last executing test programs: 10.28539876s ago: executing program 0 (id=793): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4800) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103606989068c3c2700406558009e0ff008001f", 0x0, 0x104, 0xffff832f, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) 9.55613475s ago: executing program 0 (id=797): perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x80, 0x0, 0x0, 0xa4c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x48040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000010c0)='{', 0x1}], 0x1}, 0x80d1) (fail_nth: 13) 7.480846291s ago: executing program 0 (id=800): perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x80, 0x0, 0x0, 0xa4c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x48040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x6, 0x8}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000010c0)='{', 0x1}], 0x1}, 0x80d1) 6.48534814s ago: executing program 0 (id=804): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x2, 0xf, 0x3, 0x6, 0x0, 0x52d, 0x1800, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000780), 0x8}, 0x940, 0x9, 0x7, 0x2, 0x5, 0x0, 0x2bec, 0x0, 0x4, 0x0, 0x1}, r2, 0x6, r8, 0x2) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x9, 0x4, 0x3, 0x41480, r8, 0x9, '\x00', 0x0, r8, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6c10, 0x36, &(0x7f0000000240)=""/54, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2bc9d, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000002c0)=[{0x0, 0x4, 0x6, 0xa}, {0x2, 0x4, 0x9}, {0x4, 0x3, 0x8, 0xecc0f4816784c8ff}, {0x0, 0x5, 0x10, 0xa}, {0x4, 0x5, 0xa, 0x7}, {0x4, 0x2, 0x2, 0x6}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000440)=@generic={0x2, "2ca63139511fb9e5f26533011db34c2d2eb25e46f698f377baef3be76882362a7c429eb9f94402669dd1d255733d64fe81e505dfc10066eedf2cd221399fbae0e5b85a6c233e67feaeab0239fa8df1ab6c126a16d5a9573b1af5008c5e8ec33043bc0ce1324b4068e81bcdda36e012a2b90b0f8c53dc889dd20d16f9d9bc"}, 0x80, 0x0}, 0x400c0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x32, 0x1, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), &(0x7f0000000500)=[0x0, 0x0, 0x0]}, 0x40) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 5.958591547s ago: executing program 0 (id=807): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000000f01f00810000007f"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) close(0x3) 5.896637144s ago: executing program 2 (id=808): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="e981141ecc4aa70b2be94a0faf0ffcd35b69885812b20f85e2f1bc7d7a233615d1bcf773302ef08fab852a996d70a9c0f8a5ee104ab9310f619cb7206f6c967ff07938451b06c49a9c61b6f54723d246c40f2ec13a69c76e6fb59d998a053a1f8c35750f794928a0699cedfed12985c6ff2e2f8991ac5aab2a473a68e03ba2f127b7761fdbaf6d0aec86f363d9196c5e06e04bcd8a0c96c71b65526531691f7c3fb9736cee048b4594c652a6041773572730ca27592f385005df7e602b35dc8d876a485b"], &(0x7f0000000080)='GPL\x00', 0xa}, 0x94) 5.666100453s ago: executing program 3 (id=809): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={'\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(r0, 0x89b0, &(0x7f0000000040)={'macvlan0\x00', @random="000000000f20"}) 5.629424463s ago: executing program 1 (id=810): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x0, &(0x7f0000000700)="1b7e1a10e3b8ac32", 0x0, 0x6, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) 5.538123357s ago: executing program 2 (id=811): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000104000000991805166700a6ba63ffd4c20f7e6e2041913031ebf6b28c5f907d22d1fb966970660b0057c8bd1b30272c88e7e401020ece230d9c0f069e672bfd032df7b396d1ec89849ff2f90444"], 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 5.29782772s ago: executing program 3 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x106) socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x3a, 0x16, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x4368, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x4, 0xd2, &(0x7f0000000e00)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.233657437s ago: executing program 3 (id=813): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x2}}, 0x80, 0x0, 0xfff5}, 0x88010) 3.961687548s ago: executing program 2 (id=814): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) close(r0) 3.889758067s ago: executing program 1 (id=815): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x2, 0xf, 0x3, 0x6, 0x0, 0x52d, 0x1800, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000780), 0x8}, 0x940, 0x9, 0x7, 0x2, 0x5, 0x0, 0x2bec, 0x0, 0x4, 0x0, 0x1}, r2, 0x6, r8, 0x2) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x9, 0x4, 0x3, 0x41480, r8, 0x9, '\x00', 0x0, r8, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6c10, 0x36, &(0x7f0000000240)=""/54, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2bc9d, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000002c0)=[{0x0, 0x4, 0x6, 0xa}, {0x2, 0x4, 0x9}, {0x4, 0x3, 0x8, 0xecc0f4816784c8ff}, {0x0, 0x5, 0x10, 0xa}, {0x4, 0x5, 0xa, 0x7}, {0x4, 0x2, 0x2, 0x6}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000440)=@generic={0x2, "2ca63139511fb9e5f26533011db34c2d2eb25e46f698f377baef3be76882362a7c429eb9f94402669dd1d255733d64fe81e505dfc10066eedf2cd221399fbae0e5b85a6c233e67feaeab0239fa8df1ab6c126a16d5a9573b1af5008c5e8ec33043bc0ce1324b4068e81bcdda36e012a2b90b0f8c53dc889dd20d16f9d9bc"}, 0x80, 0x0}, 0x400c0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x32, 0x1, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), &(0x7f0000000500)=[0x0, 0x0, 0x0]}, 0x40) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 3.826086973s ago: executing program 3 (id=816): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x300, 0x808e}, 0x40000100) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000840000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x7}, 0x94) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r5, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000c40)) r6 = syz_open_procfs$namespace(r0, &(0x7f0000000000)) openat$cgroup_ro(r6, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x112) 2.985847982s ago: executing program 1 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000200fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095a5b283ab4fd9cb748c9266d547f23b56b060cee392bc90aec7ef1e76bb6d7ef5acf1b52beb893df9297617a604378b2758af8e9a7af78fb89f153ba10361fb00dcf94f30c14297120e324db46ba2c9d00b946c9fe26c4e732f5d82f05d72a1b223038e4ee3bcbaa4a26f5b5f590cfbcb10ccfb52f3b889b2be20e8bb020ae6af1db707bd047e7d8a172d61a9f605110db0924d2ca6fcef1c9af6fab2ba91cbcb307c8e1665a71a69a13c156824f6b821ed02fa0abf42f79d5f911003e9d4222dc84a3b265fe841506b97b0680247ab649b8fd7e885e2a939a2a0be810d62bd5a095aa7ff4485f64b82a518a80f992d41a148b554ea2238886831fb1e40fad577d9a0f4d2635f1b44e0f1e9c165e7489f776bdaefd45c1734c81b2cb6ad4489fc73f9465bab237ec402b464f96ea22171ed8d72919506c307088967a5a8998649bdd645ab8beb27c881334b83c54eda4a119afae57786ef6d272c7c5a"], &(0x7f0000000600)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800300000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.328841023s ago: executing program 1 (id=820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079001a0000"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) gettid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) 2.326050163s ago: executing program 2 (id=821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x106) socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x3a, 0x16, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x4368, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x4, 0xd2, &(0x7f0000000e00)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.325528464s ago: executing program 3 (id=822): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = syz_clone(0x100a2080, &(0x7f0000000200)="7746a4c25ab5d118297e216fb3992492feb174cbc0ab680fc1328713ab8b5710d93a5690", 0x24, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)="ea73a9ad470af4171addd4c9b5f540a508db5793cf8107b857ae66e721844c78e71c67b1cec88364434e7d0c892bbb1933c13390ffe17634e729eb7cb36bfcb07211a5678e229f0a4f75e69dd088f8e9aebd0567db4ea6748f633bb6eb7063ac195ca8d8d832ac9851e58903a1023b983a0908884a9bf045c94d1435b148fbb103fa1c86a5140abed6a4f22f29b48a98fa63d10f1a65d4fafde5a29c33bbdb50cfc565e0d0b98f") r3 = perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0x72, 0x10, 0x7, 0x2, 0x0, 0x1, 0x0, 0xd1b8641700640517, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x36, 0x4, @perf_bp={&(0x7f00000004c0), 0x1}, 0x100070, 0x8c, 0xa, 0x8, 0x9, 0x100, 0x2c, 0x0, 0x8, 0x0, 0x951a}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0xfa, 0xab, 0x1, 0x2, 0x0, 0x0, 0x22367, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000400), 0x8}, 0x20, 0x7fffffff, 0x3, 0x7, 0x8000, 0x7, 0x2, 0x0, 0x6, 0x0, 0xe547}, r2, 0xb, r3, 0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x336) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8c01, 0x0) close(r6) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8004}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) unlink(&(0x7f0000000640)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x6, 0x20009, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ef, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) 1.87969973s ago: executing program 1 (id=823): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000104000000991805166700a6ba63ffd4c20f7e6e2041913031ebf6b28c5f907d22d1fb966970660b0057c8bd1b30272c88e7e401020ece230d9c0f069e672bfd032df7b396d1ec89849ff2f90444"], 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 1.833724272s ago: executing program 2 (id=824): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x800, &(0x7f0000000080)="1af71664f95bff045999d9e1b3cac3bdf176199e43ad", 0x16, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="7059167077698e737b4cf5318eb2b189a6ff315304e1e37c41e6b52eb3d196ea0dc0be7421f20e73b029cb38fc06ef2de63bd84931cde2ff95cb15d2009fe6b44e122a208b61ad47f09e7af3ab309f1c50a8e364e8bb5704eaaf5d360597c20255b883f59e25d73922dd0489a3940f74347b50066949d98c825d285500ef463188c6f460b5006748458dc8773f2d03d465ddff07fb88c5f46a8f85d06dbd06e5fd064fc4ce48c34dc0163b5c7118a0b2d1b170c9be032b4bdd45b74ca83beba7") perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0xfffffffffffffffc, 0x7f, 0x0, 0x0, 0xffffffff, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000100000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffff000000000085000000330000009500000000000000", @ANYRES16=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x11, 0x1, 0x7ff, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="601d44c87513affef61130ef8ce5452fbd627930f4ddc66fe7e5659ae23c8938e6172216f3351d9c3abed0042e6d0e4ac8d8ad0c6b75a1804c4958d23d0c63d027fbc8a133002ad974ec3bfa727498438f07e7b5c759538fcb11e65817aae9af563f2d978884269b6dfef5d3e0f7cd6a9f5e2544d0c018ba423ff13702ddcf59d97dc29baa7d52260fadd1267e356e3830933fe2ea4ef1c80f425e6c25648b9ef970bae2e450904f9f4c3655defaf8dde6faf6db6ba7e8b938739f21db5eb1e306689ff01ceea199fbf1fa064786eba04ca0b8a81f1e5d380904"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) write$cgroup_subtree(r7, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) socketpair(0x22, 0x2, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x20000000200, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85a, 0x0, @perf_config_ext={0x8a15, 0x5}, 0x411, 0x1, 0xb, 0x5, 0xe4c2, 0x0, 0x0, 0x0, 0x2}, r11, 0x0, 0xffffffffffffffff, 0x6) 1.400948855s ago: executing program 3 (id=825): sendmsg$unix(0xffffffffffffffff, 0x0, 0x24040014) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x84, 0x0, 0x9e4, 0x5, 0x8, 0x5, 0x552, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x20}, {}, {}, {0x6}]}) r5 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r7) setsockopt$sock_attach_bpf(r5, 0x6, 0x1e, &(0x7f0000000500)=r8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)}, 0x80d0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=826): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x2, 0xf, 0x3, 0x6, 0x0, 0x52d, 0x1800, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000780), 0x8}, 0x940, 0x9, 0x7, 0x2, 0x5, 0x0, 0x2bec, 0x0, 0x4, 0x0, 0x1}, r2, 0x6, r8, 0x2) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x9, 0x4, 0x3, 0x41480, r8, 0x9, '\x00', 0x0, r8, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6c10, 0x36, &(0x7f0000000240)=""/54, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2bc9d, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000002c0)=[{0x0, 0x4, 0x6, 0xa}, {0x2, 0x4, 0x9}, {0x4, 0x3, 0x8, 0xecc0f4816784c8ff}, {0x0, 0x5, 0x10, 0xa}, {0x4, 0x5, 0xa, 0x7}, {0x4, 0x2, 0x2, 0x6}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000440)=@generic={0x2, "2ca63139511fb9e5f26533011db34c2d2eb25e46f698f377baef3be76882362a7c429eb9f94402669dd1d255733d64fe81e505dfc10066eedf2cd221399fbae0e5b85a6c233e67feaeab0239fa8df1ab6c126a16d5a9573b1af5008c5e8ec33043bc0ce1324b4068e81bcdda36e012a2b90b0f8c53dc889dd20d16f9d9bc"}, 0x80, 0x0}, 0x400c0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x32, 0x1, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), &(0x7f0000000500)=[0x0, 0x0, 0x0]}, 0x40) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. syzkaller login: [ 80.861881][ T5768] cgroup: Unknown subsys name 'net' [ 81.024635][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.715749][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.420789][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.426979][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.433716][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.443263][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.444588][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.457711][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.458771][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.467800][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.472507][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.487194][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.487234][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.492151][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.498261][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.506139][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.510445][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.517300][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.527272][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.530238][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.536349][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.546219][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.552289][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.564300][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.578494][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.580066][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.011373][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 