last executing test programs: 5.414470012s ago: executing program 1 (id=4560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000040)='GPL\x00', 0x525434c0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) 4.533193983s ago: executing program 1 (id=4565): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 4.390603966s ago: executing program 4 (id=4567): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x21, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000080)=@un=@abs, 0x80, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x8c1) 3.970316195s ago: executing program 2 (id=4569): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 3.958700936s ago: executing program 0 (id=4570): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3.926094449s ago: executing program 4 (id=4571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000040)='GPL\x00', 0x525434c0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) 3.669212232s ago: executing program 1 (id=4573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000040)='GPL\x00', 0x525434c0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) 3.575536641s ago: executing program 0 (id=4574): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 3.089626566s ago: executing program 3 (id=4575): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB="000000001c0000"], 0x60}, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x890c, &(0x7f0000000340)={'xfrm0\x00', @random="5def00"}) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.967826297s ago: executing program 4 (id=4576): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 2.883121045s ago: executing program 1 (id=4577): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x6, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="d5c61c9849a2d88b9d75d7f3d6c2de07ffdae41cabc1e0f5b5b952e807c83fa32e2b", @ANYRES16, @ANYRES32], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000d00)=@nl, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="f4", 0x1}], 0x1}, 0x0) getpid() sendmsg$unix(0xffffffffffffffff, 0x0, 0xc4) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xa, &(0x7f0000000500), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000002500)={0x0, 0x2a, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) sendmsg$inet(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.878853085s ago: executing program 2 (id=4578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000040)='GPL\x00', 0x525434c0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) 2.769733015s ago: executing program 3 (id=4579): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x2fd06060c4523804, 0x0, 0x3, &(0x7f0000000080)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x8c1c}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.469407203s ago: executing program 3 (id=4580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000040)='GPL\x00', 0x525434c0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) 2.466864153s ago: executing program 0 (id=4590): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 2.252538832s ago: executing program 2 (id=4581): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x21, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000080)=@un=@abs, 0x80, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x8c1) 1.775897606s ago: executing program 0 (id=4582): getpid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ffe1000000000000000000000061128800001200009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r2) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) getpid() sendmsg(r2, &(0x7f0000000540)={&(0x7f0000000400)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000480)="f8b73cc19c060fe92925e2a3a1cb2923ea937c7a545b389d97eaf08fd31fcb605b02809525d2ddab7a814f642d4c8921837d158d58f9cbb401c7c5ed46cebfdab6f5d4df3fbbdef6bdfd6491dcef1672c1d9822863f0cc09f174fb34f3ebbf2859231569425cc4305ba3e8cfa1790751aea06658646f3a52694eb86c15", 0x7d}, {&(0x7f0000001500)="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", 0xf80}, {&(0x7f0000000600)="fdf7032d21362de54dfeb5a34903efd0192a21e3885eed3555352d75fb05d281ce92da39e8d48209d84d9bbdf5b66ddd57aa51a10744a59e3972f76410fe118ca388a0adc9b8e2843fac40d82032f94f88a47a97fa41c3673ebfd67104bab82b2ba5d03381efacc4367a40cce5c35425fac5d5c73aeece26a7baa8f7d9f7e6f4cbd903f9f548f1c70c93bed0a64c27a256aedf2da7c3b8077be156ab6d3e104dd9329fe99530b0097196c3a447739cbea625ada30e607b8a038ea2ba28b28978b0", 0xc1}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/360], 0x168}, 0x20008005) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x6, '\x00', 0x0, r4, 0x5, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 1.661004037s ago: executing program 1 (id=4583): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 1.587128984s ago: executing program 4 (id=4584): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.557878296s ago: executing program 3 (id=4585): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 1.359873325s ago: executing program 2 (id=4586): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5421, 0x110e22ffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000", @ANYRES32, @ANYBLOB="0000000000000000000000d1b77baed795d89320e26ecefaf08536474f5be6ae43b98aee6c46732acc7d114f74bb89049ce76132c83f8148095b8e2741dd409e839102000000cb09d6b62740d5119f433ff94aa9c6f72a4d2b6490077dbd115dcd4502a9f51d18a7b148fac8059a9d8e", @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x4, 0xffffffffffffff9b, &(0x7f0000000480)=""/135, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.288244291s ago: executing program 4 (id=4587): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22ffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000d90be38ba2c4ab", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004", @ANYRES32, @ANYBLOB="0000000000000000000000d1b77baed795d89320e26ecefaf08536474f5be6ae43b98aee6c46732acc7d114f74bb89049ce76132c83f8148095b8e2741dd409e839102000000cb09d6b62740d5119f433ff94aa9c6f72a4d2b6490077dbd115dcd4502a9f51d18a7b148fac8059a9d8e", @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000c00850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.19796735s ago: executing program 0 (id=4588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000040)='GPL\x00', 0x525434c0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) 1.032612485s ago: executing program 1 (id=4589): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 1.032286745s ago: executing program 2 (id=4591): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB="000000001c0000"], 0x60}, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x890c, &(0x7f0000000340)={'xfrm0\x00', @random="5def00"}) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.030907345s ago: executing program 3 (id=4592): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 897.461357ms ago: executing program 4 (id=4593): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 7.689329ms ago: executing program 0 (id=4594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000040)='GPL\x00', 0x525434c0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) 7.053389ms ago: executing program 2 (id=4595): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x6, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="d5c61c9849a2d88b9d75d7f3d6c2de07ffdae41cabc1e0f5b5b952e807c83fa32e2b", @ANYRES16, @ANYRES32], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000d00)=@nl, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="f4", 0x1}], 0x1}, 0x0) getpid() sendmsg$unix(0xffffffffffffffff, 0x0, 0xc4) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xa, &(0x7f0000000500), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000002500)={0x0, 0x2a, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) sendmsg$inet(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=4596): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000600), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2001, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\\\\$=+@,\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) kernel console output (not intermixed with test programs): .084996][ T8297] netlink: 'syz.1.1657': attribute type 2 has an invalid length. [ 223.100897][ T8297] netlink: 'syz.1.1657': attribute type 8 has an invalid length. [ 223.110013][ T8297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1657'. [ 224.149263][ T8328] netlink: 'syz.0.1670': attribute type 29 has an invalid length. [ 225.127374][ T8297] netlink: 'syz.1.1657': attribute type 2 has an invalid length. [ 225.135828][ T8297] netlink: 'syz.1.1657': attribute type 8 has an invalid length. [ 225.143702][ T8297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1657'. [ 225.180390][ T8328] netlink: 'syz.0.1670': attribute type 29 has an invalid length. [ 225.848516][ T8368] netlink: 'syz.4.1687': attribute type 29 has an invalid length. [ 225.865251][ T8368] netlink: 'syz.4.1687': attribute type 29 has an invalid length. [ 226.386233][ T8398] syz.4.1699[8398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.386320][ T8398] syz.4.1699[8398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.944342][ T8509] netlink: 'syz.4.1752': attribute type 2 has an invalid length. [ 231.060189][ T8509] netlink: 'syz.4.1752': attribute type 8 has an invalid length. [ 231.096539][ T8509] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1752'. [ 231.162920][ T8527] netlink: 'syz.1.1759': attribute type 29 has an invalid length. [ 231.201552][ T8527] netlink: 'syz.1.1759': attribute type 29 has an invalid length. [ 232.629451][ T8601] netlink: 'syz.4.1792': attribute type 2 has an invalid length. [ 232.664474][ T8601] netlink: 'syz.4.1792': attribute type 8 has an invalid length. [ 232.692593][ T8601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1792'. [ 233.231423][ T8644] netlink: 'syz.4.1811': attribute type 2 has an invalid length. [ 233.239696][ T8644] netlink: 'syz.4.1811': attribute type 8 has an invalid length. [ 233.296327][ T8644] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1811'. [ 233.466975][ T8644] netlink: 'syz.4.1811': attribute type 2 has an invalid length. [ 233.514669][ T8644] netlink: 'syz.4.1811': attribute type 8 has an invalid length. [ 233.554128][ T8644] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1811'. [ 234.256493][ T8695] device pim6reg1 entered promiscuous mode [ 235.240994][ T8717] device pim6reg1 entered promiscuous mode [ 235.517171][ T8727] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1847'. [ 235.693500][ T8727] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1847'. [ 236.223634][ T8764] device pim6reg1 entered promiscuous mode [ 236.307904][ T8766] validate_nla: 6 callbacks suppressed [ 236.315235][ T8766] netlink: 'syz.1.1864': attribute type 2 has an invalid length. [ 236.332503][ T8766] netlink: 'syz.1.1864': attribute type 8 has an invalid length. [ 236.343908][ T8766] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1864'. [ 236.479227][ T8766] netlink: 'syz.1.1864': attribute type 2 has an invalid length. [ 236.515164][ T8766] netlink: 'syz.1.1864': attribute type 8 has an invalid length. [ 236.532523][ T8766] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1864'. [ 237.242133][ T8809] netlink: 'syz.0.1882': attribute type 2 has an invalid length. [ 237.272724][ T8809] netlink: 'syz.0.1882': attribute type 8 has an invalid length. [ 237.295574][ T8809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1882'. [ 237.464106][ T8809] netlink: 'syz.0.1882': attribute type 2 has an invalid length. [ 237.498910][ T8809] netlink: 'syz.0.1882': attribute type 8 has an invalid length. [ 237.515288][ T8809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1882'. [ 238.262805][ T8855] netlink: 'syz.4.1903': attribute type 2 has an invalid length. [ 238.284828][ T8855] netlink: 'syz.4.1903': attribute type 8 has an invalid length. [ 238.319144][ T8855] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1903'. [ 238.472034][ T8855] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1903'. [ 249.963776][ T9148] validate_nla: 2 callbacks suppressed [ 249.963822][ T9148] netlink: 'syz.4.2018': attribute type 2 has an invalid length. [ 250.029156][ T9148] netlink: 'syz.4.2018': attribute type 8 has an invalid length. [ 250.141296][ T9148] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2018'. [ 250.295804][ T9148] netlink: 'syz.4.2018': attribute type 2 has an invalid length. [ 250.378113][ T9148] netlink: 'syz.4.2018': attribute type 8 has an invalid length. [ 250.522223][ T9148] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2018'. [ 254.901898][ T9274] netlink: 'syz.1.2062': attribute type 2 has an invalid length. [ 254.909975][ T9274] netlink: 'syz.1.2062': attribute type 8 has an invalid length. [ 254.947165][ T9274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2062'. [ 255.094950][ T9274] netlink: 'syz.1.2062': attribute type 2 has an invalid length. [ 255.176626][ T9274] netlink: 'syz.1.2062': attribute type 8 has an invalid length. [ 255.312270][ T9274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2062'. [ 255.490230][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.496555][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.940021][ T9321] netlink: 'syz.1.2078': attribute type 2 has an invalid length. [ 256.981651][ T9321] netlink: 'syz.1.2078': attribute type 8 has an invalid length. [ 257.020074][ T9321] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2078'. [ 257.127735][ T9321] netlink: 'syz.1.2078': attribute type 2 has an invalid length. [ 257.214069][ T9321] netlink: 'syz.1.2078': attribute type 8 has an invalid length. [ 257.248899][ T9321] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2078'. [ 257.623105][ T9347] bond0: (slave batadv0): Error: Slave device does not support XDP [ 258.307022][ T9365] netlink: 'syz.0.2094': attribute type 7 has an invalid length. [ 258.478285][ T9375] netlink: 'syz.1.2097': attribute type 2 has an invalid length. [ 258.496541][ T9375] netlink: 'syz.1.2097': attribute type 8 has an invalid length. [ 258.515138][ T9375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2097'. [ 258.654505][ T9375] netlink: 'syz.1.2097': attribute type 2 has an invalid length. [ 258.770486][ T9375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2097'. [ 258.832490][ T9389] bond0: (slave batadv0): Error: Slave device does not support XDP [ 259.619091][ T9419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2114'. [ 259.749966][ T9419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2114'. [ 261.146418][ T9468] validate_nla: 5 callbacks suppressed [ 261.146433][ T9468] netlink: 'syz.1.2132': attribute type 2 has an invalid length. [ 261.311603][ T9468] netlink: 'syz.1.2132': attribute type 8 has an invalid length. [ 261.368143][ T9468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2132'. [ 261.513834][ T9474] netlink: 'syz.1.2132': attribute type 2 has an invalid length. [ 261.589900][ T9474] netlink: 'syz.1.2132': attribute type 8 has an invalid length. [ 261.719939][ T9474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2132'. [ 262.224893][ T9490] bond0: (slave batadv0): Error: Slave device does not support XDP [ 262.883103][ T9513] netlink: 'syz.2.2146': attribute type 2 has an invalid length. [ 262.930043][ T9513] netlink: 'syz.2.2146': attribute type 8 has an invalid length. [ 263.063736][ T9513] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2146'. [ 263.220062][ T9513] netlink: 'syz.2.2146': attribute type 2 has an invalid length. [ 263.254892][ T9513] netlink: 'syz.2.2146': attribute type 8 has an invalid length. [ 263.269870][ T9513] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2146'. [ 264.570501][ T9554] netlink: 'syz.2.2161': attribute type 2 has an invalid length. [ 264.578254][ T9554] netlink: 'syz.2.2161': attribute type 8 has an invalid length. [ 264.598834][ T9554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2161'. [ 264.759223][ T9554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2161'. [ 266.081133][ T9594] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2175'. [ 266.237620][ T9594] validate_nla: 4 callbacks suppressed [ 266.237636][ T9594] netlink: 'syz.4.2175': attribute type 2 has an invalid length. [ 266.292401][ T9594] netlink: 'syz.4.2175': attribute type 8 has an invalid length. [ 266.307548][ T9594] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2175'. [ 267.825403][ T9644] netlink: 'syz.2.2190': attribute type 2 has an invalid length. [ 267.842842][ T9644] netlink: 'syz.2.2190': attribute type 8 has an invalid length. [ 267.856125][ T9644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2190'. [ 267.987557][ T9644] netlink: 'syz.2.2190': attribute type 2 has an invalid length. [ 267.999256][ T9644] netlink: 'syz.2.2190': attribute type 8 has an invalid length. [ 268.007188][ T9644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2190'. [ 269.415850][ T9682] netlink: 'syz.2.2204': attribute type 2 has an invalid length. [ 269.520018][ T9682] netlink: 'syz.2.2204': attribute type 8 has an invalid length. [ 269.537573][ T9682] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2204'. [ 269.674693][ T9682] netlink: 'syz.2.2204': attribute type 2 has an invalid length. [ 269.695271][ T9682] netlink: 'syz.2.2204': attribute type 8 has an invalid length. [ 269.735743][ T9682] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2204'. [ 271.331577][ T9730] netlink: 'syz.4.2221': attribute type 2 has an invalid length. [ 271.339576][ T9730] netlink: 'syz.4.2221': attribute type 8 has an invalid length. [ 271.354252][ T9730] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2221'. [ 271.506222][ T9730] netlink: 'syz.4.2221': attribute type 2 has an invalid length. [ 271.557862][ T9730] netlink: 'syz.4.2221': attribute type 8 has an invalid length. [ 271.583721][ T9730] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2221'. [ 271.947529][ T9755] netlink: 'syz.2.2229': attribute type 7 has an invalid length. [ 277.616072][ T9880] bond0: (slave batadv0): Error: Slave device does not support XDP [ 278.227600][ T9902] bond0: (slave batadv0): Error: Slave device does not support XDP [ 279.818809][ T9948] bond0: (slave batadv0): Error: Slave device does not support XDP [ 283.151293][T10042] netlink: 'syz.2.2324': attribute type 2 has an invalid length. [ 283.199074][T10042] netlink: 'syz.2.2324': attribute type 8 has an invalid length. [ 283.236158][T10042] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2324'. [ 