last executing test programs: 2m49.998306834s ago: executing program 1 (id=2143): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x49, 0x6, 0x0, 0x6, 0x0, 0x40000000000, 0x34010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x1a2d, 0xfffffffffffffffd, 0x800001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 2m49.756042899s ago: executing program 1 (id=2145): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r3, &(0x7f0000002ec0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x101, 0x4000}, 0x80, 0x0}, 0x20000804) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x43, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001300)=r7, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x8, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) recvmsg(r5, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x42) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0x22, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 2m48.36666129s ago: executing program 1 (id=2148): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r0, r3}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x79, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 2m48.306972691s ago: executing program 1 (id=2149): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xf) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x68) 2m48.012257677s ago: executing program 1 (id=2150): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xf, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="2b637075202d696f202b7069647320851f060757bff9345bb7634f3888598bab33d6082e6e8fd95b017ee249dc7d1fd6eb772f7c774f7445375717024658c1cc823ce346ed0a9336a8aa9da687b88affbc08eed1dc43b30b2642581868c53413da678ab0370a078f9a2ee892de4c17158555d88bf6a2327d1a75c67aeee04eb46aeb6b8a4f1c3e786dc025"], 0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x68) 2m46.201991706s ago: executing program 1 (id=2164): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7fff, 0x1}, 0x20, 0x10000, 0x8, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x10102, 0x35, 0x43a1bd76, 0x1, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xe000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010, r1}, 0x18) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0xf9b1f16659364762, 0x0, 0x2, 0xc, 0x1, 0x2, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x6f, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000300), &(0x7f00000003c0)=r4}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000300), 0x12) 2m30.868954501s ago: executing program 32 (id=2164): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7fff, 0x1}, 0x20, 0x10000, 0x8, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x10102, 0x35, 0x43a1bd76, 0x1, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xe000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010, r1}, 0x18) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0xf9b1f16659364762, 0x0, 0x2, 0xc, 0x1, 0x2, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x6f, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000300), &(0x7f00000003c0)=r4}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000300), 0x12) 9.020115993s ago: executing program 2 (id=2862): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac"], 0xfdef) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x40) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.442249478s ago: executing program 2 (id=2869): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="140800000000009465f381ab504f", 0x0, 0xffffff00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0x327, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0), 0x1, 0xfffffffd}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) socket$kcm(0x29, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0xe, &(0x7f00000002c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0x3, 0x2, 0xfffffffffffffff8, 0x8}, @generic={0x53, 0x0, 0xf, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xba2, 0x0, 0x0, 0x0, 0xfffffffb}], &(0x7f0000000340)='GPL\x00', 0x45, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0xf, 0x100, 0x2}, 0x10, 0x895b, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=[0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x4, 0xc}], 0x10, 0x3}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000240)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) sendmsg$kcm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x39c}, 0x40000) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 7.382302289s ago: executing program 4 (id=2870): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0x1, 0x58, &(0x7f0000000900)}, 0x10) sendmsg$inet(r2, &(0x7f0000000b00)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000180)="a198ca37f149c37a599095", 0xb}, {&(0x7f0000000200)="e6cfdad870f15bdb910fac1750edc3952f5528f1c0bcd51f311d44849fe92ce669a7975c3fb2fb66204f724bd00b4cab8e46c88f46add589f1174916aeee150069f934a19a3275f1c32de445bb5c3ff0f5c5cea89e14045e1c79926b6c2b3b66220e378b15e0fbbe7be165a0d62816eae6b4ff5a029b7f545766e9b44d6e9fbad983", 0x82}, {&(0x7f00000002c0)="63e2de6ed7c2258e8b547118199bd40a1fbc892fe680cd12e0ddc80d1d909adf2a4d246bc8f187f3302647015a431e8875cb08d96cd34ffb58029a1209c3e063af7964f6c29bbd89c6387599e0a30cc84ede8dffcd165ad1f89d965eb44b6758c49dc6fdcf40870eb04b2339b61158921f37bbbaa22cc4ab91812a70b08ac5ba0f29bd5f2392b4b36c0e0ae2df83a4f0f4b625ec6cc07a1d158d83b67f", 0x9d}, {&(0x7f00000009c0)="7d0f93b5c966d1064c1e57df7fb1d60f6d97dc1dc8c68b290c77d6f1d317252c3727f065849e387a59d2e8d709c460d03ee9585435bab387aebf7294b37aff391985ab26f10700000000000000aa8bccc91bcce46d77fea3d32b9f2d00"/108, 0x6c}, {&(0x7f0000000580)="a1690ce9fa3feed6c117d1d52f348cb59892d1d0caf7b8955558cffbab3291de64199a8bc5851e7bab70c21647565ae2a90648cf0408000000a0fb14717131a9db948caf92d50d6fc74d5295611cb66bf817b608", 0x54}, {&(0x7f00000006c0)="5c92381ec9036eab82e89e4678882e9652b36b5e5b1c6c8e99a165b19881d068f347e9aefe5ec8b3854792e4af49526acc2eb09901109d53fd27802f238999b29e71dde3ea45449c83f009df5485958f", 0x50}, {&(0x7f0000000740)="a4111a1ef02529aa2ec11787e11a09e38e4de1926ce25d1d80ea6bbf15a491af705741e70630ce58007043fb04ee253eee013e00e0841ca65d1b7598b980a6fa983c6e485da32b04825ff139a2530de42d8426ecb9d49498619d1886165bd017df84aa320008c69afddc2bca9df1ed495d6225c091bff209e2bda6be60d7166c2b26f5a3c15aa8cb47b15d7e295a9f35edc3e2f84c1be26aaefcf7c18bb5a0e6eed779623d6f002be793088aad35c2b24179b58a83d9335fb6608b160e6d6e8b04541f634b4984c10821a81735c1f6db72e510f492672633e2b4aa", 0xdb}, {&(0x7f0000000840)="0d2ff1a0f4", 0x5}], 0x8, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000007000000940823c51d9d05c21400000000000000000000000200000007000000000000001400000000000000000000000100000008000000000000001c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac1414bbac1414aa00000000140000003bffd934884c5bcd0200000004000000000000006ec17646be9824c1f70b231d765589c06b4ba4286800f74e8f5a2fb179e79a92a1de19748444e3b101216509f42aa694701d96eaa7eb976dc6db3e3244061a91a64fc04c4e95dc22bed87a06d510b86591aa2a22842b2aa260c1a70b7c73b2dffd"], 0x80}, 0x2) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000f00)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a00b8001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba170ee3b24277c652274c2777211a0d4cf32f5f2652ce56085bbc54d2a19296a91cf2655d68e06aa034335bbd3bfe01ff515ab1cb9bb35e9c3f45019247d953f9613517944", 0xa0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000040) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/228, 0xe4}, {0x0}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f0000002100)=""/4077, 0xfed}, {0x0}, {&(0x7f0000000c00)=""/235, 0xeb}], 0x7}, 0x40012100) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x4, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000300000000000000004000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd8a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x80) 6.662020055s ago: executing program 4 (id=2873): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$sock(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd410, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x7, 0xd521}, 0x200800, 0xff, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x3, r1, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}}}, 0x10, 0x0}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 5.910884651s ago: executing program 2 (id=2878): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2, r4}) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x29, &(0x7f0000001640)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000340)="5779c8887e", 0x5}], 0x2}, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r0, 0x40049409, 0x3) r7 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r7, 0x0, 0xfdef) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="19000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r9, 0x0, 0xca, 0x1a, &(0x7f0000000400)="94e3a9a35c53d9f8864154729361cc0f54a9f77ec3c40a6e80d58c655e3f81cb1200567b5ff33562c3775c478ae559be035437a31e6ce6490e7462f1343552d4022f99df4d3527f24e33f36b8629a2ceebc4c614e2cd7305f72d64458251ba8c0155ca8b2a9807d417f517bbba0cd84b3788c3d0a9a9ef0b95e924dde62a467868a39f6427d9f2ac31f2119eb2cc0f0f2d2ae7741d3516492e6b187e0c7124a9a4ae095d23e1f73e22a11a45281ffb4dad2fb894411613899a897dfeed851d57ca54af75c088367f24eb", &(0x7f00000005c0)=""/26, 0xfffffff7, 0x0, 0xf6, 0x0, &(0x7f0000000600)="7c73724c0f609a79d015f1b9b3a867bfd69f1c371cb1d704f7c0a487bc1d39ed39a92376a2f1f38e654e6260be243586cde4df4376fc6db21a7577dedd79488e5abe3d1beb903f703a442301a21a4c69867a3d7de6be2dd285392685cf2c76d817dc0cd850594f7fa03bd12837463a908cc2204fe3492f9eb43a126432eefef0faad24096715bb8971e2bb2b3ecbc7661e6586f644a09fe07df1fcbd869691f9c8437bdfaf4195f1df66f1b81f3b78fbe41f0b63e812d77e157e81bd60fadcf9eb3f51a4c02ea8431b054e83a0ec982d24545965e951e7ade8eb9e32636e7559bb2ccf4a7d99bbcde8c968cb88000c89d1cdc7c79776", &(0x7f0000000700), 0x5, 0x0, 0x4}, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0xf00}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r11, 0x0, 0x0}, 0x10) 5.910201191s ago: executing program 0 (id=2879): r0 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) 4.581788021s ago: executing program 0 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.477476043s ago: executing program 4 (id=2881): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x3}, {0x5}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x61, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000003680)=""/4096, 0x3d, 0x1000, 0x1}, 0x28) (fail_nth: 29) 4.283681697s ago: executing program 0 (id=2883): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x20, 0x1, 0x7, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex=r1, 0xffffffffffffffff, 0x1e, 0x2000, 0x0, @value=r5, @void, @void, @void, r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x82}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 4.282392627s ago: executing program 2 (id=2884): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0xb}, 0x4195, 0x20033, 0xfffffbff, 0x5, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xb, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000540), 0x1}, 0x8804) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 3.866184046s ago: executing program 3 (id=2885): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xf) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c00000007"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.761181678s ago: executing program 0 (id=2886): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x100905, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x7f, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x29, 0x6, 0x2, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240), 0x4) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0xfffda}, 0x2f) close(r2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8101000000000000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x6, 0x8, 0x5}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001340), 0x888102, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047438, 0x42579dda60683578) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015", 0x1f}], 0x1}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb014018000000000000000c000000a424a1610c"], 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000002400819a", 0x8}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90724fc600d0003af0a740100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000083ed2f25974ab7e600"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r7, &(0x7f0000000400), 0x0}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4018, r5}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000200000000000000000000007ecabf4d2c4bf93f5d577f0df5e4783ec12ec3825116a2eb36b20517e0ecc25408823ec9f5438b3a5421013488e583a4c32d280e4fa4b6cb82b7abc023f5efa63649cd65c9d4771e5d9d169bf1a276586032c1befb07b671a8a767128f829a1f300c652c67caf4482ec120f10d7823ae06e1987b27bed3164395d3f085"], &(0x7f00000007c0)=""/190, 0x28, 0xbe, 0x0, 0x5, 0x10000, @value=r3}, 0x28) 3.572153362s ago: executing program 4 (id=2887): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xa, 0xb, 0xaa, 0x31, 0x0, 0x9bc8, 0x4, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x4}, 0x14, 0x2, 0x1, 0x8, 0x4, 0x6, 0x3, 0x0, 0xed875e7, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xda73) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) r3 = socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140), 0x4) r4 = gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xd6, 0x6, 0x4, 0x4, 0x0, 0xff, 0x4800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000180), 0x6}, 0x100000, 0x4, 0x7, 0x5, 0x5, 0xff, 0x9, 0x0, 0x800, 0x0, 0x60b}, r4, 0x10, r0, 0x8) socketpair(0x28, 0x800, 0xf7, &(0x7f0000000240)={0xffffffffffffffff}) r6 = openat$cgroup_subtree(r2, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)={[{0x2b, 'blkio'}, {0x2b, 'pids'}, {0x2b, 'freezer'}, {0x2b, 'rlimit'}, {0x2b, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'cpu'}, {0x2d, 'rlimit'}]}, 0x3f) openat$cgroup_int(r2, &(0x7f0000000300)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x2a, 0x81, 0x8, 0x0, 0xd0, 0x10, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x1300, 0x7, 0xee, 0x7, 0x40, 0x0, 0x1, 0x0, 0x3ff, 0x0, 0x3}, r4, 0x9, r0, 0x8) r7 = syz_clone(0x40000, &(0x7f0000000400)="4a9783875deeda2a72217446fa8083a70bf9b9b5aae41290404259e7919b62a5ba77531272f7a6d6cf98471f91d22aaa5e123ebc7a6a86cdec5f0d4e258be9a7a8cbe83e3049cf4190134e39f3388e62e9796a4d8e4cb8566b5f721878a2cd5f3be3dcab581e8694acc187866279534fcc04e45e1ff97b3c6120a4e8356041744fdeaedf05d50bdb5a1d8ffc6eef1c6fa4e872cb18cdb0ff7562c2a00d09446ae673a9066735d690339c33a4a72bd1f7aefe796657fe03d341cf18c281b833ae1dd6ac3f9264c213437c3f0745bc55603420", 0xd2, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="30177e70ceacde6515cc069245b296ff674889cb5f5a7049e2c437ad73e82b508f50a7e82c73c0dd8fc4da1703f98097e613e5c84192a636f37adc47211496fd91c881ca2e1a3b4654fdf6b4d09529b9be6d492432099297d44da7477c4aeef496b181fa7689935f55d216225c786b741219a4db3655ba21572d6500fbadb990fd113bcd1457eb652b3e50018b20d17d5afe3c") r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg(r5, &(0x7f0000000880)={&(0x7f0000000680)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x66c1, 0x2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000700)="d3780700eedd86ab13adcd19483e97bf588b6b71155f4a4250f3af0a1fbaea287ad82d1e2dd30d1a46e298cd627b419a12d439d3965502c2801226aabf40841a410f34cfb8ce", 0x46}, {&(0x7f0000000780)="b855a79b1e00d69699b863ae9238ce86282ef060290613e5252df61152d12bc9656f05e15f689ed547148773950dcfade48706857b5ea9d410f9bb949ca35354881802423e93f8a0f6c7f0b82115633430e672162cf1b9d868fcda3eeb83f525d7ae540c804a4eaef8510cc9c023d15481db779f8c6beeb0ed5dea88e4021f8682c794da937124f706ab7032", 0x8c}], 0x2}, 0x4000800) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@fallback=r2, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={r7, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000a40)='%-R#(/$@\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback, r8, 0x35, 0x30, 0x0, @void, @void, @void, @value=r11, r10}, 0x20) perf_event_open(&(0x7f0000000b00)={0x3, 0x80, 0x6, 0x14, 0x6, 0x8, 0x0, 0x3, 0xd2825e38d3cc3a1d, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000ac0), 0x7}, 0x10, 0x0, 0x8, 0x0, 0xff, 0x317b, 0x7, 0x0, 0xe1, 0x0, 0x7}, r7, 0xc, r9, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r8, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000d00)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0], 0x0, 0xf2, &(0x7f0000000d80)=[{}, {}], 0x10, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001000)={0x1ff, 0x0}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xd, 0x5, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, [@call={0x85, 0x0, 0x0, 0xca}, @ldst={0x0, 0x2, 0x1, 0x3, 0xb, 0x4df5558e5746e11c, 0x10}]}, &(0x7f0000001080)='syzkaller\x00', 0x101, 0x99, &(0x7f00000010c0)=""/153, 0x40f00, 0x4, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x6, &(0x7f00000011c0)=[r6], &(0x7f0000001200)=[{0x4, 0x2, 0xc, 0x9}, {0x5, 0x5, 0x9, 0x3}, {0x0, 0x2, 0x7, 0xc}, {0x3, 0x3, 0xb}, {0x2, 0x4, 0xd, 0x9}, {0x3, 0x1, 0xb, 0x1}], 0x10, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x9, 0x3, &(0x7f0000000b80)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @generic={0xb, 0x4, 0x1, 0x7, 0x47}], &(0x7f0000000bc0)='syzkaller\x00', 0xd91d, 0x8e, &(0x7f0000000c00)=""/142, 0x41000, 0xc, '\x00', r12, @fallback=0x28, r8, 0x8, &(0x7f0000000fc0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r13, r14, 0x4, &(0x7f0000001340)=[r8, r9, r8], &(0x7f0000001380)=[{0x3, 0x1, 0x1, 0x6}, {0x2, 0x3, 0x10, 0x2}, {0x2, 0x1, 0x10, 0x5}, {0x1, 0x2, 0x5, 0xa}], 0x10, 0x7}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480)=r13, 0x4) r15 = perf_event_open(&(0x7f00000014c0)={0x0, 0x80, 0x2, 0x1, 0x4, 0xdd, 0x0, 0x4, 0x80020, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x7}, 0x100820, 0x2, 0x8bf, 0x7, 0xffffffffffffffff, 0x6, 0xe, 0x0, 0x3, 0x0, 0xf}, 0xffffffffffffffff, 0x5, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r15, 0x40042408, r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x5, [@datasec={0x10, 0xa, 0x0, 0xf, 0x1, [{0x1, 0x0, 0xff}, {0x1, 0x3, 0x6}, {0x3, 0xe196, 0x8}, {0x4, 0xfffffffc, 0xd2e}, {0x4, 0xd402, 0x2}, {0x2, 0x0, 0x9a}, {0x2, 0xffff0001, 0x5}, {0x4, 0x6, 0x10}, {0x2, 0x2}, {0x5, 0x6, 0x6}], "c6"}]}, {0x0, [0x0, 0x30, 0xe]}}, &(0x7f0000001600)=""/129, 