85.110791][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 85.171596][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 85.247720][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.254909][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.263450][ T5779] bridge_slave_0: entered allmulticast mode [ 85.271210][ T5779] bridge_slave_0: entered promiscuous mode [ 85.285219][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.292483][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.299814][ T5779] bridge_slave_1: entered allmulticast mode [ 85.307357][ T5779] bridge_slave_1: entered promiscuous mode [ 85.413067][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.437168][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.444380][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.451670][ T5781] bridge_slave_0: entered allmulticast mode [ 85.459977][ T5781] bridge_slave_0: entered promiscuous mode [ 85.469719][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.490349][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 85.522271][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.529609][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.537195][ T5782] bridge_slave_0: entered allmulticast mode [ 85.544337][ T5782] bridge_slave_0: entered promiscuous mode [ 85.552559][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.562095][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.569436][ T5781] bridge_slave_1: entered allmulticast mode [ 85.576806][ T5781] bridge_slave_1: entered promiscuous mode [ 85.600450][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.607684][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.614860][ T5782] bridge_slave_1: entered allmulticast mode [ 85.622491][ T5782] bridge_slave_1: entered promiscuous mode [ 85.653610][ T5779] team0: Port device team_slave_0 added [ 85.703724][ T5779] team0: Port device team_slave_1 added [ 85.729767][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.744671][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.774736][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.797351][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.819318][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.826604][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.853400][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.892413][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.899530][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.926909][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.963610][ T5782] team0: Port device team_slave_0 added [ 85.972501][ T5782] team0: Port device team_slave_1 added [ 85.982084][ T5781] team0: Port device team_slave_0 added [ 85.993088][ T5781] team0: Port device team_slave_1 added [ 86.017258][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.024457][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.031950][ T5780] bridge_slave_0: entered allmulticast mode [ 86.039657][ T5780] bridge_slave_0: entered promiscuous mode [ 86.092426][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.100298][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.126531][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.138245][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.145619][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.152811][ T5780] bridge_slave_1: entered allmulticast mode [ 86.160951][ T5780] bridge_slave_1: entered promiscuous mode [ 86.168382][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.179396][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.206156][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.228806][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.235841][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.262557][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.282619][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.289721][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.316019][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.357394][ T5779] hsr_slave_0: entered promiscuous mode [ 86.364424][ T5779] hsr_slave_1: entered promiscuous mode [ 86.417887][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.435100][ T5782] hsr_slave_0: entered promiscuous mode [ 86.441555][ T5782] hsr_slave_1: entered promiscuous mode [ 86.448092][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.456302][ T5782] Cannot create hsr debugfs directory [ 86.474890][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.539269][ T5780] team0: Port device team_slave_0 added [ 86.571620][ T5781] hsr_slave_0: entered promiscuous mode [ 86.578527][ T5781] hsr_slave_1: entered promiscuous mode [ 86.584722][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.592665][ T5781] Cannot create hsr debugfs directory [ 86.600308][ T5780] team0: Port device team_slave_1 added [ 86.656472][ T5787] Bluetooth: hci2: command tx timeout [ 86.656732][ T5792] Bluetooth: hci3: command tx timeout [ 86.662202][ T5787] Bluetooth: hci1: command tx timeout [ 86.668516][ T5792] Bluetooth: hci0: command tx timeout [ 86.702335][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.709406][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.736182][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.749216][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.756597][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.782965][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.956163][ T5780] hsr_slave_0: entered promiscuous mode [ 86.962624][ T5780] hsr_slave_1: entered promiscuous mode [ 86.969633][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.977855][ T5780] Cannot create hsr debugfs directory [ 87.289565][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.337440][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.371394][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.400784][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.487649][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.535623][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.561348][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.620878][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.735990][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.755078][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.775015][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.794167][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.881129][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.892196][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.918396][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.929791][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.943877][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.986983][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.013904][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.033853][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.041327][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.080538][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.087812][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.113410][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.156386][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.163615][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.214313][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.221507][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.289757][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.397522][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.420022][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.449604][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.456932][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.491739][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.515205][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.522480][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.582466][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.589716][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.635664][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.642882][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.735777][ T5792] Bluetooth: hci0: command tx timeout [ 88.737164][ T5788] Bluetooth: hci2: command tx timeout [ 88.741242][ T5792] Bluetooth: hci1: command tx timeout [ 88.749259][ T5787] Bluetooth: hci3: command tx timeout [ 88.823397][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.959335][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.997801][ T5779] veth0_vlan: entered promiscuous mode [ 89.012291][ T5779] veth1_vlan: entered promiscuous mode [ 89.162295][ T5782] veth0_vlan: entered promiscuous mode [ 89.171929][ T5779] veth0_macvtap: entered promiscuous mode [ 89.188952][ T5779] veth1_macvtap: entered promiscuous mode [ 89.222142][ T5782] veth1_vlan: entered promiscuous mode [ 89.239864][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.273456][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.316119][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.325074][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.335403][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.344883][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.428406][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.448223][ T5782] veth0_macvtap: entered promiscuous mode [ 89.489097][ T5782] veth1_macvtap: entered promiscuous mode [ 89.543365][ T5781] veth0_vlan: entered promiscuous mode [ 89.574442][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.590260][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.603961][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.632741][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.640909][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.658709][ T5781] veth1_vlan: entered promiscuous mode [ 89.667840][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.677900][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.689630][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.701823][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.748609][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.755887][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.761751][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.775327][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.776773][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.793468][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.876687][ T5781] veth0_macvtap: entered promiscuous mode [ 89.900375][ T5780] veth0_vlan: entered promiscuous mode [ 89.940384][ T5781] veth1_macvtap: entered promiscuous mode [ 90.037883][ T5780] veth1_vlan: entered promiscuous mode [ 90.059600][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.066422][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.089385][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.107539][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.117596][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.128265][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.130104][ T5847] Zero length message leads to an empty skb [ 90.144049][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.219358][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.230901][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.231640][ C1] hrtimer: interrupt took 78739 ns [ 90.244810][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.257239][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.272397][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.310360][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.327570][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.337132][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.344778][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.369961][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.393520][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.464230][ T5780] veth0_macvtap: entered promiscuous mode [ 90.816570][ T5787] Bluetooth: hci3: command tx timeout [ 90.822102][ T5788] Bluetooth: hci2: command tx timeout [ 90.829677][ T5091] Bluetooth: hci0: command tx timeout [ 90.835159][ T5091] Bluetooth: hci1: command tx timeout [ 90.979597][ T5780] veth1_macvtap: entered promiscuous mode [ 91.048839][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.083248][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.110533][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.128547][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.140317][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.155981][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.172283][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.229023][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.253199][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.270073][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.281091][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.304566][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.330294][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.355189][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.370296][ T5851] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.375370][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.400014][ T5851] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 91.412584][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.434747][ T5850] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.456929][ T5851] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 