998'. [ 276.626072][ T9175] netlink: 'syz.1.1000': attribute type 10 has an invalid length. [ 277.998740][ T9214] netlink: 'syz.3.1014': attribute type 23 has an invalid length. [ 278.276935][ T9223] sctp: [Deprecated]: syz.2.1017 (pid 9223) Use of int in maxseg socket option. [ 278.276935][ T9223] Use struct sctp_assoc_value instead [ 279.411052][ T9244] netlink: 'syz.1.1020': attribute type 29 has an invalid length. [ 279.553231][ T9244] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1020'. [ 279.723850][ T9253] bridge0: port 3(bond0) entered disabled state [ 279.737106][ T9253] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.749781][ T9253] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.814965][ T9253] bridge0: entered allmulticast mode [ 280.127838][ T9261] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1027'. [ 280.197365][ T9261] netlink: 'syz.2.1027': attribute type 10 has an invalid length. [ 280.210758][ T9264] sctp: [Deprecated]: syz.0.1028 (pid 9264) Use of int in maxseg socket option. [ 280.210758][ T9264] Use struct sctp_assoc_value instead [ 280.252343][ T9261] bond0: (slave bond_slave_0): Releasing backup interface [ 280.346838][ T9261] bond_slave_0: left promiscuous mode [ 280.668884][ T9271] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1032'. [ 280.980869][ T9283] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 280.990777][ T9283] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1034'. [ 281.019863][ T9283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1034'. [ 281.576051][ T9305] sctp: [Deprecated]: syz.1.1041 (pid 9305) Use of int in maxseg socket option. [ 281.576051][ T9305] Use struct sctp_assoc_value instead [ 281.611512][ T9301] bridge0: port 3(bond0) entered disabled state [ 281.618490][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.626263][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.648485][ T9301] bridge0: entered allmulticast mode [ 281.801860][ T9301] bond0: left allmulticast mode [ 281.807282][ T9301] bond_slave_1: left allmulticast mode [ 281.825806][ T9301] geneve0: left allmulticast mode [ 281.859032][ T9301] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 281.867881][ T9301] bridge0: port 3(bond0) entered disabled state [ 281.956770][ T9301] bridge_slave_1: left allmulticast mode [ 281.965268][ T9301] bridge_slave_1: left promiscuous mode [ 282.006880][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.229550][ T9301] bridge_slave_0: left allmulticast mode [ 282.253442][ T9301] bridge_slave_0: left promiscuous mode [ 282.266869][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.786593][ T9365] syzkaller0: entered promiscuous mode [ 285.822737][ T9365] syzkaller0: entered allmulticast mode [ 285.868883][ T9368] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 286.101114][ T9379] netlink: 'syz.0.1063': attribute type 10 has an invalid length. [ 286.109240][ T9379] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1063'. [ 286.247272][ T9375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1063'. [ 286.794849][ T9385] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 289.231756][ T9424] netlink: 'syz.3.1077': attribute type 10 has an invalid length. [ 289.265997][ T9424] netlink: 'syz.3.1077': attribute type 17 has an invalid length. [ 289.274195][ T9424] netlink: 'syz.3.1077': attribute type 16 has an invalid length. [ 289.297659][ T9424] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1077'. [ 290.082528][ T9442] netlink: 'syz.2.1082': attribute type 2 has an invalid length. [ 290.115297][ T9442] netlink: 'syz.2.1082': attribute type 8 has an invalid length. [ 290.123107][ T9442] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1082'. [ 290.186991][ T9445] netlink: 'syz.1.1083': attribute type 10 has an invalid length. [ 293.906117][ T9473] netlink: 'syz.4.1093': attribute type 16 has an invalid length. [ 293.915547][ T9473] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1093'. [ 293.939345][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.001382][ T9472] syz.4.1093: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 294.049513][ T9472] CPU: 0 UID: 0 PID: 