last executing test programs: 10.291564289s ago: executing program 1 (id=3043): socket$kcm(0xa, 0x2, 0x73) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x43) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) 10.193223904s ago: executing program 2 (id=3044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x26, 0xa, 0x2f, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="bb3874b27c354d1a2a1177a2aa98b4d0333de8ba26c5cf6a0ad5eef84edd04084489109e0b01021380526e07510dbfdc1098263443d959011ec96aab60aa25c33290729825743f5d1e3ced962763cfa7c1e4e67a022647d6d4e5db941d9024e3a302007f8292d1fb71d764e704d1ca570e15e62932d833adddc47033bd9c2e4c164629990e79012a328c905ccc7478d566509f26ccb7ea0cedd46009143b95a754cf9dcd186fc83fad44528eaaedb1f15e7714a8ac94d2a1ac98543cb22fddcac931630981940cdeb7c08000c1", 0xcd}], 0x1}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000200), 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2200, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xed, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x7}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x454}, 0x10001, 0x7ff, 0x0, 0x7, 0x3, 0x4, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200), 0x21) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00b88141b99b6aeeeb1f0000000000000000691e271c2e88c5bf01db41", @ANYRES16=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x1000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) 10.009458773s ago: executing program 1 (id=3046): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r1) perf_event_open(&(0x7f0000001c40)={0x2, 0x80, 0xed, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8006, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2000000000000000, 0x3f, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x888102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r6, 0x0, 0x0) r7 = syz_clone(0x200a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_pid(r8, &(0x7f0000000300)=r7, 0x12) 9.455530932s ago: executing program 0 (id=3048): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffff, 0x8000000}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x48) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4d, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0xfd, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0xbafa, 0xff, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 9.125297189s ago: executing program 3 (id=3049): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r4}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x9a, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000340), 0x8, 0x3f, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000001640)={0x0, r4}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) 9.068301252s ago: executing program 1 (id=3050): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x15, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x1, 0x0}, 0x20000044) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48880}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x8}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="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", 0x5d9}], 0x3}, 0x40000) r4 = socket$kcm(0x11, 0x2, 0x300) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x6, 0x3}, 0x80, &(0x7f0000000640), 0x10000000000000c3}, 0x40880) recvmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0) 9.021833385s ago: executing program 0 (id=3051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000002000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.008912305s ago: executing program 2 (id=3052): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x26, 0xa, 0x2f, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="bb3874b27c354d1a2a1177a2aa98b4d0333de8ba26c5cf6a0ad5eef84edd04084489109e0b01021380526e07510dbfdc1098263443d959011ec96aab60aa25c33290729825743f5d1e3ced962763cfa7c1e4e67a022647d6d4e5db941d9024e3a302007f8292d1fb71d764e704d1ca570e15e62932d833adddc47033bd9c2e4c164629990e79012a328c905ccc7478d566509f26ccb7ea0cedd46009143b95a754cf9dcd186fc83fad44528eaaedb1f15e7714a8ac94d2a1ac98543cb22fddcac931630981940cdeb7c08000c1", 0xcd}], 0x1}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000200), 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2200, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xed, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x7}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x454}, 0x10001, 0x7ff, 0x0, 0x7, 0x3, 0x4, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200), 0x21) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00b88141b99b6aeeeb1f0000000000000000691e271c2e88c5bf01db41", @ANYRES16=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000001740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x1000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) 8.861470042s ago: executing program 0 (id=3053): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x15, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x1, 0x0}, 0x20000044) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48880}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x8}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="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", 0x5d9}], 0x3}, 0x40000) r4 = socket$kcm(0x11, 0x2, 0x300) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x6, 0x3}, 0x80, &(0x7f0000000640), 0x10000000000000c3}, 0x40880) recvmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0) 8.231433205s ago: executing program 1 (id=3054): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x12, 0xbd}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059feffff7f00002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe21}], 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) 8.13339878s ago: executing program 3 (id=3055): close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x43) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) 8.007586257s ago: executing program 1 (id=3056): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1c000000210081044e81f782db440000800000000015000000000000", 0x1c}], 0x1}, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000100)=r2, 0x5d) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0x22, 0x5, 0x21) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x88db4cac6a458c69) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000280), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 8.006472167s ago: executing program 2 (id=3057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x26, 0xa, 0x2f, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="bb3874b27c354d1a2a1177a2aa98b4d0333de8ba26c5cf6a0ad5eef84edd04084489109e0b01021380526e07510dbfdc1098263443d959011ec96aab60aa25c33290729825743f5d1e3ced962763cfa7c1e4e67a022647d6d4e5db941d9024e3a302007f8292d1fb71d764e704d1ca570e15e62932d833adddc47033bd9c2e4c164629990e79012a328c905ccc7478d566509f26ccb7ea0cedd46009143b95a754cf9dcd186fc83fad44528eaaedb1f15e7714a8ac94d2a1ac98543cb22fddcac931630981940cdeb7c08000c1", 0xcd}], 0x1}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2200, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xed, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x7}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x454}, 0x10001, 0x7ff, 0x0, 0x7, 0x3, 0x4, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200), 0x21) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000001740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x1000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) 7.996217957s ago: executing program 3 (id=3058): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c000ec05e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) 7.837235426s ago: executing program 3 (id=3059): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r1) perf_event_open(&(0x7f0000001c40)={0x2, 0x80, 0xed, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8006, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2000000000000000, 0x3f, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x888102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r6, 0x0, 0x0) r7 = syz_clone(0x200a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_pid(r8, &(0x7f0000000300)=r7, 0x12) 4.810000112s ago: executing program 0 (id=3060): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x828, 0x0, 0xf0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='syz_tun\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000025a61da600000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) perf_event_open(&(0x7f0000000040)={0x2, 0x56, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(r2, 0xb702, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) 4.723911627s ago: executing program 1 (id=3061): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x26, 0xa, 0x2f, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="bb3874b27c354d1a2a1177a2aa98b4d0333de8ba26c5cf6a0ad5eef84edd04084489109e0b01021380526e07510dbfdc1098263443d959011ec96aab60aa25c33290729825743f5d1e3ced962763cfa7c1e4e67a022647d6d4e5db941d9024e3a302007f8292d1fb71d764e704d1ca570e15e62932d833adddc47033bd9c2e4c164629990e79012a328c905ccc7478d566509f26ccb7ea0cedd46009143b95a754cf9dcd186fc83fad44528eaaedb1f15e7714a8ac94d2a1ac98543cb22fddcac931630981940cdeb7c08000c1", 0xcd}], 0x1}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000200), 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2200, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xed, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x7}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x454}, 0x10001, 0x7ff, 0x0, 0x7, 0x3, 0x4, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200), 0x21) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00b88141b99b6aeeeb1f0000000000000000691e271c2e88c5bf01db41", @ANYRES16=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x1000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) 4.723466827s ago: executing program 3 (id=3062): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x15, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x1, 0x0}, 0x20000044) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48880}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x8}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="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", 0x5d9}], 0x3}, 0x40000) r4 = socket$kcm(0x11, 0x2, 0x300) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x6, 0x3}, 0x80, &(0x7f0000000640), 0x10000000000000c3}, 0x40880) recvmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0) 4.683405629s ago: executing program 2 (id=3063): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x38}, 0x0) 4.433675071s ago: executing program 2 (id=3064): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r4}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x9a, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000340), 0x8, 0x3f, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000001640)={0x0, r4}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) 4.223350262s ago: executing program 0 (id=3065): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x8, 0x0, 0x0, 0x0, 0x0, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b8b, 0x2, @perf_config_ext={0xfff, 0x3}, 0x8004, 0xcdd, 0x43a1bd76, 0x9, 0x9, 0x6, 0x8002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffeffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="070000000000000071114200000000008510000002000000850000000500000095000000000000009500a50500000000beb621dfc271e44a026c909014472d1320cd2287074d263f71cec75364e95308d1d917994b42eb1a8898b33ec0e060f8afc8502f2dbe4e68fa02d03438d5d9b8af5085c8d8e2ffd5bf5bd76de0fb2b8eaee411c298a600000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26, 0x0, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000080), &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff24}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@phonet={0x23, 0x8, 0x0, 0xd}, 0xb2, &(0x7f0000000040)=[{&(0x7f0000000b40)="27059f161608140006fe002f1b10e15747a0eefca5792ecd2ed46b162a430ebff8c87c077617ae0a154bb257e8fffa606d209d614d7820fb76cee48aeb328b5c4c2085585bfac7ee1fb5df1670a081f5ff000000000000", 0x57}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xd0df) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x2, 0x6, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5a}}], 0x18}, 0x0) socket$kcm(0x2, 0x0, 0x84) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000640)="71c2aabde1ae6bd142ec269ffa5c41697d0ca54f7ead2db0ed7fc7e71b701553d189a55a4ffc5de3e763419f366d7625025162a2e51d90a8f32e809264b63d742bccfeb8ac3d294b6ef96a240fe2dcdedcd0fb51cba1e63acc21234d08a137fd483b0ee77dffb82b895a6e3375bb56c8eb78a0c7a3d06ebb14eda18f24ba433bc072faed515ab30e6a9e3db112d5c23a8dbb18cc75ff7f1bd5a77f47e4ab8f33cbff95", 0xa3}, {&(0x7f0000000700)="1b62a87d2267f0caa16b7d10e10661a4885309c975145a0f04e46529d50211fe22d3b743cd4db94935c1704f7e9acedb0aae8b9935ebfc729487dd19e18e14877bda6420d1f4e9115283a29ec0bf53c8f5c09051dd857abd97b6a206befe9211b94b4d2c87c94393bf4951", 0x6b}], 0x2, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x97}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa852}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x6401010a}}}], 0x50}, 0x20000080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) socket$kcm(0x10, 0x2, 0x10) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x100}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x20, 0x20040040}, 0x20040014) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0x1, &(0x7f0000000100)="3b2f621299aa866fd614712b0c1985562846e8dafeee5fdf610497181d83e932f0ab1b904e9084d78b6fe8b52052cd529bbf37454f7c5a37ca2512036627b27c44cf7e3ed711e461cae3ee88143f076642e5ada585bb1790e1d7daf26d80babda99035472a0db255bca750a56dd9e57b5459d3b507c4c53e324535433e166c93", &(0x7f00000001c0)=""/79}, 0x20) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688110000000000", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)={'full', 0x20, 0x1da18898, 0x20, 0x4800000}, 0x2f) 822.073809ms ago: executing program 3 (id=3066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x26, 0xa, 0x2f, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="bb3874b27c354d1a2a1177a2aa98b4d0333de8ba26c5cf6a0ad5eef84edd04084489109e0b01021380526e07510dbfdc1098263443d959011ec96aab60aa25c33290729825743f5d1e3ced962763cfa7c1e4e67a022647d6d4e5db941d9024e3a302007f8292d1fb71d764e704d1ca570e15e62932d833adddc47033bd9c2e4c164629990e79012a328c905ccc7478d566509f26ccb7ea0cedd46009143b95a754cf9dcd186fc83fad44528eaaedb1f15e7714a8ac94d2a1ac98543cb22fddcac931630981940cdeb7c08000c1", 0xcd}], 0x1}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000200), 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2200, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xed, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x7}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x454}, 0x10001, 0x7ff, 0x0, 0x7, 0x3, 0x4, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200), 0x21) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00b88141b99b6aeeeb1f0000000000000000691e271c2e88c5bf01db41", @ANYRES16=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000001740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x1000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) 73.813417ms ago: executing program 2 (id=3067): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89ff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x0, 0x0, &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0xb, 0x523}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000009c0)=[{0x5, 0x4, 0xb, 0x3}, {0x1, 0x5, 0x7}, {0x5, 0x2, 0x0, 0x4}, {0x0, 0x1, 0x3, 0x6}, {0x0, 0x5, 0xa, 0x9}, {0x0, 0x5, 0x7, 0xc}], 0x10, 0xd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000900"/20, @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000200"/28], 0x4) r3 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x6, 0x4, 0x6, 0x3, 0x0, 0x2, 0xa4000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xcc4f, 0x40}, 0x300, 0x2, 0x80, 0x9, 0x9, 0x8, 0x20, 0x0, 0xf7f3, 0x0, 0x1000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x14) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x86d) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000240)) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 0 (id=3068): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000340)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) kernel console output (not intermixed with test programs): eout [ 583.399928][T13583] netlink: 'syz.2.2452': attribute type 6 has an invalid length. [ 583.411218][T13583] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2452'. [ 583.442763][T13582] netlink: 'syz.3.2453': attribute type 28 has an invalid length. [ 583.660681][T10551] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.765234][T10551] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.864029][T10551] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.993970][T10551] bond0: (slave netdevsim0): Releasing backup interface [ 584.003594][T10551] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 584.019262][T10551] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.159344][T13577] chnl_net:caif_netlink_parms(): no params data found [ 584.598957][T13577] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.607539][T13577] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.615103][T13577] bridge_slave_0: entered allmulticast mode [ 584.627065][T13577] bridge_slave_0: entered promiscuous mode [ 584.698005][T13024] Bluetooth: hci1: command tx timeout [ 584.854833][T13577] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.867462][T13577] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.874883][T13577] bridge_slave_1: entered allmulticast mode [ 584.884338][T13577] bridge_slave_1: entered promiscuous mode [ 584.914306][T13630] netlink: 'syz.3.2462': attribute type 21 has an invalid length. [ 584.929099][T13630] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2462'. [ 584.952441][T13626] netlink: 'syz.2.2463': attribute type 10 has an invalid length. [ 584.962509][T13626] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2463'. [ 584.977609][T13626] batadv_slave_1: entered promiscuous mode [ 584.995337][T13626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.013218][T13626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.132076][T13633] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 585.169066][T13633] syzkaller0: entered promiscuous mode [ 585.174627][T13633] syzkaller0: entered allmulticast mode [ 585.209341][T13577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.294978][T13577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.779829][T13024] Bluetooth: hci1: command tx timeout [ 587.278490][T13577] team0: Port device team_slave_0 added [ 587.292727][T13577] team0: Port device team_slave_1 added [ 587.301267][T13654] netlink: 'syz.2.2466': attribute type 10 has an invalid length. [ 587.320085][T13654] macvlan1: entered allmulticast mode [ 587.339662][T13654] veth1_vlan: entered allmulticast mode [ 587.362992][T13654] team0: Port device macvlan1 added [ 587.573361][T13577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.594952][T13577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.643323][T13577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.698544][T13577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.728754][T13577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.774595][T13577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.023357][T13577] hsr_slave_0: entered promiscuous mode [ 588.039164][T13577] hsr_slave_1: entered promiscuous mode [ 588.052460][T13577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.066178][T13577] Cannot create hsr debugfs directory [ 588.646427][T10551] veth0_to_team: left allmulticast mode [ 588.655453][T10551] veth0_to_team: left promiscuous mode [ 588.673290][T10551] Ÿë: port 1(veth0_to_team) entered disabled state [ 588.736995][T10551] hsr_slave_0: left promiscuous mode [ 588.757071][T10551] hsr_slave_1: left promiscuous mode [ 588.863829][T10551] veth1_macvtap: left promiscuous mode [ 588.881613][T10551] veth0_macvtap: left promiscuous mode [ 588.888646][T10551] veth1_vlan: left promiscuous mode [ 588.894037][T10551] 6: left promiscuous mode [ 589.704302][T10551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.713333][T10551] bond_slave_1 (unregistering): left promiscuous mode [ 589.795362][T10551] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 589.806356][T10551] bridge_slave_1 (unregistering): left promiscuous mode [ 590.047752][T10551] bond0 (unregistering): Released all slaves [ 590.783978][T13577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 590.797863][T13577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 590.809674][T13577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 590.830603][T13577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 590.963675][T13577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.005544][T13577] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.025227][T10549] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.032490][T10549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.052388][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.059587][T10560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.402691][T13577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.464399][T13577] veth0_vlan: entered promiscuous mode [ 591.489727][T13577] veth1_vlan: entered promiscuous mode [ 591.550649][T13577] veth0_macvtap: entered promiscuous mode [ 591.563469][T13577] veth1_macvtap: entered promiscuous mode [ 591.593616][T13577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.608150][T13577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.619259][T13577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.634027][T13577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.651723][T13577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.668405][T13577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.684963][T13577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.704153][T13577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.718148][T13577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.727480][T13577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.737653][T13577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.746829][T13577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.856800][T10549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.864678][T10549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.912209][T10549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.921248][T10549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.042615][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 593.058774][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 593.067066][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.104075][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.113736][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 593.123582][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 593.255429][T13758] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 593.305960][T13758] macvlan1: entered allmulticast mode [ 593.460500][T13758] veth1_vlan: entered allmulticast mode [ 593.596725][T13758] team0: Port device macvlan1 added [ 593.693333][T13761] netlink: 'syz.0.2477': attribute type 21 has an invalid length. [ 593.710339][T13761] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2477'. [ 593.863055][ T5770] syz_tun (unregistering): left promiscuous mode [ 593.879876][ T5770] team0: Port device syz_tun removed [ 594.772647][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.841455][T13761] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 594.865368][T13761] syzkaller0: entered promiscuous mode [ 594.871501][T13761] syzkaller0: entered allmulticast mode [ 595.179906][T13024] Bluetooth: hci2: command tx timeout [ 596.925871][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.957079][T13810] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2489'. [ 597.107491][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.229303][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.276717][T13024] Bluetooth: hci2: command tx timeout [ 597.361267][T13751] chnl_net:caif_netlink_parms(): no params data found [ 597.552106][T13751] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.583606][T13751] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.606430][T13751] bridge_slave_0: entered allmulticast mode [ 597.627313][T13751] bridge_slave_0: entered promiscuous mode [ 597.648366][T13751] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.666802][T13751] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.674126][T13751] bridge_slave_1: entered allmulticast mode [ 597.711875][T13751] bridge_slave_1: entered promiscuous mode [ 597.885111][T13751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.043155][T13751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.128941][T13751] team0: Port device team_slave_0 added [ 598.153535][T13751] team0: Port device team_slave_1 added [ 598.452258][T13751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.485718][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.585786][T13751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.614633][T13751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.679072][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.765249][T13751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.336326][T13024] Bluetooth: hci2: command tx timeout [ 599.467752][T13751] hsr_slave_0: entered promiscuous mode [ 599.474615][T13751] hsr_slave_1: entered promiscuous mode [ 601.432051][T13024] Bluetooth: hci2: command tx timeout [ 602.092781][T13915] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 602.257388][T13914] netlink: 'syz.2.2516': attribute type 21 has an invalid length. [ 602.349603][ T12] veth0_to_team: left allmulticast mode [ 602.393527][ T12] veth0_to_team: left promiscuous mode [ 602.422636][ T12] Ÿë: port 1(veth0_to_team) entered disabled state [ 602.520289][ T12] hsr_slave_0: left promiscuous mode [ 602.562998][ T12] hsr_slave_1: left promiscuous mode [ 602.628627][ T12] veth1_vlan: left promiscuous mode [ 602.639731][ T12] 6: left promiscuous mode [ 603.335417][ T12] team_slave_1 (unregistering): left promiscuous mode [ 603.350465][ T12] team0 (unregistering): Port device team_slave_1 removed [ 603.394642][ T12] C (unregistering): left promiscuous mode [ 603.402441][ T12] team0 (unregistering): Port device C removed [ 603.449587][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.460129][ T12] bond_slave_1 (unregistering): left promiscuous mode [ 603.549500][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 603.559274][ T12] bridge_slave_1 (unregistering): left promiscuous mode [ 603.852782][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 603.862393][ T12] team0 (unregistering): left promiscuous mode [ 603.899113][ T12] bond0 (unregistering): Released all slaves [ 603.955887][T13932] netlink: 'syz.1.2522': attribute type 10 has an invalid length. [ 603.994540][T13932] veth1_macvtap: left promiscuous mode [ 604.601570][T13751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 604.660553][T13751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 604.772677][T13751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 604.827374][T13751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 605.159729][T13946] mac80211_hwsim hwsim18 »»»»»»: renamed from wlan0 (while UP) [ 605.547722][T13751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.738822][T13751] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.912847][T10549] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.920174][T10549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.111404][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.118675][T10560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.697459][T13751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.653076][T13751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.750758][T13751] veth0_vlan: entered promiscuous mode [ 607.887647][T13751] veth1_vlan: entered promiscuous mode [ 608.030005][T13989] netlink: 'syz.1.2532': attribute type 21 has an invalid length. [ 608.159534][T13992] netlink: 'syz.1.2532': attribute type 1 has an invalid length. [ 608.452953][T13751] veth0_macvtap: entered promiscuous mode [ 608.499425][T13751] veth1_macvtap: entered promiscuous mode [ 608.701050][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.754690][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.812200][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.841327][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.865204][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.887534][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.900069][T13751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.916660][T13996] mac80211_hwsim hwsim23 »»»»»»: renamed from wlan0 (while UP) [ 609.029933][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.125681][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.136305][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.186417][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.223602][T13751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.450282][T13751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.459323][T13751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.468357][T13751] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.477292][T13751] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.878991][T14011] netlink: 'syz.0.2537': attribute type 9 has an invalid length. [ 609.916602][T14011] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2537'. [ 610.692172][T10551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.732492][T10551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.799666][T10562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.845453][T10562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.024267][T14037] netlink: 'syz.3.2486': attribute type 6 has an invalid length. [ 612.602740][T14086] netlink: 'syz.2.2561': attribute type 17 has an invalid length. [ 612.616456][T14086] netlink: 'syz.2.2561': attribute type 41 has an invalid length. [ 612.645959][T14086] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2561'. [ 613.175306][T14103] netlink: 'syz.2.2556': attribute type 6 has an invalid length. [ 615.281039][T14144] netlink: 'syz.1.2572': attribute type 6 has an invalid length. [ 616.607649][T14152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2573'. [ 617.840748][T14178] netlink: 180428 bytes leftover after parsing attributes in process `syz.2.2583'. [ 617.850903][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2583'. [ 617.936070][T14176] lo: entered allmulticast mode [ 618.039169][T14176] lo: entered promiscuous mode [ 618.044033][T14176] lo: left allmulticast mode [ 620.731065][T14224] lo: entered allmulticast mode [ 620.844230][T14233] lo: entered promiscuous mode [ 620.868946][T14233] lo: left allmulticast mode [ 620.917567][T14231] netlink: 'syz.3.2601': attribute type 10 has an invalid length. [ 621.008622][T14231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2601'. [ 621.030448][T14231] team0: entered promiscuous mode [ 621.042291][T14231] team_slave_0: entered promiscuous mode [ 621.057344][T14231] team_slave_1: entered promiscuous mode [ 621.067229][T14231] team0: entered allmulticast mode [ 621.073476][T14231] team_slave_0: entered allmulticast mode [ 621.080481][T14231] team_slave_1: entered allmulticast mode [ 621.094081][T14231] bridge0: port 3(team0) entered blocking state [ 621.134461][T14231] bridge0: port 3(team0) entered disabled state [ 621.195205][T14231] bridge0: port 3(team0) entered blocking state [ 621.201991][T14231] bridge0: port 3(team0) entered forwarding state [ 621.855533][T14241] netlink: 'syz.0.2604': attribute type 10 has an invalid length. [ 621.966586][T14241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2604'. [ 622.028719][T14241] team0: entered promiscuous mode [ 622.036372][T14241] team_slave_0: entered promiscuous mode [ 622.060736][T14241] team_slave_1: entered promiscuous mode [ 622.173082][T14241] team0: entered allmulticast mode [ 622.189972][T14241] team_slave_0: entered allmulticast mode [ 622.251597][T14241] team_slave_1: entered allmulticast mode [ 622.387544][T14241] bridge0: port 3(team0) entered blocking state [ 622.424312][T14241] bridge0: port 3(team0) entered disabled state [ 622.488660][T14241] bridge0: port 3(team0) entered blocking state [ 622.495296][T14241] bridge0: port 3(team0) entered forwarding state [ 622.511462][T14251] FAULT_INJECTION: forcing a failure. [ 622.511462][T14251] name failslab, interval 1, probability 0, space 0, times 0 [ 622.530988][T14251] CPU: 0 PID: 14251 Comm: syz.1.2607 Not tainted syzkaller #0 [ 622.538526][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 622.548626][T14251] Call Trace: [ 622.551939][T14251] [ 622.554911][T14251] dump_stack_lvl+0x18c/0x250 [ 622.559641][T14251] ? show_regs_print_info+0x20/0x20 [ 622.564890][T14251] ? load_image+0x420/0x420 [ 622.569442][T14251] ? __lock_acquire+0x7d40/0x7d40 [ 622.574522][T14251] should_fail_ex+0x39d/0x4d0 [ 622.579260][T14251] should_failslab+0x9/0x20 [ 622.583841][T14251] slab_pre_alloc_hook+0x59/0x310 [ 622.588924][T14251] ? __lock_acquire+0x7d40/0x7d40 [ 622.594003][T14251] kmem_cache_alloc+0x5a/0x2d0 [ 622.598814][T14251] ? security_file_alloc+0x34/0x120 [ 622.604074][T14251] security_file_alloc+0x34/0x120 [ 622.609155][T14251] init_file+0x94/0x1f0 [ 622.613374][T14251] alloc_empty_file+0xb7/0x1d0 [ 622.618186][T14251] alloc_file+0x5c/0x600 [ 622.622472][T14251] alloc_file_pseudo+0x184/0x210 [ 622.627483][T14251] ? alloc_empty_backing_file+0xe0/0xe0 [ 622.633082][T14251] ? __lock_acquire+0x7d40/0x7d40 [ 622.638150][T14251] ? __local_bh_enable_ip+0x13a/0x1c0 [ 622.643562][T14251] ? _local_bh_enable+0xa0/0xa0 [ 622.648465][T14251] anon_inode_getfile+0xc5/0x1a0 [ 622.653464][T14251] bpf_link_prime+0xa6/0x1d0 [ 622.658099][T14251] tcx_link_attach+0x216/0x900 [ 622.662917][T14251] ? tcx_prog_query+0x140/0x140 [ 622.667813][T14251] ? __fget_files+0x43d/0x4b0 [ 622.672547][T14251] ? bpf_prog_attach_check_attach_type+0x188/0x440 [ 622.679104][T14251] link_create+0x390/0x720 [ 622.683580][T14251] __sys_bpf+0x4d7/0x890 [ 622.687872][T14251] ? bpf_link_show_fdinfo+0x390/0x390 [ 622.693305][T14251] ? lock_chain_count+0x20/0x20 [ 622.698220][T14251] __x64_sys_bpf+0x7c/0x90 [ 622.702688][T14251] do_syscall_64+0x55/0xa0 [ 622.707150][T14251] ? clear_bhb_loop+0x40/0x90 [ 622.711872][T14251] ? clear_bhb_loop+0x40/0x90 [ 622.716598][T14251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.722554][T14251] RIP: 0033:0x7fdbc5b9c819 [ 622.727021][T14251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.746680][T14251] RSP: 002b:00007fdbc6b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 622.755150][T14251] RAX: ffffffffffffffda RBX: 00007fdbc5e15fa0 RCX: 00007fdbc5b9c819 [ 622.763156][T14251] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 622.771169][T14251] RBP: 00007fdbc6b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 622.779177][T14251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.787185][T14251] R13: 00007fdbc5e16038 R14: 00007fdbc5e15fa0 R15: 00007ffefd68f2d8 [ 622.795305][T14251] [ 623.282448][T14260] netlink: 'syz.2.2609': attribute type 10 has an invalid length. [ 623.292877][T14260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2609'. [ 623.383294][T14260] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 623.413436][T14260] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.520524][T14260] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 623.680737][T14275] lo: entered allmulticast mode [ 623.747028][T14275] lo: entered promiscuous mode [ 623.752053][T14275] lo: left allmulticast mode [ 624.100493][T14285] FAULT_INJECTION: forcing a failure. [ 624.100493][T14285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.182849][T14285] CPU: 1 PID: 14285 Comm: syz.2.2616 Not tainted syzkaller #0 [ 624.190606][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 624.200723][T14285] Call Trace: [ 624.204056][T14285] [ 624.207049][T14285] dump_stack_lvl+0x18c/0x250 [ 624.211830][T14285] ? show_regs_print_info+0x20/0x20 [ 624.217117][T14285] ? load_image+0x420/0x420 [ 624.221711][T14285] ? __lock_acquire+0x7d40/0x7d40 [ 624.226816][T14285] ? snprintf+0xe9/0x140 [ 624.231143][T14285] should_fail_ex+0x39d/0x4d0 [ 624.235918][T14285] _copy_to_user+0x2f/0xa0 [ 624.240420][T14285] simple_read_from_buffer+0xe7/0x150 [ 624.245972][T14285] proc_fail_nth_read+0x1e8/0x260 [ 624.251083][T14285] ? proc_fault_inject_write+0x360/0x360 [ 624.256815][T14285] ? fsnotify_perm+0x271/0x5e0 [ 624.261753][T14285] ? proc_fault_inject_write+0x360/0x360 [ 624.267484][T14285] vfs_read+0x28b/0x970 [ 624.271744][T14285] ? kernel_read+0x1e0/0x1e0 [ 624.276419][T14285] ? __fget_files+0x28/0x4b0 [ 624.281075][T14285] ? __fget_files+0x28/0x4b0 [ 624.285746][T14285] ? __fget_files+0x43d/0x4b0 [ 624.290537][T14285] ? __fdget_pos+0x2a3/0x330 [ 624.295203][T14285] ? ksys_read+0x75/0x260 [ 624.299626][T14285] ksys_read+0x150/0x260 [ 624.303957][T14285] ? vfs_write+0x990/0x990 [ 624.308479][T14285] ? lockdep_hardirqs_on+0x98/0x150 [ 624.313807][T14285] do_syscall_64+0x55/0xa0 [ 624.318312][T14285] ? clear_bhb_loop+0x40/0x90 [ 624.323071][T14285] ? clear_bhb_loop+0x40/0x90 [ 624.327830][T14285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.333789][T14285] RIP: 0033:0x7f75e3d5d04e [ 624.338282][T14285] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 624.357964][T14285] RSP: 002b:00007f75e4ca7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 624.366464][T14285] RAX: ffffffffffffffda RBX: 00007f75e4ca86c0 RCX: 00007f75e3d5d04e [ 624.374521][T14285] RDX: 000000000000000f RSI: 00007f75e4ca80a0 RDI: 0000000000000007 [ 624.382581][T14285] RBP: 00007f75e4ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 624.390626][T14285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.398668][T14285] R13: 00007f75e4016038 R14: 00007f75e4015fa0 R15: 00007ffd708cbaa8 [ 624.406743][T14285] [ 624.626342][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.632890][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.492767][T14309] netlink: 'syz.0.2621': attribute type 27 has an invalid length. [ 625.556175][T14309] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2621'. [ 626.131828][T14318] netlink: 'syz.3.2626': attribute type 11 has an invalid length. [ 626.171502][T14318] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2626'. [ 626.770538][T14328] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2629'. [ 626.963583][T14316] netlink: 'syz.0.2623': attribute type 10 has an invalid length. [ 627.031777][T14316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2623'. [ 627.102833][T14316] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 627.265690][T14316] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.294570][T14316] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 627.394837][T14323] netlink: 'syz.1.2628': attribute type 10 has an invalid length. [ 627.539660][T14323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2628'. [ 627.712219][T14323] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 627.761704][T14323] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.837844][T14323] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 628.180031][T14344] syz.3.2631: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 628.235227][T14344] CPU: 0 PID: 14344 Comm: syz.3.2631 Not tainted syzkaller #0 [ 628.242773][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 628.252868][T14344] Call Trace: [ 628.256183][T14344] [ 628.259129][T14344] dump_stack_lvl+0x18c/0x250 [ 628.263836][T14344] ? show_regs_print_info+0x20/0x20 [ 628.269058][T14344] ? load_image+0x420/0x420 [ 628.273586][T14344] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 628.280049][T14344] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 628.286613][T14344] warn_alloc+0x246/0x340 [ 628.290979][T14344] ? stack_trace_save+0xaa/0x100 [ 628.295944][T14344] ? zone_watermark_ok_safe+0x230/0x230 [ 628.301545][T14344] ? kasan_set_track+0x5f/0x70 [ 628.306340][T14344] ? kasan_set_track+0x4e/0x70 [ 628.311128][T14344] ? __kasan_kmalloc+0x8f/0xa0 [ 628.315916][T14344] ? xsk_init_queue+0xad/0x100 [ 628.320729][T14344] ? xsk_setsockopt+0x4e5/0x760 [ 628.325606][T14344] ? do_sock_setsockopt+0x175/0x1a0 [ 628.330850][T14344] ? __x64_sys_setsockopt+0x182/0x200 [ 628.336242][T14344] __vmalloc_node_range+0x126/0x1330 [ 628.341599][T14344] ? free_vm_area+0x50/0x50 [ 628.346151][T14344] vmalloc_user+0x74/0x80 [ 628.350522][T14344] ? xskq_create+0xbf/0x170 [ 628.355056][T14344] xskq_create+0xbf/0x170 [ 628.359416][T14344] xsk_init_queue+0xad/0x100 [ 628.364043][T14344] xsk_setsockopt+0x4e5/0x760 [ 628.368745][T14344] ? xsk_poll+0x680/0x680 [ 628.373099][T14344] ? aa_sock_opt_perm+0x74/0x100 [ 628.378060][T14344] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 628.383710][T14344] ? security_socket_setsockopt+0x7e/0xa0 [ 628.389444][T14344] ? xsk_poll+0x680/0x680 [ 628.393807][T14344] do_sock_setsockopt+0x175/0x1a0 [ 628.398846][T14344] ? __fdget+0x180/0x210 [ 628.403111][T14344] __x64_sys_setsockopt+0x182/0x200 [ 628.408334][T14344] do_syscall_64+0x55/0xa0 [ 628.412762][T14344] ? clear_bhb_loop+0x40/0x90 [ 628.417455][T14344] ? clear_bhb_loop+0x40/0x90 [ 628.422158][T14344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.428064][T14344] RIP: 0033:0x7f876b79c819 [ 628.432497][T14344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.452124][T14344] RSP: 002b:00007f876c678028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 628.460563][T14344] RAX: ffffffffffffffda RBX: 00007f876ba16090 RCX: 00007f876b79c819 [ 628.468554][T14344] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 628.476541][T14344] RBP: 00007f876b832c91 R08: 0000000000000004 R09: 0000000000000000 [ 628.484542][T14344] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 628.492545][T14344] R13: 00007f876ba16128 R14: 00007f876ba16090 R15: 00007ffdd970d1f8 [ 628.500555][T14344] [ 628.580615][T14344] Mem-Info: [ 628.584736][T14344] active_anon:27774 inactive_anon:0 isolated_anon:0 [ 628.584736][T14344] active_file:21071 inactive_file:40151 isolated_file:0 [ 628.584736][T14344] unevictable:768 dirty:366 writeback:0 [ 628.584736][T14344] slab_reclaimable:10593 slab_unreclaimable:93835 [ 628.584736][T14344] mapped:34744 shmem:14281 pagetables:628 [ 628.584736][T14344] sec_pagetables:0 bounce:0 [ 628.584736][T14344] kernel_misc_reclaimable:0 [ 628.584736][T14344] free:1318310 free_pcp:8361 free_cma:0 [ 628.692896][T14344] Node 0 active_anon:111496kB inactive_anon:0kB active_file:84284kB inactive_file:160400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138976kB dirty:1460kB writeback:0kB shmem:55888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10876kB pagetables:2512kB sec_pagetables:0kB all_unreclaimable? no [ 628.846023][T14344] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 628.953792][T14344] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.036504][T14344] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 629.085013][T14344] Node 0 DMA32 free:1355696kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:116756kB inactive_anon:0kB active_file:84284kB inactive_file:159576kB unevictable:1536kB writepending:1460kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:20092kB local_pcp:5156kB free_cma:0kB [ 629.221732][T14344] lowmem_reserve[]: 0 0 0 0 0 [ 629.271117][T14344] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 629.384749][T14344] lowmem_reserve[]: 0 0 0 0 0 [ 629.402904][T14344] Node 1 Normal free:3896516kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13984kB local_pcp:3424kB free_cma:0kB [ 629.436739][T14344] lowmem_reserve[]: 0 0 0 0 0 [ 629.454675][T14344] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 629.494179][T14344] Node 0 DMA32: 532*4kB (UME) 279*8kB (UME) 188*16kB (UE) 91*32kB (UME) 109*64kB (UME) 358*128kB (UME) 134*256kB (UME) 60*512kB (UM) 13*1024kB (UM) 6*2048kB (M) 292*4096kB (M) = 1349736kB [ 629.586279][T14344] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 629.619134][T14344] Node 1 Normal: 227*4kB (UME) 51*8kB (UME) 36*16kB (UME) 139*32kB (UME) 56*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3896516kB [ 629.642857][T14344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.653292][T14344] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 629.685592][T14344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.695495][T14344] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 629.718595][T14344] 78963 total pagecache pages [ 629.723356][T14344] 0 pages in swap cache [ 629.732704][T14344] Free swap = 124996kB [ 629.742353][T14344] Total swap = 124996kB [ 629.746812][T14344] 2097051 pages RAM [ 629.750752][T14344] 0 pages HighMem/MovableOnly [ 629.755553][T14344] 416927 pages reserved [ 629.760072][T14344] 0 pages cma reserved [ 631.082885][T14394] netlink: 'syz.3.2644': attribute type 21 has an invalid length. [ 631.155982][T14394] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2644'. [ 631.172595][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'. [ 631.350610][T14394] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2644'. [ 631.691223][T14387] netlink: 'syz.1.2642': attribute type 10 has an invalid length. [ 631.743190][T14387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2642'. [ 631.975471][T14407] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2648'. [ 632.363141][T14409] netlink: 'syz.2.2649': attribute type 22 has an invalid length. [ 632.783269][T14422] netlink: 'syz.2.2653': attribute type 29 has an invalid length. [ 632.804111][T14422] netlink: 'syz.2.2653': attribute type 29 has an invalid length. [ 632.844970][T14422] netlink: 'syz.2.2653': attribute type 29 has an invalid length. [ 632.874169][T14422] netlink: 'syz.2.2653': attribute type 29 has an invalid length. [ 632.901845][T14422] netlink: 'syz.2.2653': attribute type 29 has an invalid length. [ 633.624270][T14429] netlink: 'syz.0.2664': attribute type 153 has an invalid length. [ 633.790268][T14429] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2664'. [ 634.391300][T14437] netlink: 'syz.2.2655': attribute type 10 has an invalid length. [ 634.455520][T14437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2655'. [ 635.246507][T14426] netlink: 'syz.3.2654': attribute type 10 has an invalid length. [ 635.258037][T14426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2654'. [ 635.460382][T14426] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 635.583640][T14426] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.698930][T14426] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 636.035931][T14449] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2659'. [ 636.047710][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'. [ 636.107020][T14446] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2659'. [ 637.297250][T14462] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2663'. [ 637.339575][T14462] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2663'. [ 637.374564][T14468] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2663'. [ 637.378856][T14461] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2665'. [ 637.444688][T14462] FAULT_INJECTION: forcing a failure. [ 637.444688][T14462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.481600][T14462] CPU: 1 PID: 14462 Comm: syz.0.2663 Not tainted syzkaller #0 [ 637.489162][T14462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 637.499265][T14462] Call Trace: [ 637.502586][T14462] [ 637.505555][T14462] dump_stack_lvl+0x18c/0x250 [ 637.510297][T14462] ? show_regs_print_info+0x20/0x20 [ 637.515551][T14462] ? load_image+0x420/0x420 [ 637.520103][T14462] ? __might_fault+0xaa/0x120 [ 637.524822][T14462] ? __lock_acquire+0x7d40/0x7d40 [ 637.529893][T14462] should_fail_ex+0x39d/0x4d0 [ 637.534623][T14462] _copy_from_user+0x2f/0xe0 [ 637.539262][T14462] wext_handle_ioctl+0xc8/0x1d0 [ 637.544139][T14462] ? call_commit_handler+0xf0/0xf0 [ 637.549276][T14462] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 637.555296][T14462] ? lock_chain_count+0x20/0x20 [ 637.560197][T14462] sock_ioctl+0x15d/0x7e0 [ 637.564557][T14462] ? sock_poll+0x3e0/0x3e0 [ 637.568989][T14462] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.575187][T14462] ? sock_poll+0x3e0/0x3e0 [ 637.579618][T14462] __se_sys_ioctl+0xfd/0x170 [ 637.584226][T14462] do_syscall_64+0x55/0xa0 [ 637.588661][T14462] ? clear_bhb_loop+0x40/0x90 [ 637.593383][T14462] ? clear_bhb_loop+0x40/0x90 [ 