283.366391][T10042] netlink: 'syz.2.2324': attribute type 2 has an invalid length. [ 283.389716][T10042] netlink: 'syz.2.2324': attribute type 8 has an invalid length. [ 283.467727][T10042] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2324'. [ 284.624840][T10078] bond0: (slave batadv0): Error: Slave device does not support XDP [ 285.524476][T10098] netlink: 'syz.1.2343': attribute type 7 has an invalid length. [ 287.345401][T10137] netlink: 'syz.2.2355': attribute type 2 has an invalid length. [ 287.388237][T10137] netlink: 'syz.2.2355': attribute type 8 has an invalid length. [ 287.420665][T10137] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2355'. [ 287.589529][T10137] netlink: 'syz.2.2355': attribute type 2 has an invalid length. [ 287.610116][T10137] netlink: 'syz.2.2355': attribute type 8 has an invalid length. [ 287.638732][T10137] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2355'. [ 287.795191][T10146] netlink: 'syz.0.2357': attribute type 7 has an invalid length. [ 288.832000][T10181] netlink: 'syz.3.2373': attribute type 2 has an invalid length. [ 288.864829][T10181] netlink: 'syz.3.2373': attribute type 8 has an invalid length. [ 288.914648][T10181] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2373'. [ 289.158745][T10184] netlink: 'syz.3.2373': attribute type 2 has an invalid length. [ 289.200884][T10184] netlink: 'syz.3.2373': attribute type 8 has an invalid length. [ 289.246490][T10184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2373'. [ 290.429619][T10234] netlink: 'syz.1.2390': attribute type 2 has an invalid length. [ 290.438133][T10234] netlink: 'syz.1.2390': attribute type 8 has an invalid length. [ 290.454674][T10234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2390'. [ 290.588867][T10234] netlink: 'syz.1.2390': attribute type 2 has an invalid length. [ 290.722411][T10234] netlink: 'syz.1.2390': attribute type 8 has an invalid length. [ 290.799965][T10234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2390'. [ 291.903170][T10277] netlink: 'syz.3.2406': attribute type 2 has an invalid length. [ 291.918407][T10277] netlink: 'syz.3.2406': attribute type 8 has an invalid length. [ 291.957113][T10277] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2406'. [ 292.149034][T10277] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2406'. [ 294.338823][T10336] validate_nla: 2 callbacks suppressed [ 294.338855][T10336] netlink: 'syz.4.2423': attribute type 2 has an invalid length. [ 294.369357][T10336] netlink: 'syz.4.2423': attribute type 8 has an invalid length. [ 294.378198][T10336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2423'. [ 294.474498][T10336] netlink: 'syz.4.2423': attribute type 2 has an invalid length. [ 294.490021][T10336] netlink: 'syz.4.2423': attribute type 8 has an invalid length. [ 294.497852][T10336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2423'. [ 295.958450][T10382] netlink: 'syz.2.2441': attribute type 2 has an invalid length. [ 296.006519][T10382] netlink: 'syz.2.2441': attribute type 8 has an invalid length. [ 296.019162][T10382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2441'. [ 296.153122][T10382] netlink: 'syz.2.2441': attribute type 2 has an invalid length. [ 296.180820][T10382] netlink: 'syz.2.2441': attribute type 8 has an invalid length. [ 296.214843][T10382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2441'. [ 298.014930][T10429] netlink: 'syz.3.2458': attribute type 2 has an invalid length. [ 298.060983][T10429] netlink: 'syz.3.2458': attribute type 8 has an invalid length. [ 298.114079][T10429] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2458'. [ 298.441135][T10433] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2458'. [ 300.172284][T10476] validate_nla: 2 callbacks suppressed [ 300.172313][T10476] netlink: 'syz.3.2473': attribute type 2 has an invalid length. [ 300.186854][T10476] netlink: 'syz.3.2473': attribute type 8 has an invalid length. [ 300.261710][T10476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2473'. [ 300.451963][T10476] netlink: 'syz.3.2473': attribute type 2 has an invalid length. [ 300.620745][T10476] netlink: 'syz.3.2473': attribute type 8 has an invalid length. [ 300.680305][T10476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2473'. [ 302.037358][T10527] netlink: 'syz.3.2491': attribute type 2 has an invalid length. [ 302.113565][T10527] netlink: 'syz.3.2491': attribute type 8 has an invalid length. [ 302.190732][T10527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2491'. [ 302.296145][T10527] netlink: 'syz.3.2491': attribute type 2 has an invalid length. [ 302.370566][T10527] netlink: 'syz.3.2491': attribute type 8 has an invalid length. [ 302.385226][T10527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2491'. [ 308.830157][ T3641] Bluetooth: hci1: command 0x0406 tx timeout [ 308.836246][ T3641] Bluetooth: hci2: command 0x0406 tx timeout [ 308.842361][ T3652] Bluetooth: hci3: command 0x0406 tx timeout [ 308.848418][ T3652] Bluetooth: hci4: command 0x0406 tx timeout [ 310.471714][T10756] netlink: 'syz.4.2571': attribute type 2 has an invalid length. [ 310.500179][T10756] netlink: 'syz.4.2571': attribute type 8 has an invalid length. [ 310.508012][T10756] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2571'. [ 310.672865][T10756] netlink: 'syz.4.2571': attribute type 2 has an invalid length. [ 310.743922][T10756] netlink: 'syz.4.2571': attribute type 8 has an invalid length. [ 310.770871][T10756] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2571'. [ 312.315727][T10812] netlink: 'syz.2.2589': attribute type 2 has an invalid length. [ 312.334620][T10812] netlink: 'syz.2.2589': attribute type 8 has an invalid length. [ 312.359264][T10812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2589'. [ 312.548687][T10812] netlink: 'syz.2.2589': attribute type 2 has an invalid length. [ 312.584343][T10812] netlink: 'syz.2.2589': attribute type 8 has an invalid length. [ 312.600112][T10812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2589'. [ 313.677557][T10856] netlink: 'syz.1.2607': attribute type 2 has an invalid length. [ 313.708586][T10856] netlink: 'syz.1.2607': attribute type 8 has an invalid length. [ 313.740372][T10856] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2607'. [ 314.025963][T10856] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2607'. [ 314.838088][T10880] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 314.881462][T10880] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 315.517072][T10901] validate_nla: 2 callbacks suppressed [ 315.517121][T10901] netlink: 'syz.2.2622': attribute type 2 has an invalid length. [ 315.534549][T10901] netlink: 'syz.2.2622': attribute type 8 has an invalid length. [ 315.546225][T10901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2622'. [ 315.647291][T10880] syz.1.2615 (10880) used greatest stack depth: 18248 bytes left [ 315.697501][T10901] netlink: 'syz.2.2622': attribute type 2 has an invalid length. [ 315.745226][T10901] netlink: 'syz.2.2622': attribute type 8 has an invalid length. [ 315.781507][T10901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2622'. [ 316.634580][T10935] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 316.683606][T10935] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 316.920544][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.926901][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.312468][T10951] netlink: 'syz.2.2639': attribute type 2 has an invalid length. [ 317.321298][T10951] netlink: 'syz.2.2639': attribute type 8 has an invalid length. [ 317.329701][T10951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2639'. [ 317.482006][T10951] netlink: 'syz.2.2639': attribute type 2 has an invalid length. [ 317.501674][T10951] netlink: 'syz.2.2639': attribute type 8 has an invalid length. [ 317.509513][T10951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2639'. [ 318.708974][T10986] netlink: 'syz.4.2651': attribute type 7 has an invalid length. [ 318.753603][T10986] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 318.811750][T10986] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 319.206778][T10998] netlink: 'syz.2.2654': attribute type 2 has an invalid length. [ 319.236024][T10998] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2654'. [ 319.426117][T10998] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2654'. [ 319.791666][T11014] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 319.837934][T11014] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 319.862900][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2669'. [ 320.037020][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2669'. [ 321.682734][T11064] validate_nla: 7 callbacks suppressed [ 321.682767][T11064] netlink: 'syz.1.2677': attribute type 2 has an invalid length. [ 321.912878][T11064] netlink: 'syz.1.2677': attribute type 8 has an invalid length. [ 322.020013][T11064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2677'. [ 322.176171][T11064] netlink: 'syz.1.2677': attribute type 2 has an invalid length. [ 322.361218][T11064] netlink: 'syz.1.2677': attribute type 8 has an invalid length. [ 322.369014][T11064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2677'. [ 325.261268][T11126] netlink: 'syz.0.2698': attribute type 2 has an invalid length. [ 325.466527][T11126] netlink: 'syz.0.2698': attribute type 8 has an invalid length. [ 325.590237][T11126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2698'. [ 325.638943][T11136] netlink: 'syz.3.2701': attribute type 7 has an invalid length. [ 325.678852][T11130] netlink: 'syz.0.2698': attribute type 2 has an invalid length. [ 325.705710][T11130] netlink: 'syz.0.2698': attribute type 8 has an invalid length. [ 325.747498][T11130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2698'. [ 325.758307][T11138] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 325.800694][T11138] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 327.702938][T11172] netlink: 'syz.3.2715': attribute type 2 has an invalid length. [ 327.760821][T11172] netlink: 'syz.3.2715': attribute type 8 has an invalid length. [ 327.789103][T11172] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2715'. [ 330.059447][T11227] netlink: 'syz.1.2730': attribute type 2 has an invalid length. [ 330.078088][T11227] netlink: 'syz.1.2730': attribute type 8 has an invalid length. [ 330.104975][T11227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2730'. [ 331.848793][T11274] netlink: 'syz.1.2746': attribute type 2 has an invalid length. [ 331.875727][T11274] netlink: 'syz.1.2746': attribute type 8 has an invalid length. [ 331.895538][T11274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2746'. [ 333.697812][T11322] netlink: 'syz.2.2760': attribute type 2 has an invalid length. [ 333.717620][T11322] netlink: 'syz.2.2760': attribute type 8 has an invalid length. [ 333.726779][T11322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2760'. [ 334.208679][T11346] netlink: 'syz.3.2767': attribute type 7 has an invalid length. [ 334.411221][T11346] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 334.431739][T11346] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 335.593509][T11370] netlink: 'syz.0.2774': attribute type 2 has an invalid length. [ 335.614241][T11370] netlink: 'syz.0.2774': attribute type 8 has an invalid length. [ 335.675448][T11370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2774'. [ 336.177978][T11394] netlink: 'syz.0.2791': attribute type 2 has an invalid length. [ 336.240405][T11394] netlink: 'syz.0.2791': attribute type 8 has an invalid length. [ 336.295326][T11394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2791'. [ 337.644396][T11431] netlink: 'syz.0.2793': attribute type 2 has an invalid length. [ 337.672030][T11431] netlink: 'syz.0.2793': attribute type 8 has an invalid length. [ 337.687221][T11431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2793'. [ 340.752590][T11480] netlink: 'syz.2.2808': attribute type 2 has an invalid length. [ 340.790465][T11480] netlink: 'syz.2.2808': attribute type 8 has an invalid length. [ 340.798294][T11480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2808'. [ 345.227390][T11606] netlink: 'syz.4.2845': attribute type 2 has an invalid length. [ 345.276196][T11606] netlink: 'syz.4.2845': attribute type 8 has an invalid length. [ 345.308549][T11606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2845'. [ 353.457462][ T3650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.465773][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.492848][ T3650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.502656][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.528151][ T3650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.535809][ T3650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.623440][ T4684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.842359][ T4684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.004680][ T4684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.098631][ T4684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.900146][T11803] chnl_net:caif_netlink_parms(): no params data found [ 355.630165][ T3650] Bluetooth: hci0: command tx timeout [ 355.660216][T11803] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.677462][T11803] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.716911][T11803] device bridge_slave_0 entered promiscuous mode [ 355.843721][T11803] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.852362][T11803] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.901292][T11803] device bridge_slave_1 entered promiscuous mode [ 356.242276][T11803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.374453][T11803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.698231][T11803] team0: Port device team_slave_0 added [ 356.788491][T11803] team0: Port device team_slave_1 added [ 356.885639][T11803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.929310][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.168808][T11803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.410659][T11803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.417653][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.501128][T11803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.710015][ T3650] Bluetooth: hci0: command tx timeout [ 357.772025][T11803] device hsr_slave_0 entered promiscuous mode [ 357.781971][T11803] device hsr_slave_1 entered promiscuous mode [ 357.804783][T11803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.815837][T11803] Cannot create hsr debugfs directory [ 357.865559][ T4684] device hsr_slave_0 left promiscuous mode [ 357.913603][ T4684] device hsr_slave_1 left promiscuous mode [ 357.937796][ T4684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.946953][ T4684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.955382][ T4684] bridge0: port 3(team0) entered disabled state [ 358.021158][ T4684] device bridge_slave_1 left promiscuous mode [ 358.027382][ T4684] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.086513][ T4684] device bridge_slave_0 left promiscuous mode [ 358.110304][ T4684] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.174641][ T4684] device veth1_macvtap left promiscuous mode [ 358.189358][ T4684] device veth0_macvtap left promiscuous mode [ 358.201046][ T4684] device veth1_vlan left promiscuous mode [ 358.206863][ T4684] device veth0_vlan left promiscuous mode [ 358.836860][ T4684] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 358.870851][ T4684] device team_slave_1 left promiscuous mode [ 358.878211][ T4684] team0 (unregistering): Port device team_slave_1 removed [ 358.908818][ T4684] device team_slave_0 left promiscuous mode [ 358.916100][ T4684] team0 (unregistering): Port device team_slave_0 removed [ 358.946646][ T4684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.979504][ T4684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.264698][ T4684] bond0 (unregistering): Released all slaves [ 359.791313][ T3650] Bluetooth: hci0: command tx timeout [ 359.813342][T11942] netlink: 'syz.1.2936': attribute type 2 has an invalid length. [ 359.866626][T11942] netlink: 'syz.1.2936': attribute type 8 has an invalid length. [ 359.924287][T11942] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2936'. [ 361.359121][T11803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.386370][T11803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.428422][T11803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.502668][T11803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.872692][ T3650] Bluetooth: hci0: command tx timeout [ 361.962560][T11803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.001249][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.009016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.072692][T11803] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.106104][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.123659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.178139][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.185296][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.289629][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.329333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.354818][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.361951][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.433107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.473112][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.488102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.502753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.524902][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.545452][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.559099][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.577301][T12004] netlink: 'syz.0.2950': attribute type 2 has an invalid length. [ 362.591156][T12004] netlink: 'syz.0.2950': attribute type 8 has an invalid length. [ 362.599098][T12004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2950'. [ 362.617994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.636604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.682006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.697121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.711251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.732440][T11803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.511345][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.529014][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.569916][T11803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.192243][T12067] netlink: 