9472 Comm: syz.4.1093 Not tainted 6.15.0-rc3-syzkaller-g60400cd2b9be #0 PREEMPT(full) [ 294.049547][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.049565][ T9472] Call Trace: [ 294.049575][ T9472] [ 294.049585][ T9472] dump_stack_lvl+0x241/0x360 [ 294.049635][ T9472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.049668][ T9472] ? __pfx__printk+0x10/0x10 [ 294.049697][ T9472] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 294.049724][ T9472] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 294.049748][ T9472] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 294.049775][ T9472] warn_alloc+0x27c/0x410 [ 294.049807][ T9472] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 294.049835][ T9472] ? __pfx_warn_alloc+0x10/0x10 [ 294.049864][ T9472] ? kasan_save_track+0x3f/0x80 [ 294.049893][ T9472] ? __kasan_kmalloc+0x9d/0xb0 [ 294.049924][ T9472] ? xsk_setsockopt+0x4f9/0x840 [ 294.049954][ T9472] ? do_sock_setsockopt+0x3b1/0x710 [ 294.049985][ T9472] ? __x64_sys_setsockopt+0x187/0x210 [ 294.050015][ T9472] ? do_syscall_64+0xf3/0x210 [ 294.050055][ T9472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.050089][ T9472] __vmalloc_node_range_noprof+0x128/0x1390 [ 294.050151][ T9472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.050184][ T9472] ? __kasan_kmalloc+0x9d/0xb0 [ 294.050222][ T9472] vmalloc_user_noprof+0x74/0x80 [ 294.050249][ T9472] ? xskq_create+0xb6/0x170 [ 294.050280][ T9472] xskq_create+0xb6/0x170 [ 294.050322][ T9472] xsk_init_queue+0xa1/0x100 [ 294.050355][ T9472] xsk_setsockopt+0x4f9/0x840 [ 294.050388][ T9472] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.050419][ T9472] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.050442][ T9472] ? __lock_acquire+0xad5/0xd80 [ 294.050478][ T9472] ? aa_sock_opt_perm+0x79/0x120 [ 294.050513][ T9472] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.050544][ T9472] do_sock_setsockopt+0x3b1/0x710 [ 294.050585][ T9472] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 294.050615][ T9472] ? __fget_files+0x2a/0x420 [ 294.050638][ T9472] ? __fget_files+0x39d/0x420 [ 294.050658][ T9472] ? __fget_files+0x2a/0x420 [ 294.050688][ T9472] __x64_sys_setsockopt+0x187/0x210 [ 294.050728][ T9472] do_syscall_64+0xf3/0x210 [ 294.050752][ T9472] ? clear_bhb_loop+0x45/0xa0 [ 294.050779][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.050800][ T9472] RIP: 0033:0x7f507fd8e969 [ 294.050828][ T9472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.050847][ T9472] RSP: 002b:00007f5080b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.050870][ T9472] RAX: ffffffffffffffda RBX: 00007f507ffb5fa0 RCX: 00007f507fd8e969 [ 294.050886][ T9472] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 294.050899][ T9472] RBP: 00007f507fe10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 294.050913][ T9472] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 294.050927][ T9472] R13: 0000000000000000 R14: 00007f507ffb5fa0 R15: 00007ffdec6d2c18 [ 294.050961][ T9472] [ 294.051089][ T9472] Mem-Info: [ 294.436208][ T9472] active_anon:16822 inactive_anon:0 isolated_anon:0 [ 294.436208][ T9472] active_file:13845 inactive_file:38387 isolated_file:0 [ 294.436208][ T9472] unevictable:768 dirty:365 writeback:0 [ 294.436208][ T9472] slab_reclaimable:10053 slab_unreclaimable:98016 [ 294.436208][ T9472] mapped:28546 shmem:12715 pagetables:815 [ 294.436208][ T9472] sec_pagetables:0 bounce:0 [ 294.436208][ T9472] kernel_misc_reclaimable:0 [ 294.436208][ T9472] free:1311587 free_pcp:4013 free_cma:0 [ 294.835806][ T9472] Node 0 active_anon:62088kB inactive_anon:0kB active_file:55380kB inactive_file:153476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114184kB dirty:1460kB writeback:0kB shmem:43924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10792kB pagetables:3360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.961212][ T9472] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 295.088204][ T9476] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1094'. [ 295.135717][ T9472] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.177991][ T9478] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1094'. [ 