last executing test programs: 24.811505839s ago: executing program 0 (id=4718): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e25, @multicast1=0xe000004f}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0xffeb, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x4840) 24.723567415s ago: executing program 0 (id=4719): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500e30000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018012020207b1af8ff80000000bfa1000000baad0007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"/152], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4639d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xc, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x4000002009}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x144c, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x67c}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1830000001000000000000000600", @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x52}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x43, &(0x7f0000000000), 0xff7b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000180)={r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x0, 0x44, 0x0, 0x9}, 0x28) 24.261581862s ago: executing program 0 (id=4723): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="004017000000000000514529ff0a51dbb65e8d0e6bc9bbd8dbb769d8bed6b02a4bec797158b8905b7edb95d48735c4f13eaded9800"/63, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000280)=""/265, 0x26, 0x109, 0x1}, 0x1f) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8933, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\x00\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn[\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\'\x9f\xd0\xcb\xe1mN\x1cA\xe54\xfa4\x84l\xb3\xc8\xc3\xd19\xc6_n\xf3:\x01\xc2\xec\xf0j\xb0nY\xea\x94VXo~\nC\x89\'\n=JBy\xc0\xe5\xe8\xc1.\x1bd\x9d\xe3\xee\xc55)`\xda\xf7\xb1\xc9\x04\xcfc\xd8\xb3F\xd3\xaa*\xc0\xcf\xd8]1\xcd\f\x9b\xb4\x12\x9d\xf37a\x98\x01\\\xb9\xa9\xbd\xf5\\\xd8\x96o\xff\xa5a\x8bkj~7\xd8\xe7F+l]\x18`\x9d\x94\xc6c\x81\xe4n\xa1\x1a{\xf8\xb2\xf0C\x7f\x8d+\xc3z!\xac\xc6\xd4\x1f=\xa2\xc7Y\xfc\xcb\xf6~Kx\x9e\x1d\xd5T\rC\x95\x94\xa7\x85\xb1Ff<2w\xd0s\xac36\xb8\x96U\x9e(Za\xf2\x9bk\xcfK\xd3\xa1\xd6\'\xdb\x8b\x06U\xf4a\xee\xac\xaa\x8b\xe3\x053Q7\xe3\xcc\xa5\xb1\x8a7w\x9b\xaa\xb4W[\xbas_\x95.\xd3\x89\xa7\x01R\xe9\xa3\f\xb8\x15e\x04l\xb1\x03\x82\xfc\x18\xcd6-\xd1\xbe\xc9w\x8a\xbd\x98\xe8\x04\xf0`\xe0O\b;\x9a\xf5\xb8\xcdv)\xaf\x83\x94\x00\xb4\xf9\xb3:Dc\x96K?dK.\x1e\x84r\xae\xc0\xe7\xf0+\xce\x0e\xealJ\xdb\x9b2\x92.\xb4\xbdG\xf7I\xc9\x84\xe0@\x89\xb516\xd0o\x83dr%0%-\xd2\xa2\xcb\xa3\x87f\xack\xfd?\x16u~\xb8\r$&\xb4,e\xc4\xea3\xbf\xab\xfc') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x80c0}, 0x2000000) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)}, 0x12140) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e2"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x10, 0x0, 0x0, 0xb, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8081}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000040), 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) r7 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x10, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x1000000, 0x4}, 0x7623, 0x5, 0x400, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)={r8}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x0, 0x41, 0x9, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x6, @perf_config_ext={0xc, 0x4}, 0x0, 0x1, 0x4008000, 0x4, 0x9, 0x5, 0xe, 0x0, 0x4, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffff9, r7, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 23.900468819s ago: executing program 0 (id=4726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x42) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x400000}, 0x0, 0xffffffffffffffff, r3, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x80000002, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x1782, r2}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f04, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000100000000b8f9000007000000070705ac1414aa00"], 0x18}, 0x200040c4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23.508191092s ago: executing program 1 (id=4728): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x6a, 0x0, 0x0, 0x80, 0x10000}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d0001", 0x23}], 0x1}, 0x44011) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 23.151466389s ago: executing program 1 (id=4729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x6, 0x8, 0x5, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff, r2}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 22.678428087s ago: executing program 0 (id=4731): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x21ff, 0x5e, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe, 0x0, 0x40000000}, 0x50) 22.524362026s ago: executing program 0 (id=4732): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1004000}, 0x0, 0x0, 0xffffffff, 0x6, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.575300447s ago: executing program 1 (id=4736): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x5}, 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, 0x0, 0x20040000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x0, 0x29, 0x0, 0x801, 0xfffffffa}, 0x28) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000500)="2e0000002e008f866b29924a6f130000005e140608000000000022727f0000a31802dd00003b1fcc7336507fb18f", 0x2e}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='.\x00', 0x0, 0x0, r5}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f00080000001826", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, r0, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 8.245663391s ago: executing program 1 (id=4741): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x18000, 0x3, 0x0, 0xb, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1f63, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000180)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000110000007b8af8ff00000000b70800000f0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)=@l2, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000000340)=""/211, 0xd3}], 0x3, &(0x7f0000000480)=""/125, 0x7d}, 0x41) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=0x0], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r8, @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x2f, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000f700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000007d000000183b00000a00000000000000000000001a3b5000010000008510000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000007850000000600000018290000", @ANYRES32=r6, @ANYBLOB="00000000b0b90000b7080000000000007b8af8ff00000000b7080000c00100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000"], 0x0, 0xcfb, 0x6d, &(0x7f0000000740)=""/109, 0x40f00, 0x5, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x8, 0x80000000, 0xeaf}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[r6, r9], &(0x7f0000000940)=[{0x3, 0x2, 0x9, 0x4}, {0x0, 0x5, 0x4, 0xc}, {0x0, 0x1, 0x1, 0xa}], 0x10, 0x4}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0x5, [@float={0x9, 0x0, 0x0, 0x10, 0x20}, @var={0x10, 0x0, 0x0, 0xe, 0x4, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb, 0x5}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x1}, @const={0x1, 0x0, 0x0, 0xa, 0x1}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0xc, 0x2}, {0x4, 0x1}, {0x9}, {0x5, 0x2}, {0xf, 0x4}, {0x8, 0x4}, {0x7, 0x4}, {0xa, 0x1}, {0x8, 0x1}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x6a, 0x0, 0x69, 0x3}, @enum64={0x5, 0x7, 0x0, 0x13, 0x1, 0x0, [{0x3, 0x48d1, 0x10}, {0x1, 0xed, 0x80000001}, {0x2, 0xe, 0x1}, {0x6, 0x1}, {0xd, 0x10, 0x7}, {0xa, 0x0, 0x7}, {0x9, 0x0, 0xfffffffe}]}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f0000000a40)=""/129, 0x135, 0x81, 0x1, 0x5b, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', r8, r10, 0x4, 0x5, 0x2}, 0x50) 4.801151354s ago: executing program 2 (id=4750): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x186, 0xfffffffffffffffb, 0x0, 0x2, 0x80000, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a009100"], 0xfe33) 4.363623176s ago: executing program 2 (id=4751): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e448e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16e6c53f1aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x60044084) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f0000000c40)=[{0xb0, 0x0, 0x7, "0743f9181ff34ad57bde32222cac109c69cdcd22aecdbbfa927a727661063266f6faa662edf05551d42aa0543796b2c81e0720dd17d0c71e1a4b8e7501e749dc9d0239e7c0a14957b5083e47c3f2067f9e77699d9a59783e0363179965ef92e37c3efd106e787d8a8a3d90c5c162d90176f35c49c43c1d1496401dfeb0f7347ac2dce43deaac1413e023b9707c776e4f6a796b00c50b7745943ced"}, {0x30, 0x0, 0x4, "b71cc98015701df1a14a06da101e38a395be39f28b1e5cccae9708d6"}, {0x10, 0x107, 0x7}, {0x18, 0x0, 0x6, "f2d4827b9a79"}, {0x80, 0x108, 0xffff7a8f, "246308391969030da4711f76960c0607f912ceb8fdff35fa720f9c701289057311e7bf6d559a0c59565aefc28a8e67750106b0dbbb9ea7b29785d71140b9509974d40529993896071e4c5e6046702ab0e8e8de7cc030c5cbb1a1d1730e53c7bfce92efe9e59cbe9652"}, {0x10, 0x13f, 0x2}, {0x10, 0x3a, 0x2}, {0x98, 0x29, 0xe72, "3a2e9eeb98ec347da1bdd577dfd4ac25f4c4acc84ac11838d560054ed302ccd51b6326757c407162823c4d2bf36bfa3065b458791c80024aa896af5186a420b45d7bdc4e350aa38959ec5bb839515eec097b514d5014ac2a0a0da21500f9c848f5ce45006c30a09400a9e30a0e88eee0be7f0d843ce4d1c1e327f417f59e8fb1f00dbd913f"}, {0x68, 0x10a, 0x8, "63c3edd93989dde3c226ee3916e811fc6efc4cc93db65f1dd59fbae02bff4ac9f5ca02336685104c04d490fb26db8fc843e5c2e9a094a942a5d4e168a86a80b2d7271710d37d6029aa3c3457705e4adfdcc7db05"}], 0x2a8}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3ad"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x27, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0xa027, 0x0, 0x0, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb}, 0xffffffffffffffff, 0x0, r2, 0x2) 4.17534173s ago: executing program 3 (id=4752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000003000000000000000100000000000000000000000001000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.663124716s ago: executing program 3 (id=4753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x6, 0x8, 0x5, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff, r2}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.885710368s ago: executing program 2 (id=4754): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x9, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x4}, 0x100a00, 0x4, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 1.801392894s ago: executing program 3 (id=4755): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0xfffffffc, 0x0, 0x1, 0xb}, {0x10000002}], 0x10, 0x316bb6af}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000000) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x4, 0x0, 0xffc3) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = socket$kcm(0xa, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x22, 0x80000, 0xfffffffe, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000100)={r11, r10}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) r12 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) 1.414040156s ago: executing program 2 (id=4756): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500e30000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018012020207b1af8ff80000000bfa1000000baad0007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"/152], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4639d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xc, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x4000002009}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x144c, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x67c}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01562b966afe19acf24200180000000000d09518000000180000000400"/40], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1830000001000000000000000600", @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x2, 0x922000000001, 0x106) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x43, &(0x7f0000000000), 0xff7b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.303318837s ago: executing program 1 (id=4757): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500e30000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018012020207b1af8ff80000000bfa1000000baad0007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"/152], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4639d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xc, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x4000002009}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x144c, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x67c}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1830000001000000000000000600", @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x52}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x43, &(0x7f0000000000), 0xff7b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000180)={r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x0, 0x44, 0x0, 0x9}, 0x28) 776.687245ms ago: executing program 2 (id=4758): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x5000, 0x80, 0x0, 0x0, 0x1000000000000000, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80ff}, 0x0) 664.950706ms ago: executing program 3 (id=4759): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602ffffffef0e200a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) 506.562806ms ago: executing program 2 (id=4760): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x5}, 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, 0x0, 0x20040000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x0, 0x29, 0x0, 0x801, 0xfffffffa}, 0x28) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000500)="2e0000002e008f866b29924a6f130000005e140608000000000022727f0000a31802dd00003b1fcc7336507fb18f", 0x2e}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='.