637.598117][T14462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.604041][T14462] RIP: 0033:0x7f11a6f9c819 [ 637.608478][T14462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.628102][T14462] RSP: 002b:00007f11a7dab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.636533][T14462] RAX: ffffffffffffffda RBX: 00007f11a7215fa0 RCX: 00007f11a6f9c819 [ 637.644516][T14462] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000008 [ 637.652508][T14462] RBP: 00007f11a7dab090 R08: 0000000000000000 R09: 0000000000000000 [ 637.660495][T14462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.668477][T14462] R13: 00007f11a7216038 R14: 00007f11a7215fa0 R15: 00007ffd219fe2c8 [ 637.676477][T14462] [ 638.913656][T14485] validate_nla: 1 callbacks suppressed [ 638.913676][T14485] netlink: 'syz.1.2671': attribute type 10 has an invalid length. [ 638.954973][T14485] __nla_validate_parse: 2 callbacks suppressed [ 638.954990][T14485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2671'. [ 639.001053][T14485] team0: entered promiscuous mode [ 639.049497][T14485] team_slave_0: entered promiscuous mode [ 639.070574][T14485] team_slave_1: entered promiscuous mode [ 639.090955][T14485] macvlan1: entered promiscuous mode [ 639.108009][T14485] team0: entered allmulticast mode [ 639.123736][T14485] team_slave_0: entered allmulticast mode [ 639.149133][T14485] team_slave_1: entered allmulticast mode [ 639.157903][T14485] bridge0: port 3(team0) entered blocking state [ 639.164337][T14485] bridge0: port 3(team0) entered disabled state [ 639.173929][T14485] bridge0: port 3(team0) entered blocking state [ 639.180441][T14485] bridge0: port 3(team0) entered forwarding state [ 639.223027][T14487] netlink: 'syz.2.2672': attribute type 21 has an invalid length. [ 640.261869][T14487] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2672'. [ 640.275766][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2672'. [ 640.316893][T14488] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2672'. [ 640.884771][T14504] sctp: [Deprecated]: syz.3.2675 (pid 14504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.884771][T14504] Use struct sctp_sack_info instead [ 640.985723][T14510] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 641.004400][T14510] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2679'. [ 641.659267][T14510] veth0_macvtap: left promiscuous mode [ 642.279963][T14516] team_slave_0: left promiscuous mode [ 642.288848][T14516] team_slave_0: left allmulticast mode [ 642.540333][T14516] team0: Port device team_slave_0 removed [ 642.557313][T14524] A¿: renamed from vlan0 (while UP) [ 644.607008][T14569] team_slave_0: left promiscuous mode [ 644.651733][T14569] team_slave_0: left allmulticast mode [ 644.786188][T14569] team0: Port device team_slave_0 removed [ 645.141104][T14588] netlink: 'syz.0.2705': attribute type 46 has an invalid length. [ 645.175946][T14588] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2705'. [ 645.437747][T14598] netlink: 'syz.3.2713': attribute type 10 has an invalid length. [ 645.488003][T14598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.496683][T14598] bond0: entered promiscuous mode [ 645.501765][T14598] bond_slave_0: entered promiscuous mode [ 645.508470][T14598] bond_slave_1: entered promiscuous mode [ 645.514447][T14598] bond0: entered allmulticast mode [ 645.534386][T14598] bond_slave_0: entered allmulticast mode [ 645.563531][T14598] bond_slave_1: entered allmulticast mode [ 645.616101][T14598] team0: Port device bond0 added [ 646.963353][T14630] team_slave_0: left promiscuous mode [ 647.268654][T14630] team_slave_0: left allmulticast mode [ 647.719940][T14630] team0: Port device team_slave_0 removed [ 647.734922][T14638] netlink: 'syz.2.2721': attribute type 25 has an invalid length. [ 647.764130][T14638] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2721'. [ 647.858462][T14632] netlink: 'syz.1.2720': attribute type 10 has an invalid length. [ 647.872048][T14632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2720'. [ 647.882231][T14632] ipvlan1: entered promiscuous mode [ 647.908397][T14632] ipvlan1: entered allmulticast mode [ 647.935067][T14632] veth0_vlan: entered allmulticast mode [ 647.996541][T14632] bridge0: port 4(ipvlan1) entered blocking state [ 648.003225][T14632] bridge0: port 4(ipvlan1) entered disabled state [ 648.034102][T14632] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 651.665798][T14664] netlink: 'syz.0.2731': attribute type 33 has an invalid length. [ 651.709565][T14664] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2731'. [ 652.083165][T14673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2734'. [ 652.467304][T14673] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2734'. [ 652.551537][T14673] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 652.573964][T14682] netlink: 'syz.2.2734': attribute type 10 has an invalid length. [ 652.582401][T14673] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 652.870458][T14682] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.878354][T14682] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.948326][T14682] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.955650][T14682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.963253][T14682] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.970492][T14682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.041194][T14682] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 653.773914][T14692] netlink: 'syz.3.2737': attribute type 25 has an invalid length. [ 653.862803][T14692] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2737'. [ 655.713652][T14720] À: port 1(vlan0) entered blocking state [ 655.720475][T14720] À: port 1(vlan0) entered disabled state [ 655.726520][T14720] vlan0: entered allmulticast mode [ 655.733398][T14720] vlan0: entered promiscuous mode [ 655.773484][T14714] À: port 1(vlan0) entered blocking state [ 655.781837][T14714] À: port 1(vlan0) entered forwarding state [ 655.863674][T14722] netlink: 'syz.3.2747': attribute type 29 has an invalid length. [ 655.881520][T14722] netlink: 'syz.3.2747': attribute type 29 has an invalid length. [ 655.924959][T14723] netlink: 'syz.3.2747': attribute type 29 has an invalid length. [ 655.961993][T14722] netlink: 'syz.3.2747': attribute type 29 has an invalid length. [ 655.984269][T14726] syzkaller0: entered promiscuous mode [ 655.990222][T14726] syzkaller0: entered allmulticast mode [ 656.012036][T14726] syzkaller0: refused to change device tx_queue_len [ 656.474330][T14738] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2752'. [ 656.713735][T14742] netlink: 668 bytes leftover after parsing attributes in process `syz.0.2752'. [ 656.791535][T14742] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 656.885967][T14742] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 657.137001][T14738] netlink: 'syz.0.2752': attribute type 10 has an invalid length. [ 657.180178][T14738] bridge0: port 3(team0) entered disabled state [ 657.189233][T14738] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.201840][T14738] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.364155][T14738] bridge0: port 3(team0) entered blocking state [ 657.372534][T14738] bridge0: port 3(team0) entered forwarding state [ 657.383365][T14738] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.391166][T14738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.402387][T14738] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.412046][T14738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.477093][T14738] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 657.643254][T14754] syzkaller0: entered promiscuous mode [ 657.649196][T14754] syzkaller0: entered allmulticast mode [ 658.018428][T14759] netlink: 'syz.1.2755': attribute type 25 has an invalid length. [ 658.033232][T14759] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2755'. [ 658.469020][T14772] netlink: 'syz.0.2761': attribute type 4 has an invalid length. [ 658.513030][T14772] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2761'. [ 659.592634][T14788] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.2766'. [ 659.614846][T14788] netlink: 'syz.0.2766': attribute type 2 has an invalid length. [ 659.627385][T14788] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2766'. [ 660.670522][T14794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2767'. [ 660.701900][T14795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.815779][T14795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.870909][T14795] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 660.881411][T14795] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 660.894490][T14794] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2767'. [ 660.907271][T14794] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 660.917630][T14794] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 660.962516][T14794] netlink: 'syz.1.2767': attribute type 10 has an invalid length. [ 660.973304][T14794] bridge0: port 3(team0) entered disabled state [ 660.981364][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.992317][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.051173][T14794] bridge0: port 3(team0) entered blocking state [ 661.057805][T14794] bridge0: port 3(team0) entered forwarding state [ 661.064895][T14794] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.072912][T14794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.081712][T14794] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.089186][T14794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.169513][T14794] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 661.511038][T14810] netlink: 'syz.2.2774': attribute type 5 has an invalid length. [ 661.613274][T14813] FAULT_INJECTION: forcing a failure. [ 661.613274][T14813] name failslab, interval 1, probability 0, space 0, times 0 [ 661.619497][T14804] netlink: 'syz.0.2771': attribute type 25 has an invalid length. [ 661.637751][T14804] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2771'. [ 661.641510][T14813] CPU: 1 PID: 14813 Comm: syz.1.2775 Not tainted syzkaller #0 [ 661.654975][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 661.665064][T14813] Call Trace: [ 661.668371][T14813] [ 661.671326][T14813] dump_stack_lvl+0x18c/0x250 [ 661.676035][T14813] ? show_regs_print_info+0x20/0x20 [ 661.681256][T14813] ? load_image+0x420/0x420 [ 661.685782][T14813] ? __might_sleep+0xe0/0xe0 [ 661.690399][T14813] ? __lock_acquire+0x7d40/0x7d40 [ 661.695441][T14813] ? is_dynamic_key+0x260/0x260 [ 661.700310][T14813] should_fail_ex+0x39d/0x4d0 [ 661.705014][T14813] should_failslab+0x9/0x20 [ 661.709541][T14813] slab_pre_alloc_hook+0x59/0x310 [ 661.714600][T14813] kmem_cache_alloc_node+0x60/0x320 [ 661.719824][T14813] ? __alloc_skb+0x103/0x2c0 [ 661.724440][T14813] __alloc_skb+0x103/0x2c0 [ 661.728879][T14813] __ip_append_data+0x2b73/0x3d40 [ 661.733936][T14813] ? ip_route_output_key_hash+0x13d/0x330 [ 661.739681][T14813] ? raw_send_hdrinc+0x1170/0x1170 [ 661.744808][T14813] ? mark_lock+0x94/0x320 [ 661.749158][T14813] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 661.755159][T14813] ? ip_setup_cork+0x860/0x860 [ 661.759942][T14813] ? ip_setup_cork+0x530/0x860 [ 661.764727][T14813] ip_append_data+0x10d/0x180 [ 661.769420][T14813] ? raw_send_hdrinc+0x1170/0x1170 [ 661.774548][T14813] raw_sendmsg+0x15c1/0x1c00 [ 661.779173][T14813] ? compat_raw_ioctl+0x70/0x70 [ 661.784066][T14813] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 661.790501][T14813] ? sock_rps_record_flow+0x19/0x3f0 [ 661.795808][T14813] ? inet_sendmsg+0x7c/0x2f0 [ 661.800413][T14813] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 661.805713][T14813] ? security_socket_sendmsg+0x80/0xa0 [ 661.811190][T14813] ? inet_send_prepare+0x260/0x260 [ 661.816327][T14813] ____sys_sendmsg+0x5ba/0x960 [ 661.821113][T14813] ? __asan_memset+0x22/0x40 [ 661.825728][T14813] ? __sys_sendmsg_sock+0x30/0x30 [ 661.830763][T14813] ? __import_iovec+0x3fa/0x850 [ 661.835642][T14813] ? import_iovec+0x73/0xa0 [ 661.840162][T14813] ___sys_sendmsg+0x2a6/0x360 [ 661.844854][T14813] ? get_pid_task+0x20/0x1e0 [ 661.849478][T14813] ? __sys_sendmsg+0x2a0/0x2a0 [ 661.854275][T14813] ? __lock_acquire+0x7d40/0x7d40 [ 661.859339][T14813] __se_sys_sendmsg+0x1c2/0x2b0 [ 661.864203][T14813] ? __x64_sys_sendmsg+0x80/0x80 [ 661.869180][T14813] ? lockdep_hardirqs_on+0x98/0x150 [ 661.874408][T14813] do_syscall_64+0x55/0xa0 [ 661.878836][T14813] ? clear_bhb_loop+0x40/0x90 [ 661.883533][T14813] ? clear_bhb_loop+0x40/0x90 [ 661.888237][T14813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.894158][T14813] RIP: 0033:0x7fdbc5b9c819 [ 661.898590][T14813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.918221][T14813] RSP: 002b:00007fdbc6b2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.926915][T14813] RAX: ffffffffffffffda RBX: 00007fdbc5e15fa0 RCX: 00007fdbc5b9c819 [ 661.934898][T14813] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 661.942883][T14813] RBP: 00007fdbc6b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 661.950958][T14813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.958948][T14813] R13: 00007fdbc5e16038 R14: 00007fdbc5e15fa0 R15: 00007ffefd68f2d8 [ 661.966953][T14813] [ 663.467724][T14852] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 663.476037][T14852] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2787'. [ 663.485154][T14852] hsr0: entered promiscuous mode [ 663.490821][T14852] bridge0: port 4(hsr0) entered blocking state [ 663.498085][T14852] bridge0: port 4(hsr0) entered disabled state [ 663.504554][T14852] hsr0: entered allmulticast mode [ 663.509797][T14852] hsr_slave_0: entered allmulticast mode [ 663.515574][T14852] hsr_slave_1: entered allmulticast mode [ 663.524885][T14852] bridge0: port 4(hsr0) entered blocking state [ 663.531266][T14852] bridge0: port 4(hsr0) entered forwarding state [ 664.049926][T14867] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2792'. [ 664.383986][T14874] netlink: 'syz.2.2794': attribute type 4 has an invalid length. [ 666.266967][T14901] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2810'. [ 668.573799][T14942] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2816'. [ 668.587193][T14942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.431345][ C1] hsr0: VLAN not yet supported [ 669.937974][T14972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2829'. [ 670.559495][T14990] netlink: 'syz.0.2836': attribute type 4 has an invalid length. [ 670.579543][T14990] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2836'. [ 670.619346][T14990] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 670.720698][T14987] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2834'. [ 670.742796][T14987] bridge_slave_1: default FDB implementation only supports local addresses [ 670.932758][T14987] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2834'. [ 671.264496][T15005] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2841'. [ 672.780392][T13024] Bluetooth: hci4: command 0x0406 tx timeout [ 672.933048][T15005] bond0: (slave bond_slave_0): Releasing backup interface [ 672.957769][T15005] bond_slave_0: left promiscuous mode [ 672.965945][T15005] bond_slave_0: left allmulticast mode [ 672.983347][T15005] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 673.031053][T15006] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2841'. [ 673.166955][T15014] netlink: 'syz.3.2844': attribute type 21 has an invalid length. [ 673.174853][T15014] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2844'. [ 678.297276][T15086] netlink: 'syz.3.2866': attribute type 5 has an invalid length. [ 678.419339][T15088] netlink: 'syz.1.2865': attribute type 10 has an invalid length. [ 679.214427][T15088] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 679.263527][T15088] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 679.306740][T15088] team0: Port device netdevsim0 added [ 679.328167][T15075] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2872'. [ 679.414275][T15075] bridge_slave_1: default FDB implementation only supports local addresses [ 679.573095][T15094] netlink: 'syz.3.2868': attribute type 10 has an invalid length. [ 679.870815][T15101] netlink: 'syz.0.2873': attribute type 2 has an invalid length. [ 