0xa5, 0x81, 0x1, 0x7f}, 0x28) close(r6) 3.129974672s ago: executing program 4 (id=2888): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900", 0x2a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xfd, 0x0, 0x2, 0xff, 0x0, 0x10000000c, 0x44320, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x11}, 0x800, 0xc8, 0x10, 0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0xfdef) 2.721033131s ago: executing program 3 (id=2889): mkdir(0x0, 0xb4) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004", @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000000"], 0x50) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x44000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000018000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(0x3) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xb}, @exit]}, &(0x7f0000000500)='GPL\x00', 0x8, 0x0, &(0x7f0000000540), 0x450607df2dbb106d, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, r6, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x5, 0xffff, 0x7}, 0x10, 0x0, r4, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7], 0x0, 0x10, 0x2}, 0x94) r8 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@map, 0xffffffffffffffff, 0x15, 0x24, r1}, 0x20) write$cgroup_int(r8, &(0x7f00000000c0)=0x5, 0x12) 2.720669531s ago: executing program 2 (id=2890): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8450, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004"], 0x50) 2.562345654s ago: executing program 0 (id=2891): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac"], 0xfdef) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x40) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.402576288s ago: executing program 3 (id=2892): socket$kcm(0x2, 0x3, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x60}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.33987073s ago: executing program 4 (id=2893): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2, r4}) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x29, &(0x7f0000001640)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000340)="5779c8887e", 0x5}], 0x2}, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r0, 0x40049409, 0x3) r7 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r7, 0x0, 0xfdef) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="19000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r9, 0x0, 0xca, 0x1a, &(0x7f0000000400)="94e3a9a35c53d9f8864154729361cc0f54a9f77ec3c40a6e80d58c655e3f81cb1200567b5ff33562c3775c478ae559be035437a31e6ce6490e7462f1343552d4022f99df4d3527f24e33f36b8629a2ceebc4c614e2cd7305f72d64458251ba8c0155ca8b2a9807d417f517bbba0cd84b3788c3d0a9a9ef0b95e924dde62a467868a39f6427d9f2ac31f2119eb2cc0f0f2d2ae7741d3516492e6b187e0c7124a9a4ae095d23e1f73e22a11a45281ffb4dad2fb894411613899a897dfeed851d57ca54af75c088367f24eb", &(0x7f00000005c0)=""/26, 0xfffffff7, 0x0, 0xf6, 0x0, &(0x7f0000000600)="7c73724c0f609a79d015f1b9b3a867bfd69f1c371cb1d704f7c0a487bc1d39ed39a92376a2f1f38e654e6260be243586cde4df4376fc6db21a7577dedd79488e5abe3d1beb903f703a442301a21a4c69867a3d7de6be2dd285392685cf2c76d817dc0cd850594f7fa03bd12837463a908cc2204fe3492f9eb43a126432eefef0faad24096715bb8971e2bb2b3ecbc7661e6586f644a09fe07df1fcbd869691f9c8437bdfaf4195f1df66f1b81f3b78fbe41f0b63e812d77e157e81bd60fadcf9eb3f51a4c02ea8431b054e83a0ec982d24545965e951e7ade8eb9e32636e7559bb2ccf4a7d99bbcde8c968cb88000c89d1cdc7c79776", &(0x7f0000000700), 0x5, 0x0, 0x4}, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0xf00}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r11, 0x0, 0x0}, 0x10) 1.857151s ago: executing program 3 (id=2894): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xf) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x68) 1.3839954s ago: executing program 3 (id=2895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x34, {[@rr={0x7, 0x3}, @ra={0x94, 0x4}]}}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x5000) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x1, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000900)={r3, &(0x7f0000000340)="ed01131832072bb303a4568022a055845692e6b8a773c6dd21f04d313649f2debe41e650e6cbe9962baf2b63c687bcb14345c35dd3daba99a3364ef724b8b4742448f77aec150ce0c3e624c98f8f9623a2ca1dcd2f25300dd510ec0246e00f01c4b558a023779b22edf8ffc6fa2200e1cfc28274db30d19ecf0a24752c17a4a8534f4b793e82eef14f34d08cf3a7626b224a97298475ec488692fc506cd8e01cb181047b014b5ddb7ec3e5fa1533ea9f", &(0x7f0000000840)=""/131, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x8, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x76}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8001) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x1) 156.145257ms ago: executing program 2 (id=2896): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000380), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xaa050000}, 0x0) 142.990397ms ago: executing program 3 (id=2897): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xf) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c00000007"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=2898): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1100000004"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x5}, 0x110c0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r4, 0x400454cd, 0x301) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x4, 0x1, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x10}, 0x40000) r6 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000002b060010000000bf91000000000000b7020000010000008500000085f8ff00b7000000000000009500"/109], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sk_reuseport, r3, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10, 0x7fff, 0x4}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xfffff5f1}, 0x94) sendmsg$inet(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): y 0 port 6081 - 0 [ 461.049554][T12593] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2322'. [ 461.418457][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.467619][T12602] netlink: 'syz.4.2324': attribute type 21 has an invalid length. [ 461.486646][T12602] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2324'. [ 461.752305][T12597] netlink: 'syz.2.2323': attribute type 21 has an invalid length. [ 461.779535][T12597] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2323'. [ 461.854566][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.212964][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.358829][T12590] chnl_net:caif_netlink_parms(): no params data found [ 462.400967][T12611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2326'. [ 462.655550][T12628] netlink: 'syz.2.2331': attribute type 21 has an invalid length. [ 462.665558][T12628] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2331'. [ 462.731066][T12590] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.741959][T12590] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.759282][T12590] bridge_slave_0: entered allmulticast mode [ 462.766731][T12590] bridge_slave_0: entered promiscuous mode [ 462.799031][T12590] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.807584][T12590] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.819016][ T5789] Bluetooth: hci5: command tx timeout [ 462.831057][T12590] bridge_slave_1: entered allmulticast mode [ 462.846023][T12590] bridge_slave_1: entered promiscuous mode [ 462.960737][T12636] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 462.970261][T12636] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2334'. [ 463.013126][T12634] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2333'. [ 463.660471][T12590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.711801][T12590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.769090][T12646] netlink: 'syz.4.2335': attribute type 21 has an invalid length. [ 463.777281][T12646] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2335'. [ 464.104174][T12590] team0: Port device team_slave_0 added [ 464.554649][T12590] team0: Port device team_slave_1 added [ 464.675989][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2338'. [ 464.810364][T12590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.820848][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.850100][T12590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.898634][ T5789] Bluetooth: hci5: command tx timeout [ 465.669695][T12590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.676710][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.708746][T12590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.285104][T12590] hsr_slave_0: entered promiscuous mode [ 466.298027][T12590] hsr_slave_1: entered promiscuous mode [ 466.313959][T12590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.339461][T12590] Cannot create hsr debugfs directory [ 466.345323][T12691] netlink: 'syz.4.2344': attribute type 21 has an invalid length. [ 466.361381][T12691] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2344'. [ 466.702673][T12708] netlink: 'syz.4.2345': attribute type 1 has an invalid length. [ 466.750592][T12708] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2345'. [ 466.810328][T12704] netlink: 'syz.2.2346': attribute type 21 has an invalid length. [ 466.866865][T12704] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2346'. [ 466.988652][ T5789] Bluetooth: hci5: command tx timeout [ 467.305651][T12717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2348'. [ 468.521160][T12730] netlink: 'syz.2.2349': attribute type 21 has an invalid length. [ 468.534280][T12730] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2349'. [ 468.756883][T12748] netlink: 'syz.4.2353': attribute type 21 has an invalid length. [ 468.776208][T12748] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2353'. [ 469.060796][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.068571][ T5789] Bluetooth: hci5: command tx timeout [ 469.109949][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.893497][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.905579][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.919140][ T78] bridge_slave_1: left allmulticast mode [ 469.927346][ T78] bridge_slave_1: left promiscuous mode [ 469.937611][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.982091][ T78] bridge_slave_0: left allmulticast mode [ 469.998054][ T78] bridge_slave_0: left promiscuous mode [ 470.005815][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.182333][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.231007][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.506206][ T78] bond0 (unregistering): Released all slaves [ 471.703532][T12590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 471.719820][T12590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 471.735426][T12590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 471.754799][T12590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 471.964441][T12590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.023287][T12590] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.047131][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.054896][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.094052][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.101369][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.405899][T12590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.484289][T12590] veth0_vlan: entered promiscuous mode [ 472.501092][T12590] veth1_vlan: entered promiscuous mode [ 472.554701][T12590] veth0_macvtap: entered promiscuous mode [ 472.566377][T12590] veth1_macvtap: entered promiscuous mode [ 472.604883][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.618878][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.632750][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.643394][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.655512][T12590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.673150][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.683785][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.702127][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.713883][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.729892][T12590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.750375][T12590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.761593][T12590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.772725][T12590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.784269][T12590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.893979][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.914605][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.948136][ T4807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.956410][ T4807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.159988][T12804] FAULT_INJECTION: forcing a failure. [ 473.159988][T12804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.204703][T12804] CPU: 0 PID: 12804 Comm: syz.2.2367 Not tainted syzkaller #0 [ 473.212245][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.222339][T12804] Call Trace: [ 473.225650][T12804] [ 473.228632][T12804] dump_stack_lvl+0x18c/0x250 [ 473.233358][T12804] ? show_regs_print_info+0x20/0x20 [ 473.238621][T12804] ? load_image+0x420/0x420 [ 473.243186][T12804] ? __might_fault+0xaa/0x120 [ 473.247914][T12804] ? __lock_acquire+0x7d80/0x7d80 [ 473.252985][T12804] ? __virt_addr_valid+0x10c/0x380 [ 473.258142][T12804] should_fail_ex+0x394/0x4c0 [ 473.262877][T12804] _copy_from_user+0x2f/0xe0 [ 473.267520][T12804] ____sys_sendmsg+0x329/0x980 [ 473.272417][T12804] ? __sys_sendmsg_sock+0x30/0x30 [ 473.277473][T12804] ? __import_iovec+0x3fa/0x850 [ 473.282368][T12804] ? import_iovec+0x73/0xa0 [ 473.286929][T12804] ___sys_sendmsg+0x2a6/0x360 [ 473.291660][T12804] ? __sys_sendmsg+0x2b0/0x2b0 [ 473.296498][T12804] __se_sys_sendmsg+0x1d0/0x2c0 [ 473.301549][T12804] ? __x64_sys_sendmsg+0x80/0x80 [ 473.306555][T12804] ? syscall_enter_from_user_mode+0x2e/0x80 [ 473.312528][T12804] do_syscall_64+0x55/0xb0 [ 473.316999][T12804] ? clear_bhb_loop+0x40/0x90 [ 473.321717][T12804] ? clear_bhb_loop+0x40/0x90 [ 473.326461][T12804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.332426][T12804] RIP: 0033:0x7f86f7f9e0d9 [ 473.336876][T12804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.356523][T12804] RSP: 002b:00007f86f8e40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.364988][T12804] RAX: ffffffffffffffda RBX: 00007f86f8225fa0 RCX: 00007f86f7f9e0d9 [ 473.372998][T12804] RDX: 0000000000044050 RSI: 0000200000000dc0 RDI: 0000000000000007 [ 473.381031][T12804] RBP: 00007f86f8e40090 R08: 0000000000000000 R09: 0000000000000000 [ 473.389044][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.397090][T12804] R13: 00007f86f8226038 R14: 00007f86f8225fa0 R15: 00007ffcee1d9d08 [ 473.405112][T12804] [ 473.825904][T12818] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2361'. [ 473.898722][T12818] openvswitch: netlink: Key type 29 is not supported [ 474.034898][T12820] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 474.079749][T12820] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2358'. [ 474.700370][T12831] netlink: 'syz.3.2362': attribute type 21 has an invalid length. [ 474.744838][T12831] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2362'. [ 476.669327][T12860] netlink: 'syz.0.2375': attribute type 10 has an invalid length. [ 476.760675][T12860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.805317][T12860] team0: Port device bond0 added [ 476.821710][T12864] netlink: 'syz.2.2376': attribute type 21 has an invalid length. [ 476.859721][T12864] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2376'. [ 476.901581][T12866] netlink: 'syz.4.2377': attribute type 21 has an invalid length. [ 476.918524][T12866] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2377'. [ 477.046669][T12879] netlink: 'syz.0.2379': attribute type 1 has an invalid length. [ 477.068792][T12879] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2379'. [ 477.171866][T12883] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2378'. [ 477.185954][T12883] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2378'. [ 477.197803][T12874] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2378'. [ 477.225055][T12883] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2378'. [ 477.260498][T12885] netlink: 'syz.4.2381': attribute type 21 has an invalid length. [ 477.576733][T12898] netlink: 'syz.3.2385': attribute type 21 has an invalid length. [ 477.840084][T12903] netlink: 'syz.0.2388': attribute type 10 has an invalid length. [ 478.406845][T12917] netlink: 'syz.2.2390': attribute type 21 has an invalid length. [ 479.809213][T12933] validate_nla: 1 callbacks suppressed [ 479.809248][T12933] netlink: 'syz.3.2395': attribute type 21 has an invalid length. [ 479.848382][T12933] __nla_validate_parse: 4 callbacks suppressed [ 479.848446][T12933] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2395'. [ 480.334403][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 480.344810][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 480.354669][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 480.365570][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 480.382221][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 480.390461][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 480.633432][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.722304][T12952] netlink: 611 bytes leftover after parsing attributes in process `syz.3.2400'. [ 480.840320][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.970661][T12955] netlink: 'syz.4.2401': attribute type 10 has an invalid length. [ 481.444341][T12949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2399'. [ 481.688135][T12955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.737321][T12955] team0: Port device bond0 added [ 481.895414][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.918702][T12966] netlink: 'syz.3.2403': attribute type 2 has an invalid length. [ 482.112355][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.222985][T12969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2403'. [ 482.381705][T12946] chnl_net:caif_netlink_parms(): no params data found [ 482.498305][ T51] Bluetooth: hci0: command tx timeout [ 482.801806][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.825710][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.857120][T12946] bridge_slave_0: entered allmulticast mode [ 482.885281][T12946] bridge_slave_0: entered promiscuous mode [ 482.950719][T12983] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 483.007623][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.055322][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.077161][T12946] bridge_slave_1: entered allmulticast mode [ 483.110837][T12946] bridge_slave_1: entered promiscuous mode [ 483.307116][T12946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.372730][T12946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.564906][T12946] team0: Port device team_slave_0 added [ 483.574455][T12946] team0: Port device team_slave_1 added [ 483.707229][T12946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.716440][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.845041][T12990] netlink: 'syz.4.2409': attribute type 9 has an invalid length. [ 483.876251][T12946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.889572][T12946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.896560][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.904569][T12990] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2409'. [ 483.943308][T12946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.234028][T12946] hsr_slave_0: entered promiscuous mode [ 484.257210][T12946] hsr_slave_1: entered promiscuous mode [ 484.294403][T12946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.318399][T12946] Cannot create hsr debugfs directory [ 484.578298][ T51] Bluetooth: hci0: command tx timeout [ 484.889650][T13005] netlink: 'syz.0.2412': attribute type 21 has an invalid length. [ 484.919367][T13005] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2412'. [ 485.215679][T13015] netlink: 'syz.4.2413': attribute type 10 has an invalid length. [ 485.400082][T13021] netlink: 'syz.3.2414': attribute type 10 has an invalid length. [ 485.425917][T13024] netlink: 'syz.0.2415': attribute type 10 has an invalid length. [ 485.473064][T13027] netlink: 'syz.0.2415': attribute type 10 has an invalid length. [ 486.125567][T13043] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2419'. [ 486.658246][ T51] Bluetooth: hci0: command tx timeout [ 486.731511][T13041] delete_channel: no stack [ 487.116351][T13054] netlink: 'syz.4.2424': attribute type 10 has an invalid length. [ 487.176055][T13059] netlink: 'syz.0.2425': attribute type 21 has an invalid length. [ 487.198397][T13059] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2425'. [ 488.521553][T12946] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 488.626730][T13080] netlink: 'syz.4.2428': attribute type 3 has an invalid length. [ 488.640906][T13080] netlink: 61203 bytes leftover after parsing attributes in process `syz.4.2428'. [ 488.738427][ T51] Bluetooth: hci0: command tx timeout [ 489.263473][T12946] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 489.294189][T12946] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 489.341434][T12946] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 489.500967][T13090] netlink: 'syz.0.2431': attribute type 21 has an invalid length. [ 489.559932][T13090] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2431'. [ 489.583371][T13091] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2430'. [ 489.607013][T13091] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 489.794068][T13088] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 490.255891][T12946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.352515][T12946] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.379557][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.386716][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.481585][T13101] netlink: 'syz.4.2432': attribute type 2 has an invalid length. [ 490.530827][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.538035][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.587111][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.610835][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.666512][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.698455][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.728858][ T34] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 490.746663][ T34] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 491.909359][T13110] netlink: 'syz.3.2434': attribute type 21 has an invalid length. [ 491.917236][T13110] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2434'. [ 491.927375][T13101] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2432'. [ 491.948291][T13115] netlink: 'syz.0.2435': attribute type 21 has an invalid length. [ 491.967376][T13115] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2435'. [ 492.062278][T12946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.575414][T13160] netlink: 'syz.0.2439': attribute type 10 has an invalid length. [ 492.647062][T13160] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2439'. [ 492.704098][T13160] batadv_slave_1: entered promiscuous mode [ 492.722960][T13160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.780463][T13160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.097272][T13157] netlink: 'syz.3.2438': attribute type 21 has an invalid length. [ 493.165862][T13157] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2438'. [ 493.260320][T13166] netlink: 'syz.0.2439': attribute type 10 has an invalid length. [ 493.278862][T13166] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2439'. [ 493.450858][T12946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.462703][T13176] netlink: 'syz.4.2440': attribute type 21 has an invalid length. [ 493.496534][T13176] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2440'. [ 493.600612][T12946] veth0_vlan: entered promiscuous mode [ 493.637058][T12946] veth1_vlan: entered promiscuous mode [ 493.646655][T13180] netlink: 'syz.3.2441': attribute type 21 has an invalid length. [ 493.659742][T13180] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2441'. [ 493.758608][T12946] veth0_macvtap: entered promiscuous mode [ 493.797516][T12946] veth1_macvtap: entered promiscuous mode [ 493.969263][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.028736][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.058404][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.073003][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.094604][T12946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.110375][T13192] netlink: 'syz.0.2444': attribute type 21 has an invalid length. [ 494.131650][T13192] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2444'. [ 494.300632][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.335533][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.370979][T12946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.396917][T13201] netlink: 'syz.3.2445': attribute type 21 has an invalid length. [ 494.410465][T13201] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2445'. [ 494.513369][T12946] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.554055][T12946] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.590587][T12946] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.624653][T12946] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.636504][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 495.595951][T13221] netlink: 'syz.4.2448': attribute type 27 has an invalid length. [ 495.718020][T13221] bond0: (slave bond_slave_0): Releasing backup interface [ 495.887716][T13229] netlink: 'syz.0.2450': attribute type 10 has an invalid length. [ 495.933761][T13229] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 496.048093][ T4540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.068735][ T4540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.145763][T13234] netlink: 'syz.4.2451': attribute type 21 has an invalid length. [ 496.159030][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.178145][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.382183][T13236] netlink: 'syz.2.2392': attribute type 1 has an invalid length. [ 496.583527][T13240] netlink: 'syz.4.2453': attribute type 21 has an invalid length. [ 496.842842][ T51] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 497.428519][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 497.440107][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 497.448542][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 497.456843][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 497.466260][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 497.473885][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 497.792349][T13258] chnl_net:caif_netlink_parms(): no params data found [ 498.272170][ T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.284504][T13275] netlink: 'syz.0.2463': attribute type 1 has an invalid length. [ 498.306022][T13275] __nla_validate_parse: 3 callbacks suppressed [ 498.306054][T13275] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2463'. [ 498.359510][T13273] netlink: 'syz.4.2462': attribute type 21 has an invalid length. [ 498.385292][T13273] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2462'. [ 498.503480][ T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.700978][ T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.746418][T13283] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2465'. [ 498.801271][T13283] netlink: 'syz.4.2465': attribute type 2 has an invalid length. [ 498.842377][T13283] netlink: 'syz.4.2465': attribute type 8 has an invalid length. [ 498.867061][T13283] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2465'. [ 498.945406][ T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.965788][T13258] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.975096][T13258] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.016009][T13258] bridge_slave_0: entered allmulticast mode [ 499.039406][T13258] bridge_slave_0: entered promiscuous mode [ 499.078621][T13258] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.085820][T13258] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.119041][T13258] bridge_slave_1: entered allmulticast mode [ 499.147452][T13258] bridge_slave_1: entered promiscuous mode [ 499.229588][T13285] netlink: 'syz.0.2464': attribute type 2 has an invalid length. [ 499.352156][T13288] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2467'. [ 499.386383][T13258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.447643][T13258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.538762][ T5789] Bluetooth: hci3: command tx timeout [ 499.909883][T13258] team0: Port device team_slave_0 added [ 500.115428][T13290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2464'. [ 500.183124][T13258] team0: Port device team_slave_1 added [ 500.757259][T13258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.783345][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.810499][T13258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.832548][T13308] validate_nla: 1 callbacks suppressed [ 500.832601][T13308] netlink: 'syz.2.2470': attribute type 9 has an invalid length. [ 500.855002][T13308] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.2470'. [ 500.941965][T13258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.949895][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.007062][T13258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.126752][T13319] veth1_vlan: entered allmulticast mode [ 501.579033][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.586043][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.618652][ T5789] Bluetooth: hci3: command tx timeout [ 501.650095][T13324] netlink: 'syz.4.2472': attribute type 21 has an invalid length. [ 501.662779][T13324] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2472'. [ 501.672114][T13332] delete_channel: no stack [ 502.376026][T13258] hsr_slave_0: entered promiscuous mode [ 502.401702][T13258] hsr_slave_1: entered promiscuous mode [ 502.421128][T13258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.440040][T13258] Cannot create hsr debugfs directory [ 502.530788][T13340] netlink: 'syz.0.2476': attribute type 21 has an invalid length. [ 502.551755][T13340] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2476'. [ 503.510295][T13366] netlink: 'syz.4.2481': attribute type 10 has an invalid length. [ 503.572687][T13366] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 503.698649][ T5789] Bluetooth: hci3: command tx timeout [ 505.288703][T13399] netlink: 'syz.0.2486': attribute type 21 has an invalid length. [ 505.316128][T13399] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2486'. [ 505.789228][ T5789] Bluetooth: hci3: command tx timeout [ 505.958975][ T34] hsr_slave_0: left promiscuous mode [ 505.965948][ T34] hsr_slave_1: left promiscuous mode [ 505.974025][ T34] hsr0: left allmulticast mode [ 505.981139][ T34] bridge0: port 2(hsr0) entered disabled state [ 505.990254][ T34] bridge_slave_0: left allmulticast mode [ 505.996109][ T34] bridge_slave_0: left promiscuous mode [ 506.002493][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.026536][T13421] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2490'. [ 506.100864][ T34] veth1_macvtap: left promiscuous mode [ 506.107411][ T34] veth0_macvtap: left promiscuous mode [ 506.160315][ T34] veth1_vlan: left promiscuous mode [ 506.176628][ T34] veth0_vlan: left promiscuous mode [ 507.677361][T13429] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2492'. [ 507.688863][T13430] netlink: 'syz.0.2492': attribute type 10 has an invalid length. [ 507.696754][T13430] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2492'. [ 508.013166][T13258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 508.430400][T13258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.458500][T13434] netlink: 'syz.2.2493': attribute type 10 has an invalid length. [ 508.505751][T13434] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 508.545936][T13258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 508.613632][T13258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 508.855352][T13258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.947012][T13258] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.003361][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.010592][T13174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.068051][T13456] veth1_vlan: entered allmulticast mode [ 509.116947][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.124177][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.196617][T13459] netlink: 'syz.2.2497': attribute type 21 has an invalid length. [ 509.206028][T13459] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2497'. [ 509.525047][T13475] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2498'. [ 509.606441][T13476] netlink: 'syz.0.2501': attribute type 21 has an invalid length. [ 509.642635][T13476] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2501'. [ 509.782929][T13482] FAULT_INJECTION: forcing a failure. [ 509.782929][T13482] name failslab, interval 1, probability 0, space 0, times 0 [ 509.839849][T13482] CPU: 1 PID: 13482 Comm: syz.4.2502 Not tainted syzkaller #0 [ 509.847363][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.857447][T13482] Call Trace: [ 509.860863][T13482] [ 509.863842][T13482] dump_stack_lvl+0x18c/0x250 [ 509.868560][T13482] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.874748][T13482] ? show_regs_print_info+0x20/0x20 [ 509.879987][T13482] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.886187][T13482] should_fail_ex+0x394/0x4c0 [ 509.890911][T13482] should_failslab+0x9/0x20 [ 509.895472][T13482] slab_pre_alloc_hook+0x59/0x300 [ 509.900542][T13482] ? __lock_acquire+0x7d80/0x7d80 [ 509.905604][T13482] ? dev_ethtool+0x129/0x18d0 [ 509.910324][T13482] __kmem_cache_alloc_node+0x53/0x250 [ 509.915740][T13482] ? __might_fault+0xaa/0x120 [ 509.920471][T13482] ? dev_ethtool+0x129/0x18d0 [ 509.925192][T13482] kmalloc_trace+0x2a/0xe0 [ 509.929647][T13482] dev_ethtool+0x129/0x18d0 [ 509.934201][T13482] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 509.940470][T13482] ? __lock_acquire+0x7d80/0x7d80 [ 509.945517][T13482] ? __might_fault+0xaa/0x120 [ 509.950241][T13482] ? full_name_hash+0x92/0xe0 [ 509.954934][T13482] ? dev_load+0x21/0x1f0 [ 509.959194][T13482] dev_ioctl+0x392/0x1140 [ 509.963542][T13482] sock_do_ioctl+0x239/0x310 [ 509.968150][T13482] ? sock_show_fdinfo+0xb0/0xb0 [ 509.973037][T13482] sock_ioctl+0x5be/0x7e0 [ 509.977413][T13482] ? sock_poll+0x3e0/0x3e0 [ 509.981880][T13482] ? bpf_lsm_file_ioctl+0x9/0x10 [ 509.986843][T13482] ? security_file_ioctl+0x80/0xa0 [ 509.991987][T13482] ? sock_poll+0x3e0/0x3e0 [ 509.996436][T13482] __se_sys_ioctl+0xfd/0x170 [ 510.001074][T13482] do_syscall_64+0x55/0xb0 [ 510.005520][T13482] ? clear_bhb_loop+0x40/0x90 [ 510.010229][T13482] ? clear_bhb_loop+0x40/0x90 [ 510.014924][T13482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.020843][T13482] RIP: 0033:0x7fb0ddf9e0d9 [ 510.025312][T13482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.044949][T13482] RSP: 002b:00007fb0dee6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.053386][T13482] RAX: ffffffffffffffda RBX: 00007fb0de225fa0 RCX: 00007fb0ddf9e0d9 [ 510.061381][T13482] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 510.069379][T13482] RBP: 00007fb0dee6f090 R08: 0000000000000000 R09: 0000000000000000 [ 510.077416][T13482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.085429][T13482] R13: 00007fb0de226038 R14: 00007fb0de225fa0 R15: 00007ffcc2471848 [ 510.093485][T13482] [ 510.356487][T13474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2499'. [ 510.383149][T13258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.535931][T13258] veth0_vlan: entered promiscuous mode [ 510.606872][T13258] veth1_vlan: entered promiscuous mode [ 510.730795][T13258] veth0_macvtap: entered promiscuous mode [ 510.754558][T13258] veth1_macvtap: entered promiscuous mode [ 