\x00', 0x0, 0x0, r5}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f00080000001826", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, r0, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 505.365896ms ago: executing program 1 (id=4767): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500e30000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018012020207b1af8ff80000000bfa1000000baad0007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"/152], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4639d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xc, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x4000002009}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x144c, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x67c}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1830000001000000000000000600", @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x52}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x43, &(0x7f0000000000), 0xff7b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000180)={r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x0, 0x44, 0x0, 0x9}, 0x28) 342.777626ms ago: executing program 3 (id=4761): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x3000000, 0x73, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 3 (id=4762): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e448e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16e6c53f1aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x60044084) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f0000000c40)=[{0xb0, 0x0, 0x7, "0743f9181ff34ad57bde32222cac109c69cdcd22aecdbbfa927a727661063266f6faa662edf05551d42aa0543796b2c81e0720dd17d0c71e1a4b8e7501e749dc9d0239e7c0a14957b5083e47c3f2067f9e77699d9a59783e0363179965ef92e37c3efd106e787d8a8a3d90c5c162d90176f35c49c43c1d1496401dfeb0f7347ac2dce43deaac1413e023b9707c776e4f6a796b00c50b7745943ced"}, {0x30, 0x0, 0x4, "b71cc98015701df1a14a06da101e38a395be39f28b1e5cccae9708d6"}, {0x10, 0x107, 0x7}, {0x18, 0x0, 0x6, "f2d4827b9a79"}, {0x80, 0x108, 0xffff7a8f, "246308391969030da4711f76960c0607f912ceb8fdff35fa720f9c701289057311e7bf6d559a0c59565aefc28a8e67750106b0dbbb9ea7b29785d71140b9509974d40529993896071e4c5e6046702ab0e8e8de7cc030c5cbb1a1d1730e53c7bfce92efe9e59cbe9652"}, {0x10, 0x13f, 0x2}, {0x10, 0x3a, 0x2}, {0x98, 0x29, 0xe72, "3a2e9eeb98ec347da1bdd577dfd4ac25f4c4acc84ac11838d560054ed302ccd51b6326757c407162823c4d2bf36bfa3065b458791c80024aa896af5186a420b45d7bdc4e350aa38959ec5bb839515eec097b514d5014ac2a0a0da21500f9c848f5ce45006c30a09400a9e30a0e88eee0be7f0d843ce4d1c1e327f417f59e8fb1f00dbd913f"}, {0x68, 0x10a, 0x8, "63c3edd93989dde3c226ee3916e811fc6efc4cc93db65f1dd59fbae02bff4ac9f5ca02336685104c04d490fb26db8fc843e5c2e9a094a942a5d4e168a86a80b2d7271710d37d6029aa3c3457705e4adfdcc7db05"}], 0x2a8}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3ad"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x27, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0xa027, 0x0, 0x0, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb}, 0xffffffffffffffff, 0x0, r2, 0x2) kernel console output (not intermixed with test programs): 820.960927][T16605] ? sctp_sf_do_5_2_1_siminit+0x40/0x40 [ 820.966516][T16605] ? trace_call_bpf+0xc3/0x6c0 [ 820.971311][T16605] ? trace_call_bpf+0x5e9/0x6c0 [ 820.976197][T16605] sctp_do_sm+0x23b/0x5b80 [ 820.980649][T16605] ? rht_unlock+0x1d0/0x1d0 [ 820.985204][T16605] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 820.991310][T16605] ? mark_lock+0x94/0x320 [ 820.995700][T16605] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 821.001667][T16605] ? skb_pull+0xb9/0x1c0 [ 821.005958][T16605] ? sctp_inq_pop+0xc32/0x1030 [ 821.010761][T16605] ? read_tsc+0x9/0x20 [ 821.014867][T16605] sctp_assoc_bh_rcv+0x3f2/0x630 [ 821.019865][T16605] sctp_backlog_rcv+0x15c/0x360 [ 821.024780][T16605] __release_sock+0x1ea/0x460 [ 821.029505][T16605] release_sock+0x5f/0x1c0 [ 821.033964][T16605] sctp_sendmsg+0x1b46/0x27b0 [ 821.038694][T16605] ? sctp_getsockopt+0xb60/0xb60 [ 821.043678][T16605] ? aa_af_perm+0x330/0x330 [ 821.048309][T16605] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 821.054790][T16605] ? sock_rps_record_flow+0x19/0x3f0 [ 821.060116][T16605] ? inet_sendmsg+0x7e/0x2a0 [ 821.064748][T16605] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 821.070078][T16605] ? inet_send_prepare+0x250/0x250 [ 821.075233][T16605] ____sys_sendmsg+0x61b/0x980 [ 821.080055][T16605] ? __asan_memset+0x22/0x40 [ 821.084681][T16605] ? __sys_sendmsg_sock+0x30/0x30 [ 821.089758][T16605] ? __import_iovec+0x5f2/0x850 [ 821.094657][T16605] ? import_iovec+0x73/0xa0 [ 821.099207][T16605] ___sys_sendmsg+0x2a6/0x360 [ 821.103936][T16605] ? __sys_sendmsg+0x2b0/0x2b0 [ 821.108759][T16605] ? trace_call_bpf+0xc3/0x6c0 [ 821.113593][T16605] __se_sys_sendmsg+0x1d0/0x2c0 [ 821.118493][T16605] ? perf_trace_preemptirq_template+0x269/0x330 [ 821.124789][T16605] ? __x64_sys_sendmsg+0x80/0x80 [ 821.129786][T16605] ? lockdep_hardirqs_on+0x98/0x150 [ 821.135030][T16605] do_syscall_64+0x55/0xb0 [ 821.139492][T16605] ? clear_bhb_loop+0x40/0x90 [ 821.144233][T16605] ? clear_bhb_loop+0x40/0x90 [ 821.148954][T16605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.154920][T16605] RIP: 0033:0x7fb42a19e159 [ 821.159369][T16605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.179013][T16605] RSP: 002b:00007fb42afe1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.187465][T16605] RAX: ffffffffffffffda RBX: 00007fb42a425fa0 RCX: 00007fb42a19e159 [ 821.195472][T16605] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 821.203486][T16605] RBP: 00007fb42afe1090 R08: 0000000000000000 R09: 0000000000000000 [ 821.211482][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 821.219484][T16605] R13: 00007fb42a426038 R14: 00007fb42a425fa0 R15: 00007ffc06f21e88 [ 821.227589][T16605] [ 821.296737][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 821.548843][T16613] netlink: 'syz.0.3521': attribute type 10 has an invalid length. [ 821.912401][T16617] netlink: 'syz.1.3525': attribute type 10 has an invalid length. [ 821.925875][T16617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3525'. [ 822.002457][T16622] netlink: 'syz.0.3522': attribute type 9 has an invalid length. [ 822.043190][T16622] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3522'. [ 822.496790][T16636] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3529'. [ 822.511136][T16636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.870941][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 823.314450][T16660] netlink: 'syz.3.3537': attribute type 3 has an invalid length. [ 823.323899][T16660] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3537'. [ 823.430281][T16666] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.3538'. [ 825.023952][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 825.114992][T16686] netlink: 'syz.0.3544': attribute type 2 has an invalid length. [ 825.167151][T16686] netlink: 'syz.0.3544': attribute type 1 has an invalid length. [ 825.175111][T16686] netlink: 'syz.0.3544': attribute type 2 has an invalid length. [ 825.248690][T16686] netlink: 198036 bytes leftover after parsing attributes in process `syz.0.3544'. [ 825.624415][T16692] netlink: 'syz.2.3547': attribute type 13 has an invalid length. [ 825.645823][T16692] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3547'. [ 825.703424][T16692] erspan0: refused to change device tx_queue_len [ 825.734295][T16692] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 825.974542][T16700] nr0: port 1(hsr0) entered blocking state [ 825.980834][T16700] nr0: port 1(hsr0) entered disabled state [ 826.066356][T16704] nr0: port 1(hsr0) entered blocking state [ 826.072524][T16704] nr0: port 1(hsr0) entered forwarding state [ 826.899643][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 827.527141][T16740] netlink: 'syz.2.3561': attribute type 21 has an invalid length. [ 827.560025][T16740] netlink: 13070 bytes leftover after parsing attributes in process `syz.2.3561'. [ 828.411879][T16757] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3567'. [ 829.337596][T16782] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3574'. [ 829.385864][T16782] bridge_slave_1: default FDB implementation only supports local addresses [ 831.158857][T12309] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 831.985587][T16827] netlink: 'syz.2.3588': attribute type 2 has an invalid length. [ 831.993747][T16827] netlink: 'syz.2.3588': attribute type 11 has an invalid length. [ 832.058427][T16827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3588'. [ 832.590835][T16838] syzkaller0: entered promiscuous mode [ 832.632632][T16838] syzkaller0: entered allmulticast mode [ 832.869870][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 833.332606][T16863] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3598'. [ 837.704563][T16866] netlink: 'syz.2.3600': attribute type 10 has an invalid length. [ 837.725283][T16866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3600'. [ 837.735082][T16866] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 838.387474][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 838.616824][T16892] netlink: set zone limit has 8 unknown bytes [ 838.644771][T16892] netlink: set zone limit has 8 unknown bytes [ 839.175827][T16917] netlink: 'syz.1.3617': attribute type 10 has an invalid length. [ 839.199091][T16917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3617'. [ 840.264489][T16940] netlink: 'syz.2.3625': attribute type 10 has an invalid length. [ 840.974395][T16950] delete_channel: no stack [ 841.233092][T16972] netlink: 'syz.2.3636': attribute type 10 has an invalid length. [ 841.264080][T16972] veth0_vlan: entered allmulticast mode [ 841.783793][T16972] veth0_vlan: left promiscuous mode [ 841.839968][T16972] veth0_vlan: entered promiscuous mode [ 841.923297][T16972] team0: Device veth0_vlan failed to register rx_handler [ 842.751659][T17006] netlink: 'syz.3.3644': attribute type 6 has an invalid length. [ 842.805407][T17006] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3644'. [ 846.253796][T17083] syzkaller0: entered promiscuous mode [ 846.270039][T17083] syzkaller0: entered allmulticast mode [ 846.409023][T17093] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3666'. [ 849.302089][T17161] netlink: 'syz.1.3675': attribute type 7 has an invalid length. [ 849.341477][T12309] Bluetooth: hci4: ISO packet for unknown connection handle 3874 [ 849.367412][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 849.821734][T17172] netlink: 'syz.2.3680': attribute type 10 has an invalid length. [ 849.851512][T17172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3680'. [ 849.900237][T17172] veth0_vlan: left promiscuous mode [ 850.012436][T17172] veth0_vlan: entered promiscuous mode [ 850.149397][T17172] batman_adv: batadv0: Adding interface: veth0_vlan [ 850.162449][T17172] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.190575][T17172] batman_adv: batadv0: Interface activated: veth0_vlan [ 850.510272][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 850.811265][T17185] syzkaller0: entered promiscuous mode [ 850.817399][T17185] syzkaller0: entered allmulticast mode [ 851.802027][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 854.078690][T17235] netlink: 'syz.0.3712': attribute type 10 has an invalid length. [ 854.146270][T17235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3712'. [ 854.451726][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 854.866702][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 854.984288][T17261] netlink: 'syz.1.3720': attribute type 3 has an invalid length. [ 855.003466][T17261] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3720'. [ 859.898228][T17318] netlink: 'syz.2.3736': attribute type 4 has an invalid length. [ 859.922199][T17318] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.3736'. [ 860.786743][T17348] FAULT_INJECTION: forcing a failure. [ 860.786743][T17348] name failslab, interval 1, probability 0, space 0, times 0 [ 860.805031][T17348] CPU: 1 PID: 17348 Comm: syz.0.3749 Not tainted syzkaller #0 [ 860.812634][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 860.822782][T17348] Call Trace: [ 860.826109][T17348] [ 860.829102][T17348] dump_stack_lvl+0x18c/0x250 [ 860.833839][T17348] ? sctp_sendmsg+0x1519/0x27b0 [ 860.838753][T17348] ? ___sys_sendmsg+0x2a6/0x360 [ 860.843675][T17348] ? show_regs_print_info+0x20/0x20 [ 860.848935][T17348] ? load_image+0x420/0x420 [ 860.853504][T17348] should_fail_ex+0x394/0x4c0 [ 860.858255][T17348] should_failslab+0x9/0x20 [ 860.862825][T17348] slab_pre_alloc_hook+0x59/0x300 [ 860.867912][T17348] ? sctp_add_bind_addr+0x8c/0x360 [ 860.873176][T17348] __kmem_cache_alloc_node+0x53/0x250 [ 860.878619][T17348] ? sctp_add_bind_addr+0x8c/0x360 [ 860.883790][T17348] kmalloc_trace+0x2a/0xe0 [ 860.888276][T17348] sctp_add_bind_addr+0x8c/0x360 [ 860.893283][T17348] sctp_copy_local_addr_list+0x31b/0x4e0 [ 860.898990][T17348] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 860.904770][T17348] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 860.910906][T17348] ? sctp_v6_is_any+0x64/0x70 [ 860.915643][T17348] ? sctp_copy_one_addr+0x8c/0x350 [ 860.920815][T17348] sctp_bind_addr_copy+0xb3/0x3c0 [ 860.925919][T17348] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 860.932312][T17348] sctp_connect_new_asoc+0x2f9/0x6a0 [ 860.937653][T17348] ? __sctp_connect+0xd80/0xd80 [ 860.942547][T17348] ? __local_bh_enable_ip+0x13a/0x1c0 [ 860.947976][T17348] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 860.953582][T17348] ? security_sctp_bind_connect+0x89/0xb0 [ 860.959382][T17348] sctp_sendmsg+0x1519/0x27b0 [ 860.964133][T17348] ? sctp_getsockopt+0xb60/0xb60 [ 860.969147][T17348] ? aa_af_perm+0x330/0x330 [ 860.973715][T17348] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 860.980188][T17348] ? sock_rps_record_flow+0x19/0x3f0 [ 860.985529][T17348] ? inet_sendmsg+0xce/0x2a0 [ 860.990162][T17348] ? inet_send_prepare+0x250/0x250 [ 860.995325][T17348] ____sys_sendmsg+0x61b/0x980 [ 861.000151][T17348] ? __sys_sendmsg_sock+0x30/0x30 [ 861.005222][T17348] ? __import_iovec+0x5f2/0x850 [ 861.010156][T17348] ? import_iovec+0x73/0xa0 [ 861.014722][T17348] ___sys_sendmsg+0x2a6/0x360 [ 861.019459][T17348] ? get_pid_task+0x20/0x1e0 [ 861.024110][T17348] ? __sys_sendmsg+0x2b0/0x2b0 [ 861.028958][T17348] ? __lock_acquire+0x7d80/0x7d80 [ 861.034063][T17348] __se_sys_sendmsg+0x1d0/0x2c0 [ 861.038967][T17348] ? __x64_sys_sendmsg+0x80/0x80 [ 861.043999][T17348] ? lockdep_hardirqs_on+0x98/0x150 [ 861.049261][T17348] do_syscall_64+0x55/0xb0 [ 861.053737][T17348] ? clear_bhb_loop+0x40/0x90 [ 861.058495][T17348] ? clear_bhb_loop+0x40/0x90 [ 861.063339][T17348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 861.069291][T17348] RIP: 0033:0x7f5c0f59e159 [ 861.073758][T17348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.093470][T17348] RSP: 002b:00007f5c1048e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.101948][T17348] RAX: ffffffffffffffda RBX: 00007f5c0f825fa0 RCX: 00007f5c0f59e159 [ 861.110014][T17348] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000005 [ 861.118129][T17348] RBP: 00007f5c1048e090 R08: 0000000000000000 R09: 0000000000000000 [ 861.126156][T17348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 861.134173][T17348] R13: 00007f5c0f826038 R14: 00007f5c0f825fa0 R15: 00007fff0096abe8 [ 861.142247][T17348] [ 861.713910][T17363] netlink: 'syz.2.3757': attribute type 15 has an invalid length. [ 861.722056][T17363] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3757'. [ 861.820486][T17363] lo: left promiscuous mode [ 861.825307][T17363] lo: entered allmulticast mode [ 862.129851][T17378] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3763'. [ 862.142017][T17378] openvswitch: netlink: Flow key attribute not present in set flow. [ 862.291180][T17381] netlink: 192372 bytes leftover after parsing attributes in process `syz.2.3763'. [ 862.347564][T17381] openvswitch: netlink: Flow key attribute not present in set flow. [ 862.406256][T17393] lo: left promiscuous mode [ 862.410888][T17393] lo: entered allmulticast mode [ 862.456420][T17393] lo: entered promiscuous mode [ 862.464202][T17393] lo: left allmulticast mode [ 862.482302][T17393] FAULT_INJECTION: forcing a failure. [ 862.482302][T17393] name failslab, interval 1, probability 0, space 0, times 0 [ 862.521924][T17393] CPU: 0 PID: 17393 Comm: syz.0.3765 Not tainted syzkaller #0 [ 862.529510][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 862.539623][T17393] Call Trace: [ 862.542957][T17393] [ 862.545930][T17393] dump_stack_lvl+0x18c/0x250 [ 862.550702][T17393] ? show_regs_print_info+0x20/0x20 [ 862.555959][T17393] ? load_image+0x420/0x420 [ 862.560517][T17393] ? __might_sleep+0xe0/0xe0 [ 862.565174][T17393] ? __lock_acquire+0x7d80/0x7d80 [ 862.570267][T17393] should_fail_ex+0x394/0x4c0 [ 862.575043][T17393] should_failslab+0x9/0x20 [ 862.579614][T17393] slab_pre_alloc_hook+0x59/0x300 [ 862.584706][T17393] ? fib6_info_alloc+0x30/0xf0 [ 862.589538][T17393] ? fib6_info_alloc+0x30/0xf0 [ 862.594370][T17393] __kmem_cache_alloc_node+0x53/0x250 [ 862.599819][T17393] ? fib6_info_alloc+0x30/0xf0 [ 862.604650][T17393] __kmalloc+0xa7/0x240 [ 862.608880][T17393] fib6_info_alloc+0x30/0xf0 [ 862.613532][T17393] ip6_route_info_create+0x455/0x1260 [ 862.618979][T17393] ? __kasan_kmalloc+0x8f/0xa0 [ 862.623820][T17393] addrconf_f6i_alloc+0x1fa/0x440 [ 862.628908][T17393] ? ip6_route_del+0x14f0/0x14f0 [ 862.633951][T17393] ipv6_add_addr+0x5a4/0x10d0 [ 862.638705][T17393] ? ipv6_count_addresses+0x190/0x190 [ 862.644186][T17393] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 862.649883][T17393] ? mutex_unlock+0x10/0x10 [ 862.654493][T17393] add_addr+0x8c/0x2c0 [ 862.658631][T17393] addrconf_init_auto_addrs+0x421/0xac0 [ 862.664244][T17393] ? addrconf_dad_run+0x1d0/0x1d0 [ 862.669323][T17393] ? __mutex_lock+0x30d/0xc80 [ 862.674083][T17393] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 862.679768][T17393] ? mutex_unlock+0x10/0x10 [ 862.684321][T17393] ? tls_dev_event+0x769/0xf80 [ 862.689167][T17393] ? addrconf_link_ready+0x117/0x170 [ 862.694507][T17393] addrconf_notify+0xb62/0x1010 [ 862.699421][T17393] notifier_call_chain+0x18f/0x380 [ 862.704595][T17393] __dev_notify_flags+0x1ab/0x310 [ 862.709680][T17393] ? __dev_change_flags+0x6a0/0x6a0 [ 862.714933][T17393] ? __dev_change_flags+0x51c/0x6a0 [ 862.720184][T17393] ? dev_load+0x21/0x1f0 [ 862.724481][T17393] ? dev_get_flags+0x1c0/0x1c0 [ 862.729303][T17393] ? full_name_hash+0x92/0xe0 [ 862.734051][T17393] dev_change_flags+0xde/0x1a0 [ 862.738891][T17393] dev_ioctl+0x7b4/0x1140 [ 862.743285][T17393] sock_do_ioctl+0x239/0x310 [ 862.747952][T17393] ? sock_show_fdinfo+0xb0/0xb0 [ 862.752888][T17393] sock_ioctl+0x5be/0x7e0 [ 862.757277][T17393] ? sock_poll+0x3e0/0x3e0 [ 862.761762][T17393] ? bpf_lsm_file_ioctl+0x9/0x10 [ 862.766749][T17393] ? security_file_ioctl+0x80/0xa0 [ 862.771919][T17393] ? sock_poll+0x3e0/0x3e0 [ 862.776388][T17393] __se_sys_ioctl+0xfd/0x170 [ 862.781037][T17393] do_syscall_64+0x55/0xb0 [ 862.785512][T17393] ? clear_bhb_loop+0x40/0x90 [ 862.790248][T17393] ? clear_bhb_loop+0x40/0x90 [ 862.794989][T17393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.800948][T17393] RIP: 0033:0x7f5c0f59e159 [ 862.805415][T17393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.825116][T17393] RSP: 002b:00007f5c1048e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.833584][T17393] RAX: ffffffffffffffda RBX: 00007f5c0f825fa0 RCX: 00007f5c0f59e159 [ 862.841589][T17393] RDX: 0000200000001000 RSI: 0000000000008914 RDI: 000000000000000c [ 862.849594][T17393] RBP: 00007f5c1048e090 R08: 0000000000000000 R09: 0000000000000000 [ 862.857603][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.865613][T17393] R13: 00007f5c0f826038 R14: 00007f5c0f825fa0 R15: 00007fff0096abe8 [ 862.873641][T17393] [ 863.727719][T17430] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3779'. [ 864.088190][T17429] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3779'. [ 864.100535][T17428] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3779'. [ 864.113379][T17430] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3779'. [ 864.127708][T17431] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3779'. [ 865.459006][T17467] netlink: 'syz.1.3793': attribute type 10 has an invalid length. [ 865.489336][T17467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3793'. [ 865.690392][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3799'. [ 865.956262][T17486] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3803'. [ 866.333672][T17495] netlink: 'syz.3.3805': attribute type 10 has an invalid length. [ 866.341718][T17495] team0: Device wg1 is up. Set it down before adding it as a team port [ 866.430625][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3806'. [ 866.916687][T17512] netlink: 'syz.0.3811': attribute type 10 has an invalid length. [ 866.925056][T17512] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3811'. [ 867.058568][T17514] netlink: 'syz.0.3812': attribute type 10 has an invalid length. [ 867.722862][T17528] netlink: 'syz.0.3817': attribute type 33 has an invalid length. [ 867.738062][T17528] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3817'. [ 868.592408][T17547] delete_channel: no stack [ 869.506385][T17580] netlink: 'syz.0.3836': attribute type 3 has an invalid length. [ 869.514768][T17580] netlink: 'syz.0.3836': attribute type 6 has an invalid length. [ 869.537211][T17580] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.3836'. [ 870.450173][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.459045][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.054532][T17610] netlink: 'syz.2.3847': attribute type 2 has an invalid length. [ 871.077616][T17610] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3847'. [ 872.334072][T17652] netlink: 'syz.2.3862': attribute type 3 has an invalid length. [ 872.355677][T17652] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3862'. [ 872.591144][T17659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3865'. [ 872.738893][T17664] netlink: 'syz.3.3868': attribute type 46 has an invalid length. [ 873.352175][T17687] netlink: 'syz.1.3876': attribute type 64 has an invalid length. [ 873.719795][T17697] syzkaller0: entered promiscuous mode [ 873.731853][T17697] syzkaller0: entered allmulticast mode [ 880.100476][T17807] netlink: 'syz.0.3923': attribute type 21 has an invalid length. [ 880.609119][T17821] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 880.636662][T17821] syzkaller0: entered promiscuous mode [ 880.642192][T17821] syzkaller0: entered allmulticast mode [ 880.652382][T17823] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3929'. [ 880.674563][T17819] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3929'. [ 883.053527][T17833] netlink: 'syz.2.3934': attribute type 29 has an invalid length. [ 884.004944][T17843] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3938'. [ 884.015424][T17843] bridge_slave_1: default FDB implementation only supports local addresses [ 884.429988][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 885.070182][T17881] netlink: 'syz.3.3951': attribute type 4 has an invalid length. [ 885.078373][T17881] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.3951'. [ 885.407821][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 885.698740][T17895] netlink: 'syz.1.3958': attribute type 15 has an invalid length. [ 885.721617][T17895] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3958'. [ 886.783975][T17919] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3966'. [ 886.870403][T17921] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3967'. [ 886.933242][T17926] FAULT_INJECTION: forcing a failure. [ 886.933242][T17926] name failslab, interval 1, probability 0, space 0, times 0 [ 886.955469][T17926] CPU: 1 PID: 17926 Comm: syz.3.3970 Not tainted syzkaller #0 [ 886.963050][T17926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 886.973180][T17926] Call Trace: [ 886.976526][T17926] [ 886.979515][T17926] dump_stack_lvl+0x18c/0x250 [ 886.984254][T17926] ? sctp_sendmsg+0x1519/0x27b0 [ 886.989180][T17926] ? ___sys_sendmsg+0x2a6/0x360 [ 886.994131][T17926] ? show_regs_print_info+0x20/0x20 [ 886.999421][T17926] ? load_image+0x420/0x420 [ 887.004034][T17926] should_fail_ex+0x394/0x4c0 [ 887.008798][T17926] should_failslab+0x9/0x20 [ 887.013372][T17926] slab_pre_alloc_hook+0x59/0x300 [ 887.018515][T17926] ? sctp_add_bind_addr+0x8c/0x360 [ 887.023706][T17926] __kmem_cache_alloc_node+0x53/0x250 [ 887.029190][T17926] ? sctp_add_bind_addr+0x8c/0x360 [ 887.034383][T17926] kmalloc_trace+0x2a/0xe0 [ 887.038927][T17926] sctp_add_bind_addr+0x8c/0x360 [ 887.043982][T17926] sctp_copy_local_addr_list+0x31b/0x4e0 [ 887.049702][T17926] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 887.055505][T17926] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 887.061662][T17926] ? sctp_v6_is_any+0x64/0x70 [ 887.066428][T17926] ? sctp_copy_one_addr+0x8c/0x350 [ 887.071641][T17926] sctp_bind_addr_copy+0xb3/0x3c0 [ 887.076752][T17926] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 887.083155][T17926] sctp_connect_new_asoc+0x2f9/0x6a0 [ 887.088492][T17926] ? __sctp_connect+0xd80/0xd80 [ 887.093389][T17926] ? __local_bh_enable_ip+0x13a/0x1c0 [ 887.098813][T17926] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 887.104403][T17926] ? security_sctp_bind_connect+0x89/0xb0 [ 887.110206][T17926] sctp_sendmsg+0x1519/0x27b0 [ 887.114965][T17926] ? sctp_getsockopt+0xb60/0xb60 [ 887.119971][T17926] ? aa_af_perm+0x330/0x330 [ 887.124533][T17926] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 887.130996][T17926] ? sock_rps_record_flow+0x19/0x3f0 [ 887.136331][T17926] ? inet_sendmsg+0xce/0x2a0 [ 887.140963][T17926] ? inet_send_prepare+0x250/0x250 [ 887.146118][T17926] ____sys_sendmsg+0x61b/0x980 [ 887.150952][T17926] ? __sys_sendmsg_sock+0x30/0x30 [ 887.156052][T17926] ? __import_iovec+0x5f2/0x850 [ 887.160988][T17926] ? import_iovec+0x73/0xa0 [ 887.165574][T17926] ___sys_sendmsg+0x2a6/0x360 [ 887.170344][T17926] ? __sys_sendmsg+0x2b0/0x2b0 [ 887.175222][T17926] ? __lock_acquire+0x7d80/0x7d80 [ 887.180358][T17926] __se_sys_sendmsg+0x1d0/0x2c0 [ 887.185274][T17926] ? __x64_sys_sendmsg+0x80/0x80 [ 887.190296][T17926] ? lockdep_hardirqs_on+0x98/0x150 [ 887.195563][T17926] do_syscall_64+0x55/0xb0 [ 887.200046][T17926] ? clear_bhb_loop+0x40/0x90 [ 887.204773][T17926] ? clear_bhb_loop+0x40/0x90 [ 887.209583][T17926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.215539][T17926] RIP: 0033:0x7fb42a19e159 [ 887.220008][T17926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.239654][T17926] RSP: 002b:00007fb42afe1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.248112][T17926] RAX: ffffffffffffffda RBX: 00007fb42a425fa0 RCX: 00007fb42a19e159 [ 887.256125][T17926] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000005 [ 887.264136][T17926] RBP: 00007fb42afe1090 R08: 0000000000000000 R09: 0000000000000000 [ 887.272188][T17926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.280198][T17926] R13: 00007fb42a426038 R14: 00007fb42a425fa0 R15: 00007ffc06f21e88 [ 887.288240][T17926] [ 887.914693][T17952] FAULT_INJECTION: forcing a failure. [ 887.914693][T17952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.935553][T17952] CPU: 1 PID: 17952 Comm: syz.1.3978 Not tainted syzkaller #0 [ 887.943117][T17952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 887.953233][T17952] Call Trace: [ 887.956563][T17952] [ 887.959546][T17952] dump_stack_lvl+0x18c/0x250 [ 887.964302][T17952] ? show_regs_print_info+0x20/0x20 [ 887.969578][T17952] ? load_image+0x420/0x420 [ 887.974147][T17952] ? __might_fault+0xaa/0x120 [ 887.978902][T17952] ? __lock_acquire+0x7d80/0x7d80 [ 887.984065][T17952] should_fail_ex+0x394/0x4c0 [ 887.988827][T17952] _copy_from_iter+0x1cd/0x1290 [ 887.993740][T17952] ? rep_movs_alternative+0x4a/0x90 [ 887.999022][T17952] ? copyout_mc+0x70/0x70 [ 888.003434][T17952] ? copyout_mc+0x70/0x70 [ 888.007852][T17952] ? __virt_addr_valid+0x10c/0x380 [ 888.013040][T17952] ? page_copy_sane+0x16a/0x270 [ 888.017953][T17952] copy_page_from_iter+0x7b/0x100 [ 888.023044][T17952] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 888.028924][T17952] unix_stream_sendmsg+0x562/0xbf0 [ 888.034108][T17952] ? unix_show_fdinfo+0x280/0x280 [ 888.039198][T17952] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 888.045659][T17952] ? apparmor_socket_sendmsg+0x8e/0x330 [ 888.051265][T17952] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 888.056596][T17952] ? security_socket_sendmsg+0x80/0xa0 [ 888.062089][T17952] ? unix_show_fdinfo+0x280/0x280 [ 888.067158][T17952] ____sys_sendmsg+0x61b/0x980 [ 888.071975][T17952] ? __asan_memset+0x22/0x40 [ 888.076604][T17952] ? __sys_sendmsg_sock+0x30/0x30 [ 888.081677][T17952] ? __import_iovec+0x5f2/0x850 [ 888.086596][T17952] ? import_iovec+0x73/0xa0 [ 888.091150][T17952] ___sys_sendmsg+0x2a6/0x360 [ 888.095871][T17952] ? __sys_sendmsg+0x2b0/0x2b0 [ 888.100696][T17952] ? __lock_acquire+0x7d80/0x7d80 [ 888.105783][T17952] __se_sys_sendmsg+0x1d0/0x2c0 [ 888.110679][T17952] ? __x64_sys_sendmsg+0x80/0x80 [ 888.115674][T17952] ? lockdep_hardirqs_on+0x98/0x150 [ 888.120915][T17952] do_syscall_64+0x55/0xb0 [ 888.125374][T17952] ? clear_bhb_loop+0x40/0x90 [ 888.130088][T17952] ? clear_bhb_loop+0x40/0x90 [ 888.134806][T17952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.140744][T17952] RIP: 0033:0x7f465b59e159 [ 888.145225][T17952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.164886][T17952] RSP: 002b:00007f465c424028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.173342][T17952] RAX: ffffffffffffffda RBX: 00007f465b825fa0 RCX: 00007f465b59e159 [ 888.181347][T17952] RDX: 0000000000000020 RSI: 0000200000000980 RDI: 0000000000000003 [ 888.189355][T17952] RBP: 00007f465c424090 R08: 0000000000000000 R09: 0000000000000000 [ 888.197418][T17952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.205470][T17952] R13: 00007f465b826038 R14: 00007f465b825fa0 R15: 00007ffd9d9223f8 [ 888.213502][T17952] [ 888.588408][T12309] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 888.915465][T17973] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.3987'. [ 889.133275][T17978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3990'. [ 890.005084][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 890.563265][T18006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3999'. [ 890.885811][T18011] netlink: 'syz.3.4001': attribute type 8 has an invalid length. [ 890.951039][T18011] netlink: 184220 bytes leftover after parsing attributes in process `syz.3.4001'. [ 892.974577][T18009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.469424][T18064] netlink: 'syz.2.4015': attribute type 2 has an invalid length. [ 894.500057][T18064] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.4015'. [ 896.027682][T18073] delete_channel: no stack [ 896.708035][T18103] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.993230][T18103] bridge_slave_1 (unregistering): left allmulticast mode [ 897.022676][T18103] bridge_slave_1 (unregistering): left promiscuous mode [ 897.053238][T18103] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.356098][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 897.995079][T18125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4030'. [ 898.899090][T12309] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 899.985211][T18169] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4049'. [ 900.183841][T12309] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 901.085550][T18189] netlink: 'syz.0.4057': attribute type 10 has an invalid length. [ 902.123650][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 902.161676][T18199] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4061'. [ 902.484972][T18213] netlink: 'syz.3.4065': attribute type 46 has an invalid length. [ 903.671576][T12309] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 904.933667][T18283] netlink: 'syz.1.4090': attribute type 10 has an invalid length. [ 904.943248][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 904.952095][T18281] netlink: 'syz.3.4089': attribute type 27 has an invalid length. [ 904.974155][T18281] netlink: 'syz.3.4089': attribute type 4 has an invalid length. [ 904.985688][T18281] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4089'. [ 908.506091][T18308] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4098'. [ 908.536738][T18308] bridge0: port 4(bond0) entered disabled state [ 908.668679][T18308] bond0 (unregistering): left allmulticast mode [ 908.675047][T18308] bond_slave_0: left allmulticast mode [ 908.682909][T18308] bond_slave_1: left allmulticast mode [ 908.688980][T18308] mac80211_hwsim hwsim28 ..