679.896069][T15101] netlink: 'syz.0.2873': attribute type 8 has an invalid length. [ 679.943995][T15101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2873'. [ 681.452435][T15120] syzkaller0: entered promiscuous mode [ 681.463086][T15120] syzkaller0: entered allmulticast mode [ 683.900243][T15142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.948532][T15146] netlink: 'syz.0.2884': attribute type 10 has an invalid length. [ 684.094277][T15139] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2883'. [ 684.164015][T15160] FAULT_INJECTION: forcing a failure. [ 684.164015][T15160] name failslab, interval 1, probability 0, space 0, times 0 [ 684.182736][T15160] CPU: 1 PID: 15160 Comm: syz.2.2888 Not tainted syzkaller #0 [ 684.190296][T15160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 684.200502][T15160] Call Trace: [ 684.203834][T15160] [ 684.206825][T15160] dump_stack_lvl+0x18c/0x250 [ 684.211646][T15160] ? show_regs_print_info+0x20/0x20 [ 684.216918][T15160] ? load_image+0x420/0x420 [ 684.221495][T15160] ? __might_sleep+0xe0/0xe0 [ 684.226154][T15160] ? __lock_acquire+0x7d40/0x7d40 [ 684.231247][T15160] should_fail_ex+0x39d/0x4d0 [ 684.236009][T15160] should_failslab+0x9/0x20 [ 684.240576][T15160] slab_pre_alloc_hook+0x59/0x310 [ 684.245664][T15160] ? __get_vm_area_node+0x125/0x370 [ 684.250918][T15160] __kmem_cache_alloc_node+0x53/0x250 [ 684.256353][T15160] ? __get_vm_area_node+0x125/0x370 [ 684.261598][T15160] kmalloc_node_trace+0x26/0xe0 [ 684.266507][T15160] __get_vm_area_node+0x125/0x370 [ 684.271605][T15160] __vmalloc_node_range+0x36e/0x1330 [ 684.276948][T15160] ? netlink_sendmsg+0x602/0xbf0 [ 684.281941][T15160] ? netlink_insert+0x109f/0x13a0 [ 684.287089][T15160] ? netlink_data_ready+0x10/0x10 [ 684.292199][T15160] ? free_vm_area+0x50/0x50 [ 684.296782][T15160] ? netlink_sendmsg+0x602/0xbf0 [ 684.301776][T15160] vmalloc+0x79/0x90 [ 684.305730][T15160] ? netlink_sendmsg+0x602/0xbf0 [ 684.310721][T15160] netlink_sendmsg+0x602/0xbf0 [ 684.315557][T15160] ? netlink_getsockopt+0x590/0x590 [ 684.320816][T15160] ? aa_sock_msg_perm+0x94/0x150 [ 684.325811][T15160] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 684.331146][T15160] ? security_socket_sendmsg+0x80/0xa0 [ 684.336646][T15160] ? netlink_getsockopt+0x590/0x590 [ 684.341914][T15160] ____sys_sendmsg+0x5ba/0x960 [ 684.346738][T15160] ? __asan_memset+0x22/0x40 [ 684.351378][T15160] ? __sys_sendmsg_sock+0x30/0x30 [ 684.356445][T15160] ? __import_iovec+0x5f2/0x850 [ 684.361363][T15160] ? import_iovec+0x73/0xa0 [ 684.365919][T15160] ___sys_sendmsg+0x2a6/0x360 [ 684.370643][T15160] ? get_pid_task+0x20/0x1e0 [ 684.375295][T15160] ? __sys_sendmsg+0x2a0/0x2a0 [ 684.380157][T15160] ? __lock_acquire+0x7d40/0x7d40 [ 684.385296][T15160] __se_sys_sendmsg+0x1c2/0x2b0 [ 684.390200][T15160] ? __x64_sys_sendmsg+0x80/0x80 [ 684.395217][T15160] ? lockdep_hardirqs_on+0x98/0x150 [ 684.400470][T15160] do_syscall_64+0x55/0xa0 [ 684.404931][T15160] ? clear_bhb_loop+0x40/0x90 [ 684.409650][T15160] ? clear_bhb_loop+0x40/0x90 [ 684.414375][T15160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.420315][T15160] RIP: 0033:0x7f75e3d9c819 [ 684.424771][T15160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.444417][T15160] RSP: 002b:00007f75e4ca8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.452880][T15160] RAX: ffffffffffffffda RBX: 00007f75e4015fa0 RCX: 00007f75e3d9c819 [ 684.460899][T15160] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 684.469020][T15160] RBP: 00007f75e4ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 684.477150][T15160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.485172][T15160] R13: 00007f75e4016038 R14: 00007f75e4015fa0 R15: 00007ffd708cbaa8 [ 684.493309][T15160] [ 684.519266][T15160] syz.2.2888: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 684.535493][T15160] CPU: 0 PID: 15160 Comm: syz.2.2888 Not tainted syzkaller #0 [ 684.543016][T15160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 684.553122][T15160] Call Trace: [ 684.556520][T15160] [ 684.559489][T15160] dump_stack_lvl+0x18c/0x250 [ 684.564218][T15160] ? show_regs_print_info+0x20/0x20 [ 684.569541][T15160] ? load_image+0x420/0x420 [ 684.574084][T15160] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 684.580531][T15160] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 684.587066][T15160] warn_alloc+0x246/0x340 [ 684.591435][T15160] ? __get_vm_area_node+0x125/0x370 [ 684.596691][T15160] ? zone_watermark_ok_safe+0x230/0x230 [ 684.602300][T15160] ? rcu_is_watching+0x15/0xb0 [ 684.607128][T15160] ? __get_vm_area_node+0x356/0x370 [ 684.612384][T15160] __vmalloc_node_range+0x393/0x1330 [ 684.617711][T15160] ? netlink_insert+0x109f/0x13a0 [ 684.622798][T15160] ? netlink_data_ready+0x10/0x10 [ 684.627857][T15160] ? free_vm_area+0x50/0x50 [ 684.632405][T15160] ? netlink_sendmsg+0x602/0xbf0 [ 684.637385][T15160] vmalloc+0x79/0x90 [ 684.641315][T15160] ? netlink_sendmsg+0x602/0xbf0 [ 684.646295][T15160] netlink_sendmsg+0x602/0xbf0 [ 684.651114][T15160] ? netlink_getsockopt+0x590/0x590 [ 684.656365][T15160] ? aa_sock_msg_perm+0x94/0x150 [ 684.661353][T15160] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 684.666678][T15160] ? security_socket_sendmsg+0x80/0xa0 [ 684.672167][T15160] ? netlink_getsockopt+0x590/0x590 [ 684.677405][T15160] ____sys_sendmsg+0x5ba/0x960 [ 684.682208][T15160] ? __asan_memset+0x22/0x40 [ 684.686832][T15160] ? __sys_sendmsg_sock+0x30/0x30 [ 684.691880][T15160] ? __import_iovec+0x5f2/0x850 [ 684.696774][T15160] ? import_iovec+0x73/0xa0 [ 684.701312][T15160] ___sys_sendmsg+0x2a6/0x360 [ 684.706022][T15160] ? get_pid_task+0x20/0x1e0 [ 684.710655][T15160] ? __sys_sendmsg+0x2a0/0x2a0 [ 684.715476][T15160] ? __lock_acquire+0x7d40/0x7d40 [ 684.720559][T15160] __se_sys_sendmsg+0x1c2/0x2b0 [ 684.725446][T15160] ? __x64_sys_sendmsg+0x80/0x80 [ 684.730432][T15160] ? lockdep_hardirqs_on+0x98/0x150 [ 684.735685][T15160] do_syscall_64+0x55/0xa0 [ 684.740129][T15160] ? clear_bhb_loop+0x40/0x90 [ 684.744837][T15160] ? clear_bhb_loop+0x40/0x90 [ 684.749549][T15160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.755483][T15160] RIP: 0033:0x7f75e3d9c819 [ 684.759929][T15160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.779570][T15160] RSP: 002b:00007f75e4ca8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.788021][T15160] RAX: ffffffffffffffda RBX: 00007f75e4015fa0 RCX: 00007f75e3d9c819 [ 684.796020][T15160] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 684.804019][T15160] RBP: 00007f75e4ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 684.812016][T15160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.820013][T15160] R13: 00007f75e4016038 R14: 00007f75e4015fa0 R15: 00007ffd708cbaa8 [ 684.828033][T15160] [ 684.835871][T15160] Mem-Info: [ 684.839071][T15160] active_anon:14619 inactive_anon:0 isolated_anon:0 [ 684.839071][T15160] active_file:21071 inactive_file:40173 isolated_file:0 [ 684.839071][T15160] unevictable:768 dirty:218 writeback:0 [ 684.839071][T15160] slab_reclaimable:10525 slab_unreclaimable:95080 [ 684.839071][T15160] mapped:27953 shmem:1361 pagetables:568 [ 684.839071][T15160] sec_pagetables:0 bounce:0 [ 684.839071][T15160] kernel_misc_reclaimable:0 [ 684.839071][T15160] free:1328829 free_pcp:8104 free_cma:0 [ 684.880362][T15165] FAULT_INJECTION: forcing a failure. [ 684.880362][T15165] name failslab, interval 1, probability 0, space 0, times 0 [ 684.901653][T15160] Node 0 active_anon:58576kB inactive_anon:0kB active_file:84284kB inactive_file:160488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111812kB dirty:868kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10996kB pagetables:2272kB sec_pagetables:0kB all_unreclaimable? no [ 684.904596][T15165] CPU: 1 PID: 15165 Comm: syz.1.2889 Not tainted syzkaller #0 [ 684.941447][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 684.951546][T15165] Call Trace: [ 684.954865][T15165] [ 684.957839][T15165] dump_stack_lvl+0x18c/0x250 [ 684.958171][T15160] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 684.962549][T15165] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 684.962586][T15165] ? show_regs_print_info+0x20/0x20 [ 684.962615][T15165] ? load_image+0x420/0x420 [ 684.962659][T15165] should_fail_ex+0x39d/0x4d0 [ 684.962696][T15165] should_failslab+0x9/0x20 [ 684.962725][T15165] slab_pre_alloc_hook+0x59/0x310 [ 684.962764][T15165] kmem_cache_alloc+0x5a/0x2d0 [ 684.962791][T15165] ? dst_alloc+0x105/0x170 [ 684.962824][T15165] dst_alloc+0x105/0x170 [ 684.962855][T15165] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 684.962886][T15165] ? ip_route_output_key_hash_rcu+0x1311/0x2370 [ 684.962923][T15165] ? ip_route_output_key_hash+0x13d/0x330 [ 685.055167][T15165] ip_route_output_key_hash+0x1f3/0x330 [ 685.060771][T15165] ? rxrpc_alloc_peer+0x7e/0x340 [ 685.065750][T15165] ? rxrpc_lookup_peer+0x3f4/0x850 [ 685.070912][T15165] ? ip_route_input_rcu+0x30f0/0x30f0 [ 685.076302][T15165] ? do_syscall_64+0x55/0xa0 [ 685.080922][T15165] ? make_kuid+0x1df/0x680 [ 685.085362][T15165] ? __put_user_ns+0x50/0x50 [ 685.089976][T15165] ip_route_output_flow+0x2a/0x150 [ 685.095119][T15165] rxrpc_init_peer+0x2f0/0x740 [ 685.099906][T15165] ? rxrpc_new_incoming_peer+0x5a0/0x5a0 [ 685.105564][T15165] ? rcu_is_watching+0x15/0xb0 [ 685.110354][T15165] ? trace_rxrpc_peer+0x80/0x1c0 [ 685.115314][T15165] ? rxrpc_lookup_peer+0x419/0x850 [ 685.120453][T15165] rxrpc_lookup_peer+0x427/0x850 [ 685.125416][T15165] rxrpc_new_client_call+0xb99/0x1410 [ 685.130813][T15165] rxrpc_do_sendmsg+0xc42/0x1280 [ 685.135786][T15165] ? rxrpc_propose_abort+0x200/0x200 [ 685.141115][T15165] ? rxrpc_sendmsg+0x391/0x5b0 [ 685.145899][T15165] ? rxrpc_getsockopt+0x150/0x150 [ 685.150943][T15165] ____sys_sendmsg+0x5ba/0x960 [ 685.155722][T15165] ? __lock_acquire+0x7d40/0x7d40 [ 685.160780][T15165] ? __sys_sendmsg_sock+0x30/0x30 [ 685.165821][T15165] ? __import_iovec+0x5f2/0x850 [ 685.170700][T15165] ? import_iovec+0x73/0xa0 [ 685.175316][T15165] ___sys_sendmsg+0x2a6/0x360 [ 685.180008][T15165] ? get_pid_task+0x20/0x1e0 [ 685.184622][T15165] ? __sys_sendmsg+0x2a0/0x2a0 [ 685.189428][T15165] ? __lock_acquire+0x7d40/0x7d40 [ 685.194494][T15165] __se_sys_sendmsg+0x1c2/0x2b0 [ 685.199365][T15165] ? __x64_sys_sendmsg+0x80/0x80 [ 685.204337][T15165] ? lockdep_hardirqs_on+0x98/0x150 [ 685.209556][T15165] do_syscall_64+0x55/0xa0 [ 685.214003][T15165] ? clear_bhb_loop+0x40/0x90 [ 685.218701][T15165] ? clear_bhb_loop+0x40/0x90 [ 685.223396][T15165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.229392][T15165] RIP: 0033:0x7fdbc5b9c819 [ 685.233827][T15165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.253622][T15165] RSP: 002b:00007fdbc6b2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.262057][T15165] RAX: ffffffffffffffda RBX: 00007fdbc5e15fa0 RCX: 00007fdbc5b9c819 [ 685.270050][T15165] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000003 [ 685.278039][T15165] RBP: 00007fdbc6b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 685.286116][T15165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 685.294103][T15165] R13: 00007fdbc5e16038 R14: 00007fdbc5e15fa0 R15: 00007ffefd68f2d8 [ 685.302132][T15165] [ 685.316584][T15160] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 685.346003][T15160] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 685.356321][T15160] Node 0 DMA32 free:1402416kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:58440kB inactive_anon:0kB active_file:84284kB inactive_file:159664kB unevictable:1536kB writepending:872kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:20596kB local_pcp:16580kB free_cma:0kB [ 685.454025][T15160] lowmem_reserve[]: 0 0 0 0 0 [ 685.468574][T15160] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 685.471182][T15172] netlink: 'syz.1.2890': attribute type 10 has an invalid length. [ 685.499420][T15160] lowmem_reserve[]: 0 0 0 0 0 [ 685.510943][T15160] Node 1 Normal free:3897540kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12960kB local_pcp:2656kB free_cma:0kB [ 685.528111][T15171] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2891'. [ 685.542148][T15160] lowmem_reserve[]: 0 0 0 0 0 [ 685.584027][T15172] team0: Device bond0 is already an upper device of the team interface [ 685.660692][T15160] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 685.688609][T15160] Node 0 DMA32: 882*4kB (UME) 857*8kB (UME) 802*16kB (UME) 952*32kB (UME) 232*64kB (UME) 309*128kB (UME) 135*256kB (UME) 58*512kB (UM) 13*1024kB (UM) 8*2048kB (UM) 293*4096kB (UM) = 1402160kB [ 685.729060][T15160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 685.765738][T15160] Node 1 Normal: 227*4kB (UME) 51*8kB (UME) 36*16kB (UME) 157*32kB (UME) 61*64kB (UE) 9*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3897540kB [ 685.814887][T15160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 685.858991][T15160] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 685.894200][T15160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 685.935785][T15160] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 685.951880][T15160] 62605 total pagecache pages [ 685.975878][T15160] 0 pages in swap cache [ 685.980110][T15160] Free swap = 124996kB [ 685.984300][T15160] Total swap = 124996kB [ 686.012902][T15160] 2097051 pages RAM [ 686.023334][T15160] 0 pages HighMem/MovableOnly [ 686.029641][T15160] 416927 pages reserved [ 686.033969][T15160] 0 pages cma reserved [ 686.132362][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.139456][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.276068][T15187] netlink: 'syz.2.2895': attribute type 3 has an invalid length. [ 686.307793][T15187] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2895'. [ 686.401437][T15188] netlink: 'syz.2.2895': attribute type 2 has an invalid length. [ 686.450368][T15188] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2895'. [ 686.871705][T15195] netlink: 'syz.2.2898': attribute type 17 has an invalid length. [ 686.900503][T15195] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2898'. [ 687.003310][T15195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.426409][T15216] netlink: 'syz.0.2905': attribute type 10 has an invalid length. [ 688.495836][T15216] team0: Device bond0 is already an upper device of the team interface [ 689.174586][T15234] netlink: 'syz.3.2911': attribute type 17 has an invalid length. [ 689.191875][T15234] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2911'. [ 689.226459][T15234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.909528][T15248] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2913'. [ 690.961397][T15276] netlink: 'syz.1.2924': attribute type 17 has an invalid length. [ 690.975192][T15276] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2924'. [ 691.139608][T15276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.462151][T15286] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2927'. [ 692.922984][T15292] netlink: 'syz.0.2929': attribute type 29 has an invalid length. [ 693.130656][T15292] netlink: 'syz.0.2929': attribute type 29 has an invalid length. [ 693.284880][T13024] Bluetooth: hci0: command 0x0406 tx timeout [ 693.659861][T15305] netlink: 'syz.0.2935': attribute type 11 has an invalid length. [ 697.119532][T15378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2955'. [ 697.146326][T15378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2955'. [ 697.240559][T15371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2955'. [ 697.268368][T15376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2955'. [ 698.951535][T15398] netlink: zone id is out of range [ 698.962902][T15398] netlink: set zone limit has 8 unknown bytes [ 698.981093][T15398] netlink: 'syz.0.2962': attribute type 10 has an invalid length. [ 699.043201][T15398] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2962'. [ 699.056147][T15398] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 699.767136][T15398] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 699.980211][T15415] veth1_vlan: left allmulticast mode [ 700.000033][T15415] macvlan1: entered promiscuous mode [ 700.005503][T15415] macvlan1: left allmulticast mode [ 700.027351][T15417] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2969'. [ 700.123362][T15417] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2969'. [ 