510.833471][T13258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.850507][T13258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.863055][T13258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.875860][T13258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.890335][T13258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.924065][T13258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.956207][T13258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.986513][T13258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.033024][T13258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.057212][T13258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.083035][T13258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.117266][T13258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.190038][T13258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.227303][T13258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.237525][ T5789] Bluetooth: hci0: unexpected event 0x30 length: 151 > 3 [ 511.257438][T13258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.282878][T13258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.602062][ T4540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.617250][ T4540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.720353][ T4540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.751249][ T4540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.149117][T13535] veth1_vlan: entered allmulticast mode [ 512.788852][T13549] netlink: 'syz.4.2510': attribute type 21 has an invalid length. [ 512.796886][T13549] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2510'. [ 513.160478][T13561] netlink: 'syz.2.2516': attribute type 29 has an invalid length. [ 513.786174][T13558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2513'. [ 513.897402][T13561] netlink: 'syz.2.2516': attribute type 29 has an invalid length. [ 514.335467][T13571] netlink: 'syz.3.2518': attribute type 21 has an invalid length. [ 514.395205][T13571] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2518'. [ 514.632214][T13576] netlink: 'syz.4.2520': attribute type 10 has an invalid length. [ 514.811980][T13576] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.904434][T13576] bridge_slave_1: left allmulticast mode [ 514.940092][T13586] FAULT_INJECTION: forcing a failure. [ 514.940092][T13586] name failslab, interval 1, probability 0, space 0, times 0 [ 514.954615][T13576] bridge_slave_1: left promiscuous mode [ 514.961514][T13586] CPU: 0 PID: 13586 Comm: syz.3.2523 Not tainted syzkaller #0 [ 514.969036][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.979137][T13586] Call Trace: [ 514.982472][T13586] [ 514.985437][T13586] dump_stack_lvl+0x18c/0x250 [ 514.990165][T13586] ? show_regs_print_info+0x20/0x20 [ 514.995406][T13586] ? load_image+0x420/0x420 [ 515.000047][T13586] ? __might_sleep+0xe0/0xe0 [ 515.004675][T13586] ? __lock_acquire+0x7d80/0x7d80 [ 515.009782][T13586] should_fail_ex+0x394/0x4c0 [ 515.014516][T13586] should_failslab+0x9/0x20 [ 515.019064][T13586] slab_pre_alloc_hook+0x59/0x300 [ 515.024144][T13586] ? __lock_acquire+0x7d80/0x7d80 [ 515.029229][T13586] ? dev_ethtool+0x129/0x18d0 [ 515.033963][T13586] __kmem_cache_alloc_node+0x53/0x250 [ 515.039382][T13586] ? __might_fault+0xaa/0x120 [ 515.044100][T13586] ? dev_ethtool+0x129/0x18d0 [ 515.047138][T13576] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.048805][T13586] kmalloc_trace+0x2a/0xe0 [ 515.048836][T13586] dev_ethtool+0x129/0x18d0 [ 515.048869][T13586] ? lockdep_hardirqs_on+0x98/0x150 [ 515.048896][T13586] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 515.048925][T13586] ? __lock_acquire+0x7d80/0x7d80 [ 515.048962][T13586] ? dev_load+0x21/0x1f0 [ 515.048992][T13586] dev_ioctl+0x392/0x1140 [ 515.049023][T13586] sock_do_ioctl+0x239/0x310 [ 515.094695][T13586] ? sock_show_fdinfo+0xb0/0xb0 [ 515.099588][T13586] sock_ioctl+0x5be/0x7e0 [ 515.103940][T13586] ? sock_poll+0x3e0/0x3e0 [ 515.108384][T13586] ? bpf_lsm_file_ioctl+0x9/0x10 [ 515.113337][T13586] ? security_file_ioctl+0x80/0xa0 [ 515.118472][T13586] ? sock_poll+0x3e0/0x3e0 [ 515.122923][T13586] __se_sys_ioctl+0xfd/0x170 [ 515.127560][T13586] do_syscall_64+0x55/0xb0 [ 515.132005][T13586] ? clear_bhb_loop+0x40/0x90 [ 515.136701][T13586] ? clear_bhb_loop+0x40/0x90 [ 515.141416][T13586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.147343][T13586] RIP: 0033:0x7fd69a79e0d9 [ 515.151781][T13586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.171427][T13586] RSP: 002b:00007fd69b647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.179887][T13586] RAX: ffffffffffffffda RBX: 00007fd69aa25fa0 RCX: 00007fd69a79e0d9 [ 515.187872][T13586] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 515.195866][T13586] RBP: 00007fd69b647090 R08: 0000000000000000 R09: 0000000000000000 [ 515.203874][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.211864][T13586] R13: 00007fd69aa26038 R14: 00007fd69aa25fa0 R15: 00007ffdde53f398 [ 515.219871][T13586] [ 515.533900][T13576] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 515.589482][T13596] netlink: 'syz.3.2525': attribute type 10 has an invalid length. [ 515.823670][T13596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.874145][T13596] team0: Port device bond0 added [ 516.424420][T13605] netlink: 'syz.0.2528': attribute type 1 has an invalid length. [ 516.458544][T13605] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2528'. [ 517.019826][T13609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2527'. [ 517.728993][T13611] netlink: 'syz.4.2529': attribute type 21 has an invalid length. [ 517.807794][T13611] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2529'. [ 517.942243][T13618] netlink: 'syz.3.2531': attribute type 21 has an invalid length. [ 517.971918][T13618] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2531'. [ 518.052970][T13624] netlink: 'syz.0.2533': attribute type 21 has an invalid length. [ 518.169049][T13624] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2533'. [ 518.335363][T13632] netlink: 'syz.2.2536': attribute type 10 has an invalid length. [ 518.927688][T13632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.209527][T13632] team0: Port device bond0 added [ 519.672031][T13651] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 519.693552][T13651] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2541'. [ 520.975515][T13658] netlink: 'syz.4.2543': attribute type 21 has an invalid length. [ 520.991359][T13658] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2543'. [ 521.345721][T13671] syzkaller0: entered promiscuous mode [ 521.358925][T13671] syzkaller0: entered allmulticast mode [ 521.473258][T13674] netlink: 'syz.0.2549': attribute type 10 has an invalid length. [ 523.776326][T13693] netlink: 'syz.2.2555': attribute type 1 has an invalid length. [ 523.787411][T13693] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2555'. [ 523.820207][T13697] netlink: 'syz.0.2562': attribute type 29 has an invalid length. [ 523.863476][T13697] netlink: 'syz.0.2562': attribute type 29 has an invalid length. [ 524.171900][T13705] FAULT_INJECTION: forcing a failure. [ 524.171900][T13705] name failslab, interval 1, probability 0, space 0, times 0 [ 524.213223][T13705] CPU: 1 PID: 13705 Comm: syz.4.2557 Not tainted syzkaller #0 [ 524.220770][T13705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.230872][T13705] Call Trace: [ 524.234220][T13705] [ 524.237198][T13705] dump_stack_lvl+0x18c/0x250 [ 524.241934][T13705] ? show_regs_print_info+0x20/0x20 [ 524.247200][T13705] ? load_image+0x420/0x420 [ 524.251784][T13705] should_fail_ex+0x394/0x4c0 [ 524.256538][T13705] should_failslab+0x9/0x20 [ 524.261101][T13705] slab_pre_alloc_hook+0x59/0x300 [ 524.266197][T13705] kmem_cache_alloc+0x5a/0x2c0 [ 524.271019][T13705] ? skb_clone+0x1eb/0x370 [ 524.275499][T13705] skb_clone+0x1eb/0x370 [ 524.279801][T13705] __netlink_deliver_tap+0x411/0x7f0 [ 524.285150][T13705] ? netlink_deliver_tap+0x2e/0x1b0 [ 524.290402][T13705] netlink_deliver_tap+0x19c/0x1b0 [ 524.295574][T13705] netlink_dump+0x95b/0xec0 [ 524.300151][T13705] ? netlink_lookup+0x200/0x200 [ 524.305066][T13705] ? __kasan_kmalloc+0x8f/0xa0 [ 524.309914][T13705] ? __inet_diag_dump_start+0x886/0x9f0 [ 524.315515][T13705] ? netlink_lookup+0x30/0x200 [ 524.320332][T13705] __netlink_dump_start+0x57c/0x7a0 [ 524.325587][T13705] inet_diag_rcv_msg_compat+0x215/0x440 [ 524.331188][T13705] ? __inet_diag_dump+0x380/0x380 [ 524.336273][T13705] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 524.341374][T13705] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 524.347146][T13705] ? inet_diag_dump_start_compat+0x20/0x20 [ 524.353010][T13705] ? inet_diag_dump+0x50/0x50 [ 524.357744][T13705] ? __inet_diag_dump+0x380/0x380 [ 524.362834][T13705] sock_diag_rcv_msg+0x3d3/0x5f0 [ 524.367834][T13705] netlink_rcv_skb+0x235/0x4c0 [ 524.372645][T13705] ? sock_diag_bind+0xb0/0xb0 [ 524.377382][T13705] ? netlink_ack+0x1160/0x1160 [ 524.382209][T13705] ? __lock_acquire+0x7d80/0x7d80 [ 524.387303][T13705] ? netlink_deliver_tap+0x2e/0x1b0 [ 524.392564][T13705] sock_diag_rcv+0x2a/0x40 [ 524.397039][T13705] netlink_unicast+0x7b1/0x930 [ 524.401885][T13705] netlink_sendmsg+0x8d0/0xbf0 [ 524.406715][T13705] ? netlink_getsockopt+0x590/0x590 [ 524.411971][T13705] ? apparmor_socket_sendmsg+0x8e/0x330 [ 524.417571][T13705] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 524.422932][T13705] ? security_socket_sendmsg+0x80/0xa0 [ 524.428432][T13705] ? netlink_getsockopt+0x590/0x590 [ 524.433674][T13705] ____sys_sendmsg+0x61b/0x980 [ 524.438498][T13705] ? __asan_memset+0x22/0x40 [ 524.443140][T13705] ? __sys_sendmsg_sock+0x30/0x30 [ 524.448214][T13705] ? __import_iovec+0x5f2/0x850 [ 524.453132][T13705] ? import_iovec+0x73/0xa0 [ 524.457698][T13705] ___sys_sendmsg+0x2a6/0x360 [ 524.462445][T13705] ? __sys_sendmsg+0x2b0/0x2b0 [ 524.467294][T13705] ? trace_call_bpf+0xc3/0x6c0 [ 524.472130][T13705] __se_sys_sendmsg+0x1d0/0x2c0 [ 524.477044][T13705] ? __x64_sys_sendmsg+0x80/0x80 [ 524.482054][T13705] ? lockdep_hardirqs_on+0x98/0x150 [ 524.487322][T13705] do_syscall_64+0x55/0xb0 [ 524.491785][T13705] ? clear_bhb_loop+0x40/0x90 [ 524.496511][T13705] ? clear_bhb_loop+0x40/0x90 [ 524.501242][T13705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.507189][T13705] RIP: 0033:0x7fb0ddf9e0d9 [ 524.511646][T13705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.531309][T13705] RSP: 002b:00007fb0dee4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.539778][T13705] RAX: ffffffffffffffda RBX: 00007fb0de226090 RCX: 00007fb0ddf9e0d9 [ 524.547793][T13705] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 524.555812][T13705] RBP: 00007fb0dee4e090 R08: 0000000000000000 R09: 0000000000000000 [ 524.563828][T13705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.571842][T13705] R13: 00007fb0de226128 R14: 00007fb0de226090 R15: 00007ffcc2471848 [ 524.579887][T13705] [ 524.696915][T13708] netlink: 'syz.3.2558': attribute type 21 has an invalid length. [ 524.731392][T13708] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2558'. [ 525.539235][T13729] netlink: 'syz.3.2564': attribute type 21 has an invalid length. [ 525.551447][T13729] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2564'. [ 525.946516][T13733] netlink: 'syz.4.2565': attribute type 10 has an invalid length. [ 527.764764][T13762] netlink: 'syz.0.2573': attribute type 10 has an invalid length. [ 529.614123][T13782] syzkaller0: entered promiscuous mode [ 529.645389][T13782] syzkaller0: entered allmulticast mode [ 529.805221][T13787] netlink: 'syz.3.2580': attribute type 10 has an invalid length. [ 530.469096][T13801] FAULT_INJECTION: forcing a failure. [ 530.469096][T13801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.501247][T13801] CPU: 0 PID: 13801 Comm: syz.2.2585 Not tainted syzkaller #0 [ 530.508790][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.518890][T13801] Call Trace: [ 530.522202][T13801] [ 530.525169][T13801] dump_stack_lvl+0x18c/0x250 [ 530.529919][T13801] ? show_regs_print_info+0x20/0x20 [ 530.535168][T13801] ? load_image+0x420/0x420 [ 530.539723][T13801] ? __lock_acquire+0x7d80/0x7d80 [ 530.544838][T13801] should_fail_ex+0x394/0x4c0 [ 530.549753][T13801] _copy_from_user+0x2f/0xe0 [ 530.554392][T13801] __copy_msghdr+0x388/0x560 [ 530.559035][T13801] ___sys_sendmsg+0x214/0x360 [ 530.563775][T13801] ? __sys_sendmsg+0x2b0/0x2b0 [ 530.568608][T13801] ? ktime_get+0x7f/0x280 [ 530.572987][T13801] ? trace_call_bpf+0xc3/0x6c0 [ 530.577816][T13801] __se_sys_sendmsg+0x1d0/0x2c0 [ 530.582718][T13801] ? perf_trace_preemptirq_template+0x269/0x330 [ 530.589018][T13801] ? __x64_sys_sendmsg+0x80/0x80 [ 530.594013][T13801] ? lockdep_hardirqs_on+0x98/0x150 [ 530.599305][T13801] do_syscall_64+0x55/0xb0 [ 530.603769][T13801] ? clear_bhb_loop+0x40/0x90 [ 530.608489][T13801] ? clear_bhb_loop+0x40/0x90 [ 530.613207][T13801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.619140][T13801] RIP: 0033:0x7f8a1f99e0d9 [ 530.623592][T13801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.643237][T13801] RSP: 002b:00007f8a2082a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.651695][T13801] RAX: ffffffffffffffda RBX: 00007f8a1fc25fa0 RCX: 00007f8a1f99e0d9 [ 530.659711][T13801] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000009 [ 530.667753][T13801] RBP: 00007f8a2082a090 R08: 0000000000000000 R09: 0000000000000000 [ 530.675761][T13801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.683748][T13801] R13: 00007f8a1fc26038 R14: 00007f8a1fc25fa0 R15: 00007ffd795fea78 [ 530.691761][T13801] [ 532.228922][T13817] netlink: 'syz.4.2590': attribute type 10 has an invalid length. [ 533.197030][T13827] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 533.478119][T13840] syzkaller0: entered promiscuous mode [ 533.491756][T13840] syzkaller0: entered allmulticast mode [ 534.685172][T13849] netlink: 'syz.4.2601': attribute type 11 has an invalid length. [ 534.912674][T13849] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2601'. [ 535.011178][T13855] syz.4.2601[13855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.011370][T13855] syz.4.2601[13855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.498497][ T5789] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 535.924263][T13867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2607'. [ 536.697578][T13872] netlink: 'syz.3.2609': attribute type 10 has an invalid length. [ 537.555745][ T5789] Bluetooth: hci3: command tx timeout [ 538.604135][T13904] netlink: 'syz.4.2621': attribute type 10 has an invalid length. [ 538.711713][T13908] FAULT_INJECTION: forcing a failure. [ 538.711713][T13908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 538.882162][T13908] CPU: 0 PID: 13908 Comm: syz.2.2620 Not tainted syzkaller #0 [ 538.889718][T13908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 538.899817][T13908] Call Trace: [ 538.903151][T13908] [ 538.906122][T13908] dump_stack_lvl+0x18c/0x250 [ 538.910864][T13908] ? show_regs_print_info+0x20/0x20 [ 538.916120][T13908] ? load_image+0x420/0x420 [ 538.920695][T13908] ? __lock_acquire+0x7d80/0x7d80 [ 538.925797][T13908] ? mark_lock+0x94/0x320 [ 538.930188][T13908] should_fail_ex+0x394/0x4c0 [ 538.934923][T13908] prepare_alloc_pages+0x1e1/0x5b0 [ 538.940088][T13908] __alloc_pages+0x134/0x460 [ 538.944721][T13908] ? zone_statistics+0x170/0x170 [ 538.949702][T13908] ? do_wp_page+0x733/0x34d0 [ 538.954342][T13908] ? do_wp_page+0xf17/0x34d0 [ 538.958967][T13908] ? __lock_acquire+0x7d80/0x7d80 [ 538.964056][T13908] __folio_alloc+0x10/0x20 [ 538.968591][T13908] vma_alloc_folio+0x474/0x8f0 [ 538.973398][T13908] do_wp_page+0x118d/0x34d0 [ 538.977970][T13908] ? folio_put+0xd0/0xd0 [ 538.982278][T13908] ? do_raw_spin_lock+0x11f/0x2b0 [ 538.987460][T13908] ? __rwlock_init+0x150/0x150 [ 538.992296][T13908] handle_mm_fault+0x1306/0x4a50 [ 538.997288][T13908] ? handle_mm_fault+0xe6/0x4a50 [ 539.002376][T13908] ? numa_migrate_prep+0x350/0x350 [ 539.007550][T13908] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 539.012889][T13908] do_user_addr_fault+0x736/0x12d0 [ 539.018080][T13908] exc_page_fault+0x64/0x100 [ 539.022723][T13908] asm_exc_page_fault+0x26/0x30 [ 539.027622][T13908] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 539.033487][T13908] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 539.053165][T13908] RSP: 0018:ffffc90010167af0 EFLAGS: 00050206 [ 539.059296][T13908] RAX: ffffffff8433a901 RBX: 00000000000009fd RCX: 0000000000000528 [ 539.067304][T13908] RDX: 0000000000000000 RSI: ffff888064a584d5 RDI: 0000200000005000 [ 539.075330][T13908] RBP: ffffc90010167d20 R08: ffff888064a589fc R09: 1ffff1100c94b13f [ 539.083367][T13908] R10: dffffc0000000000 R11: ffffed100c94b140 R12: 0000200000005528 [ 539.091397][T13908] R13: 00000000000009fd R14: 0000200000004b2b R15: ffff888064a58000 [ 539.099431][T13908] ? _copy_to_user+0x31/0xa0 [ 539.104082][T13908] _copy_to_user+0x85/0xa0 [ 539.109014][T13908] __htab_map_lookup_and_delete_batch+0x10c8/0x1400 [ 539.115709][T13908] ? __fget_files+0x28/0x460 [ 539.120368][T13908] ? jhash+0x740/0x740 [ 539.124503][T13908] ? __fdget+0x180/0x210 [ 539.128815][T13908] ? htab_map_lookup_and_delete_elem+0x40/0x40 [ 539.135024][T13908] bpf_map_do_batch+0x48c/0x600 [ 539.139932][T13908] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 539.145461][T13908] __sys_bpf+0x78c/0x890 [ 539.149762][T13908] ? bpf_link_show_fdinfo+0x390/0x390 [ 539.155211][T13908] ? lock_chain_count+0x20/0x20 [ 539.160191][T13908] __x64_sys_bpf+0x7c/0x90 [ 539.164672][T13908] do_syscall_64+0x55/0xb0 [ 539.169160][T13908] ? clear_bhb_loop+0x40/0x90 [ 539.173908][T13908] ? clear_bhb_loop+0x40/0x90 [ 539.178661][T13908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.184607][T13908] RIP: 0033:0x7f8a1f99e0d9 [ 539.189074][T13908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.208912][T13908] RSP: 002b:00007f8a20809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.217382][T13908] RAX: ffffffffffffffda RBX: 00007f8a1fc26090 RCX: 00007f8a1f99e0d9 [ 539.225407][T13908] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 539.233433][T13908] RBP: 00007f8a20809090 R08: 0000000000000000 R09: 0000000000000000 [ 539.241542][T13908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.249565][T13908] R13: 00007f8a1fc26128 R14: 00007f8a1fc26090 R15: 00007ffd795fea78 [ 539.257624][T13908] [ 540.040420][T13915] netlink: 'syz.0.2624': attribute type 10 has an invalid length. [ 540.082335][T13915] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.378499][T13922] FAULT_INJECTION: forcing a failure. [ 540.378499][T13922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.428421][T13922] CPU: 0 PID: 13922 Comm: syz.3.2625 Not tainted syzkaller #0 [ 540.435980][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.446090][T13922] Call Trace: [ 540.449419][T13922] [ 540.452389][T13922] dump_stack_lvl+0x18c/0x250 [ 540.457128][T13922] ? show_regs_print_info+0x20/0x20 [ 540.462388][T13922] ? load_image+0x420/0x420 [ 540.466951][T13922] ? __might_fault+0xaa/0x120 [ 540.471673][T13922] ? __lock_acquire+0x7d80/0x7d80 [ 540.476755][T13922] should_fail_ex+0x394/0x4c0 [ 540.481488][T13922] _copy_from_iter+0x1cd/0x1290 [ 540.486389][T13922] ? rcu_is_watching+0x15/0xb0 [ 540.491211][T13922] ? copyout_mc+0x70/0x70 [ 540.495588][T13922] ? __virt_addr_valid+0x10c/0x380 [ 540.500741][T13922] ? __virt_addr_valid+0x10c/0x380 [ 540.505944][T13922] ? __virt_addr_valid+0x10c/0x380 [ 540.511119][T13922] ? __check_object_size+0x4fc/0xa40 [ 540.516466][T13922] netlink_sendmsg+0x76b/0xbf0 [ 540.521291][T13922] ? netlink_getsockopt+0x590/0x590 [ 540.526545][T13922] ? apparmor_socket_sendmsg+0x8e/0x330 [ 540.532144][T13922] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 540.537475][T13922] ? security_socket_sendmsg+0x80/0xa0 [ 540.542970][T13922] ? netlink_getsockopt+0x590/0x590 [ 540.543937][T13919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.548200][T13922] ____sys_sendmsg+0x61b/0x980 [ 540.548233][T13922] ? __asan_memset+0x22/0x40 [ 540.548262][T13922] ? __sys_sendmsg_sock+0x30/0x30 [ 540.548283][T13922] ? __import_iovec+0x5f2/0x850 [ 540.548320][T13922] ? import_iovec+0x73/0xa0 [ 540.548352][T13922] ___sys_sendmsg+0x2a6/0x360 [ 540.548382][T13922] ? __sys_sendmsg+0x2b0/0x2b0 [ 540.548426][T13922] ? __lock_acquire+0x7d80/0x7d80 [ 540.548478][T13922] __se_sys_sendmsg+0x1d0/0x2c0 [ 540.548506][T13922] ? __x64_sys_sendmsg+0x80/0x80 [ 540.611818][T13922] ? lockdep_hardirqs_on+0x98/0x150 [ 540.617094][T13922] do_syscall_64+0x55/0xb0 [ 540.621560][T13922] ? clear_bhb_loop+0x40/0x90 [ 540.626276][T13922] ? clear_bhb_loop+0x40/0x90 [ 540.631001][T13922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.636926][T13922] RIP: 0033:0x7fd69a79e0d9 [ 540.641374][T13922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.661021][T13922] RSP: 002b:00007fd69b626028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.669470][T13922] RAX: ffffffffffffffda RBX: 00007fd69aa26090 RCX: 00007fd69a79e0d9 [ 540.677467][T13922] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 540.685479][T13922] RBP: 00007fd69b626090 R08: 0000000000000000 R09: 0000000000000000 [ 540.693578][T13922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.701598][T13922] R13: 00007fd69aa26128 R14: 00007fd69aa26090 R15: 00007ffdde53f398 [ 540.709617][T13922] [ 540.755879][T13926] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2628'. [ 541.114303][T13937] netlink: 1772 bytes leftover after parsing attributes in process `syz.4.2631'. [ 541.151034][T13937] netlink: 'syz.4.2631': attribute type 39 has an invalid length. [ 541.805203][T13933] delete_channel: no stack [ 544.570503][T14026] netlink: 'syz.2.2675': attribute type 10 has an invalid length. [ 546.141004][T14040] team0: Port device bond0 removed [ 546.183355][T14040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.255836][T14040] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 546.312301][T14040] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 546.341490][T14040] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 546.365643][T14040] bond0 (unregistering): Released all slaves [ 546.390535][T14046] netlink: 'syz.0.2682': attribute type 21 has an invalid length. [ 546.399551][T14046] netlink: 'syz.0.2682': attribute type 4 has an invalid length. [ 546.426750][T14043] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2681'. [ 546.531965][T14043] team0: Port device bond0 removed [ 546.580293][T14043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.633140][T14043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.683647][T14043] bond0 (unregistering): Released all slaves [ 546.819382][T14051] syzkaller0: entered promiscuous mode [ 546.827870][T14051] syzkaller0: entered allmulticast mode [ 547.244186][T14061] netlink: 'syz.4.2684': attribute type 10 has an invalid length. [ 547.254388][T14061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2684'. [ 547.265731][T14061] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 547.273564][T14061] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.300721][T14061] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 547.326477][T14065] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 550.415018][T14084] netlink: 'syz.0.2692': attribute type 10 has an invalid length. [ 550.612601][T14088] netlink: 'syz.4.2693': attribute type 8 has an invalid length. [ 550.640999][T14088] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2693'. [ 551.872464][T14117] netlink: 'syz.3.2703': attribute type 10 has an invalid length. [ 551.997581][T14120] FAULT_INJECTION: forcing a failure. [ 551.997581][T14120] name failslab, interval 1, probability 0, space 0, times 0 [ 552.015609][T14120] CPU: 1 PID: 14120 Comm: syz.4.2705 Not tainted syzkaller #0 [ 552.023119][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.033216][T14120] Call Trace: [ 552.036530][T14120] [ 552.039493][T14120] dump_stack_lvl+0x18c/0x250 [ 552.044211][T14120] ? show_regs_print_info+0x20/0x20 [ 552.049463][T14120] ? load_image+0x420/0x420 [ 552.054035][T14120] ? __asan_memset+0x22/0x40 [ 552.058677][T14120] should_fail_ex+0x394/0x4c0 [ 552.063398][T14120] should_failslab+0x9/0x20 [ 552.067958][T14120] slab_pre_alloc_hook+0x59/0x300 [ 552.073063][T14120] ? __debug_object_init+0xec/0x450 [ 552.078311][T14120] kmem_cache_alloc+0x5a/0x2c0 [ 552.083133][T14120] ? slab_build_skb+0x28/0x3e0 [ 552.087940][T14120] slab_build_skb+0x28/0x3e0 [ 552.092590][T14120] bpf_prog_test_run_skb+0x38f/0x18f0 [ 552.098018][T14120] ? __fget_files+0x28/0x460 [ 552.102661][T14120] ? __fget_files+0x3fc/0x460 [ 552.107401][T14120] ? cpu_online+0x60/0x60 [ 552.111781][T14120] bpf_prog_test_run+0x31f/0x390 [ 552.116870][T14120] __sys_bpf+0x49d/0x890 [ 552.121167][T14120] ? bpf_link_show_fdinfo+0x390/0x390 [ 552.126593][T14120] ? lock_chain_count+0x20/0x20 [ 552.131499][T14120] __x64_sys_bpf+0x7c/0x90 [ 552.135997][T14120] do_syscall_64+0x55/0xb0 [ 552.140457][T14120] ? clear_bhb_loop+0x40/0x90 [ 552.145169][T14120] ? clear_bhb_loop+0x40/0x90 [ 552.149891][T14120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.155824][T14120] RIP: 0033:0x7fb0ddf9e0d9 [ 552.160280][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.180017][T14120] RSP: 002b:00007fb0dee4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.188466][T14120] RAX: ffffffffffffffda RBX: 00007fb0de226090 RCX: 00007fb0ddf9e0d9 [ 552.196480][T14120] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 552.204492][T14120] RBP: 00007fb0dee4e090 R08: 0000000000000000 R09: 0000000000000000 [ 552.212509][T14120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.220515][T14120] R13: 00007fb0de226128 R14: 00007fb0de226090 R15: 00007ffcc2471848 [ 552.228534][T14120] [ 553.520836][T14141] netlink: 'syz.2.2712': attribute type 3 has an invalid length. [ 553.566198][T14141] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2712'. [ 554.307058][T14156] netlink: 'syz.2.2717': attribute type 10 has an invalid length. [ 555.593721][T14165] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2720'. [ 555.703384][T14165] netlink: 'syz.0.2720': attribute type 10 has an invalid length. [ 556.191027][T14165] team0: Device vxcan1 is of different type [ 556.494624][T14175] netlink: 'syz.4.2724': attribute type 20 has an invalid length. [ 556.661400][T14177] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2724'. [ 556.708555][T14177] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 557.308411][T14183] netlink: 'syz.0.2727': attribute type 2 has an invalid length. [ 557.319473][T14183] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2727'. [ 557.720744][T14193] netlink: 'syz.2.2728': attribute type 1 has an invalid length. [ 557.729730][T14193] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2728'. [ 558.074697][T14202] netlink: 'syz.3.2731': attribute type 10 has an invalid length. [ 560.467448][T14213] team0 (unregistering): Port device team_slave_0 removed [ 560.503047][T14213] team0 (unregistering): Port device team_slave_1 removed [ 560.528910][T14226] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2740'. [ 560.637648][T14226] FAULT_INJECTION: forcing a failure. [ 560.637648][T14226] name failslab, interval 1, probability 0, space 0, times 0 [ 560.714281][T14226] CPU: 1 PID: 14226 Comm: syz.4.2740 Not tainted syzkaller #0 [ 560.721819][T14226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 560.731926][T14226] Call Trace: [ 560.735254][T14226] [ 560.738222][T14226] dump_stack_lvl+0x18c/0x250 [ 560.742955][T14226] ? show_regs_print_info+0x20/0x20 [ 560.748206][T14226] ? load_image+0x420/0x420 [ 560.752772][T14226] ? __might_sleep+0xe0/0xe0 [ 560.757459][T14226] ? __lock_acquire+0x7d80/0x7d80 [ 560.762539][T14226] should_fail_ex+0x394/0x4c0 [ 560.767274][T14226] should_failslab+0x9/0x20 [ 560.771840][T14226] slab_pre_alloc_hook+0x59/0x300 [ 560.776931][T14226] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 560.782945][T14226] ? rtnl_newlink+0x10d/0x2170 [ 560.787744][T14226] __kmem_cache_alloc_node+0x53/0x250 [ 560.793182][T14226] ? rtnl_newlink+0x10d/0x2170 [ 560.797999][T14226] kmalloc_trace+0x2a/0xe0 [ 560.802463][T14226] rtnl_newlink+0x10d/0x2170 [ 560.807108][T14226] ? lock_acquire+0x208/0x420 [ 560.811836][T14226] ? verify_lock_unused+0x140/0x140 [ 560.817096][T14226] ? __mutex_trylock_common+0x160/0x270 [ 560.822696][T14226] ? rtnl_setlink+0x4e0/0x4e0 [ 560.827431][T14226] ? trace_raw_output_contention_end+0xd0/0xd0 [ 560.833635][T14226] ? rcu_is_watching+0x15/0xb0 [ 560.838456][T14226] ? trace_contention_end+0x39/0xe0 [ 560.843688][T14226] ? __mutex_lock+0x30d/0xc80 [ 560.848412][T14226] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 560.853566][T14226] ? mutex_lock_nested+0x20/0x20 [ 560.858562][T14226] ? rtnl_setlink+0x4e0/0x4e0 [ 560.863280][T14226] rtnetlink_rcv_msg+0x843/0xf90 [ 560.868263][T14226] ? rtnetlink_rcv_msg+0x220/0xf90 [ 560.873415][T14226] ? rtnetlink_bind+0x80/0x80 [ 560.878135][T14226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 560.884349][T14226] ? lockdep_hardirqs_on+0x98/0x150 [ 560.889608][T14226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 560.895805][T14226] ? __dev_queue_xmit+0x275/0x3630 [ 560.900972][T14226] ? __local_bh_enable_ip+0x142/0x1c0 [ 560.906386][T14226] ? _local_bh_enable+0xa0/0xa0 [ 560.911281][T14226] ? __dev_queue_xmit+0x275/0x3630 [ 560.916432][T14226] ? __dev_queue_xmit+0x1bc2/0x3630 [ 560.921675][T14226] ? __dev_queue_xmit+0x275/0x3630 [ 560.926849][T14226] ? ref_tracker_free+0x686/0x830 [ 560.931915][T14226] netlink_rcv_skb+0x235/0x4c0 [ 560.936740][T14226] ? rtnetlink_bind+0x80/0x80 [ 560.941463][T14226] ? netlink_ack+0x1160/0x1160 [ 560.946278][T14226] ? __lock_acquire+0x7d80/0x7d80 [ 560.951347][T14226] ? netlink_deliver_tap+0x2e/0x1b0 [ 560.956588][T14226] netlink_unicast+0x7b1/0x930 [ 560.961416][T14226] netlink_sendmsg+0x8d0/0xbf0 [ 560.966224][T14226] ? netlink_getsockopt+0x590/0x590 [ 560.971468][T14226] ? apparmor_socket_sendmsg+0x8e/0x330 [ 560.977051][T14226] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 560.982369][T14226] ? security_socket_sendmsg+0x80/0xa0 [ 560.987858][T14226] ? netlink_getsockopt+0x590/0x590 [ 560.993097][T14226] ____sys_sendmsg+0x61b/0x980 [ 560.997909][T14226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.004109][T14226] ? __asan_memset+0x22/0x40 [ 561.008755][T14226] ? __sys_sendmsg_sock+0x30/0x30 [ 561.013843][T14226] ? __import_iovec+0x5f2/0x850 [ 561.018752][T14226] ? import_iovec+0x73/0xa0 [ 561.023306][T14226] ___sys_sendmsg+0x2a6/0x360 [ 561.028027][T14226] ? __sys_sendmsg+0x2b0/0x2b0 [ 561.032882][T14226] __se_sys_sendmsg+0x1d0/0x2c0 [ 561.037772][T14226] ? perf_trace_preemptirq_template+0x269/0x330 [ 561.044060][T14226] ? __x64_sys_sendmsg+0x80/0x80 [ 561.049046][T14226] ? lockdep_hardirqs_on+0x98/0x150 [ 561.054298][T14226] do_syscall_64+0x55/0xb0 [ 561.058750][T14226] ? clear_bhb_loop+0x40/0x90 [ 561.063475][T14226] ? clear_bhb_loop+0x40/0x90 [ 561.068188][T14226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.074130][T14226] RIP: 0033:0x7fb0ddf9e0d9 [ 561.078588][T14226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.098233][T14226] RSP: 002b:00007fb0dee6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.106688][T14226] RAX: ffffffffffffffda RBX: 00007fb0de225fa0 RCX: 00007fb0ddf9e0d9 [ 561.114692][T14226] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 000000000000000b [ 561.122689][T14226] RBP: 00007fb0dee6f090 R08: 0000000000000000 R09: 0000000000000000 [ 561.130695][T14226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.138699][T14226] R13: 00007fb0de226038 R14: 00007fb0de225fa0 R15: 00007ffcc2471848 [ 561.146746][T14226] [ 561.187448][T14231] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 561.195364][T14231] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2741'. [ 562.988376][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.994923][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.016984][T14273] netlink: 'syz.4.2757': attribute type 10 has an invalid length. [ 564.751260][T14286] netlink: 'syz.0.2762': attribute type 21 has an invalid length. [ 566.015173][T14295] netlink: 'syz.3.2765': attribute type 3 has an invalid length. [ 566.027710][T14295] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2765'. [ 566.073121][T14299] netlink: 'syz.4.2766': attribute type 3 has an invalid length. [ 566.146280][T14301] netlink: 'syz.3.2768': attribute type 39 has an invalid length. [ 566.173218][T14299] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.2766'. [ 566.184902][T14301] netlink: 'syz.3.2768': attribute type 27 has an invalid length. [ 567.056502][T14319] netlink: 'syz.0.2771': attribute type 16 has an invalid length. [ 567.075729][T14319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2771'. [ 567.106463][T14319] veth1_macvtap: entered allmulticast mode [ 567.292277][T14324] netlink: 'syz.3.2774': attribute type 10 has an invalid length. [ 570.178408][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 570.404402][T14363] netlink: 'syz.3.2787': attribute type 27 has an invalid length. [ 570.572354][T14370] netlink: 'syz.3.2790': attribute type 10 has an invalid length. [ 571.070416][T14382] netlink: 'syz.4.2793': attribute type 10 has an invalid length. [ 571.078801][T14382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2793'. [ 571.089611][T14382] bridge0: port 2(team0) entered blocking state [ 571.096214][T14382] bridge0: port 2(team0) entered disabled state [ 571.103587][T14382] team0: entered allmulticast mode [ 571.124211][T14382] team_slave_0: entered allmulticast mode [ 571.132524][T14382] team_slave_1: entered allmulticast mode [ 571.146542][T14382] team0: entered promiscuous mode [ 571.153715][T14382] team_slave_0: entered promiscuous mode [ 571.163821][T14382] team_slave_1: entered promiscuous mode [ 571.176806][T14382] bridge0: port 2(team0) entered blocking state [ 571.183423][T14382] bridge0: port 2(team0) entered forwarding state [ 572.216202][T14389] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2795'. [ 572.234873][T14390] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2795'. [ 572.257879][T14389] openvswitch: netlink: IP tunnel dst address not specified [ 572.278414][T14390] openvswitch: netlink: IP tunnel dst address not specified [ 573.049322][T14406] FAULT_INJECTION: forcing a failure. [ 573.049322][T14406] name failslab, interval 1, probability 0, space 0, times 0 [ 573.078513][T14406] CPU: 1 PID: 14406 Comm: syz.2.2801 Not tainted syzkaller #0 [ 573.086048][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.096141][T14406] Call Trace: [ 573.099454][T14406] [ 573.102416][T14406] dump_stack_lvl+0x18c/0x250 [ 573.107163][T14406] ? show_regs_print_info+0x20/0x20 [ 573.112429][T14406] ? load_image+0x420/0x420 [ 573.116963][T14406] ? __might_sleep+0xe0/0xe0 [ 573.121603][T14406] ? __lock_acquire+0x7d80/0x7d80 [ 573.126671][T14406] should_fail_ex+0x394/0x4c0 [ 573.131491][T14406] should_failslab+0x9/0x20 [ 573.136038][T14406] slab_pre_alloc_hook+0x59/0x300 [ 573.141109][T14406] ? rtnl_newlink+0x10d/0x2170 [ 573.145898][T14406] __kmem_cache_alloc_node+0x53/0x250 [ 573.151301][T14406] ? rtnl_newlink+0x10d/0x2170 [ 573.156090][T14406] kmalloc_trace+0x2a/0xe0 [ 573.160574][T14406] rtnl_newlink+0x10d/0x2170 [ 573.165205][T14406] ? arch_stack_walk+0x160/0x190 [ 573.170188][T14406] ? verify_lock_unused+0x140/0x140 [ 573.175418][T14406] ? __mutex_trylock_common+0x160/0x270 [ 573.180985][T14406] ? rtnl_setlink+0x4e0/0x4e0 [ 573.185705][T14406] ? trace_raw_output_contention_end+0xd0/0xd0 [ 573.191900][T14406] ? rcu_is_watching+0x15/0xb0 [ 573.196703][T14406] ? trace_contention_end+0x39/0xe0 [ 573.201932][T14406] ? __mutex_lock+0x30d/0xc80 [ 573.206672][T14406] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 573.211814][T14406] ? mutex_lock_nested+0x20/0x20 [ 573.216793][T14406] ? rtnl_setlink+0x4e0/0x4e0 [ 573.221497][T14406] rtnetlink_rcv_msg+0x843/0xf90 [ 573.226477][T14406] ? rtnetlink_rcv_msg+0x220/0xf90 [ 573.231631][T14406] ? rtnetlink_bind+0x80/0x80 [ 573.236337][T14406] ? perf_trace_preemptirq_template+0xac/0x330 [ 573.242526][T14406] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 573.248543][T14406] ? lock_chain_count+0x20/0x20 [ 573.253423][T14406] ? __local_bh_enable_ip+0x13a/0x1c0 [ 573.258827][T14406] ? lockdep_hardirqs_on+0x98/0x150 [ 573.264116][T14406] ? __local_bh_enable_ip+0x13a/0x1c0 [ 573.269528][T14406] ? _local_bh_enable+0xa0/0xa0 [ 573.274414][T14406] ? __dev_queue_xmit+0x275/0x3630 [ 573.279567][T14406] ? __dev_queue_xmit+0x1bc2/0x3630 [ 573.284821][T14406] ? __dev_queue_xmit+0x275/0x3630 [ 573.289979][T14406] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.296167][T14406] ? ref_tracker_free+0x686/0x830 [ 573.301212][T14406] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.307398][T14406] netlink_rcv_skb+0x235/0x4c0 [ 573.312215][T14406] ? rtnetlink_bind+0x80/0x80 [ 573.316915][T14406] ? netlink_ack+0x1160/0x1160 [ 573.321714][T14406] ? __lock_acquire+0x7d80/0x7d80 [ 