'syz.2.2963': attribute type 2 has an invalid length. [ 364.214928][T12067] netlink: 'syz.2.2963': attribute type 8 has an invalid length. [ 364.223946][T12067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2963'. [ 364.569966][T12082] netlink: 'syz.2.2975': attribute type 2 has an invalid length. [ 364.609461][T12082] netlink: 'syz.2.2975': attribute type 8 has an invalid length. [ 364.628543][T12082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2975'. [ 364.692872][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 364.729324][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 364.795433][T11803] device veth0_vlan entered promiscuous mode [ 364.822490][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 364.842911][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.872964][T11803] device veth1_vlan entered promiscuous mode [ 364.891367][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.901781][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.938907][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 365.014094][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 365.030613][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 365.058687][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.114810][T11803] device veth0_macvtap entered promiscuous mode [ 365.140659][T11803] device veth1_macvtap entered promiscuous mode [ 365.255033][T11803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.325724][T11803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.344627][T11803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.356466][T11803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.366500][T11803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.389075][T11803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.417963][T11803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.448962][T11803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.506966][T11803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.554547][T11803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.579784][T11803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.600474][T11803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.618120][T11803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.635660][T11803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.678112][T11803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.692333][T11803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.707562][T11803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.736577][T11803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.746230][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 365.763931][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 365.784166][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 365.803228][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.822087][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 365.847579][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.881548][T11803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.900308][T11803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.915230][T11803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.934295][T11803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.138681][ T3693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.182325][ T3693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.243984][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 366.325542][ T4163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.349859][ T4163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.402509][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 367.058308][T12156] netlink: 'syz.3.2979': attribute type 2 has an invalid length. [ 367.097090][T12156] netlink: 'syz.3.2979': attribute type 8 has an invalid length. [ 367.127650][T12156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2979'. [ 369.120790][T12214] netlink: 'syz.0.2997': attribute type 2 has an invalid length. [ 369.202955][T12214] netlink: 'syz.0.2997': attribute type 8 has an invalid length. [ 369.229893][T12214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2997'. [ 371.233467][T12285] netlink: 'syz.3.3014': attribute type 2 has an invalid length. [ 371.289955][T12285] netlink: 'syz.3.3014': attribute type 8 has an invalid length. [ 371.317453][T12285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3014'. [ 373.279180][T12337] netlink: 'syz.2.3028': attribute type 2 has an invalid length. [ 373.367575][T12337] netlink: 'syz.2.3028': attribute type 8 has an invalid length. [ 373.401894][T12337] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3028'. [ 374.669433][T12377] netlink: 'syz.2.3040': attribute type 7 has an invalid length. [ 374.786457][T12377] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 374.860816][T12377] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 375.224803][T12388] netlink: 'syz.1.3041': attribute type 2 has an invalid length. [ 375.242296][T12388] netlink: 'syz.1.3041': attribute type 8 has an invalid length. [ 375.290162][T12388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3041'. [ 376.898778][T12430] netlink: 'syz.3.3053': attribute type 2 has an invalid length. [ 376.919936][T12430] netlink: 'syz.3.3053': attribute type 8 has an invalid length. [ 376.950217][T12430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3053'. [ 377.977635][T12465] netlink: 'syz.0.3064': attribute type 7 has an invalid length. [ 378.418167][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.424589][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.721712][T12479] netlink: 'syz.2.3067': attribute type 2 has an invalid length. [ 378.780057][T12479] netlink: 'syz.2.3067': attribute type 8 has an invalid length. [ 378.787889][T12479] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3067'. [ 380.551676][T12516] netlink: 'syz.4.3079': attribute type 2 has an invalid length. [ 380.603326][T12516] netlink: 'syz.4.3079': attribute type 8 has an invalid length. [ 380.679897][T12516] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3079'. [ 380.965019][T12533] netlink: 'syz.1.3080': attribute type 7 has an invalid length. [ 381.023676][T12533] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 381.100545][T12533] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 382.667085][T12567] netlink: 'syz.4.3094': attribute type 2 has an invalid length. [ 382.679341][T12567] netlink: 'syz.4.3094': attribute type 8 has an invalid length. [ 382.706537][T12567] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3094'. [ 384.232865][T12612] netlink: 'syz.3.3106': attribute type 2 has an invalid length. [ 384.279169][T12612] netlink: 'syz.3.3106': attribute type 8 has an invalid length. [ 384.319090][T12612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3106'. [ 386.447133][T12668] netlink: 'syz.1.3121': attribute type 2 has an invalid length. [ 386.483751][T12668] netlink: 'syz.1.3121': attribute type 8 has an invalid length. [ 386.550670][T12668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3121'. [ 388.654732][T12720] netlink: 'syz.2.3135': attribute type 2 has an invalid length. [ 388.681468][T12720] netlink: 'syz.2.3135': attribute type 8 has an invalid length. [ 388.703797][T12720] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3135'. [ 390.546514][T12767] netlink: 'syz.1.3151': attribute type 2 has an invalid length. [ 390.633140][T12767] netlink: 'syz.1.3151': attribute type 8 has an invalid length. [ 390.699195][T12767] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3151'. [ 392.526722][T12817] netlink: 'syz.0.3165': attribute type 2 has an invalid length. [ 392.582423][T12817] netlink: 'syz.0.3165': attribute type 8 has an invalid length. [ 392.619134][T12817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3165'. [ 395.628725][T12874] netlink: 'syz.3.3180': attribute type 2 has an invalid length. [ 395.787953][T12874] netlink: 'syz.3.3180': attribute type 8 has an invalid length. [ 395.865286][T12874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3180'. [ 395.972900][T12879] netlink: 'syz.3.3180': attribute type 2 has an invalid length. [ 396.045128][T12879] netlink: 'syz.3.3180': attribute type 8 has an invalid length. [ 396.153061][T12879] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3180'. [ 397.286543][T12920] netlink: 'syz.0.3196': attribute type 2 has an invalid length. [ 397.332128][T12920] netlink: 'syz.0.3196': attribute type 8 has an invalid length. [ 397.394176][T12920] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3196'. [ 397.441827][T12924] netlink: 'syz.0.3196': attribute type 2 has an invalid length. [ 397.521203][T12924] netlink: 'syz.0.3196': attribute type 8 has an invalid length. [ 397.583283][T12924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3196'. [ 399.036040][T12968] netlink: 'syz.4.3209': attribute type 2 has an invalid length. [ 399.056798][T12968] netlink: 'syz.4.3209': attribute type 8 has an invalid length. [ 399.083717][T12968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3209'. [ 399.119122][T12968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3209'. [ 399.670955][T12986] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 399.681063][T12986] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 404.902122][T13017] validate_nla: 3 callbacks suppressed [ 404.902157][T13017] netlink: 'syz.1.3224': attribute type 2 has an invalid length. [ 404.980024][T13017] netlink: 'syz.1.3224': attribute type 8 has an invalid length. [ 404.993544][T13017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3224'. [ 405.039154][T13017] netlink: 'syz.1.3224': attribute type 2 has an invalid length. [ 405.072109][T13017] netlink: 'syz.1.3224': attribute type 8 has an invalid length. [ 405.085189][T13017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3224'. [ 405.300636][T13032] netlink: 'syz.0.3229': attribute type 7 has an invalid length. [ 405.403013][T13032] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 405.490803][T13032] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 406.767209][T13068] netlink: 'syz.0.3242': attribute type 2 has an invalid length. [ 406.908661][T13068] netlink: 'syz.0.3242': attribute type 8 has an invalid length. [ 406.923548][T13068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3242'. [ 407.055299][T13068] netlink: 'syz.0.3242': attribute type 2 has an invalid length. [ 407.122936][T13068] netlink: 'syz.0.3242': attribute type 8 has an invalid length. [ 407.180457][T13068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3242'. [ 409.072848][T13117] netlink: 'syz.4.3257': attribute type 2 has an invalid length. [ 409.107475][T13117] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3257'. [ 409.195944][T13117] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3257'. [ 411.553667][T13165] validate_nla: 3 callbacks suppressed [ 411.553700][T13165] netlink: 'syz.3.3271': attribute type 2 has an invalid length. [ 411.567344][T13165] netlink: 'syz.3.3271': attribute type 8 has an invalid length. [ 411.575381][T13165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3271'. [ 411.670751][T13165] netlink: 'syz.3.3271': attribute type 2 has an invalid length. [ 411.681255][T13165] netlink: 'syz.3.3271': attribute type 8 has an invalid length. [ 411.689171][T13165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3271'. [ 413.267971][T13225] netlink: 'syz.2.3287': attribute type 2 has an invalid length. [ 413.309502][T13225] netlink: 'syz.2.3287': attribute type 8 has an invalid length. [ 413.323806][T13225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3287'. [ 413.422992][T13225] netlink: 'syz.2.3287': attribute type 2 has an invalid length. [ 413.434368][T13225] netlink: 'syz.2.3287': attribute type 8 has an invalid length. [ 413.446653][T13225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3287'. [ 415.191128][T13273] netlink: 'syz.2.3302': attribute type 2 has an invalid length. [ 415.199091][T13273] netlink: 'syz.2.3302': attribute type 8 has an invalid length. [ 415.240113][T13273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3302'. [ 415.315701][T13273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3302'. [ 417.508202][T13325] validate_nla: 2 callbacks suppressed [ 417.508247][T13325] netlink: 'syz.2.3317': attribute type 2 has an invalid length. [ 417.592552][T13325] netlink: 'syz.2.3317': attribute type 8 has an invalid length. [ 417.607082][T13325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3317'. [ 417.715163][T13325] netlink: 'syz.2.3317': attribute type 2 has an invalid length. [ 417.724828][T13325] netlink: 'syz.2.3317': attribute type 8 has an invalid length. [ 417.733923][T13325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3317'. [ 419.486115][T13377] netlink: 'syz.1.3330': attribute type 2 has an invalid length. [ 419.494571][T13377] netlink: 'syz.1.3330': attribute type 8 has an invalid length. [ 419.505457][T13377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3330'. [ 419.573930][T13377] netlink: 'syz.1.3330': attribute type 2 has an invalid length. [ 419.598220][T13377] netlink: 'syz.1.3330': attribute type 8 has an invalid length. [ 419.615328][T13377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3330'. [ 424.286173][T13501] netlink: 'syz.0.3367': attribute type 2 has an invalid length. [ 424.294646][T13501] netlink: 'syz.0.3367': attribute type 8 has an invalid length. [ 424.305497][T13501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3367'. [ 424.380310][T13501] netlink: 'syz.0.3367': attribute type 2 has an invalid length. [ 424.388338][T13501] netlink: 'syz.0.3367': attribute type 8 has an invalid length. [ 424.404072][T13501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3367'. [ 426.414079][T13541] netlink: 'syz.2.3379': attribute type 2 has an invalid length. [ 426.447947][T13541] netlink: 'syz.2.3379': attribute type 8 has an invalid length. [ 426.481600][T13541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3379'. [ 426.578901][T13547] netlink: 'syz.2.3379': attribute type 2 has an invalid length. [ 426.674877][T13547] netlink: 'syz.2.3379': attribute type 8 has an invalid length. [ 426.762756][T13547] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3379'. [ 428.394846][T13584] netlink: 'syz.4.3396': attribute type 2 has an invalid length. [ 428.446688][T13584] netlink: 'syz.4.3396': attribute type 8 has an invalid length. [ 428.461293][T13584] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3396'. [ 428.549664][T13584] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3396'. [ 430.090177][T13635] validate_nla: 2 callbacks suppressed [ 430.090235][T13635] netlink: 'syz.2.3409': attribute type 2 has an invalid length. [ 430.198463][T13635] netlink: 'syz.2.3409': attribute type 8 has an invalid length. [ 430.228148][T13635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3409'. [ 430.498584][T13635] netlink: 'syz.2.3409': attribute type 2 has an invalid length. [ 430.536872][T13635] netlink: 'syz.2.3409': attribute type 8 has an invalid length. [ 430.564093][T13635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3409'. [ 432.070159][T13692] netlink: 'syz.3.3428': attribute type 2 has an invalid length. [ 432.092123][T13692] netlink: 'syz.3.3428': attribute type 8 has an invalid length. [ 432.116343][T13692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3428'. [ 432.279184][T13695] netlink: 'syz.3.3428': attribute type 2 has an invalid length. [ 432.298933][T13695] netlink: 'syz.3.3428': attribute type 8 has an invalid length. [ 432.316460][T13695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3428'. [ 434.436732][T13750] netlink: 'syz.3.3446': attribute type 2 has an invalid length. [ 434.475419][T13750] netlink: 'syz.3.3446': attribute type 8 has an invalid length. [ 434.503100][T13750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3446'. [ 434.599058][T13750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3446'. [ 439.855177][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.861525][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.064333][T13987] validate_nla: 2 callbacks suppressed [ 443.064350][T13987] netlink: 'syz.2.3514': attribute type 7 has an invalid length. [ 443.195731][T13987] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 443.248842][T13987] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 443.793503][T14000] netlink: 'syz.3.3520': attribute type 2 has an invalid length. [ 443.813443][T14000] netlink: 'syz.3.3520': attribute type 8 has an invalid length. [ 443.822644][T14000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3520'. [ 443.934063][T14000] netlink: 'syz.3.3520': attribute type 2 has an invalid length. [ 443.944217][T14000] netlink: 'syz.3.3520': attribute type 8 has an invalid length. [ 443.953579][T14000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3520'. [ 444.234509][T14014] netlink: 'syz.4.3533': attribute type 2 has an invalid length. [ 444.242439][T14014] netlink: 'syz.4.3533': attribute type 8 has an invalid length. [ 444.254696][T14014] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3533'. [ 444.356897][T14014] netlink: 'syz.4.3533': attribute type 2 has an invalid length. [ 444.457281][T14014] netlink: 'syz.4.3533': attribute type 8 has an invalid length. [ 444.581354][T14014] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3533'. [ 446.022624][T14057] netlink: 'syz.3.3535': attribute type 7 has an invalid length. [ 446.232617][T14057] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 446.260014][T14057] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 446.479116][T14069] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3538'. [ 446.613546][T14069] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3538'. [ 448.208327][T14115] validate_nla: 4 callbacks suppressed [ 448.208360][T14115] netlink: 'syz.0.3555': attribute type 2 has an invalid length. [ 448.278903][T14115] netlink: 'syz.0.3555': attribute type 8 has an invalid length. [ 448.298884][T14115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3555'. [ 448.408280][T14115] netlink: 'syz.0.3555': attribute type 2 has an invalid length. [ 