700.966886][T15433] netlink: 'syz.1.2977': attribute type 21 has an invalid length. [ 700.986168][T15433] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2977'. [ 700.995331][T15433] netlink: 'syz.1.2977': attribute type 5 has an invalid length. [ 701.047308][T15433] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2977'. [ 701.748423][T15443] netlink: zone id is out of range [ 701.837049][T15443] netlink: set zone limit has 8 unknown bytes [ 701.857401][T15443] netlink: 'syz.1.2979': attribute type 10 has an invalid length. [ 701.931700][T15443] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2979'. [ 701.956383][T15443] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 702.151354][T15443] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 702.514792][T15453] netlink: 'syz.2.2983': attribute type 10 has an invalid length. [ 702.673991][T15453] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2983'. [ 702.869295][T15453] hsr0: entered promiscuous mode [ 702.931247][T15453] bridge0: port 3(hsr0) entered blocking state [ 702.950241][T15453] bridge0: port 3(hsr0) entered disabled state [ 702.968340][T15453] hsr0: entered allmulticast mode [ 702.973805][T15453] hsr_slave_0: entered allmulticast mode [ 702.980685][T15453] hsr_slave_1: entered allmulticast mode [ 703.339714][T15453] bridge0: port 3(hsr0) entered blocking state [ 703.346127][T15453] bridge0: port 3(hsr0) entered forwarding state [ 703.352925][T15459] FAULT_INJECTION: forcing a failure. [ 703.352925][T15459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 703.391824][T15459] CPU: 1 PID: 15459 Comm: syz.1.2984 Not tainted syzkaller #0 [ 703.399385][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 703.409502][T15459] Call Trace: [ 703.412922][T15459] [ 703.415908][T15459] dump_stack_lvl+0x18c/0x250 [ 703.420930][T15459] ? show_regs_print_info+0x20/0x20 [ 703.426205][T15459] ? load_image+0x420/0x420 [ 703.430777][T15459] ? __lock_acquire+0x7d40/0x7d40 [ 703.435851][T15459] ? perf_trace_lock+0xfc/0x3b0 [ 703.440778][T15459] should_fail_ex+0x39d/0x4d0 [ 703.445525][T15459] prepare_alloc_pages+0x1e2/0x5f0 [ 703.450711][T15459] __alloc_pages+0x134/0x460 [ 703.455364][T15459] ? zone_statistics+0x170/0x170 [ 703.460382][T15459] ? alloc_pages+0x4dc/0x740 [ 703.465038][T15459] ? do_raw_spin_unlock+0x121/0x230 [ 703.470296][T15459] __get_free_pages+0xc/0x30 [ 703.474921][T15459] kasan_populate_vmalloc_pte+0x35/0x100 [ 703.480590][T15459] __apply_to_page_range+0x860/0xdd0 [ 703.485931][T15459] ? kasan_populate_vmalloc+0x70/0x70 [ 703.491339][T15459] ? apply_to_page_range+0x50/0x50 [ 703.496496][T15459] ? do_raw_spin_unlock+0x121/0x230 [ 703.501737][T15459] alloc_vmap_area+0x1d0c/0x1e30 [ 703.506747][T15459] ? vm_map_ram+0xcb0/0xcb0 [ 703.511283][T15459] ? rcu_is_watching+0x15/0xb0 [ 703.516113][T15459] __get_vm_area_node+0x162/0x370 [ 703.521182][T15459] __vmalloc_node_range+0x36e/0x1330 [ 703.526499][T15459] ? dev_map_alloc+0x1f6/0x4c0 [ 703.531341][T15459] ? free_vm_area+0x50/0x50 [ 703.535891][T15459] ? rcu_is_watching+0x15/0xb0 [ 703.540714][T15459] ? bpf_map_area_alloc+0x5e/0x110 [ 703.545891][T15459] bpf_map_area_alloc+0xf1/0x110 [ 703.550890][T15459] ? dev_map_alloc+0x1f6/0x4c0 [ 703.555701][T15459] dev_map_alloc+0x1f6/0x4c0 [ 703.560326][T15459] map_create+0x877/0x12f0 [ 703.564774][T15459] ? bpf_lsm_bpf+0x9/0x10 [ 703.569151][T15459] __sys_bpf+0x651/0x890 [ 703.573438][T15459] ? bpf_link_show_fdinfo+0x390/0x390 [ 703.578961][T15459] ? lock_chain_count+0x20/0x20 [ 703.583858][T15459] __x64_sys_bpf+0x7c/0x90 [ 703.588307][T15459] do_syscall_64+0x55/0xa0 [ 703.592741][T15459] ? clear_bhb_loop+0x40/0x90 [ 703.597453][T15459] ? clear_bhb_loop+0x40/0x90 [ 703.602307][T15459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.608254][T15459] RIP: 0033:0x7fdbc5b9c819 [ 703.612803][T15459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.632438][T15459] RSP: 002b:00007fdbc6b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 703.640883][T15459] RAX: ffffffffffffffda RBX: 00007fdbc5e15fa0 RCX: 00007fdbc5b9c819 [ 703.648890][T15459] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 0000000000000000 [ 703.656886][T15459] RBP: 00007fdbc6b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 703.664881][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 703.673225][T15459] R13: 00007fdbc5e16038 R14: 00007fdbc5e15fa0 R15: 00007ffefd68f2d8 [ 703.681344][T15459] [ 703.743179][T13024] Bluetooth: hci1: command 0x0406 tx timeout [ 705.247921][T15474] netlink: 'syz.1.2987': attribute type 39 has an invalid length. [ 705.685555][T15486] netlink: 'syz.3.2989': attribute type 21 has an invalid length. [ 705.693652][T15486] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2989'. [ 705.745765][T15486] netlink: 'syz.3.2989': attribute type 5 has an invalid length. [ 705.765155][T15486] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2989'. [ 706.071874][T15493] netlink: zone id is out of range [ 706.077652][T15493] netlink: set zone limit has 8 unknown bytes [ 706.101724][T15493] netlink: 'syz.2.2993': attribute type 10 has an invalid length. [ 706.110790][T15493] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2993'. [ 706.145766][T15496] netlink: zone id is out of range [ 706.156037][T15496] netlink: set zone limit has 8 unknown bytes [ 706.901912][T15496] netlink: 'syz.1.2995': attribute type 10 has an invalid length. [ 706.909926][T15496] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2995'. [ 708.178282][T15523] netlink: 'syz.2.3003': attribute type 21 has an invalid length. [ 708.290564][T15523] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3003'. [ 708.351242][T15523] netlink: 'syz.2.3003': attribute type 5 has an invalid length. [ 708.392921][T15523] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3003'. [ 709.325825][T15536] netlink: 'syz.2.3006': attribute type 33 has an invalid length. [ 709.427997][T15536] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3006'. [ 709.599669][T15540] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3004'. [ 712.032659][T15545] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3007'. [ 712.398241][T15548] delete_channel: no stack [ 712.724582][T15559] netlink: 'syz.3.3011': attribute type 39 has an invalid length. [ 713.737832][T15582] FAULT_INJECTION: forcing a failure. [ 713.737832][T15582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.814367][T15582] CPU: 0 PID: 15582 Comm: syz.2.3018 Not tainted syzkaller #0 [ 713.821892][T15582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 713.831973][T15582] Call Trace: [ 713.835267][T15582] [ 713.838217][T15582] dump_stack_lvl+0x18c/0x250 [ 713.842925][T15582] ? show_regs_print_info+0x20/0x20 [ 713.848147][T15582] ? load_image+0x420/0x420 [ 713.852676][T15582] ? __might_fault+0xaa/0x120 [ 713.857374][T15582] ? __lock_acquire+0x7d40/0x7d40 [ 713.862428][T15582] should_fail_ex+0x39d/0x4d0 [ 713.867129][T15582] _copy_to_user+0x2f/0xa0 [ 713.871565][T15582] btf_get_info_by_fd+0x43b/0x5d0 [ 713.876618][T15582] ? btf_get_by_fd+0x160/0x160 [ 713.881493][T15582] ? __fdget+0x180/0x210 [ 713.885768][T15582] bpf_obj_get_info_by_fd+0xc12/0x3080 [ 713.891248][T15582] ? trace_event_raw_event_lock+0x250/0x250 [ 713.897242][T15582] ? verify_lock_unused+0x140/0x140 [ 713.902451][T15582] ? perf_trace_lock+0xfc/0x3b0 [ 713.907340][T15582] ? bpf_map_get_fd_by_id+0x310/0x310 [ 713.912751][T15582] ? perf_trace_lock+0xfc/0x3b0 [ 713.917640][T15582] ? trace_event_raw_event_lock+0x250/0x250 [ 713.923580][T15582] ? __might_fault+0xaa/0x120 [ 713.928280][T15582] ? __lock_acquire+0x7d40/0x7d40 [ 713.933408][T15582] ? file_end_write+0x159/0x250 [ 713.938281][T15582] ? __might_fault+0xaa/0x120 [ 713.943014][T15582] ? __might_fault+0xc6/0x120 [ 713.947710][T15582] ? __might_fault+0xaa/0x120 [ 713.952403][T15582] ? bpf_lsm_bpf+0x9/0x10 [ 713.956757][T15582] ? security_bpf+0x7e/0xa0 [ 713.961282][T15582] __sys_bpf+0x7eb/0x890 [ 713.965546][T15582] ? bpf_link_show_fdinfo+0x390/0x390 [ 713.970957][T15582] ? lock_chain_count+0x20/0x20 [ 713.975835][T15582] __x64_sys_bpf+0x7c/0x90 [ 713.980273][T15582] do_syscall_64+0x55/0xa0 [ 713.984717][T15582] ? clear_bhb_loop+0x40/0x90 [ 713.989415][T15582] ? clear_bhb_loop+0x40/0x90 [ 713.994112][T15582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.000027][T15582] RIP: 0033:0x7f75e3d9c819 [ 714.004457][T15582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.024093][T15582] RSP: 002b:00007f75e4ca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 714.032527][T15582] RAX: ffffffffffffffda RBX: 00007f75e4015fa0 RCX: 00007f75e3d9c819 [ 714.040533][T15582] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 714.048543][T15582] RBP: 00007f75e4ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 714.056535][T15582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.064622][T15582] R13: 00007f75e4016038 R14: 00007f75e4015fa0 R15: 00007ffd708cbaa8 [ 714.072627][T15582] [ 714.677989][T15579] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3020'. [ 715.785524][T15601] netlink: 'syz.2.3024': attribute type 39 has an invalid length. [ 716.045112][T15599] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3031'. [ 718.471559][T15626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 718.478925][T15626] IPv6: NLM_F_CREATE should be set when creating new route [ 718.486269][T15626] IPv6: NLM_F_CREATE should be set when creating new route [ 718.493536][T15626] IPv6: NLM_F_CREATE should be set when creating new route [ 718.697346][T15632] FAULT_INJECTION: forcing a failure. [ 718.697346][T15632] name failslab, interval 1, probability 0, space 0, times 0 [ 718.748248][T15632] CPU: 1 PID: 15632 Comm: syz.2.3033 Not tainted syzkaller #0 [ 718.755793][T15632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 718.765899][T15632] Call Trace: [ 718.769205][T15632] [ 718.772165][T15632] dump_stack_lvl+0x18c/0x250 [ 718.776892][T15632] ? show_regs_print_info+0x20/0x20 [ 718.782138][T15632] ? load_image+0x420/0x420 [ 718.786681][T15632] ? __lock_acquire+0x7d40/0x7d40 [ 718.791742][T15632] should_fail_ex+0x39d/0x4d0 [ 718.796461][T15632] should_failslab+0x9/0x20 [ 718.801004][T15632] slab_pre_alloc_hook+0x59/0x310 [ 718.806075][T15632] ? __lock_acquire+0x7d40/0x7d40 [ 718.811135][T15632] ? bpf_test_init+0x9f/0x140 [ 718.815863][T15632] ? bpf_test_init+0x9f/0x140 [ 718.820594][T15632] __kmem_cache_alloc_node+0x53/0x250 [ 718.826033][T15632] ? bpf_test_init+0x9f/0x140 [ 718.830762][T15632] __kmalloc+0xa4/0x230 [ 718.834969][T15632] bpf_test_init+0x9f/0x140 [ 718.839512][T15632] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 718.844936][T15632] ? dev_put+0x80/0x80 [ 718.849047][T15632] ? dev_put+0x80/0x80 [ 718.853149][T15632] bpf_prog_test_run+0x321/0x390 [ 718.858132][T15632] __sys_bpf+0x49d/0x890 [ 718.862410][T15632] ? bpf_link_show_fdinfo+0x390/0x390 [ 718.867858][T15632] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 718.874057][T15632] __x64_sys_bpf+0x7c/0x90 [ 718.878504][T15632] do_syscall_64+0x55/0xa0 [ 718.882954][T15632] ? clear_bhb_loop+0x40/0x90 [ 718.887667][T15632] ? clear_bhb_loop+0x40/0x90 [ 718.892378][T15632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.898316][T15632] RIP: 0033:0x7f75e3d9c819 [ 718.902769][T15632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.922424][T15632] RSP: 002b:00007f75e4ca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 718.930880][T15632] RAX: ffffffffffffffda RBX: 00007f75e4015fa0 RCX: 00007f75e3d9c819 [ 718.938893][T15632] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 718.946891][T15632] RBP: 00007f75e4ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 718.954903][T15632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.962909][T15632] R13: 00007f75e4016038 R14: 00007f75e4015fa0 R15: 00007ffd708cbaa8 [ 718.970927][T15632] [ 718.978010][T13024] Bluetooth: hci2: command 0x0406 tx timeout [ 719.173471][T15631] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3034'. [ 719.689134][T15636] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3035'. [ 720.952767][T15660] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3041'. [ 721.190965][T15662] bridge0: port 4(veth0_to_bridge) entered blocking state [ 721.239673][T15662] bridge0: port 4(veth0_to_bridge) entered disabled state [ 721.259267][T15662] veth0_to_bridge: entered allmulticast mode [ 721.268137][T15662] veth0_to_bridge: entered promiscuous mode [ 721.274359][T15662] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 721.288422][T15662] bridge0: port 4(veth0_to_bridge) entered blocking state [ 721.296872][T15662] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 721.422610][T15664] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3044'. [ 722.573958][T15684] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3052'. [ 723.504896][T15702] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3057'. [ 727.113368][T15724] netlink: 'syz.0.3065': attribute type 10 has an invalid length. [ 727.165470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.179067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.194938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.208381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.225186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.238672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.254575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.268087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.284046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.297516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.616985][T15724] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 727.820405][T15714] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3061'. [ 731.717588][T15734] netlink: 'syz.2.3067': attribute type 10 has an invalid length. [ 732.165939][ C1] net_ratelimit: 4255 callbacks suppressed [ 732.165959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 732.184911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.197420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.210490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 732.223502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.236056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.249116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 732.262146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.274619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.288405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 737.176098][ C0] net_ratelimit: 7897 callbacks suppressed [ 737.176120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.176145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.182485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.195007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 737.206539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.218906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.230445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.242461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.254356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.266802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 742.186235][ C1] net_ratelimit: 12605 callbacks suppressed [ 742.186256][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.197409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.204927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.206211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 742.207209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.228686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.231307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.232382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 742.233385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.233932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.196565][ C1] net_ratelimit: 4027 callbacks suppressed [ 747.196586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 747.205604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.215528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.216123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.237174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.241604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 