ãc¤±: left allmulticast mode [ 908.703082][T18308] bridge0: port 4(bond0) entered disabled state [ 909.459876][T18308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.476183][T18308] bond_slave_0: left promiscuous mode [ 909.524777][T18308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.538697][T18308] bond_slave_1: left promiscuous mode [ 909.570433][T18308] bond0 (unregistering): (slave ..ãc¤±): Releasing backup interface [ 909.580097][T18308] mac80211_hwsim hwsim28 ..ãc¤±: left promiscuous mode [ 909.597067][T18308] bond0 (unregistering): Released all slaves [ 909.762905][T18324] syzkaller0: entered promiscuous mode [ 909.783003][T12309] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 909.784226][T18324] syzkaller0: entered allmulticast mode [ 909.814316][T18333] FAULT_INJECTION: forcing a failure. [ 909.814316][T18333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.829845][T18333] CPU: 0 PID: 18333 Comm: syz.3.4105 Not tainted syzkaller #0 [ 909.837398][T18333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 909.847497][T18333] Call Trace: [ 909.850827][T18333] [ 909.853775][T18333] dump_stack_lvl+0x18c/0x250 [ 909.858496][T18333] ? show_regs_print_info+0x20/0x20 [ 909.863758][T18333] ? load_image+0x420/0x420 [ 909.868326][T18333] ? __might_fault+0xaa/0x120 [ 909.873072][T18333] ? __lock_acquire+0x7d80/0x7d80 [ 909.878161][T18333] should_fail_ex+0x394/0x4c0 [ 909.882943][T18333] _copy_from_user+0x2f/0xe0 [ 909.887612][T18333] __sys_bpf+0x23e/0x890 [ 909.891933][T18333] ? bpf_link_show_fdinfo+0x560/0x560 [ 909.897365][T18333] ? lock_chain_count+0x20/0x20 [ 909.902266][T18333] __x64_sys_bpf+0x7c/0x90 [ 909.906724][T18333] do_syscall_64+0x55/0xb0 [ 909.911203][T18333] ? clear_bhb_loop+0x40/0x90 [ 909.916028][T18333] ? clear_bhb_loop+0x40/0x90 [ 909.920765][T18333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.926734][T18333] RIP: 0033:0x7fb42a19e159 [ 909.931194][T18333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.950864][T18333] RSP: 002b:00007fb42afe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 909.959369][T18333] RAX: ffffffffffffffda RBX: 00007fb42a425fa0 RCX: 00007fb42a19e159 [ 909.967401][T18333] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 909.975425][T18333] RBP: 00007fb42afe1090 R08: 0000000000000000 R09: 0000000000000000 [ 909.983437][T18333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.991444][T18333] R13: 00007fb42a426038 R14: 00007fb42a425fa0 R15: 00007ffc06f21e88 [ 909.999486][T18333] [ 911.744587][T12309] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 914.027576][T18379] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4124'. [ 914.069947][T18379] bridge_slave_1: default FDB implementation only supports local addresses [ 914.219841][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 915.559178][T18413] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4136'. [ 915.804566][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 916.947243][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 918.280370][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 918.427838][T18489] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4160'. [ 919.628360][T18517] FAULT_INJECTION: forcing a failure. [ 919.628360][T18517] name failslab, interval 1, probability 0, space 0, times 0 [ 919.663346][T18517] CPU: 0 PID: 18517 Comm: syz.2.4171 Not tainted syzkaller #0 [ 919.671001][T18517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 919.681118][T18517] Call Trace: [ 919.684480][T18517] [ 919.687452][T18517] dump_stack_lvl+0x18c/0x250 [ 919.692211][T18517] ? sctp_sendmsg+0x1519/0x27b0 [ 919.697121][T18517] ? ___sys_sendmsg+0x2a6/0x360 [ 919.702030][T18517] ? show_regs_print_info+0x20/0x20 [ 919.707308][T18517] ? load_image+0x420/0x420 [ 919.711887][T18517] should_fail_ex+0x394/0x4c0 [ 919.716657][T18517] should_failslab+0x9/0x20 [ 919.721231][T18517] slab_pre_alloc_hook+0x59/0x300 [ 919.726348][T18517] ? sctp_add_bind_addr+0x8c/0x360 [ 919.731525][T18517] __kmem_cache_alloc_node+0x53/0x250 [ 919.736973][T18517] ? sctp_add_bind_addr+0x8c/0x360 [ 919.742163][T18517] kmalloc_trace+0x2a/0xe0 [ 919.746645][T18517] sctp_add_bind_addr+0x8c/0x360 [ 919.751651][T18517] sctp_copy_local_addr_list+0x31b/0x4e0 [ 919.757342][T18517] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 919.763109][T18517] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 919.769232][T18517] ? sctp_v6_is_any+0x64/0x70 [ 919.773981][T18517] ? sctp_copy_one_addr+0x8c/0x350 [ 919.779155][T18517] sctp_bind_addr_copy+0xb3/0x3c0 [ 919.784241][T18517] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 919.790623][T18517] sctp_connect_new_asoc+0x2f9/0x6a0 [ 919.795951][T18517] ? __sctp_connect+0xd80/0xd80 [ 919.800837][T18517] ? __local_bh_enable_ip+0x13a/0x1c0 [ 919.806261][T18517] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 919.811882][T18517] ? security_sctp_bind_connect+0x89/0xb0 [ 919.817656][T18517] sctp_sendmsg+0x1519/0x27b0 [ 919.822391][T18517] ? sctp_getsockopt+0xb60/0xb60 [ 919.827374][T18517] ? aa_af_perm+0x330/0x330 [ 919.831937][T18517] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 919.838410][T18517] ? sock_rps_record_flow+0x19/0x3f0 [ 919.843844][T18517] ? inet_sendmsg+0xce/0x2a0 [ 919.848493][T18517] ? inet_send_prepare+0x250/0x250 [ 919.853664][T18517] ____sys_sendmsg+0x61b/0x980 [ 919.858497][T18517] ? __sys_sendmsg_sock+0x30/0x30 [ 919.863657][T18517] ? __import_iovec+0x5f2/0x850 [ 919.868582][T18517] ? import_iovec+0x73/0xa0 [ 919.873156][T18517] ___sys_sendmsg+0x2a6/0x360 [ 919.877888][T18517] ? __sys_sendmsg+0x2b0/0x2b0 [ 919.882729][T18517] ? trace_call_bpf+0xc3/0x6c0 [ 919.887564][T18517] __se_sys_sendmsg+0x1d0/0x2c0 [ 919.892470][T18517] ? perf_trace_preemptirq_template+0x269/0x330 [ 919.898782][T18517] ? __x64_sys_sendmsg+0x80/0x80 [ 919.903818][T18517] ? lockdep_hardirqs_on+0x98/0x150 [ 919.909072][T18517] do_syscall_64+0x55/0xb0 [ 919.913534][T18517] ? clear_bhb_loop+0x40/0x90 [ 919.918258][T18517] ? clear_bhb_loop+0x40/0x90 [ 919.923004][T18517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 919.928956][T18517] RIP: 0033:0x7f617459e159 [ 919.933423][T18517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.953180][T18517] RSP: 002b:00007f6175431028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.961644][T18517] RAX: ffffffffffffffda RBX: 00007f6174825fa0 RCX: 00007f617459e159 [ 919.969659][T18517] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000005 [ 919.977674][T18517] RBP: 00007f6175431090 R08: 0000000000000000 R09: 0000000000000000 [ 919.985685][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.993689][T18517] R13: 00007f6174826038 R14: 00007f6174825fa0 R15: 00007ffcb19188d8 [ 920.001729][T18517] [ 920.975596][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 921.510561][T18545] FAULT_INJECTION: forcing a failure. [ 921.510561][T18545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.524032][T18545] CPU: 0 PID: 18545 Comm: syz.1.4177 Not tainted syzkaller #0 [ 921.531554][T18545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 921.541671][T18545] Call Trace: [ 921.545005][T18545] [ 921.547989][T18545] dump_stack_lvl+0x18c/0x250 [ 921.552744][T18545] ? show_regs_print_info+0x20/0x20 [ 921.558019][T18545] ? load_image+0x420/0x420 [ 921.562582][T18545] ? __might_fault+0xaa/0x120 [ 921.567318][T18545] ? __lock_acquire+0x7d80/0x7d80 [ 921.572417][T18545] should_fail_ex+0x394/0x4c0 [ 921.577170][T18545] _copy_from_iter+0x1cd/0x1290 [ 921.582110][T18545] ? rep_movs_alternative+0x4a/0x90 [ 921.587384][T18545] ? copyout_mc+0x70/0x70 [ 921.591896][T18545] ? copyout_mc+0x70/0x70 [ 921.596296][T18545] ? __virt_addr_valid+0x10c/0x380 [ 921.601491][T18545] ? page_copy_sane+0x16a/0x270 [ 921.606412][T18545] copy_page_from_iter+0x7b/0x100 [ 921.611508][T18545] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 921.617383][T18545] unix_stream_sendmsg+0x562/0xbf0 [ 921.622581][T18545] ? unix_show_fdinfo+0x280/0x280 [ 921.627676][T18545] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 921.634165][T18545] ? apparmor_socket_sendmsg+0x8e/0x330 [ 921.639772][T18545] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 921.645115][T18545] ? security_socket_sendmsg+0x80/0xa0 [ 921.650633][T18545] ? unix_show_fdinfo+0x280/0x280 [ 921.655740][T18545] ____sys_sendmsg+0x61b/0x980 [ 921.660591][T18545] ? __asan_memset+0x22/0x40 [ 921.665256][T18545] ? __sys_sendmsg_sock+0x30/0x30 [ 921.670365][T18545] ? __import_iovec+0x5f2/0x850 [ 921.675302][T18545] ? import_iovec+0x73/0xa0 [ 921.679892][T18545] ___sys_sendmsg+0x2a6/0x360 [ 921.684648][T18545] ? __sys_sendmsg+0x2b0/0x2b0 [ 921.689510][T18545] ? __lock_acquire+0x7d80/0x7d80 [ 921.694635][T18545] __se_sys_sendmsg+0x1d0/0x2c0 [ 921.699620][T18545] ? __x64_sys_sendmsg+0x80/0x80 [ 921.704651][T18545] ? lockdep_hardirqs_on+0x98/0x150 [ 921.709928][T18545] do_syscall_64+0x55/0xb0 [ 921.714411][T18545] ? clear_bhb_loop+0x40/0x90 [ 921.719184][T18545] ? clear_bhb_loop+0x40/0x90 [ 921.723939][T18545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.729909][T18545] RIP: 0033:0x7f465b59e159 [ 921.734433][T18545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.754114][T18545] RSP: 002b:00007f465c424028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.762602][T18545] RAX: ffffffffffffffda RBX: 00007f465b825fa0 RCX: 00007f465b59e159 [ 921.770633][T18545] RDX: 0000000000000020 RSI: 0000200000000980 RDI: 0000000000000003 [ 921.778670][T18545] RBP: 00007f465c424090 R08: 0000000000000000 R09: 0000000000000000 [ 921.786698][T18545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 921.794738][T18545] R13: 00007f465b826038 R14: 00007f465b825fa0 R15: 00007ffd9d9223f8 [ 921.802813][T18545] [ 922.178712][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4184'. [ 922.381198][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 922.821868][T18588] netlink: 200084 bytes leftover after parsing attributes in process `syz.2.4192'. [ 922.841758][T18588] netlink: zone id is out of range [ 922.847944][T18588] netlink: zone id is out of range [ 922.853303][T18588] netlink: zone id is out of range [ 922.864345][T18588] netlink: zone id is out of range [ 922.878598][T18588] netlink: zone id is out of range [ 922.888635][T18588] netlink: zone id is out of range [ 922.897562][T18588] netlink: zone id is out of range [ 922.920202][T18588] netlink: zone id is out of range [ 922.928120][T18588] netlink: zone id is out of range [ 922.934646][T18588] netlink: zone id is out of range [ 923.150183][T18595] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4195'. [ 923.181109][T18599] netlink: 'syz.3.4196': attribute type 10 has an invalid length. [ 923.189827][T18599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4196'. [ 923.471779][T18607] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4199'. [ 923.718913][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 923.816300][T18613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4202'. [ 924.083782][T18614] delete_channel: no stack [ 926.207228][T18632] netlink: 'syz.0.4208': attribute type 10 has an invalid length. [ 926.215470][T18632] team0: Device wg1 is up. Set it down before adding it as a team port [ 926.391919][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4209'. [ 926.422930][T18636] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.4210'. [ 926.548468][T18638] netlink: 'syz.3.4211': attribute type 10 has an invalid length. [ 926.764537][T18644] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4214'. [ 928.373085][T18659] syzkaller0: entered promiscuous mode [ 928.390557][T18663] netlink: 'syz.3.4222': attribute type 11 has an invalid length. [ 928.410424][T18663] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.4222'. [ 928.420354][T18659] syzkaller0: entered allmulticast mode [ 931.841341][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.855273][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.134298][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4226'. [ 934.205910][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4226'. [ 934.235617][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4226'. [ 934.257797][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4226'. [ 934.281428][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4226'. [ 934.305793][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4226'. [ 934.325635][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4226'. [ 934.364096][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4226'. [ 934.427168][T18695] netlink: 122540 bytes leftover after parsing attributes in process `syz.2.4229'. [ 934.440887][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4226'. [ 934.597165][T18691] raw_sendmsg: syz.2.4229 forgot to set AF_INET. Fix it! [ 936.194663][T18725] netlink: 'syz.0.4243': attribute type 46 has an invalid length. [ 937.063066][T18746] netlink: 'syz.0.4251': attribute type 10 has an invalid length. [ 938.286041][T18776] syzkaller0: entered promiscuous mode [ 938.291641][T18776] syzkaller0: entered allmulticast mode [ 939.213160][T18793] netlink: 'syz.3.4271': attribute type 9 has an invalid length. [ 939.225413][T18793] __nla_validate_parse: 59 callbacks suppressed [ 939.225430][T18793] netlink: 200264 bytes leftover after parsing attributes in process `syz.3.4271'. [ 941.881654][T18808] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4276'. [ 942.070027][T18820] netlink: 'syz.1.4279': attribute type 10 has an invalid length. [ 942.080552][T18820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4279'. [ 942.627661][T18839] netlink: 'syz.1.4288': attribute type 4 has an invalid length. [ 942.646641][T18840] netlink: 'syz.1.4288': attribute type 4 has an invalid length. [ 943.131100][T18856] netlink: 'syz.1.4293': attribute type 21 has an invalid length. [ 944.868448][T18885] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.4306'. [ 945.273428][T18895] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4311'. [ 945.301524][T18895] bridge_slave_1: default FDB implementation only supports local addresses [ 945.481452][T18898] netlink: 'syz.2.4312': attribute type 10 has an invalid length. [ 945.574987][T18898] team0: Device hsr_slave_0 failed to register rx_handler [ 945.773996][T18911] netlink: 'syz.1.4317': attribute type 1 has an invalid length. [ 945.778883][T18909] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4316'. [ 945.812751][T18911] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.4317'. [ 945.841149][T18915] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.850352][T18911] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4317'. [ 945.968814][T18915] bridge_slave_1 (unregistering): left allmulticast mode [ 945.979786][T18915] bridge_slave_1 (unregistering): left promiscuous mode [ 945.991163][T18915] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.015111][T18947] netlink: 'syz.1.4325': attribute type 4 has an invalid length. [ 947.059440][T18947] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.4325'. [ 947.089535][T18948] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4327'. [ 947.215113][T18950] FAULT_INJECTION: forcing a failure. [ 947.215113][T18950] name failslab, interval 1, probability 0, space 0, times 0 [ 947.242996][T18950] CPU: 1 PID: 18950 Comm: syz.2.4328 Not tainted syzkaller #0 [ 947.250565][T18950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 947.260721][T18950] Call Trace: [ 947.264054][T18950] [ 947.267034][T18950] dump_stack_lvl+0x18c/0x250 [ 947.271822][T18950] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 947.278060][T18950] ? show_regs_print_info+0x20/0x20 [ 947.283335][T18950] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 947.289579][T18950] should_fail_ex+0x394/0x4c0 [ 947.294340][T18950] should_failslab+0x9/0x20 [ 947.298910][T18950] slab_pre_alloc_hook+0x59/0x300 [ 947.304004][T18950] ? sctp_add_bind_addr+0x8c/0x360 [ 947.309192][T18950] __kmem_cache_alloc_node+0x53/0x250 [ 947.314651][T18950] ? sctp_add_bind_addr+0x8c/0x360 [ 947.319831][T18950] kmalloc_trace+0x2a/0xe0 [ 947.324362][T18950] sctp_add_bind_addr+0x8c/0x360 [ 947.329384][T18950] sctp_copy_local_addr_list+0x31b/0x4e0 [ 947.335089][T18950] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 947.340899][T18950] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 947.347042][T18950] ? sctp_v6_is_any+0x64/0x70 [ 947.351893][T18950] ? sctp_copy_one_addr+0x8c/0x350 [ 947.357081][T18950] sctp_bind_addr_copy+0xb3/0x3c0 [ 947.362195][T18950] sctp_connect_new_asoc+0x2f9/0x6a0 [ 947.367550][T18950] ? __sctp_connect+0xd80/0xd80 [ 947.372456][T18950] ? __local_bh_enable_ip+0x13a/0x1c0 [ 947.377902][T18950] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 947.383516][T18950] ? security_sctp_bind_connect+0x89/0xb0 [ 947.389304][T18950] sctp_sendmsg+0x1519/0x27b0 [ 947.394067][T18950] ? sctp_getsockopt+0xb60/0xb60 [ 947.399085][T18950] ? aa_af_perm+0x330/0x330 [ 947.403668][T18950] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 947.410149][T18950] ? sock_rps_record_flow+0x19/0x3f0 [ 947.415495][T18950] ? inet_sendmsg+0xce/0x2a0 [ 947.420138][T18950] ? inet_send_prepare+0x250/0x250 [ 947.425313][T18950] ____sys_sendmsg+0x61b/0x980 [ 947.430159][T18950] ? __sys_sendmsg_sock+0x30/0x30 [ 947.435247][T18950] ? __import_iovec+0x5f2/0x850 [ 947.440176][T18950] ? import_iovec+0x73/0xa0 [ 947.444748][T18950] ___sys_sendmsg+0x2a6/0x360 [ 947.449505][T18950] ? __sys_sendmsg+0x2b0/0x2b0 [ 947.454365][T18950] ? trace_call_bpf+0xc3/0x6c0 [ 947.459225][T18950] __se_sys_sendmsg+0x1d0/0x2c0 [ 947.464148][T18950] ? perf_trace_preemptirq_template+0x269/0x330 [ 947.470465][T18950] ? __x64_sys_sendmsg+0x80/0x80 [ 947.475498][T18950] ? lockdep_hardirqs_on+0x98/0x150 [ 947.480764][T18950] do_syscall_64+0x55/0xb0 [ 947.485253][T18950] ? clear_bhb_loop+0x40/0x90 [ 947.489996][T18950] ? clear_bhb_loop+0x40/0x90 [ 947.494737][T18950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.500703][T18950] RIP: 0033:0x7f617459e159 [ 947.505182][T18950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.524863][T18950] RSP: 002b:00007f6175431028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.533343][T18950] RAX: ffffffffffffffda RBX: 00007f6174825fa0 RCX: 00007f617459e159 [ 947.541378][T18950] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000005 [ 947.549412][T18950] RBP: 00007f6175431090 R08: 0000000000000000 R09: 0000000000000000 [ 947.557516][T18950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 947.565558][T18950] R13: 00007f6174826038 R14: 00007f6174825fa0 R15: 00007ffcb19188d8 [ 947.573614][T18950] [ 948.530732][T18975] netlink: 'syz.2.4337': attribute type 21 has an invalid length. [ 948.668515][T18974] lo: left promiscuous mode [ 948.678392][T18974] lo: entered allmulticast mode [ 948.786126][T18977] lo: entered promiscuous mode [ 948.791108][T18977] lo: left allmulticast mode [ 948.887437][T18981] netlink: 'syz.1.4341': attribute type 10 has an invalid length. [ 948.900986][T18981] syz_tun: entered promiscuous mode [ 949.042871][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4343'. [ 949.495484][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 949.651599][T19004] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4350'. [ 949.665227][T19004] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.4350'. [ 949.680216][T19004] netlink: 'syz.1.4350': attribute type 2 has an invalid length. [ 949.735792][T19011] netlink: 'syz.3.4353': attribute type 10 has an invalid length. [ 949.743951][T19011] team0: entered allmulticast mode [ 949.751493][T19011] team_slave_1: entered allmulticast mode [ 949.757940][T19011] geneve1: entered allmulticast mode [ 949.764494][T19011] net_ratelimit: 92 callbacks suppressed [ 949.764510][T19011] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 950.014371][T19022] lo: left promiscuous mode [ 950.024126][T19022] lo: entered allmulticast mode [ 950.067026][T19022] lo: entered promiscuous mode [ 950.071962][T19022] lo: left allmulticast mode [ 950.086402][T19022] FAULT_INJECTION: forcing a failure. [ 950.086402][T19022] name failslab, interval 1, probability 0, space 0, times 0 [ 950.125658][T19022] CPU: 0 PID: 19022 Comm: syz.1.4358 Not tainted syzkaller #0 [ 950.133233][T19022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 950.143362][T19022] Call Trace: [ 950.146699][T19022] [ 950.149671][T19022] dump_stack_lvl+0x18c/0x250 [ 950.154402][T19022] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 950.160207][T19022] ? show_regs_print_info+0x20/0x20 [ 950.165449][T19022] ? load_image+0x420/0x420 [ 950.169997][T19022] ? mark_lock+0x94/0x320 [ 950.174374][T19022] should_fail_ex+0x394/0x4c0 [ 950.179105][T19022] should_failslab+0x9/0x20 [ 950.183650][T19022] slab_pre_alloc_hook+0x59/0x300 [ 950.188726][T19022] ? __lock_acquire+0x7d80/0x7d80 [ 950.193821][T19022] ? __local_bh_enable_ip+0x13a/0x1c0 [ 950.199231][T19022] kmem_cache_alloc_node+0x5e/0x310 [ 950.204481][T19022] ? __alloc_skb+0x103/0x2c0 [ 950.209116][T19022] __alloc_skb+0x103/0x2c0 [ 950.213576][T19022] __ipv6_ifa_notify+0x1fc/0xb40 [ 950.218559][T19022] ? snmp6_fill_stats+0x9a0/0x9a0 [ 950.223615][T19022] ? node_free_rcu+0x30/0x30 [ 950.228247][T19022] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 950.234338][T19022] ? lock_chain_count+0x20/0x20 [ 950.239256][T19022] ? fib6_flush_trees+0x148/0x1a0 [ 950.244329][T19022] ? inet6_dump_fib+0xab0/0xab0 [ 950.249214][T19022] ? __local_bh_enable_ip+0x13a/0x1c0 [ 950.254630][T19022] ? _local_bh_enable+0xa0/0xa0 [ 950.259511][T19022] ? do_raw_spin_unlock+0x121/0x230 [ 950.264760][T19022] add_addr+0x1b3/0x2c0 [ 950.268966][T19022] addrconf_init_auto_addrs+0x421/0xac0 [ 950.274549][T19022] ? addrconf_dad_run+0x1d0/0x1d0 [ 950.279610][T19022] ? __mutex_lock+0x30d/0xc80 [ 950.284362][T19022] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 950.290034][T19022] ? mutex_unlock+0x10/0x10 [ 950.294569][T19022] ? tls_dev_event+0x769/0xf80 [ 950.299389][T19022] ? addrconf_link_ready+0x117/0x170 [ 950.304715][T19022] addrconf_notify+0xb62/0x1010 [ 950.309612][T19022] notifier_call_chain+0x18f/0x380 [ 950.314769][T19022] __dev_notify_flags+0x1ab/0x310 [ 950.319839][T19022] ? __dev_change_flags+0x6a0/0x6a0 [ 950.325074][T19022] ? __dev_change_flags+0x51c/0x6a0 [ 950.330339][T19022] ? dev_load+0x21/0x1f0 [ 950.334617][T19022] ? dev_get_flags+0x1c0/0x1c0 [ 950.339417][T19022] ? full_name_hash+0x92/0xe0 [ 950.344140][T19022] dev_change_flags+0xde/0x1a0 [ 950.348964][T19022] dev_ioctl+0x7b4/0x1140 [ 950.353330][T19022] sock_do_ioctl+0x239/0x310 [ 950.357961][T19022] ? sock_show_fdinfo+0xb0/0xb0 [ 950.362867][T19022] sock_ioctl+0x5be/0x7e0 [ 950.367245][T19022] ? sock_poll+0x3e0/0x3e0 [ 950.371711][T19022] ? bpf_lsm_file_ioctl+0x9/0x10 [ 950.376690][T19022] ? security_file_ioctl+0x80/0xa0 [ 950.381840][T19022] ? sock_poll+0x3e0/0x3e0 [ 950.386296][T19022] __se_sys_ioctl+0xfd/0x170 [ 950.390936][T19022] do_syscall_64+0x55/0xb0 [ 950.395398][T19022] ? clear_bhb_loop+0x40/0x90 [ 950.400128][T19022] ? clear_bhb_loop+0x40/0x90 [ 950.404855][T19022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.410794][T19022] RIP: 0033:0x7f465b59e159 [ 950.415257][T19022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.434898][T19022] RSP: 002b:00007f465c424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 950.443374][T19022] RAX: ffffffffffffffda RBX: 00007f465b825fa0 RCX: 00007f465b59e159 [ 950.451392][T19022] RDX: 0000200000001000 RSI: 0000000000008914 RDI: 000000000000000c [ 950.459418][T19022] RBP: 00007f465c424090 R08: 0000000000000000 R09: 0000000000000000 [ 950.467442][T19022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 950.475446][T19022] R13: 00007f465b826038 R14: 00007f465b825fa0 R15: 00007ffd9d9223f8 [ 950.483474][T19022] [ 950.538894][T19024] netlink: 'syz.0.4359': attribute type 21 has an invalid length. [ 950.557373][T19024] __nla_validate_parse: 1 callbacks suppressed [ 950.557389][T19024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4359'. [ 950.660602][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 951.297712][T19048] netlink: 'syz.2.4368': attribute type 10 has an invalid length. [ 951.318492][T19048] team0: Device wg1 is up. Set it down before adding it as a team port [ 951.937535][T19059] netlink: 'syz.3.4371': attribute type 2 has an invalid length. [ 951.987964][T19059] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.4371'. [ 952.053150][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4372'. [ 952.470952][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 953.700516][T19081] C: renamed from team_slave_0 [ 953.721440][T19081] netlink: 'syz.2.4377': attribute type 2 has an invalid length. [ 953.763782][T19081] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4377'. [ 953.779996][T19081] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 953.938409][T19093] FAULT_INJECTION: forcing a failure. [ 953.938409][T19093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.990819][T19093] CPU: 0 PID: 19093 Comm: syz.0.4383 Not tainted syzkaller #0 [ 953.998400][T19093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 954.008516][T19093] Call Trace: [ 954.011858][T19093] [ 954.014833][T19093] dump_stack_lvl+0x18c/0x250 [ 954.019593][T19093] ? show_regs_print_info+0x20/0x20 [ 954.024874][T19093] ? load_image+0x420/0x420 [ 954.029445][T19093] ? __lock_acquire+0x7d80/0x7d80 [ 954.034527][T19093] ? snprintf+0xe9/0x140 [ 954.038845][T19093] should_fail_ex+0x394/0x4c0 [ 954.043596][T19093] _copy_to_user+0x2f/0xa0 [ 954.048082][T19093] simple_read_from_buffer+0xe7/0x150 [ 954.053520][T19093] proc_fail_nth_read+0x1e8/0x260 [ 954.058617][T19093] ? proc_fault_inject_write+0x360/0x360 [ 954.064328][T19093] ? fsnotify_perm+0x271/0x5e0 [ 954.069165][T19093] ? proc_fault_inject_write+0x360/0x360 [ 954.074874][T19093] vfs_read+0x298/0x990 [ 954.079109][T19093] ? kernel_read+0x1e0/0x1e0 [ 954.083779][T19093] ? __fget_files+0x28/0x460 [ 954.088451][T19093] ? __fget_files+0x3fc/0x460 [ 954.093209][T19093] ? __fdget_pos+0x2a3/0x330 [ 954.097871][T19093] ? ksys_read+0x74/0x260 [ 954.102280][T19093] ksys_read+0x151/0x260 [ 954.106601][T19093] ? vfs_write+0x9a0/0x9a0 [ 954.111097][T19093] ? lockdep_hardirqs_on+0x98/0x150 [ 954.116362][T19093] do_syscall_64+0x55/0xb0 [ 954.120844][T19093] ? clear_bhb_loop+0x40/0x90 [ 954.125593][T19093] ? clear_bhb_loop+0x40/0x90 [ 954.130356][T19093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 954.136322][T19093] RIP: 0033:0x7f5c0f55e98e [ 954.140809][T19093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 954.160487][T19093] RSP: 002b:00007f5c1048dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 954.169013][T19093] RAX: ffffffffffffffda RBX: 00007f5c1048e6c0 RCX: 00007f5c0f55e98e [ 954.177050][T19093] RDX: 000000000000000f RSI: 00007f5c1048e0a0 RDI: 000000000000000a [ 954.185091][T19093] RBP: 00007f5c1048e090 R08: 0000000000000000 R09: 0000000000000000 [ 954.193124][T19093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.201157][T19093] R13: 00007f5c0f826038 R14: 00007f5c0f825fa0 R15: 00007fff0096abe8 [ 954.209216][T19093] [ 955.250779][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 956.573368][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 957.390702][T19167] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4408'. [ 958.514692][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 959.282057][T19209] netlink: 'syz.2.4422': attribute type 29 has an invalid length. [ 959.297944][T19212] netlink: 'syz.2.4422': attribute type 29 has an invalid length. [ 959.324270][T19212] netlink: 'syz.2.4422': attribute type 29 has an invalid length. [ 959.467674][T19209] netlink: 'syz.2.4422': attribute type 21 has an invalid length. [ 959.482174][T19209] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4422'. [ 959.834114][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 959.882186][T19222] netlink: 'syz.2.4427': attribute type 10 has an invalid length. [ 960.667183][T19249] syzkaller0: entered promiscuous mode [ 960.760191][T19249] syzkaller0: entered allmulticast mode [ 961.230858][T12309] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 961.977122][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 962.340425][T19293] netlink: 'syz.0.4451': attribute type 27 has an invalid length. [ 962.577457][T19301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4455'. [ 962.883197][T19314] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.4459'. [ 962.912476][T19317] netlink: 'syz.2.4463': attribute type 29 has an invalid length. [ 962.949235][T19317] netlink: 'syz.2.4463': attribute type 29 has an invalid length. [ 963.124656][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 963.319092][T19325] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4464'. [ 966.131041][T19333] netlink: 'syz.3.4467': attribute type 10 has an invalid length. [ 966.157261][T19333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4467'. [ 966.892179][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 966.971568][T19359] netlink: 'syz.0.4477': attribute type 21 has an invalid length. [ 968.312163][T19383] netlink: 'syz.3.4484': attribute type 3 has an invalid length. [ 968.415315][T19383] netlink: 'syz.3.4484': attribute type 5 has an invalid length. [ 968.848573][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 970.500239][T19421] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4498'. [ 970.513407][T19421] bridge_slave_1: default FDB implementation only supports local addresses [ 970.788190][T12309] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 971.285832][T19430] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.4502'. [ 971.325095][T19430] openvswitch: netlink: IP tunnel dst address not specified [ 971.780387][T19441] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.4507'. [ 971.926212][T19453] netlink: 'syz.0.4511': attribute type 11 has an invalid length. [ 971.934121][T19453] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4511'. [ 974.952947][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 976.451537][T19483] FAULT_INJECTION: forcing a failure. [ 976.451537][T19483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.491882][T19483] CPU: 0 PID: 19483 Comm: syz.1.4523 Not tainted syzkaller #0 [ 976.499539][T19483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 976.509655][T19483] Call Trace: [ 976.512989][T19483] [ 976.515966][T19483] dump_stack_lvl+0x18c/0x250 [ 976.520715][T19483] ? show_regs_print_info+0x20/0x20 [ 976.525999][T19483] ? load_image+0x420/0x420 [ 976.530571][T19483] ? __might_fault+0xaa/0x120 [ 976.535313][T19483] ? __lock_acquire+0x7d80/0x7d80 [ 976.540406][T19483] should_fail_ex+0x394/0x4c0 [ 976.545245][T19483] _copy_from_iter+0x1cd/0x1290 [ 976.550168][T19483] ? rep_movs_alternative+0x4a/0x90 [ 976.555449][T19483] ? copyout_mc+0x70/0x70 [ 976.559860][T19483] ? copyout_mc+0x70/0x70 [ 976.564255][T19483] ? __virt_addr_valid+0x10c/0x380 [ 976.569445][T19483] ? page_copy_sane+0x16a/0x270 [ 976.574340][T19483] copy_page_from_iter+0x7b/0x100 [ 976.579406][T19483] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 976.585258][T19483] unix_stream_sendmsg+0x562/0xbf0 [ 976.590424][T19483] ? unix_show_fdinfo+0x280/0x280 [ 976.595483][T19483] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 976.602050][T19483] ? apparmor_socket_sendmsg+0x8e/0x330 [ 976.607628][T19483] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 976.612983][T19483] ? security_socket_sendmsg+0x80/0xa0 [ 976.618495][T19483] ? unix_show_fdinfo+0x280/0x280 [ 976.623553][T19483] ____sys_sendmsg+0x61b/0x980 [ 976.628359][T19483] ? __asan_memset+0x22/0x40 [ 976.632986][T19483] ? __sys_sendmsg_sock+0x30/0x30 [ 976.638044][T19483] ? __import_iovec+0x5f2/0x850 [ 976.642950][T19483] ? import_iovec+0x73/0xa0 [ 976.647494][T19483] ___sys_sendmsg+0x2a6/0x360 [ 976.652209][T19483] ? __sys_sendmsg+0x2b0/0x2b0 [ 976.657027][T19483] ? __lock_acquire+0x7d80/0x7d80 [ 976.662107][T19483] __se_sys_sendmsg+0x1d0/0x2c0 [ 976.666997][T19483] ? __x64_sys_sendmsg+0x80/0x80 [ 976.672002][T19483] ? lockdep_hardirqs_on+0x98/0x150 [ 976.677245][T19483] do_syscall_64+0x55/0xb0 [ 976.681781][T19483] ? clear_bhb_loop+0x40/0x90 [ 976.686498][T19483] ? clear_bhb_loop+0x40/0x90 [ 976.691216][T19483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.697149][T19483] RIP: 0033:0x7f465b59e159 [ 976.701601][T19483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.721236][T19483] RSP: 002b:00007f465c424028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.729702][T19483] RAX: ffffffffffffffda RBX: 00007f465b825fa0 RCX: 00007f465b59e159 [ 976.737721][T19483] RDX: 0000000000000020 RSI: 0000200000000980 RDI: 0000000000000003 [ 976.745734][T19483] RBP: 00007f465c424090 R08: 0000000000000000 R09: 0000000000000000 [ 976.753745][T19483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 976.761756][T19483] R13: 00007f465b826038 R14: 00007f465b825fa0 R15: 00007ffd9d9223f8 [ 976.769777][T19483] [ 977.020246][T12309] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 977.103773][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4528'. [ 978.109937][T19524] netlink: 'syz.2.4538': attribute type 10 has an invalid length. [ 978.121321][T19524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4538'. [ 978.132015][T19524] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 978.607996][T12309] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 979.366874][T19558] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4548'. [ 979.464541][T19562] netlink: 'syz.2.4549': attribute type 10 has an invalid length. [ 979.473166][T19562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4549'. [ 979.773174][T12309] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 979.970197][T19582] netlink: 'syz.3.4556': attribute type 3 has an invalid length. [ 979.987796][T19582] netlink: 'syz.3.4556': attribute type 16 has an invalid length. [ 980.004824][T19582] netlink: 'syz.3.4556': attribute type 18 has an invalid length. [ 980.026002][T19582] netlink: 'syz.3.4556': attribute type 20 has an invalid length. [ 980.033939][T19582] netlink: 'syz.3.4556': attribute type 25 has an invalid length. [ 980.075507][T19592] netlink: 'syz.1.4557': attribute type 10 has an invalid length. [ 980.093758][T19592] team0: Device wg1 is up. Set it down before adding it as a team port [ 980.506462][T19607] netlink: 539 bytes leftover after parsing attributes in process `syz.0.4562'. [ 980.517012][T19609] netlink: 'syz.3.4560': attribute type 2 has an invalid length. [ 980.524828][T19609] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.4560'. [ 980.547687][T19605] netlink: 'syz.0.4562': attribute type 2 has an invalid length. [ 980.585316][T19605] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4562'. [ 980.838509][T19577] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 982.600801][T19650] delete_channel: no stack [ 982.653437][T19659] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4578'. [ 982.683992][T19659] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4578'. [ 982.832576][T19577] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 984.221705][T19577] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 985.558468][T19735] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4600'. [ 985.961881][T19577] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 987.289206][T19577] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 987.895764][T19577] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 988.104920][T19771] syzkaller0: entered promiscuous mode [ 988.127234][T19771] syzkaller0: entered allmulticast mode [ 991.261394][T19790] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4617'. [ 991.280624][T19790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 991.296165][T19804] validate_nla: 3 callbacks suppressed [ 991.296187][T19804] netlink: 'syz.3.4620': attribute type 2 has an invalid length. [ 991.318376][T19804] netlink: 'syz.3.4620': attribute type 8 has an invalid length. [ 991.326899][T19804] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4620'. [ 991.649767][T19820] netlink: 'syz.0.4625': attribute type 10 has an invalid length. [ 992.055661][T19577] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 992.563266][T19848] netlink: 'syz.2.4635': attribute type 39 has an invalid length. [ 992.602273][T19847] netlink: 'syz.2.4635': attribute type 39 has an invalid length. [ 992.794432][T19847] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4635'. [ 993.208021][T19867] netlink: 'syz.1.4641': attribute type 21 has an invalid length. [ 993.281256][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.295234][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.852391][T19894] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4649'. [ 993.876263][T19894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 994.265967][T19897] delete_channel: no stack [ 994.976182][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 994.988733][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 995.017552][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 995.028251][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 995.042938][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 995.056020][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 995.187961][T19918] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4658'. [ 995.225840][T19918] bridge_slave_1: default FDB implementation only supports local addresses [ 995.702500][T19913] chnl_net:caif_netlink_parms(): no params data found [ 996.194868][T19913] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.205503][T19913] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.251607][T19913] bridge_slave_0: entered allmulticast mode [ 996.285493][T19913] bridge_slave_0: entered promiscuous mode [ 996.353573][T19913] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.398099][T19913] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.435806][T19913] bridge_slave_1: entered allmulticast mode [ 996.443529][T19913] bridge_slave_1: entered promiscuous mode [ 996.502839][T19953] netlink: 189156 bytes leftover after parsing attributes in process `syz.1.4667'. [ 996.548710][T19956] netlink: 'syz.0.4668': attribute type 4 has an invalid length. [ 996.575850][T19956] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.4668'. [ 996.688416][T19913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.702358][T19913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.794226][T17136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.961975][T17136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.010012][T19967] netlink: 'syz.0.4671': attribute type 10 has an invalid length. [ 997.117241][T19577] Bluetooth: hci2: command tx timeout [ 997.162514][T19967] team0: Port device geneve1 added [ 997.269066][T17136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.332825][T19913] team0: Port device team_slave_0 added [ 997.344444][T19913] team0: Port device team_slave_1 added [ 997.351890][T19969] netlink: 'syz.2.4672': attribute type 10 has an invalid length. [ 997.365476][T19969] netlink: 'syz.2.4672': attribute type 11 has an invalid length. [ 997.384208][T19969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4672'. [ 997.466161][T17136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.488488][T19973] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4673'. [ 997.518202][T19913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.542821][T19913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.576258][T19913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.598772][T19913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.610600][T19913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.637856][T19913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.761789][T19913] hsr_slave_0: entered promiscuous mode [ 997.777661][T19913] hsr_slave_1: entered promiscuous mode [ 997.797999][T19913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.821163][T19913] Cannot create hsr debugfs directory [ 997.954657][T19985] netlink: 'syz.0.4678': attribute type 21 has an invalid length. [ 997.983252][T19985] netlink: 'syz.0.4678': attribute type 4 has an invalid length. [ 998.005271][T19985] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4678'. [ 998.610794][T20008] FAULT_INJECTION: forcing a failure. [ 998.610794][T20008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.653109][T20008] CPU: 0 PID: 20008 Comm: syz.0.4683 Not tainted syzkaller #0 [ 998.660688][T20008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 998.670808][T20008] Call Trace: [ 998.674131][T20008] [ 998.677169][T20008] dump_stack_lvl+0x18c/0x250 [ 998.681928][T20008] ? show_regs_print_info+0x20/0x20 [ 998.687209][T20008] ? load_image+0x420/0x420 [ 998.691795][T20008] ? __might_fault+0xaa/0x120 [ 998.696532][T20008] ? __lock_acquire+0x7d80/0x7d80 [ 998.701624][T20008] should_fail_ex+0x394/0x4c0 [ 998.706377][T20008] _copy_from_iter+0x1cd/0x1290 [ 998.711306][T20008] ? rep_movs_alternative+0x4a/0x90 [ 998.716589][T20008] ? copyout_mc+0x70/0x70 [ 998.721004][T20008] ? copyout_mc+0x70/0x70 [ 998.725391][T20008] ? __virt_addr_valid+0x10c/0x380 [ 998.730569][T20008] ? page_copy_sane+0x16a/0x270 [ 998.735495][T20008] copy_page_from_iter+0x7b/0x100 [ 998.740593][T20008] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 998.746649][T20008] unix_stream_sendmsg+0x562/0xbf0 [ 998.751866][T20008] ? unix_show_fdinfo+0x280/0x280 [ 998.756960][T20008] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 998.763439][T20008] ? apparmor_socket_sendmsg+0x8e/0x330 [ 998.769055][T20008] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 998.774404][T20008] ? security_socket_sendmsg+0x80/0xa0 [ 998.779927][T20008] ? unix_show_fdinfo+0x280/0x280 [ 998.785034][T20008] ____sys_sendmsg+0x61b/0x980 [ 998.789937][T20008] ? __asan_memset+0x22/0x40 [ 998.794602][T20008] ? __sys_sendmsg_sock+0x30/0x30 [ 998.799696][T20008] ? __import_iovec+0x5f2/0x850 [ 998.804640][T20008] ? import_iovec+0x73/0xa0 [ 998.809227][T20008] ___sys_sendmsg+0x2a6/0x360 [ 998.813977][T20008] ? __sys_sendmsg+0x2b0/0x2b0 [ 998.818828][T20008] ? trace_call_bpf+0xc3/0x6c0 [ 998.823670][T20008] __se_sys_sendmsg+0x1d0/0x2c0 [ 998.828609][T20008] ? perf_trace_preemptirq_template+0x269/0x330 [ 998.834927][T20008] ? __x64_sys_sendmsg+0x80/0x80 [ 998.839990][T20008] ? lockdep_hardirqs_on+0x98/0x150 [ 998.845254][T20008] do_syscall_64+0x55/0xb0 [ 998.849738][T20008] ? clear_bhb_loop+0x40/0x90 [ 998.854487][T20008] ? clear_bhb_loop+0x40/0x90 [ 998.859224][T20008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 998.865185][T20008] RIP: 0033:0x7f5c0f59e159 [ 998.869652][T20008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.889315][T20008] RSP: 002b:00007f5c1048e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.897973][T20008] RAX: ffffffffffffffda RBX: 00007f5c0f825fa0 RCX: 00007f5c0f59e159 [ 998.906011][T20008] RDX: 0000000000000020 RSI: 0000200000000980 RDI: 0000000000000003 [ 998.914045][T20008] RBP: 00007f5c1048e090 R08: 0000000000000000 R09: 0000000000000000 [ 998.922084][T20008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 998.930120][T20008] R13: 00007f5c0f826038 R14: 00007f5c0f825fa0 R15: 00007fff0096abe8 [ 998.938216][T20008] [ 999.144199][T20017] lo: left promiscuous mode [ 999.150554][T20017] lo: entered allmulticast mode [ 999.200634][T19577] Bluetooth: hci2: command tx timeout [ 999.249803][T20020] netlink: 'syz.2.4686': attribute type 3 has an invalid length. [ 999.257851][T20020] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4686'. [ 999.691127][T20034] bridge0: port 3(dummy0) entered disabled state [ 999.697908][T20034] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.705636][T20034] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.778163][T20034] bridge0: entered allmulticast mode [ 1000.461186][T19913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1000.493910][T19913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1000.571025][T19913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1000.647185][T19913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1000.948678][T20072] netlink: 'syz.2.4699': attribute type 10 has an invalid length. [ 1000.973697][T20072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4699'. [ 1001.000909][T20072] team0: entered promiscuous mode [ 1001.012228][T20072] team_slave_1: entered promiscuous mode [ 1001.033024][T20072] geneve1: entered promiscuous mode [ 1001.061451][T20072] team0: entered allmulticast mode [ 1001.079316][T20072] team_slave_1: entered allmulticast mode [ 1001.101046][T20072] geneve1: entered allmulticast mode [ 1001.113814][T20072] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1001.276521][T19577] Bluetooth: hci2: command tx timeout [ 1001.459607][T20080] netlink: 'syz.0.4702': attribute type 3 has an invalid length. [ 1001.493541][T20080] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4702'. [ 1001.570148][T20087] netlink: 'syz.0.4702': attribute type 3 has an invalid length. [ 1001.596011][T20087] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4702'. [ 1001.724259][T17136] hsr_slave_0: left promiscuous mode [ 1001.746932][T17136] hsr_slave_1: left promiscuous mode [ 1001.759669][T17136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.775565][T17136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.800171][T17136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.822778][T17136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.843021][T17136] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1001.851465][T17136] batman_adv: batadv0: Removing interface: veth0_vlan [ 1001.860998][T17136] dummy0: left allmulticast mode [ 1001.880366][T17136] dummy0: left promiscuous mode [ 1001.890714][T17136] bridge0: port 3(dummy0) entered disabled state [ 1001.911326][T17136] bridge_slave_1: left allmulticast mode [ 1001.917507][T17136] bridge_slave_1: left promiscuous mode [ 1001.923402][T17136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.954693][T17136] bridge_slave_0: left allmulticast mode [ 1001.962571][T17136] bridge_slave_0: left promiscuous mode [ 1001.978087][T17136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.044303][T17136] veth1_vlan: left promiscuous mode [ 1002.507565][T17136] geneve1 (unregistering): left promiscuous mode [ 1002.514933][T17136] geneve1 (unregistering): left allmulticast mode [ 1002.544813][T17136] team0 (unregistering): Port device geneve1 removed [ 1003.242981][T17136] team_slave_1 (unregistering): left promiscuous mode [ 1003.259700][T17136] team_slave_1 (unregistering): left allmulticast mode [ 1003.274607][T17136] team0 (unregistering): Port device team_slave_1 removed [ 1003.365617][T19577] Bluetooth: hci2: command tx timeout [ 1004.051389][T19913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.110228][T19913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.169155][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.176452][ T9065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.242023][ T9064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.249333][ T9064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.472042][T20137] netlink: 'syz.2.4720': attribute type 10 has an invalid length. [ 1004.515345][T20137] team0: Device wg1 is up. Set it down before adding it as a team port [ 1004.539296][T20138] bridge0: port 2(veth0_to_bridge) entered blocking state [ 1004.576130][T20138] bridge0: port 2(veth0_to_bridge) entered disabled state [ 1004.583627][T20138] veth0_to_bridge: entered allmulticast mode [ 1004.609790][T20138] veth0_to_bridge: entered promiscuous mode [ 1004.624722][T20138] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1004.666262][T20138] bridge0: port 2(veth0_to_bridge) entered blocking state [ 1004.673621][T20138] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 1005.009336][T19913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.103768][T19913] veth0_vlan: entered promiscuous mode [ 1005.143789][T19913] veth1_vlan: entered promiscuous mode [ 1005.240098][T19913] veth0_macvtap: entered promiscuous mode [ 1005.273707][T19913] veth1_macvtap: entered promiscuous mode [ 1005.504174][T20157] syzkaller0: entered promiscuous mode [ 1005.516585][T20157] syzkaller0: entered allmulticast mode [ 1005.540667][T19913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.558912][T19913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.574123][T19913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.585951][T19913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.603768][T19913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.614504][T19913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.631368][T19913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.700682][T19913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.724434][T19913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.746841][T19913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.763398][T19913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.774903][T19913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.790330][T19913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.803009][T19913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.859139][T19913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.890128][T19913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.899474][T19913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.908775][T19913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.094276][ T9064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.124545][ T9064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.172890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.185507][ T9065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.200901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.219461][ T9065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.228117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.251060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.274472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.298070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.321523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.347236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.372433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.397764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.033263][T20193] netlink: 'syz.3.4734': attribute type 2 has an invalid length. [ 1011.059009][T20193] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.4734'. [ 1011.175479][ C0] net_ratelimit: 1318 callbacks suppressed [ 1011.175496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.194762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.208149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.221587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.235410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.248718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.262145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.275555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.289256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.302751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.713147][T20198] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1012.762207][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.772978][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1012.782394][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.796044][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1012.814265][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1012.821955][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1013.464291][T20197] chnl_net:caif_netlink_parms(): no params data found [ 1013.650578][T20197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.662083][T20197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.673058][T20197] bridge_slave_0: entered allmulticast mode [ 1013.686673][T20197] bridge_slave_0: entered promiscuous mode [ 1013.703666][T20197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.722610][T20197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.733358][T20197] bridge_slave_1: entered allmulticast mode [ 1013.749035][T20197] bridge_slave_1: entered promiscuous mode [ 1013.821514][T20197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.849464][T20197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.933722][T20197] team0: Port device team_slave_0 added [ 1013.959001][T20197] team0: Port device team_slave_1 added [ 1014.021158][T20197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.032339][T20197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.069557][T20197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.089921][T20197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.101186][T20197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.134610][T20197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.875400][ T5787] Bluetooth: hci0: command tx timeout [ 1016.189390][ C0] net_ratelimit: 1914 callbacks suppressed [ 1016.189432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.213929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.232876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.252631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.273664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.294186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.314105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.335886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.355025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.379331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.956076][ T5787] Bluetooth: hci0: command tx timeout [ 1017.983980][T20197] hsr_slave_0: entered promiscuous mode [ 1018.052192][T20197] hsr_slave_1: entered promiscuous mode [ 1019.045382][ T5787] Bluetooth: hci0: command tx timeout [ 1020.323139][T20197] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.038691][T20238] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4742'. [ 1021.115381][ T5787] Bluetooth: hci0: command tx timeout [ 1021.196878][ C0] net_ratelimit: 2707 callbacks suppressed [ 1021.196899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.216808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.233907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.247946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.261911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.275868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.289797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.303745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.317794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.331760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.200099][T20247] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4744'. [ 1023.695379][T20260] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4748'. [ 1024.485854][T20268] netlink: 'syz.2.4750': attribute type 2 has an invalid length. [ 1024.494064][T20268] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.4750'. [ 1026.205419][ C0] net_ratelimit: 3246 callbacks suppressed [ 1026.205442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.224790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.238217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.251777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.265280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.285661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.299273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.312653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.326395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.339912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.791808][T20197] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.546799][T20300] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1028.764732][T20304] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4760'. [ 1031.215730][ C0] net_ratelimit: 4445 callbacks suppressed [ 1031.215753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.216591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1031.225726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.237624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1031.248274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.262404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1031.272379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.275673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.288095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1031.298637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.225429][ C1] net_ratelimit: 14667 callbacks suppressed [ 1036.225453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1036.226795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.232523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1036.247377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.256611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1036.271456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.280493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1036.295265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.304425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1036.319106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.235300][ C1] net_ratelimit: 16281 callbacks suppressed [ 1041.235322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1041.237278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.242406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1041.257060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.266406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1041.281029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.290303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1041.305802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.314865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1041.328998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.245309][ C1] net_ratelimit: 16141 callbacks suppressed [ 1046.245333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1046.247337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.252502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1046.267141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.276489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1046.290846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.300411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1046.314938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.324187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1046.338991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.255318][ C1] net_ratelimit: 16450 callbacks suppressed [ 1051.255340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1051.255500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.262442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1051.277295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.286408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1051.300955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.310424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1051.324832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.334240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1051.349050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.265492][ C1] net_ratelimit: 16366 callbacks suppressed [ 1056.265518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.269305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.272692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.287377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.297623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.311014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.320547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.335624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.344669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.359048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.269636][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.299913][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.275342][ C1] net_ratelimit: 16188 callbacks suppressed [ 1061.275365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.276263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.282542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.297623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.306629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.321789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.330485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.344799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.354419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.369217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.285138][ C1] net_ratelimit: 