91.498475][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.510541][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.524139][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.540667][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.660627][ T5853] netlink: 'syz.1.5': attribute type 9 has an invalid length. [ 91.676855][ T5853] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5'. [ 91.808728][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.831221][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.079817][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.113439][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.186879][ T27] cfg80211: failed to load regulatory.db [ 92.278830][ T5860] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.301974][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.327909][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.372027][ T5862] netlink: 'syz.0.1': attribute type 9 has an invalid length. [ 92.397631][ T5862] netlink: 'syz.0.1': attribute type 23 has an invalid length. [ 92.418891][ T5862] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.549195][ T5864] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 92.896289][ T5091] Bluetooth: hci1: command tx timeout [ 92.901887][ T5787] Bluetooth: hci3: command tx timeout [ 92.907717][ T5788] Bluetooth: hci2: command tx timeout [ 92.907907][ T5792] Bluetooth: hci0: command tx timeout [ 93.326449][ T5864] team0: Port device geneve1 added [ 93.574094][ T5864] syz.1.7 (5864) used greatest stack depth: 19304 bytes left [ 94.754582][ T5906] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 95.662801][ T5916] netlink: 'syz.1.13': attribute type 9 has an invalid length. [ 95.756926][ T5916] netlink: 'syz.1.13': attribute type 23 has an invalid length. [ 95.764680][ T5916] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.13'. [ 97.231698][ T5949] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 98.038079][ T5949] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.276223][ T5962] netlink: 76 bytes leftover after parsing attributes in process `syz.2.24'. [ 98.299532][ T5962] FAULT_INJECTION: forcing a failure. [ 98.299532][ T5962] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.355927][ T5962] CPU: 1 PID: 5962 Comm: syz.2.24 Not tainted syzkaller #0 [ 98.363302][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.373462][ T5962] Call Trace: [ 98.376798][ T5962] [ 98.379776][ T5962] dump_stack_lvl+0x18c/0x250 [ 98.384535][ T5962] ? show_regs_print_info+0x20/0x20 [ 98.389794][ T5962] ? load_image+0x420/0x420 [ 98.394370][ T5962] ? __might_fault+0xaa/0x120 [ 98.399198][ T5962] ? __lock_acquire+0x7d80/0x7d80 [ 98.404389][ T5962] should_fail_ex+0x394/0x4c0 [ 98.409138][ T5962] _copy_from_user+0x2f/0xe0 [ 98.413786][ T5962] ___sys_sendmsg+0x1c7/0x360 [ 98.418522][ T5962] ? get_pid_task+0x20/0x1e0 [ 98.423201][ T5962] ? __sys_sendmsg+0x2b0/0x2b0 [ 98.428054][ T5962] ? __lock_acquire+0x7d80/0x7d80 [ 98.433305][ T5962] __se_sys_sendmsg+0x1d0/0x2c0 [ 98.438228][ T5962] ? perf_trace_preemptirq_template+0x269/0x330 [ 98.444607][ T5962] ? __x64_sys_sendmsg+0x80/0x80 [ 98.449624][ T5962] ? lockdep_hardirqs_on+0x98/0x150 [ 98.454860][ T5962] do_syscall_64+0x55/0xb0 [ 98.459314][ T5962] ? clear_bhb_loop+0x40/0x90 [ 98.464030][ T5962] ? clear_bhb_loop+0x40/0x90 [ 98.468746][ T5962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.474688][ T5962] RIP: 0033:0x7f4046f9e159 [ 98.479157][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.498902][ T5962] RSP: 002b:00007f4047d95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.507366][ T5962] RAX: ffffffffffffffda RBX: 00007f4047225fa0 RCX: 00007f4046f9e159 [ 98.515415][ T5962] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 98.523439][ T5962] RBP: 00007f4047d95090 R08: 0000000000000000 R09: 0000000000000000 [ 98.531441][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.539440][ T5962] R13: 00007f4047226038 R14: 00007f4047225fa0 R15: 00007ffe51d5bba8 [ 98.547483][ T5962] [ 98.734994][ T5968] netlink: 76 bytes leftover after parsing attributes in process `syz.1.26'. [ 98.911938][ T5974] vcan0: entered allmulticast mode [ 99.106247][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.3.29'. [ 99.132063][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.3.29'. [ 99.176208][ T5977] netlink: 60 bytes leftover after parsing attributes in process `syz.3.29'. [ 99.282018][ T5978] netlink: 60 bytes leftover after parsing attributes in process `syz.3.29'. [ 99.387271][ T5986] netlink: 'syz.1.32': attribute type 9 has an invalid length. [ 99.394975][ T5986] netlink: 'syz.1.32': attribute type 23 has an invalid length. [ 99.403776][ T5986] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.32'. [ 100.124845][ T5996] netlink: 'syz.3.38': attribute type 13 has an invalid length. [ 100.177297][ T5996] netlink: 172 bytes leftover after parsing attributes in process `syz.3.38'. [ 101.415453][ T5996] erspan0: refused to change device tx_queue_len [ 101.534290][ T6011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.41'. [ 101.641301][ T6011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.41'. [ 101.864867][ T6016] netlink: 'syz.2.44': attribute type 9 has an invalid length. [ 101.910553][ T6016] netlink: 'syz.2.44': attribute type 23 has an invalid length. [ 102.121859][ T6022] netlink: 'syz.3.46': attribute type 9 has an invalid length. [ 102.174838][ T6022] netlink: 'syz.3.46': attribute type 23 has an invalid length. [ 103.206067][ T6035] netlink: 'syz.3.50': attribute type 10 has an invalid length. [ 103.338702][ T6035] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.787480][ T6047] __nla_validate_parse: 4 callbacks suppressed [ 103.787500][ T6047] netlink: 60 bytes leftover after parsing attributes in process `syz.1.53'. [ 104.215003][ T6047] netlink: 60 bytes leftover after parsing attributes in process `syz.1.53'. [ 104.282762][ T6045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.53'. [ 104.297760][ T6046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.53'. [ 104.424395][ T6053] netlink: 'syz.0.56': attribute type 9 has an invalid length. [ 104.442595][ T6053] netlink: 'syz.0.56': attribute type 23 has an invalid length. [ 104.494590][ T6053] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.56'. [ 104.911983][ T6063] netlink: 'syz.2.60': attribute type 9 has an invalid length. [ 104.935765][ T6063] netlink: 'syz.2.60': attribute type 23 has an invalid length. [ 104.954343][ T6063] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.60'. [ 105.797064][ T6077] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 105.871583][ T6077] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.216909][ T6084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.67'. [ 106.237938][ T6084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.67'. [ 106.250086][ T6082] netlink: 60 bytes leftover after parsing attributes in process `syz.1.67'. [ 106.571999][ T6092] netlink: 'syz.3.71': attribute type 9 has an invalid length. [ 106.579817][ T6092] netlink: 'syz.3.71': attribute type 23 has an invalid length. [ 106.587595][ T6092] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.71'. [ 107.178506][ T6101] netlink: 'syz.1.84': attribute type 9 has an invalid length. [ 107.192289][ T6101] netlink: 'syz.1.84': attribute type 23 has an invalid length. [ 108.935535][ T6137] netlink: 'syz.3.89': attribute type 9 has an invalid length. [ 108.943441][ T6137] netlink: 'syz.3.89': attribute type 23 has an invalid length. [ 108.964398][ T6137] __nla_validate_parse: 5 callbacks suppressed [ 108.964415][ T6137] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.89'. [ 109.219346][ T6145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 109.242886][ T6145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 109.284497][ T6140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 109.300915][ T6141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 110.683880][ T6166] netlink: 'syz.3.99': attribute type 9 has an invalid length. [ 110.691649][ T6166] netlink: 'syz.3.99': attribute type 23 has an invalid length. [ 110.699894][ T6166] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.99'. [ 110.899389][ T6170] netlink: 'syz.2.101': attribute type 9 has an invalid length. [ 110.915306][ T6170] netlink: 'syz.2.101': attribute type 23 has an invalid length. [ 110.939935][ T6170] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.101'. [ 111.315913][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.3.104'. [ 111.324979][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.3.104'. [ 111.342600][ T6179] netlink: 60 bytes leftover after parsing attributes in process `syz.3.104'. [ 111.503686][ T6191] netlink: 'syz.1.106': attribute type 21 has an invalid length. [ 112.302891][ T6203] netlink: 'syz.0.112': attribute type 9 has an invalid length. [ 112.321306][ T6203] netlink: 'syz.0.112': attribute type 23 has an invalid length. [ 112.703373][ T6206] netlink: 'syz.0.113': attribute type 9 has an invalid length. [ 114.051428][ T6243] validate_nla: 5 callbacks suppressed [ 114.051458][ T6243] netlink: 'syz.2.125': attribute type 21 has an invalid length. [ 114.092884][ T6243] __nla_validate_parse: 14 callbacks suppressed [ 114.092922][ T6243] netlink: 152 bytes leftover after parsing attributes in process `syz.2.125'. [ 114.379970][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.130'. [ 114.442839][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.130'. [ 114.487564][ T6249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.130'. [ 114.530504][ T6251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.130'. [ 115.469548][ T6270] netlink: 'syz.1.137': attribute type 9 has an invalid length. [ 115.518731][ T6270] netlink: 'syz.1.137': attribute type 23 has an invalid length. [ 115.548202][ T6270] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.137'. [ 115.920071][ T6285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.141'. [ 116.134302][ T6285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.141'. [ 116.189410][ T6279] netlink: 60 bytes leftover after parsing attributes in process `syz.1.141'. [ 116.246106][ T6283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.141'. [ 116.350201][ T6287] netlink: 'syz.3.142': attribute type 10 has an invalid length. [ 117.000321][ T6287] team0: Port device geneve1 added [ 118.268980][ T6314] netlink: 'syz.3.149': attribute type 9 has an invalid length. [ 118.290882][ T6314] netlink: 'syz.3.149': attribute type 23 has an invalid length. [ 119.649783][ T6343] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 119.821722][ T6348] netlink: 'syz.0.161': attribute type 9 has an invalid length. [ 119.975935][ T6348] netlink: 'syz.0.161': attribute type 23 has an invalid length. [ 120.029599][ T6348] __nla_validate_parse: 5 callbacks suppressed [ 120.029618][ T6348] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.161'. [ 120.956730][ T6343] team0: Port device geneve1 added [ 121.001394][ T6346] netlink: 'syz.3.160': attribute type 9 has an invalid length. [ 121.012822][ T6346] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.160'. [ 121.348173][ T6364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.163'. [ 121.550329][ T6364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.163'. [ 121.566023][ T6361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.163'. [ 121.662311][ T6362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.163'. [ 122.605090][ T6381] netlink: 830 bytes leftover after parsing attributes in process `syz.1.171'. [ 122.698192][ T6384] netlink: 'syz.2.172': attribute type 9 has an invalid length. [ 122.728862][ T6384] netlink: 'syz.2.172': attribute type 23 has an invalid length. [ 122.760993][ T6384] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.172'. [ 122.811854][ T6381] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.171'. [ 122.846937][ T6381] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 122.855432][ T6381] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 123.077035][ T6391] netlink: 'syz.0.173': attribute type 9 has an invalid length. [ 123.125380][ T6391] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.173'. [ 125.250508][ T6418] netlink: 'syz.0.182': attribute type 10 has an invalid length. [ 125.353364][ T6420] netlink: 'syz.2.183': attribute type 9 has an invalid length. [ 125.597819][ T6420] netlink: 'syz.2.183': attribute type 23 has an invalid length. [ 125.606667][ T6420] __nla_validate_parse: 4 callbacks suppressed [ 125.606682][ T6420] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.183'. [ 126.490010][ T6418] team0: Port device geneve1 added [ 126.656121][ T6418] syz.0.182 (6418) used greatest stack depth: 18664 bytes left [ 127.097153][ T6442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.186'. [ 127.130608][ T6442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.186'. [ 127.172892][ T6438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.186'. [ 127.223324][ T6441] netlink: 60 bytes leftover after parsing attributes in process `syz.0.186'. [ 127.753590][ T6450] netlink: 830 bytes leftover after parsing attributes in process `syz.0.188'. [ 127.922292][ T6450] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.188'. [ 127.974982][ T6450] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 128.036119][ T6450] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 128.213119][ T6461] netlink: 'syz.1.194': attribute type 9 has an invalid length. [ 128.229249][ T6461] netlink: 'syz.1.194': attribute type 23 has an invalid length. [ 128.249919][ T6461] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.194'. [ 129.072180][ T6473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.197'. [ 129.112589][ T6473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.197'. [ 130.379722][ T5792] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 130.556778][ T6496] netlink: 'syz.3.204': attribute type 9 has an invalid length. [ 130.564509][ T6496] netlink: 'syz.3.204': attribute type 23 has an invalid length. [ 130.629850][ T6496] __nla_validate_parse: 2 callbacks suppressed [ 130.629867][ T6496] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.204'. [ 131.540951][ T6510] netlink: 830 bytes leftover after parsing attributes in process `syz.2.210'. [ 