747.262439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.265678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.287633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.290255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.207442][ C1] net_ratelimit: 3797 callbacks suppressed [ 752.207462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 752.217534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.226757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.250207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.250912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.265040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 752.290026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.292566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.302868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.325274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 754.410378][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.433737][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.216467][ C1] net_ratelimit: 3717 callbacks suppressed [ 757.216498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 757.235621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.246093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.248185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.250549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 757.251626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.252294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.294875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.302133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 757.303286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.261456][ C1] net_ratelimit: 1494 callbacks suppressed [ 762.261702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 762.274717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.381209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.436916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.577192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.657678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 762.761920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.814673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.816887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.003992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 767.282154][ C1] net_ratelimit: 45 callbacks suppressed [ 767.282207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.339373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.352378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.536773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 767.635118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.640412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.696634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.886182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 768.056068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.109401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.496606][ C0] net_ratelimit: 45 callbacks suppressed [ 772.498607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.570368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 772.668169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.715590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.717179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.926352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 773.019790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.030518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.085101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.266980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 777.506749][ C0] net_ratelimit: 1903 callbacks suppressed [ 777.506770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.526574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.540267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.552627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.554012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.579549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.593247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.606952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.620805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.634729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.592209][ C1] net_ratelimit: 1717 callbacks suppressed [ 782.592267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.608079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.655899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.809402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 782.888348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.888582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.943574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.127613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 783.201331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.229381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.601226][ C0] net_ratelimit: 48 callbacks suppressed [ 787.602301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.778091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 787.871062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.915623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.926709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.141352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 788.234308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.283513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.299301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.483000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 792.622282][ C1] net_ratelimit: 46 callbacks suppressed [ 792.622335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.641803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.840693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 792.945461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.002753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.014191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.276838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 793.373166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.401170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.429433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.668806][ C1] net_ratelimit: 60 callbacks suppressed [ 797.668897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 797.687080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.774520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.829177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.000156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.038963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 798.135001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.204579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.212749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.403968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 802.707167][ C1] net_ratelimit: 64 callbacks suppressed [ 802.707215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 802.723268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 802.870162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.929669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.031196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.114332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 803.205391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.256022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.263628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.470191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 807.875583][ C0] net_ratelimit: 46 callbacks suppressed [ 807.875632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 807.880707][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 807.987673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.048022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.247160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 808.247736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.361932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.464486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.632096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.669900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 812.968062][ C1] net_ratelimit: 46 callbacks suppressed [ 812.968192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 813.069323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.122468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.300293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 813.398732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.456052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.505606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.660777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 813.766062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.822557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.155018][ C1] net_ratelimit: 44 callbacks suppressed [ 818.155296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 818.174869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.281980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.347293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.623977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.646632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 818.744713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.807013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.875636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 819.053236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 823.330863][ C1] net_ratelimit: 57 callbacks suppressed [ 823.330928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 823.444601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.455136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.510327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.713940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 823.728242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.833854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.891176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.067083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.081426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.283544][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 824.308979][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 828.405244][ C1] net_ratelimit: 198 callbacks suppressed [ 828.405307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.405563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.481005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.694188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 828.801629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.804453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.871167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.115155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 829.178887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.217866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.529728][ C1] net_ratelimit: 41 callbacks suppressed [ 833.529820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 833.534226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.653916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.720672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.949746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 833.954677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.050187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.105180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.255557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.305582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 838.691103][ C1] net_ratelimit: 47 callbacks suppressed [ 838.691194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 838.797943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.857799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.031400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 839.132908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.221979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.277639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.480283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 839.599046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.663144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.728778][ C1] net_ratelimit: 33 callbacks suppressed [ 843.728829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 843.730842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.840670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.006210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.078897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.225200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 844.335109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.492014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.703062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 844.814893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.747076][ C1] net_ratelimit: 30 callbacks suppressed [ 848.747681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.961575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 848.965613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.083005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.234039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.315572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.427832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 849.516132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.700794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.705572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.802738][ C1] net_ratelimit: 96 callbacks suppressed [ 853.803136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 853.918877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.927729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.096271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.291553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.293327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 854.411103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.511156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.676570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.876019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 858.816658][ C0] net_ratelimit: 50 callbacks suppressed [ 858.817644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.828451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.931893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.115835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 859.221381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.222053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.347693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.409953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.505519][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 859.512540][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15729/1:b..l [ 859.513890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.521009][ C1] rcu: (detected by 1, t=10502 jiffies, g=78529, q=290 ncpus=2) [ 859.521032][ C1] task:syz.3.3066 state:R running task stack:24232 pid:15729 ppid:13751 flags:0x00004006 [ 859.552623][ C1] Call Trace: [ 859.555934][ C1] [ 859.558904][ C1] __schedule+0x1553/0x45a0 [ 859.563748][ C1] ? mark_lock+0x94/0x320 [ 859.568163][ C1] ? mark_lock+0x94/0x320 [ 859.572560][ C1] ? asan.module_dtor+0x20/0x20 [ 859.577660][ C1] ? mark_lock+0x94/0x320 [ 859.580385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.582061][ C1] ? lock_chain_count+0x20/0x20 [ 859.582088][ C1] ? preempt_schedule+0xc0/0xd0 [ 859.582120][ C1] preempt_schedule_common+0x82/0xc0 [ 859.582150][ C1] preempt_schedule+0xc0/0xd0 [ 859.582176][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 859.582213][ C1] preempt_schedule_thunk+0x1a/0x30 [ 859.582243][ C1] ? unwind_next_frame+0x200a/0x2970 [ 859.582266][ C1] unwind_next_frame+0x200f/0x2970 [ 859.582298][ C1] ? __reset_page_owner+0x4e/0x190 [ 859.582319][ C1] ? __reset_page_owner+0x4e/0x190 [ 859.582337][ C1] ? stack_trace_save+0x100/0x100 [ 