573.326770][T14406] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.332018][T14406] netlink_unicast+0x7b1/0x930 [ 573.336858][T14406] netlink_sendmsg+0x8d0/0xbf0 [ 573.341660][T14406] ? netlink_getsockopt+0x590/0x590 [ 573.346896][T14406] ? apparmor_socket_sendmsg+0x8e/0x330 [ 573.352462][T14406] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 573.357769][T14406] ? security_socket_sendmsg+0x80/0xa0 [ 573.363262][T14406] ? netlink_getsockopt+0x590/0x590 [ 573.368527][T14406] ____sys_sendmsg+0x61b/0x980 [ 573.373335][T14406] ? __asan_memset+0x22/0x40 [ 573.377956][T14406] ? __sys_sendmsg_sock+0x30/0x30 [ 573.383012][T14406] ? __import_iovec+0x5f2/0x850 [ 573.387896][T14406] ? import_iovec+0x73/0xa0 [ 573.392453][T14406] ___sys_sendmsg+0x2a6/0x360 [ 573.397183][T14406] ? __sys_sendmsg+0x2b0/0x2b0 [ 573.401994][T14406] ? ktime_get+0x7f/0x280 [ 573.406378][T14406] __se_sys_sendmsg+0x1d0/0x2c0 [ 573.411258][T14406] ? __x64_sys_sendmsg+0x80/0x80 [ 573.416241][T14406] ? lockdep_hardirqs_on+0x98/0x150 [ 573.421499][T14406] do_syscall_64+0x55/0xb0 [ 573.425939][T14406] ? clear_bhb_loop+0x40/0x90 [ 573.430657][T14406] ? clear_bhb_loop+0x40/0x90 [ 573.435367][T14406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.441280][T14406] RIP: 0033:0x7f8a1f99e0d9 [ 573.445721][T14406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.465702][T14406] RSP: 002b:00007f8a2082a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.474175][T14406] RAX: ffffffffffffffda RBX: 00007f8a1fc25fa0 RCX: 00007f8a1f99e0d9 [ 573.482201][T14406] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000d [ 573.490230][T14406] RBP: 00007f8a2082a090 R08: 0000000000000000 R09: 0000000000000000 [ 573.498256][T14406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.506267][T14406] R13: 00007f8a1fc26038 R14: 00007f8a1fc25fa0 R15: 00007ffd795fea78 [ 573.514401][T14406] [ 573.591565][T14410] netlink: 'syz.0.2802': attribute type 1 has an invalid length. [ 573.599603][T14410] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2802'. [ 573.731807][T14413] netlink: 'syz.0.2802': attribute type 25 has an invalid length. [ 573.778439][T14413] netlink: 'syz.0.2802': attribute type 10 has an invalid length. [ 574.228522][T14424] netlink: 'syz.4.2806': attribute type 10 has an invalid length. [ 575.274385][T14432] netlink: 'syz.2.2808': attribute type 1 has an invalid length. [ 575.318617][T14432] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2808'. [ 575.394125][T14432] FAULT_INJECTION: forcing a failure. [ 575.394125][T14432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.497451][T14432] CPU: 1 PID: 14432 Comm: syz.2.2808 Not tainted syzkaller #0 [ 575.505000][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.515149][T14432] Call Trace: [ 575.518490][T14432] [ 575.521472][T14432] dump_stack_lvl+0x18c/0x250 [ 575.526214][T14432] ? show_regs_print_info+0x20/0x20 [ 575.531498][T14432] ? load_image+0x420/0x420 [ 575.536078][T14432] ? __might_fault+0xaa/0x120 [ 575.540848][T14432] ? __lock_acquire+0x7d80/0x7d80 [ 575.545948][T14432] should_fail_ex+0x394/0x4c0 [ 575.550693][T14432] _copy_from_iter+0x1cd/0x1290 [ 575.555602][T14432] ? rcu_is_watching+0x15/0xb0 [ 575.560420][T14432] ? copyout_mc+0x70/0x70 [ 575.564795][T14432] ? __virt_addr_valid+0x10c/0x380 [ 575.569962][T14432] ? __virt_addr_valid+0x10c/0x380 [ 575.575126][T14432] ? __virt_addr_valid+0x10c/0x380 [ 575.580297][T14432] ? __check_object_size+0x4fc/0xa40 [ 575.585645][T14432] netlink_sendmsg+0x76b/0xbf0 [ 575.590479][T14432] ? netlink_getsockopt+0x590/0x590 [ 575.595743][T14432] ? apparmor_socket_sendmsg+0x8e/0x330 [ 575.601361][T14432] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 575.606717][T14432] ? security_socket_sendmsg+0x80/0xa0 [ 575.612221][T14432] ? netlink_getsockopt+0x590/0x590 [ 575.617489][T14432] ____sys_sendmsg+0x61b/0x980 [ 575.622344][T14432] ? __asan_memset+0x22/0x40 [ 575.626995][T14432] ? __sys_sendmsg_sock+0x30/0x30 [ 575.632055][T14432] ? __import_iovec+0x5f2/0x850 [ 575.636948][T14432] ? import_iovec+0x73/0xa0 [ 575.641498][T14432] ___sys_sendmsg+0x2a6/0x360 [ 575.646213][T14432] ? get_pid_task+0x20/0x1e0 [ 575.650872][T14432] ? __sys_sendmsg+0x2b0/0x2b0 [ 575.655700][T14432] ? __lock_acquire+0x7d80/0x7d80 [ 575.660808][T14432] __se_sys_sendmsg+0x1d0/0x2c0 [ 575.665706][T14432] ? __x64_sys_sendmsg+0x80/0x80 [ 575.670713][T14432] ? lockdep_hardirqs_on+0x98/0x150 [ 575.675966][T14432] do_syscall_64+0x55/0xb0 [ 575.680419][T14432] ? clear_bhb_loop+0x40/0x90 [ 575.685128][T14432] ? clear_bhb_loop+0x40/0x90 [ 575.689848][T14432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.695794][T14432] RIP: 0033:0x7f8a1f99e0d9 [ 575.700251][T14432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.719906][T14432] RSP: 002b:00007f8a2082a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.728378][T14432] RAX: ffffffffffffffda RBX: 00007f8a1fc25fa0 RCX: 00007f8a1f99e0d9 [ 575.736395][T14432] RDX: 0000000000098010 RSI: 0000200000000240 RDI: 000000000000000c [ 575.744401][T14432] RBP: 00007f8a2082a090 R08: 0000000000000000 R09: 0000000000000000 [ 575.752405][T14432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.760400][T14432] R13: 00007f8a1fc26038 R14: 00007f8a1fc25fa0 R15: 00007ffd795fea78 [ 575.768434][T14432] [ 576.879229][T14457] FAULT_INJECTION: forcing a failure. [ 576.879229][T14457] name failslab, interval 1, probability 0, space 0, times 0 [ 576.923287][T14457] CPU: 0 PID: 14457 Comm: syz.0.2816 Not tainted syzkaller #0 [ 576.930901][T14457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.940999][T14457] Call Trace: [ 576.944318][T14457] [ 576.947279][T14457] dump_stack_lvl+0x18c/0x250 [ 576.952007][T14457] ? show_regs_print_info+0x20/0x20 [ 576.957252][T14457] ? load_image+0x420/0x420 [ 576.961817][T14457] ? __might_sleep+0xe0/0xe0 [ 576.966471][T14457] ? __lock_acquire+0x7d80/0x7d80 [ 576.971550][T14457] should_fail_ex+0x394/0x4c0 [ 576.976283][T14457] should_failslab+0x9/0x20 [ 576.980871][T14457] slab_pre_alloc_hook+0x59/0x300 [ 576.985958][T14457] kmem_cache_alloc_node+0x5e/0x310 [ 576.991213][T14457] ? lock_chain_count+0x20/0x20 [ 576.996092][T14457] ? dup_task_struct+0x57/0x800 [ 577.001061][T14457] dup_task_struct+0x57/0x800 [ 577.005770][T14457] ? lockdep_hardirqs_on+0x98/0x150 [ 577.011004][T14457] copy_process+0x5a6/0x3da0 [ 577.015620][T14457] ? __might_fault+0xaa/0x120 [ 577.020329][T14457] ? get_pid_task+0x20/0x1e0 [ 577.024948][T14457] ? __pidfd_prepare+0x140/0x140 [ 577.029928][T14457] kernel_clone+0x24b/0x8a0 [ 577.034469][T14457] ? create_io_thread+0x190/0x190 [ 577.039537][T14457] __x64_sys_clone+0x1b7/0x230 [ 577.044330][T14457] ? __fget_files+0x3fc/0x460 [ 577.049038][T14457] ? __ia32_sys_vfork+0x140/0x140 [ 577.054106][T14457] ? lock_chain_count+0x20/0x20 [ 577.058992][T14457] ? lockdep_hardirqs_on+0x98/0x150 [ 577.064237][T14457] do_syscall_64+0x55/0xb0 [ 577.068768][T14457] ? clear_bhb_loop+0x40/0x90 [ 577.073473][T14457] ? clear_bhb_loop+0x40/0x90 [ 577.078188][T14457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.084121][T14457] RIP: 0033:0x7fce5cf9e0d9 [ 577.088563][T14457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.108194][T14457] RSP: 002b:00007fce5de44fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 577.116631][T14457] RAX: ffffffffffffffda RBX: 00007fce5d225fa0 RCX: 00007fce5cf9e0d9 [ 577.124626][T14457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.132618][T14457] RBP: 00007fce5de45090 R08: 0000000000000000 R09: 0000000000000000 [ 577.140639][T14457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.148634][T14457] R13: 00007fce5d226038 R14: 00007fce5d225fa0 R15: 00007fffaed9f4e8 [ 577.156636][T14457] [ 577.434332][T14471] netlink: 'syz.4.2818': attribute type 10 has an invalid length. [ 577.926213][T14483] netlink: 'syz.0.2820': attribute type 3 has an invalid length. [ 577.948291][T14483] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2820'. [ 578.595821][T14497] netlink: 'syz.3.2828': attribute type 29 has an invalid length. [ 578.633474][T14497] netlink: 'syz.3.2828': attribute type 29 has an invalid length. [ 578.650179][T14497] netlink: 'syz.3.2828': attribute type 29 has an invalid length. [ 580.048472][T14515] netlink: 'syz.0.2834': attribute type 10 has an invalid length. [ 581.068948][T14527] netlink: 'syz.0.2838': attribute type 10 has an invalid length. [ 581.132835][T14527] team0: Port device wlan1 added [ 581.383769][T14537] FAULT_INJECTION: forcing a failure. [ 581.383769][T14537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 581.397929][T14537] CPU: 0 PID: 14537 Comm: syz.3.2842 Not tainted syzkaller #0 [ 581.405438][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.415534][T14537] Call Trace: [ 581.418905][T14537] [ 581.421875][T14537] dump_stack_lvl+0x18c/0x250 [ 581.426626][T14537] ? show_regs_print_info+0x20/0x20 [ 581.431861][T14537] ? load_image+0x420/0x420 [ 581.436430][T14537] ? __lock_acquire+0x7d80/0x7d80 [ 581.441506][T14537] should_fail_ex+0x394/0x4c0 [ 581.446271][T14537] prepare_alloc_pages+0x1e1/0x5b0 [ 581.451432][T14537] __alloc_pages+0x134/0x460 [ 581.456090][T14537] ? zone_statistics+0x170/0x170 [ 581.461086][T14537] ? alloc_pages+0x4e1/0x740 [ 581.465719][T14537] ? do_raw_spin_unlock+0x121/0x230 [ 581.470977][T14537] __get_free_pages+0xc/0x30 [ 581.475603][T14537] kasan_populate_vmalloc_pte+0x35/0x100 [ 581.481300][T14537] __apply_to_page_range+0x860/0xdd0 [ 581.486719][T14537] ? kasan_populate_vmalloc+0x70/0x70 [ 581.492128][T14537] ? apply_to_page_range+0x50/0x50 [ 581.497280][T14537] ? do_raw_spin_unlock+0x121/0x230 [ 581.502686][T14537] alloc_vmap_area+0x1d26/0x1e50 [ 581.507680][T14537] ? vm_map_ram+0xcf0/0xcf0 [ 581.512212][T14537] ? rcu_is_watching+0x15/0xb0 [ 581.517020][T14537] __get_vm_area_node+0x162/0x370 [ 581.522102][T14537] __vmalloc_node_range+0x36f/0x1320 [ 581.527422][T14537] ? array_map_alloc+0x28a/0x700 [ 581.532395][T14537] ? aa_get_newest_label+0xfd/0x5c0 [ 581.537637][T14537] ? end_current_label_crit_section+0x170/0x170 [ 581.543905][T14537] ? free_vm_area+0x50/0x50 [ 581.548443][T14537] ? apparmor_capable+0x137/0x1a0 [ 581.553501][T14537] ? bpf_lsm_capable+0x9/0x10 [ 581.558221][T14537] bpf_map_area_alloc+0xf1/0x110 [ 581.563204][T14537] ? array_map_alloc+0x28a/0x700 [ 581.568233][T14537] array_map_alloc+0x28a/0x700 [ 581.573029][T14537] prog_array_map_alloc+0x17a/0x200 [ 581.578261][T14537] map_create+0x877/0x12f0 [ 581.582710][T14537] __sys_bpf+0x651/0x890 [ 581.586975][T14537] ? bpf_link_show_fdinfo+0x390/0x390 [ 581.592388][T14537] ? lock_chain_count+0x20/0x20 [ 581.597300][T14537] __x64_sys_bpf+0x7c/0x90 [ 581.601743][T14537] do_syscall_64+0x55/0xb0 [ 581.606187][T14537] ? clear_bhb_loop+0x40/0x90 [ 581.610902][T14537] ? clear_bhb_loop+0x40/0x90 [ 581.615603][T14537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.621518][T14537] RIP: 0033:0x7fd69a79e0d9 [ 581.625975][T14537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.645726][T14537] RSP: 002b:00007fd69b647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 581.654158][T14537] RAX: ffffffffffffffda RBX: 00007fd69aa25fa0 RCX: 00007fd69a79e0d9 [ 581.662159][T14537] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000 [ 581.670212][T14537] RBP: 00007fd69b647090 R08: 0000000000000000 R09: 0000000000000000 [ 581.678202][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.686196][T14537] R13: 00007fd69aa26038 R14: 00007fd69aa25fa0 R15: 00007ffdde53f398 [ 581.694334][T14537] [ 581.828669][T14544] netlink: 'syz.4.2844': attribute type 3 has an invalid length. [ 581.836854][T14544] netlink: 'syz.4.2844': attribute type 4 has an invalid length. [ 581.847909][T14544] netlink: 'syz.4.2844': attribute type 7 has an invalid length. [ 581.856188][T14544] netlink: 'syz.4.2844': attribute type 8 has an invalid length. [ 581.896416][T14544] netlink: 'syz.4.2844': attribute type 7 has an invalid length. [ 581.911137][T14544] netlink: 198048 bytes leftover after parsing attributes in process `syz.4.2844'. [ 582.148536][T14549] netlink: 'syz.2.2846': attribute type 10 has an invalid length. [ 583.278583][T14567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2850'. [ 583.308469][T14567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2850'. [ 583.398392][T14563] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2850'. [ 584.127643][T14586] validate_nla: 2 callbacks suppressed [ 584.127679][T14586] netlink: 'syz.4.2860': attribute type 10 has an invalid length. [ 584.595175][T14599] netlink: 'syz.0.2864': attribute type 10 has an invalid length. [ 584.614726][T14599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2864'. [ 584.625675][T14599] team0: entered promiscuous mode [ 584.638430][T14599] team_slave_0: entered promiscuous mode [ 584.652340][T14599] team_slave_1: entered promiscuous mode [ 584.662500][T14599] bond0: entered promiscuous mode [ 584.667733][T14599] bond_slave_0: entered promiscuous mode [ 584.676007][T14599] bond_slave_1: entered promiscuous mode [ 584.687356][T14599] veth1_to_bridge: entered promiscuous mode [ 584.696316][T14599] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 584.716875][T14599] team0: entered allmulticast mode [ 584.729888][T14599] team_slave_0: entered allmulticast mode [ 584.746118][T14599] team_slave_1: entered allmulticast mode [ 584.755792][T14599] bond0: entered allmulticast mode [ 584.765318][T14599] bond_slave_0: entered allmulticast mode [ 584.775040][T14599] bond_slave_1: entered allmulticast mode [ 584.792198][T14599] veth1_to_bridge: entered allmulticast mode [ 584.800654][T14599] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 584.817393][T14599] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.839414][T14599] bridge0: port 3(team0) entered blocking state [ 584.848020][T14599] bridge0: port 3(team0) entered disabled state [ 584.876046][T14599] bridge0: port 3(team0) entered blocking state [ 584.882576][T14599] bridge0: port 3(team0) entered forwarding state [ 585.202445][T14601] bridge_slave_1: left allmulticast mode [ 585.222960][T14601] bridge_slave_1: left promiscuous mode [ 585.236468][T14601] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.549315][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 585.670957][T14601] bridge_slave_0: left allmulticast mode [ 585.676784][T14601] bridge_slave_0: left promiscuous mode [ 585.695924][T14601] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.342703][T14648] netlink: 'syz.2.2878': attribute type 10 has an invalid length. [ 587.536869][ T6404] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 588.879161][T14659] FAULT_INJECTION: forcing a failure. [ 588.879161][T14659] name failslab, interval 1, probability 0, space 0, times 0 [ 588.978644][T14659] CPU: 1 PID: 14659 Comm: syz.4.2881 Not tainted syzkaller #0 [ 588.986200][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.996302][T14659] Call Trace: [ 588.999623][T14659] [ 589.002595][T14659] dump_stack_lvl+0x18c/0x250 [ 589.007333][T14659] ? show_regs_print_info+0x20/0x20 [ 589.012596][T14659] ? load_image+0x420/0x420 [ 589.017155][T14659] ? __might_sleep+0xe0/0xe0 [ 589.021797][T14659] ? __lock_acquire+0x7d80/0x7d80 [ 589.026875][T14659] should_fail_ex+0x394/0x4c0 [ 589.031616][T14659] should_failslab+0x9/0x20 [ 589.036186][T14659] slab_pre_alloc_hook+0x59/0x300 [ 589.041277][T14659] kmem_cache_alloc+0x5a/0x2c0 [ 589.046127][T14659] ? security_file_alloc+0x34/0x120 [ 589.051407][T14659] security_file_alloc+0x34/0x120 [ 589.056499][T14659] init_file+0x94/0x1f0 [ 589.060711][T14659] alloc_empty_file+0xb7/0x1d0 [ 589.065539][T14659] alloc_file+0x5b/0x600 [ 589.069859][T14659] alloc_file_pseudo+0x184/0x210 [ 589.074962][T14659] ? fput+0x1a0/0x1a0 [ 589.078998][T14659] ? _raw_spin_unlock+0x28/0x40 [ 589.083918][T14659] anon_inode_getfd+0xca/0x1c0 [ 589.088756][T14659] btf_new_fd+0x848/0x9e0 [ 589.093154][T14659] ? bpf_btf_show_fdinfo+0x80/0x80 [ 589.098324][T14659] ? capable+0x88/0xe0 [ 589.102455][T14659] __sys_bpf+0x670/0x890 [ 589.106750][T14659] ? bpf_link_show_fdinfo+0x390/0x390 [ 589.112181][T14659] ? lock_chain_count+0x20/0x20 [ 589.117096][T14659] __x64_sys_bpf+0x7c/0x90 [ 589.121573][T14659] do_syscall_64+0x55/0xb0 [ 589.126047][T14659] ? clear_bhb_loop+0x40/0x90 [ 589.130802][T14659] ? clear_bhb_loop+0x40/0x90 [ 589.135533][T14659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.141578][T14659] RIP: 0033:0x7fb0ddf9e0d9 [ 589.146045][T14659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.165792][T14659] RSP: 002b:00007fb0dee6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.174257][T14659] RAX: ffffffffffffffda RBX: 00007fb0de225fa0 RCX: 00007fb0ddf9e0d9 [ 589.182272][T14659] RDX: 0000000000000028 RSI: 0000200000004680 RDI: 0000000000000012 [ 589.190320][T14659] RBP: 00007fb0dee6f090 R08: 0000000000000000 R09: 0000000000000000 [ 589.198335][T14659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.206438][T14659] R13: 00007fb0de226038 R14: 00007fb0de225fa0 R15: 00007ffcc2471848 [ 589.214478][T14659] [ 589.802650][T14671] netlink: 'syz.0.2886': attribute type 1 has an invalid length. [ 589.841664][T14671] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2886'. [ 591.587283][T14692] netlink: 'syz.4.2893': attribute type 10 has an invalid length. [ 593.611482][T14704] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 593.645561][T14704] syzkaller1: linktype set to 769 [ 593.697872][T14704] netlink: 'syz.0.2898': attribute type 3 has an invalid length. [ 599.194336][T14704] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2898'. [ 603.950741][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.963877][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.976655][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.989557][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.002369][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.015081][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.027917][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.041525][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.054302][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.067125][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.961408][ C0] net_ratelimit: 1131 callbacks suppressed [ 