448.440556][T14115] netlink: 'syz.0.3555': attribute type 8 has an invalid length. [ 448.483701][T14115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3555'. [ 450.088054][T14170] netlink: 'syz.1.3573': attribute type 2 has an invalid length. [ 450.096070][T14170] netlink: 'syz.1.3573': attribute type 8 has an invalid length. [ 450.107830][T14170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3573'. [ 450.349414][T14170] netlink: 'syz.1.3573': attribute type 2 has an invalid length. [ 450.367307][T14170] netlink: 'syz.1.3573': attribute type 8 has an invalid length. [ 450.414971][T14170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3573'. [ 451.972116][T14227] netlink: 'syz.2.3590': attribute type 2 has an invalid length. [ 452.133879][T14227] netlink: 'syz.2.3590': attribute type 8 has an invalid length. [ 452.207509][T14227] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3590'. [ 452.315787][T14234] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3590'. [ 453.762354][T14281] validate_nla: 2 callbacks suppressed [ 453.762370][T14281] netlink: 'syz.3.3607': attribute type 2 has an invalid length. [ 453.854326][T14281] netlink: 'syz.3.3607': attribute type 8 has an invalid length. [ 453.927865][T14281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3607'. [ 454.042192][T14281] netlink: 'syz.3.3607': attribute type 2 has an invalid length. [ 454.114107][T14281] netlink: 'syz.3.3607': attribute type 8 has an invalid length. [ 454.127036][T14281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3607'. [ 454.563188][T14302] netlink: 'syz.1.3624': attribute type 2 has an invalid length. [ 454.626205][T14302] netlink: 'syz.1.3624': attribute type 8 has an invalid length. [ 454.665032][T14302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3624'. [ 454.799004][T14302] netlink: 'syz.1.3624': attribute type 2 has an invalid length. [ 454.827220][T14302] netlink: 'syz.1.3624': attribute type 8 has an invalid length. [ 454.900159][T14302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3624'. [ 457.146487][T14361] netlink: 'syz.4.3632': attribute type 2 has an invalid length. [ 457.209080][T14361] netlink: 'syz.4.3632': attribute type 8 has an invalid length. [ 457.241892][T14361] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3632'. [ 457.477228][T14363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3632'. [ 459.082061][T14414] validate_nla: 2 callbacks suppressed [ 459.082095][T14414] netlink: 'syz.3.3650': attribute type 2 has an invalid length. [ 459.155515][T14414] netlink: 'syz.3.3650': attribute type 8 has an invalid length. [ 459.194477][T14414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3650'. [ 459.282135][T14414] netlink: 'syz.3.3650': attribute type 2 has an invalid length. [ 459.357133][T14414] netlink: 'syz.3.3650': attribute type 8 has an invalid length. [ 459.394316][T14414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3650'. [ 459.741864][T14426] netlink: 'syz.0.3663': attribute type 2 has an invalid length. [ 459.761054][T14426] netlink: 'syz.0.3663': attribute type 8 has an invalid length. [ 459.786434][T14426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3663'. [ 459.920686][T14426] netlink: 'syz.0.3663': attribute type 2 has an invalid length. [ 459.980648][T14426] netlink: 'syz.0.3663': attribute type 8 has an invalid length. [ 460.006805][T14426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3663'. [ 462.124484][T14476] netlink: 'syz.3.3671': attribute type 2 has an invalid length. [ 462.137561][T14476] netlink: 'syz.3.3671': attribute type 8 has an invalid length. [ 462.158367][T14476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3671'. [ 462.400609][T14476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3671'. [ 464.511444][T14528] validate_nla: 2 callbacks suppressed [ 464.511478][T14528] netlink: 'syz.4.3686': attribute type 2 has an invalid length. [ 464.595148][T14528] netlink: 'syz.4.3686': attribute type 8 has an invalid length. [ 464.603429][T14528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3686'. [ 464.786679][T14528] netlink: 'syz.4.3686': attribute type 2 has an invalid length. [ 464.814767][T14528] netlink: 'syz.4.3686': attribute type 8 has an invalid length. [ 464.844103][T14528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3686'. [ 467.124863][T14581] netlink: 'syz.3.3702': attribute type 2 has an invalid length. [ 467.138759][T14581] netlink: 'syz.3.3702': attribute type 8 has an invalid length. [ 467.163488][T14581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3702'. [ 467.340342][T14581] netlink: 'syz.3.3702': attribute type 2 has an invalid length. [ 467.378829][T14581] netlink: 'syz.3.3702': attribute type 8 has an invalid length. [ 467.450993][T14581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3702'. [ 469.769349][T14646] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 469.821343][T14646] netlink: 'syz.1.3720': attribute type 8 has an invalid length. [ 469.898629][T14646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3720'. [ 470.003524][T14646] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 470.049213][T14646] netlink: 'syz.1.3720': attribute type 8 has an invalid length. [ 470.118210][T14646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3720'. [ 472.518751][T14705] netlink: 'syz.3.3737': attribute type 2 has an invalid length. [ 472.543582][T14705] netlink: 'syz.3.3737': attribute type 8 has an invalid length. [ 472.596041][T14705] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3737'. [ 472.769525][T14705] netlink: 'syz.3.3737': attribute type 2 has an invalid length. [ 472.835261][T14705] netlink: 'syz.3.3737': attribute type 8 has an invalid length. [ 472.950862][T14705] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3737'. [ 475.052857][T14762] netlink: 'syz.2.3753': attribute type 2 has an invalid length. [ 475.074697][T14762] netlink: 'syz.2.3753': attribute type 8 has an invalid length. [ 475.083189][T14762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3753'. [ 475.210078][T14762] netlink: 'syz.2.3753': attribute type 2 has an invalid length. [ 475.245432][T14762] netlink: 'syz.2.3753': attribute type 8 has an invalid length. [ 475.296384][T14762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3753'. [ 476.785539][T14813] netlink: 'syz.0.3771': attribute type 2 has an invalid length. [ 476.793770][T14813] netlink: 'syz.0.3771': attribute type 8 has an invalid length. [ 476.802388][T14813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3771'. [ 476.929369][T14813] netlink: 'syz.0.3771': attribute type 2 has an invalid length. [ 477.011735][T14813] netlink: 'syz.0.3771': attribute type 8 has an invalid length. [ 477.053939][T14813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3771'. [ 477.316260][T14830] netlink: 'syz.0.3786': attribute type 2 has an invalid length. [ 477.356474][T14830] netlink: 'syz.0.3786': attribute type 8 has an invalid length. [ 477.416069][T14830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3786'. [ 477.672633][T14830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3786'. [ 477.717549][ T3641] Bluetooth: hci0: command 0x0406 tx timeout [ 479.584124][T14888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3792'. [ 479.803986][T14888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3792'. [ 485.576069][T15026] validate_nla: 6 callbacks suppressed [ 485.576104][T15026] netlink: 'syz.4.3831': attribute type 2 has an invalid length. [ 485.614207][T15026] netlink: 'syz.4.3831': attribute type 8 has an invalid length. [ 485.642147][T15026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3831'. [ 485.753865][T15026] netlink: 'syz.4.3831': attribute type 2 has an invalid length. [ 486.128281][T15026] netlink: 'syz.4.3831': attribute type 8 has an invalid length. [ 486.210067][T15026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3831'. [ 487.788458][T15077] netlink: 'syz.3.3846': attribute type 2 has an invalid length. [ 487.837806][T15077] netlink: 'syz.3.3846': attribute type 8 has an invalid length. [ 487.873188][T15077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3846'. [ 488.026848][T15077] netlink: 'syz.3.3846': attribute type 2 has an invalid length. [ 488.110055][T15077] netlink: 'syz.3.3846': attribute type 8 has an invalid length. [ 488.127006][T15077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3846'. [ 490.026593][T15132] netlink: 'syz.4.3861': attribute type 2 has an invalid length. [ 490.088117][T15132] netlink: 'syz.4.3861': attribute type 8 has an invalid length. [ 490.097190][T15132] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3861'. [ 490.266868][T15132] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3861'. [ 490.722531][T15144] validate_nla: 2 callbacks suppressed [ 490.722565][T15144] netlink: 'syz.0.3874': attribute type 2 has an invalid length. [ 490.736568][T15144] netlink: 'syz.0.3874': attribute type 8 has an invalid length. [ 490.753189][T15144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3874'. [ 490.888882][T15144] netlink: 'syz.0.3874': attribute type 2 has an invalid length. [ 490.928962][T15144] netlink: 'syz.0.3874': attribute type 8 has an invalid length. [ 490.970534][T15144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3874'. [ 492.512147][T15191] netlink: 'syz.2.3878': attribute type 2 has an invalid length. [ 492.550274][T15191] netlink: 'syz.2.3878': attribute type 8 has an invalid length. [ 492.558273][T15191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3878'. [ 492.842405][T15191] netlink: 'syz.2.3878': attribute type 2 has an invalid length. [ 493.013871][T15191] netlink: 'syz.2.3878': attribute type 8 has an invalid length. [ 493.081589][T15191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3878'. [ 501.272957][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.279294][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.113910][T15514] netlink: 'syz.2.3972': attribute type 2 has an invalid length. [ 506.182829][T15514] netlink: 'syz.2.3972': attribute type 8 has an invalid length. [ 506.230631][T15514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3972'. [ 506.444110][T15514] netlink: 'syz.2.3972': attribute type 2 has an invalid length. [ 506.479291][T15514] netlink: 'syz.2.3972': attribute type 8 has an invalid length. [ 506.566629][T15514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3972'. [ 508.063396][T15559] netlink: 'syz.3.3987': attribute type 2 has an invalid length. [ 508.110052][T15559] netlink: 'syz.3.3987': attribute type 8 has an invalid length. [ 508.142027][T15559] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3987'. [ 508.332830][T15559] netlink: 'syz.3.3987': attribute type 2 has an invalid length. [ 508.368338][T15559] netlink: 'syz.3.3987': attribute type 8 has an invalid length. [ 508.402190][T15559] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3987'. [ 510.034414][T15611] netlink: 'syz.0.4003': attribute type 2 has an invalid length. [ 510.047255][T15611] netlink: 'syz.0.4003': attribute type 8 has an invalid length. [ 510.064721][T15611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4003'. [ 510.314101][T15611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4003'. [ 512.380932][T15660] validate_nla: 2 callbacks suppressed [ 512.380965][T15660] netlink: 'syz.1.4019': attribute type 2 has an invalid length. [ 512.411206][T15660] netlink: 'syz.1.4019': attribute type 8 has an invalid length. [ 512.461214][T15660] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4019'. [ 512.616377][T15660] netlink: 'syz.1.4019': attribute type 2 has an invalid length. [ 512.736910][T15660] netlink: 'syz.1.4019': attribute type 8 has an invalid length. [ 512.787036][T15660] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4019'. [ 514.580665][T15717] netlink: 'syz.4.4034': attribute type 2 has an invalid length. [ 514.588528][T15717] netlink: 'syz.4.4034': attribute type 8 has an invalid length. [ 514.663549][T15717] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4034'. [ 514.815169][T15717] netlink: 'syz.4.4034': attribute type 2 has an invalid length. [ 514.845534][T15717] netlink: 'syz.4.4034': attribute type 8 has an invalid length. [ 514.854444][T15717] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4034'. [ 515.912630][T15751] netlink: 'syz.3.4043': attribute type 7 has an invalid length. [ 516.188445][T15751] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 516.231902][T15751] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 517.139331][T15777] netlink: 'syz.2.4050': attribute type 2 has an invalid length. [ 517.202415][T15777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4050'. [ 517.441630][T15777] validate_nla: 1 callbacks suppressed [ 517.441664][T15777] netlink: 'syz.2.4050': attribute type 2 has an invalid length. [ 517.470195][T15777] netlink: 'syz.2.4050': attribute type 8 has an invalid length. [ 517.494121][T15777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4050'. [ 528.259322][T16037] netlink: 'syz.4.4130': attribute type 2 has an invalid length. [ 528.283917][T16037] netlink: 'syz.4.4130': attribute type 8 has an invalid length. [ 528.322766][T16037] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4130'. [ 528.463733][T16037] netlink: 'syz.4.4130': attribute type 2 has an invalid length. [ 528.492733][T16037] netlink: 'syz.4.4130': attribute type 8 has an invalid length. [ 528.530290][T16037] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4130'. [ 530.604032][T16096] netlink: 'syz.4.4145': attribute type 2 has an invalid length. [ 530.668765][T16096] netlink: 'syz.4.4145': attribute type 8 has an invalid length. [ 530.694156][T16096] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4145'. [ 530.841019][T16096] netlink: 'syz.4.4145': attribute type 2 has an invalid length. [ 530.848848][T16096] netlink: 'syz.4.4145': attribute type 8 has an invalid length. [ 530.873653][T16096] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4145'. [ 531.146495][T16111] netlink: 'syz.1.4161': attribute type 2 has an invalid length. [ 531.187875][T16111] netlink: 'syz.1.4161': attribute type 8 has an invalid length. [ 531.241852][T16111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4161'. [ 531.381305][T16111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4161'. [ 532.300202][ T3650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 532.321127][ T3650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 532.331107][ T3650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 532.338963][ T3640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 532.347456][ T3650] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 532.354915][ T3650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 533.438416][T16154] validate_nla: 2 callbacks suppressed [ 533.438451][T16154] netlink: 'syz.0.4165': attribute type 2 has an invalid length. [ 533.495054][T16154] netlink: 'syz.0.4165': attribute type 8 has an invalid length. [ 533.511746][T16154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4165'. [ 533.616590][T16154] netlink: 'syz.0.4165': attribute type 2 has an invalid length. [ 533.690385][T16154] netlink: 'syz.0.4165': attribute type 8 has an invalid length. [ 533.698217][T16154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4165'. [ 533.783811][T16131] chnl_net:caif_netlink_parms(): no params data found [ 534.123658][T16131] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.130996][T16131] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.139356][T16131] device bridge_slave_0 entered promiscuous mode [ 534.149249][T16131] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.158287][T16131] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.166833][T16131] device bridge_slave_1 entered promiscuous mode [ 534.285137][T16131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.337821][T16131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.425607][T16131] team0: Port device team_slave_0 added [ 534.443477][T16131] team0: Port device team_slave_1 added [ 534.633323][T16131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.641259][T16131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.668134][T16131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.692467][T16131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.701094][T16131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.728235][T16131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.830715][ T3650] Bluetooth: hci5: command tx timeout [ 534.852922][T16131] device hsr_slave_0 entered promiscuous mode [ 534.887102][T16131] device hsr_slave_1 entered promiscuous mode [ 535.169332][T16131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.429536][T16131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.518617][T16207] netlink: 'syz.0.4178': attribute type 2 has an invalid length. [ 535.570121][T16207] netlink: 'syz.0.4178': attribute type 8 has an invalid length. [ 535.638751][T16207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4178'. [ 535.745716][T16131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.091509][T16131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.110911][T16207] netlink: 'syz.0.4178': attribute type 2 has an invalid length. [ 536.136590][T16207] netlink: 'syz.0.4178': attribute type 8 has an invalid length. [ 536.157617][T16207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4178'. [ 536.393869][T16131] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 536.436280][T16131] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 536.476012][T16131] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 536.603058][T16131] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 536.911939][ T3650] Bluetooth: hci5: command tx timeout [ 537.161785][T16131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.248922][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 537.277486][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.340779][T16131] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.417701][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 537.437248][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.509965][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.517099][ T4697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.649606][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 537.699188][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.718860][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.726004][ T4697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.734072][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 537.751188][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 537.794720][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 537.817267][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 537.857717][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 537.867510][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 537.913519][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 537.931684][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 537.940551][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 537.948837][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 537.959632][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 537.980561][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.991284][T16131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 538.095543][T16257] netlink: 'syz.4.4194': attribute type 2 has an invalid length. [ 538.110836][T16257] netlink: 'syz.4.4194': attribute type 8 has an invalid length. [ 538.137243][T16257] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4194'. [ 538.286768][T16257] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4194'. [ 538.553334][T16131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.636799][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 538.682442][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 538.748158][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 538.836832][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 538.957398][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 538.991569][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 539.008149][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 539.010422][ T3650] Bluetooth: hci5: command tx timeout [ 539.110528][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 539.178467][T16131] device veth0_vlan entered promiscuous mode [ 539.225853][T16131] device veth1_vlan entered promiscuous mode [ 539.260226][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 539.294782][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 539.337458][T16131] device veth0_macvtap entered promiscuous mode [ 539.346878][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 539.356475][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.367547][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 539.385518][T16131] device veth1_macvtap entered promiscuous mode [ 539.500068][T16131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.541495][T16131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.581832][T16131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.609893][T16131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.680122][T16131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.730945][T16131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.788827][T16131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.854740][T16131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.897028][T16131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.934972][T16131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.974690][T16131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.009995][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 540.018111][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 540.074206][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 540.088066][T16131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.104491][T16131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.140422][T16131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.153447][T16131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.167861][T16131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.180778][T16131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.197722][T16131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.209537][T16131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.226786][T16131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.238726][T16131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.255920][T16131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.272731][T16131] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.281824][T16131] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.290912][T16131] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.299722][T16131] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.310979][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 540.335967][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 540.620636][ T4163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.629021][ T4163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.661772][ T4684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.686402][ T4684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.727275][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 540.768867][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 541.070521][ T3650] Bluetooth: hci5: command tx timeout [ 541.127895][T16323] validate_nla: 2 callbacks suppressed [ 541.127911][T16323] netlink: 'syz.2.4156': attribute type 7 has an invalid length. [ 541.269977][T16323] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 541.321839][T16323] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 542.523829][ T3641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 542.550137][ T3641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 542.559973][ T3640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 542.589716][ T3641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 542.628630][ T3641] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 542.636374][ T3641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 543.126760][T16342] chnl_net:caif_netlink_parms(): no params data found [ 543.331239][T16342] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.384111][T16342] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.395535][T16342] device bridge_slave_0 entered promiscuous mode [ 543.404878][T16342] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.412094][T16342] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.420324][T16342] device bridge_slave_1 entered promiscuous mode [ 543.503014][T16342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.542287][T16342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.625091][T16342] team0: Port device team_slave_0 added [ 543.662603][T16342] team0: Port device team_slave_1 added [ 543.770159][T16342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.817098][T16342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.877613][T16342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.891967][T16342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.899117][T16342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.036664][T16342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.182444][T16342] device hsr_slave_0 entered promiscuous mode [ 544.213092][T16342] device hsr_slave_1 entered promiscuous mode [ 544.239651][T16342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.332161][T16342] Cannot create hsr debugfs directory [ 544.670106][ T3650] Bluetooth: hci1: command tx timeout [ 545.071579][T16342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.251934][T16342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.459120][T16342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.688806][T16342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.088721][T16342] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 546.232244][T16342] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 546.272415][T16342] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 546.338323][T16342] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 546.628623][T16342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.642130][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 546.653298][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 546.672255][T16342] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.750283][ T3650] Bluetooth: hci1: command tx timeout [ 546.800639][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 546.817370][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 546.825954][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.833079][ T4697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.845006][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 546.962168][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 546.991974][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 547.023198][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.030353][ T4697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.056000][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.065673][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 547.101840][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 547.112248][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 547.121375][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 547.139320][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 547.155985][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 547.179042][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 547.196597][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 547.208870][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 547.225392][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 547.252668][T16342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 548.103350][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 548.116223][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 548.158184][T16342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.210113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 548.218779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 548.295437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 548.316395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 548.352038][T16342] device veth0_vlan entered promiscuous mode [ 548.380291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 548.401450][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 548.448127][T16342] device veth1_vlan entered promiscuous mode [ 548.584963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 548.611887][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 548.622056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 548.649148][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 548.834357][ T3650] Bluetooth: hci1: command tx timeout [ 548.940471][T16342] device veth0_macvtap entered promiscuous mode [ 549.071474][T16342] device veth1_macvtap entered promiscuous mode [ 549.192859][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.259841][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.288889][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.326654][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.363763][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.374738][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.384976][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.397378][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.407604][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.419893][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.447122][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.508464][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.542651][T16342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.572532][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 549.591630][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 549.628747][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.657388][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.669708][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.680873][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.695831][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.706602][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.719445][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.735930][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.748915][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.760056][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.833452][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.923507][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.979290][T16342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.997613][T16342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.007478][T16342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.018496][T16342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.028338][T16342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.051461][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 550.072150][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 550.288359][ T4694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.307024][ T4694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.492260][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 550.518552][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.527965][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.549251][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 550.793386][T16535] netlink: 'syz.0.4208': attribute type 2 has an invalid length. [ 550.892277][T16535] netlink: 'syz.0.4208': attribute type 8 has an invalid length. [ 550.900547][T16535] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4208'. [ 550.920632][ T3650] Bluetooth: hci1: command tx timeout [ 551.034461][T16535] netlink: 'syz.0.4208': attribute type 2 has an invalid length. [ 551.099953][T16535] netlink: 'syz.0.4208': attribute type 8 has an invalid length. [ 551.193872][T16535] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4208'. [ 551.224263][T16544] netlink: 'syz.4.4274': attribute type 7 has an invalid length. [ 551.411837][T16544] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 551.504732][T16544] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 551.505293][ T3641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 551.523617][ T3641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 551.533097][ T3641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 551.542515][ T3641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 551.553224][ T3641] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 551.561394][ T3641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 552.703023][T16550] chnl_net:caif_netlink_parms(): no params data found [ 553.076613][T16550] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.164204][T16550] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.175408][T16550] device bridge_slave_0 entered promiscuous mode [ 553.208834][T16550] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.228990][T16550] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.289675][T16550] device bridge_slave_1 entered promiscuous mode [ 553.678522][ T3650] Bluetooth: hci3: command tx timeout [ 553.757942][T16595] netlink: 'syz.1.4286': attribute type 2 has an invalid length. [ 553.826439][T16595] netlink: 'syz.1.4286': attribute type 8 has an invalid length. [ 553.849981][T16595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4286'. [ 553.865994][T16550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.973134][T16599] netlink: 'syz.1.4286': attribute type 2 has an invalid length. [ 553.997733][T16599] netlink: 'syz.1.4286': attribute type 8 has an invalid length. [ 554.031280][T16599] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4286'. [ 554.059066][T16550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.182548][T16601] netlink: 'syz.0.4289': attribute type 7 has an invalid length. [ 554.284198][T16606] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 554.388619][T16606] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 554.480820][T16550] team0: Port device team_slave_0 added [ 554.531298][T16550] team0: Port device team_slave_1 added [ 554.815612][T16550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.938624][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.114750][T16550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.137648][T16550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.144770][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.206372][T16550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.314675][T16550] device hsr_slave_0 entered promiscuous mode [ 555.345128][T16550] device hsr_slave_1 entered promiscuous mode [ 555.400022][T16550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.420022][T16550] Cannot create hsr debugfs directory [ 555.710200][ T3650] Bluetooth: hci3: command tx timeout [ 556.004132][T16550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.034594][T16637] netlink: 'syz.2.4300': attribute type 2 has an invalid length. [ 556.070941][T16637] netlink: 'syz.2.4300': attribute type 8 has an invalid length. [ 556.083382][T16637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4300'. [ 556.191329][T16550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.241331][T16637] netlink: 'syz.2.4300': attribute type 2 has an invalid length. [ 556.249281][T16637] netlink: 'syz.2.4300': attribute type 8 has an invalid length. [ 556.330083][T16637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4300'. [ 556.594777][T16550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.679996][T16653] netlink: 'syz.2.4303': attribute type 7 has an invalid length. [ 556.713326][T16655] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 556.780434][T16655] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 556.854209][T16550] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.413656][T16550] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 557.515388][T16550] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 557.760634][T16550] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 557.789869][ T3650] Bluetooth: hci3: command tx timeout [ 557.808359][T16550] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 558.101016][T16550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.161068][T16550] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.233310][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 558.245301][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 558.316201][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 558.428908][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 