859.582360][ C1] arch_stack_walk+0x144/0x190 [ 859.582389][ C1] ? free_unref_page_prepare+0x7b2/0x8c0 [ 859.582420][ C1] stack_trace_save+0xaa/0x100 [ 859.582443][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 859.582464][ C1] ? perf_trace_lock_acquire+0x104/0x410 [ 859.582504][ C1] save_stack+0x125/0x230 [ 859.582527][ C1] ? __reset_page_owner+0x190/0x190 [ 859.582544][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 859.582590][ C1] ? page_ext_get+0x1e2/0x2b0 [ 859.582617][ C1] __reset_page_owner+0x4e/0x190 [ 859.582644][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 859.582677][ C1] free_unref_page+0x32/0x2e0 [ 859.582709][ C1] __unfreeze_partials+0x1cf/0x210 [ 859.582737][ C1] put_cpu_partial+0x17c/0x250 [ 859.582755][ C1] ? put_cpu_partial+0x6e/0x250 [ 859.582780][ C1] __slab_free+0x319/0x400 [ 859.582800][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 859.582824][ C1] ? _raw_spin_unlock+0x40/0x40 [ 859.582845][ C1] ? __phys_addr+0xba/0x170 [ 859.582872][ C1] qlist_free_all+0x75/0xd0 [ 859.582901][ C1] kasan_quarantine_reduce+0x143/0x160 [ 859.582931][ C1] __kasan_slab_alloc+0x22/0x80 [ 859.582963][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 859.582998][ C1] kmem_cache_alloc+0x11a/0x2d0 [ 859.583023][ C1] ? vm_area_alloc+0x10e/0x1d0 [ 859.583049][ C1] vm_area_alloc+0x10e/0x1d0 [ 859.583070][ C1] mmap_region+0xc2f/0x2000 [ 859.583121][ C1] ? file_mmap_ok+0x170/0x170 [ 859.583152][ C1] ? cap_mmap_addr+0x169/0x2d0 [ 859.583189][ C1] ? file_mmap_ok+0x11c/0x170 [ 859.583216][ C1] do_mmap+0x92c/0x10a0 [ 859.583254][ C1] ? mlock_future_ok+0xf0/0xf0 [ 859.583278][ C1] ? down_write+0x200/0x200 [ 859.583309][ C1] vm_mmap_pgoff+0x1c4/0x3f0 [ 859.583336][ C1] ? up_write+0x1c3/0x410 [ 859.583361][ C1] ? account_locked_vm+0x210/0x210 [ 859.583383][ C1] ? __fget_files+0x28/0x4b0 [ 859.583422][ C1] ksys_mmap_pgoff+0x520/0x700 [ 859.583447][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 859.583471][ C1] do_syscall_64+0x55/0xa0 [ 859.583489][ C1] ? clear_bhb_loop+0x40/0x90 [ 859.583512][ C1] ? clear_bhb_loop+0x40/0x90 [ 859.583537][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 859.583559][ C1] RIP: 0033:0x7f876b79c582 [ 859.583578][ C1] RSP: 002b:00007ffdd970d2a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 859.583602][ C1] RAX: ffffffffffffffda RBX: 00007f87691f4000 RCX: 00007f876b79c582 [ 859.583617][ C1] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f87691f4000 [ 859.583631][ C1] RBP: 0000000000000011 R08: 00000000000000dc R09: 0000000000000000 [ 859.583644][ C1] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 859.583657][ C1] R13: 0000000000000005 R14: 0000000000000000 R15: 00007f876ba15fa0 [ 859.583689][ C1] [ 859.583699][ C1] rcu: rcu_preempt kthread starved for 840 jiffies! g78529 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 859.583723][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 859.583732][ C1] rcu: RCU grace-period kthread stack dump: [ 859.583741][ C1] task:rcu_preempt state:R running task stack:26888 pid:17 ppid:2 flags:0x00004000 [ 859.583784][ C1] Call Trace: [ 859.583792][ C1] [ 859.583804][ C1] __schedule+0x1553/0x45a0 [ 859.583851][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 859.583878][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 859.583900][ C1] ? asan.module_dtor+0x20/0x20 [ 859.583930][ C1] ? enqueue_timer+0x23d/0x550 [ 859.583964][ C1] ? __mod_timer+0x984/0xdb0 [ 859.584001][ C1] schedule+0xbd/0x170 [ 859.584027][ C1] schedule_timeout+0x188/0x2d0 [ 859.584049][ C1] ? console_conditional_schedule+0x40/0x40 [ 859.584070][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 859.584094][ C1] ? update_process_times+0x1b0/0x1b0 [ 859.584121][ C1] ? prepare_to_swait_event+0x339/0x360 [ 859.584151][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 859.584185][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 859.584208][ C1] ? rcu_gp_init+0x1560/0x1560 [ 859.584225][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 859.584250][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.584273][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 859.584298][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 859.584321][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 859.584343][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 859.584362][ C1] ? __kthread_parkme+0x162/0x1c0 [ 859.584389][ C1] kthread+0x2fa/0x390 [ 859.584406][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 859.584427][ C1] ? kthread_blkcg+0xd0/0xd0 [ 859.584446][ C1] ret_from_fork+0x48/0x80 [ 859.584468][ C1] ? kthread_blkcg+0xd0/0xd0 [ 859.584488][ C1] ret_from_fork_asm+0x11/0x20 [ 859.584528][ C1] [ 859.584536][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 859.584544][ C1] Sending NMI from CPU 1 to CPUs 0: [ 859.584572][ C0] NMI backtrace for cpu 0 [ 859.584581][ C0] CPU: 0 PID: 15738 Comm: syz.0.3068 Not tainted syzkaller #0 [ 859.584596][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 859.584603][ C0] RIP: 0010:irqentry_exit+0x0/0x70 [ 859.584623][ C0] Code: e8 05 f9 ff ff f6 c3 02 75 0b 66 90 e8 e9 40 07 f7 31 c0 5b c3 e8 80 09 00 00 e8 db 40 07 f7 b0 01 5b c3 0f 1f 80 00 00 00 00 <66> 0f 1f 00 83 3d 21 f7 04 04 00 74 16 65 8b 05 54 36 7c 75 85 c0 [ 859.584636][ C0] RSP: 0018:ffffc90000006950 EFLAGS: 00000046 [ 859.584648][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 2c7098e016869400 [ 859.584659][ C0] RDX: 0000000000010100 RSI: 0000000000000000 RDI: ffffc90000006958 [ 859.584669][ C0] RBP: 0000000000000000 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 859.584679][ C0] R10: dffffc0000000000 R11: fffffbfff1d162be R12: 0000000000000000 [ 859.584696][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.584706][ C0] FS: 00007f11a7d8a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 859.584720][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.584731][ C0] CR2: 000055fe735f3168 CR3: 000000006741e000 CR4: 00000000003506f0 [ 859.584747][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 859.584756][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 859.584766][ C0] Call Trace: [ 859.584772][ C0] [ 859.584776][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.584795][ C0] RIP: 0010:_prb_read_valid+0x55d/0xad0 [ 859.584814][ C0] Code: 48 85 c0 0f 84 60 05 00 00 49 89 c6 49 c1 ee 03 43 80 3c 2e 00 74 0f 48 8b 7c 24 30 e8 1c 10 73 00 48 8b 44 24 30 48 83 38 00 <74> 30 e8 7c d8 1a 00 43 80 3c 2e 00 4c 8b 74 24 30 74 08 4c 89 f7 [ 859.584825][ C0] RSP: 0018:ffffc90000006a00 EFLAGS: 00000286 [ 859.584837][ C0] RAX: ffffc90000006d40 RBX: ffffffff8d04a0e0 RCX: ffff888019333c00 [ 859.584847][ C0] RDX: 0000000000000100 RSI: 0000000000051af8 RDI: 0000000000000001 [ 859.584857][ C0] RBP: ffffc90000006bc0 R08: ffff888019333c00 R09: 0000000000000003 [ 859.584867][ C0] R10: 00000000ffffffff R11: 0000000000000100 R12: ffffffff8d04a0c0 [ 859.584877][ C0] R13: dffffc0000000000 R14: 1ffff92000000da8 R15: 0000000000002373 [ 859.584902][ C0] ? mark_lock+0x94/0x320 [ 859.584926][ C0] ? prb_read_valid+0x60/0x60 [ 859.584946][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.584967][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.584991][ C0] prb_read_valid+0x3d/0x60 [ 859.585011][ C0] printk_get_next_message+0x190/0x980 [ 859.585036][ C0] ? trace_raw_output_console+0xd0/0xd0 [ 859.585065][ C0] ? read_lock_is_recursive+0x20/0x20 [ 859.585082][ C0] ? mark_lock+0x94/0x320 [ 859.585100][ C0] ? console_flush_all+0x355/0xd20 [ 859.585121][ C0] console_flush_all+0x3a8/0xd20 [ 859.585140][ C0] ? console_flush_all+0x10a/0xd20 [ 859.585158][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.585178][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.585198][ C0] ? is_console_locked+0x20/0x20 [ 859.585218][ C0] ? lock_acquire+0x208/0x420 [ 859.585238][ C0] console_unlock+0xad/0x350 [ 859.585256][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 859.585277][ C0] ? vprintk_emit+0x467/0x610 [ 859.585293][ C0] ? vprintk_emit+0x30b/0x610 [ 859.585308][ C0] ? vprintk_emit+0x30b/0x610 [ 859.585325][ C0] vprintk_emit+0x497/0x610 [ 859.585341][ C0] ? vprintk_emit+0x30b/0x610 [ 859.585359][ C0] ? printk_sprint+0x460/0x460 [ 859.585374][ C0] ? mark_lock+0x94/0x320 [ 859.585392][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 859.585416][ C0] _printk+0xde/0x130 [ 859.585435][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.585455][ C0] ? load_image+0x420/0x420 [ 859.585482][ C0] br_fdb_update+0x5c5/0x630 [ 859.585505][ C0] ? br_fdb_add_local+0x50/0x50 [ 859.585528][ C0] br_handle_frame_finish+0x5e5/0x18f0 [ 859.585552][ C0] ? sched_clock_cpu+0x75/0x430 [ 859.585569][ C0] ? brport_get_ownership+0x80/0x80 [ 859.585590][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 859.585611][ C0] ? mark_lock+0x94/0x320 [ 859.585629][ C0] ? nf_hook_slow+0x16c/0x200 [ 859.585648][ C0] ? brport_get_ownership+0x80/0x80 [ 859.585667][ C0] br_nf_hook_thresh+0x3cd/0x4a0 [ 859.585696][ C0] ? brnf_get_logical_dev+0x270/0x270 [ 859.585713][ C0] ? brport_get_ownership+0x80/0x80 [ 859.585735][ C0] ? nf_bridge_update_protocol+0x91/0x170 [ 859.585753][ C0] br_nf_pre_routing_finish_ipv6+0x9dc/0xd00 [ 859.585769][ C0] ? brport_get_ownership+0x80/0x80 [ 859.585795][ C0] br_nf_pre_routing_ipv6+0x349/0x6b0 [ 859.585812][ C0] ? br_nf_pre_routing_ipv6+0x3f2/0x6b0 [ 859.585828][ C0] ? br_validate_ipv6+0x730/0x730 [ 859.585845][ C0] ? br_nf_pre_routing_ipv6+0x6b0/0x6b0 [ 859.585860][ C0] ? br_nf_pre_routing+0x70f/0x1420 [ 859.585879][ C0] ? br_nf_hook_thresh+0x4a0/0x4a0 [ 859.585895][ C0] br_handle_frame+0x1245/0x14d0 [ 859.585920][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 859.585940][ C0] ? brport_get_ownership+0x80/0x80 [ 859.585960][ C0] ? lock_is_held_type+0x13e/0x190 [ 859.585979][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 859.585998][ C0] __netif_receive_skb_core+0xfab/0x3af0 [ 859.586017][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.586035][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 859.586061][ C0] ? qdisc_run+0x230/0x230 [ 859.586074][ C0] ? lock_acquire+0x208/0x420 [ 859.586094][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 859.586113][ C0] ? read_lock_is_recursive+0x20/0x20 [ 859.586131][ C0] ? process_backlog+0x2cf/0x6f0 [ 859.586146][ C0] __netif_receive_skb+0x74/0x290 [ 859.586165][ C0] ? process_backlog+0x2cf/0x6f0 [ 859.586180][ C0] process_backlog+0x391/0x6f0 [ 859.586205][ C0] ? trigger_rx_softirq+0x60/0x60 [ 859.586227][ C0] __napi_poll+0xc0/0x460 [ 859.586245][ C0] net_rx_action+0x616/0xc40 [ 859.586269][ C0] ? net_tx_action+0x980/0x980 [ 859.586284][ C0] ? detach_timer+0x2b0/0x2b0 [ 859.586310][ C0] handle_softirqs+0x280/0x820 [ 859.586328][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 859.586346][ C0] ? do_softirq+0x1a0/0x1a0 [ 859.586364][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 859.586384][ C0] __irq_exit_rcu+0xd3/0x190 [ 859.586399][ C0] ? irq_exit_rcu+0x20/0x20 [ 859.586419][ C0] irq_exit_rcu+0x9/0x20 [ 859.586433][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 859.586450][ C0] [ 859.586455][ C0] [ 859.586461][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.586478][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 859.586494][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 89 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 859.586505][ C0] RSP: 0018:ffffc9000c7ff318 EFLAGS: 00000286 [ 859.586517][ C0] RAX: 2c7098e016869400 RBX: 0000000000000000 RCX: 2c7098e016869400 [ 859.586527][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 859.586538][ C0] RBP: ffffc9000c7ff370 R08: ffffffff911c552f R09: 1ffffffff2238aa5 [ 859.586548][ C0] R10: dffffc0000000000 R11: fffffbfff2238aa6 R12: ffff888019333c00 [ 859.586558][ C0] R13: dffffc0000000000 R14: ffff88801aadda00 R15: ffff8880b8e3cac8 [ 859.586581][ C0] ? finish_task_switch+0x265/0x8f0 [ 859.586601][ C0] __schedule+0x155b/0x45a0 [ 859.586629][ C0] ? perf_tp_event+0x13d7/0x1520 [ 859.586655][ C0] ? asan.module_dtor+0x20/0x20 [ 859.586680][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 859.586706][ C0] ? lock_chain_count+0x20/0x20 [ 859.586724][ C0] ? preempt_schedule+0xc0/0xd0 [ 859.586746][ C0] preempt_schedule_common+0x82/0xc0 [ 859.586768][ C0] preempt_schedule+0xc0/0xd0 [ 859.586788][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 859.586814][ C0] preempt_schedule_thunk+0x1a/0x30 [ 859.586835][ C0] ? unwind_next_frame+0x200a/0x2970 [ 859.586851][ C0] unwind_next_frame+0x200f/0x2970 [ 859.586873][ C0] ? stack_trace_save+0xaa/0x100 [ 859.586891][ C0] ? stack_trace_save+0xaa/0x100 [ 859.586908][ C0] ? stack_trace_save+0x100/0x100 [ 859.586925][ C0] arch_stack_walk+0x144/0x190 [ 859.586944][ C0] ? save_stack+0x125/0x230 [ 859.586960][ C0] stack_trace_save+0xaa/0x100 [ 859.586977][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 859.587001][ C0] save_stack+0x125/0x230 [ 859.587016][ C0] ? __reset_page_owner+0x190/0x190 [ 859.587029][ C0] ? mark_lock+0x94/0x320 [ 859.587056][ C0] ? page_ext_get+0x1e2/0x2b0 [ 859.587075][ C0] __reset_page_owner+0x4e/0x190 [ 859.587092][ C0] free_unref_page_prepare+0x7b2/0x8c0 [ 859.587117][ C0] free_unref_page+0x32/0x2e0 [ 859.587139][ C0] __slab_free+0x35a/0x400 [ 859.587157][ C0] ? __phys_addr+0xba/0x170 [ 859.587177][ C0] qlist_free_all+0x75/0xd0 [ 859.587198][ C0] kasan_quarantine_reduce+0x143/0x160 [ 859.587220][ C0] __kasan_slab_alloc+0x22/0x80 [ 859.587238][ C0] slab_post_alloc_hook+0x6e/0x4b0 [ 859.587263][ C0] __kmem_cache_alloc_node+0x13a/0x250 [ 859.587282][ C0] ? sk_prot_alloc+0xe7/0x210 [ 859.587303][ C0] ? sk_prot_alloc+0xe7/0x210 [ 859.587320][ C0] __kmalloc+0xa4/0x230 [ 859.587338][ C0] ? __wake_up+0x132/0x1a0 [ 859.587354][ C0] sk_prot_alloc+0xe7/0x210 [ 859.587371][ C0] ? sk_alloc+0x24/0x360 [ 859.587390][ C0] sk_alloc+0x3a/0x360 [ 859.587405][ C0] ? _raw_read_unlock_irqrestore+0xc5/0x120 [ 859.587426][ C0] __netlink_create+0x6c/0x290 [ 859.587449][ C0] netlink_create+0x3ee/0x5c0 [ 859.587465][ C0] ? genl_rcv+0x40/0x40 [ 859.587480][ C0] __sock_create+0x4a6/0x940 [ 859.587506][ C0] __sys_socket+0xd7/0x1a0 [ 859.587529][ C0] __x64_sys_socket+0x7a/0x90 [ 859.587550][ C0] do_syscall_64+0x55/0xa0 [ 859.587562][ C0] ? clear_bhb_loop+0x40/0x90 [ 859.587578][ C0] ? clear_bhb_loop+0x40/0x90 [ 859.587596][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 859.587613][ C0] RIP: 0033:0x7f11a6f9c819 [ 859.587626][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.587638][ C0] RSP: 002b:00007f11a7d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 859.587652][ C0] RAX: ffffffffffffffda RBX: 00007f11a7216090 RCX: 00007f11a6f9c819 [ 859.587663][ C0] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 859.587672][ C0] RBP: 00007f11a7032c91 R08: 0000000000000000 R09: 0000000000000000 [ 859.587682][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.587697][ C0] R13: 00007f11a7216128 R14: 00007f11a7216090 R15: 00007ffd219fe2c8 [ 859.587719][ C0] [ 863.825724][ C1] net_ratelimit: 1905 callbacks suppressed [ 863.825746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.844766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.857403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.859397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.870721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.871806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 863.873455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 863.874472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.875656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.876170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.835644][ C0] net_ratelimit: 7769 callbacks suppressed [ 868.835668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.835965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.841990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.854719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 868.867212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.879131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:d2:28:72:78:d7, vlan:0) [ 868.890019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.902939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.915863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.926844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)