131.572810][ T6517] netlink: 60 bytes leftover after parsing attributes in process `syz.3.209'. [ 131.803423][ T6520] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.210'. [ 131.864341][ T6520] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 131.955686][ T6520] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 132.074381][ T6517] netlink: 60 bytes leftover after parsing attributes in process `syz.3.209'. [ 132.084032][ T6511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.209'. [ 132.113935][ T6514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.209'. [ 132.493578][ T6526] netlink: 'syz.3.213': attribute type 17 has an invalid length. [ 132.501797][ T6526] netlink: 148 bytes leftover after parsing attributes in process `syz.3.213'. [ 132.942667][ T6540] netlink: 'syz.3.218': attribute type 9 has an invalid length. [ 132.954214][ T6540] netlink: 'syz.3.218': attribute type 23 has an invalid length. [ 132.963536][ T6540] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.218'. [ 133.143775][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.154107][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.423873][ T6551] netlink: 60 bytes leftover after parsing attributes in process `syz.3.221'. [ 133.934039][ T6568] netlink: 'syz.2.228': attribute type 3 has an invalid length. [ 133.979920][ T6568] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 134.050334][ T6575] netlink: 'syz.1.230': attribute type 9 has an invalid length. [ 134.087910][ T6575] netlink: 'syz.1.230': attribute type 23 has an invalid length. [ 134.837686][ T6599] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 136.063647][ T6630] __nla_validate_parse: 15 callbacks suppressed [ 136.063666][ T6630] netlink: 14 bytes leftover after parsing attributes in process `syz.2.251'. [ 136.634969][ T6650] validate_nla: 2 callbacks suppressed [ 136.634983][ T6650] netlink: 'syz.0.258': attribute type 9 has an invalid length. [ 136.652780][ T6650] netlink: 'syz.0.258': attribute type 23 has an invalid length. [ 136.662838][ T6653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 136.673871][ T6653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 136.683325][ T6650] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.258'. [ 136.693465][ T6647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 136.705218][ T6649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 137.736829][ T6681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.268'. [ 137.752312][ T6681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.268'. [ 137.766602][ T6675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.268'. [ 137.784276][ T6680] netlink: 'syz.1.270': attribute type 9 has an invalid length. [ 137.805692][ T6677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.268'. [ 137.819963][ T6680] netlink: 'syz.1.270': attribute type 23 has an invalid length. [ 139.199764][ T6711] netlink: 'syz.3.283': attribute type 9 has an invalid length. [ 139.218275][ T6711] netlink: 'syz.3.283': attribute type 23 has an invalid length. [ 140.203063][ T6732] netlink: 'syz.3.292': attribute type 10 has an invalid length. [ 140.243893][ T6732] bridge_slave_1: left allmulticast mode [ 140.266178][ T6732] bridge_slave_1: left promiscuous mode [ 140.277448][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.554748][ T6744] netlink: 'syz.3.296': attribute type 9 has an invalid length. [ 140.591959][ T6736] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 140.605855][ T6736] hsr0: entered promiscuous mode [ 140.615841][ T6736] bridge0: port 3(hsr0) entered blocking state [ 140.617992][ T6744] netlink: 'syz.3.296': attribute type 23 has an invalid length. [ 140.624189][ T6736] bridge0: port 3(hsr0) entered disabled state [ 140.655980][ T6736] hsr0: entered allmulticast mode [ 140.675741][ T6736] hsr_slave_0: entered allmulticast mode [ 140.681931][ T6736] hsr_slave_1: entered allmulticast mode [ 140.769867][ T6736] bridge0: port 3(hsr0) entered blocking state [ 140.778501][ T6736] bridge0: port 3(hsr0) entered forwarding state [ 141.706335][ T6773] __nla_validate_parse: 12 callbacks suppressed [ 141.706354][ T6773] netlink: 60 bytes leftover after parsing attributes in process `syz.0.305'. [ 141.828611][ T6773] netlink: 60 bytes leftover after parsing attributes in process `syz.0.305'. [ 141.862042][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.0.305'. [ 141.906011][ T6772] netlink: 60 bytes leftover after parsing attributes in process `syz.0.305'. [ 142.093066][ T6783] validate_nla: 5 callbacks suppressed [ 142.093096][ T6783] netlink: 'syz.0.308': attribute type 9 has an invalid length. [ 142.107638][ T6783] netlink: 'syz.0.308': attribute type 23 has an invalid length. [ 142.115434][ T6783] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.308'. [ 142.308107][ T6793] syzkaller0: entered promiscuous mode [ 142.313963][ T6793] syzkaller0: entered allmulticast mode [ 142.560046][ T6796] warning: `syz.3.313' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.880343][ T6807] netlink: 60 bytes leftover after parsing attributes in process `syz.0.316'. [ 142.911910][ T6807] netlink: 60 bytes leftover after parsing attributes in process `syz.0.316'. [ 142.946168][ T6805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.316'. [ 142.962868][ T6806] netlink: 60 bytes leftover after parsing attributes in process `syz.0.316'. [ 143.423201][ T6818] netlink: 'syz.3.321': attribute type 9 has an invalid length. [ 143.438947][ T6818] netlink: 'syz.3.321': attribute type 23 has an invalid length. [ 143.462390][ T6818] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.321'. [ 144.133730][ T6839] FAULT_INJECTION: forcing a failure. [ 144.133730][ T6839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.170691][ T6839] CPU: 1 PID: 6839 Comm: syz.1.329 Not tainted syzkaller #0 [ 144.178090][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.188221][ T6839] Call Trace: [ 144.191559][ T6839] [ 144.194548][ T6839] dump_stack_lvl+0x18c/0x250 [ 144.199311][ T6839] ? show_regs_print_info+0x20/0x20 [ 144.204608][ T6839] ? load_image+0x420/0x420 [ 144.209274][ T6839] ? __might_fault+0xaa/0x120 [ 144.214031][ T6839] ? __lock_acquire+0x7d80/0x7d80 [ 144.219211][ T6839] ? bpf_percpu_hash_update+0x2b/0x200 [ 144.224738][ T6839] ? __virt_addr_valid+0x10c/0x380 [ 144.229937][ T6839] should_fail_ex+0x394/0x4c0 [ 144.234715][ T6839] _copy_from_user+0x2f/0xe0 [ 144.239380][ T6839] generic_map_update_batch+0x53e/0x800 [ 144.245037][ T6839] ? rcu_read_unlock+0xa0/0xa0 [ 144.249898][ T6839] ? __fdget+0x180/0x210 [ 144.254231][ T6839] ? rcu_read_unlock+0xa0/0xa0 [ 144.259062][ T6839] bpf_map_do_batch+0x3f2/0x600 [ 144.263993][ T6839] ? bpf_lsm_key_free+0x10/0x10 [ 144.269274][ T6839] __sys_bpf+0x381/0x890 [ 144.273687][ T6839] ? bpf_link_show_fdinfo+0x560/0x560 [ 144.279172][ T6839] ? lock_chain_count+0x20/0x20 [ 144.284120][ T6839] __x64_sys_bpf+0x7c/0x90 [ 144.288611][ T6839] do_syscall_64+0x55/0xb0 [ 144.293095][ T6839] ? clear_bhb_loop+0x40/0x90 [ 144.297839][ T6839] ? clear_bhb_loop+0x40/0x90 [ 144.302590][ T6839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.308567][ T6839] RIP: 0033:0x7f09b099e159 [ 144.313048][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.332746][ T6839] RSP: 002b:00007f09b17eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.341238][ T6839] RAX: ffffffffffffffda RBX: 00007f09b0c25fa0 RCX: 00007f09b099e159 [ 144.349272][ T6839] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 144.357388][ T6839] RBP: 00007f09b17eb090 R08: 0000000000000000 R09: 0000000000000000 [ 144.365440][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.373476][ T6839] R13: 00007f09b0c26038 R14: 00007f09b0c25fa0 R15: 00007ffef0d5ecc8 [ 144.381550][ T6839] [ 145.075249][ T6857] netlink: 'syz.1.335': attribute type 9 has an invalid length. [ 145.128205][ T6857] netlink: 'syz.1.335': attribute type 23 has an invalid length. [ 146.271266][ T6872] can: request_module (can-proto-5) failed. [ 147.010342][ T6890] netlink: 'syz.3.345': attribute type 9 has an invalid length. [ 147.030387][ T6890] netlink: 'syz.3.345': attribute type 23 has an invalid length. [ 147.042330][ T6890] __nla_validate_parse: 10 callbacks suppressed [ 147.042347][ T6890] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.345'. [ 147.085614][ T6892] netlink: 'syz.2.346': attribute type 5 has an invalid length. [ 147.345979][ T6904] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'. [ 147.392274][ T6904] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'. [ 147.433632][ T6898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'. [ 147.468859][ T6903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'. [ 148.409888][ T6924] delete_channel: no stack [ 148.472578][ T6932] netlink: 'syz.3.361': attribute type 9 has an invalid length. [ 148.482307][ T6932] netlink: 'syz.3.361': attribute type 23 has an invalid length. [ 148.494895][ T6932] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.361'. [ 148.546128][ T6934] netlink: 60 bytes leftover after parsing attributes in process `syz.1.360'. [ 148.555357][ T6934] netlink: 60 bytes leftover after parsing attributes in process `syz.1.360'. [ 148.633678][ T6929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.360'. [ 148.654626][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.360'. [ 149.848439][ T6968] netlink: 'syz.1.373': attribute type 9 has an invalid length. [ 149.864613][ T6968] netlink: 'syz.1.373': attribute type 23 has an invalid length. [ 150.790350][ T6997] netlink: 'syz.2.384': attribute type 9 has an invalid length. [ 150.815749][ T6997] netlink: 'syz.2.384': attribute type 23 has an invalid length. [ 152.392218][ T7032] __nla_validate_parse: 10 callbacks suppressed [ 152.392238][ T7032] netlink: 60 bytes leftover after parsing attributes in process `syz.2.394'. [ 152.438000][ T7032] netlink: 60 bytes leftover after parsing attributes in process `syz.2.394'. [ 152.457679][ T7026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.394'. [ 152.471371][ T7031] netlink: 60 bytes leftover after parsing attributes in process `syz.2.394'. [ 152.483831][ T7035] netlink: 'syz.3.397': attribute type 6 has an invalid length. [ 152.507392][ T7035] netlink: 'syz.3.397': attribute type 3 has an invalid length. [ 152.536333][ T7035] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.397'. [ 152.638843][ T7039] netlink: 'syz.1.399': attribute type 9 has an invalid length. [ 152.662246][ T7039] netlink: 'syz.1.399': attribute type 23 has an invalid length. [ 152.674922][ T7039] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.399'. [ 152.902028][ T7048] macvlan0: entered promiscuous mode [ 152.949096][ T7048] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 153.059062][ T7055] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 153.066639][ T7055] syzkaller1: linktype set to 773 [ 153.104480][ T7055] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 153.297792][ T7064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.406'. [ 154.035268][ T7064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.406'. [ 154.364549][ T7074] validate_nla: 1 callbacks suppressed [ 154.364566][ T7074] netlink: 'syz.0.410': attribute type 9 has an invalid length. [ 154.413242][ T7074] netlink: 'syz.0.410': attribute type 23 has an invalid length. [ 154.421757][ T7074] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.410'. [ 154.489216][ T7079] netlink: 'syz.2.412': attribute type 21 has an invalid length. [ 154.519445][ T7079] netlink: 'syz.2.412': attribute type 11 has an invalid length. [ 154.981914][ T7096] netlink: 60 bytes leftover after parsing attributes in process `syz.3.416'. [ 158.091346][ T7105] Driver unsupported XDP return value 0 on prog (id 273) dev N/A, expect packet loss! [ 158.322633][ T7115] netlink: 'syz.3.425': attribute type 9 has an invalid length. [ 158.364793][ T7115] netlink: 'syz.3.425': attribute type 23 has an invalid length. [ 158.388948][ T7115] __nla_validate_parse: 3 callbacks suppressed [ 158.388965][ T7115] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.425'. [ 158.514388][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.427'. [ 158.556024][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.427'. [ 158.583967][ T7119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.427'. [ 158.618594][ T7122] netlink: 60 bytes leftover after parsing attributes in process `syz.0.427'. [ 160.189921][ T7152] netlink: 'syz.2.438': attribute type 9 has an invalid length. [ 160.214787][ T7152] netlink: 'syz.2.438': attribute type 23 has an invalid length. [ 160.246888][ T7152] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.438'. [ 160.432825][ T7165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'. [ 160.445665][ T7165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'. [ 160.466165][ T7158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'. [ 160.535760][ T7161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'. [ 160.832741][ T7170] netlink: 'syz.3.446': attribute type 29 has an invalid length. [ 160.904908][ T7170] netlink: 'syz.3.446': attribute type 29 has an invalid length. [ 161.810889][ T7186] netlink: 'syz.0.452': attribute type 9 has an invalid length. [ 161.837896][ T7186] netlink: 'syz.0.452': attribute type 23 has an invalid length. [ 163.425014][ T7216] __nla_validate_parse: 5 callbacks suppressed [ 163.425031][ T7216] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.460'. [ 163.638991][ T7224] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 163.753579][ T7229] netlink: 'syz.2.464': attribute type 9 has an invalid length. [ 163.772055][ T7229] netlink: 'syz.2.464': attribute type 23 has an invalid length. [ 163.788702][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.811950][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.868993][ T7229] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.464'. [ 164.166654][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.184690][ T7224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.206804][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.222408][ T7224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.468206][ T7224] team0: Port device bridge0 added [ 164.782078][ T7242] netlink: 60 bytes leftover