last executing test programs: 8.822947669s ago: executing program 2 (id=2337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x9, 0x6, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1f, 0x80000, 0x7f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0)=0xa00, &(0x7f0000001700)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0xf, 0xbf, &(0x7f0000000540)=""/191, 0x41100, 0x54, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x5, 0x4}, 0x10, 0x12e75, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1], 0x0, 0x10, 0x3}, 0x94) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000000), &(0x7f00000000c0)=r6}, 0x20) sendmsg$inet(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) 7.712507378s ago: executing program 2 (id=2342): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000600), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x900b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x2, 0x0, 0x2800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x30004, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x501c, 0x7, 0x3ff, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x0, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={&(0x7f0000000440)="40369daf5d", &(0x7f0000000480)=""/51, &(0x7f00000005c0)="7016ad59676865b20b94a1311a27a6ec4388a12bdf3a62b0a3ca571c1656d8a9adb3b9714ff44feca7", &(0x7f0000000800)="ee477c1171b9de490fe84a875ccdec881b9bb944734b0871c0b7ab14bdbb743a16155320343db3353e882bea666e84fa6747b4047f98c0e6c2049a2c251053ba9ccedb5a8ac6b1b8642bba3803a488e79cd594a5f9eff37143127eb4341676d454ef638f9e70d089bad93d59e385772afef42f170e919b095fa6b228531b6db61e6a092bdec6c2e483ae6a4f06a96d7d0d773e705f6871bc24c5dd85bee3f93a3f6444624716e01c10f7b46943a8f353970ebbc5299be8c704f4fbbf1177d5242bfe3ef6cc30dda3f87bddf0a4934c42f759eff6136e3832e902584db7f18c35910ceaba2854073966b2eead3d45dad477baddbfe7", 0x2, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000400)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000002880)="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", 0x712}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x44000) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x3b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001340)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d", @ANYRES16=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 7.705977078s ago: executing program 3 (id=2343): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000580), 0x8, 0x2f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32, @ANYBLOB="03000000000000c1b62b91cd2800400000000000000000000000eb9a87e9a48c9e61f556cbcefdd551953e95a608b802992dd75c8b1cc8e8a9cf492205d33db79371e00e6a4b4df2d1eb52ea431d357b8cf4ed75a3a694cd0d5da3c771c0e323e24e23f307bfd2bf85040930c16bea4b3e7d9979c1b9a0b5463bcb9fb79cb73ec59716df824e8ab63e3f8fca899ab47463f94a98b2321c8c95f2f2dadc53178930", @ANYRES32=r3, @ANYRES32, @ANYBLOB="feffffff0500"/21], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x11, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000002c0)=@raw=[@ldst={0x2, 0x3, 0x1, 0x6, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x60, &(0x7f0000000740)=""/96, 0x41000, 0x48, '\x00', r3, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x9, 0x100, 0x5}, 0x10, 0x1e650, r1, 0x3, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x4, 0x1, 0x6}, {0x2, 0x1, 0x1}, {0x0, 0x3, 0xc, 0xb}], 0x10, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x80, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000711021000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$kcm(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0x52, &(0x7f0000000180)=[{0x0}], 0x1000001f, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x2}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x9}}], 0x30}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="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", 0x116}], 0x1, 0x0, 0x0, 0x39c}, 0x8005) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d0000000000000000000023a611b06e48ca90ce44d59050a38cb5995806d2365cc7647af3aec0ec2b8a5d7cea955e8953c6b37da49ed5fbcce2dd7abc03794151287f6e16f576886250471132f8f148237959960d120154b489c93d50ec028d16c1cdfecd42ff4b6216c0f669cc1dd87affbc2725", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 7.588258114s ago: executing program 1 (id=2344): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0xfe48) 7.214816423s ago: executing program 1 (id=2345): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="1c0000000988"}) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) 7.0777429s ago: executing program 2 (id=2346): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffdfffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0x10, 0x0, &(0x7f00000005c0)="20040000000000f10e586bda5eb7aa00", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r3}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x521800, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x40052cc) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000740)={0x2, &(0x7f0000000440)=[{0xc000, 0x0, 0x5, 0xf57}, {0x0, 0x6, 0xc, 0x2}]}) 6.668746892s ago: executing program 3 (id=2348): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0xff, 0xd, 0x5}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f0303", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 6.530023509s ago: executing program 1 (id=2349): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10797e, 0x2, @perf_config_ext={0x0, 0x20003fff8002}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x100200c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000e1ffffffff0d000080000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000280)=""/102, 0x66}], 0x1}, 0x102) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x9, 0x444bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800114004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b3fd25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r9 = gettid() openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r10 = perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x80, 0x2, 0x2, 0xf, 0xb, 0x0, 0x2, 0x20, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe75, 0x2, @perf_bp={&(0x7f0000000600), 0xc}, 0xaa21, 0xda, 0x8, 0x5, 0x5, 0xe84, 0x9, 0x0, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0x8, r0, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x448a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0xb, 0xa42e11, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$kcm(0x2, 0x5, 0x84) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x77, &(0x7f0000000000)=r12, 0x62) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0xd, 0x80, 0x1, 0x40, 0x0, 0x1, 0xc10c0, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x971dc1787f4e8123, @perf_bp={&(0x7f00000000c0), 0xf}, 0x4410, 0xf6f, 0x4, 0x8, 0x0, 0x7, 0x70c, 0x0, 0x3, 0x0, 0xffffffffffffff3b}, r9, 0xe, r10, 0x2) close(r2) 6.51260106s ago: executing program 0 (id=2357): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 6.228541515s ago: executing program 0 (id=2350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x9, 0x6, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1f, 0x80000, 0x7f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0)=0xa00, &(0x7f0000001700)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0xf, 0xbf, &(0x7f0000000540)=""/191, 0x41100, 0x54, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x5, 0x4}, 0x10, 0x12e75, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1], 0x0, 0x10, 0x3}, 0x94) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000000), &(0x7f00000000c0)=r6}, 0x20) sendmsg$inet(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) 6.139419089s ago: executing program 2 (id=2351): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b0000000000"], 0xfdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) 3.161731535s ago: executing program 1 (id=2352): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d080410000000000002a1180015000600142603600e1208000f0000810401a80016002000014003fc002007391bd06b", 0x41}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073", 0x94}, {&(0x7f00000002c0)="8710dc", 0x3}], 0x3, 0x0, 0x0, 0x7400}, 0x48080) 3.142926826s ago: executing program 0 (id=2361): r0 = socket$kcm(0x11, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={&(0x7f00000006c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/31, 0x1f}, {&(0x7f0000000780)}], 0x2, &(0x7f0000000800)=""/226, 0xe2}, 0x40002162) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x5, 0x4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xec, 0x0, 0x10, 0x1, 0x0, 0x1, 0x659e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x800}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x1d}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, 0x0, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000380)={r4}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e1000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/28], 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{}, {0x0}, {&(0x7f0000000280)="361821115e14f86a63bdc82263fd025352b745c5ccb9b02f4d23c84f4d0533b4a85028bf5f6a28b9c85deb209dabc7fc9b614415c1a4116328902eb5066272b1644dc7dbc6dcbf59f83ab6e1b197a0f974047367c76aaa4de011f7bd56531a4701cef33e77e9dbeacff1e259793baae10c0f33f9295f22e893f8df29aeb213854669f2d449397b3c0e79e421ee2b8f870af0922ec6f3630c23017e5691652712383300c6c3ee12b61148510eab6a18fb8263f52bb535f1a6e5d695672b2611f099b9452ffcc5a5b97b327cb53e7e3346a13df96a4d928ab5a280d71979d143dfa32bf4ec66cc28", 0xe7}], 0x3}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7b, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="000000000000000095000000000000e39400000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 3.103024228s ago: executing program 3 (id=2353): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0xfe48) 3.05758543s ago: executing program 2 (id=2354): socket$kcm(0xa, 0x2, 0x3a) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000340)={0x0, 0x80, 0x7, 0xc5, 0xf5, 0x6, 0x0, 0xd800, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000200)}, 0x8003, 0x1, 0xf190, 0x9, 0x9, 0x1, 0x7b, 0x0, 0x8001, 0x0, 0xfffffffffffffff9}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x9, &(0x7f0000000c40), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000a300"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000002000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600966e5401a7db4f1200004d9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x10}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 2.841523761s ago: executing program 1 (id=2355): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4102}, 0x30004081) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) recvmsg(r0, 0x0, 0x102) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000002030000000000fbf6cc23000b0000000000000000000000090200000000"], 0x0, 0x3e}, 0x28) r4 = syz_clone(0x880, &(0x7f00000002c0)="b58034d6456512d8e8f9a4a769f58e8323321da4bf8d4f8e71e97691c1212995011177b9691c125e06a6f10a6a7bf4da2b14dda2420a2260adcecbac2f62ce612e45465e0594753f6ebc86eac55efca7c260a4f93757e01e3da92d2f8cf20883e83325977cc4e645245c395d950cfd0c7a5815960d6c26a9246e4b2c9a6195585589b8d09be8c90f8f33a5b029eca86de33ed39b23b354b62ce191c62daaede50f390a49f14f35aa4bde2082", 0xac, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000500)="364da21e5e5f9c82bb58b4e5997f349f68811fc3ca60e20076ee49ab702cf16b0f5810bf4bb71b3e4e78be60f560ab4011f1be2e16551d72c4601e660693") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, r4, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 2.625136623s ago: executing program 3 (id=2356): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000580), 0x8, 0x2f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32, @ANYBLOB="03000000000000c1b62b91cd2800400000000000000000000000eb9a87e9a48c9e61f556cbcefdd551953e95a608b802992dd75c8b1cc8e8a9cf492205d33db79371e00e6a4b4df2d1eb52ea431d357b8cf4ed75a3a694cd0d5da3c771c0e323e24e23f307bfd2bf85040930c16bea4b3e7d9979c1b9a0b5463bcb9fb79cb73ec59716df824e8ab63e3f8fca899ab47463f94a98b2321c8c95f2f2dadc53178930", @ANYRES32=r3, @ANYRES32, @ANYBLOB="feffffff0500"/21], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x11, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000002c0)=@raw=[@ldst={0x2, 0x3, 0x1, 0x6, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x60, &(0x7f0000000740)=""/96, 0x41000, 0x48, '\x00', r3, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x9, 0x100, 0x5}, 0x10, 0x1e650, r1, 0x3, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x4, 0x1, 0x6}, {0x2, 0x1, 0x1}, {0x0, 0x3, 0xc, 0xb}], 0x10, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x80, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000711021000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$kcm(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0x52, &(0x7f0000000180)=[{0x0}], 0x1000001f, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x2}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x9}}], 0x30}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="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", 0x116}], 0x1, 0x0, 0x0, 0x39c}, 0x8005) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d0000000000000000000023a611b06e48ca90ce44d59050a38cb5995806d2365cc7647af3aec0ec2b8a5d7cea955e8953c6b37da49ed5fbcce2dd7abc03794151287f6e16f576886250471132f8f148237959960d120154b489c93d50ec028d16c1cdfecd42ff4b6216c0f669cc1dd87affbc2725", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 2.019945085s ago: executing program 0 (id=2358): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="1c0000000988"}) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) 2.019518705s ago: executing program 1 (id=2359): socket$kcm(0xa, 0x2, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x680e00, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3c}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0xffffffffffffff0e}, 0x808) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400014002020a600e41b0000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8917, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYBLOB="02b6e7f3fac1b6a1504e2dff5fe800"/29]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x11}, 0x94) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000240)=""/179) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.887253341s ago: executing program 2 (id=2360): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffdfffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0x10, 0x0, &(0x7f00000005c0)="20040000000000f10e586bda5eb7aa00", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r3}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x521800, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x40052cc) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000740)={0x2, &(0x7f0000000440)=[{0xc000, 0x0, 0x5, 0xf57}, {0x0, 0x6, 0xc, 0x2}]}) 1.213926446s ago: executing program 0 (id=2362): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x9, 0x6, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1f, 0x80000, 0x7f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f00000016c0)=0xa00, &(0x7f0000001700)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0xf, 0xbf, &(0x7f0000000540)=""/191, 0x41100, 0x54, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x5, 0x4}, 0x10, 0x12e75, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0x1], 0x0, 0x10, 0x3}, 0x94) r4 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000000), &(0x7f00000000c0)=r6}, 0x20) sendmsg$inet(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) 1.212424506s ago: executing program 3 (id=2363): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000001580)='devices.deny\x00', 0x2, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="140000003d000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:*\t'], 0xa) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3c, &(0x7f0000000500)=r8, 0x4) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x9, 0x7}, 0x8804, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r11, 0x0, 0x10, 0x0, &(0x7f00000005c0)="20040000000000f10e586bda5eb7aa00", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 508.682843ms ago: executing program 0 (id=2364): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) 0s ago: executing program 3 (id=2365): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0xff, 0xd, 0x5}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f0303", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) kernel console output (not intermixed with test programs): 75.673233][T10160] should_fail_ex+0x39d/0x4d0 [ 375.678067][T10160] should_failslab+0x9/0x20 [ 375.682636][T10160] slab_pre_alloc_hook+0x59/0x310 [ 375.687740][T10160] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 375.693347][T10160] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 375.698958][T10160] __kmem_cache_alloc_node+0x53/0x250 [ 375.704411][T10160] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 375.710003][T10160] __kmalloc+0xa4/0x230 [ 375.714212][T10160] bpf_prog_test_run_skb+0x238/0x12b0 [ 375.719709][T10160] ? lockdep_hardirqs_on+0x98/0x150 [ 375.724946][T10160] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 375.731149][T10160] ? cpu_online+0x60/0x60 [ 375.735554][T10160] bpf_prog_test_run+0x321/0x390 [ 375.740561][T10160] __sys_bpf+0x49d/0x890 [ 375.744932][T10160] ? bpf_link_show_fdinfo+0x390/0x390 [ 375.750354][T10160] ? lock_chain_count+0x20/0x20 [ 375.755251][T10160] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 375.761273][T10160] __x64_sys_bpf+0x7c/0x90 [ 375.765766][T10160] do_syscall_64+0x55/0xa0 [ 375.770215][T10160] ? clear_bhb_loop+0x40/0x90 [ 375.774942][T10160] ? clear_bhb_loop+0x40/0x90 [ 375.779660][T10160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.785608][T10160] RIP: 0033:0x7fbfbcf9c819 [ 375.790053][T10160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.809900][T10160] RSP: 002b:00007fbfbde44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.818721][T10160] RAX: ffffffffffffffda RBX: 00007fbfbd215fa0 RCX: 00007fbfbcf9c819 [ 375.826901][T10160] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 375.834939][T10160] RBP: 00007fbfbde44090 R08: 0000000000000000 R09: 0000000000000000 [ 375.842961][T10160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.851083][T10160] R13: 00007fbfbd216038 R14: 00007fbfbd215fa0 R15: 00007ffda861d468 [ 375.859122][T10160] [ 376.305730][T10169] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1496'. [ 378.986661][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.994315][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.018331][T10208] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 380.026716][T10208] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1509'. [ 380.241128][T10218] netlink: 'syz.2.1511': attribute type 10 has an invalid length. [ 380.271016][T10218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1511'. [ 380.290969][T10218] netlink: 'syz.2.1511': attribute type 10 has an invalid length. [ 380.298869][T10218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1511'. [ 380.364128][T10219] netlink: 'syz.2.1511': attribute type 10 has an invalid length. [ 380.373871][T10219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1511'. [ 382.125679][T10254] netlink: 'syz.1.1525': attribute type 10 has an invalid length. [ 382.211206][T10254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1525'. [ 383.563752][T10279] syzkaller0: entered promiscuous mode [ 383.569340][T10279] syzkaller0: entered allmulticast mode [ 383.580314][T10279] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 384.948737][T10301] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1539'. [ 384.959915][T10301] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1539'. [ 384.971794][T10301] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1539'. [ 384.989355][T10294] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1539'. [ 385.156552][T10302] netlink: 'syz.2.1539': attribute type 10 has an invalid length. [ 385.165007][T10302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1539'. [ 385.181313][T10302] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 386.834730][T10306] ¿: renamed from vlan0 (while UP) [ 386.851655][T10306] FAULT_INJECTION: forcing a failure. [ 386.851655][T10306] name failslab, interval 1, probability 0, space 0, times 0 [ 386.879890][T10306] CPU: 0 PID: 10306 Comm: syz.3.1542 Not tainted syzkaller #0 [ 386.887448][T10306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 386.897581][T10306] Call Trace: [ 386.900912][T10306] [ 386.903903][T10306] dump_stack_lvl+0x18c/0x250 [ 386.908668][T10306] ? show_regs_print_info+0x20/0x20 [ 386.913949][T10306] ? load_image+0x420/0x420 [ 386.918553][T10306] ? __might_sleep+0xe0/0xe0 [ 386.923218][T10306] ? __lock_acquire+0x7d40/0x7d40 [ 386.928329][T10306] should_fail_ex+0x39d/0x4d0 [ 386.933100][T10306] should_failslab+0x9/0x20 [ 386.937683][T10306] slab_pre_alloc_hook+0x59/0x310 [ 386.942818][T10306] ? __kernfs_new_node+0xaa/0x810 [ 386.947923][T10306] ? rcu_is_watching+0x15/0xb0 [ 386.952797][T10306] kmem_cache_alloc+0x5a/0x2d0 [ 386.957691][T10306] ? __kernfs_new_node+0xe5/0x810 [ 386.962810][T10306] __kernfs_new_node+0xe5/0x810 [ 386.967743][T10306] ? widen_string+0x3b/0x2b0 [ 386.972402][T10306] ? string+0x26d/0x2b0 [ 386.976627][T10306] ? kernfs_new_node+0x260/0x260 [ 386.981684][T10306] ? sysfs_do_create_link_sd+0x75/0x110 [ 386.987317][T10306] kernfs_new_node+0x14c/0x260 [ 386.992188][T10306] kernfs_create_link+0xa7/0x200 [ 386.997319][T10306] sysfs_do_create_link_sd+0x83/0x110 [ 387.003044][T10306] netdev_adjacent_rename_links+0x448/0x500 [ 387.009037][T10306] ? dev_change_name+0x8c0/0x8c0 [ 387.014068][T10306] ? lockdep_hardirqs_on+0x98/0x150 [ 387.019475][T10306] ? dev_change_name+0x36f/0x8c0 [ 387.024535][T10306] ? kobject_init_and_add+0x1a0/0x1a0 [ 387.029996][T10306] ? device_rename+0x1ac/0x1e0 [ 387.034843][T10306] ? __kmem_cache_free+0xba/0x1e0 [ 387.039957][T10306] ? up_write+0x1c3/0x410 [ 387.044366][T10306] ? device_rename+0x1ac/0x1e0 [ 387.049388][T10306] dev_change_name+0x37a/0x8c0 [ 387.054227][T10306] ? end_current_label_crit_section+0x170/0x170 [ 387.060664][T10306] ? dev_alloc_name+0x1d0/0x1d0 [ 387.065587][T10306] ? full_name_hash+0x92/0xe0 [ 387.070363][T10306] ? dev_ifsioc+0x316/0xc40 [ 387.074952][T10306] dev_ioctl+0x5ec/0x1140 [ 387.079374][T10306] sock_do_ioctl+0x239/0x310 [ 387.084059][T10306] ? sock_show_fdinfo+0xb0/0xb0 [ 387.089044][T10306] sock_ioctl+0x5ba/0x7e0 [ 387.093553][T10306] ? sock_poll+0x3e0/0x3e0 [ 387.098082][T10306] ? bpf_lsm_file_ioctl+0x9/0x10 [ 387.103118][T10306] ? security_file_ioctl+0x80/0xa0 [ 387.108310][T10306] ? sock_poll+0x3e0/0x3e0 [ 387.112839][T10306] __se_sys_ioctl+0xfd/0x170 [ 387.117608][T10306] do_syscall_64+0x55/0xa0 [ 387.122106][T10306] ? clear_bhb_loop+0x40/0x90 [ 387.126868][T10306] ? clear_bhb_loop+0x40/0x90 [ 387.131727][T10306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.137696][T10306] RIP: 0033:0x7f15b8d9c819 [ 387.142180][T10306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.161864][T10306] RSP: 002b:00007f15b9d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.170461][T10306] RAX: ffffffffffffffda RBX: 00007f15b9015fa0 RCX: 00007f15b8d9c819 [ 387.178528][T10306] RDX: 0000200000000500 RSI: 0000000000008923 RDI: 0000000000000005 [ 387.186588][T10306] RBP: 00007f15b9d11090 R08: 0000000000000000 R09: 0000000000000000 [ 387.194635][T10306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.202688][T10306] R13: 00007f15b9016038 R14: 00007f15b9015fa0 R15: 00007ffea7fb0db8 [ 387.210770][T10306] [ 387.259602][T10310] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1544'. [ 387.297531][T10310] netlink: 'syz.1.1544': attribute type 10 has an invalid length. [ 387.330989][T10310] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.1544'. [ 387.384027][T10310] C: renamed from team_slave_0 [ 387.487859][T10310] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 387.543235][T10310] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1544'. [ 387.557876][T10310] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 387.591997][T10312] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 387.917253][T10327] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1549'. [ 387.928982][T10327] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1549'. [ 387.942061][T10327] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1549'. [ 387.956668][T10327] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1549'. [ 392.417873][T10353] netlink: 'syz.0.1557': attribute type 10 has an invalid length. [ 392.494828][T10349] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1557'. [ 392.532140][T10349] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 393.107346][T10358] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1558'. [ 393.766387][T10358] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1558'. [ 393.777492][T10366] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 393.790807][T10366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1558'. [ 394.019708][T10377] FAULT_INJECTION: forcing a failure. [ 394.019708][T10377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.034522][T10377] CPU: 0 PID: 10377 Comm: syz.2.1563 Not tainted syzkaller #0 [ 394.042067][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 394.052182][T10377] Call Trace: [ 394.055510][T10377] [ 394.058497][T10377] dump_stack_lvl+0x18c/0x250 [ 394.063251][T10377] ? show_regs_print_info+0x20/0x20 [ 394.068609][T10377] ? load_image+0x420/0x420 [ 394.073184][T10377] ? __might_fault+0xaa/0x120 [ 394.077922][T10377] ? __lock_acquire+0x7d40/0x7d40 [ 394.083011][T10377] should_fail_ex+0x39d/0x4d0 [ 394.087773][T10377] _copy_from_user+0x2f/0xe0 [ 394.092441][T10377] ___sys_sendmsg+0x1c7/0x360 [ 394.097212][T10377] ? get_pid_task+0x20/0x1e0 [ 394.101874][T10377] ? __sys_sendmsg+0x2a0/0x2a0 [ 394.106725][T10377] ? __lock_acquire+0x7d40/0x7d40 [ 394.111916][T10377] __se_sys_sendmsg+0x1c2/0x2b0 [ 394.116839][T10377] ? __x64_sys_sendmsg+0x80/0x80 [ 394.121855][T10377] ? lockdep_hardirqs_on+0x98/0x150 [ 394.127193][T10377] do_syscall_64+0x55/0xa0 [ 394.131646][T10377] ? clear_bhb_loop+0x40/0x90 [ 394.136453][T10377] ? clear_bhb_loop+0x40/0x90 [ 394.141262][T10377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.147212][T10377] RIP: 0033:0x7fbfbcf9c819 [ 394.151691][T10377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.171432][T10377] RSP: 002b:00007fbfbde44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.179882][T10377] RAX: ffffffffffffffda RBX: 00007fbfbd215fa0 RCX: 00007fbfbcf9c819 [ 394.187925][T10377] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 394.195937][T10377] RBP: 00007fbfbde44090 R08: 0000000000000000 R09: 0000000000000000 [ 394.203957][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.211973][T10377] R13: 00007fbfbd216038 R14: 00007fbfbd215fa0 R15: 00007ffda861d468 [ 394.220006][T10377] [ 394.396099][T10383] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1565'. [ 394.406426][T10383] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 396.501119][T10405] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1570'. [ 396.846848][T10405] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1570'. [ 396.858142][T10410] netlink: 'syz.1.1570': attribute type 10 has an invalid length. [ 396.874042][T10410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1570'. [ 396.888053][T10410] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 396.911345][T10398] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1570'. [ 396.925675][T10407] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1570'. [ 398.382023][T10436] IPv6: Can't replace route, no match found [ 400.495991][T10450] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1588'. [ 400.520958][T10450] bridge_slave_1: default FDB implementation only supports local addresses [ 401.842938][T10456] FAULT_INJECTION: forcing a failure. [ 401.842938][T10456] name failslab, interval 1, probability 0, space 0, times 0 [ 401.857596][T10456] CPU: 1 PID: 10456 Comm: syz.3.1582 Not tainted syzkaller #0 [ 401.865143][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 401.875249][T10456] Call Trace: [ 401.878579][T10456] [ 401.881564][T10456] dump_stack_lvl+0x18c/0x250 [ 401.886307][T10456] ? sctp_sendmsg+0x1575/0x28c0 [ 401.891212][T10456] ? ___sys_sendmsg+0x2a6/0x360 [ 401.896126][T10456] ? show_regs_print_info+0x20/0x20 [ 401.901404][T10456] ? load_image+0x420/0x420 [ 401.905996][T10456] should_fail_ex+0x39d/0x4d0 [ 401.910741][T10456] should_failslab+0x9/0x20 [ 401.915306][T10456] slab_pre_alloc_hook+0x59/0x310 [ 401.920382][T10456] ? sctp_add_bind_addr+0x8c/0x360 [ 401.925619][T10456] __kmem_cache_alloc_node+0x53/0x250 [ 401.931036][T10456] ? sctp_add_bind_addr+0x8c/0x360 [ 401.936198][T10456] kmalloc_trace+0x2a/0xe0 [ 401.940661][T10456] sctp_add_bind_addr+0x8c/0x360 [ 401.945653][T10456] sctp_copy_local_addr_list+0x315/0x4f0 [ 401.951589][T10456] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 401.957341][T10456] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 401.963444][T10456] ? sctp_v6_is_any+0x64/0x70 [ 401.968165][T10456] ? sctp_copy_one_addr+0x8c/0x350 [ 401.973629][T10456] sctp_bind_addr_copy+0xb3/0x3c0 [ 401.978799][T10456] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 401.985219][T10456] sctp_connect_new_asoc+0x2f9/0x6a0 [ 401.990566][T10456] ? __sctp_connect+0xd80/0xd80 [ 401.995480][T10456] ? __local_bh_enable_ip+0x13a/0x1c0 [ 402.000981][T10456] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 402.006559][T10456] ? security_sctp_bind_connect+0x89/0xb0 [ 402.012401][T10456] sctp_sendmsg+0x1575/0x28c0 [ 402.017401][T10456] ? sctp_getsockopt+0xb60/0xb60 [ 402.022385][T10456] ? aa_sk_perm+0x83c/0x970 [ 402.026956][T10456] ? aa_af_perm+0x330/0x330 [ 402.031501][T10456] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 402.037964][T10456] ? sock_rps_record_flow+0x19/0x3f0 [ 402.043424][T10456] ? inet_sendmsg+0xe9/0x2f0 [ 402.048142][T10456] ? inet_send_prepare+0x260/0x260 [ 402.053315][T10456] ____sys_sendmsg+0x5ba/0x960 [ 402.058125][T10456] ? __lock_acquire+0x7d40/0x7d40 [ 402.063235][T10456] ? __asan_memset+0x22/0x40 [ 402.067867][T10456] ? __sys_sendmsg_sock+0x30/0x30 [ 402.072933][T10456] ? __import_iovec+0x5f2/0x850 [ 402.077916][T10456] ? import_iovec+0x73/0xa0 [ 402.082469][T10456] ___sys_sendmsg+0x2a6/0x360 [ 402.087193][T10456] ? __sys_sendmsg+0x2a0/0x2a0 [ 402.092025][T10456] ? __lock_acquire+0x7d40/0x7d40 [ 402.097112][T10456] __se_sys_sendmsg+0x1c2/0x2b0 [ 402.102087][T10456] ? __x64_sys_sendmsg+0x80/0x80 [ 402.107127][T10456] ? lockdep_hardirqs_on+0x98/0x150 [ 402.112456][T10456] do_syscall_64+0x55/0xa0 [ 402.116902][T10456] ? clear_bhb_loop+0x40/0x90 [ 402.121612][T10456] ? clear_bhb_loop+0x40/0x90 [ 402.126420][T10456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.132363][T10456] RIP: 0033:0x7f15b8d9c819 [ 402.136813][T10456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.156541][T10456] RSP: 002b:00007f15b9d11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.165078][T10456] RAX: ffffffffffffffda RBX: 00007f15b9015fa0 RCX: 00007f15b8d9c819 [ 402.173365][T10456] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 402.181554][T10456] RBP: 00007f15b9d11090 R08: 0000000000000000 R09: 0000000000000000 [ 402.189550][T10456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.197550][T10456] R13: 00007f15b9016038 R14: 00007f15b9015fa0 R15: 00007ffea7fb0db8 [ 402.205664][T10456] [ 402.665466][ T2971] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 402.678805][T10459] netlink: 'syz.0.1583': attribute type 6 has an invalid length. [ 402.700787][T10459] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1583'. [ 402.721124][T10460] IPv6: Can't replace route, no match found [ 404.152234][T10475] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1584'. [ 404.169556][T10475] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1584'. [ 404.182096][T10471] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1584'. [ 404.201962][T10475] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1584'. [ 404.351754][T10471] netlink: 'syz.0.1584': attribute type 10 has an invalid length. [ 404.361693][T10471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1584'. [ 404.388816][T10471] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 410.823000][T10540] netlink: 'syz.3.1610': attribute type 10 has an invalid length. [ 410.947831][T10544] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1613'. [ 411.430962][T10555] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1617'. [ 412.758437][T10582] netlink: 'syz.0.1625': attribute type 21 has an invalid length. [ 412.768033][T10582] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1625'. [ 413.427047][T10564] delete_channel: no stack [ 413.665280][T10591] netlink: 'syz.3.1627': attribute type 10 has an invalid length. [ 415.550828][T10611] FAULT_INJECTION: forcing a failure. [ 415.550828][T10611] name failslab, interval 1, probability 0, space 0, times 0 [ 415.567136][T10611] CPU: 1 PID: 10611 Comm: syz.3.1638 Not tainted syzkaller #0 [ 415.574685][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.584796][T10611] Call Trace: [ 415.588120][T10611] [ 415.591097][T10611] dump_stack_lvl+0x18c/0x250 [ 415.595882][T10611] ? show_regs_print_info+0x20/0x20 [ 415.601148][T10611] ? load_image+0x420/0x420 [ 415.605739][T10611] should_fail_ex+0x39d/0x4d0 [ 415.610572][T10611] should_failslab+0x9/0x20 [ 415.615236][T10611] slab_pre_alloc_hook+0x59/0x310 [ 415.620512][T10611] ? __lock_acquire+0x1273/0x7d40 [ 415.625605][T10611] ? sctp_bind_addrs_to_raw+0x10b/0x350 [ 415.631380][T10611] ? sctp_bind_addrs_to_raw+0x10b/0x350 [ 415.637048][T10611] __kmem_cache_alloc_node+0x53/0x250 [ 415.642588][T10611] ? sctp_bind_addrs_to_raw+0x10b/0x350 [ 415.648198][T10611] __kmalloc+0xa4/0x230 [ 415.652422][T10611] sctp_bind_addrs_to_raw+0x10b/0x350 [ 415.657859][T10611] ? sctp_del_bind_addr+0x190/0x190 [ 415.663113][T10611] sctp_make_init+0x172/0xfc0 [ 415.667859][T10611] ? sctp_addto_chunk+0x230/0x230 [ 415.673082][T10611] ? kernel_text_address+0xa0/0xd0 [ 415.678247][T10611] ? __kernel_text_address+0xd/0x30 [ 415.683592][T10611] ? unwind_get_return_address+0x91/0xc0 [ 415.689363][T10611] ? stack_trace_save+0x100/0x100 [ 415.694534][T10611] ? arch_stack_walk+0x160/0x190 [ 415.699534][T10611] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 415.704810][T10611] sctp_do_sm+0x23a/0x5a60 [ 415.709621][T10611] ? sctp_cname+0x110/0x110 [ 415.714184][T10611] ? __stack_depot_save+0x1f/0x630 [ 415.719354][T10611] ? kasan_set_track+0x4e/0x70 [ 415.724198][T10611] ? __kasan_kmalloc+0x8f/0xa0 [ 415.729019][T10611] ? sctp_stream_init_ext+0x57/0x170 [ 415.734352][T10611] ? sctp_sendmsg_to_asoc+0x1324/0x1830 [ 415.739954][T10611] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 415.745893][T10611] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 415.750969][T10611] ? do_syscall_64+0x55/0xa0 [ 415.755603][T10611] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.761759][T10611] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 415.767631][T10611] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 415.773056][T10611] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 415.778508][T10611] ? __asan_memcpy+0x40/0x70 [ 415.783170][T10611] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 415.788618][T10611] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 415.794488][T10611] ? __sctp_connect+0xd80/0xd80 [ 415.799390][T10611] ? __local_bh_enable_ip+0x13a/0x1c0 [ 415.804910][T10611] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 415.810512][T10611] ? security_sctp_bind_connect+0x89/0xb0 [ 415.816303][T10611] sctp_sendmsg+0x1b83/0x28c0 [ 415.821059][T10611] ? sctp_getsockopt+0xb60/0xb60 [ 415.826057][T10611] ? aa_sk_perm+0x83c/0x970 [ 415.830641][T10611] ? aa_af_perm+0x330/0x330 [ 415.835203][T10611] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 415.841688][T10611] ? sock_rps_record_flow+0x19/0x3f0 [ 415.847064][T10611] ? inet_sendmsg+0xe9/0x2f0 [ 415.851715][T10611] ? inet_send_prepare+0x260/0x260 [ 415.856914][T10611] ____sys_sendmsg+0x5ba/0x960 [ 415.861730][T10611] ? __lock_acquire+0x7d40/0x7d40 [ 415.866807][T10611] ? __asan_memset+0x22/0x40 [ 415.871459][T10611] ? __sys_sendmsg_sock+0x30/0x30 [ 415.876544][T10611] ? __import_iovec+0x5f2/0x850 [ 415.881457][T10611] ? import_iovec+0x73/0xa0 [ 415.886052][T10611] ___sys_sendmsg+0x2a6/0x360 [ 415.890873][T10611] ? __sys_sendmsg+0x2a0/0x2a0 [ 415.895745][T10611] ? trace_call_bpf+0xc3/0x6c0 [ 415.900602][T10611] __se_sys_sendmsg+0x1c2/0x2b0 [ 415.905506][T10611] ? __x64_sys_sendmsg+0x80/0x80 [ 415.910510][T10611] ? lockdep_hardirqs_on+0x98/0x150 [ 415.915761][T10611] do_syscall_64+0x55/0xa0 [ 415.920281][T10611] ? clear_bhb_loop+0x40/0x90 [ 415.925205][T10611] ? clear_bhb_loop+0x40/0x90 [ 415.930022][T10611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.936017][T10611] RIP: 0033:0x7f15b8d9c819 [ 415.940752][T10611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.960423][T10611] RSP: 002b:00007f15b9d11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.969076][T10611] RAX: ffffffffffffffda RBX: 00007f15b9015fa0 RCX: 00007f15b8d9c819 [ 415.977098][T10611] RDX: 000000000000c000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 415.985117][T10611] RBP: 00007f15b9d11090 R08: 0000000000000000 R09: 0000000000000000 [ 415.993129][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 416.001152][T10611] R13: 00007f15b9016038 R14: 00007f15b9015fa0 R15: 00007ffea7fb0db8 [ 416.009192][T10611] [ 416.607382][T10619] netlink: 'syz.0.1641': attribute type 29 has an invalid length. [ 416.618937][T10619] netlink: 'syz.0.1641': attribute type 29 has an invalid length. [ 416.875001][T10626] netlink: 'syz.2.1642': attribute type 10 has an invalid length. [ 418.667250][T10666] netlink: 'syz.1.1656': attribute type 10 has an invalid length. [ 418.883967][T10670] netlink: 'syz.3.1657': attribute type 29 has an invalid length. [ 418.893627][T10670] netlink: 'syz.3.1657': attribute type 29 has an invalid length. [ 421.557128][T10695] netlink: 'syz.0.1667': attribute type 3 has an invalid length. [ 421.585270][T10695] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1667'. [ 421.909521][T10706] syzkaller0: entered promiscuous mode [ 421.915372][T10706] syzkaller0: entered allmulticast mode [ 422.549837][T10713] netlink: 'syz.3.1672': attribute type 10 has an invalid length. [ 422.687438][T10717] netlink: 'syz.1.1674': attribute type 29 has an invalid length. [ 422.701975][T10717] netlink: 'syz.1.1674': attribute type 29 has an invalid length. [ 425.908925][T10757] netlink: 'syz.1.1687': attribute type 10 has an invalid length. [ 426.660954][T10767] netlink: 'syz.3.1693': attribute type 17 has an invalid length. [ 426.675177][T10767] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1693'. [ 426.917408][T10780] netlink: 'syz.3.1696': attribute type 22 has an invalid length. [ 427.743544][T10801] netlink: 'syz.2.1703': attribute type 10 has an invalid length. [ 428.046163][T10805] syzkaller0: entered promiscuous mode [ 428.052246][T10805] syzkaller0: entered allmulticast mode [ 429.547131][T10829] netlink: 'syz.2.1713': attribute type 17 has an invalid length. [ 429.570804][T10829] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1713'. [ 429.855247][T10837] netlink: 'syz.0.1716': attribute type 10 has an invalid length. [ 431.559235][T10869] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1727'. [ 432.678883][T10897] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1736'. [ 432.700428][T10897] bridge_slave_1: default FDB implementation only supports local addresses [ 433.396190][T10924] netlink: 'syz.3.1745': attribute type 17 has an invalid length. [ 433.404731][T10924] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1745'. [ 433.627768][T10926] FAULT_INJECTION: forcing a failure. [ 433.627768][T10926] name failslab, interval 1, probability 0, space 0, times 0 [ 433.641415][T10926] CPU: 0 PID: 10926 Comm: syz.3.1746 Not tainted syzkaller #0 [ 433.649027][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 433.659306][T10926] Call Trace: [ 433.662660][T10926] [ 433.665723][T10926] dump_stack_lvl+0x18c/0x250 [ 433.670474][T10926] ? sctp_sendmsg+0x1575/0x28c0 [ 433.675839][T10926] ? ___sys_sendmsg+0x2a6/0x360 [ 433.680789][T10926] ? show_regs_print_info+0x20/0x20 [ 433.686139][T10926] ? load_image+0x420/0x420 [ 433.690815][T10926] should_fail_ex+0x39d/0x4d0 [ 433.695569][T10926] should_failslab+0x9/0x20 [ 433.700223][T10926] slab_pre_alloc_hook+0x59/0x310 [ 433.705316][T10926] ? sctp_add_bind_addr+0x8c/0x360 [ 433.710779][T10926] __kmem_cache_alloc_node+0x53/0x250 [ 433.716313][T10926] ? sctp_add_bind_addr+0x8c/0x360 [ 433.721571][T10926] kmalloc_trace+0x2a/0xe0 [ 433.726046][T10926] sctp_add_bind_addr+0x8c/0x360 [ 433.731042][T10926] sctp_copy_local_addr_list+0x315/0x4f0 [ 433.736921][T10926] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 433.742840][T10926] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 433.749071][T10926] ? sctp_v4_is_any+0x35/0x60 [ 433.753823][T10926] ? sctp_copy_one_addr+0x8c/0x350 [ 433.759001][T10926] sctp_bind_addr_copy+0xb3/0x3c0 [ 433.764094][T10926] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 433.770585][T10926] sctp_connect_new_asoc+0x2f9/0x6a0 [ 433.776115][T10926] ? __sctp_connect+0xd80/0xd80 [ 433.781029][T10926] ? __local_bh_enable_ip+0x13a/0x1c0 [ 433.786474][T10926] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 433.792093][T10926] ? security_sctp_bind_connect+0x89/0xb0 [ 433.798181][T10926] sctp_sendmsg+0x1575/0x28c0 [ 433.802971][T10926] ? sctp_getsockopt+0xb60/0xb60 [ 433.808122][T10926] ? aa_sk_perm+0x83c/0x970 [ 433.812744][T10926] ? aa_af_perm+0x330/0x330 [ 433.817317][T10926] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 433.823801][T10926] ? sock_rps_record_flow+0x19/0x3f0 [ 433.829163][T10926] ? inet_sendmsg+0xe9/0x2f0 [ 433.833840][T10926] ? inet_send_prepare+0x260/0x260 [ 433.839020][T10926] ____sys_sendmsg+0x5ba/0x960 [ 433.843840][T10926] ? __lock_acquire+0x7d40/0x7d40 [ 433.849023][T10926] ? __asan_memset+0x22/0x40 [ 433.853686][T10926] ? __sys_sendmsg_sock+0x30/0x30 [ 433.858770][T10926] ? __import_iovec+0x5f2/0x850 [ 433.863694][T10926] ? import_iovec+0x73/0xa0 [ 433.868347][T10926] ___sys_sendmsg+0x2a6/0x360 [ 433.873291][T10926] ? __sys_sendmsg+0x2a0/0x2a0 [ 433.878139][T10926] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 433.884563][T10926] __se_sys_sendmsg+0x1c2/0x2b0 [ 433.889487][T10926] ? __x64_sys_sendmsg+0x80/0x80 [ 433.894640][T10926] ? lockdep_hardirqs_on+0x98/0x150 [ 433.899958][T10926] do_syscall_64+0x55/0xa0 [ 433.904433][T10926] ? clear_bhb_loop+0x40/0x90 [ 433.909352][T10926] ? clear_bhb_loop+0x40/0x90 [ 433.914097][T10926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.920063][T10926] RIP: 0033:0x7f15b8d9c819 [ 433.924536][T10926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.944211][T10926] RSP: 002b:00007f15b9d11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.952699][T10926] RAX: ffffffffffffffda RBX: 00007f15b9015fa0 RCX: 00007f15b8d9c819 [ 433.960731][T10926] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000015 [ 433.968943][T10926] RBP: 00007f15b9d11090 R08: 0000000000000000 R09: 0000000000000000 [ 433.977074][T10926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.985197][T10926] R13: 00007f15b9016038 R14: 00007f15b9015fa0 R15: 00007ffea7fb0db8 [ 433.993363][T10926] [ 434.202508][T10933] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1749'. [ 434.664441][ T2971] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.171079][T10948] netlink: 'syz.1.1753': attribute type 3 has an invalid length. [ 435.179318][T10948] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1753'. [ 436.170549][T10958] netlink: 'syz.1.1755': attribute type 10 has an invalid length. [ 438.839112][T11000] netlink: 'syz.3.1768': attribute type 10 has an invalid length. [ 440.432257][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.438999][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.811681][T11032] FAULT_INJECTION: forcing a failure. [ 441.811681][T11032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.829857][T11032] CPU: 0 PID: 11032 Comm: syz.0.1779 Not tainted syzkaller #0 [ 441.837485][T11032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 441.847585][T11032] Call Trace: [ 441.850912][T11032] [ 441.853887][T11032] dump_stack_lvl+0x18c/0x250 [ 441.858639][T11032] ? show_regs_print_info+0x20/0x20 [ 441.863989][T11032] ? load_image+0x420/0x420 [ 441.868559][T11032] ? __might_fault+0xaa/0x120 [ 441.873282][T11032] ? __lock_acquire+0x7d40/0x7d40 [ 441.878361][T11032] should_fail_ex+0x39d/0x4d0 [ 441.883100][T11032] _copy_from_user+0x2f/0xe0 [ 441.887748][T11032] __sys_bpf+0x23e/0x890 [ 441.892052][T11032] ? bpf_link_show_fdinfo+0x390/0x390 [ 441.897495][T11032] ? lock_chain_count+0x20/0x20 [ 441.902400][T11032] __x64_sys_bpf+0x7c/0x90 [ 441.906956][T11032] do_syscall_64+0x55/0xa0 [ 441.911419][T11032] ? clear_bhb_loop+0x40/0x90 [ 441.916182][T11032] ? clear_bhb_loop+0x40/0x90 [ 441.920921][T11032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.926876][T11032] RIP: 0033:0x7fab37f9c819 [ 441.931354][T11032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.951276][T11032] RSP: 002b:00007fab38e40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.959745][T11032] RAX: ffffffffffffffda RBX: 00007fab38215fa0 RCX: 00007fab37f9c819 [ 441.967770][T11032] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 441.975969][T11032] RBP: 00007fab38e40090 R08: 0000000000000000 R09: 0000000000000000 [ 441.983991][T11032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.992045][T11032] R13: 00007fab38216038 R14: 00007fab38215fa0 R15: 00007ffe8a177888 [ 442.000082][T11032] [ 446.284678][T11084] FAULT_INJECTION: forcing a failure. [ 446.284678][T11084] name failslab, interval 1, probability 0, space 0, times 0 [ 446.297908][T11084] CPU: 1 PID: 11084 Comm: syz.3.1798 Not tainted syzkaller #0 [ 446.305527][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.315639][T11084] Call Trace: [ 446.318964][T11084] [ 446.321940][T11084] dump_stack_lvl+0x18c/0x250 [ 446.326770][T11084] ? sctp_sendmsg+0x1575/0x28c0 [ 446.331701][T11084] ? ___sys_sendmsg+0x2a6/0x360 [ 446.336694][T11084] ? show_regs_print_info+0x20/0x20 [ 446.342048][T11084] ? load_image+0x420/0x420 [ 446.346617][T11084] should_fail_ex+0x39d/0x4d0 [ 446.351364][T11084] should_failslab+0x9/0x20 [ 446.355948][T11084] slab_pre_alloc_hook+0x59/0x310 [ 446.361069][T11084] ? sctp_add_bind_addr+0x8c/0x360 [ 446.366250][T11084] __kmem_cache_alloc_node+0x53/0x250 [ 446.371690][T11084] ? sctp_add_bind_addr+0x8c/0x360 [ 446.376848][T11084] kmalloc_trace+0x2a/0xe0 [ 446.381407][T11084] sctp_add_bind_addr+0x8c/0x360 [ 446.386403][T11084] sctp_copy_local_addr_list+0x315/0x4f0 [ 446.392105][T11084] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 446.397878][T11084] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 446.404008][T11084] ? sctp_v4_is_any+0x35/0x60 [ 446.408736][T11084] ? sctp_copy_one_addr+0x8c/0x350 [ 446.413990][T11084] sctp_bind_addr_copy+0xb3/0x3c0 [ 446.419111][T11084] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 446.425509][T11084] sctp_connect_new_asoc+0x2f9/0x6a0 [ 446.430856][T11084] ? __sctp_connect+0xd80/0xd80 [ 446.435765][T11084] ? __local_bh_enable_ip+0x13a/0x1c0 [ 446.441278][T11084] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 446.446879][T11084] ? security_sctp_bind_connect+0x89/0xb0 [ 446.452792][T11084] sctp_sendmsg+0x1575/0x28c0 [ 446.457535][T11084] ? sctp_getsockopt+0xb60/0xb60 [ 446.462528][T11084] ? aa_sk_perm+0x83c/0x970 [ 446.467102][T11084] ? aa_af_perm+0x330/0x330 [ 446.471663][T11084] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 446.478171][T11084] ? sock_rps_record_flow+0x19/0x3f0 [ 446.483525][T11084] ? inet_sendmsg+0xe9/0x2f0 [ 446.488169][T11084] ? inet_send_prepare+0x260/0x260 [ 446.493346][T11084] ____sys_sendmsg+0x5ba/0x960 [ 446.498173][T11084] ? __lock_acquire+0x7d40/0x7d40 [ 446.503256][T11084] ? __asan_memset+0x22/0x40 [ 446.507906][T11084] ? __sys_sendmsg_sock+0x30/0x30 [ 446.512979][T11084] ? __import_iovec+0x5f2/0x850 [ 446.517916][T11084] ? import_iovec+0x73/0xa0 [ 446.522480][T11084] ___sys_sendmsg+0x2a6/0x360 [ 446.527220][T11084] ? get_pid_task+0x20/0x1e0 [ 446.531867][T11084] ? __sys_sendmsg+0x2a0/0x2a0 [ 446.536710][T11084] ? __lock_acquire+0x7d40/0x7d40 [ 446.541816][T11084] __se_sys_sendmsg+0x1c2/0x2b0 [ 446.546748][T11084] ? __x64_sys_sendmsg+0x80/0x80 [ 446.551753][T11084] ? lockdep_hardirqs_on+0x98/0x150 [ 446.557014][T11084] do_syscall_64+0x55/0xa0 [ 446.561485][T11084] ? clear_bhb_loop+0x40/0x90 [ 446.566216][T11084] ? clear_bhb_loop+0x40/0x90 [ 446.570957][T11084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.577176][T11084] RIP: 0033:0x7f15b8d9c819 [ 446.581649][T11084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.601409][T11084] RSP: 002b:00007f15b9d11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.609883][T11084] RAX: ffffffffffffffda RBX: 00007f15b9015fa0 RCX: 00007f15b8d9c819 [ 446.617923][T11084] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 446.625967][T11084] RBP: 00007f15b9d11090 R08: 0000000000000000 R09: 0000000000000000 [ 446.633997][T11084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.642030][T11084] R13: 00007f15b9016038 R14: 00007f15b9015fa0 R15: 00007ffea7fb0db8 [ 446.650074][T11084] [ 449.240415][T11106] netlink: 'syz.0.1808': attribute type 1 has an invalid length. [ 449.319096][T11109] netlink: 'syz.3.1807': attribute type 10 has an invalid length. [ 450.306009][T11131] netlink: 'syz.3.1815': attribute type 21 has an invalid length. [ 450.314354][T11131] netlink: 'syz.3.1815': attribute type 1 has an invalid length. [ 452.965316][T11143] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 