558.439110][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.446240][ T4694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.472648][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 558.483712][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 558.509219][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.516370][ T4694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.525671][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 558.535851][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 558.565476][T16683] netlink: 'syz.1.4312': attribute type 2 has an invalid length. [ 558.581888][T16683] netlink: 'syz.1.4312': attribute type 8 has an invalid length. [ 558.598727][T16683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4312'. [ 558.612772][T16684] netlink: 'syz.1.4312': attribute type 2 has an invalid length. [ 558.631909][T16684] netlink: 'syz.1.4312': attribute type 8 has an invalid length. [ 558.639646][T16684] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4312'. [ 558.671691][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 558.788884][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 558.817662][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 558.901452][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 558.971554][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 559.010480][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 559.050238][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 559.091537][T16550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 559.107880][T16550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 559.116081][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 559.124698][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 559.133271][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 559.717673][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.725617][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.770501][T16550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.870012][ T3650] Bluetooth: hci3: command tx timeout [ 559.901731][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 559.940702][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 559.997091][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 560.006162][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 560.016925][T16550] device veth0_vlan entered promiscuous mode [ 560.026028][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 560.051934][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 560.065583][T16550] device veth1_vlan entered promiscuous mode [ 560.188545][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 560.211960][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 560.332223][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 560.417406][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 560.511399][T16550] device veth0_macvtap entered promiscuous mode [ 560.552256][T16550] device veth1_macvtap entered promiscuous mode [ 560.686106][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.768257][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.826602][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.865491][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.888150][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.910477][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.933291][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.951140][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.968679][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.989806][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.999675][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.011561][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.021446][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.033040][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.045190][T16550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.067580][T16740] netlink: 'syz.2.4327': attribute type 2 has an invalid length. [ 561.076428][T16740] netlink: 'syz.2.4327': attribute type 8 has an invalid length. [ 561.085778][T16740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4327'. [ 561.095553][T16741] netlink: 'syz.2.4327': attribute type 2 has an invalid length. [ 561.150793][T16741] netlink: 'syz.2.4327': attribute type 8 has an invalid length. [ 561.166245][T16741] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4327'. [ 561.175904][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 561.186729][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 561.198897][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.223524][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.247539][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.261353][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.281347][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.299001][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.317855][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.328375][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.338260][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.348879][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.364460][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.375169][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.412212][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.430225][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.453433][T16550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.471207][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 561.520113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 561.562693][T16550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.592111][T16550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.601527][T16550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.610771][T16550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.703737][ T3693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.727234][ T3693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.940451][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 561.989623][ T4697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.005066][ T4697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.018727][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 563.261547][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.267894][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.301868][ T3641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 563.312256][ T3640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 563.320511][ T3640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 563.329583][ T3641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 563.338789][ T3640] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 563.348949][ T3640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 563.742421][T16794] netlink: 'syz.2.4340': attribute type 2 has an invalid length. [ 563.758214][T16794] netlink: 'syz.2.4340': attribute type 8 has an invalid length. [ 563.803041][T16794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4340'. [ 564.022253][T16794] netlink: 'syz.2.4340': attribute type 2 has an invalid length. [ 564.059997][T16794] netlink: 'syz.2.4340': attribute type 8 has an invalid length. [ 564.067864][T16794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4340'. [ 564.087387][T16786] chnl_net:caif_netlink_parms(): no params data found [ 564.511817][T16786] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.518927][T16786] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.530033][T16786] device bridge_slave_0 entered promiscuous mode [ 564.538663][T16786] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.546152][T16786] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.554587][T16786] device bridge_slave_1 entered promiscuous mode [ 564.700515][T16786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.736498][T16786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.810108][T16786] team0: Port device team_slave_0 added [ 564.852244][T16786] team0: Port device team_slave_1 added [ 564.954328][T16786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.980150][T16786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.087824][T16786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.104193][T16786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.117714][T16786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.184881][T16786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.390523][ T3640] Bluetooth: hci2: command tx timeout [ 565.393413][T16786] device hsr_slave_0 entered promiscuous mode [ 565.429426][T16786] device hsr_slave_1 entered promiscuous mode [ 565.449873][T16786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.457443][T16786] Cannot create hsr debugfs directory [ 565.646104][T16847] netlink: 'syz.3.4356': attribute type 2 has an invalid length. [ 565.668426][T16847] netlink: 'syz.3.4356': attribute type 8 has an invalid length. [ 565.735319][T16847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4356'. [ 565.846257][T16847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4356'. [ 566.027847][T16786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.185946][T16786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.377566][T16786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.578648][T16786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.888014][T16786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 566.930942][T16786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 566.963764][T16786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 567.007485][T16786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 567.079971][T16886] validate_nla: 2 callbacks suppressed [ 567.080004][T16886] netlink: 'syz.4.4371': attribute type 2 has an invalid length. [ 567.156539][T16886] netlink: 'syz.4.4371': attribute type 8 has an invalid length. [ 567.187916][T16886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4371'. [ 567.289181][T16786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.317231][T16886] netlink: 'syz.4.4371': attribute type 2 has an invalid length. [ 567.331927][T16886] netlink: 'syz.4.4371': attribute type 8 has an invalid length. [ 567.365821][T16886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4371'. [ 567.447934][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 567.470258][ T3640] Bluetooth: hci2: command tx timeout [ 567.487684][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 567.513410][T16786] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.602038][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 567.634715][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 567.683558][ T4163] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.690721][ T4163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.698966][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 567.714199][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 567.746859][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 567.810283][ T4163] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.817404][ T4163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.924573][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 567.975183][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 568.002188][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 568.024772][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 568.061495][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 568.103435][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 568.136192][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 568.173986][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 568.198433][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 568.234578][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 568.262034][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 568.321632][T16786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 568.608154][T16929] netlink: 'syz.0.4383': attribute type 2 has an invalid length. [ 568.646606][T16929] netlink: 'syz.0.4383': attribute type 8 has an invalid length. [ 568.721421][T16929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4383'. [ 568.934408][T16929] netlink: 'syz.0.4383': attribute type 2 has an invalid length. [ 568.952830][T16929] netlink: 'syz.0.4383': attribute type 8 has an invalid length. [ 568.975502][T16929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4383'. [ 569.014329][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 569.028751][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 569.059419][T16786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.152845][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 569.169158][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 569.247748][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 569.264682][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 569.296611][T16786] device veth0_vlan entered promiscuous mode [ 569.321725][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 569.350956][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 569.367638][T16786] device veth1_vlan entered promiscuous mode [ 569.513916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 569.522569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 569.550332][ T3640] Bluetooth: hci2: command tx timeout [ 569.571997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 569.598135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 569.624817][T16786] device veth0_macvtap entered promiscuous mode [ 569.677001][T16786] device veth1_macvtap entered promiscuous mode [ 569.791760][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.862705][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.900119][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.939170][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.950638][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.968798][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.978963][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.989557][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.002102][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.014043][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.024688][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.035552][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.045798][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.056415][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.066600][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.083956][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.099700][T16786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.110077][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.122151][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.132525][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.182815][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.192943][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.203852][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.224669][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.235380][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.246332][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.257010][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.267403][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.279367][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.300865][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.311593][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.360069][T16786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.370867][T16786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.383412][T16786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.400186][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 570.432240][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 570.451515][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 570.482300][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 570.512280][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 570.535545][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.548565][T16786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.560522][T16786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.569503][T16786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.578864][T16786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.719711][ T4703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.727877][ T4703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.826800][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 570.855676][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.871617][T16984] netlink: 'syz.2.4397': attribute type 2 has an invalid length. [ 570.902651][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.929870][T16984] netlink: 'syz.2.4397': attribute type 8 has an invalid length. [ 570.995685][T16984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4397'. [ 571.073681][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 571.110201][T16984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4397'. [ 571.399224][T16999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4410'. [ 571.564707][T16999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4410'. [ 571.639236][ T3640] Bluetooth: hci2: command tx timeout [ 573.273383][T17050] validate_nla: 6 callbacks suppressed [ 573.273429][T17050] netlink: 'syz.3.4417': attribute type 2 has an invalid length. [ 573.328387][T17050] netlink: 'syz.3.4417': attribute type 8 has an invalid length. [ 573.349041][T17050] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4417'. [ 573.456508][T17050] netlink: 'syz.3.4417': attribute type 2 has an invalid length. [ 573.499025][T17050] netlink: 'syz.3.4417': attribute type 8 has an invalid length. [ 573.537443][T17050] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4417'. [ 574.838605][T17093] netlink: 'syz.4.4430': attribute type 2 has an invalid length. [ 574.907476][T17093] netlink: 'syz.4.4430': attribute type 8 has an invalid length. [ 574.941879][T17093] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4430'. [ 575.047880][T17093] netlink: 'syz.4.4430': attribute type 2 has an invalid length. [ 575.099025][T17093] netlink: 'syz.4.4430': attribute type 8 has an invalid length. [ 575.142336][T17093] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4430'. [ 