295.315456][ T9472] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 295.325824][ T9481] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1096'. [ 295.329947][ T9472] Node 0 DMA32 free:1342356kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:53560kB inactive_anon:0kB active_file:55380kB inactive_file:153384kB unevictable:1536kB writepending:1480kB present:3129332kB managed:2547272kB mlocked:0kB bounce:0kB free_pcp:14684kB local_pcp:12672kB free_cma:0kB [ 295.595215][ T9472] lowmem_reserve[]: 0 0 0 0 0 [ 295.600398][ T9472] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 295.702706][ T9472] lowmem_reserve[]: 0 0 0 0 0 [ 295.725486][ T9472] Node 1 Normal free:3903156kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.793952][ T9472] lowmem_reserve[]: 0 0 0 0 0 [ 295.802962][ T9472] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.820128][ T9472] Node 0 DMA32: 723*4kB (UM) 775*8kB (UM) 928*16kB (UME) 666*32kB (UME) 499*64kB (UME) 132*128kB (UE) 53*256kB (UM) 20*512kB (UM) 9*1024kB (UME) 5*2048kB (UE) 298*4096kB (M) = 1357956kB [ 295.842907][ T9472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 295.854755][ T9472] Node 1 Normal: 237*4kB (UE) 68*8kB (UME) 52*16kB (UME) 229*32kB (UME) 88*64kB (UME) 36*128kB (UME) 15*256kB (UM) 7*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 944*4096kB (ME) = 3903156kB [ 295.878167][ T9472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.887867][ T9472] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.901163][ T9472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.044870][ T9472] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.054313][ T9472] 58719 total pagecache pages [ 296.059274][ T9472] 0 pages in swap cache [ 296.063451][ T9472] Free swap = 124996kB [ 296.067677][ T9472] Total swap = 124996kB [ 296.071855][ T9472] 2097051 pages RAM [ 296.075744][ T9472] 0 pages HighMem/MovableOnly [ 296.205243][ T9472] 428575 pages reserved [ 296.214341][ T9472] 0 pages cma reserved [ 298.291871][ T9520] netlink: 'syz.2.1108': attribute type 2 has an invalid length. [ 298.326374][ T9522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1110'. [ 298.339857][ T9520] netlink: 'syz.2.1108': attribute type 8 has an invalid length. [ 298.366653][ T9520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1108'. [ 298.839273][ T9536] lo: entered promiscuous mode [ 299.068087][ T9540] netlink: 'syz.4.1115': attribute type 2 has an invalid length. [ 299.078849][ T9540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1115'. [ 300.677564][ T9562] netlink: 'syz.0.1124': attribute type 10 has an invalid length. [ 300.944034][ T9577] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1126'. [ 305.554863][ T9641] netlink: 'syz.2.1143': attribute type 39 has an invalid length. [ 306.502951][ T9663] sit0: entered allmulticast mode [ 306.564060][ T9663] sit0: entered promiscuous mode [ 309.928406][ T9728] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1169'. [ 310.179501][ T9727] delete_channel: no stack [ 311.191448][ T9750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1174'. [ 312.027213][ T9767] netlink: 'syz.0.1180': attribute type 3 has an invalid length. [ 312.111172][ T9767] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 312.155898][ T9767] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1180'. [ 314.308629][ T9802] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1190'. [ 314.585901][ T9808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1188'. [ 315.886247][ T9831] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1200'. [ 315.912219][ T9828] netlink: 'syz.2.1199': attribute type 10 has an invalid length. [ 316.309657][ T9828] team0: Port device wlan1 added [ 317.120755][ T9852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1208'. [ 317.316670][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.326225][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.522985][ T9878] sit0: left promiscuous mode [ 318.771981][ T9878] sit0: entered promiscuous mode [ 319.478796][ T9900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1224'. [ 320.258584][ T9911] sock: sock_timestamping_bind_phc: sock not bind to device [ 322.542273][ T9952] tun0: tun_chr_ioctl cmd 1074025694 [ 324.824714][T10020] netlink: 'syz.1.1265': attribute type 6 has an invalid length. [ 324.833116][T10020] netlink: 'syz.1.1265': attribute type 7 has an invalid length. [ 324.843152][T10020] netlink: 13182 bytes leftover after parsing attributes in process `syz.1.1265'. [ 324.939375][T10019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1272'. [ 325.892649][T10057] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1284'. [ 325.902879][T10062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1286'. [ 325.920763][T10062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1286'. [ 326.665335][T10093] netlink: 'syz.1.1299': attribute type 10 has an invalid length. [ 326.726270][T10093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1299'. [ 326.753619][T10093] batman_adv: batadv0: Adding interface: veth0_vlan [ 326.791828][T10093] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.891864][T10093] batman_adv: batadv0: Interface activated: veth0_vlan [ 326.964539][T10102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1303'. [ 327.009100][T10104] Illegal XDP return value 4294967282 on prog (id 989) dev N/A, expect packet loss! [ 327.256755][T10115] batadv0: entered promiscuous mode [ 327.288311][T10115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.240298][T10147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1322'. [ 329.266739][T10146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1322'. [ 329.483885][T10156] netlink: 'syz.2.1325': attribute type 10 has an invalid length. [ 329.514533][T10154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1326'. [ 329.578008][T10156] team0: Port device netdevsim0 added [ 329.593672][ T53] [ 329.596062][ T53] ====================================================== [ 329.603105][ T53] WARNING: possible circular locking dependency detected [ 329.610141][ T53] 6.15.0-rc3-syzkaller-g60400cd2b9be #0 Not tainted [ 329.616729][ T53] ------------------------------------------------------ [ 329.623743][ T53] kworker/u8:3/53 is trying to acquire lock: [ 329.629728][ T53] ffff88805cedce00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_port_change_check+0x51/0x1e0 [ 329.640030][ T53] [ 329.640030][ T53] but task is already holding lock: [ 329.647394][ T53] ffff88807c2f0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x616/0x940 [ 329.658043][ T53] [ 329.658043][ T53] which lock already depends on the new lock. [ 329.658043][ T53] [ 329.668443][ T53] [ 329.668443][ T53] the existing dependency chain (in reverse order) is: [ 329.677455][ T53] [ 329.677455][ T53] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 329.685987][ T53] lock_acquire+0x116/0x2f0 [ 329.691045][ T53] __mutex_lock+0x1a5/0x10c0 [ 329.696164][ T53] dev_set_mtu+0x11c/0x270 [ 329.701111][ T53] team_add_slave+0x83b/0x28b0 [ 329.706406][ T53] do_set_master+0x579/0x730 [ 329.711523][ T53] do_setlink+0xf76/0x4390 [ 329.716479][ T53] rtnl_newlink+0x17e2/0x1fe0 [ 329.721681][ T53] rtnetlink_rcv_msg+0x80f/0xd70 [ 329.727147][ T53] netlink_rcv_skb+0x208/0x480 [ 329.732438][ T53] netlink_unicast+0x7f8/0x9a0 [ 329.737762][ T53] netlink_sendmsg+0x8c3/0xcd0 [ 329.743051][ T53] __sock_sendmsg+0x221/0x270 [ 329.748264][ T53] ____sys_sendmsg+0x523/0x860 [ 329.753560][ T53] __sys_sendmsg+0x271/0x360 [ 329.758680][ T53] do_syscall_64+0xf3/0x210 [ 329.763709][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.770128][ T53] [ 329.770128][ T53] -> #0 (team->team_lock_key#4){+.+.