453.038414][T11143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.053170][T11143] team0: Port device bond0 added [ 453.701092][T11163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1826'. [ 453.711184][T11163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1826'. [ 453.739952][T11163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1826'. [ 454.069938][T11174] delete_channel: no stack [ 454.074769][T11174] delete_channel: no stack [ 457.047511][T11185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1831'. [ 457.063457][T11185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1831'. [ 457.074309][T11185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1831'. [ 457.105007][T11185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1831'. [ 462.192147][T11242] netlink: 12611 bytes leftover after parsing attributes in process `syz.0.1852'. [ 463.446279][T11265] netlink: 'syz.3.1856': attribute type 10 has an invalid length. [ 466.661424][T10463] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 467.330695][T11303] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 470.217307][T11309] netlink: 'syz.1.1871': attribute type 10 has an invalid length. [ 470.635535][T11316] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1875'. [ 470.654369][T11318] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.1875'. [ 470.664712][T11316] netlink: zone id is out of range [ 470.670135][T11316] netlink: zone id is out of range [ 470.680863][T11316] netlink: zone id is out of range [ 470.686827][T11316] netlink: zone id is out of range [ 470.693343][T11316] netlink: zone id is out of range [ 470.699202][T11316] netlink: zone id is out of range [ 470.705410][T11316] netlink: zone id is out of range [ 470.711765][T11316] netlink: zone id is out of range [ 470.717677][T11316] netlink: zone id is out of range [ 473.526850][T11324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1879'. [ 473.546525][T11324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1879'. [ 473.557537][T11324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1879'. [ 473.571424][T11324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1879'. [ 474.649450][T11361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1889'. [ 474.669190][T11361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1889'. [ 474.710706][T11361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1889'. [ 474.730664][T11361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1889'. [ 477.780736][T11363] netlink: 'syz.2.1888': attribute type 10 has an invalid length. [ 477.795222][T11372] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 478.436575][T11384] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1897'. [ 478.915417][T11394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1900'. [ 478.947994][T11394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1900'. [ 478.969513][T11394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1900'. [ 479.008975][T11394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1900'. [ 479.739606][T11414] netlink: 'syz.0.1908': attribute type 10 has an invalid length. [ 482.276553][T11414] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 482.513999][T11423] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1910'. [ 483.125489][T11436] IPv6: Can't replace route, no match found [ 483.203641][T11440] C: renamed from team_slave_0 [ 483.247553][T11441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 483.257195][T11441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 483.266530][T11441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 483.275801][T11441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 483.285268][T11441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 483.294564][T11441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 483.303908][T11441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 483.313265][T11441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 483.322552][T11441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 483.331808][T11441] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 483.658838][T11440] netlink: 'syz.2.1918': attribute type 8 has an invalid length. [ 483.668623][T11443] netlink: 'syz.3.1919': attribute type 10 has an invalid length. [ 486.890245][T11464] netlink: 'syz.1.1925': attribute type 10 has an invalid length. [ 486.909466][T11464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1925'. [ 487.323380][T11475] netlink: 'syz.3.1929': attribute type 10 has an invalid length. [ 489.231822][T11490] netlink: 'syz.1.1935': attribute type 10 has an invalid length. [ 489.239931][T11490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1935'. [ 489.283510][T11490] ipvlan1: entered promiscuous mode [ 489.310962][T11490] ipvlan1: entered allmulticast mode [ 489.316365][T11490] veth0_vlan: entered allmulticast mode [ 489.345205][T11490] bridge0: port 5(ipvlan1) entered blocking state [ 489.356174][T11490] bridge0: port 5(ipvlan1) entered disabled state [ 489.365834][T11490] net_ratelimit: 3321 callbacks suppressed [ 489.365852][T11490] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 490.022852][T11512] netlink: 'syz.1.1941': attribute type 10 has an invalid length. [ 490.281634][T11515] netlink: 'syz.2.1942': attribute type 10 has an invalid length. [ 490.401790][T11515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1942'. [ 490.430448][T11516] netlink: 'syz.2.1942': attribute type 12 has an invalid length. [ 490.503934][T11516] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1942'. [ 491.479766][T11530] À: port 1(vlan0) entered blocking state [ 491.502528][T11530] À: port 1(vlan0) entered disabled state [ 491.519780][T11530] vlan0: entered allmulticast mode [ 491.526799][T11530] veth0_vlan: entered allmulticast mode [ 491.539228][T11530] vlan0: entered promiscuous mode [ 492.565250][T11538] netlink: 'syz.2.1947': attribute type 10 has an invalid length. [ 492.580774][T11538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1947'. [ 492.605140][T11538] ipvlan1: entered promiscuous mode [ 492.620836][T11538] ipvlan1: entered allmulticast mode [ 492.636380][T11538] veth0_vlan: entered allmulticast mode [ 492.703453][T11538] bridge0: port 3(ipvlan1) entered blocking state [ 492.710399][T11538] bridge0: port 3(ipvlan1) entered disabled state [ 492.721452][T11538] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 492.809245][T11548] netlink: 'syz.1.1951': attribute type 10 has an invalid length. [ 492.823967][T11548] veth1_macvtap: left promiscuous mode [ 496.035945][T11556] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 497.559350][T11588] netlink: 'syz.3.1963': attribute type 10 has an invalid length. [ 497.583277][T11588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1963'. [ 497.624632][T11588] ipvlan1: entered promiscuous mode [ 497.630015][T11588] ipvlan1: entered allmulticast mode [ 497.674851][T11588] veth0_vlan: entered allmulticast mode [ 497.727664][T11588] bridge0: port 4(ipvlan1) entered blocking state [ 497.783616][T11588] bridge0: port 4(ipvlan1) entered disabled state [ 497.797276][T11588] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 499.141852][T11609] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 499.302584][T11612] netlink: 'syz.1.1972': attribute type 9 has an invalid length. [ 499.313855][T11612] netlink: 149148 bytes leftover after parsing attributes in process `syz.1.1972'. [ 499.365724][T11616] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1970'. [ 499.859750][T11622] FAULT_INJECTION: forcing a failure. [ 499.859750][T11622] name failslab, interval 1, probability 0, space 0, times 0 [ 499.872629][T11622] CPU: 1 PID: 11622 Comm: syz.2.1975 Not tainted syzkaller #0 [ 499.880135][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 499.890747][T11622] Call Trace: [ 499.894088][T11622] [ 499.897197][T11622] dump_stack_lvl+0x18c/0x250 [ 499.902021][T11622] ? sctp_sendmsg+0x1575/0x28c0 [ 499.906996][T11622] ? ___sys_sendmsg+0x2a6/0x360 [ 499.911908][T11622] ? show_regs_print_info+0x20/0x20 [ 499.917204][T11622] ? load_image+0x420/0x420 [ 499.921908][T11622] should_fail_ex+0x39d/0x4d0 [ 499.926815][T11622] should_failslab+0x9/0x20 [ 499.931355][T11622] slab_pre_alloc_hook+0x59/0x310 [ 499.936508][T11622] ? sctp_add_bind_addr+0x8c/0x360 [ 499.941767][T11622] __kmem_cache_alloc_node+0x53/0x250 [ 499.947282][T11622] ? sctp_add_bind_addr+0x8c/0x360 [ 499.952432][T11622] kmalloc_trace+0x2a/0xe0 [ 499.956976][T11622] sctp_add_bind_addr+0x8c/0x360 [ 499.962018][T11622] sctp_copy_local_addr_list+0x315/0x4f0 [ 499.967992][T11622] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 499.973780][T11622] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 499.980007][T11622] ? sctp_v6_is_any+0x64/0x70 [ 499.984814][T11622] ? sctp_copy_one_addr+0x8c/0x350 [ 499.990087][T11622] sctp_bind_addr_copy+0xb3/0x3c0 [ 499.995217][T11622] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 500.001723][T11622] sctp_connect_new_asoc+0x2f9/0x6a0 [ 500.007070][T11622] ? __sctp_connect+0xd80/0xd80 [ 500.011961][T11622] ? __local_bh_enable_ip+0x13a/0x1c0 [ 500.017480][T11622] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 500.023074][T11622] ? security_sctp_bind_connect+0x89/0xb0 [ 500.028838][T11622] sctp_sendmsg+0x1575/0x28c0 [ 500.033703][T11622] ? sctp_getsockopt+0xb60/0xb60 [ 500.038721][T11622] ? aa_sk_perm+0x83c/0x970 [ 500.043313][T11622] ? aa_af_perm+0x330/0x330 [ 500.047864][T11622] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 500.054407][T11622] ? sock_rps_record_flow+0x19/0x3f0 [ 500.059749][T11622] ? inet_sendmsg+0xe9/0x2f0 [ 500.064380][T11622] ? inet_send_prepare+0x260/0x260 [ 500.069561][T11622] ____sys_sendmsg+0x5ba/0x960 [ 500.074374][T11622] ? __lock_acquire+0x7d40/0x7d40 [ 500.079446][T11622] ? __sys_sendmsg_sock+0x30/0x30 [ 500.084529][T11622] ? __import_iovec+0x5f2/0x850 [ 500.089531][T11622] ? import_iovec+0x73/0xa0 [ 500.094128][T11622] ___sys_sendmsg+0x2a6/0x360 [ 500.099144][T11622] ? __sys_sendmsg+0x2a0/0x2a0 [ 500.104167][T11622] ? __lock_acquire+0x7d40/0x7d40 [ 500.109288][T11622] __se_sys_sendmsg+0x1c2/0x2b0 [ 500.114212][T11622] ? __x64_sys_sendmsg+0x80/0x80 [ 500.119223][T11622] ? lockdep_hardirqs_on+0x98/0x150 [ 500.124484][T11622] do_syscall_64+0x55/0xa0 [ 500.128952][T11622] ? clear_bhb_loop+0x40/0x90 [ 500.133683][T11622] ? clear_bhb_loop+0x40/0x90 [ 500.138550][T11622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.144599][T11622] RIP: 0033:0x7fbfbcf9c819 [ 500.149073][T11622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.169089][T11622] RSP: 002b:00007fbfbde44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.177650][T11622] RAX: ffffffffffffffda RBX: 00007fbfbd215fa0 RCX: 00007fbfbcf9c819 [ 500.185657][T11622] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 500.193680][T11622] RBP: 00007fbfbde44090 R08: 0000000000000000 R09: 0000000000000000 [ 500.201709][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.209802][T11622] R13: 00007fbfbd216038 R14: 00007fbfbd215fa0 R15: 00007ffda861d468 [ 500.217944][T11622] [ 500.601860][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.889872][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.903864][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.625830][T11649] netlink: 'syz.1.1985': attribute type 2 has an invalid length. [ 503.637273][T11649] netlink: 'syz.1.1985': attribute type 8 has an invalid length. [ 503.664086][T11649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1985'. [ 503.688774][T11652] netlink: 'syz.2.1983': attribute type 10 has an invalid length. [ 504.041731][T11665] netlink: 'syz.0.1989': attribute type 10 has an invalid length. [ 504.053378][T11665] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1989'. [ 504.063088][T11665] batadv_slave_1: entered promiscuous mode [ 504.097295][T11665] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1989'. [ 504.107277][T11665] openvswitch: netlink: Flow key attr not present in new flow. [ 504.624540][T11682] netlink: 'syz.1.1994': attribute type 10 has an invalid length. [ 505.250296][T11682] bond0: (slave bond_slave_0): Releasing backup interface [ 505.306084][T11682] bond_slave_0: left promiscuous mode [ 505.335187][T11682] bond_slave_0: left allmulticast mode [ 506.058632][T11715] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2002'. [ 506.160500][T11718] netlink: 'syz.0.2001': attribute type 10 has an invalid length. [ 506.460111][T11725] netlink: 'syz.2.2005': attribute type 9 has an invalid length. [ 506.479368][T11725] netlink: 149148 bytes leftover after parsing attributes in process `syz.2.2005'. [ 508.507140][T11769] netlink: 'syz.3.2017': attribute type 10 has an invalid length. [ 509.087756][T11781] C: renamed from team_slave_0 [ 509.132585][T11781] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 509.140414][T11781] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2021'. [ 511.411412][T11821] FAULT_INJECTION: forcing a failure. [ 511.411412][T11821] name failslab, interval 1, probability 0, space 0, times 0 [ 511.429043][T11821] CPU: 0 PID: 11821 Comm: syz.2.2036 Not tainted syzkaller #0 [ 511.436588][T11821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 511.446715][T11821] Call Trace: [ 511.450041][T11821] [ 511.453074][T11821] dump_stack_lvl+0x18c/0x250 [ 511.457838][T11821] ? sctp_sendmsg+0x1575/0x28c0 [ 511.462753][T11821] ? ___sys_sendmsg+0x2a6/0x360 [ 511.467669][T11821] ? show_regs_print_info+0x20/0x20 [ 511.472934][T11821] ? load_image+0x420/0x420 [ 511.477536][T11821] should_fail_ex+0x39d/0x4d0 [ 511.482249][T11821] should_failslab+0x9/0x20 [ 511.486870][T11821] slab_pre_alloc_hook+0x59/0x310 [ 511.491936][T11821] ? sctp_add_bind_addr+0x8c/0x360 [ 511.497254][T11821] __kmem_cache_alloc_node+0x53/0x250 [ 511.502718][T11821] ? sctp_add_bind_addr+0x8c/0x360 [ 511.507902][T11821] kmalloc_trace+0x2a/0xe0 [ 511.512626][T11821] sctp_add_bind_addr+0x8c/0x360 [ 511.517821][T11821] sctp_copy_local_addr_list+0x315/0x4f0 [ 511.523640][T11821] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 511.529420][T11821] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 511.535560][T11821] ? sctp_v6_is_any+0x64/0x70 [ 511.540376][T11821] ? sctp_copy_one_addr+0x8c/0x350 [ 511.545737][T11821] sctp_bind_addr_copy+0xb3/0x3c0 [ 511.550822][T11821] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 511.557414][T11821] sctp_connect_new_asoc+0x2f9/0x6a0 [ 511.562749][T11821] ? __sctp_connect+0xd80/0xd80 [ 511.567630][T11821] ? __local_bh_enable_ip+0x13a/0x1c0 [ 511.573162][T11821] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 511.578746][T11821] ? security_sctp_bind_connect+0x89/0xb0 [ 511.584623][T11821] sctp_sendmsg+0x1575/0x28c0 [ 511.589728][T11821] ? sctp_getsockopt+0xb60/0xb60 [ 511.594816][T11821] ? aa_sk_perm+0x83c/0x970 [ 511.599482][T11821] ? aa_af_perm+0x330/0x330 [ 511.604043][T11821] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 511.610562][T11821] ? sock_rps_record_flow+0x19/0x3f0 [ 511.615982][T11821] ? inet_sendmsg+0xe9/0x2f0 [ 511.620610][T11821] ? inet_send_prepare+0x260/0x260 [ 511.625786][T11821] ____sys_sendmsg+0x5ba/0x960 [ 511.630590][T11821] ? __lock_acquire+0x7d40/0x7d40 [ 511.635663][T11821] ? __asan_memset+0x22/0x40 [ 511.640317][T11821] ? __sys_sendmsg_sock+0x30/0x30 [ 511.645387][T11821] ? __import_iovec+0x5f2/0x850 [ 511.650890][T11821] ? import_iovec+0x73/0xa0 [ 511.655427][T11821] ___sys_sendmsg+0x2a6/0x360 [ 511.660148][T11821] ? get_pid_task+0x20/0x1e0 [ 511.664793][T11821] ? __sys_sendmsg+0x2a0/0x2a0 [ 511.669758][T11821] ? __lock_acquire+0x7d40/0x7d40 [ 511.675223][T11821] __se_sys_sendmsg+0x1c2/0x2b0 [ 511.680123][T11821] ? __x64_sys_sendmsg+0x80/0x80 [ 511.685200][T11821] ? lockdep_hardirqs_on+0x98/0x150 [ 511.690876][T11821] do_syscall_64+0x55/0xa0 [ 511.695450][T11821] ? clear_bhb_loop+0x40/0x90 [ 511.700177][T11821] ? clear_bhb_loop+0x40/0x90 [ 511.704890][T11821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.711001][T11821] RIP: 0033:0x7fbfbcf9c819 [ 511.715446][T11821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.735463][T11821] RSP: 002b:00007fbfbde44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.743939][T11821] RAX: ffffffffffffffda RBX: 00007fbfbd215fa0 RCX: 00007fbfbcf9c819 [ 511.751950][T11821] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000004 [ 511.760137][T11821] RBP: 00007fbfbde44090 R08: 0000000000000000 R09: 0000000000000000 [ 511.768235][T11821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.776431][T11821] R13: 00007fbfbd216038 R14: 00007fbfbd215fa0 R15: 00007ffda861d468 [ 511.784544][T11821] [ 515.312575][T11819] netlink: 'syz.3.2034': attribute