last executing test programs: 20.302798178s ago: executing program 2 (id=1414): syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00'}) socketpair(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'macvlan1\x00', 0x600}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, 0x0, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 20.174209264s ago: executing program 0 (id=1416): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd6, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f0000000640), 0x4}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x15, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x104e2c, 0xc78, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x106181, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.048021045s ago: executing program 1 (id=1418): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2, 0x18}, 0x3}}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="d4020000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0xaa, &(0x7f0000000280)=""/170}, 0x94) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x30, &(0x7f0000000000)=[{&(0x7f00000000c0)="d80000001c0081004e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100910401a8001600200001400300000803600cfab94dcf5c0461c1d67fe408e8d8ef075c07503c6bbace8017cb090000001fb7ad643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece005000000ee5de6cc00000000dbef3d610993452a0000000000000000000000fd064e3adee5bf7933", 0xd8}, {&(0x7f00000001c0)="ac97708c63ad30539bfe95524df78045643cf53f08b2ef08c14441298a7a24ef75a2a0431db571133b632a2d8e008885e64216e8b9a32a91a8f96fe738fd3fca75a9e515107d2573791f8a13a2d8e0bbccd9289435664a197343e46d3794ad6566d386019f70d9b6c1aa3b895334fe781855fb5badc4214ace262cdbb306d81db6971e1c48e0c3455b57d7545122af32df5b2718cc37db4607b7f08dd562dc0c82f0f65aca6a65f9476fb71b88cc80c8"}], 0x1, 0x0, 0x0, 0x7400}, 0x20004840) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x1e, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2, 0x18}, 0x3}}, 0x80, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="d4020000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0xaa, &(0x7f0000000280)=""/170}, 0x94) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x30, &(0x7f0000000000)=[{&(0x7f00000000c0)="d80000001c0081004e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100910401a8001600200001400300000803600cfab94dcf5c0461c1d67fe408e8d8ef075c07503c6bbace8017cb090000001fb7ad643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece005000000ee5de6cc00000000dbef3d610993452a0000000000000000000000fd064e3adee5bf7933", 0xd8}, {&(0x7f00000001c0)="ac97708c63ad30539bfe95524df78045643cf53f08b2ef08c14441298a7a24ef75a2a0431db571133b632a2d8e008885e64216e8b9a32a91a8f96fe738fd3fca75a9e515107d2573791f8a13a2d8e0bbccd9289435664a197343e46d3794ad6566d386019f70d9b6c1aa3b895334fe781855fb5badc4214ace262cdbb306d81db6971e1c48e0c3455b57d7545122af32df5b2718cc37db4607b7f08dd562dc0c82f0f65aca6a65f9476fb71b88cc80c8"}], 0x1, 0x0, 0x0, 0x7400}, 0x20004840) (async) 19.948541471s ago: executing program 3 (id=1419): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x8, 0x18}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0x1, &(0x7f0000000440)="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", &(0x7f0000000180)=""/101}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r2, 0x4) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80) setsockopt$sock_attach_bpf(r3, 0x6, 0x9, &(0x7f0000000200), 0x4) 19.947816576s ago: executing program 2 (id=1420): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)}], 0x1}, 0x4) 19.835239121s ago: executing program 3 (id=1421): socket$kcm(0x10, 0xc6eac53bac6bcf08, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x10, 0x102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x65}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 19.795337165s ago: executing program 1 (id=1422): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0xc008744c, 0xf0ff1f00000000) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)=""/4098, 0xd5e}], 0x3a}, 0x0) 19.73070662s ago: executing program 0 (id=1423): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11149, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x4}, 0x109211, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x200000000000016d, &(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYBLOB="024cb9cc158162bebf7a0eb0158120d01c3fa400"/31], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000e47f00000100000042"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x8, 0x0, 0x0, 0xde1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r10, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 19.63832748s ago: executing program 3 (id=1424): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c521c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (fail_nth: 1) 19.411228393s ago: executing program 1 (id=1426): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x6, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1501000008000000430000000900000000020008", @ANYRES32=r4, @ANYBLOB="b300"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05000000010000000400"/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r3}, 0x8) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) 19.177786303s ago: executing program 3 (id=1427): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0xc2028, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0xc208, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 19.103042694s ago: executing program 4 (id=1428): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES16=r2], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 18.951196339s ago: executing program 3 (id=1429): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000009}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_clone(0x8100000, &(0x7f00000000c0)="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", 0xfe, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="dcc4402e5891e2ad80450b1589375d94088a69f741aa3dc3199f5562d57c1910859dc9027da48c416ccc1a0402ba20cd6bd1be29c05eaf1ada815070e7cd093db28a0f") perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080)}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r4, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x4202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) 18.91265029s ago: executing program 2 (id=1430): syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00'}) socketpair(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'macvlan1\x00', 0x600}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, 0x0, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 18.899282105s ago: executing program 0 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x5}}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x5, 0xcb, 0x1, 0x0, 0x0, 0x2, 0xa800, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0x8000000000000000, 0x3}, 0x8802, 0x4, 0x712, 0x1, 0x2, 0x1, 0x3, 0x0, 0x8, 0x0, 0x10001}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x400, 0x7, 0x60002, r0, 0x7, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x8}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000180)=r6, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 18.715224604s ago: executing program 4 (id=1432): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x4000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000090000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 18.710707349s ago: executing program 0 (id=1433): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd6, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f0000000640), 0x4}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x15, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x104e2c, 0xc78, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x106181, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.296281192s ago: executing program 2 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000102000000b702000014000000b703000000000000850000008c000000bf090000000000005509010000000000950000000000000085100000010000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.191222762s ago: executing program 4 (id=1435): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8919, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xc0c2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xffffffffffffffd4}, 0x16288, 0x2e, 0x8, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c}, 0x6e, 0x0}, 0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400", 0x2}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000007000006000000000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x8b}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) r5 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r4, 0x10e, 0x2, &(0x7f0000000300)=r5, 0x4) 18.190835714s ago: executing program 2 (id=1436): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x6, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x73bb, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) socket$kcm(0x1e, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB="ffffffff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001000a2000000f2ff000000000000009afe68d6000000000000000052c2312eeacba1834a9655dde58fc464ce7334b831b9dab6841e1a622eea263fc39a232513b6fdab6b87b06a508d7cd0d4cadf46ef6a01d6ac87dfe5ef367023806aaf170c10c23ef84ee87b7afcfef75ad9bb4c2ca731faf7b7ae9c3f01dcbc0542593e41f4523b8be4dfb5753a76e49d75162f81f369d11462e9d8cf7eace30b9709b54a4c"], 