}-{4:4}: [ 329.778315][ T53] validate_chain+0xa69/0x24e0 [ 329.783714][ T53] __lock_acquire+0xad5/0xd80 [ 329.788924][ T53] lock_acquire+0x116/0x2f0 [ 329.793961][ T53] __mutex_lock+0x1a5/0x10c0 [ 329.799074][ T53] team_port_change_check+0x51/0x1e0 [ 329.804887][ T53] team_device_event+0x437/0x5b0 [ 329.810359][ T53] notifier_call_chain+0x1a5/0x3f0 [ 329.815992][ T53] netif_state_change+0x12b/0x1b0 [ 329.821542][ T53] linkwatch_do_dev+0x112/0x170 [ 329.826932][ T53] __linkwatch_run_queue+0x63b/0x940 [ 329.832738][ T53] linkwatch_event+0x4c/0x60 [ 329.837851][ T53] process_scheduled_works+0xac3/0x18e0 [ 329.843934][ T53] worker_thread+0x870/0xd50 [ 329.849054][ T53] kthread+0x7b7/0x940 [ 329.853650][ T53] ret_from_fork+0x4b/0x80 [ 329.858593][ T53] ret_from_fork_asm+0x1a/0x30 [ 329.863879][ T53] [ 329.863879][ T53] other info that might help us debug this: [ 329.863879][ T53] [ 329.874109][ T53] Possible unsafe locking scenario: [ 329.874109][ T53] [ 329.881561][ T53] CPU0 CPU1 [ 329.886930][ T53] ---- ---- [ 329.892291][ T53] lock(&dev_instance_lock_key#20); [ 329.897594][ T53] lock(team->team_lock_key#4); [ 329.905068][ T53] lock(&dev_instance_lock_key#20); [ 329.912888][ T53] lock(team->team_lock_key#4); [ 329.917842][ T53] [ 329.917842][ T53] *** DEADLOCK *** [ 329.917842][ T53] [ 329.925982][ T53] 4 locks held by kworker/u8:3/53: [ 329.931086][ T53] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 329.942802][ T53] #1: ffffc90000bf7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 329.953803][ T53] #2: ffffffff900fd508 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 329.962781][ T53] #3: ffff88807c2f0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x616/0x940 [ 329.973849][ T53] [ 329.973849][ T53] stack backtrace: [ 329.979737][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc3-syzkaller-g60400cd2b9be #0 PREEMPT(full) [ 329.979769][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.979780][ T53] Workqueue: events_unbound linkwatch_event [ 329.979805][ T53] Call Trace: [ 329.979813][ T53] [ 329.979821][ T53] dump_stack_lvl+0x241/0x360 [ 329.979847][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.979870][ T53] ? __pfx__printk+0x10/0x10 [ 329.979898][ T53] ? print_lock+0x171/0x1a0 [ 329.979925][ T53] print_circular_bug+0x2e1/0x300 [ 329.979944][ T53] check_noncircular+0x142/0x160 [ 329.979965][ T53] validate_chain+0xa69/0x24e0 [ 329.979981][ T53] ? __pfx_perf_trace_lock+0x10/0x10 [ 329.980008][ T53] __lock_acquire+0xad5/0xd80 [ 329.980035][ T53] lock_acquire+0x116/0x2f0 [ 329.980056][ T53] ? team_port_change_check+0x51/0x1e0 [ 329.980081][ T53] __mutex_lock+0x1a5/0x10c0 [ 329.980098][ T53] ? team_port_change_check+0x51/0x1e0 [ 329.980122][ T53] ? team_port_change_check+0x51/0x1e0 [ 329.980138][ T53] ? bond_netdev_event+0xe0/0xfb0 [ 329.980155][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 329.980177][ T53] ? __asan_memset+0x23/0x50 [ 329.980201][ T53] team_port_change_check+0x51/0x1e0 [ 329.980221][ T53] team_device_event+0x437/0x5b0 [ 329.980237][ T53] ? notifier_call_chain+0x15a/0x3f0 [ 329.980254][ T53] notifier_call_chain+0x1a5/0x3f0 [ 329.980273][ T53] netif_state_change+0x12b/0x1b0 [ 329.980293][ T53] ? __pfx_netif_state_change+0x10/0x10 [ 329.980316][ T53] ? rfc2863_policy+0x1ce/0x3f0 [ 329.980342][ T53] linkwatch_do_dev+0x112/0x170 [ 329.980367][ T53] __linkwatch_run_queue+0x63b/0x940 [ 329.980382][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 329.980402][ T53] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 329.980421][ T53] ? process_scheduled_works+0x9cb/0x18e0 [ 329.980445][ T53] linkwatch_event+0x4c/0x60 [ 329.980458][ T53] process_scheduled_works+0xac3/0x18e0 [ 329.980498][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.980527][ T53] ? assign_work+0x367/0x3d0 [ 329.980553][ T53] worker_thread+0x870/0xd50 [ 329.980576][ T53] ? __kthread_parkme+0x1a8/0x200 [ 329.980594][ T53] ? __pfx_worker_thread+0x10/0x10 [ 329.980608][ T53] kthread+0x7b7/0x940 [ 329.980627][ T53] ? __pfx_worker_thread+0x10/0x10 [ 329.980642][ T53] ? __pfx_kthread+0x10/0x10 [ 329.980658][ T53] ? __pfx_kthread+0x10/0x10 [ 329.980675][ T53] ? __pfx_kthread+0x10/0x10 [ 329.980692][ T53] ? __pfx_kthread+0x10/0x10 [ 329.980708][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.980731][ T53] ? lockdep_hardirqs_on+0x9d/0x150 [ 329.980745][ T53] ? __pfx_kthread+0x10/0x10 [ 329.980763][ T53] ret_from_fork+0x4b/0x80 [ 329.980778][ T53] ? __pfx_kthread+0x10/0x10 [ 329.980795][ T53] ret_from_fork_asm+0x1a/0x30 [ 329.980819][ T53] [ 330.305323][T10162] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1327'. [ 330.305599][T10167] netlink: 'syz.1.1329': attribute type 6 has an invalid length. [ 330.332986][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1327'.