576.633348][T17146] netlink: 'syz.0.4444': attribute type 2 has an invalid length. [ 576.701668][T17146] netlink: 'syz.0.4444': attribute type 8 has an invalid length. [ 576.709473][T17146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4444'. [ 577.298608][T17146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4444'. [ 578.773200][T17196] validate_nla: 2 callbacks suppressed [ 578.773253][T17196] netlink: 'syz.3.4460': attribute type 2 has an invalid length. [ 578.891235][T17196] netlink: 'syz.3.4460': attribute type 8 has an invalid length. [ 578.914191][T17196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4460'. [ 579.094480][T17196] netlink: 'syz.3.4460': attribute type 2 has an invalid length. [ 579.139719][T17196] netlink: 'syz.3.4460': attribute type 8 has an invalid length. [ 579.147649][T17196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4460'. [ 581.192800][T17256] netlink: 'syz.2.4477': attribute type 2 has an invalid length. [ 581.200931][T17256] netlink: 'syz.2.4477': attribute type 8 has an invalid length. [ 581.208890][T17256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4477'. [ 581.335903][T17256] netlink: 'syz.2.4477': attribute type 2 has an invalid length. [ 581.414101][T17256] netlink: 'syz.2.4477': attribute type 8 has an invalid length. [ 581.447918][T17256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4477'. [ 583.511629][T17311] netlink: 'syz.4.4494': attribute type 2 has an invalid length. [ 583.579993][T17311] netlink: 'syz.4.4494': attribute type 8 has an invalid length. [ 583.598165][T17311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4494'. [ 583.810141][T17311] netlink: 'syz.4.4494': attribute type 2 has an invalid length. [ 583.853708][T17311] netlink: 'syz.4.4494': attribute type 8 has an invalid length. [ 583.880316][T17311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4494'. [ 585.895691][T17363] netlink: 'syz.4.4510': attribute type 2 has an invalid length. [ 586.028328][T17363] netlink: 'syz.4.4510': attribute type 8 has an invalid length. [ 586.061515][T17363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4510'. [ 586.220015][T17370] netlink: 'syz.4.4510': attribute type 2 has an invalid length. [ 586.325261][T17370] netlink: 'syz.4.4510': attribute type 8 has an invalid length. [ 586.409027][T17370] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4510'. [ 588.932374][T17428] netlink: 'syz.1.4525': attribute type 2 has an invalid length. [ 588.960577][T17428] netlink: 'syz.1.4525': attribute type 8 has an invalid length. [ 588.968412][T17428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4525'. [ 589.222953][T17428] netlink: 'syz.1.4525': attribute type 2 has an invalid length. [ 589.305824][T17428] netlink: 'syz.1.4525': attribute type 8 has an invalid length. [ 589.338857][T17428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4525'. [ 589.771267][T17447] netlink: 'syz.2.4543': attribute type 2 has an invalid length. [ 589.833533][T17447] netlink: 'syz.2.4543': attribute type 8 has an invalid length. [ 589.849971][T17447] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4543'. [ 589.952937][T17453] netlink: 'syz.2.4543': attribute type 2 has an invalid length. [ 590.020921][T17453] netlink: 'syz.2.4543': attribute type 8 has an invalid length. [ 590.047442][T17453] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4543'. [ 592.544648][T17509] netlink: 'syz.0.4551': attribute type 2 has an invalid length. [ 592.558490][T17509] netlink: 'syz.0.4551': attribute type 8 has an invalid length. [ 592.571102][T17509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4551'. [ 592.712246][T17509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4551'. [ 595.087919][T17566] validate_nla: 2 callbacks suppressed [ 595.087952][T17566] netlink: 'syz.3.4566': attribute type 2 has an invalid length. [ 595.214196][T17566] netlink: 'syz.3.4566': attribute type 8 has an invalid length. [ 595.337009][T17566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4566'. [ 595.454406][T17566] netlink: 'syz.3.4566': attribute type 2 has an invalid length. [ 595.481074][T17566] netlink: 'syz.3.4566': attribute type 8 has an invalid length. [ 595.523837][T17566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4566'. [ 596.706377][T17599] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 596.744096][T17599] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 597.900293][T17616] netlink: 'syz.0.4582': attribute type 2 has an invalid length. [ 597.914736][T17616] netlink: 'syz.0.4582': attribute type 8 has an invalid length. [ 597.930288][T17616] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4582'. [ 598.058710][T17616] netlink: 'syz.0.4582': attribute type 2 has an invalid length. [ 598.080756][T17616] netlink: 'syz.0.4582': attribute type 8 has an invalid length. [ 598.088591][T17616] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4582'. [ 599.594034][T17655] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 704.599756][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 704.606386][ C1] rcu: 1-...!: (10500 ticks this GP) idle=7074/1/0x4000000000000000 softirq=63988/63988 fqs=0 [ 704.617671][ C1] (t=10501 jiffies g=90017 q=193 ncpus=2) [ 704.623487][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g90017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 704.634676][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 704.644643][ C1] rcu: RCU grace-period kthread stack dump: [ 704.650536][ C1] task:rcu_preempt state:R running task stack:26472 pid:16 ppid:2 flags:0x00004000 [ 704.661336][ C1] Call Trace: [ 704.664615][ C1] [ 704.667564][ C1] __schedule+0x143f/0x4570 [ 704.672094][ C1] ? _raw_spin_unlock+0x40/0x40 [ 704.676965][ C1] ? __mod_timer+0x956/0xee0 [ 704.681570][ C1] ? release_firmware_map_entry+0x186/0x186 [ 704.687471][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 704.692852][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 704.698755][ C1] ? _raw_spin_unlock+0x40/0x40 [ 704.703621][ C1] schedule+0xbf/0x180 [ 704.707694][ C1] schedule_timeout+0x1b9/0x300 [ 704.712552][ C1] ? console_conditional_schedule+0x40/0x40 [ 704.718455][ C1] ? update_process_times+0x1b0/0x1b0 [ 704.723841][ C1] ? prepare_to_swait_event+0x329/0x350 [ 704.729400][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 704.734277][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 704.739488][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 704.744262][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 704.750172][ C1] ? finish_swait+0xcf/0x1e0 [ 704.754774][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 704.759375][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 704.764494][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 704.770406][ C1] ? __kthread_parkme+0x168/0x1c0 [ 704.775454][ C1] kthread+0x28d/0x320 [ 704.779532][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 704.784655][ C1] ? kthread_blkcg+0xd0/0xd0 [ 704.789259][ C1] ret_from_fork+0x1f/0x30 [ 704.793708][ C1] [ 704.796729][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 704.803054][ C1] CPU: 1 PID: 17642 Comm: syz.1.4589 Not tainted 6.1.112-syzkaller #0 [ 704.811211][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 704.821277][ C1] RIP: 0010:deref_stack_reg+0x13/0x210 [ 704.826741][ C1] Code: e1 07 38 c1 0f 8c f1 f7 ff ff 48 89 df e8 b5 5a a5 00 e9 e4 f7 ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 <49> 89 f0 49 89 fe 48 ba 00 00 00 00 00 fc ff df 48 8d 6f 08 49 89 [ 704.846354][ C1] RSP: 0018:ffffc900001e0388 EFLAGS: 00000286 [ 704.852426][ C1] RAX: fffffffffffffff0 RBX: ffffffff8f19221c RCX: 0000000000000000 [ 704.860403][ C1] RDX: ffffc900001e0500 RSI: ffffc900001e0df0 RDI: ffffc900001e04c0 [ 704.868379][ C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffc900001e0510 [ 704.876352][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900001e04c0 [ 704.884325][ C1] R13: ffffffff8f19221e R14: ffffffff8f19221d R15: ffffc900001e0510 [ 704.892295][ C1] FS: 00007f33d5c606c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 704.901230][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 704.907815][ C1] CR2: 0000001b2c214ff8 CR3: 0000000086649000 CR4: 00000000003506e0 [ 704.915789][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 704.923761][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 704.931731][ C1] Call Trace: [ 704.935010][ C1] [ 704.937855][ C1] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 704.944187][ C1] ? _find_next_bit+0x11b/0x120 [ 704.949055][ C1] ? print_cpu_stall+0x341/0x5f0 [ 704.953999][ C1] ? rcu_sched_clock_irq+0x997/0x1200 [ 704.959380][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 704.964240][ C1] ? hrtimer_run_queues+0x163/0x450 [ 704.969452][ C1] ? update_process_times+0x147/0x1b0 [ 704.974829][ C1] ? tick_sched_timer+0x386/0x550 [ 704.979856][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 704.985403][ C1] ? __hrtimer_run_queues+0x5a7/0xe50 [ 704.990801][ C1] ? hrtimer_interrupt+0x980/0x980 [ 704.995918][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 705.002002][ C1] ? hrtimer_interrupt+0x392/0x980 [ 705.007151][ C1] ? __sysvec_apic_timer_interrupt+0x156/0x580 [ 705.013311][ C1] ? sysvec_apic_timer_interrupt+0x3e/0xb0 [ 705.019123][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.025298][ C1] ? deref_stack_reg+0x13/0x210 [ 705.030153][ C1] ? deref_stack_reg+0x17c/0x210 [ 705.035103][ C1] unwind_next_frame+0x18db/0x2220 [ 705.040234][ C1] ? run_timer_softirq+0x63/0xf0 [ 705.045178][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 705.050221][ C1] arch_stack_walk+0x10d/0x140 [ 705.054997][ C1] ? handle_softirqs+0x2ee/0xa40 [ 705.059951][ C1] stack_trace_save+0x113/0x1c0 [ 705.064810][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 705.070451][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 705.075573][ C1] ? mark_lock+0x9a/0x340 [ 705.079922][ C1] ? skb_release_data+0x5de/0x7a0 [ 705.084957][ C1] kasan_set_track+0x4b/0x70 [ 705.089553][ C1] ? kasan_set_track+0x4b/0x70 [ 705.094325][ C1] ? kasan_save_free_info+0x27/0x40 [ 705.099522][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 705.104718][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 705.109834][ C1] ? skb_release_data+0x5de/0x7a0 [ 705.114866][ C1] ? __kfree_skb+0x4c/0x60 [ 705.119295][ C1] ? tcp_write_queue_purge+0x132/0x2f0 [ 705.124756][ C1] ? tcp_done_with_error+0x3d/0xc0 [ 705.129874][ C1] ? tcp_retransmit_timer+0x12ca/0x2800 [ 705.135420][ C1] ? tcp_write_timer+0x12e/0x280 [ 705.140357][ C1] ? call_timer_fn+0x1ad/0x6b0 [ 705.145123][ C1] ? __run_timers+0x67c/0x890 [ 705.149802][ C1] ? run_timer_softirq+0x63/0xf0 [ 705.154797][ C1] kasan_save_free_info+0x27/0x40 [ 705.159825][ C1] ____kasan_slab_free+0xd6/0x120 [ 705.164854][ C1] __kmem_cache_free+0x25c/0x3c0 [ 705.169797][ C1] ? skb_release_data+0x5de/0x7a0 [ 705.174833][ C1] skb_release_data+0x5de/0x7a0 [ 705.179704][ C1] __kfree_skb+0x4c/0x60 [ 705.183951][ C1] tcp_write_queue_purge+0x132/0x2f0 [ 705.189263][ C1] tcp_done_with_error+0x3d/0xc0 [ 705.194223][ C1] tcp_retransmit_timer+0x12ca/0x2800 [ 705.199620][ C1] ? tcp_delack_timer_handler+0x440/0x440 [ 705.205348][ C1] ? tcp_write_timer_handler+0x139/0x8e0 [ 705.210990][ C1] ? tcp_retransmit_timer+0x1/0x2800 [ 705.216283][ C1] tcp_write_timer+0x12e/0x280 [ 705.221053][ C1] call_timer_fn+0x1ad/0x6b0 [ 705.225646][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 705.230852][ C1] ? call_timer_fn+0xc2/0x6b0 [ 705.235540][ C1] ? __run_timers+0x890/0x890 [ 705.240233][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 705.245435][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 705.250636][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 705.255841][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 705.261040][ C1] __run_timers+0x67c/0x890 [ 705.265562][ C1] ? detach_timer+0x380/0x380 [ 705.270250][ C1] ? print_irqtrace_events+0x210/0x210 [ 705.275713][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 705.281966][ C1] ? handle_softirqs+0x1ef/0xa40 [ 705.286919][ C1] run_timer_softirq+0x63/0xf0 [ 705.291690][ C1] handle_softirqs+0x2ee/0xa40 [ 705.296474][ C1] ? __irq_exit_rcu+0x157/0x240 [ 705.301338][ C1] ? do_softirq+0x240/0x240 [ 705.305847][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 705.310969][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 705.316175][ C1] __irq_exit_rcu+0x157/0x240 [ 705.320862][ C1] ? irq_exit_rcu+0x20/0x20 [ 705.325388][ C1] irq_exit_rcu+0x5/0x20 [ 705.329637][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 705.335277][ C1] [ 705.338205][ C1] [ 705.341138][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.347128][ C1] RIP: 0010:__up_read+0x25e/0x690 [ 705.352158][ C1] Code: 00 74 96 4c 89 ff e8 c1 66 78 00 eb 8c 48 8b 1c 24 48 89 df be 08 00 00 00 e8 ce 67 78 00 49 c7 c4 00 ff ff ff f0 4c 0f c1 23 <48> c7 c0 28 2e 9a 8e 48 c1 e8 03 48 bb 00 00 00 00 00 fc ff df 0f [ 705.371766][ C1] RSP: 0018:ffffc9000b417500 EFLAGS: 00000247 [ 705.377838][ C1] RAX: 0000000000000001 RBX: ffff88801b3c1ee8 RCX: ffffffff8169cb52 [ 705.385813][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88801b3c1ee8 [ 705.393781][ C1] RBP: ffffc9000b4175b8 R08: dffffc0000000000 R09: ffffed10036783de [ 705.401752][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000100 [ 705.409723][ C1] R13: ffff88801b3c1ef0 R14: 1ffff110036783de R15: ffffc9000b417540 [ 705.417707][ C1] ? __up_read+0x252/0x690 [ 705.422142][ C1] ? up_read+0x20/0x20 [ 705.426230][ C1] exc_page_fault+0x357/0x620 [ 705.430921][ C1] asm_exc_page_fault+0x22/0x30 [ 705.435782][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 705.442370][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 66 2e 0f 1f 84 00 00 00 00 00 [ 705.461977][ C1] RSP: 0018:ffffc9000b4176d0 EFLAGS: 00050206 [ 705.468052][ C1] RAX: ffffffff8437bc01 RBX: 00007fffffffb809 RCX: 00000000000022ff [ 705.476027][ C1] RDX: 00000000000037f7 RSI: 00000000200ee000 RDI: ffff8880831edd01 [ 705.484002][ C1] RBP: ffffc9000b417850 R08: dffffc0000000000 R09: ffffed101063e000 [ 705.491974][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000037f7 [ 705.499951][ C1] R13: 0000000000000000 R14: ffff8880831ec809 R15: 00000000200ecb08 [ 705.507941][ C1] ? copyin+0x31/0x120 [ 705.512024][ C1] copyin+0xd8/0x120 [ 705.515933][ C1] _copy_from_iter+0x493/0xff0 [ 705.520720][ C1] ? copyout_mc+0x100/0x100 [ 705.525227][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.531398][ C1] ? __check_object_size+0x4ca/0xa30 [ 705.536685][ C1] ? __check_object_size+0x4dd/0xa30 [ 705.541981][ C1] tcp_sendmsg_locked+0x173b/0x4100 [ 705.547243][ C1] ? tcp_set_state+0x7f0/0x7f0 [ 705.552011][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 705.557400][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 705.562612][ C1] tcp_sendmsg+0x2c/0x40 [ 705.566855][ C1] ? inet_send_prepare+0x250/0x250 [ 705.571975][ C1] ____sys_sendmsg+0x5a5/0x8f0 [ 705.576752][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 705.581798][ C1] __sys_sendmsg+0x2a9/0x390 [ 705.586392][ C1] ? ____sys_sendmsg+0x8f0/0x8f0 [ 705.591369][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.597533][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 705.602755][ C1] ? syscall_enter_from_user_mode+0x37/0x230 [ 705.608742][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 705.614730][ C1] do_syscall_64+0x3b/0xb0 [ 705.619145][ C1] ? clear_bhb_loop+0x45/0xa0 [ 705.623831][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.629726][ C1] RIP: 0033:0x7f33d4d7dff9 [ 705.634157][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.653766][ C1] RSP: 002b:00007f33d5c60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.662184][ C1] RAX: ffffffffffffffda RBX: 00007f33d4f35f80 RCX: 00007f33d4d7dff9 [ 705.670154][ C1] RDX: 00000000000052cc RSI: 0000000020000040 RDI: 000000000000000c [ 705.678133][ C1] RBP: 00007f33d4df0296 R08: 0000000000000000 R09: 0000000000000000 [ 705.686114][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.694099][ C1] R13: 0000000000000000 R14: 00007f33d4f35f80 R15: 00007fffbd0aa268 [ 705.702095][ C1] [ 705.705123][ C1] Sending NMI from CPU 1 to CPUs 0: [ 705.710343][ C0] NMI backtrace for cpu 0 [ 705.710352][ C0] CPU: 0 PID: 17658 Comm: syz.3.4596 Not tainted 6.1.112-syzkaller #0 [ 705.710366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 705.710374][ C0] RIP: 0010:kasan_check_range+0x7b/0x290 [ 705.710393][ C0] Code: 00 00 00 00 fc ff df 4f 8d 34 1a 4c 89 f5 4c 29 cd 48 83 fd 10 7f 26 48 85 ed 0f 84 3a 01 00 00 49 f7 d2 49 01 da 41 80 39 00 <0f> 85 c4 01 00 00 49 ff c1 49 ff c2 75 ee e9 1d 01 00 00 45 89 cf [ 705.710406][ C0] RSP: 0018:ffffc90000006cf8 EFLAGS: 00000046 [ 705.710419][ C0] RAX: ffffffff81b04f01 RBX: 1ffff92000000db0 RCX: ffffffff81b04fe7 [ 705.710430][ C0] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc90000006d80 [ 705.710440][ C0] RBP: 0000000000000007 R08: dffffc0000000000 R09: fffff52000000db5 [ 705.710450][ C0] R10: fffffffffffffffe R11: dffffc0000000001 R12: ffffc90000006f40 [ 705.710461][ C0] R13: ffffc90000006de0 R14: fffff52000000db7 R15: ffffc90000006de0 [ 705.710472][ C0] FS: 00007f6fdfeb26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 705.710485][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.710495][ C0] CR2: 0000001b33f05ff8 CR3: 0000000079266000 CR4: 00000000003506f0 [ 705.710508][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 705.710516][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 705.710525][ C0] Call Trace: [ 705.710530][ C0] [ 705.710535][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 705.710551][ C0] ? read_lock_is_recursive+0x10/0x10 [ 705.710575][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 705.710590][ C0] ? nmi_handle+0x25/0x440 [ 705.710624][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 705.710645][ C0] ? nmi_handle+0x12e/0x440 [ 705.710667][ C0] ? nmi_handle+0x25/0x440 [ 705.710688][ C0] ? kasan_check_range+0x7b/0x290 [ 705.710702][ C0] ? default_do_nmi+0x62/0x150 [ 705.710718][ C0] ? exc_nmi+0xa8/0x100 [ 705.710733][ C0] ? end_repeat_nmi+0x16/0x31 [ 705.710759][ C0] ? perf_get_page_size+0x531/0x570 [ 705.710774][ C0] ? perf_event_output_forward+0xa7/0x330 [ 705.710791][ C0] ? kasan_check_range+0x7b/0x290 [ 705.710806][ C0] ? kasan_check_range+0x7b/0x290 [ 705.710823][ C0] ? kasan_check_range+0x7b/0x290 [ 705.710838][ C0] [ 705.710842][ C0] [ 705.710849][ C0] memset+0x1f/0x40 [ 705.710864][ C0] perf_event_output_forward+0xa7/0x330 [ 705.710884][ C0] ? perf_get_page_size+0x570/0x570 [ 705.710907][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 705.710928][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 705.710951][ C0] ? __perf_event_account_interrupt+0x17e/0x2a0 [ 705.710971][ C0] __perf_event_overflow+0x45e/0x640 [ 705.710994][ C0] perf_swevent_hrtimer+0x38e/0x4f0 [ 705.711017][ C0] ? debug_deactivate+0x1d/0x280 [ 705.711037][ C0] ? cpu_clock_event_read+0x50/0x50 [ 705.711083][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 705.711102][ C0] ? _raw_spin_unlock+0x40/0x40 [ 705.711118][ C0] ? debug_object_deactivate+0x63/0x380 [ 705.711143][ C0] ? cpu_clock_event_read+0x50/0x50 [ 705.711164][ C0] ? cpu_clock_event_read+0x50/0x50 [ 705.711186][ C0] __hrtimer_run_queues+0x5a7/0xe50 [ 705.711218][ C0] ? hrtimer_interrupt+0x980/0x980 [ 705.711235][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 705.711261][ C0] hrtimer_interrupt+0x392/0x980 [ 705.711297][ C0] __sysvec_apic_timer_interrupt+0x156/0x580 [ 705.711318][ C0] sysvec_apic_timer_interrupt+0x3e/0xb0 [ 705.711335][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.711355][ C0] RIP: 0010:stack_trace_consume_entry+0x120/0x270 [ 705.711376][ C0] Code: 48 89 df 49 89 d6 49 89 f5 e8 ac c4 69 00 4d 89 f9 4c 89 ee 4c 89 f2 48 89 33 41 8b 19 41 0f b6 04 14 84 c0 0f 85 30 01 00 00 <3b> 5d 00 0f 92 c0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 44 [ 705.711388][ C0] RSP: 0018:ffffc90000007470 EFLAGS: 00000246 [ 705.711399][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8fdb3000 [ 705.711408][ C0] RDX: dffffc0000000000 RSI: ffffffff81e20826 RDI: ffffc900000075ac [ 705.711419][ C0] RBP: ffffc900000075a8 R08: 0000000000000002 R09: ffffc900000075b0 [ 705.711429][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000000eb5 [ 705.711439][ C0] R13: 1ffff92000000eb5 R14: 0000000000000003 R15: 1ffff92000000eb6 [ 705.711456][ C0] ? __init_begin+0x3d000/0x3d000 [ 705.711477][ C0] ? ____kasan_slab_free+0xd6/0x120 [ 705.711494][ C0] ? ____kasan_slab_free+0xd6/0x120 [ 705.711508][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 705.711528][ C0] arch_stack_walk+0x101/0x140 [ 705.711549][ C0] ? ____kasan_slab_free+0xd6/0x120 [ 705.711566][ C0] stack_trace_save+0x113/0x1c0 [ 705.711585][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 705.711604][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 705.711626][ C0] ? mark_lock+0x9a/0x340 [ 705.711650][ C0] ? skb_release_data+0x5de/0x7a0 [ 705.711673][ C0] kasan_set_track+0x4b/0x70 [ 705.711692][ C0] ? kasan_set_track+0x4b/0x70 [ 705.711711][ C0] ? kasan_save_free_info+0x27/0x40 [ 705.711726][ C0] ? ____kasan_slab_free+0xd6/0x120 [ 705.711779][ C0] kasan_save_free_info+0x27/0x40 [ 705.711794][ C0] ____kasan_slab_free+0xd6/0x120 [ 705.711811][ C0] __kmem_cache_free+0x25c/0x3c0 [ 705.711829][ C0] ? skb_release_data+0x5de/0x7a0 [ 705.711852][ C0] skb_release_data+0x5de/0x7a0 [ 705.711881][ C0] __kfree_skb+0x4c/0x60 [ 705.711910][ C0] tcp_write_queue_purge+0x132/0x2f0 [ 705.711932][ C0] tcp_done_with_error+0x3d/0xc0 [ 705.711951][ C0] tcp_retransmit_timer+0x12ca/0x2800 [ 705.711974][ C0] ? tcp_delack_timer_handler+0x440/0x440 [ 705.711988][ C0] ? __sanitizer_cov_trace_switch+0x4/0xe0 [ 705.712009][ C0] ? tcp_write_timer_handler+0x14c/0x8e0 [ 705.712028][ C0] tcp_write_timer+0x12e/0x280 [ 705.712045][ C0] call_timer_fn+0x1ad/0x6b0 [ 705.712061][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 705.712075][ C0] ? call_timer_fn+0xc2/0x6b0 [ 705.712090][ C0] ? __run_timers+0x890/0x890 [ 705.712112][ C0] ? ct_irq_exit_irqson+0x13c/0x1b0 [ 705.712134][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 705.712149][ C0] __run_timers+0x67c/0x890 [ 705.712174][ C0] ? detach_timer+0x380/0x380 [ 705.712189][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.712218][ C0] ? ct_irq_exit_irqson+0x13c/0x1b0 [ 705.712239][ C0] run_timer_softirq+0x63/0xf0 [ 705.712255][ C0] handle_softirqs+0x2ee/0xa40 [ 705.712282][ C0] ? __irq_exit_rcu+0x157/0x240 [ 705.712306][ C0] ? do_softirq+0x240/0x240 [ 705.712325][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 705.712345][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 705.712363][ C0] __irq_exit_rcu+0x157/0x240 [ 705.712383][ C0] ? irq_exit_rcu+0x20/0x20 [ 705.712413][ C0] irq_exit_rcu+0x5/0x20 [ 705.712431][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 705.712448][ C0] [ 705.712452][ C0] [ 705.712457][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.712477][ C0] RIP: 0010:preempt_schedule_irq+0xf2/0x1c0 [ 705.712491][ C0] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 97 00 00 00 bf 01 00 00 00 e8 e9 22 af f6 e8 14 1f e2 f6 fb bf 01 00 00 00 79 b4 ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 de 32 f7 48 [ 705.712504][ C0] RSP: 0018:ffffc9001013f060 EFLAGS: 00000286 [ 705.712515][ C0] RAX: 6e5af8ef9cc56100 RBX: 1ffff92002027e14 RCX: ffffffff97334103 [ 705.712526][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: 0000000000000001 [ 705.712535][ C0] RBP: ffffc9001013f110 R08: ffffffff81b659cc R09: ffffed10171c6ad6 [ 705.712546][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92002027e0c [ 705.712555][ C0] R13: 1ffff92002027e10 R14: ffffc9001013f080 R15: dffffc0000000000 [ 705.712571][ C0] ? ct_irq_exit_irqson+0x13c/0x1b0 [ 705.712596][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 705.712614][ C0] ? rcu_is_watching+0x11/0xb0 [ 705.712634][ C0] irqentry_exit+0x53/0x80 [ 705.712649][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.712669][ C0] RIP: 0010:__vunmap+0x7bd/0x9a0 [ 705.712688][ C0] Code: 25 b6 ff 45 85 e4 0f 84 f1 00 00 00 49 8d 56 2c 49 89 d4 49 c1 ec 03 43 0f b6 04 3c 84 c0 48 89 14 24 0f 85 76 01 00 00 8b 1a <31> ff 89 de e8 4a 25 b6 ff 85 db 0f 84 c9 00 00 00 4d 8d 6e 20 bd [ 705.712699][ C0] RSP: 0018:ffffc9001013f1d0 EFLAGS: 00000246 [ 705.712710][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000040000 [ 705.712719][ C0] RDX: ffff88806891022c RSI: 0000000000000001 RDI: 0000000000000000 [ 705.712728][ C0] RBP: 0000000000000000 R08: ffffffff81d48d26 R09: fffffbfff1d33f33 [ 705.712737][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100d122045 [ 705.712747][ C0] R13: 1ffff1100d122043 R14: ffff888068910200 R15: dffffc0000000000 [ 705.712763][ C0] ? __vunmap+0x796/0x9a0 [ 705.712797][ C0] bpf_check+0xf721/0x16140 [ 705.712830][ C0] ? perf_trace_run_bpf_submit+0x1d0/0x1d0 [ 705.712853][ C0] ? tracing_gen_ctx_irq_test+0x10f/0x160 [ 705.712881][ C0] ? tracing_gen_ctx_irq_test+0x10f/0x160 [ 705.712907][ C0] ? perf_trace_buf_update+0xb9/0x220 [ 705.712927][ C0] ? perf_trace_buf_alloc+0x2e0/0x2e0 [ 705.712943][ C0] ? perf_tp_event+0xb2b/0xc80 [ 705.712960][ C0] ? perf_swevent_event+0xc9/0x550 [ 705.712981][ C0] ? perf_tp_event+0xb2b/0xc80 [ 705.712997][ C0] ? perf_trace_run_bpf_submit+0x1d0/0x1d0 [ 705.713019][ C0] ? bpf_get_btf_vmlinux+0x10/0x10 [ 705.713035][ C0] ? perf_trace_run_bpf_submit+0x1d0/0x1d0 [ 705.713095][ C0] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 705.713116][ C0] ? perf_trace_preemptirq_template+0x2d1/0x3d0 [ 705.713147][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 705.713170][ C0] ? print_irqtrace_events+0x210/0x210 [ 705.713192][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.713215][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.713235][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 705.713253][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.713278][ C0] ? seqcount_lockdep_reader_access+0x1a9/0x220 [ 705.713296][ C0] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 705.713316][ C0] ? seqcount_lockdep_reader_access+0x1dc/0x220 [ 705.713338][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 705.713362][ C0] ? __might_fault+0xa1/0x110 [ 705.713381][ C0] ? memset+0x1f/0x40 [ 705.713396][ C0] ? bpf_obj_name_cpy+0x186/0x1d0 [ 705.713419][ C0] bpf_prog_load+0x12df/0x1bb0 [ 705.713449][ C0] ? map_freeze+0x390/0x390 [ 705.713467][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.713490][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.713523][ C0] ? __sanitizer_cov_trace_switch+0x50/0xe0 [ 705.713546][ C0] __sys_bpf+0x382/0x6c0 [ 705.713567][ C0] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 705.713600][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.713626][ C0] ? ct_irq_exit_irqson+0x13c/0x1b0 [ 705.713647][ C0] __x64_sys_bpf+0x78/0x90 [ 705.713667][ C0] do_syscall_64+0x3b/0xb0 [ 705.713679][ C0] ? clear_bhb_loop+0x45/0xa0 [ 705.713699][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.713718][ C0] RIP: 0033:0x7f6fdf17dff9 [ 705.713731][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.713742][ C0] RSP: 002b:00007f6fdfeb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 705.713756][ C0] RAX: ffffffffffffffda RBX: 00007f6fdf335f80 RCX: 00007f6fdf17dff9 [ 705.713766][ C0] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 705.713774][ C0] RBP: 00007f6fdf1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 705.713783][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.713792][ C0] R13: 0000000000000000 R14: 00007f6fdf335f80 R15: 00007ffd02c42cb8 [ 705.713814][ C0] [ 705.714334][ C1] CPU: 1 PID: 17642 Comm: syz.1.4589 Not tainted 6.1.112-syzkaller #0 [ 706.849293][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 706.859350][ C1] RIP: 0010:deref_stack_reg+0x13/0x210 [ 706.864817][ C1] Code: e1 07 38 c1 0f 8c f1 f7 ff ff 48 89 df e8 b5 5a a5 00 e9 e4 f7 ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 <49> 89 f0 49 89 fe 48 ba 00 00 00 00 00 fc ff df 48 8d 6f 08 49 89 [ 706.884426][ C1] RSP: 0018:ffffc900001e0388 EFLAGS: 00000286 [ 706.890501][ C1] RAX: fffffffffffffff0 RBX: ffffffff8f19221c RCX: 0000000000000000 [ 706.898481][ C1] RDX: ffffc900001e0500 RSI: ffffc900001e0df0 RDI: ffffc900001e04c0 [ 706.906460][ C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffc900001e0510 [ 706.914437][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900001e04c0 [ 706.922412][ C1] R13: ffffffff8f19221e R14: ffffffff8f19221d R15: ffffc900001e0510 [ 706.930385][ C1] FS: 00007f33d5c606c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 706.939314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.945896][ C1] CR2: 0000001b2c214ff8 CR3: 0000000086649000 CR4: 00000000003506e0 [ 706.953870][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 706.961842][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 706.969812][ C1] Call Trace: [ 706.973089][ C1] [ 706.975934][ C1] ? rcu_dump_cpu_stacks+0x296/0x4f0 [ 706.981240][ C1] ? print_cpu_stall+0x346/0x5f0 [ 706.986189][ C1] ? rcu_sched_clock_irq+0x997/0x1200 [ 706.991573][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 706.996433][ C1] ? hrtimer_run_queues+0x163/0x450 [ 707.001645][ C1] ? update_process_times+0x147/0x1b0 [ 707.007024][ C1] ? tick_sched_timer+0x386/0x550 [ 707.012056][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 707.017606][ C1] ? __hrtimer_run_queues+0x5a7/0xe50 [ 707.023005][ C1] ? hrtimer_interrupt+0x980/0x980 [ 707.028121][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 707.034205][ C1] ? hrtimer_interrupt+0x392/0x980 [ 707.039349][ C1] ? __sysvec_apic_timer_interrupt+0x156/0x580 [ 707.045512][ C1] ? sysvec_apic_timer_interrupt+0x3e/0xb0 [ 707.051323][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 707.057503][ C1] ? deref_stack_reg+0x13/0x210 [ 707.062364][ C1] ? deref_stack_reg+0x17c/0x210 [ 707.067314][ C1] unwind_next_frame+0x18db/0x2220 [ 707.072444][ C1] ? run_timer_softirq+0x63/0xf0 [ 707.077389][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 707.082425][ C1] arch_stack_walk+0x10d/0x140 [ 707.087202][ C1] ? handle_softirqs+0x2ee/0xa40 [ 707.092153][ C1] stack_trace_save+0x113/0x1c0 [ 707.097012][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 707.102656][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 707.107784][ C1] ? mark_lock+0x9a/0x340 [ 707.112131][ C1] ? skb_release_data+0x5de/0x7a0 [ 707.117165][ C1] kasan_set_track+0x4b/0x70 [ 707.121760][ C1] ? kasan_set_track+0x4b/0x70 [ 707.126535][ C1] ? kasan_save_free_info+0x27/0x40 [ 707.131736][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 707.136940][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 707.142055][ C1] ? skb_release_data+0x5de/0x7a0 [ 707.147087][ C1] ? __kfree_skb+0x4c/0x60 [ 707.151510][ C1] ? tcp_write_queue_purge+0x132/0x2f0 [ 707.156971][ C1] ? tcp_done_with_error+0x3d/0xc0 [ 707.162088][ C1] ? tcp_retransmit_timer+0x12ca/0x2800 [ 707.167634][ C1] ? tcp_write_timer+0x12e/0x280 [ 707.172572][ C1] ? call_timer_fn+0x1ad/0x6b0 [ 707.177339][ C1] ? __run_timers+0x67c/0x890 [ 707.182014][ C1] ? run_timer_softirq+0x63/0xf0 [ 707.187010][ C1] kasan_save_free_info+0x27/0x40 [ 707.192042][ C1] ____kasan_slab_free+0xd6/0x120 [ 707.197079][ C1] __kmem_cache_free+0x25c/0x3c0 [ 707.202029][ C1] ? skb_release_data+0x5de/0x7a0 [ 707.207072][ C1] skb_release_data+0x5de/0x7a0 [ 707.211947][ C1] __kfree_skb+0x4c/0x60 [ 707.216203][ C1] tcp_write_queue_purge+0x132/0x2f0 [ 707.221503][ C1] tcp_done_with_error+0x3d/0xc0 [ 707.226453][ C1] tcp_retransmit_timer+0x12ca/0x2800 [ 707.231846][ C1] ? tcp_delack_timer_handler+0x440/0x440 [ 707.237570][ C1] ? tcp_write_timer_handler+0x139/0x8e0 [ 707.243213][ C1] ? tcp_retransmit_timer+0x1/0x2800 [ 707.248509][ C1] tcp_write_timer+0x12e/0x280 [ 707.253281][ C1] call_timer_fn+0x1ad/0x6b0 [ 707.257879][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 707.263077][ C1] ? call_timer_fn+0xc2/0x6b0 [ 707.267764][ C1] ? __run_timers+0x890/0x890 [ 707.272460][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 707.277661][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 707.282862][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 707.288069][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 707.293272][ C1] __run_timers+0x67c/0x890 [ 707.297795][ C1] ? detach_timer+0x380/0x380 [ 707.302486][ C1] ? print_irqtrace_events+0x210/0x210 [ 707.307952][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 707.314199][ C1] ? handle_softirqs+0x1ef/0xa40 [ 707.319155][ C1] run_timer_softirq+0x63/0xf0 [ 707.323926][ C1] handle_softirqs+0x2ee/0xa40 [ 707.328717][ C1] ? __irq_exit_rcu+0x157/0x240 [ 707.333590][ C1] ? do_softirq+0x240/0x240 [ 707.338103][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 707.343227][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 707.348435][ C1] __irq_exit_rcu+0x157/0x240 [ 707.353128][ C1] ? irq_exit_rcu+0x20/0x20 [ 707.357662][ C1] irq_exit_rcu+0x5/0x20 [ 707.361913][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 707.367553][ C1] [ 707.370487][ C1] [ 707.373421][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 707.379410][ C1] RIP: 0010:__up_read+0x25e/0x690 [ 707.384441][ C1] Code: 00 74 96 4c 89 ff e8 c1 66 78 00 eb 8c 48 8b 1c 24 48 89 df be 08 00 00 00 e8 ce 67 78 00 49 c7 c4 00 ff ff ff f0 4c 0f c1 23 <48> c7 c0 28 2e 9a 8e 48 c1 e8 03 48 bb 00 00 00 00 00 fc ff df 0f [ 707.404051][ C1] RSP: 0018:ffffc9000b417500 EFLAGS: 00000247 [ 707.410126][ C1] RAX: 0000000000000001 RBX: ffff88801b3c1ee8 RCX: ffffffff8169cb52 [ 707.418108][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88801b3c1ee8 [ 707.426084][ C1] RBP: ffffc9000b4175b8 R08: dffffc0000000000 R09: ffffed10036783de [ 707.434060][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000100 [ 707.442034][ C1] R13: ffff88801b3c1ef0 R14: 1ffff110036783de R15: ffffc9000b417540 [ 707.450022][ C1] ? __up_read+0x252/0x690 [ 707.454463][ C1] ? up_read+0x20/0x20 [ 707.458557][ C1] exc_page_fault+0x357/0x620 [ 707.463251][ C1] asm_exc_page_fault+0x22/0x30 [ 707.468112][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 707.474711][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 66 2e 0f 1f 84 00 00 00 00 00 [ 707.494331][ C1] RSP: 0018:ffffc9000b4176d0 EFLAGS: 00050206 [ 707.500394][ C1] RAX: ffffffff8437bc01 RBX: 00007fffffffb809 RCX: 00000000000022ff [ 707.508340][ C1] RDX: 00000000000037f7 RSI: 00000000200ee000 RDI: ffff8880831edd01 [ 707.516289][ C1] RBP: ffffc9000b417850 R08: dffffc0000000000 R09: ffffed101063e000 [ 707.524235][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000037f7 [ 707.532181][ C1] R13: 0000000000000000 R14: ffff8880831ec809 R15: 00000000200ecb08 [ 707.540133][ C1] ? copyin+0x31/0x120 [ 707.544186][ C1] copyin+0xd8/0x120 [ 707.548058][ C1] _copy_from_iter+0x493/0xff0 [ 707.552807][ C1] ? copyout_mc+0x100/0x100 [ 707.557285][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 707.563422][ C1] ? __check_object_size+0x4ca/0xa30 [ 707.568683][ C1] ? __check_object_size+0x4dd/0xa30 [ 707.573948][ C1] tcp_sendmsg_locked+0x173b/0x4100 [ 707.579153][ C1] ? tcp_set_state+0x7f0/0x7f0 [ 707.583891][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 707.589245][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 707.594422][ C1] tcp_sendmsg+0x2c/0x40 [ 707.598640][ C1] ? inet_send_prepare+0x250/0x250 [ 707.603729][ C1] ____sys_sendmsg+0x5a5/0x8f0 [ 707.608471][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 707.613479][ C1] __sys_sendmsg+0x2a9/0x390 [ 707.618044][ C1] ? ____sys_sendmsg+0x8f0/0x8f0 [ 707.622976][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 707.629104][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 707.634285][ C1] ? syscall_enter_from_user_mode+0x37/0x230 [ 707.640239][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 707.646196][ C1] do_syscall_64+0x3b/0xb0 [ 707.650586][ C1] ? clear_bhb_loop+0x45/0xa0 [ 707.655241][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 707.661110][ C1] RIP: 0033:0x7f33d4d7dff9 [ 707.665501][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.685078][ C1] RSP: 002b:00007f33d5c60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.693465][ C1] RAX: ffffffffffffffda RBX: 00007f33d4f35f80 RCX: 00007f33d4d7dff9 [ 707.701411][ C1] RDX: 00000000000052cc RSI: 0000000020000040 RDI: 000000000000000c [ 707.709355][ C1] RBP: 00007f33d4df0296 R08: 0000000000000000 R09: 0000000000000000 [ 707.717303][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.725246][ C1] R13: 0000000000000000 R14: 00007f33d4f35f80 R15: 00007fffbd0aa268 [ 707.733203][ C1] [ 707.766453][T17655] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 710.224948][ T3640] Bluetooth: hci2: command 0x0406 tx timeout [ 710.231036][ T3643] Bluetooth: hci3: command 0x0406 tx timeout [ 710.237099][ T3643] Bluetooth: hci1: command 0x0406 tx timeout [ 710.243188][ T48] Bluetooth: hci5: command 0x0406 tx timeout