0x48) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab50a", @ANYRES32, @ANYRES8=r1], 0xfe33) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) close(0xffffffffffffffff) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040002, 0x0, 0x0, 0x3}]}, 0x94) close(r4) recvmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB="0000000000000000000000efffffffffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f00000040000000420000b8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="006f3a108500"/23], 0x48) 18.148093748s ago: executing program 0 (id=1437): r0 = socket$kcm(0xa, 0x922000000004, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0xffe, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001bc0)="ec000900062b3325fe80000000000000dc8b852303848f7e5c74a57f32cd8caf80bc8e7a2f3ce32a3c12bb0900000000000000282b279abd48d96f332734dcd589f44159271e1e26ad7011fe9e603eca6a56f36bea101f88468d3526d480f3383f39ab8df5b82ceb9a4e5da1c72555b9ac62d65932b1c75d2b70", 0x7a}], 0x1}, 0x800) 18.056790496s ago: executing program 1 (id=1438): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c521c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (fail_nth: 2) 17.891024368s ago: executing program 1 (id=1439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17.890200762s ago: executing program 3 (id=1440): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)}], 0x1}, 0x4) 17.840836999s ago: executing program 4 (id=1441): syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00'}) socketpair(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'macvlan1\x00', 0x600}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, 0x0, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 17.710056054s ago: executing program 1 (id=1442): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11149, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x4}, 0x109211, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x200000000000016d, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="024cb9cc158162bebf7a0eb0158120d01c3fa400"/31], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000e47f00000100000042"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x8, 0x0, 0x0, 0xde1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r10, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 17.641583072s ago: executing program 0 (id=1443): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES16=r2], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 17.531279451s ago: executing program 4 (id=1444): socketpair(0x2c, 0x1, 0x2, &(0x7f0000001100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_clone(0x20000, &(0x7f00000003c0)="d6a001e5463a026bb0a2c0501a77aeb217cebcef828d8bb49d58990d8247842e83fadddc50e1eabcd5ec", 0x2a, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="ddbef60928ae877562caab4145e6a505975b347bcf82dd74874fb06bcb06be12bde1403da1f1") r6 = socket$kcm(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf, 0x9, 0xb4, 0x9, 0x0, 0x0, 0xb0404, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4c1c, 0x1, @perf_config_ext={0xa, 0x1000}, 0x10515c, 0x824, 0x20, 0x9, 0x9a2, 0x8, 0x1, 0x0, 0x9, 0x0, 0xf}, r5, 0x2, 0xffffffffffffffff, 0x8) close(r2) r7 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r8, 0x2000000, 0x24, 0x0, &(0x7f0000000600)="130200d3781e727f3ec6df5c379d6963c8b45f3170485ffde61a28423497ef6c3dd015b9", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20880, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'bridge_slave_1\x00'}) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) socketpair(0x11, 0x5, 0x0, &(0x7f0000000300)) write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 16.746286429s ago: executing program 2 (id=1445): syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00'}) socketpair(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'macvlan1\x00', 0x600}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, 0x0, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 15.907560743s ago: executing program 4 (id=1446): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8000000000000000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xb}, 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x11f3, 0x4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0x3, 0x8, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x0, 0x3, 0x4, 0xc}, 0x50) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r6) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x0) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) openat$cgroup_ro(r8, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) socket$kcm(0x10, 0x0, 0x0) 2.754574332s ago: executing program 32 (id=1440): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)}], 0x1}, 0x4) 1.776709566s ago: executing program 33 (id=1443): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES16=r2], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 1.557547316s ago: executing program 34 (id=1442): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11149, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x4}, 0x109211, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x200000000000016d, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="024cb9cc158162bebf7a0eb0158120d01c3fa400"/31], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000e47f00000100000042"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x8, 0x0, 0x0, 0xde1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r10, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 355.210353ms ago: executing program 35 (id=1445): syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00'}) socketpair(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'macvlan1\x00', 0x600}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, 0x0, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 0s ago: executing program 36 (id=1446): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8000000000000000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xb}, 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x11f3, 0x4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0x3, 0x8, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x0, 0x3, 0x4, 0xc}, 0x50) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r6) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x0) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) openat$cgroup_ro(r8, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) socket$kcm(0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): fe57408a28 [ 93.839476][ T7069] [ 94.375630][ T7078] netlink: 'syz.4.430': attribute type 10 has an invalid length. [ 94.486432][ T7087] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.433'. [ 95.017551][ T5166] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 95.082772][ T7078] geneve1: entered promiscuous mode [ 95.114435][ T7078] geneve1: entered allmulticast mode [ 95.145293][ T7078] team0: Port device geneve1 added [ 95.208906][ T7101] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 95.229107][ T7101] netlink: 17 bytes leftover after parsing attributes in process `syz.1.438'. [ 95.230035][ T7078] syz.4.430 (7078) used greatest stack depth: 17896 bytes left [ 95.316226][ T7102] syzkaller0: entered promiscuous mode [ 95.323157][ T7102] syzkaller0: entered allmulticast mode [ 95.566306][ T7121] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.445'. [ 95.671311][ T7129] netlink: 'syz.1.446': attribute type 39 has an invalid length. [ 95.908693][ T7137] netlink: 'syz.4.450': attribute type 10 has an invalid length. [ 96.696501][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.975700][ T7153] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.457'. [ 97.224703][ T7167] netlink: 'syz.3.461': attribute type 29 has an invalid length. [ 97.259110][ T7167] netlink: 'syz.3.461': attribute type 29 has an invalid length. [ 97.275992][ T7167] netlink: 'syz.3.461': attribute type 29 has an invalid length. [ 97.619830][ T7190] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.470'. [ 97.873310][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.499978][ T7217] validate_nla: 1 callbacks suppressed [ 98.499994][ T7217] netlink: 'syz.0.479': attribute type 21 has an invalid length. [ 98.950930][ T7226] netlink: 10 bytes leftover after parsing attributes in process `syz.4.483'. [ 99.069919][ T7233] netlink: 'syz.1.486': attribute type 21 has an invalid length. [ 99.083560][ T7233] netlink: 164 bytes leftover after parsing attributes in process `syz.1.486'. [ 99.264951][ T7241] netlink: 'syz.4.488': attribute type 10 has an invalid length. [ 99.582998][ T7257] netlink: 'syz.3.491': attribute type 3 has an invalid length. [ 99.595291][ T7257] netlink: 'syz.3.491': attribute type 2 has an invalid length. [ 99.653370][ T7257] netlink: 130532 bytes leftover after parsing attributes in process `syz.3.491'. [ 99.672580][ T7253] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.491'. [ 99.886641][ T7268] netlink: 'syz.0.497': attribute type 2 has an invalid length. [ 99.894651][ T7268] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 100.054328][ T7276] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 100.083615][ T7279] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.501'. [ 100.140515][ T7283] netlink: 'syz.4.504': attribute type 10 has an invalid length. [ 100.182857][ T7286] netlink: 'syz.1.503': attribute type 21 has an invalid length. [ 100.621512][ T7303] syz.2.512 uses obsolete (PF_INET,SOCK_PACKET) [ 100.687612][ T7303] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 100.735090][ T7303] team0: Device ipvlan1 failed to register rx_handler [ 101.496472][ T7344] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.527'. [ 102.461209][ T7363] geneve1: entered promiscuous mode [ 102.471688][ T7363] geneve1: entered allmulticast mode [ 102.480061][ T7363] team0: Port device geneve1 added [ 102.739137][ T7397] tap0: tun_chr_ioctl cmd 1074025675 [ 102.744555][ T7397] tap0: persist disabled [ 103.028537][ T7410] netlink: 56 bytes leftover after parsing attributes in process `syz.3.548'. [ 103.734738][ T7437] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.556'. [ 104.331951][ T7450] validate_nla: 7 callbacks suppressed [ 104.331998][ T7450] netlink: 'syz.2.562': attribute type 21 has an invalid length. [ 104.426889][ T7452] netlink: 'syz.0.563': attribute type 10 has an invalid length. [ 104.798123][ T7465] syzkaller0: entered promiscuous mode [ 104.810070][ T7465] netlink: 'syz.4.568': attribute type 39 has an invalid length. [ 104.854590][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 104.924853][ T7470] netlink: 'syz.0.569': attribute type 4 has an invalid length. [ 104.932555][ T7470] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 104.940360][ T7470] netlink: 'syz.0.569': attribute type 2 has an invalid length. [ 104.954025][ T7470] netlink: 129968 bytes leftover after parsing attributes in process `syz.0.569'. [ 104.976173][ T7478] netlink: 'syz.2.573': attribute type 11 has an invalid length. [ 104.987417][ T7474] netlink: 'syz.0.569': attribute type 21 has an invalid length. [ 104.990613][ T7478] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.573'. [ 105.005714][ T7476] netlink: 'syz.1.572': attribute type 16 has an invalid length. [ 105.009322][ T7478] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 105.014315][ T7476] netlink: 48 bytes leftover after parsing attributes in process `syz.1.572'. [ 105.044296][ T7478] bond0: (slave O3ãc¤±): Enslaving as an active interface with an up link [ 105.059740][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.067064][ T7476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.088376][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.108669][ T7484] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.575'. [ 105.118413][ T7485] TCP: TCP_TX_DELAY enabled [ 105.603685][ T7492] netlink: 'syz.3.577': attribute type 10 has an invalid length. [ 105.611241][ T7491] lo: entered promiscuous mode [ 105.622596][ T7491] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.638415][ T7492] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.781380][ T7477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.949569][ T7497] geneve1: entered promiscuous mode [ 105.974102][ T7497] geneve1: entered allmulticast mode [ 106.005585][ T7497] team0: Port device geneve1 added [ 106.374623][ T7516] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.585'. [ 106.410116][ T7516] net_ratelimit: 156 callbacks suppressed [ 106.410132][ T7516] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 107.301784][ T7553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.598'. [ 107.394714][ T7556] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 107.407966][ T7556] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 107.472606][ T7556] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 108.081814][ T7581] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.608'. [ 109.810721][ T7616] validate_nla: 10 callbacks suppressed [ 109.810734][ T7616] netlink: 'syz.2.620': attribute type 10 has an invalid length. [ 110.232928][ T7623] veth1_macvtap: left promiscuous mode [ 110.469463][ T7649] netlink: 'syz.4.634': attribute type 39 has an invalid length. [ 110.910059][ T7664] FAULT_INJECTION: forcing a failure. [ 110.910059][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.933482][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.0.640 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 110.933501][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.933507][ T7664] Call Trace: [ 110.933512][ T7664] [ 110.933516][ T7664] dump_stack_lvl+0x189/0x250 [ 110.933533][ T7664] ? __pfx____ratelimit+0x10/0x10 [ 110.933549][ T7664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.933561][ T7664] ? __pfx__printk+0x10/0x10 [ 110.933583][ T7664] should_fail_ex+0x414/0x560 [ 110.933602][ T7664] _copy_from_user+0x2d/0xb0 [ 110.933615][ T7664] bpf_test_init+0xf8/0x170 [ 110.933630][ T7664] bpf_prog_test_run_skb+0x1e9/0x1560 [ 110.933641][ T7664] ? __fget_files+0x2a/0x420 [ 110.933657][ T7664] ? __fget_files+0x2a/0x420 [ 110.933676][ T7664] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 110.933688][ T7664] bpf_prog_test_run+0x2c4/0x340 [ 110.933703][ T7664] __sys_bpf+0x4a4/0x860 [ 110.933714][ T7664] ? __pfx___sys_bpf+0x10/0x10 [ 110.933733][ T7664] ? ksys_write+0x22a/0x250 [ 110.933747][ T7664] ? __pfx_ksys_write+0x10/0x10 [ 110.933757][ T7664] ? rcu_is_watching+0x15/0xb0 [ 110.933776][ T7664] __x64_sys_bpf+0x7c/0x90 [ 110.933792][ T7664] do_syscall_64+0xfa/0x3b0 [ 110.933800][ T7664] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.933816][ T7664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.933826][ T7664] ? clear_bhb_loop+0x60/0xb0 [ 110.933840][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.933849][ T7664] RIP: 0033:0x7fb41d18e929 [ 110.933859][ T7664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.933867][ T7664] RSP: 002b:00007fb41e046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.933885][ T7664] RAX: ffffffffffffffda RBX: 00007fb41d3b5fa0 RCX: 00007fb41d18e929 [ 110.933892][ T7664] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 110.933898][ T7664] RBP: 00007fb41e046090 R08: 0000000000000000 R09: 0000000000000000 [ 110.933904][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.933910][ T7664] R13: 0000000000000000 R14: 00007fb41d3b5fa0 R15: 00007ffe0412c9c8 [ 110.933927][ T7664] [ 111.607329][ T7662] cgroup: fork rejected by pids controller in /syz4 [ 111.674273][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.881497][ T7693] netlink: 'syz.1.649': attribute type 10 has an invalid length. [ 112.086270][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.184409][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.318452][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.408418][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.478846][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.486686][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.495799][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.504118][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.511657][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.611258][ T12] team0: left allmulticast mode [ 112.616319][ T12] team_slave_0: left allmulticast mode [ 112.624610][ T12] team_slave_1: left allmulticast mode [ 112.629631][ T7719] netlink: 'syz.1.658': attribute type 21 has an invalid length. [ 112.630065][ T12] geneve1: left allmulticast mode [ 112.639974][ T7721] netlink: 'syz.3.659': attribute type 27 has an invalid length. [ 112.643201][ T12] team0: left promiscuous mode [ 112.654529][ T7721] netlink: 'syz.3.659': attribute type 3 has an invalid length. [ 112.656125][ T12] team_slave_0: left promiscuous mode [ 112.669657][ T12] team_slave_1: left promiscuous mode [ 112.675304][ T12] geneve1: left promiscuous mode [ 112.680640][ T7721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.659'. [ 112.681175][ T12] bridge0: port 3(team0) entered disabled state [ 112.702508][ T12] bridge_slave_1: left allmulticast mode [ 112.708159][ T12] bridge_slave_1: left promiscuous mode [ 112.716289][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.727690][ T12] bridge_slave_0: left allmulticast mode [ 112.733723][ T12] bridge_slave_0: left promiscuous mode [ 112.739543][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.856860][ T12] team0: Port device geneve1 removed [ 113.028264][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.044907][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.056627][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 113.078818][ T12] bond0 (unregistering): Released all slaves [ 113.357485][ T7752] FAULT_INJECTION: forcing a failure. [ 113.357485][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.372174][ T7752] CPU: 0 UID: 0 PID: 7752 Comm: syz.2.666 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 113.372187][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.372192][ T7752] Call Trace: [ 113.372195][ T7752] [ 113.372198][ T7752] dump_stack_lvl+0x189/0x250 [ 113.372210][ T7752] ? __pfx____ratelimit+0x10/0x10 [ 113.372220][ T7752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.372228][ T7752] ? __pfx__printk+0x10/0x10 [ 113.372237][ T7752] ? __might_fault+0xb0/0x130 [ 113.372249][ T7752] should_fail_ex+0x414/0x560 [ 113.372261][ T7752] _copy_from_user+0x2d/0xb0 [ 113.372269][ T7752] bpf_obj_get_info_by_fd+0x474/0x2f70 [ 113.372278][ T7752] ? _parse_integer_limit+0x1ae/0x1f0 [ 113.372292][ T7752] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 113.372318][ T7752] ? bpf_lsm_bpf+0x9/0x20 [ 113.372325][ T7752] ? security_bpf+0x7e/0x300 [ 113.372335][ T7752] __sys_bpf+0x77a/0x860 [ 113.372342][ T7752] ? __pfx___sys_bpf+0x10/0x10 [ 113.372354][ T7752] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.372364][ T7752] ? __pfx_ksys_write+0x10/0x10 [ 113.372372][ T7752] ? rcu_is_watching+0x15/0xb0 [ 113.372382][ T7752] __x64_sys_bpf+0x7c/0x90 [ 113.372391][ T7752] do_syscall_64+0xfa/0x3b0 [ 113.372397][ T7752] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.372407][ T7752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.372414][ T7752] ? clear_bhb_loop+0x60/0xb0 [ 113.372421][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.372427][ T7752] RIP: 0033:0x7fc35ff8e929 [ 113.372434][ T7752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.372439][ T7752] RSP: 002b:00007fc360ea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.372447][ T7752] RAX: ffffffffffffffda RBX: 00007fc3601b5fa0 RCX: 00007fc35ff8e929 [ 113.372452][ T7752] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 000000000000000f [ 113.372456][ T7752] RBP: 00007fc360ea1090 R08: 0000000000000000 R09: 0000000000000000 [ 113.372459][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.372463][ T7752] R13: 0000000000000000 R14: 00007fc3601b5fa0 R15: 00007ffe57408a28 [ 113.372474][ T7752] [ 113.625600][ T7754] netlink: 'syz.2.667': attribute type 21 has an invalid length. [ 114.359644][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.390035][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.587575][ T7716] chnl_net:caif_netlink_parms(): no params data found [ 114.600899][ T5840] Bluetooth: hci1: command tx timeout [ 114.655395][ T12] hsr_slave_0: left promiscuous mode [ 114.674588][ T12] hsr_slave_1: left promiscuous mode [ 114.684926][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.694346][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.717219][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.737195][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.775320][ T12] veth0_macvtap: left promiscuous mode [ 114.778634][ T7791] sctp: [Deprecated]: syz.2.677 (pid 7791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.778634][ T7791] Use struct sctp_sack_info instead [ 114.781105][ T12] veth1_vlan: left promiscuous mode [ 114.781239][ T12] veth0_vlan: left promiscuous mode [ 114.835437][ T7793] netlink: 'syz.0.678': attribute type 21 has an invalid length. [ 115.219582][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.245353][ T12] team0 (unregistering): Port device team_slave_0 removed [ 115.500098][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.510058][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.518441][ T7716] bridge_slave_0: entered allmulticast mode [ 115.526210][ T7716] bridge_slave_0: entered promiscuous mode [ 115.538675][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.546056][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.553589][ T7716] bridge_slave_1: entered allmulticast mode [ 115.560128][ T7716] bridge_slave_1: entered promiscuous mode [ 115.590032][ T7716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.601927][ T7716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.630016][ T7716] team0: Port device team_slave_0 added [ 115.637631][ T7716] team0: Port device team_slave_1 added [ 115.659680][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.667478][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.693747][ T7716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.706533][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.713821][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.740553][ T7716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.808160][ T7716] hsr_slave_0: entered promiscuous mode [ 115.815710][ T7716] hsr_slave_1: entered promiscuous mode [ 115.823298][ T7716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.831219][ T7716] Cannot create hsr debugfs directory [ 115.863780][ T7819] netlink: 'syz.2.685': attribute type 10 has an invalid length. [ 115.902110][ T7819] bond0: (slave O3ãc¤±): Releasing backup interface [ 115.921462][ T7819] mac80211_hwsim hwsim7 O3ãc¤±: entered promiscuous mode [ 115.929066][ T7819] mac80211_hwsim hwsim7 O3ãc¤±: entered allmulticast mode [ 115.939693][ T7819] team0: Port device O3ãc¤± added [ 115.994964][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.096792][ T7834] netlink: 'syz.1.692': attribute type 21 has an invalid length. [ 116.669970][ T7716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.700313][ T5840] Bluetooth: hci1: command tx timeout [ 116.744180][ T7716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.837607][ T7716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.907436][ T7716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.177014][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.197299][ T7716] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.211264][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.218825][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.235688][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.242803][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.563617][ T7892] delete_channel: no stack [ 117.568982][ T7892] delete_channel: no stack [ 117.602434][ T7892] netlink: 'syz.3.708': attribute type 33 has an invalid length. [ 117.620521][ T7892] netlink: 'syz.3.708': attribute type 13 has an invalid length. [ 117.632139][ T7892] netlink: 152 bytes leftover after parsing attributes in process `syz.3.708'. [ 117.712053][ T7716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.837623][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.917291][ T7716] veth0_vlan: entered promiscuous mode [ 117.929343][ T7716] veth1_vlan: entered promiscuous mode [ 117.969314][ T7716] veth0_macvtap: entered promiscuous mode [ 117.983710][ T7716] veth1_macvtap: entered promiscuous mode [ 118.007108][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.027075][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.049256][ T7716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.071601][ T7716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.082248][ T7716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.091142][ T7716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.116450][ T7918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.716'. [ 118.752285][ T5840] Bluetooth: hci1: command tx timeout [ 118.937358][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 119.029175][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.048342][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.058091][ T7926] netlink: 'syz.3.719': attribute type 29 has an invalid length. [ 119.085171][ T7926] netlink: 'syz.3.719': attribute type 29 has an invalid length. [ 119.100116][ T7926] netlink: 'syz.3.719': attribute type 29 has an invalid length. [ 119.109904][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.119384][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.127898][ T7926] netlink: 'syz.3.719': attribute type 29 has an invalid length. [ 119.383956][ T7941] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.727'. [ 119.584215][ T7956] bridge0: port 3(team0) entered disabled state [ 119.590847][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.604511][ T7956] bridge0: entered allmulticast mode [ 119.615290][ T7956] team0: left allmulticast mode [ 119.624116][ T7956] team_slave_0: left allmulticast mode [ 119.633445][ T7956] team_slave_1: left allmulticast mode [ 119.639299][ T7956] geneve1: left allmulticast mode [ 119.653158][ T7956] team0: left promiscuous mode [ 119.658002][ T7956] team_slave_0: left promiscuous mode [ 119.665123][ T7956] team_slave_1: left promiscuous mode [ 119.676431][ T7956] geneve1: left promiscuous mode [ 119.684184][ T7956] bridge0: port 3(team0) entered disabled state [ 120.245377][ T7956] bridge_slave_1: left allmulticast mode [ 120.319458][ T7956] bridge_slave_1: left promiscuous mode [ 120.326467][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.444584][ T7959] netlink: 'syz.2.731': attribute type 10 has an invalid length. [ 120.569055][ T7956] bridge_slave_0: left promiscuous mode [ 120.603473][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.856033][ T7959] veth0_vlan: left promiscuous mode [ 120.861457][ T5840] Bluetooth: hci1: command tx timeout [ 120.871872][ T7959] veth0_vlan: entered promiscuous mode [ 120.885948][ T7959] team0: Device veth0_vlan failed to register rx_handler [ 121.656157][ T7999] netlink: 130912 bytes leftover after parsing attributes in process `syz.2.742'. [ 122.084315][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.746'. [ 122.552320][ T8030] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.752'. [ 122.669063][ T8043] netlink: 'syz.2.755': attribute type 39 has an invalid length. [ 123.126450][ T8065] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.763'. [ 123.497005][ T8089] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 123.508560][ T8089] bridge0: port 3(team0) entered blocking state [ 123.519864][ T8089] bridge0: port 3(team0) entered disabled state [ 123.530127][ T8089] team0: entered allmulticast