16226 callbacks suppressed [ 1066.285162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1066.289998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.291544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1066.291918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1066.292295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1066.292700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1066.293483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1066.316769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.328037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.329265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.295135][ C1] net_ratelimit: 15290 callbacks suppressed [ 1071.295158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.298036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.302320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.317299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.327275][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.341075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.350081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.365264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.374084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.388902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.305268][ C1] net_ratelimit: 14327 callbacks suppressed [ 1076.305288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.305714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.312295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.327129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.336329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.351548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.360230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.374574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.384167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.398701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.315230][ C1] net_ratelimit: 13528 callbacks suppressed [ 1081.315252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.318338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.321678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.322111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.322496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.322885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.323383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.347170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.356282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.359637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.325217][ C1] net_ratelimit: 15794 callbacks suppressed [ 1086.325238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.325857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.332522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.347051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.357603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.371023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.380601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.395312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.404620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.418803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.335367][ C1] net_ratelimit: 16214 callbacks suppressed [ 1091.335389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1091.336155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.342768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1091.357833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.366855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1091.381459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.390629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1091.405189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.414537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1091.428963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.345146][ C1] net_ratelimit: 13513 callbacks suppressed [ 1096.345169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1096.345907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.352105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1096.373972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.376446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1096.397491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.400373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1096.421590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.424221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1096.446063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.355176][ C1] net_ratelimit: 14557 callbacks suppressed [ 1101.355197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1101.356611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.362320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1101.376845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.386414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1101.401867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.410315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1101.424919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.435148][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1101.449050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.365415][ C1] net_ratelimit: 16171 callbacks suppressed [ 1106.365438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1106.366738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.372635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1106.387058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.396640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1106.410936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.421165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1106.434815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.444371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1106.459547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.375866][ C1] net_ratelimit: 13693 callbacks suppressed [ 1111.375888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1111.376341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.382983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1111.397888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.407262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1111.421903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.431035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1111.445770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.455002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1111.469813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.385374][ C1] net_ratelimit: 12840 callbacks suppressed [ 1116.385399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1116.387920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.391831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1116.392217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1116.392642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1116.393023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1116.393862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1116.416942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.428311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.429638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.395233][ C1] net_ratelimit: 13115 callbacks suppressed [ 1121.395257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.405391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.413646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.414018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.414489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.414860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.415668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.439288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.451527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.451920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1125.589310][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.618488][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.408139][ C1] net_ratelimit: 13121 callbacks suppressed [ 1126.408161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1126.408790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.415414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1126.416020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1126.438174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.440094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1126.440525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1126.440916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1126.441484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1126.462633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:1a:b9:25:b3:f3, vlan:0) [ 1128.516953][T19577] Bluetooth: hci2: command 0x0406 tx timeout [ 1131.415107][ C0] net_ratelimit: 13535 callbacks suppressed [ 1131.415128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.415464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1131.424792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.434085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1131.449349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.458768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1131.473138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.482759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1131.496970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:1a:b9:25:b3:f3, vlan:0) [ 1131.506625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1133.995087][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1134.002225][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20304/3:b..l [ 1134.010862][ C1] rcu: (detected by 1, t=10502 jiffies, g=97429, q=48812 ncpus=2) [ 1134.018843][ C1] task:syz.2.4760 state:R running task stack:22744 pid:20304 ppid:13367 flags:0x00004006 [ 1134.031045][ C1] Call Trace: [ 1134.034387][ C1] [ 1134.037375][ C1] __schedule+0x15ae/0x4660 [ 1134.041980][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1134.049255][ C1] ? lock_chain_count+0x20/0x20 [ 1134.054175][ C1] ? asan.module_dtor+0x20/0x20 [ 1134.059206][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1134.064488][ C1] preempt_schedule_irq+0xbf/0x150 [ 1134.069678][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1134.075474][ C1] ? lock_chain_count+0x20/0x20 [ 1134.080390][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1134.086276][ C1] irqentry_exit+0x67/0x70 [ 1134.090773][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1134.096819][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x45/0x60 [ 1134.103040][ C1] Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 24 16 00 00 00 74 2c 8b 91 00 16 00 00 83 fa 02 75 21 48 8b 91 08 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 04 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 1134.122713][ C1] RSP: 0018:ffffc9000350f498 EFLAGS: 00000246 [ 1134.128838][ C1] RAX: ffffffff89443d50 RBX: 0000000000000000 RCX: ffff88802b148000 [ 1134.136868][ C1] RDX: ffffc9000cc29000 RSI: 000000000007c16e RDI: ffffffff8b1d3b40 [ 1134.144995][ C1] RBP: ffffc9000350f5d0 R08: ffffffff911eb5c7 R09: 1ffffffff223d6b8 [ 1134.153027][ C1] R10: dffffc0000000000 R11: fffffbfff223d6b9 R12: ffff888075a23a00 [ 1134.161064][ C1] R13: ffff8880250e89c8 R14: 0000000000000001 R15: dffffc0000000000 [ 1134.169100][ C1] ? ip6_finish_output2+0xfa0/0x1690 [ 1134.174455][ C1] ip6_finish_output2+0xfa0/0x1690 [ 1134.179641][ C1] ? ip6_finish_output2+0x71a/0x1690 [ 1134.184985][ C1] ? nf_hook+0x390/0x390 [ 1134.189286][ C1] ? ip6_copy_metadata+0x78c/0xc10 [ 1134.194464][ C1] ip6_fragment+0x198d/0x1fd0 [ 1134.199232][ C1] ? nf_hook+0x390/0x390 [ 1134.203544][ C1] ? ip6_frag_next+0xca0/0xca0 [ 1134.208356][ C1] ? ip6_finish_output+0x3e6/0x7f0 [ 1134.213544][ C1] ? ip6_send_skb+0x10a/0x380 [ 1134.218282][ C1] ip6_send_skb+0x1cd/0x380 [ 1134.222846][ C1] ping_v6_sendmsg+0xe60/0x1130 [ 1134.227785][ C1] ? ping_v6_pre_connect+0x30/0x30 [ 1134.232978][ C1] ? inet_sendmsg+0x10d/0x2a0 [ 1134.237720][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1134.243147][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1134.248412][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1134.253421][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1134.258692][ C1] ? inet_sendmsg+0x10d/0x2a0 [ 1134.263444][ C1] ? inet_sendmsg+0x10d/0x2a0 [ 1134.268190][ C1] ? inet_send_prepare+0x250/0x250 [ 1134.273371][ C1] ____sys_sendmsg+0x61b/0x980 [ 1134.278214][ C1] ? __asan_memset+0x22/0x40 [ 1134.282880][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 1134.288055][ C1] ? __import_iovec+0x5f2/0x850 [ 1134.293071][ C1] ? import_iovec+0x73/0xa0 [ 1134.297644][ C1] ___sys_sendmsg+0x2a6/0x360 [ 1134.302399][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 1134.307280][ C1] __se_sys_sendmsg+0x1d0/0x2c0 [ 1134.312815][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 1134.319139][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 1134.324161][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1134.329432][ C1] do_syscall_64+0x55/0xb0 [ 1134.333916][ C1] ? clear_bhb_loop+0x40/0x90 [ 1134.338659][ C1] ? clear_bhb_loop+0x40/0x90 [ 1134.343411][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.349375][ C1] RIP: 0033:0x7f617459e159 [ 1134.353879][ C1] RSP: 002b:00007f6175431028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.362359][ C1] RAX: ffffffffffffffda RBX: 00007f6174825fa0 RCX: 00007f617459e159 [ 1134.370391][ C1] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 000000000000000a [ 1134.378423][ C1] RBP: 00007f617463506b R08: 0000000000000000 R09: 0000000000000000 [ 1134.386806][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.394868][ C1] R13: 00007f6174826038 R14: 00007f6174825fa0 R15: 00007ffcb19188d8 [ 1134.403097][ C1] [ 1136.425140][ C1] net_ratelimit: 15516 callbacks suppressed [ 1136.425163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1136.426123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.432249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1136.448735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.456281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1136.472301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.480124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1136.495788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:1a:b9:25:b3:f3, vlan:0) [ 1136.504295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1136.517141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.435237][ C1] net_ratelimit: 16620 callbacks suppressed [ 1141.435259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1141.435771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.442375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1141.457254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.466351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1141.481193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.490284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1141.505697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.514172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1141.528350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:1a:b9:25:b3:f3, vlan:0)