type 10 has an invalid length. [ 515.689267][T11857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2047'. [ 515.710752][T11857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2047'. [ 515.725144][T11857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2047'. [ 515.851321][T11862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2047'. [ 516.335758][T11869] netlink: 'syz.2.2050': attribute type 10 has an invalid length. [ 517.226438][T11890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2059'. [ 517.237017][T11890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2059'. [ 517.249660][T11890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2059'. [ 517.261032][T11890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2059'. [ 517.306952][T11892] netlink: 'syz.1.2058': attribute type 10 has an invalid length. [ 517.936021][T11902] FAULT_INJECTION: forcing a failure. [ 517.936021][T11902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.949422][T11902] CPU: 0 PID: 11902 Comm: syz.0.2063 Not tainted syzkaller #0 [ 517.956919][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 517.967123][T11902] Call Trace: [ 517.970491][T11902] [ 517.973459][T11902] dump_stack_lvl+0x18c/0x250 [ 517.978230][T11902] ? show_regs_print_info+0x20/0x20 [ 517.983497][T11902] ? load_image+0x420/0x420 [ 517.988068][T11902] ? __might_fault+0xaa/0x120 [ 517.992806][T11902] ? __lock_acquire+0x7d40/0x7d40 [ 517.997912][T11902] should_fail_ex+0x39d/0x4d0 [ 518.002655][T11902] _copy_from_user+0x2f/0xe0 [ 518.007379][T11902] sk_setsockopt+0x2b2/0x2bc0 [ 518.012135][T11902] ? sockopt_capable+0x60/0x60 [ 518.016973][T11902] ? aa_sk_perm+0x83c/0x970 [ 518.021534][T11902] ? __fget_files+0x28/0x4b0 [ 518.026199][T11902] ? aa_af_perm+0x330/0x330 [ 518.030747][T11902] ? __fget_files+0x28/0x4b0 [ 518.035378][T11902] ? __fget_files+0x28/0x4b0 [ 518.040016][T11902] ? aa_sock_opt_perm+0x74/0x100 [ 518.044989][T11902] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 518.050575][T11902] ? security_socket_setsockopt+0x7e/0xa0 [ 518.056345][T11902] do_sock_setsockopt+0x11b/0x1a0 [ 518.061413][T11902] __x64_sys_setsockopt+0x182/0x200 [ 518.067077][T11902] do_syscall_64+0x55/0xa0 [ 518.071525][T11902] ? clear_bhb_loop+0x40/0x90 [ 518.076233][T11902] ? clear_bhb_loop+0x40/0x90 [ 518.080984][T11902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.086971][T11902] RIP: 0033:0x7fab37f9c819 [ 518.091598][T11902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.111425][T11902] RSP: 002b:00007fab38e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 518.119937][T11902] RAX: ffffffffffffffda RBX: 00007fab38216090 RCX: 00007fab37f9c819 [ 518.127942][T11902] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000006 [ 518.135940][T11902] RBP: 00007fab38e1f090 R08: 0000000000000043 R09: 0000000000000000 [ 518.144213][T11902] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 518.152224][T11902] R13: 00007fab38216128 R14: 00007fab38216090 R15: 00007ffe8a177888 [ 518.160246][T11902] [ 518.321716][T11910] netlink: 'syz.3.2065': attribute type 10 has an invalid length. [ 518.529030][T11915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2068'. [ 518.538404][T11915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2068'. [ 522.854275][T11952] netlink: 'syz.1.2082': attribute type 10 has an invalid length. [ 523.095521][T11950] FAULT_INJECTION: forcing a failure. [ 523.095521][T11950] name failslab, interval 1, probability 0, space 0, times 0 [ 523.108748][T11950] CPU: 0 PID: 11950 Comm: syz.3.2083 Not tainted syzkaller #0 [ 523.116366][T11950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 523.126502][T11950] Call Trace: [ 523.129843][T11950] [ 523.132816][T11950] dump_stack_lvl+0x18c/0x250 [ 523.137532][T11950] ? show_regs_print_info+0x20/0x20 [ 523.142779][T11950] ? load_image+0x420/0x420 [ 523.147343][T11950] should_fail_ex+0x39d/0x4d0 [ 523.152160][T11950] should_failslab+0x9/0x20 [ 523.156733][T11950] slab_pre_alloc_hook+0x59/0x310 [ 523.161825][T11950] ? ida_alloc_range+0x5e7/0x860 [ 523.166813][T11950] __kmem_cache_alloc_node+0x53/0x250 [ 523.172246][T11950] ? ida_alloc_range+0x5e7/0x860 [ 523.177411][T11950] kmalloc_trace+0x2a/0xe0 [ 523.181890][T11950] ida_alloc_range+0x5e7/0x860 [ 523.186808][T11950] ? idr_replace+0x1b0/0x1b0 [ 523.191476][T11950] __xdp_reg_mem_model+0x218/0x5c0 [ 523.196750][T11950] ? kvmalloc_node+0x70/0x180 [ 523.201512][T11950] ? xdp_reg_mem_model+0x40/0x40 [ 523.206524][T11950] xdp_reg_mem_model+0x22/0x40 [ 523.211355][T11950] bpf_test_run_xdp_live+0x262/0x1b20 [ 523.216824][T11950] ? 0xffffffffa0004740 [ 523.221026][T11950] ? 0xffffffffa0004740 [ 523.225237][T11950] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 523.231171][T11950] ? 0xffffffffa0004740 [ 523.235364][T11950] ? xdp_convert_md_to_buff+0x330/0x330 [ 523.240980][T11950] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 523.247568][T11950] ? xdp_convert_md_to_buff+0x5b/0x330 [ 523.253092][T11950] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 523.258584][T11950] ? dev_put+0x80/0x80 [ 523.262834][T11950] ? bpf_prog_test_run+0x315/0x390 [ 523.268048][T11950] ? dev_put+0x80/0x80 [ 523.272177][T11950] bpf_prog_test_run+0x321/0x390 [ 523.277768][T11950] __sys_bpf+0x49d/0x890 [ 523.282053][T11950] ? bpf_link_show_fdinfo+0x390/0x390 [ 523.287472][T11950] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 523.293762][T11950] __x64_sys_bpf+0x7c/0x90 [ 523.298217][T11950] do_syscall_64+0x55/0xa0 [ 523.302717][T11950] ? clear_bhb_loop+0x40/0x90 [ 523.307520][T11950] ? clear_bhb_loop+0x40/0x90 [ 523.312233][T11950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.318165][T11950] RIP: 0033:0x7f15b8d9c819 [ 523.322610][T11950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.342291][T11950] RSP: 002b:00007f15b9d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.350853][T11950] RAX: ffffffffffffffda RBX: 00007f15b9015fa0 RCX: 00007f15b8d9c819 [ 523.358879][T11950] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 523.366888][T11950] RBP: 00007f15b9d11090 R08: 0000000000000000 R09: 0000000000000000 [ 523.374890][T11950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.382906][T11950] R13: 00007f15b9016038 R14: 00007f15b9015fa0 R15: 00007ffea7fb0db8 [ 523.391224][T11950] [ 523.752725][T11960] __nla_validate_parse: 6 callbacks suppressed [ 523.752745][T11960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2086'. [ 523.775154][T11960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2086'. [ 523.785903][T11960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2086'. [ 523.797690][T11960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2086'. [ 524.258061][T11970] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2091'. [ 524.273915][T11972] sit0: entered allmulticast mode [ 524.304379][T11973] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2091'. [ 524.345062][T11970] netlink: 'syz.2.2091': attribute type 10 has an invalid length. [ 524.356783][T11970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2091'. [ 524.548793][T11983] netlink: 'syz.2.2094': attribute type 10 has an invalid length. [ 524.575548][T11985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2097'. [ 524.585216][T11985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2097'. [ 524.596357][T11985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2097'. [ 524.719702][T11989] FAULT_INJECTION: forcing a failure. [ 524.719702][T11989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.747128][T11989] CPU: 0 PID: 11989 Comm: syz.1.2099 Not tainted syzkaller #0 [ 524.754875][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 524.765090][T11989] Call Trace: [ 524.768428][T11989] [ 524.771578][T11989] dump_stack_lvl+0x18c/0x250 [ 524.776886][T11989] ? show_regs_print_info+0x20/0x20 [ 524.782148][T11989] ? load_image+0x420/0x420 [ 524.786738][T11989] ? __might_fault+0xaa/0x120 [ 524.791642][T11989] ? __lock_acquire+0x7d40/0x7d40 [ 524.796733][T11989] should_fail_ex+0x39d/0x4d0 [ 524.801476][T11989] _copy_from_user+0x2f/0xe0 [ 524.806234][T11989] bpf_prog_test_run_skb+0x266/0x12b0 [ 524.811663][T11989] ? lockdep_hardirqs_on+0x98/0x150 [ 524.817010][T11989] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.823265][T11989] ? cpu_online+0x60/0x60 [ 524.827664][T11989] bpf_prog_test_run+0x321/0x390 [ 524.832661][T11989] __sys_bpf+0x49d/0x890 [ 524.837002][T11989] ? bpf_link_show_fdinfo+0x390/0x390 [ 524.842446][T11989] ? lock_chain_count+0x20/0x20 [ 524.847354][T11989] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 524.853407][T11989] __x64_sys_bpf+0x7c/0x90 [ 524.857912][T11989] do_syscall_64+0x55/0xa0 [ 524.862375][T11989] ? clear_bhb_loop+0x40/0x90 [ 524.867113][T11989] ? clear_bhb_loop+0x40/0x90 [ 524.871854][T11989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.877906][T11989] RIP: 0033:0x7fb45a19c819 [ 524.882359][T11989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.902009][T11989] RSP: 002b:00007fb45b14c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.910639][T11989] RAX: ffffffffffffffda RBX: 00007fb45a415fa0 RCX: 00007fb45a19c819 [ 524.918758][T11989] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 524.926946][T11989] RBP: 00007fb45b14c090 R08: 0000000000000000 R09: 0000000000000000 [ 524.934965][T11989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.943075][T11989] R13: 00007fb45a416038 R14: 00007fb45a415fa0 R15: 00007ffd63d02358 [ 524.951357][T11989] [ 525.505734][T12001] netlink: 'syz.2.2103': attribute type 1 has an invalid length. [ 526.455998][T12016] openvswitch: netlink: IP tunnel dst address not specified [ 526.953251][T12031] netlink: 'syz.2.2112': attribute type 10 has an invalid length. [ 528.153229][T12051] sock: sock_set_timeout: `syz.0.2122' (pid 12051) tries to set negative timeout [ 528.199026][T12051] netlink: 'syz.0.2122': attribute type 10 has an invalid length. [ 528.824299][T12074] __nla_validate_parse: 12 callbacks suppressed [ 528.824321][T12074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2127'. [ 531.338030][T12074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2127'. [ 532.168967][T12101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2136'. [ 532.251908][T12101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2136'. [ 532.282547][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2136'. [ 532.314027][T12107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2136'. [ 533.861329][T10463] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 535.952279][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'. [ 535.962070][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'. [ 535.985377][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'. [ 535.997291][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'. [ 536.120283][T12129] netlink: 'syz.3.2146': attribute type 10 has an invalid length. [ 536.129185][T12129] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2146'. [ 536.158099][T12129] team0: entered promiscuous mode [ 536.168307][T12129] team_slave_0: entered promiscuous mode [ 536.179324][T12129] team_slave_1: entered promiscuous mode [ 536.193083][T12129] geneve1: entered promiscuous mode [ 536.202071][T12129] bond0: entered promiscuous mode [ 536.207954][T12129] bond_slave_0: entered promiscuous mode [ 536.217842][T12129] bond_slave_1: entered promiscuous mode [ 536.235146][T12129] team0: entered allmulticast mode [ 536.244163][T12129] team_slave_0: entered allmulticast mode [ 536.251601][T12129] team_slave_1: entered allmulticast mode [ 536.258159][T12129] geneve1: entered allmulticast mode [ 536.265464][T12129] bond0: entered allmulticast mode [ 536.271756][T12129] bond_slave_0: entered allmulticast mode [ 536.278316][T12129] bond_slave_1: entered allmulticast mode [ 536.299757][T12129] bridge0: port 4(team0) entered blocking state [ 536.312259][T12129] bridge0: port 4(team0) entered disabled state [ 536.387384][T12129] bridge0: port 4(team0) entered blocking state [ 536.394897][T12129] bridge0: port 4(team0) entered forwarding state [ 536.665427][T12146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2154'. [ 536.675145][T12146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2154'. [ 536.691913][T12146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2154'. [ 536.703607][T12146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2154'. [ 536.939724][T12150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2156'. [ 537.839523][T12167] netlink: 'syz.3.2163': attribute type 10 has an invalid length. [ 539.004062][T12213] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 539.014940][T12213] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 541.509163][T12282] tap0: tun_chr_ioctl cmd 1074025677 [ 541.532021][T12282] tap0: linktype set to 256 [ 541.538208][T12282] tap0: tun_chr_ioctl cmd 2147767511 [ 542.426201][T12289] __nla_validate_parse: 32 callbacks suppressed [ 542.426223][T12289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2205'. [ 542.451720][T12289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2205'. [ 542.464923][T12289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2205'. [ 542.475332][T12289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2205'. [ 542.555732][T12291] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2206'. [ 542.683828][T12298] FAULT_INJECTION: forcing a failure. [ 542.683828][T12298] name failslab, interval 1, probability 0, space 0, times 0 [ 542.724884][T12298] CPU: 1 PID: 12298 Comm: syz.2.2208 Not tainted syzkaller #0 [ 542.732533][T12298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 542.743247][T12298] Call Trace: [ 542.746567][T12298] [ 542.749559][T12298] dump_stack_lvl+0x18c/0x250 [ 542.754307][T12298] ? show_regs_print_info+0x20/0x20 [ 542.759594][T12298] ? load_image+0x420/0x420 [ 542.764164][T12298] ? __might_sleep+0xe0/0xe0 [ 542.768803][T12298] ? __lock_acquire+0x7d40/0x7d40 [ 542.773879][T12298] should_fail_ex+0x39d/0x4d0 [ 542.778622][T12298] should_failslab+0x9/0x20 [ 542.783231][T12298] slab_pre_alloc_hook+0x59/0x310 [ 542.788320][T12298] ? __lock_acquire+0x7d40/0x7d40 [ 542.793404][T12298] kmem_cache_alloc_node+0x60/0x320 [ 542.798772][T12298] ? __alloc_skb+0x103/0x2c0 [ 542.803436][T12298] __alloc_skb+0x103/0x2c0 [ 542.807906][T12298] netlink_sendmsg+0x66a/0xbf0 [ 542.812731][T12298] ? netlink_getsockopt+0x590/0x590 [ 542.817985][T12298] ? aa_sock_msg_perm+0x94/0x150 [ 542.822966][T12298] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 542.828391][T12298] ? security_socket_sendmsg+0x80/0xa0 [ 542.833907][T12298] ? netlink_getsockopt+0x590/0x590 [ 542.839300][T12298] ____sys_sendmsg+0x5ba/0x960 [ 542.844113][T12298] ? __asan_memset+0x22/0x40 [ 542.848755][T12298] ? __sys_sendmsg_sock+0x30/0x30 [ 542.853982][T12298] ? __import_iovec+0x5f2/0x850 [ 542.858868][T12298] ? import_iovec+0x73/0xa0 [ 542.863405][T12298] ___sys_sendmsg+0x2a6/0x360 [ 542.868118][T12298] ? get_pid_task+0x20/0x1e0 [ 542.872747][T12298] ? __sys_sendmsg+0x2a0/0x2a0 [ 542.877560][T12298] ? __lock_acquire+0x7d40/0x7d40 [ 542.882634][T12298] __se_sys_sendmsg+0x1c2/0x2b0 [ 542.887523][T12298] ? __x64_sys_sendmsg+0x80/0x80 [ 542.892760][T12298] ? lockdep_hardirqs_on+0x98/0x150 [ 542.898077][T12298] do_syscall_64+0x55/0xa0 [ 542.902522][T12298] ? clear_bhb_loop+0x40/0x90 [ 542.907247][T12298] ? clear_bhb_loop+0x40/0x90 [ 542.911954][T12298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.918144][T12298] RIP: 0033:0x7fbfbcf9c819 [ 542.922587][T12298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.942501][T12298] RSP: 002b:00007fbfbde44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.950956][T12298] RAX: ffffffffffffffda RBX: 00007fbfbd215fa0 RCX: 00007fbfbcf9c819 [ 542.959145][T12298] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 542.967146][T12298] RBP: 00007fbfbde44090 R08: 0000000000000000 R09: 0000000000000000 [ 542.975148][T12298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.983147][T12298] R13: 00007fbfbd216038 R14: 00007fbfbd215fa0 R15: 00007ffda861d468 [ 542.991331][T12298] [ 546.440059][T12337] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2221'. [ 547.068693][T12344] netlink: 'syz.1.2223': attribute type 10 has an invalid length. [ 547.084595][T12344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2223'. [ 547.800856][T12360] netlink: 'syz.1.2227': attribute type 10 has an invalid length. [ 547.830722][T12360] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2227'. [ 548.107182][T12370] netlink: 'syz.0.2230': attribute type 9 has an invalid length. [ 548.130679][T12370] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2230'. [ 551.219078][T12390] netlink: 'syz.1.2233': attribute type 