608.961450][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.991445][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.011293][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.030925][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.050204][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.071173][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.090665][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.114619][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.137496][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.165501][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.969730][ C0] net_ratelimit: 531 callbacks suppressed [ 613.969768][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.995257][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.016102][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.037794][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.060101][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.081763][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.103086][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.123318][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.144244][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.170724][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.978509][ C0] net_ratelimit: 880 callbacks suppressed [ 618.978548][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 619.000531][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.017728][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 619.034193][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.053351][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 619.069835][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.088161][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 619.105221][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.123201][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 619.139260][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.989722][ C0] net_ratelimit: 835 callbacks suppressed [ 623.989760][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.013934][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 624.029416][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.048386][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 624.063654][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.080753][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 624.096308][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.113587][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 624.129614][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.148033][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 629.001765][ C0] net_ratelimit: 889 callbacks suppressed [ 629.001813][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 629.023112][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.039649][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 629.055057][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.073191][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 629.088270][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.106162][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 629.120711][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.137748][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 629.153159][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.008369][ C0] net_ratelimit: 922 callbacks suppressed [ 634.008412][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 634.030007][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.046703][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 634.062236][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.078530][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 634.094950][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.112667][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 634.128487][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.146978][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 634.163295][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.022866][ C0] net_ratelimit: 913 callbacks suppressed [ 639.022903][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.045868][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 639.061593][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.078883][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 639.094461][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.111168][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 639.126668][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.143466][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 639.158491][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.175696][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 644.030253][ C0] net_ratelimit: 937 callbacks suppressed [ 644.030298][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 644.053006][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.070209][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 644.086193][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.103637][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 644.118159][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.136031][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 644.151065][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.168169][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 644.183839][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.709212][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 648.848814][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 648.866774][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.039428][ C0] net_ratelimit: 969 callbacks suppressed [ 649.039464][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.063687][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 649.078904][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.099588][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 649.115194][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.132343][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 649.147777][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.165958][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 649.181561][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.200194][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 654.051807][ C0] net_ratelimit: 972 callbacks suppressed [ 654.051871][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.076064][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 654.092096][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.112826][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 654.128139][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.146251][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 654.161183][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.177714][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 654.194222][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.211498][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 659.060313][ C0] net_ratelimit: 933 callbacks suppressed [ 659.060350][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 659.081211][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.098145][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 659.113964][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.130502][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 659.148202][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.166018][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 659.181675][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.198204][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 659.213783][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.068544][ C0] net_ratelimit: 932 callbacks suppressed [ 664.068581][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 664.089540][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.106761][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 664.122152][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.139400][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 664.155555][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.174091][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 664.190833][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.207466][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 664.222638][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.078639][ C0] net_ratelimit: 821 callbacks suppressed [ 669.078673][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.102777][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 669.118593][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.137109][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 669.153161][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.170243][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 669.185462][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.205264][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 669.222587][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.239193][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 674.092228][ C0] net_ratelimit: 842 callbacks suppressed [ 674.092266][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.115879][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 674.131075][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.149747][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 674.166401][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.184723][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 674.200585][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.218550][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 674.237657][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.254622][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 679.102392][ C0] net_ratelimit: 874 callbacks suppressed [ 679.102428][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.126602][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 679.142431][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.159236][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 679.176246][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.194948][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 679.209430][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.226515][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 679.243267][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.261440][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 684.110444][ C0] net_ratelimit: 914 callbacks suppressed [ 684.110481][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.132988][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 684.148186][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.165534][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 684.179954][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.196619][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 684.211052][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.227680][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 684.243186][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.260316][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 689.124281][ C0] net_ratelimit: 961 callbacks suppressed [ 689.124317][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 689.145559][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.164529][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 689.180656][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.200720][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 689.216873][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.234927][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 689.250316][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.269070][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 689.285626][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.129795][ C0] net_ratelimit: 943 callbacks suppressed [ 694.129830][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.154049][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 694.169106][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.186137][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 694.201576][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.219179][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 694.234375][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.250984][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 694.267273][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.285575][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 699.138833][ C0] net_ratelimit: 907 callbacks suppressed [ 699.138872][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 699.160751][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.179527][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 699.195605][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.213831][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 699.230150][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.248281][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 699.264524][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.281902][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 699.297091][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.154951][ C0] net_ratelimit: 776 callbacks suppressed [ 704.154996][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 704.178191][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.195669][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 704.213448][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.230742][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 704.247274][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.265576][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 704.284576][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.301525][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 704.319133][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.162341][ C0] net_ratelimit: 705 callbacks suppressed [ 709.162382][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.188054][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 709.207262][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.227376][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 709.246698][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.272671][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 709.291358][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.310970][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 709.330537][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.349331][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 714.175479][ C0] net_ratelimit: 582 callbacks suppressed [ 714.175520][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.203871][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 714.225295][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.246527][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 714.267879][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.289065][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 714.309801][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.332386][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 714.352953][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.374951][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 719.191060][ C0] net_ratelimit: 419 callbacks suppressed [ 719.191101][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 719.216941][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.242419][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 719.262029][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.287268][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 719.304375][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.327608][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 719.344574][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.365208][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 719.382336][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.198182][ C0] net_ratelimit: 569 callbacks suppressed [ 724.198220][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.227596][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 724.244320][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.264697][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 724.278077][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 724.285033][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l P5128/1:b..l [ 724.294305][ C0] rcu: (detected by 0, t=10502 jiffies, g=58981, q=336 ncpus=2) [ 724.302081][ C0] task:klogd state:R running task stack:23688 pid:5128 ppid:1 flags:0x00004002 [ 724.313879][ C0] Call Trace: [ 724.317189][ C0] [ 724.320156][ C0] __schedule+0x15ae/0x4660 [ 724.324770][ C0] ? rcu_is_watching+0x15/0xb0 [ 724.329596][ C0] ? asan.module_dtor+0x20/0x20 [ 724.334485][ C0] ? try_to_wake_up+0x680/0x10e0 [ 724.339490][ C0] ? preempt_schedule+0xc0/0xd0 [ 724.344376][ C0] preempt_schedule_common+0x82/0xc0 [ 724.349701][ C0] preempt_schedule+0xc0/0xd0 [ 724.354414][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 724.360073][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 724.366083][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 724.371148][ C0] ? lock_chain_count+0x20/0x20 [ 724.376048][ C0] preempt_schedule_thunk+0x1a/0x30 [ 724.381304][ C0] _raw_spin_unlock_irqrestore+0x111/0x120 [ 724.387185][ C0] ? _raw_spin_unlock+0x40/0x40 [ 724.392070][ C0] ? __wake_up_common+0x28e/0x4d0 [ 724.397142][ C0] __wake_up_sync_key+0x12c/0x1a0 [ 724.402208][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 724.408234][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 724.413323][ C0] ? sock_def_readable+0xad/0x420 [ 724.418403][ C0] sock_def_readable+0x1e1/0x420 [ 724.423373][ C0] unix_dgram_sendmsg+0x1093/0x16e0 [ 724.428629][ C0] ? unix_dgram_poll+0x680/0x680 [ 724.433591][ C0] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 724.440060][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 724.445658][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 724.450997][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 724.456509][ C0] __sys_sendto+0x4a9/0x6b0 [ 724.461059][ C0] ? __ia32_sys_getpeername+0x90/0x90 [ 724.466495][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 724.472531][ C0] ? lock_chain_count+0x20/0x20 [ 724.477424][ C0] __x64_sys_sendto+0xde/0xf0 [ 724.482134][ C0] do_syscall_64+0x55/0xb0 [ 724.486581][ C0] ? clear_bhb_loop+0x40/0x90 [ 724.491307][ C0] ? clear_bhb_loop+0x40/0x90 [ 724.496032][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.501978][ C0] RIP: 0033:0x7fc8d65a0407 [ 724.506438][ C0] RSP: 002b:00007ffe901ab880 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 724.514878][ C0] RAX: ffffffffffffffda RBX: 00007fc8d6450c80 RCX: 00007fc8d65a0407 [ 724.522873][ C0] RDX: 0000000000000097 RSI: 00007ffe901ab9c0 RDI: 0000000000000003 [ 724.530887][ C0] RBP: 00007ffe901abdf0 R08: 0000000000000000 R09: 0000000000000000 [ 724.538898][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe901abe08 [ 724.546900][ C0] R13: 00007ffe901ab9c0 R14: 000000000000007c R15: 00007ffe901ab9c0 [ 724.554918][ C0] [ 724.557961][ C0] task:kthreadd state:R running task stack:25960 pid:2 ppid:0 flags:0x00004000 [ 724.568788][ C0] Call Trace: [ 724.572110][ C0] [ 724.575071][ C0] __schedule+0x15ae/0x4660 [ 724.579642][ C0] ? asan.module_dtor+0x20/0x20 [ 724.584515][ C0] ? mark_lock+0x94/0x320 [ 724.588875][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 724.594890][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 724.600209][ C0] preempt_schedule_irq+0xbf/0x150 [ 724.605357][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 724.611120][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 724.616979][ C0] irqentry_exit+0x67/0x70 [ 724.621444][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 724.627487][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 724.633675][ C0] Code: 10 46 7c 7e 65 8b 15 11 46 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 24 16 00 00 00 74 2c 8b 91 00 16 00 00 <83> fa 02 75 21 48 8b 91 08 16 00 00 48 8b 32 48 8d 7e 01 8b 89 04 [ 724.653305][ C0] RSP: 0018:ffffc900000771f0 EFLAGS: 00000246 [ 724.659409][ C0] RAX: ffffffff813bc108 RBX: 0000000080000000 RCX: ffff88801a669e00 [ 724.667406][ C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 724.675417][ C0] RBP: 0000000000000001 R08: ffff88801a669e00 R09: 0000000000000003 [ 724.683421][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc900000777e8 [ 724.691519][ C0] R13: ffffc900000772c8 R14: ffffc90000077848 R15: ffffc900000772d8 [ 724.699550][ C0] ? unwind_next_frame+0x1d38/0x2990 [ 724.704867][ C0] unwind_next_frame+0x1d38/0x2990 [ 724.710009][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 724.715326][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 724.720659][ C0] ? stack_trace_save+0x100/0x100 [ 724.725725][ C0] arch_stack_walk+0x144/0x190 [ 724.730523][ C0] ? kmem_cache_alloc+0x17e/0x2c0 [ 724.735582][ C0] stack_trace_save+0xaa/0x100 [ 724.740382][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 724.745543][ C0] save_stack+0x125/0x230 [ 724.749936][ C0] ? __reset_page_owner+0x190/0x190 [ 724.755163][ C0] ? free_unref_page_prepare+0x7d7/0x8f0 [ 724.760817][ C0] ? free_unref_page+0x32/0x2e0 [ 724.765702][ C0] ? __unfreeze_partials+0x1cf/0x210 [ 724.771015][ C0] ? put_cpu_partial+0x17c/0x250 [ 724.775987][ C0] ? __slab_free+0x319/0x400 [ 724.780594][ C0] ? qlist_free_all+0x75/0xd0 [ 724.785307][ C0] ? kasan_quarantine_reduce+0x143/0x160 [ 724.790984][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 724.796049][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 724.801386][ C0] ? page_ext_get+0x22/0x2b0 [ 724.806024][ C0] ? page_ext_get+0x1e2/0x2b0 [ 724.810733][ C0] __reset_page_owner+0x4e/0x190 [ 724.815690][ C0] ? rcu_is_watching+0x15/0xb0 [ 724.820490][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 724.825980][ C0] free_unref_page+0x32/0x2e0 [ 724.830685][ C0] __unfreeze_partials+0x1cf/0x210 [ 724.835830][ C0] put_cpu_partial+0x17c/0x250 [ 724.840625][ C0] ? put_cpu_partial+0x6e/0x250 [ 724.845534][ C0] __slab_free+0x319/0x400 [ 724.849985][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 724.855924][ C0] ? _raw_spin_unlock+0x40/0x40 [ 724.860824][ C0] qlist_free_all+0x75/0xd0 [ 724.865378][ C0] kasan_quarantine_reduce+0x143/0x160 [ 724.870900][ C0] __kasan_slab_alloc+0x22/0x80 [ 724.875793][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 724.880953][ C0] kmem_cache_alloc+0x17e/0x2c0 [ 724.885847][ C0] ? prepare_creds+0x30/0x5d0 [ 724.890560][ C0] prepare_creds+0x30/0x5d0 [ 724.895101][ C0] copy_creds+0x105/0xa70 [ 724.899485][ C0] copy_process+0x973/0x3da0 [ 724.904099][ C0] ? __perf_event_task_sched_in+0xf0/0x1300 [ 724.910057][ C0] ? __lock_acquire+0x1336/0x7d80 [ 724.915132][ C0] ? __pidfd_prepare+0x140/0x140 [ 724.920127][ C0] kernel_clone+0x24b/0x8a0 [ 724.924674][ C0] ? finish_task_switch+0x262/0x8f0 [ 724.929905][ C0] ? create_io_thread+0x190/0x190 [ 724.934981][ C0] ? trace_event_raw_event_lock+0x240/0x240 [ 724.940923][ C0] kernel_thread+0x13f/0x1b0 [ 724.945556][ C0] ? kthread_blkcg+0xd0/0xd0 [ 724.950177][ C0] ? ptrace_event_pid+0x320/0x320 [ 724.955232][ C0] ? kthread_blkcg+0xd0/0xd0 [ 724.959855][ C0] ? __rwlock_init+0x150/0x150 [ 724.964656][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 724.969886][ C0] kthreadd+0x579/0x750 [ 724.974069][ C0] ? kthreadd+0x323/0x750 [ 724.978428][ C0] ? kthread_stop_put+0xd0/0xd0 [ 724.983313][ C0] ? lock_chain_count+0x20/0x20 [ 724.988213][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 724.993447][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 724.998673][ C0] ? kthread_stop_put+0xd0/0xd0 [ 725.003546][ C0] ret_from_fork+0x48/0x80 [ 725.007992][ C0] ? kthread_stop_put+0xd0/0xd0 [ 725.012874][ C0] ret_from_fork_asm+0x11/0x20 [ 725.017725][ C0] [ 725.020777][ C0] rcu: rcu_preempt kthread starved for 7659 jiffies! g58981 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 725.031939][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 725.041954][ C0] rcu: RCU grace-period kthread stack dump: [ 725.047874][ C0] task:rcu_preempt state:R running task stack:26792 pid:17 ppid:2 flags:0x00004000 [ 725.058681][ C0] Call Trace: [ 725.062004][ C0] [ 725.064978][ C0] __schedule+0x15ae/0x4660 [ 725.069520][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 725.074621][ C0] ? lock_chain_count+0x20/0x20 [ 725.079520][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 725.084777][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 725.090708][ C0] ? asan.module_dtor+0x20/0x20 [ 725.095590][ C0] ? rcu_is_watching+0x15/0xb0 [ 725.100404][ C0] schedule+0xbd/0x170 [ 725.104502][ C0] schedule_timeout+0x188/0x2d0 [ 725.109398][ C0] ? console_conditional_schedule+0x40/0x40 [ 725.115318][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 725.121257][ C0] ? update_process_times+0x1b0/0x1b0 [ 725.126672][ C0] ? prepare_to_swait_event+0x344/0x360 [ 725.132248][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 725.137138][ C0] ? dump_blkd_tasks+0x820/0x820 [ 725.142119][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 725.148137][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 725.153190][ C0] ? rcu_gp_init+0x1530/0x1530 [ 725.157981][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 725.162872][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.168124][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 725.173366][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 725.178078][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 725.183223][ C0] ? __kthread_parkme+0x71/0x1c0 [ 725.188195][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 725.193253][ C0] kthread+0x2fa/0x390 [ 725.197362][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 725.202505][ C0] ? kthread_blkcg+0xd0/0xd0 [ 725.207119][ C0] ret_from_fork+0x48/0x80 [ 725.211574][ C0] ? kthread_blkcg+0xd0/0xd0 [ 725.216200][ C0] ret_from_fork_asm+0x11/0x20 [ 725.221022][ C0] [ 725.224069][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 725.230412][ C0] Sending NMI from CPU 0 to CPUs 1: [ 725.235641][ C1] NMI backtrace for cpu 1 [ 725.235652][ C1] CPU: 1 PID: 14698 Comm: syz.3.2897 Not tainted syzkaller #0 [ 725.235665][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 725.235675][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 725.235694][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 db 2c 2d 03 66 2e 0f 1f 84 00 00 00 00 00 [ 725.235707][ C1] RSP: 0018:ffffc900001efe38 EFLAGS: 00000046 [ 725.235719][ C1] RAX: 00000000000000a7 RBX: ffff8880b8f282c0 RCX: 0000000000000838 [ 725.235729][ C1] RDX: 0000000000000000 RSI: 00000000000000a7 RDI: 0000000000000838 [ 725.235738][ C1] RBP: 0000000000000000 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 725.235748][ C1] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: dffffc0000000000 [ 725.235759][ C1] R13: 0000000010005a98 R14: 00000000000000a7 R15: 0000000000000020 [ 725.235768][ C1] FS: 00007fd69b6476c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 725.235781][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.235790][ C1] CR2: 0000200000034000 CR3: 000000004da00000 CR4: 00000000003506e0 [ 725.235803][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 725.235812][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 725.235820][ C1] Call Trace: [ 725.235826][ C1] [ 725.235830][ C1] lapic_next_event+0x11/0x20 [ 725.235848][ C1] clockevents_program_event+0x1c0/0x310 [ 725.235870][ C1] hrtimer_interrupt+0x565/0x980 [ 725.235897][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 725.235917][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 725.235937][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.235954][ C1] RIP: 0010:rcu_read_lock_held+0x0/0x40 [ 725.235971][ C1] Code: c7 c7 e0 91 0e 90 e8 7f e5 6f 00 eb cf 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 0f b6 05 ad 67 1c 0d c3 0f 1f 40 00 0f 1e fa 53 e8 f6 ff 1e 09 85 c0 74 26 31 db e8 eb 28 01 00 84 [ 725.235983][ C1] RSP: 0018:ffffc900001f0078 EFLAGS: 00000246 [ 725.235994][ C1] RAX: ffffffff8888a600 RBX: ffff88807c1ea000 RCX: 0000000000000100 [ 725.236004][ C1] RDX: ffff88802bae3c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 725.236014][ C1] RBP: 1ffff11009378797 R08: ffffc900001f0380 R09: ffffc900001f0390 [ 725.236025][ C1] R10: ffffc900001f01e0 R11: fffff5200003e03e R12: 0000000000000001 [ 725.236034][ C1] R13: 0000000000000003 R14: 1ffff11009378799 R15: ffff888049bc3ccf [ 725.236048][ C1] ? lockdep_rtnl_is_held+0x20/0x30 [ 725.236067][ C1] find_match+0xf1/0xc50 [ 725.236092][ C1] __find_rr_leaf+0x244/0x760 [ 725.236118][ C1] ? rt6_remove_exception+0x270/0x270 [ 725.236139][ C1] ? fib6_repair_tree+0xf40/0xf40 [ 725.236159][ C1] fib6_table_lookup+0x3c7/0xae0 [ 725.236188][ C1] ? fib6_nh_age_exceptions+0x5f0/0x5f0 [ 725.236210][ C1] ip6_pol_route+0x239/0x1230 [ 725.236228][ C1] ? ip6_pol_route+0x171/0x1230 [ 725.236247][ C1] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 725.236268][ C1] ? fib6_get_table+0x39/0x260 [ 725.236283][ C1] ? fib6_get_table+0x251/0x260 [ 725.236310][ C1] ? ip6_route_input_lookup+0xc0/0xc0 [ 725.236328][ C1] fib6_rule_action+0x1d2/0x6c0 [ 725.236367][ C1] fib_rules_lookup+0x593/0xb10 [ 725.236382][ C1] ? fib_rules_lookup+0x8e/0xb10 [ 725.236398][ C1] ? fib_rules_unregister+0x330/0x330 [ 725.236424][ C1] ? l3mdev_update_flow+0x4b1/0x5f0 [ 725.236443][ C1] fib6_rule_lookup+0x1ae/0x580 [ 725.236462][ C1] ? ip6_route_input_lookup+0xc0/0xc0 [ 725.236481][ C1] ? fib6_lookup+0x2d0/0x2d0 [ 725.236501][ C1] ? ip6_route_input_lookup+0xc0/0xc0 [ 725.236523][ C1] ? rhashtable_lookup_fast+0xee/0x930 [ 725.236542][ C1] ? rht_unlock+0x1d0/0x1d0 [ 725.236568][ C1] ip6_route_input+0x78a/0xab0 [ 725.236590][ C1] ? ip6_multipath_l3_keys+0x6b0/0x6b0 [ 725.236620][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 725.236639][ C1] ? ip6_rcv_finish_core+0x21d/0x420 [ 725.236662][ C1] ip6_rcv_finish+0x143/0x230 [ 725.236685][ C1] NF_HOOK+0x32d/0x3b0 [ 725.236706][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 725.236726][ C1] ? NF_HOOK+0x9f/0x3b0 [ 725.236746][ C1] ? ip6_rcv_core+0x1700/0x1700 [ 725.236768][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 725.236793][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 725.236814][ C1] __netif_receive_skb+0xcc/0x290 [ 725.236836][ C1] ? process_backlog+0x2cf/0x710 [ 725.236853][ C1] process_backlog+0x380/0x710 [ 725.236878][ C1] ? trigger_rx_softirq+0x60/0x60 [ 725.236896][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 725.236914][ C1] ? lock_chain_count+0x20/0x20 [ 725.236931][ C1] ? lock_chain_count+0x20/0x20 [ 725.236968][ C1] __napi_poll+0xbb/0x460 [ 725.236989][ C1] net_rx_action+0x65f/0xcc0 [ 725.237014][ C1] ? net_tx_action+0x950/0x950 [ 725.237034][ C1] ? detach_timer+0x2b0/0x2b0 [ 725.237059][ C1] handle_softirqs+0x27d/0x820 [ 725.237075][ C1] ? read_tsc+0x9/0x20 [ 725.237098][ C1] ? ktime_get+0x24b/0x280 [ 725.237118][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 725.237156][ C1] ? do_softirq+0x1a0/0x1a0 [ 725.237175][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 725.237201][ C1] __irq_exit_rcu+0xd3/0x190 [ 725.237218][ C1] ? irq_exit_rcu+0x20/0x20 [ 725.237240][ C1] irq_exit_rcu+0x9/0x20 [ 725.237256][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 725.237279][ C1] [ 725.237284][ C1] [ 725.237290][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.237311][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x58/0xe0 [ 725.237334][ C1] Code: 48 8b 06 48 85 c0 0f 84 a4 00 00 00 41 57 41 56 41 54 53 48 8d 4c 09 01 48 8b 54 24 20 65 4c 8b 05 0d 41 7c 7e 45 31 c9 eb 08 <49> ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d fb 40 7c 7e 41 [ 725.237349][ C1] RSP: 0018:ffffc90003707350 EFLAGS: 00000297 [ 725.237362][ C1] RAX: 0000000000000003 RBX: ffffffff8f16ce8e RCX: 0000000000000003 [ 725.237373][ C1] RDX: ffffffff813bbaa1 RSI: ffffffff8cfa0640 RDI: 0000000000000001 [ 725.237384][ C1] RBP: ffffc90003707498 R08: ffff88802bae3c00 R09: 0000000000000002 [ 725.237396][ C1] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc90003707d48 [ 725.237407][ C1] R13: ffffc90003707448 R14: 0000000000000001 R15: dffffc0000000000 [ 725.237424][ C1] ? unwind_next_frame+0x16d1/0x2990 [ 725.237446][ C1] unwind_next_frame+0x16d1/0x2990 [ 725.237469][ C1] ? bpf_prog_test_run+0x31f/0x390 [ 725.237489][ C1] ? bpf_prog_test_run+0x31f/0x390 [ 725.237508][ C1] ? stack_trace_save+0x100/0x100 [ 725.237530][ C1] arch_stack_walk+0x144/0x190 [ 725.237556][ C1] ? __sys_bpf+0x49d/0x890 [ 725.237576][ C1] stack_trace_save+0xaa/0x100 [ 725.237597][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 725.237617][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 725.237642][ C1] save_stack+0x125/0x230 [ 725.237658][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.237679][ C1] ? __reset_page_owner+0x190/0x190 [ 725.237695][ C1] ? free_unref_page_prepare+0x7d7/0x8f0 [ 725.237710][ C1] ? free_unref_page+0x32/0x2e0 [ 725.237725][ C1] ? page_pool_release+0x3fb/0xaf0 [ 725.237748][ C1] ? page_pool_destroy+0x284/0x490 [ 725.237770][ C1] ? bpf_test_run_xdp_live+0x1a49/0x1b30 [ 725.237792][ C1] ? bpf_prog_test_run_xdp+0x7d8/0x1140 [ 725.237812][ C1] ? bpf_prog_test_run+0x31f/0x390 [ 725.237834][ C1] ? page_ext_get+0x22/0x2b0 [ 725.237856][ C1] ? page_ext_get+0x1e2/0x2b0 [ 725.237878][ C1] __reset_page_owner+0x4e/0x190 [ 725.237893][ C1] ? rcu_is_watching+0x15/0xb0 [ 725.237918][ C1] free_unref_page_prepare+0x7d7/0x8f0 [ 725.237937][ C1] free_unref_page+0x32/0x2e0 [ 725.237954][ C1] page_pool_release+0x3fb/0xaf0 [ 725.237985][ C1] page_pool_destroy+0x284/0x490 [ 725.238010][ C1] bpf_test_run_xdp_live+0x1a49/0x1b30 [ 725.238043][ C1] ? bpf_test_run_xdp_live+0x4df/0x1b30 [ 725.238066][ C1] ? xdp_convert_md_to_buff+0x330/0x330 [ 725.238103][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 725.238128][ C1] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 725.238153][ C1] ? bpf_prog_test_run_xdp+0x7b4/0x1140 [ 725.238178][ C1] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 725.238200][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 725.238223][ C1] ? lock_chain_count+0x20/0x20 [ 725.238244][ C1] ? dev_put+0x80/0x80 [ 725.238270][ C1] ? dev_put+0x80/0x80 [ 725.238290][ C1] bpf_prog_test_run+0x31f/0x390 [ 725.238324][ C1] __sys_bpf+0x49d/0x890 [ 725.238343][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 725.238370][ C1] ? lock_chain_count+0x20/0x20 [ 725.238393][ C1] __x64_sys_bpf+0x7c/0x90 [ 725.238420][ C1] do_syscall_64+0x55/0xb0 [ 725.238435][ C1] ? clear_bhb_loop+0x40/0x90 [ 725.238450][ C1] ? clear_bhb_loop+0x40/0x90 [ 725.238466][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.238481][ C1] RIP: 0033:0x7fd69a79e0d9 [ 725.238494][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.238505][ C1] RSP: 002b:00007fd69b647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 725.238519][ C1] RAX: ffffffffffffffda RBX: 00007fd69aa25fa0 RCX: 00007fd69a79e0d9 [ 725.238529][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 725.238538][ C1] RBP: 00007fd69a835024 R08: 0000000000000000 R09: 0000000000000000 [ 725.238547][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.238562][ C1] R13: 00007fd69aa26038 R14: 00007fd69aa25fa0 R15: 00007ffdde53f398 [ 725.238580][ C1] [ 725.254958][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.204272][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 726.222928][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.246212][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 726.264843][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.287638][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 729.208203][ C0] net_ratelimit: 1460 callbacks suppressed [ 729.208224][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.227928][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 729.240839][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.254722][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 729.267505][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.281362][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 729.294149][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.308161][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 729.323276][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.336552][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 734.218717][ C0] net_ratelimit: 2761 callbacks suppressed [ 734.218738][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0) [ 734.237156][ C0] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.250613][ C0] bridge0: received packet on team0 with own address as source address (addr:b2:05:6c:8c:f8:4d, vlan:0)