after parsing attributes in process `syz.1.467'. [ 164.799208][ T7242] netlink: 60 bytes leftover after parsing attributes in process `syz.1.467'. [ 164.819609][ T7238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.467'. [ 164.839834][ T7239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.467'. [ 166.309490][ T7265] netlink: 'syz.2.478': attribute type 9 has an invalid length. [ 166.699784][ T7265] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.478'. [ 167.906421][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.479'. [ 167.945628][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.479'. [ 167.965914][ T7271] netlink: 60 bytes leftover after parsing attributes in process `syz.0.479'. [ 169.497608][ T7297] FAULT_INJECTION: forcing a failure. [ 169.497608][ T7297] name failslab, interval 1, probability 0, space 0, times 1 [ 169.551937][ T7297] CPU: 1 PID: 7297 Comm: syz.1.489 Not tainted syzkaller #0 [ 169.559363][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.569603][ T7297] Call Trace: [ 169.572933][ T7297] [ 169.575909][ T7297] dump_stack_lvl+0x18c/0x250 [ 169.580649][ T7297] ? show_regs_print_info+0x20/0x20 [ 169.585920][ T7297] ? load_image+0x420/0x420 [ 169.590481][ T7297] ? __might_sleep+0xe0/0xe0 [ 169.595157][ T7297] ? __lock_acquire+0x7d80/0x7d80 [ 169.600239][ T7297] ? trace_contention_end+0x39/0xe0 [ 169.605492][ T7297] should_fail_ex+0x394/0x4c0 [ 169.610239][ T7297] should_failslab+0x9/0x20 [ 169.614805][ T7297] slab_pre_alloc_hook+0x59/0x300 [ 169.619937][ T7297] ? mutex_lock_nested+0x20/0x20 [ 169.624936][ T7297] ? tcx_link_attach+0x165/0x960 [ 169.630020][ T7297] __kmem_cache_alloc_node+0x53/0x250 [ 169.635467][ T7297] ? tcx_link_attach+0x165/0x960 [ 169.640467][ T7297] kmalloc_trace+0x2a/0xe0 [ 169.644958][ T7297] tcx_link_attach+0x165/0x960 [ 169.649808][ T7297] ? __fget_files+0x28/0x460 [ 169.654442][ T7297] ? tcx_prog_query+0x140/0x140 [ 169.659327][ T7297] ? __fget_files+0x3fc/0x460 [ 169.664048][ T7297] ? bpf_prog_attach_check_attach_type+0x188/0x440 [ 169.670596][ T7297] link_create+0x390/0x720 [ 169.675055][ T7297] __sys_bpf+0x4d7/0x890 [ 169.679338][ T7297] ? bpf_link_show_fdinfo+0x560/0x560 [ 169.684758][ T7297] ? lock_chain_count+0x20/0x20 [ 169.689662][ T7297] __x64_sys_bpf+0x7c/0x90 [ 169.694118][ T7297] do_syscall_64+0x55/0xb0 [ 169.698577][ T7297] ? clear_bhb_loop+0x40/0x90 [ 169.703299][ T7297] ? clear_bhb_loop+0x40/0x90 [ 169.708027][ T7297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.714057][ T7297] RIP: 0033:0x7f09b099e159 [ 169.718509][ T7297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.738153][ T7297] RSP: 002b:00007f09b17eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.746599][ T7297] RAX: ffffffffffffffda RBX: 00007f09b0c25fa0 RCX: 00007f09b099e159 [ 169.754600][ T7297] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 000000000000001c [ 169.762617][ T7297] RBP: 00007f09b17eb090 R08: 0000000000000000 R09: 0000000000000000 [ 169.770613][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.778785][ T7297] R13: 00007f09b0c26038 R14: 00007f09b0c25fa0 R15: 00007ffef0d5ecc8 [ 169.786804][ T7297] [ 169.870145][ T7301] netlink: 'syz.2.490': attribute type 9 has an invalid length. [ 169.897024][ T7301] __nla_validate_parse: 1 callbacks suppressed [ 169.897041][ T7301] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.490'. [ 170.267527][ T7314] netlink: 60 bytes leftover after parsing attributes in process `syz.0.493'. [ 170.276973][ T7314] netlink: 60 bytes leftover after parsing attributes in process `syz.0.493'. [ 170.293296][ T7307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.493'. [ 170.310470][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.0.493'. [ 171.957630][ T7338] netlink: 'syz.0.505': attribute type 9 has an invalid length. [ 171.981265][ T7338] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.505'. [ 172.129987][ T7339] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.504'. [ 172.198022][ T7347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.506'. [ 172.207494][ T7347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.506'. [ 172.216938][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.506'. [ 174.487857][ T7381] netlink: 'syz.3.517': attribute type 9 has an invalid length. [ 174.921360][ T7386] __nla_validate_parse: 3 callbacks suppressed [ 174.921382][ T7386] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 174.985989][ T7380] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 175.010670][ T7384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 175.599899][ T7377] FAULT_INJECTION: forcing a failure. [ 175.599899][ T7377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.695401][ T7377] CPU: 0 PID: 7377 Comm: syz.0.516 Not tainted syzkaller #0 [ 175.702866][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 175.713081][ T7377] Call Trace: [ 175.716504][ T7377] [ 175.719576][ T7377] dump_stack_lvl+0x18c/0x250 [ 175.724440][ T7377] ? show_regs_print_info+0x20/0x20 [ 175.729803][ T7377] ? load_image+0x420/0x420 [ 175.734498][ T7377] ? __might_fault+0xaa/0x120 [ 175.739348][ T7377] ? __lock_acquire+0x7d80/0x7d80 [ 175.744570][ T7377] should_fail_ex+0x394/0x4c0 [ 175.749460][ T7377] _copy_from_user+0x2f/0xe0 [ 175.754229][ T7377] __sys_bpf+0x23e/0x890 [ 175.758656][ T7377] ? bpf_link_show_fdinfo+0x560/0x560 [ 175.764329][ T7377] ? lock_chain_count+0x20/0x20 [ 175.769420][ T7377] __x64_sys_bpf+0x7c/0x90 [ 175.774003][ T7377] do_syscall_64+0x55/0xb0 [ 175.778563][ T7377] ? clear_bhb_loop+0x40/0x90 [ 175.783382][ T7377] ? clear_bhb_loop+0x40/0x90 [ 175.788329][ T7377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.794365][ T7377] RIP: 0033:0x7f53b919e159 [ 175.798927][ T7377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.818701][ T7377] RSP: 002b:00007f53b9ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.827292][ T7377] RAX: ffffffffffffffda RBX: 00007f53b9425fa0 RCX: 00007f53b919e159 [ 175.835400][ T7377] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 175.843522][ T7377] RBP: 00007f53b9ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 175.851636][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.859743][ T7377] R13: 00007f53b9426038 R14: 00007f53b9425fa0 R15: 00007ffedb9cac58 [ 175.867986][ T7377] [ 177.581750][ T7425] netlink: 'syz.0.531': attribute type 9 has an invalid length. [ 177.593017][ T7425] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.531'. [ 177.638544][ T7428] netlink: 60 bytes leftover after parsing attributes in process `syz.2.530'. [ 177.670278][ T7428] netlink: 60 bytes leftover after parsing attributes in process `syz.2.530'. [ 177.687034][ T7422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.530'. [ 177.706702][ T7426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.530'. [ 178.139579][ T7441] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.533'. [ 179.104223][ T7459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.543'. [ 179.347676][ T7464] netlink: 'syz.3.545': attribute type 9 has an invalid length. [ 180.745744][ T7488] __nla_validate_parse: 4 callbacks suppressed [ 180.745763][ T7488] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 180.908874][ T7488] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 181.072214][ T7484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 181.143990][ T7485] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 181.877451][ T7493] syzkaller0: entered promiscuous mode [ 181.906051][ T7493] syzkaller0: entered allmulticast mode [ 181.966726][ T3008] syzkaller0: tun_net_xmit 48 [ 182.217091][ T7495] syzkaller0: create flow: hash 1266903662 index 1 [ 182.803119][ T7492] syzkaller0: delete flow: hash 1266903662 index 1 [ 183.177319][ T7508] netlink: 'syz.1.560': attribute type 9 has an invalid length. [ 183.185072][ T7508] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.560'. [ 184.197146][ T7518] FAULT_INJECTION: forcing a failure. [ 184.197146][ T7518] name failslab, interval 1, probability 0, space 0, times 0 [ 184.252756][ T7518] CPU: 0 PID: 7518 Comm: syz.3.563 Not tainted syzkaller #0 [ 184.260201][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.270356][ T7518] Call Trace: [ 184.273729][ T7518] [ 184.276751][ T7518] dump_stack_lvl+0x18c/0x250 [ 184.281557][ T7518] ? show_regs_print_info+0x20/0x20 [ 184.286977][ T7518] ? load_image+0x420/0x420 [ 184.291620][ T7518] ? __might_sleep+0xe0/0xe0 [ 184.296324][ T7518] ? __lock_acquire+0x7d80/0x7d80 [ 184.301498][ T7518] should_fail_ex+0x394/0x4c0 [ 184.306340][ T7518] should_failslab+0x9/0x20 [ 184.310953][ T7518] slab_pre_alloc_hook+0x59/0x300 [ 184.316093][ T7518] ? vfs_write+0x5de/0x9a0 [ 184.320634][ T7518] kmem_cache_alloc+0x5a/0x2c0 [ 184.325493][ T7518] ? getname_flags+0xbb/0x500 [ 184.330340][ T7518] getname_flags+0xbb/0x500 [ 184.334967][ T7518] do_sys_openat2+0xda/0x1d0 [ 184.339683][ T7518] ? do_sys_open+0xe0/0xe0 [ 184.344243][ T7518] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 184.350346][ T7518] ? lock_chain_count+0x20/0x20 [ 184.355335][ T7518] __x64_sys_openat+0x139/0x160 [ 184.360302][ T7518] do_syscall_64+0x55/0xb0 [ 184.364787][ T7518] ? clear_bhb_loop+0x40/0x90 [ 184.369550][ T7518] ? clear_bhb_loop+0x40/0x90 [ 184.374405][ T7518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.380369][ T7518] RIP: 0033:0x7f0af1f9e159 [ 184.384851][ T7518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.404530][ T7518] RSP: 002b:00007f0af2e7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.413028][ T7518] RAX: ffffffffffffffda RBX: 00007f0af2226270 RCX: 00007f0af1f9e159 [ 184.421061][ T7518] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 184.429093][ T7518] RBP: 00007f0af2e7a090 R08: 0000000000000000 R09: 0000000000000000 [ 184.437125][ T7518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.445157][ T7518] R13: 00007f0af2226308 R14: 00007f0af2226270 R15: 00007ffdd8a6c408 [ 184.453263][ T7518] [ 186.408576][ T7532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 186.494550][ T7532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 186.539374][ T7534] FAULT_INJECTION: forcing a failure. [ 186.539374][ T7534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.561377][ T7534] CPU: 0 PID: 7534 Comm: syz.2.568 Not tainted syzkaller #0 [ 186.568759][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.578871][ T7534] Call Trace: [ 186.582203][ T7534] [ 186.583033][ T7526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 186.585208][ T7534] dump_stack_lvl+0x18c/0x250 [ 186.585250][ T7534] ? show_regs_print_info+0x20/0x20 [ 186.604089][ T7534] ? load_image+0x420/0x420 [ 186.608663][ T7534] ? __might_fault+0xaa/0x120 [ 186.613400][ T7534] should_fail_ex+0x394/0x4c0 [ 186.618146][ T7534] copyin+0x1a/0x90 [ 186.622050][ T7534] _copy_from_iter+0x3ec/0x1290 [ 186.626971][ T7534] ? copyout_mc+0x70/0x70 [ 186.631387][ T7534] ? copyout_mc+0x70/0x70 [ 186.635774][ T7534] ? __virt_addr_valid+0x10c/0x380 [ 186.640957][ T7534] ? __virt_addr_valid+0x10c/0x380 [ 186.646125][ T7534] ? __virt_addr_valid+0x10c/0x380 [ 186.649464][ T7531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 186.651277][ T7534] ? page_copy_sane+0x4e/0x270 [ 186.651317][ T7534] copy_page_from_iter+0x7b/0x100 [ 186.670037][ T7534] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 186.675916][ T7534] packet_sendmsg+0x3323/0x4a30 [ 186.680908][ T7534] ? aa_sk_perm+0x970/0x970 [ 186.685472][ T7534] ? __might_sleep+0xe0/0xe0 [ 186.690140][ T7534] ? verify_lock_unused+0x140/0x140 [ 186.695382][ T7534] ? aa_sk_perm+0x83c/0x970 [ 186.699957][ T7534] ? packet_getsockopt+0xad0/0xad0 [ 186.705131][ T7534] ? tomoyo_check_mkdev_acl+0x60/0x490 [ 186.710653][ T7534] ? aa_sock_msg_perm+0x94/0x150 [ 186.715624][ T7534] ? apparmor_socket_sendmsg+0x8e/0x330 [ 186.721210][ T7534] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 186.726540][ T7534] ? security_socket_sendmsg+0x80/0xa0 [ 186.732031][ T7534] ? packet_getsockopt+0xad0/0xad0 [ 186.737354][ T7534] ____sys_sendmsg+0x61b/0x980 [ 186.742163][ T7534] ? __asan_memset+0x22/0x40 [ 186.746907][ T7534] ? __sys_sendmsg_sock+0x30/0x30 [ 186.751961][ T7534] ? __import_iovec+0x3fa/0x850 [ 186.756854][ T7534] ? import_iovec+0x73/0xa0 [ 186.761408][ T7534] ___sys_sendmsg+0x2a6/0x360 [ 186.766125][ T7534] ? get_pid_task+0x20/0x1e0 [ 186.770758][ T7534] ? __sys_sendmsg+0x2b0/0x2b0 [ 186.775571][ T7534] ? __lock_acquire+0x7d80/0x7d80 [ 186.780649][ T7534] __se_sys_sendmsg+0x1d0/0x2c0 [ 186.785534][ T7534] ? __x64_sys_sendmsg+0x80/0x80 [ 186.790545][ T7534] ? lockdep_hardirqs_on+0x98/0x150 [ 186.795776][ T7534] do_syscall_64+0x55/0xb0 [ 186.800226][ T7534] ? clear_bhb_loop+0x40/0x90 [ 186.804938][ T7534] ? clear_bhb_loop+0x40/0x90 [ 186.809654][ T7534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.815585][ T7534] RIP: 0033:0x7f4046f9e159 [ 186.820047][ T7534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.839692][ T7534] RSP: 002b:00007f4047d95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.848136][ T7534] RAX: ffffffffffffffda RBX: 00007f4047225fa0 RCX: 00007f4046f9e159 [ 186.856137][ T7534] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000003 [ 186.864141][ T7534] RBP: 00007f4047d95090 R08: 0000000000000000 R09: 0000000000000000 [ 186.872138][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.880131][ T7534] R13: 00007f4047226038 R14: 00007f4047225fa0 R15: 00007ffe51d5bba8 [ 186.888143][ T7534] [ 187.069151][ T7528] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 187.123249][ T7528] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.567'. [ 187.149629][ T7539] ¥: port 1(team0) entered blocking state [ 187.164579][ T7539] ¥: port 1(team0) entered disabled state [ 187.179300][ T7539] team0: entered allmulticast mode [ 187.211662][ T7539] team_slave_0: entered allmulticast mode [ 187.282072][ T7539] team_slave_1: entered allmulticast mode [ 187.292166][ T7539] geneve1: entered allmulticast mode [ 187.302382][ T7539] bridge0: entered allmulticast mode [ 187.318593][ T7539] team0: entered promiscuous mode [ 187.323854][ T7539] team_slave_0: entered promiscuous mode [ 187.335604][ T7539] team_slave_1: entered promiscuous mode [ 187.342037][ T7539] geneve1: entered promiscuous mode [ 187.357236][ T7539] bridge0: entered promiscuous mode [ 187.519575][ T7547] netlink: 'syz.2.573': attribute type 9 has an invalid length. [ 187.595961][ T7547] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.573'. [ 188.740420][ T7570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.577'. [ 188.814229][ T7570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.577'. [ 188.826599][ T7563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.577'. [ 188.884552][ T7566] netlink: 60 bytes leftover after parsing attributes in process `syz.3.577'. [ 189.979115][ T7589] netlink: 'syz.2.587': attribute type 9 has an invalid length. [ 190.506609][ T7601] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 190.531563][ T7601] bridge0: port 3(hsr0) entered disabled state [ 190.539492][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.550825][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.713432][ T7601] bridge0: port 3(hsr0) entered blocking state [ 190.722174][ T7601] bridge0: port 3(hsr0) entered forwarding state [ 190.733308][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.742448][ T7601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.753709][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.762892][ T7601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.782657][ T7607] netlink: 'syz.1.595': attribute type 9 has an invalid length. [ 190.792182][ T7607] netlink: 'syz.1.595': attribute type 23 has an invalid length. [ 190.878265][ T7601] team0: Port device bridge0 added [ 191.200533][ T7622] netlink: 'syz.3.599': attribute type 9 has an invalid length. [ 191.655864][ T7631] netlink: 'syz.0.609': attribute type 9 has an invalid length. [ 191.663643][ T7631] __nla_validate_parse: 7 callbacks suppressed [ 191.663660][ T7631] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.609'. [ 191.866357][ T7638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.601'. [ 191.928502][ T7638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.601'. [ 191.946065][ T7633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.601'. [ 191.962387][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.601'. [ 194.580780][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.587433][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.665131][ T7673] netlink: 'syz.0.616': attribute type 9 has an invalid length. [ 194.699872][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.615'. [ 194.735646][ T7673] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.616'. [ 195.316112][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.615'. [ 195.357020][ T7672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.615'. [ 195.393089][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.615'. [ 195.671578][ T7685] netlink: 'syz.1.621': attribute type 13 has an invalid length. [ 195.752704][ T7685] erspan0: refused to change device tx_queue_len [ 195.881238][ T7691] netlink: 'syz.0.631': attribute type 9 has an invalid length. [ 196.475927][ T7695] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 196.491760][ T7695] hsr0: entered promiscuous mode [ 196.516609][ T7695] bridge0: port 3(hsr0) entered blocking state [ 196.527163][ T7695] bridge0: port 3(hsr0) entered disabled state [ 196.559815][ T7695] hsr0: entered allmulticast mode [ 196.576886][ T7695] hsr_slave_0: entered allmulticast mode [ 196.600725][ T7695] hsr_slave_1: entered allmulticast mode [ 196.663270][ T7695] bridge0: port 3(hsr0) entered blocking state [ 196.670281][ T7695] bridge0: port 3(hsr0) entered forwarding state [ 197.050721][ T7714] __nla_validate_parse: 3 callbacks suppressed [ 197.050737][ T7714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.629'. [ 197.069345][ T7714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.629'. [ 197.111550][ T7708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.629'. [ 197.121238][ T7713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.629'. [ 197.291903][ T7718] netlink: 'syz.1.634': attribute type 9 has an invalid length. [ 197.321241][ T7718] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.634'. [ 197.331478][ T7720] netlink: 'syz.2.635': attribute type 13 has an invalid length. [ 197.342373][ T7720] netlink: 172 bytes leftover after parsing attributes in process `syz.2.635'. [ 197.366034][ T7720] erspan0: refused to change device tx_queue_len [ 197.758107][ T7729] netlink: 60 bytes leftover after parsing attributes in process `syz.0.644'. [ 197.788651][ T7729] netlink: 60 bytes leftover after parsing attributes in process `syz.0.644'. [ 197.827644][ T7724] netlink: 60 bytes leftover after parsing attributes in process `syz.0.644'. [ 197.852433][ T7727] netlink: 60 bytes leftover after parsing attributes in process `syz.0.644'. [ 197.867177][ T7734] netlink: 'syz.2.647': attribute type 10 has an invalid length. [ 197.919871][ T7733] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 197.956681][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.068027][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.076353][ T7733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.170609][ T7733] team0: Port device bridge0 added [ 198.286947][ T7733] syz.3.637 (7733) used greatest stack depth: 18344 bytes left [ 198.593469][ T7747] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 198.606925][ T7747] hsr0: entered promiscuous mode [ 198.612830][ T7752] netlink: 'syz.2.653': attribute type 3 has an invalid length. [ 198.620871][ T7747] bridge0: port 3(hsr0) entered blocking state [ 198.637500][ T7747] bridge0: port 3(hsr0) entered disabled state [ 198.671553][ T7747] hsr0: entered allmulticast mode [ 198.685829][ T7747] hsr_slave_0: entered allmulticast mode [ 198.696810][ T7747] hsr_slave_1: entered allmulticast mode [ 198.798340][ T7747] bridge0: port 3(hsr0) entered blocking state [ 198.809484][ T7747] bridge0: port 3(hsr0) entered forwarding state [ 199.214995][ T7763] netlink: 'syz.0.645': attribute type 13 has an invalid length. [ 199.244243][ T7763] erspan0: refused to change device tx_queue_len [ 199.700543][ T7782] FAULT_INJECTION: forcing a failure. [ 199.700543][ T7782] name failslab, interval 1, probability 0, space 0, times 0 [ 199.745562][ T7782] CPU: 1 PID: 7782 Comm: syz.0.656 Not tainted syzkaller #0 [ 199.752954][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 199.763103][ T7782] Call Trace: [ 199.766431][ T7782] [ 199.769479][ T7782] dump_stack_lvl+0x18c/0x250 [ 199.774205][ T7782] ? show_regs_print_info+0x20/0x20 [ 199.779446][ T7782] ? load_image+0x420/0x420 [ 199.783992][ T7782] ? __lock_acquire+0x7d80/0x7d80 [ 199.789058][ T7782] ? verify_lock_unused+0x140/0x140 [ 199.794295][ T7782] should_fail_ex+0x394/0x4c0 [ 199.799025][ T7782] should_failslab+0x9/0x20 [ 199.803567][ T7782] slab_pre_alloc_hook+0x59/0x300 [ 199.808628][ T7782] ? verify_lock_unused+0x140/0x140 [ 199.813888][ T7782] kmem_cache_alloc_lru+0x4d/0x2b0 [ 199.819055][ T7782] ? __d_alloc+0x31/0x710 [ 199.823428][ T7782] __d_alloc+0x31/0x710 [ 199.827627][ T7782] d_alloc_parallel+0xe0/0x1590 [ 199.832521][ T7782] ? __d_lookup+0x8f/0x7c0 [ 199.836984][ T7782] ? __lock_acquire+0x7d80/0x7d80 [ 199.842055][ T7782] ? __d_lookup+0x8f/0x7c0 [ 199.846499][ T7782] ? d_hash_and_lookup+0x1b0/0x1b0 [ 199.851659][ T7782] path_openat+0x955/0x3270 [ 199.856226][ T7782] ? do_sys_openat2+0xda/0x1d0 [ 199.861183][ T7782] ? do_filp_open+0x430/0x430 [ 199.865912][ T7782] do_filp_open+0x1f2/0x430 [ 199.870543][ T7782] ? vfs_tmpfile+0x620/0x620 [ 199.875175][ T7782] ? noop_direct_IO+0x20/0x20 [ 199.879909][ T7782] ? _raw_spin_unlock+0x28/0x40 [ 199.884793][ T7782] ? alloc_fd+0x590/0x640 [ 199.889171][ T7782] do_sys_openat2+0x134/0x1d0 [ 199.893883][ T7782] ? do_sys_open+0xe0/0xe0 [ 199.898342][ T7782] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 199.904381][ T7782] ? lock_chain_count+0x20/0x20 [ 199.909270][ T7782] __x64_sys_openat+0x139/0x160 [ 199.914170][ T7782] do_syscall_64+0x55/0xb0 [ 199.918626][ T7782] ? clear_bhb_loop+0x40/0x90 [ 199.923426][ T7782] ? clear_bhb_loop+0x40/0x90 [ 199.928144][ T7782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.934071][ T7782] RIP: 0033:0x7f53b915e98e [ 199.938526][ T7782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 199.958165][ T7782] RSP: 002b:00007f53b9ff7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.966641][ T7782] RAX: ffffffffffffffda RBX: 00007f53b9ff86c0 RCX: 00007f53b915e98e [ 199.974648][ T7782] RDX: 0000000000000002 RSI: 00007f53b9ff7f90 RDI: ffffffffffffff9c [ 199.982740][ T7782] RBP: 00007f53b9ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 199.990743][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.998742][ T7782] R13: 00007f53b9426038 R14: 00007f53b9425fa0 R15: 00007ffedb9cac58 [ 200.006789][ T7782] [ 200.371468][ T7790] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.417865][ T7794] openvswitch: netlink: Message has 1 unknown bytes. [ 200.759724][ T7802] FAULT_INJECTION: forcing a failure. [ 200.759724][ T7802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.821149][ T7802] CPU: 0 PID: 7802 Comm: syz.2.663 Not tainted syzkaller #0 [ 200.828531][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 200.838639][ T7802] Call Trace: [ 200.841958][ T7802] [ 200.844906][ T7802] dump_stack_lvl+0x18c/0x250 [ 200.849629][ T7802] ? show_regs_print_info+0x20/0x20 [ 200.854895][ T7802] ? load_image+0x420/0x420 [ 200.859464][ T7802] ? __lock_acquire+0x7d80/0x7d80 [ 200.864535][ T7802] ? snprintf+0xe9/0x140 [ 200.868863][ T7802] should_fail_ex+0x394/0x4c0 [ 200.873605][ T7802] _copy_to_user+0x2f/0xa0 [ 200.878126][ T7802] simple_read_from_buffer+0xe7/0x150 [ 200.883560][ T7802] proc_fail_nth_read+0x1e8/0x260 [ 200.888647][ T7802] ? proc_fault_inject_write+0x360/0x360 [ 200.894354][ T7802] ? fsnotify_perm+0x271/0x5e0 [ 200.899192][ T7802] ? proc_fault_inject_write+0x360/0x360 [ 200.904892][ T7802] vfs_read+0x298/0x990 [ 200.909200][ T7802] ? kernel_read+0x1e0/0x1e0 [ 200.913841][ T7802] ? __fget_files+0x28/0x460 [ 200.918495][ T7802] ? __fget_files+0x3fc/0x460 [ 200.923240][ T7802] ? __fdget_pos+0x2a3/0x330 [ 200.927891][ T7802] ? ksys_read+0x74/0x260 [ 200.932286][ T7802] ksys_read+0x151/0x260 [ 200.936599][ T7802] ? vfs_write+0x9a0/0x9a0 [ 200.941080][ T7802] ? lockdep_hardirqs_on+0x98/0x150 [ 200.946344][ T7802] do_syscall_64+0x55/0xb0 [ 200.950824][ T7802] ? clear_bhb_loop+0x40/0x90 [ 200.955571][ T7802] ? clear_bhb_loop+0x40/0x90 [ 200.960319][ T7802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.966269][ T7802] RIP: 0033:0x7f4046f5e98e [ 200.970716][ T7802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.990441][ T7802] RSP: 002b:00007f4047d94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.998890][ T7802] RAX: ffffffffffffffda RBX: 00007f4047d956c0 RCX: 00007f4046f5e98e [ 201.006888][ T7802] RDX: 000000000000000f RSI: 00007f4047d950a0 RDI: 0000000000000007 [ 201.014884][ T7802] RBP: 00007f4047d95090 R08: 0000000000000000 R09: 0000000000000000 [ 201.022893][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.030887][ T7802] R13: 00007f4047226038 R14: 00007f4047225fa0 R15: 00007ffe51d5bba8 [ 201.038900][ T7802] [ 201.219587][ T7818] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 201.390100][ T7818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.441223][ T7818] team0: Port device bond0 added [ 201.642662][ T7818] syz.0.667 (7818) used greatest stack depth: 17576 bytes left [ 201.981334][ T7839] netlink: zone id is out of range [ 201.996524][ T7839] netlink: zone id is out of range [ 202.024882][ T7839] netlink: zone id is out of range [ 202.043594][ T7839] netlink: zone id is out of range [ 202.088010][ T7839] netlink: zone id is out of range [ 202.116063][ T7839] netlink: zone id is out of range [ 202.126584][ T7839] netlink: zone id is out of range [ 202.154478][ T7845] __nla_validate_parse: 15 callbacks suppressed [ 202.154496][ T7845] netlink: 60 bytes leftover after parsing attributes in process `syz.0.675'. [ 202.182393][ T7839] netlink: zone id is out of range [ 202.205813][ T7839] netlink: zone id is out of range [ 202.213384][ T7845] netlink: 60 bytes leftover after parsing attributes in process `syz.0.675'. [ 202.261773][ T7844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.675'. [ 202.324506][ T7848] netlink: 'syz.2.676': attribute type 9 has an invalid length. [ 202.344475][ T7848] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.676'. [ 203.137316][ T2978] wlan1: Trigger new scan to find an IBSS to join [ 205.232359][ T7862] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.681'. [ 205.446797][ T7872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 205.481612][ T7872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 205.526855][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 205.833351][ T7883] netlink: 'syz.2.691': attribute type 9 has an invalid length. [ 205.871005][ T7883] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.691'. [ 206.140183][ T7892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.694'. [ 206.899330][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 206.905943][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 206.912119][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.918287][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 207.040418][ T7918] netlink: 'syz.3.705': attribute type 9 has an invalid length. [ 207.322455][ T12] wlan1: Trigger new scan to find an IBSS to join [ 207.651370][ T7919] netlink: 'syz.1.706': attribute type 10 has an invalid length. [ 207.670557][ T7919] hsr0: left allmulticast mode [ 207.680917][ T7919] hsr_slave_0: left allmulticast mode [ 207.686597][ T7919] hsr_slave_1: left allmulticast mode [ 207.693764][ T7919] bridge0: port 3(hsr0) entered disabled state [ 207.720898][ T7919] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.055972][ T7925] netlink: 'syz.0.708': attribute type 3 has an invalid length. [ 208.259708][ T3008] wlan1: Creating new IBSS network, BSSID 7e:55:8e:c8:ed:f6 [ 208.331869][ T7936] netlink: 'syz.0.712': attribute type 10 has an invalid length. [ 208.344477][ T7936] __nla_validate_parse: 4 callbacks suppressed [ 208.344513][ T7936] netlink: 168 bytes leftover after parsing attributes in process `syz.0.712'. [ 208.528094][ T7941] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 208.656682][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.681923][ T7941] team0: Port device bond0 added [ 208.974001][ T7954] netlink: 'syz.0.718': attribute type 9 has an invalid length. [ 209.048403][ T7954] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.718'. [ 209.653759][ T7971] FAULT_INJECTION: forcing a failure. [ 209.653759][ T7971] name failslab, interval 1, probability 0, space 0, times 0 [ 209.667437][ T7971] CPU: 1 PID: 7971 Comm: syz.1.726 Not tainted syzkaller #0 [ 209.674792][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 209.685014][ T7971] Call Trace: [ 209.688336][ T7971] [ 209.691314][ T7971] dump_stack_lvl+0x18c/0x250 [ 209.696067][ T7971] ? show_regs_print_info+0x20/0x20 [ 209.701323][ T7971] ? load_image+0x420/0x420 [ 209.705882][ T7971] ? __might_sleep+0xe0/0xe0 [ 209.710529][ T7971] ? __lock_acquire+0x7d80/0x7d80 [ 209.715615][ T7971] should_fail_ex+0x394/0x4c0 [ 209.720371][ T7971] should_failslab+0x9/0x20 [ 209.724939][ T7971] slab_pre_alloc_hook+0x59/0x300 [ 209.730027][ T7971] ? tomoyo_encode+0x2ad/0x570 [ 209.734865][ T7971] ? tomoyo_encode+0x2ad/0x570 [ 209.739677][ T7971] __kmem_cache_alloc_node+0x53/0x250 [ 209.745120][ T7971] ? tomoyo_encode+0x2ad/0x570 [ 209.749946][ T7971] __kmalloc+0xa7/0x240 [ 209.754168][ T7971] tomoyo_encode+0x2ad/0x570 [ 209.758814][ T7971] tomoyo_realpath_from_path+0x57c/0x5c0 [ 209.764518][ T7971] ? tomoyo_domain+0xd6/0x120 [ 209.769254][ T7971] tomoyo_path_number_perm+0x248/0x5e0 [ 209.774777][ T7971] ? tomoyo_path_number_perm+0x217/0x5e0 [ 209.780477][ T7971] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 209.786005][ T7971] ? ksys_write+0x1d2/0x260 [ 209.790615][ T7971] ? __fget_files+0x28/0x460 [ 209.795279][ T7971] security_file_ioctl+0x70/0xa0 [ 209.800279][ T7971] __se_sys_ioctl+0x48/0x170 [ 209.804930][ T7971] do_syscall_64+0x55/0xb0 [ 209.809406][ T7971] ? clear_bhb_loop+0x40/0x90 [ 209.814131][ T7971] ? clear_bhb_loop+0x40/0x90 [ 209.818875][ T7971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.824829][ T7971] RIP: 0033:0x7f09b099e159 [ 209.829294][ T7971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.849039][ T7971] RSP: 002b:00007f09b17eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.857516][ T7971] RAX: ffffffffffffffda RBX: 00007f09b0c25fa0 RCX: 00007f09b099e159 [ 209.865557][ T7971] RDX: 0000200000000040 RSI: 00000000000089a2 RDI: 0000000000000005 [ 209.873762][ T7971] RBP: 00007f09b17eb090 R08: 0000000000000000 R09: 0000000000000000 [ 209.881788][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.889810][ T7971] R13: 00007f09b0c26038 R14: 00007f09b0c25fa0 R15: 00007ffef0d5ecc8 [ 209.897939][ T7971] [ 209.958559][ T7967] delete_channel: no stack [ 209.963381][ T7967] delete_channel: no stack [ 209.979673][ T7971] ERROR: Out of memory at tomoyo_realpath_from_path. [ 210.010638][ T7971] bridge0: port 3(veth0_to_bridge) entered blocking state [ 210.057218][ T7971] bridge0: port 3(veth0_to_bridge) entered disabled state [ 210.085745][ T7971] veth0_to_bridge: entered allmulticast mode [ 210.113917][ T7971] veth0_to_bridge: entered promiscuous mode [ 210.131559][ T7971] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.171862][ T7971] bridge0: port 3(veth0_to_bridge) entered blocking state [ 210.179897][ T7971] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 210.740513][ T7991] netlink: 'syz.1.732': attribute type 9 has an invalid length. [ 210.761028][ T7991] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.732'. [ 210.768287][ T7989] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.731'. [ 210.788274][ T7989] net_ratelimit: 18 callbacks suppressed [ 210.823424][ T7989] netlink: zone id is out of range [ 210.841497][ T7989] netlink: zone id is out of range [ 210.865205][ T7989] netlink: zone id is out of range [ 210.881903][ T7989] netlink: zone id is out of range [ 210.900300][ T7989] netlink: zone id is out of range [ 210.934359][ T7989] netlink: zone id is out of range [ 210.962271][ T7989] netlink: zone id is out of range [ 211.000233][ T7989] netlink: zone id is out of range [ 211.016003][ T7989] netlink: zone id is out of range [ 211.034649][ T7989] netlink: zone id is out of range [ 211.708761][ T8007] bridge0: port 4(veth0_to_bridge) entered blocking state [ 211.741268][ T8007] bridge0: port 4(veth0_to_bridge) entered disabled state [ 211.775904][ T8007] veth0_to_bridge: entered allmulticast mode [ 211.800000][ T8007] veth0_to_bridge: entered promiscuous mode [ 211.829991][ T8007] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.876850][ T8007] bridge0: port 4(veth0_to_bridge) entered blocking state [ 211.884224][ T8007] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 212.450721][ T8018] netlink: 'syz.3.744': attribute type 9 has an invalid length. [ 212.469455][ T8015] netlink: 'syz.0.743': attribute type 10 has an invalid length. [ 212.479063][ T8018] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.744'. [ 212.492873][ T8015] netlink: 55 bytes leftover after parsing attributes in process `syz.0.743'. [ 213.530691][ T8026] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.746'. [ 213.894500][ T8042] netlink: 'syz.0.750': attribute type 9 has an invalid length. [ 213.925584][ T8042] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.750'. [ 214.247012][ T8046] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.384977][ T8046] netlink: 1 bytes leftover after parsing attributes in process `syz.2.751'. [ 215.198914][ T8056] netlink: 'syz.3.757': attribute type 9 has an invalid length. [ 215.227581][ T8056] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.757'. [ 216.493357][ T8078] FAULT_INJECTION: forcing a failure. [ 216.493357][ T8078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.506781][ T8078] CPU: 1 PID: 8078 Comm: syz.1.766 Not tainted syzkaller #0 [ 216.514127][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 216.524435][ T8078] Call Trace: [ 216.527787][ T8078] [ 216.530775][ T8078] dump_stack_lvl+0x18c/0x250 [ 216.535560][ T8078] ? show_regs_print_info+0x20/0x20 [ 216.540813][ T8078] ? load_image+0x420/0x420 [ 216.545376][ T8078] ? __lock_acquire+0x7d80/0x7d80 [ 216.550483][ T8078] ? snprintf+0xe9/0x140 [ 216.554788][ T8078] should_fail_ex+0x394/0x4c0 [ 216.559534][ T8078] _copy_to_user+0x2f/0xa0 [ 216.564003][ T8078] simple_read_from_buffer+0xe7/0x150 [ 216.569516][ T8078] proc_fail_nth_read+0x1e8/0x260 [ 216.574612][ T8078] ? proc_fault_inject_write+0x360/0x360 [ 216.580315][ T8078] ? fsnotify_perm+0x271/0x5e0 [ 216.585154][ T8078] ? proc_fault_inject_write+0x360/0x360 [ 216.590848][ T8078] vfs_read+0x298/0x990 [ 216.595071][ T8078] ? kernel_read+0x1e0/0x1e0 [ 216.599737][ T8078] ? __fget_files+0x28/0x460 [ 216.604387][ T8078] ? __fget_files+0x3fc/0x460 [ 216.609140][ T8078] ? __fdget_pos+0x2a3/0x330 [ 216.613784][ T8078] ? ksys_read+0x74/0x260 [ 216.618179][ T8078] ksys_read+0x151/0x260 [ 216.622486][ T8078] ? vfs_write+0x9a0/0x9a0 [ 216.626966][ T8078] ? lockdep_hardirqs_on+0x98/0x150 [ 216.632223][ T8078] do_syscall_64+0x55/0xb0 [ 216.636795][ T8078] ? clear_bhb_loop+0x40/0x90 [ 216.641528][ T8078] ? clear_bhb_loop+0x40/0x90 [ 216.646266][ T8078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.652218][ T8078] RIP: 0033:0x7f09b095e98e [ 216.656685][ T8078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.676373][ T8078] RSP: 002b:00007f09b17eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.684838][ T8078] RAX: ffffffffffffffda RBX: 00007f09b17eb6c0 RCX: 00007f09b095e98e [ 216.692841][ T8078] RDX: 000000000000000f RSI: 00007f09b17eb0a0 RDI: 0000000000000004 [ 216.700856][ T8078] RBP: 00007f09b17eb090 R08: 0000000000000000 R09: 0000000000000000 [ 216.708870][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.716872][ T8078] R13: 00007f09b0c26038 R14: 00007f09b0c25fa0 R15: 00007ffef0d5ecc8 [ 216.724982][ T8078] [ 217.018748][ T8089] netlink: 'syz.1.770': attribute type 9 has an invalid length. [ 217.036378][ T8089] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.770'. [ 217.560695][ T8102] netlink: 'syz.0.775': attribute type 3 has an invalid length. [ 217.616158][ T8102] netlink: 'syz.0.775': attribute type 6 has an invalid length. [ 217.637587][ T8102] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.775'. [ 217.843008][ T8108] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.777'. [ 218.104481][ T8112] FAULT_INJECTION: forcing a failure. [ 218.104481][ T8112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.140778][ T8112] CPU: 0 PID: 8112 Comm: syz.0.779 Not tainted syzkaller #0 [ 218.148192][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 218.158418][ T8112] Call Trace: [ 218.161766][ T8112] [ 218.164779][ T8112] dump_stack_lvl+0x18c/0x250 [ 218.169568][ T8112] ? show_regs_print_info+0x20/0x20 [ 218.174871][ T8112] ? load_image+0x420/0x420 [ 218.179474][ T8112] ? __might_fault+0xaa/0x120 [ 218.184247][ T8112] ? __lock_acquire+0x7d80/0x7d80 [ 218.189361][ T8112] should_fail_ex+0x394/0x4c0 [ 218.194133][ T8112] _copy_to_user+0x2f/0xa0 [ 218.198700][ T8112] bpf_test_finish+0x4e7/0x650 [ 218.203552][ T8112] ? convert_skb_to___skb+0x420/0x420 [ 218.208989][ T8112] ? _copy_from_user+0xa5/0xe0 [ 218.213813][ T8112] ? bpf_test_init+0x119/0x140 [ 218.218643][ T8112] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 218.224093][ T8112] ? __lock_acquire+0x7d80/0x7d80 [ 218.229207][ T8112] ? dev_put+0x80/0x80 [ 218.233370][ T8112] ? dev_put+0x80/0x80 [ 218.237503][ T8112] bpf_prog_test_run+0x31f/0x390 [ 218.242600][ T8112] __sys_bpf+0x49d/0x890 [ 218.246908][ T8112] ? bpf_link_show_fdinfo+0x560/0x560 [ 218.252369][ T8112] ? lock_chain_count+0x20/0x20 [ 218.257299][ T8112] __x64_sys_bpf+0x7c/0x90 [ 218.261774][ T8112] do_syscall_64+0x55/0xb0 [ 218.266281][ T8112] ? clear_bhb_loop+0x40/0x90 [ 218.271025][ T8112] ? clear_bhb_loop+0x40/0x90 [ 218.275780][ T8112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.281728][ T8112] RIP: 0033:0x7f53b919e159 [ 218.286207][ T8112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.305880][ T8112] RSP: 002b:00007f53b9ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.314350][ T8112] RAX: ffffffffffffffda RBX: 00007f53b9425fa0 RCX: 00007f53b919e159 [ 218.322374][ T8112] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 218.330415][ T8112] RBP: 00007f53b9ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 218.338441][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.346470][ T8112] R13: 00007f53b9426038 R14: 00007f53b9425fa0 R15: 00007ffedb9cac58 [ 218.354541][ T8112] [ 219.012463][ T8126] netlink: 'syz.2.785': attribute type 9 has an invalid length. [ 219.038689][ T8126] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.785'. [ 219.444160][ T8133] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.788'. [ 220.195090][ T8151] tap0: tun_chr_ioctl cmd 1074820166 [ 220.222736][ T8151] netlink: 'syz.1.795': attribute type 63 has an invalid length. [ 220.243244][ T8151] netlink: 44 bytes leftover after parsing attributes in process `syz.1.795'. [ 221.841416][ T8158] netlink: 'syz.3.798': attribute type 9 has an invalid length. [ 221.855289][ T8158] netlink: 209768 bytes leftover after parsing attributes in process `syz.3.798'. [ 223.283264][ T8168] netlink: 60 bytes leftover after parsing attributes in process `syz.1.801'. [ 224.795199][ T8193] netlink: 'syz.2.811': attribute type 9 has an invalid length. [ 224.835726][ T8193] netlink: 209768 bytes leftover after parsing attributes in process `syz.2.811'. [ 227.258195][ T8225] netlink: 'syz.1.819': attribute type 2 has an invalid length. [ 227.304937][ T8225] netlink: 'syz.1.819': attribute type 3 has an invalid length. [ 227.335211][ T8225] netlink: 132 bytes leftover after parsing attributes in process `syz.1.819'. [ 228.069800][ T8230] syzkaller0: entered allmulticast mode [ 228.128089][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 228.637755][ T8237] netlink: 'syz.1.823': attribute type 9 has an invalid length. [ 228.724616][ T8237] netlink: 209768 bytes leftover after parsing attributes in process `syz.1.823'. [ 230.041467][ T8245] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.824'. [ 230.085748][ T8245] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.824'. [ 230.182520][ T8239] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.824'. [ 270.104346][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.124392][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.552629][ C1] net_ratelimit: 40 callbacks suppressed [ 317.552668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 317.592993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 317.626410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 317.660313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 317.694287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 317.733005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 317.767646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 317.802667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 317.836568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 317.870946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 322.563336][ C1] net_ratelimit: 214 callbacks suppressed [ 322.563403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 322.603434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 322.638218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 322.671785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 322.715870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 322.752252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 322.786770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 322.820339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 322.854218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 322.892606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 327.573686][ C1] net_ratelimit: 222 callbacks suppressed [ 327.573727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 327.612282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 327.644319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 327.676074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 327.708137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 327.761100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 