10 has an invalid length. [ 551.310268][T12392] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2237'. [ 555.472941][T12421] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 555.488528][T12421] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 555.808231][T12436] netlink: 'syz.1.2249': attribute type 10 has an invalid length. [ 555.823235][T12435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2250'. [ 555.863899][T12435] netlink: 'syz.0.2250': attribute type 8 has an invalid length. [ 555.873162][T12435] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2250'. [ 555.997799][T12438] netlink: 'syz.2.2251': attribute type 17 has an invalid length. [ 556.008564][T12438] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2251'. [ 556.047977][T12438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.194252][T12475] FAULT_INJECTION: forcing a failure. [ 562.194252][T12475] name failslab, interval 1, probability 0, space 0, times 0 [ 562.235600][T12475] CPU: 0 PID: 12475 Comm: syz.0.2261 Not tainted syzkaller #0 [ 562.243176][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 562.253303][T12475] Call Trace: [ 562.256640][T12475] [ 562.259663][T12475] dump_stack_lvl+0x18c/0x250 [ 562.264510][T12475] ? show_regs_print_info+0x20/0x20 [ 562.269787][T12475] ? load_image+0x420/0x420 [ 562.274353][T12475] ? __might_sleep+0xe0/0xe0 [ 562.279015][T12475] ? __lock_acquire+0x7d40/0x7d40 [ 562.284099][T12475] ? perf_trace_lock+0xfc/0x3b0 [ 562.289024][T12475] should_fail_ex+0x39d/0x4d0 [ 562.293767][T12475] should_failslab+0x9/0x20 [ 562.298410][T12475] slab_pre_alloc_hook+0x59/0x310 [ 562.303488][T12475] kmem_cache_alloc+0x5a/0x2d0 [ 562.308291][T12475] ? __kernfs_new_node+0xe5/0x810 [ 562.313363][T12475] __kernfs_new_node+0xe5/0x810 [ 562.318337][T12475] ? kernfs_add_one+0x14e/0x6b0 [ 562.323225][T12475] ? __lock_acquire+0x7d40/0x7d40 [ 562.328292][T12475] ? down_write+0x16e/0x200 [ 562.333215][T12475] ? kernfs_new_node+0x260/0x260 [ 562.338209][T12475] ? up_write+0x1c3/0x410 [ 562.342576][T12475] kernfs_new_node+0x14c/0x260 [ 562.347380][T12475] __kernfs_create_file+0x4b/0x2e0 [ 562.352708][T12475] sysfs_add_file_mode_ns+0x238/0x300 [ 562.358130][T12475] internal_create_group+0x434/0xd10 [ 562.363444][T12475] ? kernfs_add_one+0x14e/0x6b0 [ 562.368359][T12475] ? sysfs_create_group+0x20/0x20 [ 562.373421][T12475] ? up_write+0x1c3/0x410 [ 562.377817][T12475] sysfs_create_groups+0x59/0x120 [ 562.382873][T12475] device_add_attrs+0xdf/0x830 [ 562.387678][T12475] ? device_add_class_symlinks+0x240/0x240 [ 562.393525][T12475] ? device_add_class_symlinks+0x21f/0x240 [ 562.399466][T12475] device_add+0x528/0xc20 [ 562.403838][T12475] ? device_initialize+0x24b/0x440 [ 562.408989][T12475] netdev_register_kobject+0x188/0x320 [ 562.414661][T12475] register_netdevice+0x12ee/0x1bb0 [ 562.419896][T12475] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 562.425575][T12475] ? netif_stacked_transfer_operstate+0x210/0x210 [ 562.432108][T12475] ? idr_alloc+0x20e/0x2f0 [ 562.436564][T12475] ? mutex_unlock+0x10/0x10 [ 562.441286][T12475] ? vscnprintf+0x80/0x80 [ 562.445655][T12475] ? net_generic+0x1e/0x240 [ 562.450271][T12475] ? net_generic+0x1e/0x240 [ 562.454823][T12475] ? radix_tree_lookup+0x267/0x280 [ 562.459978][T12475] ppp_dev_configure+0x84b/0xad0 [ 562.465266][T12475] ppp_ioctl+0x6e2/0x1a90 [ 562.469741][T12475] ? ppp_poll+0x250/0x250 [ 562.474105][T12475] ? __fget_files+0x28/0x4b0 [ 562.478745][T12475] ? bpf_lsm_file_ioctl+0x9/0x10 [ 562.483712][T12475] ? security_file_ioctl+0x80/0xa0 [ 562.488855][T12475] ? ppp_poll+0x250/0x250 [ 562.493218][T12475] __se_sys_ioctl+0xfd/0x170 [ 562.497852][T12475] do_syscall_64+0x55/0xa0 [ 562.502305][T12475] ? clear_bhb_loop+0x40/0x90 [ 562.507015][T12475] ? clear_bhb_loop+0x40/0x90 [ 562.511911][T12475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.517865][T12475] RIP: 0033:0x7fab37f9c819 [ 562.522409][T12475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.542052][T12475] RSP: 002b:00007fab38e40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.550665][T12475] RAX: ffffffffffffffda RBX: 00007fab38215fa0 RCX: 00007fab37f9c819 [ 562.558756][T12475] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000004 [ 562.566768][T12475] RBP: 00007fab38e40090 R08: 0000000000000000 R09: 0000000000000000 [ 562.574773][T12475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.582916][T12475] R13: 00007fab38216038 R14: 00007fab38215fa0 R15: 00007ffe8a177888 [ 562.590976][T12475] [ 562.832370][T12489] netlink: 'syz.3.2264': attribute type 10 has an invalid length. [ 563.307684][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.314600][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.817594][T12503] netlink: 'syz.0.2270': attribute type 21 has an invalid length. [ 563.856329][T12503] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 563.903729][T12507] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2274'. [ 563.919028][T12509] FAULT_INJECTION: forcing a failure. [ 563.919028][T12509] name failslab, interval 1, probability 0, space 0, times 0 [ 563.934626][T12509] CPU: 1 PID: 12509 Comm: syz.1.2273 Not tainted syzkaller #0 [ 563.942269][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 563.952475][T12509] Call Trace: [ 563.955819][T12509] [ 563.958890][T12509] dump_stack_lvl+0x18c/0x250 [ 563.963774][T12509] ? __sctp_connect+0x5b7/0xd80 [ 563.968720][T12509] ? sctp_setsockopt+0x6d8/0x11e0 [ 563.973817][T12509] ? show_regs_print_info+0x20/0x20 [ 563.979105][T12509] ? load_image+0x420/0x420 [ 563.983692][T12509] should_fail_ex+0x39d/0x4d0 [ 563.988642][T12509] should_failslab+0x9/0x20 [ 563.993238][T12509] slab_pre_alloc_hook+0x59/0x310 [ 563.998560][T12509] ? sctp_add_bind_addr+0x8c/0x360 [ 564.003742][T12509] __kmem_cache_alloc_node+0x53/0x250 [ 564.009196][T12509] ? sctp_add_bind_addr+0x8c/0x360 [ 564.014368][T12509] kmalloc_trace+0x2a/0xe0 [ 564.018859][T12509] sctp_add_bind_addr+0x8c/0x360 [ 564.023868][T12509] sctp_copy_local_addr_list+0x315/0x4f0 [ 564.029604][T12509] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 564.035482][T12509] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 564.041798][T12509] ? sctp_v4_is_any+0x35/0x60 [ 564.046526][T12509] ? sctp_copy_one_addr+0x8c/0x350 [ 564.051676][T12509] sctp_bind_addr_copy+0xb3/0x3c0 [ 564.056938][T12509] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 564.063312][T12509] sctp_connect_new_asoc+0x2f9/0x6a0 [ 564.068633][T12509] ? __sctp_connect+0xd80/0xd80 [ 564.073527][T12509] ? mark_lock+0x94/0x320 [ 564.077885][T12509] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 564.083753][T12509] __sctp_connect+0x5b7/0xd80 [ 564.088925][T12509] ? sctp_send_asconf+0x170/0x170 [ 564.094140][T12509] ? __local_bh_enable_ip+0x13a/0x1c0 [ 564.099757][T12509] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 564.105377][T12509] ? security_sctp_bind_connect+0x89/0xb0 [ 564.111179][T12509] sctp_setsockopt_connectx+0x104/0x1a0 [ 564.116806][T12509] sctp_setsockopt+0x6d8/0x11e0 [ 564.121787][T12509] ? sock_common_recvmsg+0x190/0x190 [ 564.127125][T12509] do_sock_setsockopt+0x175/0x1a0 [ 564.132185][T12509] ? __fdget+0x180/0x210 [ 564.136473][T12509] __x64_sys_setsockopt+0x182/0x200 [ 564.141713][T12509] do_syscall_64+0x55/0xa0 [ 564.146160][T12509] ? clear_bhb_loop+0x40/0x90 [ 564.150877][T12509] ? clear_bhb_loop+0x40/0x90 [ 564.155675][T12509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.161600][T12509] RIP: 0033:0x7fb45a19c819 [ 564.166075][T12509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.185889][T12509] RSP: 002b:00007fb45b14c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 564.194540][T12509] RAX: ffffffffffffffda RBX: 00007fb45a415fa0 RCX: 00007fb45a19c819 [ 564.202803][T12509] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 564.210803][T12509] RBP: 00007fb45b14c090 R08: 0000000000000010 R09: 0000000000000000 [ 564.219052][T12509] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.227265][T12509] R13: 00007fb45a416038 R14: 00007fb45a415fa0 R15: 00007ffd63d02358 [ 564.235306][T12509] [ 564.309428][T12515] FAULT_INJECTION: forcing a failure. [ 564.309428][T12515] name failslab, interval 1, probability 0, space 0, times 0 [ 564.328680][T12515] CPU: 1 PID: 12515 Comm: syz.1.2276 Not tainted syzkaller #0 [ 564.336316][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 564.346446][T12515] Call Trace: [ 564.349773][T12515] [ 564.352778][T12515] dump_stack_lvl+0x18c/0x250 [ 564.357535][T12515] ? sctp_sendmsg+0x1575/0x28c0 [ 564.362469][T12515] ? ___sys_sendmsg+0x2a6/0x360 [ 564.367461][T12515] ? show_regs_print_info+0x20/0x20 [ 564.372778][T12515] ? load_image+0x420/0x420 [ 564.377450][T12515] should_fail_ex+0x39d/0x4d0 [ 564.382237][T12515] should_failslab+0x9/0x20 [ 564.386798][T12515] slab_pre_alloc_hook+0x59/0x310 [ 564.391875][T12515] ? sctp_add_bind_addr+0x8c/0x360 [ 564.397106][T12515] __kmem_cache_alloc_node+0x53/0x250 [ 564.402630][T12515] ? sctp_add_bind_addr+0x8c/0x360 [ 564.407890][T12515] kmalloc_trace+0x2a/0xe0 [ 564.412378][T12515] sctp_add_bind_addr+0x8c/0x360 [ 564.417356][T12515] sctp_copy_local_addr_list+0x315/0x4f0 [ 564.423033][T12515] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 564.428782][T12515] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 564.434904][T12515] ? sctp_v4_is_any+0x35/0x60 [ 564.439690][T12515] ? sctp_copy_one_addr+0x8c/0x350 [ 564.444880][T12515] sctp_bind_addr_copy+0xb3/0x3c0 [ 564.449988][T12515] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 564.456369][T12515] sctp_connect_new_asoc+0x2f9/0x6a0 [ 564.461706][T12515] ? __sctp_connect+0xd80/0xd80 [ 564.466682][T12515] ? __local_bh_enable_ip+0x13a/0x1c0 [ 564.472118][T12515] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 564.477826][T12515] ? security_sctp_bind_connect+0x89/0xb0 [ 564.483613][T12515] sctp_sendmsg+0x1575/0x28c0 [ 564.488380][T12515] ? sctp_getsockopt+0xb60/0xb60 [ 564.493373][T12515] ? aa_sk_perm+0x83c/0x970 [ 564.497967][T12515] ? __perf_event_overflow+0x4f8/0x630 [ 564.503480][T12515] ? aa_af_perm+0x330/0x330 [ 564.508110][T12515] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 564.514642][T12515] ? sock_rps_record_flow+0x19/0x3f0 [ 564.519993][T12515] ? inet_sendmsg+0xe9/0x2f0 [ 564.524705][T12515] ? inet_send_prepare+0x260/0x260 [ 564.529860][T12515] ____sys_sendmsg+0x5ba/0x960 [ 564.534659][T12515] ? __lock_acquire+0x7d40/0x7d40 [ 564.539793][T12515] ? __asan_memset+0x22/0x40 [ 564.544436][T12515] ? __sys_sendmsg_sock+0x30/0x30 [ 564.549502][T12515] ? __import_iovec+0x5f2/0x850 [ 564.554397][T12515] ? import_iovec+0x73/0xa0 [ 564.559135][T12515] ___sys_sendmsg+0x2a6/0x360 [ 564.563926][T12515] ? get_pid_task+0x20/0x1e0 [ 564.568634][T12515] ? __sys_sendmsg+0x2a0/0x2a0 [ 564.573538][T12515] ? __lock_acquire+0x7d40/0x7d40 [ 564.578638][T12515] __se_sys_sendmsg+0x1c2/0x2b0 [ 564.583542][T12515] ? __x64_sys_sendmsg+0x80/0x80 [ 564.588614][T12515] ? lockdep_hardirqs_on+0x98/0x150 [ 564.593941][T12515] do_syscall_64+0x55/0xa0 [ 564.598385][T12515] ? clear_bhb_loop+0x40/0x90 [ 564.603103][T12515] ? clear_bhb_loop+0x40/0x90 [ 564.607831][T12515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.613760][T12515] RIP: 0033:0x7fb45a19c819 [ 564.618205][T12515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.637936][T12515] RSP: 002b:00007fb45b14c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.646392][T12515] RAX: ffffffffffffffda RBX: 00007fb45a415fa0 RCX: 00007fb45a19c819 [ 564.654574][T12515] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 564.662768][T12515] RBP: 00007fb45b14c090 R08: 0000000000000000 R09: 0000000000000000 [ 564.670768][T12515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.678811][T12515] R13: 00007fb45a416038 R14: 00007fb45a415fa0 R15: 00007ffd63d02358 [ 564.686947][T12515] [ 565.040385][T12526] netlink: 'syz.0.2279': attribute type 10 has an invalid length. [ 565.059704][ T5781] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 565.203289][T12533] netlink: 'syz.1.2281': attribute type 29 has an invalid length. [ 565.222394][T12533] netlink: 'syz.1.2281': attribute type 3 has an invalid length. [ 565.231003][T12533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2281'. [ 566.509519][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 566.965513][T12590] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2301'. [ 566.980441][T12590] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2301'. [ 567.054736][T12593] netlink: 'syz.3.2300': attribute type 10 has an invalid length. [ 567.831299][T12613] bridge0: port 3(veth0_to_bridge) entered blocking state [ 567.838628][T12613] bridge0: port 3(veth0_to_bridge) entered disabled state [ 567.880938][T12613] veth0_to_bridge: entered allmulticast mode [ 567.903877][T12613] veth0_to_bridge: entered promiscuous mode [ 567.910282][T12613] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.004503][T12616] netlink: 'syz.2.2311': attribute type 3 has an invalid length. [ 568.022683][T12613] bridge0: port 3(veth0_to_bridge) entered blocking state [ 568.030630][T12613] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 568.061875][T12616] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2311'. [ 568.438011][T12634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 568.452966][T12634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 568.463925][T12634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 568.476148][T12634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 568.496434][T12634] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 568.512170][T12634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 568.750893][T12643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2316'. [ 568.843082][T12630] chnl_net:caif_netlink_parms(): no params data found [ 568.954756][T12630] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.973232][T12630] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.989711][T12630] bridge_slave_0: entered allmulticast mode [ 569.008696][T12630] bridge_slave_0: entered promiscuous mode [ 569.034651][T12630] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.042206][T12630] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.049549][T12630] bridge_slave_1: entered allmulticast mode [ 569.058075][T12630] bridge_slave_1: entered promiscuous mode [ 569.110399][T12630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.127047][T12630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.173027][T12630] team0: Port device team_slave_0 added [ 569.193610][T12630] team0: Port device team_slave_1 added [ 569.249488][T12630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.257412][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.291717][T12630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.305518][T12630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.313392][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.341055][T12630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.409042][T12660] netlink: 'syz.3.2319': attribute type 10 has an invalid length. [ 569.424093][T12630] hsr_slave_0: entered promiscuous mode [ 569.430935][T12630] hsr_slave_1: entered promiscuous mode [ 569.657823][T12665] netlink: 'syz.2.2321': attribute type 11 has an invalid length. [ 570.054164][T12674] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2323'. [ 570.077459][T12674] openvswitch: netlink: Duplicate key (type 0). [ 570.139241][T12630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 570.162713][T12630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 570.197156][T12630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 570.215961][T12630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 570.304193][T12676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.580825][ T5781] Bluetooth: hci0: command tx timeout [ 570.693822][T12630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.718609][T12630] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.736568][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.743901][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.765691][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.773071][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.178247][T12630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.263976][T12630] veth0_vlan: entered promiscuous mode [ 571.298828][T12630] veth1_vlan: entered promiscuous mode [ 571.377108][T12630] veth0_macvtap: entered promiscuous mode [ 571.411429][T12630] veth1_macvtap: entered promiscuous mode [ 571.491873][T12630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.549683][T12630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.599957][T12630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.615223][T12630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.626542][T12630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.636303][T12630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.652274][T12699] netlink: 'syz.3.2331': attribute type 10 has an invalid length. [ 571.926633][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.971155][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.018392][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.050657][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.409323][T12721] netlink: 'syz.2.2336': attribute type 21 has an invalid length. [ 572.457142][T12721] netlink: 'syz.2.2336': attribute type 1 has an invalid length. [ 572.660939][ T5781] Bluetooth: hci0: command tx timeout [ 573.542080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.555127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.567817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.580401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.592927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.605463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.618119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.630764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 574.741167][ T5781] Bluetooth: hci0: command tx timeout [ 575.080813][ C0] net_ratelimit: 3181 callbacks suppressed [ 575.080834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.099367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.111923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.124881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.137392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.151004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.163613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.177179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.189822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.202470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.564714][T12733] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2339'. [ 576.821357][ T5781] Bluetooth: hci0: command tx timeout [ 577.363686][T12743] netlink: 'syz.3.2343': attribute type 10 has an invalid length. [ 577.742761][T12751] bridge0: port 3(veth0_to_bridge) entered blocking state [ 577.750983][T12751] bridge0: port 3(veth0_to_bridge) entered disabled state [ 577.758485][T12751] veth0_to_bridge: entered allmulticast mode [ 577.768508][T12751] veth0_to_bridge: entered promiscuous mode [ 577.775302][T12751] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.802175][T12751] bridge0: port 3(veth0_to_bridge) entered blocking state [ 577.809652][T12751] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 577.944771][T12749] netlink: 'syz.1.2345': attribute type 3 has an invalid length. [ 577.975722][T12749] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2345'. [ 578.478369][T12766] netlink: 'syz.1.2349': attribute type 21 has an invalid length. [ 578.548994][T12767] netlink: 'syz.1.2349': attribute type 1 has an invalid length. [ 580.090769][ C0] net_ratelimit: 10063 callbacks suppressed [ 580.090789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.109315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.121800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.134395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.146993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.159432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.171889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.184954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.197507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.210037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.768015][T12780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2352'. [ 582.703276][T12794] netlink: 'syz.3.2356': attribute type 10 has an invalid length. [ 582.940166][T12798] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 582.958530][T12798] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2358'. [ 583.114835][T12804] netlink: 'syz.1.2359': attribute type 10 has an invalid length. [ 583.133661][T12804] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2359'. [ 585.103782][ C1] net_ratelimit: 7713 callbacks suppressed [ 585.103828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 585.108363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.119781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 585.131309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.145856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 585.170239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.180367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 585.192453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.205485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 585.228488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 590.110734][ C0] net_ratelimit: 9887 callbacks suppressed [ 590.110755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.130375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.135730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 590.143699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.167260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.179918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.184627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 590.196573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.217201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.229764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.120670][ C0] net_ratelimit: 6945 callbacks suppressed [ 595.120690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.140572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.152097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 595.153754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.177275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.189806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.192606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 595.207662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.227052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.239717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.132635][ C0] net_ratelimit: 6830 callbacks suppressed [ 600.132655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.148453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 600.151842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.175347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.187915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.200364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 600.200440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.207250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.237137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.249588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 603.379168][ T1109] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 605.140676][ C0] net_ratelimit: 6758 callbacks suppressed [ 605.140696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.159087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 605.160251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.186543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.199379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.201006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 605.214650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.234026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 605.237211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.260589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.150611][ C0] net_ratelimit: 7329 callbacks suppressed [ 610.150633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.153968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 610.157844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.193994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.195101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 610.207224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.230549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 610.231337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.255315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.268047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 615.160605][ C1] net_ratelimit: 8302 callbacks suppressed [ 615.160624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 615.163379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.167871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 615.180792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.193643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 615.205965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.217621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.229278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.241247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.253269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.170549][ C1] net_ratelimit: 14959 callbacks suppressed [ 620.170569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 620.172689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.178910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.189741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.202272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.214575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.226404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 620.238304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.250672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 620.262670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.180966][ C0] net_ratelimit: 13619 callbacks suppressed [ 625.180988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.182523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.188128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.210082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.213459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.234592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 625.236473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.258093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 625.260909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.294862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 630.190735][ C0] net_ratelimit: 7770 callbacks suppressed [ 630.190755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.194464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 630.197713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.227888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.233984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.255428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.258276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.280247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 630.282438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.303193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 635.200777][ C0] net_ratelimit: 7758 callbacks suppressed [ 635.200799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.203830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 635.207892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.240833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.245331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.267986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.269100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.289777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 635.294664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.315950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 640.210775][ C0] net_ratelimit: 8284 callbacks suppressed [ 640.210796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.215332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 640.219068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.241735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 640.256105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.278341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.283520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 640.291636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.314935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.327118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 645.220689][ C0] net_ratelimit: 8220 callbacks suppressed [ 645.220710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.239290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.239605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 645.252676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.274181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.281500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.299126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.301219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.324929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.337603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.230865][ C0] net_ratelimit: 8238 callbacks suppressed [ 650.230886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.248791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 650.249882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.275686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.280041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 650.289181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.307305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.314261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.336512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.336715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.241454][ C0] net_ratelimit: 8185 callbacks suppressed [ 655.241475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.243858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.248890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.269536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 655.273866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.293032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 655.297306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.332608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 655.333840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.358326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.643947][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 658.665562][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.252283][ C0] net_ratelimit: 8297 callbacks suppressed [ 660.252305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.255510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 660.259459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.279247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.284483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.306456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.316987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 660.319961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.340937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 660.345135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.260539][ C0] net_ratelimit: 8317 callbacks suppressed [ 665.260561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.263667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 665.267745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.303563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 665.307197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.326474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.329333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.352706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.352908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.377902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.270942][ C0] net_ratelimit: 8285 callbacks suppressed [ 670.270963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.283375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 670.290616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.313889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.322417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 670.331482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.346630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.351543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.373507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.376075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.282210][ C0] net_ratelimit: 8317 callbacks suppressed [ 675.282231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.297145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 