327.791781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.810913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.829402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.848534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.578261][ C1] net_ratelimit: 526 callbacks suppressed [ 332.578301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.603805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.621394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.639812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.655423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 332.686639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.706631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.724047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.742798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.763098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 337.045395][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 337.052430][ C0] rcu: (detected by 0, t=10502 jiffies, g=23697, q=258 ncpus=2) [ 337.060189][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 6667 (4294970791-4294964124), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 337.073524][ C0] rcu: rcu_preempt kthread starved for 6667 jiffies! g23697 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 337.084673][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 337.094684][ C0] rcu: RCU grace-period kthread stack dump: [ 337.100626][ C0] task:rcu_preempt state:R running task stack:27816 pid:17 ppid:2 flags:0x00004000 [ 337.111474][ C0] Call Trace: [ 337.114802][ C0] [ 337.117792][ C0] __schedule+0x15ae/0x4660 [ 337.122368][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 337.127443][ C0] ? lock_chain_count+0x20/0x20 [ 337.132350][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 337.137594][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 337.143537][ C0] ? asan.module_dtor+0x20/0x20 [ 337.148444][ C0] ? rcu_is_watching+0x15/0xb0 [ 337.153282][ C0] schedule+0xbd/0x170 [ 337.157525][ C0] schedule_timeout+0x188/0x2d0 [ 337.162435][ C0] ? console_conditional_schedule+0x40/0x40 [ 337.168383][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 337.174328][ C0] ? update_process_times+0x1b0/0x1b0 [ 337.179762][ C0] ? prepare_to_swait_event+0x344/0x360 [ 337.185367][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 337.190303][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 337.196503][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 337.201579][ C0] ? rcu_gp_init+0x1530/0x1530 [ 337.206391][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 337.211335][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.216582][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 337.221915][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 337.226564][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 337.231721][ C0] ? __kthread_parkme+0x71/0x1c0 [ 337.236802][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 337.241878][ C0] kthread+0x2fa/0x390 [ 337.245997][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 337.251156][ C0] ? kthread_blkcg+0xd0/0xd0 [ 337.255793][ C0] ret_from_fork+0x48/0x80 [ 337.260257][ C0] ? kthread_blkcg+0xd0/0xd0 [ 337.264888][ C0] ret_from_fork_asm+0x11/0x20 [ 337.269726][ C0] [ 337.272802][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 337.279180][ C0] CPU: 0 PID: 8238 Comm: syz.2.824 Not tainted syzkaller #0 [ 337.286503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.296598][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x10/0x90 [ 337.303523][ C0] Code: 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 f0 28 7c 7e <65> 8b 0d f1 28 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 337.323198][ C0] RSP: 0018:ffffc90000006b78 EFLAGS: 00000246 [ 337.329320][ C0] RAX: ffffffff813bb298 RBX: ffffc90000006bf0 RCX: 0000000000000100 [ 337.337427][ C0] RDX: ffff888027100000 RSI: 0000000000000001 RDI: 0000000000000000 [ 337.345444][ C0] RBP: 0000000000000001 R08: ffff888027100000 R09: 0000000000000003 [ 337.353479][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff88809763 [ 337.361494][ C0] R13: 00000000000000b8 R14: dffffc0000000000 R15: 1ffff92000000d7e [ 337.369505][ C0] FS: 00007f4047d956c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 337.378476][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.385100][ C0] CR2: 0000000100000002 CR3: 0000000075105000 CR4: 00000000003506f0 [ 337.393116][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 337.401125][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 337.409152][ C0] Call Trace: [ 337.412489][ C0] [ 337.415369][ C0] unwind_get_return_address+0x68/0xc0 [ 337.420881][ C0] ? stack_trace_save+0x100/0x100 [ 337.425956][ C0] arch_stack_walk+0x11d/0x190 [ 337.430787][ C0] ? br_nf_forward_ip+0xc6/0x10d0 [ 337.435872][ C0] stack_trace_save+0xaa/0x100 [ 337.440779][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 337.445948][ C0] ? verify_lock_unused+0x140/0x140 [ 337.451203][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 337.456280][ C0] kasan_set_track+0x4e/0x70 [ 337.460922][ C0] ? kasan_set_track+0x4e/0x70 [ 337.465736][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 337.470816][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 337.476153][ C0] ? kmem_cache_alloc+0x17e/0x2c0 [ 337.481256][ C0] ? skb_ext_add+0x1b3/0x8e0 [ 337.485948][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 337.491024][ C0] __kasan_slab_alloc+0x6c/0x80 [ 337.495927][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 337.501100][ C0] ? kmem_cache_alloc+0x17e/0x2c0 [ 337.506224][ C0] kmem_cache_alloc+0x17e/0x2c0 [ 337.511142][ C0] ? skb_ext_add+0x1b3/0x8e0 [ 337.515819][ C0] skb_ext_add+0x1b3/0x8e0 [ 337.520292][ C0] br_nf_forward_ip+0xc6/0x10d0 [ 337.525208][ C0] ? read_lock_is_recursive+0x20/0x20 [ 337.530627][ C0] ? __x64_sys_openat+0x139/0x160 [ 337.535702][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.541826][ C0] ? br_nf_local_in+0x460/0x460 [ 337.546725][ C0] nf_hook_slow+0xbd/0x200 [ 337.551185][ C0] ? br_dev_queue_push_xmit+0x880/0x880 [ 337.556779][ C0] ? br_dev_queue_push_xmit+0x880/0x880 [ 337.562464][ C0] NF_HOOK+0x23e/0x3e0 [ 337.566595][ C0] ? NF_HOOK+0xa3/0x3e0 [ 337.570896][ C0] ? br_forward_finish+0x130/0x130 [ 337.576074][ C0] ? br_dev_queue_push_xmit+0x880/0x880 [ 337.581679][ C0] ? br_handle_vlan+0x5e/0x530 [ 337.586512][ C0] __br_forward+0x433/0x610 [ 337.591062][ C0] ? br_dev_queue_push_xmit+0x880/0x880 [ 337.596653][ C0] ? skb_clone+0x21f/0x370 [ 337.601152][ C0] ? should_deliver+0x390/0x390 [ 337.606063][ C0] br_handle_frame_finish+0xf2d/0x15c0 [ 337.611587][ C0] ? brport_get_ownership+0x80/0x80 [ 337.614141][ C1] net_ratelimit: 570 callbacks suppressed [ 337.614177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.616826][ C0] ? ip6t_do_table+0x1cb/0x1570 [ 337.616864][ C0] ? ip6t_alloc_initial_table+0x640/0x640 [ 337.616901][ C0] ? nf_hook_slow+0x16e/0x200 [ 337.616925][ C0] ? brport_get_ownership+0x80/0x80 [ 337.616950][ C0] br_nf_hook_thresh+0x3cd/0x4a0 [ 337.616981][ C0] ? nf_nat_ipv6_local_fn+0x3b0/0x3b0 [ 337.646524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.649907][ C0] ? brnf_get_logical_dev+0x270/0x270 [ 337.649947][ C0] ? brport_get_ownership+0x80/0x80 [ 337.649984][ C0] br_nf_pre_routing_finish_ipv6+0x9e5/0xd20 [ 337.650015][ C0] ? brport_get_ownership+0x80/0x80 [ 337.650047][ C0] br_nf_pre_routing_ipv6+0x34d/0x6a0 [ 337.650079][ C0] ? br_nf_pre_routing_ipv6+0x3ea/0x6a0 [ 337.676085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 337.677562][ C0] ? br_validate_ipv6+0x6f0/0x6f0 [ 337.677603][ C0] ? br_nf_pre_routing_ipv6+0x6a0/0x6a0 [ 337.733159][ C0] ? br_nf_pre_routing+0x6d5/0x1420 [ 337.738429][ C0] ? br_nf_hook_thresh+0x4a0/0x4a0 [ 337.743594][ C0] br_handle_frame+0x1240/0x14d0 [ 337.748589][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 337.753924][ C0] ? brport_get_ownership+0x80/0x80 [ 337.759182][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 337.759212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.764516][ C0] __netif_receive_skb_core+0xf94/0x3ac0 [ 337.764554][ C0] ? ip6_input_finish+0x2c0/0x2c0 [ 337.787153][ C0] ? ip6_rcv_finish+0x19a/0x230 [ 337.792061][ C0] ? qdisc_run+0x230/0x230 [ 337.796539][ C0] ? process_backlog+0x2cf/0x710 [ 337.800938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:2e:07:c3:4a:8e, vlan:0) [ 337.801504][ C0] ? read_lock_is_recursive+0x20/0x20 [ 337.801537][ C0] ? process_backlog+0x2cf/0x710 [ 337.801567][ C0] __netif_receive_skb+0x74/0x290 [ 337.801602][ C0] ? process_backlog+0x2cf/0x710 [ 337.833590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.833998][ C0] process_backlog+0x380/0x710 [ 337.834052][ C0] ? trigger_rx_softirq+0x60/0x60 [ 337.834081][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 337.861936][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 337.867565][ C0] ? lock_chain_count+0x20/0x20 [ 337.869495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.872602][ C0] __napi_poll+0xbb/0x460 [ 337.872640][ C0] net_rx_action+0x65f/0xcc0 [ 337.872684][ C0] ? net_tx_action+0x950/0x950 [ 337.898845][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 337.901657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.904068][ C0] ? detach_timer+0x2b0/0x2b0 [ 337.904111][ C0] handle_softirqs+0x27d/0x820 [ 337.904134][ C0] ? read_tsc+0x9/0x20 [ 337.904157][ C0] ? ktime_get+0x24b/0x280 [ 337.904185][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 337.904212][ C0] ? do_softirq+0x1a0/0x1a0 [ 337.904245][ C0] __irq_exit_rcu+0xd3/0x190 [ 337.904268][ C0] ? irq_exit_rcu+0x20/0x20 [ 337.934785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 337.939258][ C0] irq_exit_rcu+0x9/0x20 [ 337.939283][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 337.939307][ C0] [ 337.939314][ C0] [ 337.939323][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.986909][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 337.992251][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 338.012006][ C0] RSP: 0018:ffffc9001913f0c0 EFLAGS: 00000206 [ 338.015507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.018108][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 504f42f388a94500 [ 338.018126][ C0] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 338.018141][ C0] RBP: ffffc9001913f1d8 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 338.018157][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff92003227e24 [ 338.018173][ C0] R13: ffffffff8d1320e0 R14: 0000000000000246 R15: dffffc0000000000 [ 338.018230][ C0] ? lock_chain_count+0x20/0x20 [ 338.074968][ C0] ? read_lock_is_recursive+0x20/0x20 [ 338.080406][ C0] ? mark_lock+0x94/0x320 [ 338.084783][ C0] ? page_ext_get+0x22/0x2b0 [ 338.089425][ C0] page_ext_get+0x3e/0x2b0 [ 338.093899][ C0] ? page_ext_get+0x22/0x2b0 [ 338.098541][ C0] __reset_page_owner+0x2e/0x190 [ 338.103544][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 338.109056][ C0] free_unref_page+0x32/0x2e0 [ 338.113805][ C0] __slab_free+0x35a/0x400 [ 338.118281][ C0] qlist_free_all+0x75/0xd0 [ 338.122845][ C0] kasan_quarantine_reduce+0x143/0x160 [ 338.128369][ C0] __kasan_slab_alloc+0x22/0x80 [ 338.133276][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 338.138453][ C0] __kmem_cache_alloc_node+0x194/0x250 [ 338.143974][ C0] ? tomoyo_encode+0x2ad/0x570 [ 338.148786][ C0] ? tomoyo_encode+0x2ad/0x570 [ 338.153595][ C0] __kmalloc+0xa7/0x240 [ 338.157835][ C0] tomoyo_encode+0x2ad/0x570 [ 338.162489][ C0] tomoyo_realpath_from_path+0x57c/0x5c0 [ 338.168186][ C0] ? tomoyo_domain+0xd6/0x120 [ 338.172919][ C0] tomoyo_path_number_perm+0x248/0x5e0 [ 338.178432][ C0] ? tomoyo_path_number_perm+0x217/0x5e0 [ 338.184120][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 338.189636][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 338.195702][ C0] ? d_alloc_parallel+0x356/0x1590 [ 338.200855][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 338.205930][ C0] ? hook_path_mknod+0x157/0x540 [ 338.210922][ C0] tomoyo_path_mknod+0x14b/0x1a0 [ 338.215914][ C0] ? hook_path_mkdir+0x20/0x20 [ 338.220722][ C0] ? tomoyo_path_symlink+0xf0/0xf0 [ 338.225894][ C0] security_path_mknod+0xf0/0x150 [ 338.230974][ C0] path_openat+0xb72/0x3270 [ 338.235547][ C0] ? do_sys_openat2+0xda/0x1d0 [ 338.240372][ C0] ? do_filp_open+0x430/0x430 [ 338.245113][ C0] do_filp_open+0x1f2/0x430 [ 338.249667][ C0] ? vfs_tmpfile+0x620/0x620 [ 338.254333][ C0] ? _raw_spin_unlock+0x28/0x40 [ 338.259230][ C0] ? alloc_fd+0x590/0x640 [ 338.263641][ C0] do_sys_openat2+0x134/0x1d0 [ 338.268383][ C0] ? do_sys_open+0xe0/0xe0 [ 338.272849][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 338.279008][ C0] ? lock_chain_count+0x20/0x20 [ 338.283934][ C0] __x64_sys_openat+0x139/0x160 [ 338.288841][ C0] do_syscall_64+0x55/0xb0 [ 338.293321][ C0] ? clear_bhb_loop+0x40/0x90 [ 338.298050][ C0] ? clear_bhb_loop+0x40/0x90 [ 338.302780][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.308722][ C0] RIP: 0033:0x7f4046f9e159 [ 338.313190][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.332844][ C0] RSP: 002b:00007f4047d95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.341320][ C0] RAX: ffffffffffffffda RBX: 00007f4047225fa0 RCX: 00007f4046f9e159 [ 338.349338][ C0] RDX: 000000000000275a RSI: 00002000000000c0 RDI: 000000000000000c [ 338.357357][ C0] RBP: 00007f404703506b R08: 0000000000000000 R09: 0000000000000000 [ 338.365371][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.373393][ C0] R13: 00007f4047226038 R14: 00007f4047225fa0 R15: 00007ffe51d5bba8 [ 338.381431][ C0] [ 342.632831][ C1] net_ratelimit: 551 callbacks suppressed [ 342.632870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.658162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:2e:07:c3:4a:8e, vlan:0) [ 342.674219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.691801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.710382][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.727275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:0d:17:6e:23:36, vlan:0) [ 342.758502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.777731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:2e:07:c3:4a:8e, vlan:0) [ 342.793646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.811155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)