675.301543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.325352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.332906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 675.338971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.357496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.364115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.383998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.387949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.290692][ C0] net_ratelimit: 8294 callbacks suppressed [ 680.290715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.292085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 680.297785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.331664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 680.334500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.352637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.358655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.381976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.382628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.404756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 685.300656][ C0] net_ratelimit: 8396 callbacks suppressed [ 685.300680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.318123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 685.323889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.338028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.344318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.367668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.368514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.390182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 685.393524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.416703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 689.760507][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 689.767734][ C1] rcu: (detected by 1, t=10502 jiffies, g=46545, q=479 ncpus=2) [ 689.775682][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 6580 (4295006054-4294999474), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 689.789124][ C1] rcu: rcu_preempt kthread starved for 6580 jiffies! g46545 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 689.800391][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 689.810492][ C1] rcu: RCU grace-period kthread stack dump: [ 689.816444][ C1] task:rcu_preempt state:R running task stack:26728 pid:17 ppid:2 flags:0x00004000 [ 689.827305][ C1] Call Trace: [ 689.830633][ C1] [ 689.833715][ C1] __schedule+0x1553/0x45a0 [ 689.838319][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 689.844280][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 689.850328][ C1] ? asan.module_dtor+0x20/0x20 [ 689.855305][ C1] ? enqueue_timer+0x23d/0x550 [ 689.860146][ C1] ? __mod_timer+0x984/0xdb0 [ 689.864824][ C1] schedule+0xbd/0x170 [ 689.868962][ C1] schedule_timeout+0x188/0x2d0 [ 689.873889][ C1] ? console_conditional_schedule+0x40/0x40 [ 689.879838][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 689.885824][ C1] ? update_process_times+0x1b0/0x1b0 [ 689.891260][ C1] ? prepare_to_swait_event+0x339/0x360 [ 689.896880][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 689.901809][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 689.908019][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 689.913275][ C1] ? rcu_gp_init+0x1560/0x1560 [ 689.918092][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 689.924172][ C1] ? finish_swait+0xc7/0x1d0 [ 689.928855][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 689.933710][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 689.939470][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 689.944552][ C1] ? __kthread_parkme+0x162/0x1c0 [ 689.949639][ C1] kthread+0x2fa/0x390 [ 689.953762][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 689.958935][ C1] ? kthread_blkcg+0xd0/0xd0 [ 689.963630][ C1] ret_from_fork+0x48/0x80 [ 689.968119][ C1] ? kthread_blkcg+0xd0/0xd0 [ 689.972952][ C1] ret_from_fork_asm+0x11/0x20 [ 689.978026][ C1] [ 689.981124][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 689.987580][ C1] CPU: 1 PID: 12823 Comm: syz.0.2364 Not tainted syzkaller #0 [ 689.995091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 690.005199][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 690.011333][ C1] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 1c f6 03 0d 48 89 de 5b e9 d3 67 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b0 93 7c 7e 65 8b 15 b1 93 7c 7e 81 e2 00 01 ff 00 74 [ 690.031005][ C1] RSP: 0018:ffffc900001efa90 EFLAGS: 00000212 [ 690.037127][ C1] RAX: ffffffff813b3cc1 RBX: ffffffff8ef0b05c RCX: ffff888022df0000 [ 690.045163][ C1] RDX: 0000000000000100 RSI: ffffffff88b5f465 RDI: ffffffff88b5da38 [ 690.053190][ C1] RBP: ffffffff8ef0b05c R08: ffffc900001efc30 R09: 0000000000000022 [ 690.061300][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8ef0b060 [ 690.069330][ C1] R13: ffffffff88b5da38 R14: ffffffff88b5f465 R15: ffffffff8ef0b05c [ 690.077363][ C1] FS: 00007fab38e406c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 690.086364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.093025][ C1] CR2: 00007f411f64feb8 CR3: 0000000026278000 CR4: 00000000003506e0 [ 690.101062][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 690.109178][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 690.117312][ C1] Call Trace: [ 690.120649][ C1] [ 690.123556][ C1] unwind_next_frame+0x501/0x2970 [ 690.128666][ C1] ? bpf_test_run_xdp_live+0x1a35/0x1b20 [ 690.134402][ C1] ? bpf_test_run_xdp_live+0x1a36/0x1b20 [ 690.140093][ C1] ? bpf_test_run_xdp_live+0x1a36/0x1b20 [ 690.145800][ C1] ? stack_trace_save+0x100/0x100 [ 690.150892][ C1] arch_stack_walk+0x144/0x190 [ 690.155720][ C1] ? bpf_test_run_xdp_live+0x1a36/0x1b20 [ 690.161505][ C1] stack_trace_save+0xaa/0x100 [ 690.166339][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 690.171610][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 690.176868][ C1] kasan_set_track+0x4e/0x70 [ 690.181509][ C1] ? kasan_set_track+0x4e/0x70 [ 690.186426][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 690.191515][ C1] ? slab_post_alloc_hook+0x6e/0x4b0 [ 690.197032][ C1] ? kmem_cache_alloc+0x11a/0x2d0 [ 690.202118][ C1] ? skb_ext_add+0x1b3/0x8e0 [ 690.206762][ C1] ? br_nf_forward_ip+0xc6/0x1110 [ 690.211841][ C1] ? nf_hook_slow+0xbd/0x200 [ 690.216661][ C1] ? NF_HOOK+0x23e/0x3e0 [ 690.220965][ C1] ? __br_forward+0x433/0x610 [ 690.225795][ C1] ? br_handle_frame_finish+0x13c5/0x18f0 [ 690.231606][ C1] ? br_nf_hook_thresh+0x3cd/0x4a0 [ 690.236820][ C1] ? br_nf_pre_routing_finish_ipv6+0x9dc/0xd00 [ 690.243030][ C1] ? br_nf_pre_routing_ipv6+0x349/0x6b0 [ 690.248637][ C1] ? br_handle_frame+0x1245/0x14d0 [ 690.253929][ C1] ? __netif_receive_skb_core+0xfab/0x3af0 [ 690.260135][ C1] ? __netif_receive_skb+0x74/0x290 [ 690.265390][ C1] ? process_backlog+0x391/0x6f0 [ 690.270414][ C1] ? __napi_poll+0xc0/0x460 [ 690.274969][ C1] ? net_rx_action+0x616/0xc40 [ 690.279871][ C1] ? handle_softirqs+0x280/0x820 [ 690.284860][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 690.289943][ C1] ? irq_exit_rcu+0x9/0x20 [ 690.294495][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 690.300354][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.306603][ C1] ? __sanitizer_cov_trace_switch+0x84/0x120 [ 690.312654][ C1] ? unwind_next_frame+0x655/0x2970 [ 690.316571][ C0] net_ratelimit: 7026 callbacks suppressed [ 690.316620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.318250][ C1] ? arch_stack_walk+0x144/0x190 [ 690.325717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.336114][ C1] ? stack_trace_save+0xaa/0x100 [ 690.336145][ C1] ? save_stack+0x125/0x230 [ 690.336163][ C1] ? __reset_page_owner+0x4e/0x190 [ 690.343338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.353098][ C1] ? free_unref_page_prepare+0x7b2/0x8c0 [ 690.353138][ C1] ? free_unref_page+0x32/0x2e0 [ 690.359808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.362632][ C1] ? page_pool_release+0x3fb/0xaf0 [ 690.362665][ C1] ? page_pool_destroy+0x284/0x490 [ 690.362690][ C1] ? bpf_test_run_xdp_live+0x1a36/0x1b20 [ 690.370344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.379836][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 690.379873][ C1] __kasan_slab_alloc+0x6c/0x80 [ 690.387977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.390443][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 690.404068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.407692][ C1] kmem_cache_alloc+0x11a/0x2d0 [ 690.414144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.418472][ C1] ? skb_ext_add+0x1b3/0x8e0 [ 690.431750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.436366][ C1] skb_ext_add+0x1b3/0x8e0 [ 690.442718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.453275][ C1] br_nf_forward_ip+0xc6/0x1110 [ 690.453305][ C1] ? do_syscall_64+0x55/0xa0 [ 690.453323][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.536338][ C1] ? read_lock_is_recursive+0x20/0x20 [ 690.541830][ C1] ? br_nf_local_in+0x460/0x460 [ 690.546764][ C1] nf_hook_slow+0xbd/0x200 [ 690.551257][ C1] ? br_dev_queue_push_xmit+0x870/0x870 [ 690.556881][ C1] ? br_dev_queue_push_xmit+0x870/0x870 [ 690.562513][ C1] NF_HOOK+0x23e/0x3e0 [ 690.566654][ C1] ? NF_HOOK+0xa3/0x3e0 [ 690.570883][ C1] ? br_forward_finish+0x130/0x130 [ 690.576065][ C1] ? br_dev_queue_push_xmit+0x870/0x870 [ 690.581688][ C1] __br_forward+0x433/0x610 [ 690.586250][ C1] ? br_dev_queue_push_xmit+0x870/0x870 [ 690.591893][ C1] ? skb_clone+0x21f/0x370 [ 690.596385][ C1] ? should_deliver+0x380/0x380 [ 690.601304][ C1] br_handle_frame_finish+0x13c5/0x18f0 [ 690.607122][ C1] ? brport_get_ownership+0x80/0x80 [ 690.612391][ C1] ? ip6t_do_table+0x1d9/0x1510 [ 690.617308][ C1] ? nf_hook_slow+0x16c/0x200 [ 690.622047][ C1] ? brport_get_ownership+0x80/0x80 [ 690.627308][ C1] br_nf_hook_thresh+0x3cd/0x4a0 [ 690.632307][ C1] ? brnf_get_logical_dev+0x270/0x270 [ 690.637905][ C1] ? brport_get_ownership+0x80/0x80 [ 690.643174][ C1] br_nf_pre_routing_finish_ipv6+0x9dc/0xd00 [ 690.649305][ C1] ? brport_get_ownership+0x80/0x80 [ 690.654749][ C1] br_nf_pre_routing_ipv6+0x349/0x6b0 [ 690.660264][ C1] ? br_nf_pre_routing_ipv6+0x3f2/0x6b0 [ 690.665913][ C1] ? br_validate_ipv6+0x730/0x730 [ 690.671005][ C1] ? br_nf_pre_routing_ipv6+0x6b0/0x6b0 [ 690.676626][ C1] ? br_nf_pre_routing+0x70f/0x1420 [ 690.681894][ C1] ? br_nf_hook_thresh+0x4a0/0x4a0 [ 690.687145][ C1] br_handle_frame+0x1245/0x14d0 [ 690.692151][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 690.697553][ C1] ? brport_get_ownership+0x80/0x80 [ 690.702821][ C1] ? ip6_mc_input+0xaa0/0xcb0 [ 690.707654][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 690.713017][ C1] __netif_receive_skb_core+0xfab/0x3af0 [ 690.718716][ C1] ? ip6_input_finish+0x2c0/0x2c0 [ 690.723813][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 690.728984][ C1] ? NF_HOOK+0x32d/0x3b0 [ 690.733290][ C1] ? qdisc_run+0x230/0x230 [ 690.737953][ C1] ? process_backlog+0x2cf/0x6f0 [ 690.743031][ C1] ? read_lock_is_recursive+0x20/0x20 [ 690.748464][ C1] ? process_backlog+0x2cf/0x6f0 [ 690.753537][ C1] __netif_receive_skb+0x74/0x290 [ 690.758635][ C1] ? process_backlog+0x2cf/0x6f0 [ 690.763644][ C1] process_backlog+0x391/0x6f0 [ 690.768481][ C1] ? trigger_rx_softirq+0x60/0x60 [ 690.773560][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 690.779609][ C1] ? lock_chain_count+0x20/0x20 [ 690.784529][ C1] __napi_poll+0xc0/0x460 [ 690.788999][ C1] ? net_rx_action+0x3a0/0xc40 [ 690.793823][ C1] net_rx_action+0x616/0xc40 [ 690.798516][ C1] ? net_tx_action+0x980/0x980 [ 690.803435][ C1] ? detach_timer+0x2b0/0x2b0 [ 690.808267][ C1] ? lock_chain_count+0x20/0x20 [ 690.813184][ C1] handle_softirqs+0x280/0x820 [ 690.818005][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 690.822911][ C1] ? do_softirq+0x1a0/0x1a0 [ 690.827491][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 690.832768][ C1] __irq_exit_rcu+0xd3/0x190 [ 690.837590][ C1] ? irq_exit_rcu+0x20/0x20 [ 690.842245][ C1] irq_exit_rcu+0x9/0x20 [ 690.846544][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 690.852241][ C1] [ 690.855215][ C1] [ 690.858200][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.864351][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x84/0x120 [ 690.871089][ C1] Code: b9 01 00 00 00 48 85 c0 0f 84 ae 00 00 00 41 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 05 84 8e 7c 7e 45 31 c9 eb 08 49 ff c1 <4c> 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 72 8e 7c 7e 41 81 e3 00 [ 690.890766][ C1] RSP: 0018:ffffc900042c7350 EFLAGS: 00000203 [ 690.897154][ C1] RAX: 0000000000000002 RBX: ffffffff8f1a8088 RCX: 0000000000000003 [ 690.905191][ C1] RDX: ffffffff813b3e15 RSI: ffffffff8cfa07c0 RDI: 0000000000000002 [ 690.913401][ C1] RBP: ffffc900042c7498 R08: ffff888022df0000 R09: 0000000000000001 [ 690.921530][ C1] R10: 0000000000000000 R11: 0000000000000002 R12: ffffc900042c7448 [ 690.929561][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffffff8f1a808d [ 690.937686][ C1] ? unwind_next_frame+0x655/0x2970 [ 690.943131][ C1] unwind_next_frame+0x655/0x2970 [ 690.948395][ C1] ? save_stack+0x124/0x230 [ 690.952961][ C1] ? save_stack+0x125/0x230 [ 690.957535][ C1] ? save_stack+0x125/0x230 [ 690.962098][ C1] ? stack_trace_save+0x100/0x100 [ 690.967188][ C1] arch_stack_walk+0x144/0x190 [ 690.972070][ C1] ? save_stack+0x125/0x230 [ 690.976641][ C1] stack_trace_save+0xaa/0x100 [ 690.981556][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 690.986827][ C1] save_stack+0x125/0x230 [ 690.991217][ C1] ? __reset_page_owner+0x190/0x190 [ 690.996483][ C1] ? page_ext_get+0x22/0x2b0 [ 691.001135][ C1] ? page_ext_get+0x1e2/0x2b0 [ 691.005869][ C1] __reset_page_owner+0x4e/0x190 [ 691.010944][ C1] ? rcu_is_watching+0x15/0xb0 [ 691.015820][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 691.021363][ C1] free_unref_page+0x32/0x2e0 [ 691.026120][ C1] ? __folio_put+0xef/0x210 [ 691.030692][ C1] page_pool_release+0x3fb/0xaf0 [ 691.035739][ C1] page_pool_destroy+0x284/0x490 [ 691.040747][ C1] bpf_test_run_xdp_live+0x1a36/0x1b20 [ 691.046279][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 691.051143][ C1] ? bpf_test_run_xdp_live+0x4d6/0x1b20 [ 691.056770][ C1] ? xdp_convert_md_to_buff+0x330/0x330 [ 691.062528][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 691.067869][ C1] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 691.074193][ C1] ? bpf_prog_test_run_xdp+0x7a6/0x10e0 [ 691.079997][ C1] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 691.085547][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 691.090821][ C1] ? dev_put+0x80/0x80 [ 691.094959][ C1] ? bpf_prog_test_run+0x256/0x390 [ 691.100250][ C1] ? dev_put+0x80/0x80 [ 691.104390][ C1] bpf_prog_test_run+0x321/0x390 [ 691.109436][ C1] __sys_bpf+0x49d/0x890 [ 691.113817][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 691.119271][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 691.125551][ C1] __x64_sys_bpf+0x7c/0x90 [ 691.130028][ C1] do_syscall_64+0x55/0xa0 [ 691.134560][ C1] ? clear_bhb_loop+0x40/0x90 [ 691.139302][ C1] ? clear_bhb_loop+0x40/0x90 [ 691.144045][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.150003][ C1] RIP: 0033:0x7fab37f9c819 [ 691.154615][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.174381][ C1] RSP: 002b:00007fab38e40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.182853][ C1] RAX: ffffffffffffffda RBX: 00007fab38215fa0 RCX: 00007fab37f9c819 [ 691.191369][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 691.199499][ C1] RBP: 00007fab38032c91 R08: 0000000000000000 R09: 0000000000000000 [ 691.207528][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.215649][ C1] R13: 00007fab38216038 R14: 00007fab38215fa0 R15: 00007ffe8a177888 [ 691.223701][ C1] [ 692.725526][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.745232][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.320885][ C1] net_ratelimit: 9370 callbacks suppressed [ 695.320907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 695.338570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.339964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:65:b9:3a:96:00, vlan:0) [ 695.363374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.364993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 695.388799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d8:b9:29:1b:c9, vlan:0) [ 695.391399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.402182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.425473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.438235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)