mode [ 123.537622][ T8089] team_slave_0: entered allmulticast mode [ 123.550055][ T8089] team_slave_1: entered allmulticast mode [ 123.573507][ T8089] team0: entered promiscuous mode [ 123.578835][ T8089] team_slave_0: entered promiscuous mode [ 123.594456][ T8089] team_slave_1: entered promiscuous mode [ 123.623426][ T8089] bridge0: port 3(team0) entered blocking state [ 123.630036][ T8089] bridge0: port 3(team0) entered forwarding state [ 124.288129][ T8128] netlink: 'syz.2.782': attribute type 46 has an invalid length. [ 124.877769][ T8136] netlink: 'syz.1.785': attribute type 10 has an invalid length. [ 124.936840][ T8139] netlink: 'syz.4.788': attribute type 11 has an invalid length. [ 124.946411][ T8139] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.788'. [ 124.957092][ T8139] netlink: 'syz.4.788': attribute type 10 has an invalid length. [ 124.996671][ T8139] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 124.998020][ T8142] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.789'. [ 125.028660][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.197947][ T8154] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.792'. [ 125.236405][ T8159] netlink: 'syz.2.795': attribute type 4 has an invalid length. [ 125.248850][ T8156] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 125.471640][ T8176] netlink: 'syz.3.798': attribute type 5 has an invalid length. [ 125.481193][ T8176] netlink: 176 bytes leftover after parsing attributes in process `syz.3.798'. [ 125.517518][ T8177] netlink: 'syz.1.799': attribute type 46 has an invalid length. [ 125.608780][ T8181] netlink: 'syz.1.801': attribute type 10 has an invalid length. [ 126.450496][ T8215] netlink: 'syz.4.812': attribute type 10 has an invalid length. [ 126.718023][ T8214] veth1_macvtap: left promiscuous mode [ 126.723773][ T8214] macsec0: entered promiscuous mode [ 126.838602][ T8230] netlink: 'syz.0.817': attribute type 4 has an invalid length. [ 127.163318][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.171506][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.207591][ T8241] netlink: 'syz.1.820': attribute type 46 has an invalid length. [ 127.300397][ T8244] netlink: 'syz.2.821': attribute type 30 has an invalid length. [ 128.251462][ T8271] netlink: 'syz.2.829': attribute type 10 has an invalid length. [ 128.562982][ T8275] FAULT_INJECTION: forcing a failure. [ 128.562982][ T8275] name failslab, interval 1, probability 0, space 0, times 0 [ 128.727931][ T8276] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.828'. [ 128.755994][ T8275] CPU: 1 UID: 0 PID: 8275 Comm: syz.4.830 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 128.756011][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.756017][ T8275] Call Trace: [ 128.756024][ T8275] [ 128.756032][ T8275] dump_stack_lvl+0x189/0x250 [ 128.756056][ T8275] ? __pfx____ratelimit+0x10/0x10 [ 128.756080][ T8275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.756099][ T8275] ? __pfx__printk+0x10/0x10 [ 128.756139][ T8275] ? __pfx___might_resched+0x10/0x10 [ 128.756173][ T8275] should_fail_ex+0x414/0x560 [ 128.756212][ T8275] should_failslab+0xa8/0x100 [ 128.756237][ T8275] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 128.756257][ T8275] ? __alloc_skb+0x112/0x2d0 [ 128.756287][ T8275] __alloc_skb+0x112/0x2d0 [ 128.756321][ T8275] netlink_sendmsg+0x5c6/0xb30 [ 128.756370][ T8275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.756399][ T8275] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 128.756417][ T8275] ? aa_sock_msg_perm+0x94/0x160 [ 128.756443][ T8275] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.756456][ T8275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.756478][ T8275] __sock_sendmsg+0x219/0x270 [ 128.756506][ T8275] ____sys_sendmsg+0x505/0x830 [ 128.756545][ T8275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.756596][ T8275] ? import_iovec+0x74/0xa0 [ 128.756629][ T8275] ___sys_sendmsg+0x21f/0x2a0 [ 128.756657][ T8275] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.756744][ T8275] ? __fget_files+0x2a/0x420 [ 128.756802][ T8275] ? __fget_files+0x2a/0x420 [ 128.756819][ T8275] ? __fget_files+0x3a0/0x420 [ 128.756876][ T8275] __x64_sys_sendmsg+0x19b/0x260 [ 128.756906][ T8275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.756956][ T8275] ? __pfx_ksys_write+0x10/0x10 [ 128.756968][ T8275] ? rcu_is_watching+0x15/0xb0 [ 128.757003][ T8275] ? do_syscall_64+0xbe/0x3b0 [ 128.757030][ T8275] do_syscall_64+0xfa/0x3b0 [ 128.757041][ T8275] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.757061][ T8275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.757075][ T8275] ? clear_bhb_loop+0x60/0xb0 [ 128.757101][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.757111][ T8275] RIP: 0033:0x7f6955b8e929 [ 128.757126][ T8275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.757135][ T8275] RSP: 002b:00007f6956a33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.757148][ T8275] RAX: ffffffffffffffda RBX: 00007f6955db6080 RCX: 00007f6955b8e929 [ 128.757155][ T8275] RDX: 0000000020000010 RSI: 0000200000000600 RDI: 0000000000000004 [ 128.757162][ T8275] RBP: 00007f6956a33090 R08: 0000000000000000 R09: 0000000000000000 [ 128.757168][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.757175][ T8275] R13: 0000000000000000 R14: 00007f6955db6080 R15: 00007ffd546284c8 [ 128.757236][ T8275] [ 129.243083][ T8282] netlink: 'syz.3.828': attribute type 39 has an invalid length. [ 133.445947][ T8314] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 133.452555][ T8314] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 134.387015][ T8321] netlink: 'syz.2.845': attribute type 21 has an invalid length. [ 135.253552][ T8330] netlink: 'syz.1.846': attribute type 10 has an invalid length. [ 136.356617][ T8312] syz.4.842 (8312) used greatest stack depth: 14440 bytes left [ 139.681841][ T8354] FAULT_INJECTION: forcing a failure. [ 139.681841][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.767024][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.4.854 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 139.767040][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.767047][ T8354] Call Trace: [ 139.767053][ T8354] [ 139.767059][ T8354] dump_stack_lvl+0x189/0x250 [ 139.767079][ T8354] ? __pfx____ratelimit+0x10/0x10 [ 139.767099][ T8354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.767115][ T8354] ? __pfx__printk+0x10/0x10 [ 139.767134][ T8354] ? __might_fault+0xb0/0x130 [ 139.767155][ T8354] ? __might_fault+0xb0/0x130 [ 139.767181][ T8354] should_fail_ex+0x414/0x560 [ 139.767209][ T8354] _copy_from_iter+0x1db/0x16f0 [ 139.767233][ T8354] ? rcu_is_watching+0x15/0xb0 [ 139.767250][ T8354] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 139.767269][ T8354] ? __pfx__copy_from_iter+0x10/0x10 [ 139.767287][ T8354] ? __build_skb_around+0x257/0x3e0 [ 139.767310][ T8354] ? netlink_sendmsg+0x642/0xb30 [ 139.767322][ T8354] ? skb_put+0x11b/0x210 [ 139.767345][ T8354] netlink_sendmsg+0x6b2/0xb30 [ 139.767379][ T8354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.767401][ T8354] ? aa_sock_msg_perm+0x94/0x160 [ 139.767423][ T8354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.767434][ T8354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.767451][ T8354] __sock_sendmsg+0x219/0x270 [ 139.767472][ T8354] ____sys_sendmsg+0x505/0x830 [ 139.767506][ T8354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.767540][ T8354] ? import_iovec+0x74/0xa0 [ 139.767563][ T8354] ___sys_sendmsg+0x21f/0x2a0 [ 139.767584][ T8354] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.767641][ T8354] ? __fget_files+0x2a/0x420 [ 139.767681][ T8354] ? __fget_files+0x2a/0x420 [ 139.767696][ T8354] ? __fget_files+0x3a0/0x420 [ 139.767733][ T8354] __x64_sys_sendmsg+0x19b/0x260 [ 139.767758][ T8354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.767793][ T8354] ? __pfx_ksys_write+0x10/0x10 [ 139.767805][ T8354] ? rcu_is_watching+0x15/0xb0 [ 139.767829][ T8354] ? do_syscall_64+0xbe/0x3b0 [ 139.767849][ T8354] do_syscall_64+0xfa/0x3b0 [ 139.767859][ T8354] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.767877][ T8354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.767888][ T8354] ? clear_bhb_loop+0x60/0xb0 [ 139.767907][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.767918][ T8354] RIP: 0033:0x7f6955b8e929 [ 139.767930][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.767939][ T8354] RSP: 002b:00007f6956a54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.767952][ T8354] RAX: ffffffffffffffda RBX: 00007f6955db5fa0 RCX: 00007f6955b8e929 [ 139.767959][ T8354] RDX: 0000000020000010 RSI: 0000200000000600 RDI: 0000000000000004 [ 139.767966][ T8354] RBP: 00007f6956a54090 R08: 0000000000000000 R09: 0000000000000000 [ 139.767973][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.767979][ T8354] R13: 0000000000000000 R14: 00007f6955db5fa0 R15: 00007ffd546284c8 [ 139.768017][ T8354] [ 140.254587][ T8379] netlink: 'syz.0.860': attribute type 21 has an invalid length. [ 140.536096][ T8390] netlink: 'syz.2.863': attribute type 39 has an invalid length. [ 140.558851][ T8394] netlink: 'syz.4.865': attribute type 10 has an invalid length. [ 140.652272][ T8398] netlink: 'syz.3.866': attribute type 21 has an invalid length. [ 140.686355][ T8401] netlink: 'syz.2.868': attribute type 46 has an invalid length. [ 140.693492][ T8403] netlink: 'syz.4.869': attribute type 39 has an invalid length. [ 141.357663][ T8415] netlink: 'syz.3.874': attribute type 13 has an invalid length. [ 141.366800][ T8415] netlink: 'syz.3.874': attribute type 58 has an invalid length. [ 141.380079][ T8415] netlink: 152 bytes leftover after parsing attributes in process `syz.3.874'. [ 141.440747][ T8415] netlink: 'syz.3.874': attribute type 10 has an invalid length. [ 141.454494][ T8415] netlink: 55 bytes leftover after parsing attributes in process `syz.3.874'. [ 141.558823][ T8427] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.878'. [ 141.639609][ T8432] netlink: 'syz.4.879': attribute type 39 has an invalid length. [ 141.918833][ T8445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.883'. [ 142.118948][ T8465] netlink: 56 bytes leftover after parsing attributes in process `syz.2.890'. [ 142.297280][ T8477] wg2: entered allmulticast mode [ 142.307762][ T8477] wg2: entered promiscuous mode [ 142.458181][ T8484] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.897'. [ 142.543925][ T8494] FAULT_INJECTION: forcing a failure. [ 142.543925][ T8494] name failslab, interval 1, probability 0, space 0, times 0 [ 142.557369][ T8494] CPU: 1 UID: 0 PID: 8494 Comm: syz.1.899 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 142.557384][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.557391][ T8494] Call Trace: [ 142.557396][ T8494] [ 142.557402][ T8494] dump_stack_lvl+0x189/0x250 [ 142.557423][ T8494] ? __pfx____ratelimit+0x10/0x10 [ 142.557443][ T8494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.557459][ T8494] ? __pfx__printk+0x10/0x10 [ 142.557488][ T8494] ? __pfx___might_resched+0x10/0x10 [ 142.557514][ T8494] should_fail_ex+0x414/0x560 [ 142.557542][ T8494] should_failslab+0xa8/0x100 [ 142.557563][ T8494] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 142.557580][ T8494] ? __alloc_skb+0x112/0x2d0 [ 142.557600][ T8494] __alloc_skb+0x112/0x2d0 [ 142.557621][ T8494] netlink_ack+0x146/0xa50 [ 142.557633][ T8494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.557643][ T8494] ? ref_tracker_free+0x63a/0x7d0 [ 142.557661][ T8494] ? perf_trace_run_bpf_submit+0xee/0x170 [ 142.557698][ T8494] netlink_rcv_skb+0x28c/0x470 [ 142.557716][ T8494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.557734][ T8494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.557775][ T8494] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.557789][ T8494] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.557816][ T8494] netlink_unicast+0x758/0x8d0 [ 142.557851][ T8494] netlink_sendmsg+0x805/0xb30 [ 142.557884][ T8494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.557906][ T8494] ? aa_sock_msg_perm+0x94/0x160 [ 142.557929][ T8494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.557940][ T8494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.557958][ T8494] __sock_sendmsg+0x219/0x270 [ 142.557978][ T8494] ____sys_sendmsg+0x505/0x830 [ 142.558006][ T8494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.558040][ T8494] ? import_iovec+0x74/0xa0 [ 142.558064][ T8494] ___sys_sendmsg+0x21f/0x2a0 [ 142.558086][ T8494] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.558143][ T8494] ? __fget_files+0x2a/0x420 [ 142.558183][ T8494] ? __fget_files+0x2a/0x420 [ 142.558198][ T8494] ? __fget_files+0x3a0/0x420 [ 142.558234][ T8494] __x64_sys_sendmsg+0x19b/0x260 [ 142.558262][ T8494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.558296][ T8494] ? __pfx_ksys_write+0x10/0x10 [ 142.558307][ T8494] ? rcu_is_watching+0x15/0xb0 [ 142.558332][ T8494] ? do_syscall_64+0xbe/0x3b0 [ 142.558352][ T8494] do_syscall_64+0xfa/0x3b0 [ 142.558362][ T8494] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.558380][ T8494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.558392][ T8494] ? clear_bhb_loop+0x60/0xb0 [ 142.558411][ T8494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.558422][ T8494] RIP: 0033:0x7f01ccf8e929 [ 142.558434][ T8494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.558443][ T8494] RSP: 002b:00007f01cdddd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.558456][ T8494] RAX: ffffffffffffffda RBX: 00007f01cd1b5fa0 RCX: 00007f01ccf8e929 [ 142.558464][ T8494] RDX: 0000000020000010 RSI: 0000200000000600 RDI: 0000000000000004 [ 142.558471][ T8494] RBP: 00007f01cdddd090 R08: 0000000000000000 R09: 0000000000000000 [ 142.558477][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.558483][ T8494] R13: 0000000000000000 R14: 00007f01cd1b5fa0 R15: 00007ffd8496a038 [ 142.558520][ T8494] [ 143.105006][ T8510] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.904'. [ 143.117703][ T8510] netlink: get zone limit has 8 unknown bytes [ 143.182656][ T8511] netlink: 55 bytes leftover after parsing attributes in process `syz.2.904'. [ 143.186130][ T8510] netlink: 55 bytes leftover after parsing attributes in process `syz.2.904'. [ 143.935382][ T8504] netlink: 3403 bytes leftover after parsing attributes in process `syz.4.900'. [ 143.966603][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.634592][ T8564] FAULT_INJECTION: forcing a failure. [ 144.634592][ T8564] name failslab, interval 1, probability 0, space 0, times 0 [ 144.657359][ T8564] CPU: 0 UID: 0 PID: 8564 Comm: syz.1.918 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 144.657376][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.657381][ T8564] Call Trace: [ 144.657387][ T8564] [ 144.657393][ T8564] dump_stack_lvl+0x189/0x250 [ 144.657412][ T8564] ? __pfx____ratelimit+0x10/0x10 [ 144.657431][ T8564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.657451][ T8564] ? __pfx__printk+0x10/0x10 [ 144.657495][ T8564] should_fail_ex+0x414/0x560 [ 144.657522][ T8564] should_failslab+0xa8/0x100 [ 144.657542][ T8564] kmem_cache_alloc_noprof+0x73/0x3c0 [ 144.657555][ T8564] ? skb_clone+0x212/0x3a0 [ 144.657579][ T8564] skb_clone+0x212/0x3a0 [ 144.657601][ T8564] __netlink_deliver_tap+0x404/0x850 [ 144.657637][ T8564] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.657654][ T8564] netlink_deliver_tap+0x19c/0x1b0 [ 144.657671][ T8564] netlink_sendskb+0x68/0x140 [ 144.657689][ T8564] netlink_rcv_skb+0x28c/0x470 [ 144.657706][ T8564] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.657723][ T8564] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.657761][ T8564] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.657774][ T8564] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.657798][ T8564] netlink_unicast+0x758/0x8d0 [ 144.657831][ T8564] netlink_sendmsg+0x805/0xb30 [ 144.657862][ T8564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.657882][ T8564] ? aa_sock_msg_perm+0x94/0x160 [ 144.657903][ T8564] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.657914][ T8564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.657931][ T8564] __sock_sendmsg+0x219/0x270 [ 144.657951][ T8564] ____sys_sendmsg+0x505/0x830 [ 144.657980][ T8564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.658015][ T8564] ? import_iovec+0x74/0xa0 [ 144.658039][ T8564] ___sys_sendmsg+0x21f/0x2a0 [ 144.658060][ T8564] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.658117][ T8564] ? __fget_files+0x2a/0x420 [ 144.658158][ T8564] ? __fget_files+0x2a/0x420 [ 144.658173][ T8564] ? __fget_files+0x3a0/0x420 [ 144.658210][ T8564] __x64_sys_sendmsg+0x19b/0x260 [ 144.658238][ T8564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.658274][ T8564] ? __pfx_ksys_write+0x10/0x10 [ 144.658286][ T8564] ? rcu_is_watching+0x15/0xb0 [ 144.658311][ T8564] ? do_syscall_64+0xbe/0x3b0 [ 144.658332][ T8564] do_syscall_64+0xfa/0x3b0 [ 144.658342][ T8564] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.658360][ T8564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.658371][ T8564] ? clear_bhb_loop+0x60/0xb0 [ 144.658394][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.658405][ T8564] RIP: 0033:0x7f01ccf8e929 [ 144.658417][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.658426][ T8564] RSP: 002b:00007f01cdddd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.658439][ T8564] RAX: ffffffffffffffda RBX: 00007f01cd1b5fa0 RCX: 00007f01ccf8e929 [ 144.658446][ T8564] RDX: 0000000020000010 RSI: 0000200000000600 RDI: 0000000000000004 [ 144.658453][ T8564] RBP: 00007f01cdddd090 R08: 0000000000000000 R09: 0000000000000000 [ 144.658460][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.658465][ T8564] R13: 0000000000000000 R14: 00007f01cd1b5fa0 R15: 00007ffd8496a038 [ 144.658504][ T8564] [ 145.346148][ T8574] cgroup: fork rejected by pids controller in /syz1 [ 145.580699][ T8594] validate_nla: 8 callbacks suppressed [ 145.580713][ T8594] netlink: 'syz.4.933': attribute type 46 has an invalid length. [ 145.621219][ T8594] FAULT_INJECTION: forcing a failure. [ 145.621219][ T8594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.631275][ T8598] netlink: 'syz.0.932': attribute type 10 has an invalid length. [ 145.671873][ T8594] CPU: 1 UID: 0 PID: 8594 Comm: syz.4.933 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 145.671888][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.671895][ T8594] Call Trace: [ 145.671901][ T8594] [ 145.671907][ T8594] dump_stack_lvl+0x189/0x250 [ 145.671927][ T8594] ? __pfx____ratelimit+0x10/0x10 [ 145.671947][ T8594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.671962][ T8594] ? __pfx__printk+0x10/0x10 [ 145.671987][ T8594] ? __might_fault+0xb0/0x130 [ 145.672016][ T8594] should_fail_ex+0x414/0x560 [ 145.672045][ T8594] _copy_to_user+0x31/0xb0 [ 145.672066][ T8594] simple_read_from_buffer+0xe1/0x170 [ 145.672093][ T8594] proc_fail_nth_read+0x1df/0x250 [ 145.672117][ T8594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.672142][ T8594] ? rw_verify_area+0x258/0x650 [ 145.672156][ T8594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.672176][ T8594] vfs_read+0x200/0x980 [ 145.672203][ T8594] ? __pfx___mutex_lock+0x10/0x10 [ 145.672217][ T8594] ? __pfx_vfs_read+0x10/0x10 [ 145.672237][ T8594] ? __fget_files+0x2a/0x420 [ 145.672261][ T8594] ? __fget_files+0x3a0/0x420 [ 145.672275][ T8594] ? __fget_files+0x2a/0x420 [ 145.672307][ T8594] ksys_read+0x145/0x250 [ 145.672325][ T8594] ? __pfx_ksys_read+0x10/0x10 [ 145.672335][ T8594] ? rcu_is_watching+0x15/0xb0 [ 145.672359][ T8594] ? do_syscall_64+0xbe/0x3b0 [ 145.672379][ T8594] do_syscall_64+0xfa/0x3b0 [ 145.672390][ T8594] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.672407][ T8594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.672418][ T8594] ? clear_bhb_loop+0x60/0xb0 [ 145.672443][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.672453][ T8594] RIP: 0033:0x7f6955b8d33c [ 145.672465][ T8594] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.672474][ T8594] RSP: 002b:00007f6956a54030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.672491][ T8594] RAX: ffffffffffffffda RBX: 00007f6955db5fa0 RCX: 00007f6955b8d33c [ 145.672499][ T8594] RDX: 000000000000000f RSI: 00007f6956a540a0 RDI: 0000000000000005 [ 145.672506][ T8594] RBP: 00007f6956a54090 R08: 0000000000000000 R09: 0000000000000000 [ 145.672512][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.672518][ T8594] R13: 0000000000000000 R14: 00007f6955db5fa0 R15: 00007ffd546284c8 [ 145.672558][ T8594] [ 146.004021][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.101944][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.173082][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.315231][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.632620][ T5166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.644832][ T5166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.653778][ T5166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.665402][ T5166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.673373][ T5166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.673847][ T13] team0: Port device geneve1 removed [ 146.756266][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.766667][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.776805][ T13] bond0 (unregistering): Released all slaves [ 146.790930][ T8631] __nla_validate_parse: 2 callbacks suppressed [ 146.790939][ T8631] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.945'. [ 146.878608][ T8635] FAULT_INJECTION: forcing a failure. [ 146.878608][ T8635] name failslab, interval 1, probability 0, space 0, times 0 [ 146.891533][ T8635] CPU: 1 UID: 0 PID: 8635 Comm: syz.2.946 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 146.891547][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.891553][ T8635] Call Trace: [ 146.891559][ T8635] [ 146.891564][ T8635] dump_stack_lvl+0x189/0x250 [ 146.891582][ T8635] ? __pfx____ratelimit+0x10/0x10 [ 146.891600][ T8635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.891613][ T8635] ? __pfx__printk+0x10/0x10 [ 146.891634][ T8635] ? __pfx___might_resched+0x10/0x10 [ 146.891653][ T8635] should_fail_ex+0x414/0x560 [ 146.891674][ T8635] should_failslab+0xa8/0x100 [ 146.891691][ T8635] __kmalloc_noprof+0xcb/0x4f0 [ 146.891703][ T8635] ? kfree+0x4d/0x440 [ 146.891713][ T8635] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 146.891730][ T8635] tomoyo_realpath_from_path+0xe3/0x5d0 [ 146.891743][ T8635] ? tomoyo_domain+0xd9/0x130 [ 146.891760][ T8635] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 146.891775][ T8635] tomoyo_path_number_perm+0x1e8/0x5a0 [ 146.891793][ T8635] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.891809][ T8635] ? trace_call_bpf+0xb7/0x850 [ 146.891823][ T8635] ? trace_call_bpf+0xb7/0x850 [ 146.891864][ T8635] ? __fget_files+0x2a/0x420 [ 146.891882][ T8635] ? __fget_files+0x2a/0x420 [ 146.891895][ T8635] ? __fget_files+0x3a0/0x420 [ 146.891909][ T8635] ? __fget_files+0x2a/0x420 [ 146.891927][ T8635] security_file_ioctl+0xcb/0x2d0 [ 146.891944][ T8635] __se_sys_ioctl+0x47/0x170 [ 146.891959][ T8635] do_syscall_64+0xfa/0x3b0 [ 146.891970][ T8635] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.891986][ T8635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.891997][ T8635] ? clear_bhb_loop+0x60/0xb0 [ 146.892011][ T8635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.892021][ T8635] RIP: 0033:0x7fc35ff8e929 [ 146.892032][ T8635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.892041][ T8635] RSP: 002b:00007fc360ea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.892053][ T8635] RAX: ffffffffffffffda RBX: 00007fc3601b5fa0 RCX: 00007fc35ff8e929 [ 146.892060][ T8635] RDX: 0000200000000200 RSI: 000000000000894b RDI: 0000000000000003 [ 146.892067][ T8635] RBP: 00007fc360ea1090 R08: 0000000000000000 R09: 0000000000000000 [ 146.892073][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.892079][ T8635] R13: 0000000000000000 R14: 00007fc3601b5fa0 R15: 00007ffe57408a28 [ 146.892101][ T8635] [ 146.892107][ T8635] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.036869][ T8632] chnl_net:caif_netlink_parms(): no params data found [ 147.415215][ T8649] netlink: 'syz.2.949': attribute type 21 has an invalid length. [ 147.430142][ T8652] netlink: 2451 bytes leftover after parsing attributes in process `syz.3.950'. [ 147.517799][ T8649] netlink: 156 bytes leftover after parsing attributes in process `syz.2.949'. [ 147.682133][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.696884][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.706917][ T8632] bridge_slave_0: entered allmulticast mode [ 147.716267][ T8632] bridge_slave_0: entered promiscuous mode [ 147.728919][ T8674] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.958'. [ 147.745447][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.754880][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.762107][ T8632] bridge_slave_1: entered allmulticast mode [ 147.769360][ T8632] bridge_slave_1: entered promiscuous mode [ 147.783102][ T13] hsr_slave_0: left promiscuous mode [ 147.790419][ T13] hsr_slave_1: left promiscuous mode [ 147.808610][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.830585][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.843301][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.853553][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.872835][ T13] veth1_macvtap: left promiscuous mode [ 147.878455][ T13] veth0_macvtap: left promiscuous mode [ 147.884116][ T13] veth1_vlan: left promiscuous mode [ 147.889463][ T13] veth0_vlan: left promiscuous mode [ 148.144168][ T13] team0 (unregistering): Port device team_slave_1 removed [ 148.169867][ T13] team0 (unregistering): Port device team_slave_0 removed [ 148.380660][ T8680] bridge0: port 4(veth1_to_team) entered blocking state [ 148.389258][ T8680] bridge0: port 4(veth1_to_team) entered disabled state [ 148.396451][ T8680] veth1_to_team: entered allmulticast mode [ 148.404873][ T8680] veth1_to_team: entered promiscuous mode [ 148.410754][ T8680] bridge0: adding interface veth1_to_team with same address as a received packet (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 148.423342][ T8680] bridge0: port 4(veth1_to_team) entered blocking state [ 148.430366][ T8680] bridge0: port 4(veth1_to_team) entered forwarding state [ 148.437731][ T8687] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.964'. [ 148.492879][ T8689] netlink: 'syz.4.965': attribute type 10 has an invalid length. [ 148.507355][ T8689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.965'. [ 148.511311][ T8632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.541767][ T8689] dummy0: entered promiscuous mode [ 148.565209][ T8632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.646298][ T8697] FAULT_INJECTION: forcing a failure. [ 148.646298][ T8697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.660918][ T8632] team0: Port device team_slave_0 added [ 148.681490][ T8697] CPU: 0 UID: 0 PID: 8697 Comm: syz.4.968 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 148.681505][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.681512][ T8697] Call Trace: [ 148.681517][ T8697] [ 148.681522][ T8697] dump_stack_lvl+0x189/0x250 [ 148.681540][ T8697] ? __pfx____ratelimit+0x10/0x10 [ 148.681558][ T8697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.681570][ T8697] ? __pfx__printk+0x10/0x10 [ 148.681585][ T8697] ? __might_fault+0xb0/0x130 [ 148.681607][ T8697] should_fail_ex+0x414/0x560 [ 148.681626][ T8697] _copy_from_user+0x2d/0xb0 [ 148.681640][ T8697] map_update_elem+0x4a6/0x750 [ 148.681659][ T8697] __sys_bpf+0x6a9/0x860 [ 148.681670][ T8697] ? __pfx___sys_bpf+0x10/0x10 [ 148.681690][ T8697] ? ksys_write+0x22a/0x250 [ 148.681705][ T8697] ? __pfx_ksys_write+0x10/0x10 [ 148.681715][ T8697] ? rcu_is_watching+0x15/0xb0 [ 148.681734][ T8697] __x64_sys_bpf+0x7c/0x90 [ 148.681750][ T8697] do_syscall_64+0xfa/0x3b0 [ 148.681760][ T8697] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.681776][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.681786][ T8697] ? clear_bhb_loop+0x60/0xb0 [ 148.681799][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.681810][ T8697] RIP: 0033:0x7f6955b8e929 [ 148.681819][ T8697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.681828][ T8697] RSP: 002b:00007f6956a54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.681840][ T8697] RAX: ffffffffffffffda RBX: 00007f6955db5fa0 RCX: 00007f6955b8e929 [ 148.681847][ T8697] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002 [ 148.681854][ T8697] RBP: 00007f6956a54090 R08: 0000000000000000 R09: 0000000000000000 [ 148.681860][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.681866][ T8697] R13: 0000000000000000 R14: 00007f6955db5fa0 R15: 00007ffd546284c8 [ 148.681882][ T8697] [ 148.687976][ T8632] team0: Port device team_slave_1 added [ 148.777863][ T5166] Bluetooth: hci2: command tx timeout [ 148.983123][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.993040][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.039226][ T8632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.053565][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.060574][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.086822][ T8632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.176758][ T8632] hsr_slave_0: entered promiscuous mode [ 149.186659][ T8632] hsr_slave_1: entered promiscuous mode [ 149.193493][ T8632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.204945][ T8632] Cannot create hsr debugfs directory [ 149.295813][ T8735] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.979'. [ 149.487793][ T8745] netlink: 'syz.4.984': attribute type 39 has an invalid length. [ 149.874149][ T8632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.897240][ T8632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.919388][ T8632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.936680][ T8632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.140118][ T8632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.196174][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 150.209036][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 150.222135][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 150.235236][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 150.248761][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 150.259955][ T8632] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.268366][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 150.281510][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 150.294946][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 150.295055][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.307561][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 150.313217][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.325627][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 150.466598][ T8763] netlink: 'syz.0.988': attribute type 10 has an invalid length. [ 150.508772][ T8769] netlink: 'syz.3.990': attribute type 10 has an invalid length. [ 150.531121][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.538252][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.863867][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.912280][ T5166] Bluetooth: hci2: command tx timeout [ 150.949140][ T8763] bond0: entered promiscuous mode [ 150.964002][ T8763] bond_slave_0: entered promiscuous mode [ 150.983424][ T8763] bond_slave_1: entered promiscuous mode [ 151.007722][ T8763] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 151.054056][ T8763] bond0: entered allmulticast mode [ 151.079545][ T8763] bond_slave_0: entered allmulticast mode [ 151.112003][ T8763] bond_slave_1: entered allmulticast mode [ 151.139739][ T8763] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 151.182291][ T8763] team0: Port device bond0 added [ 151.918268][ T8632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.943822][ T8782] netlink: 'syz.0.995': attribute type 39 has an invalid length. [ 152.074220][ T8787] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.997'. [ 152.095007][ T8632] veth0_vlan: entered promiscuous mode [ 152.132368][ T8632] veth1_vlan: entered promiscuous mode [ 152.155615][ T8632] veth0_macvtap: entered promiscuous mode [ 152.166095][ T8632] veth1_macvtap: entered promiscuous mode [ 152.198097][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.226534][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.243577][ T8787] netlink: 144 bytes leftover after parsing attributes in process `syz.3.997'. [ 152.255495][ T8632] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.285103][ T8632] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.329838][ T8632] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.385835][ T8632] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.843310][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.877931][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.988610][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.996820][ T5166] Bluetooth: hci2: command tx timeout [ 153.058550][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.071816][ T8801] netlink: 'syz.2.1002': attribute type 27 has an invalid length. [ 153.135255][ T8801] netlink: 'syz.2.1002': attribute type 3 has an invalid length. [ 153.175455][ T8801] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1002'. [ 153.252457][ T8811] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 153.763952][ T8825] FAULT_INJECTION: forcing a failure. [ 153.763952][ T8825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.822082][ T8828] netlink: 'syz.2.1009': attribute type 39 has an invalid length. [ 153.848438][ T8825] CPU: 0 UID: 0 PID: 8825 Comm: syz.1.1008 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 153.848455][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.848463][ T8825] Call Trace: [ 153.848468][ T8825] [ 153.848473][ T8825] dump_stack_lvl+0x189/0x250 [ 153.848492][ T8825] ? __pfx____ratelimit+0x10/0x10 [ 153.848511][ T8825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.848525][ T8825] ? __pfx__printk+0x10/0x10 [ 153.848552][ T8825] should_fail_ex+0x414/0x560 [ 153.848573][ T8825] _copy_to_user+0x31/0xb0 [ 153.848589][ T8825] simple_read_from_buffer+0xe1/0x170 [ 153.848610][ T8825] proc_fail_nth_read+0x1df/0x250 [ 153.848630][ T8825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.848649][ T8825] ? rw_verify_area+0x258/0x650 [ 153.848661][ T8825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.848679][ T8825] vfs_read+0x200/0x980 [ 153.848696][ T8825] ? __pfx___mutex_lock+0x10/0x10 [ 153.848709][ T8825] ? __pfx_vfs_read+0x10/0x10 [ 153.848724][ T8825] ? __fget_files+0x2a/0x420 [ 153.848743][ T8825] ? __fget_files+0x3a0/0x420 [ 153.848757][ T8825] ? __fget_files+0x2a/0x420 [ 153.848779][ T8825] ksys_read+0x145/0x250 [ 153.848795][ T8825] ? __pfx_ksys_read+0x10/0x10 [ 153.848806][ T8825] ? rcu_is_watching+0x15/0xb0 [ 153.848824][ T8825] ? do_syscall_64+0xbe/0x3b0 [ 153.848839][ T8825] do_syscall_64+0xfa/0x3b0 [ 153.848849][ T8825] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.848865][ T8825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.848876][ T8825] ? clear_bhb_loop+0x60/0xb0 [ 153.848890][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.848900][ T8825] RIP: 0033:0x7f32ceb8d33c [ 153.848912][ T8825] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 153.848921][ T8825] RSP: 002b:00007f32cfa9d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.848934][ T8825] RAX: ffffffffffffffda RBX: 00007f32cedb5fa0 RCX: 00007f32ceb8d33c [ 153.848942][ T8825] RDX: 000000000000000f RSI: 00007f32cfa9d0a0 RDI: 0000000000000006 [ 153.848949][ T8825] RBP: 00007f32cfa9d090 R08: 0000000000000000 R09: 0000000000000000 [ 153.848956][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.848962][ T8825] R13: 0000000000000000 R14: 00007f32cedb5fa0 R15: 00007ffeec935ac8 [ 153.848985][ T8825] [ 154.795578][ T8855] netlink: 'syz.1.1020': attribute type 10 has an invalid length. [ 154.991735][ T8858] netlink: 'syz.4.1021': attribute type 21 has an invalid length. [ 155.070464][ T5166] Bluetooth: hci2: command tx timeout [ 155.081011][ T8855] team0: Port device geneve1 added [ 155.200474][ C1] net_ratelimit: 5078 callbacks suppressed [ 155.200489][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 155.218169][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 155.230004][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 155.241897][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 155.248943][ T8863] netlink: 'syz.2.1022': attribute type 21 has an invalid length. [ 155.253700][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 155.273077][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 155.284972][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 155.296857][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 155.308738][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 155.320614][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 155.572296][ T8872] netlink: 'syz.4.1024': attribute type 6 has an invalid length. [ 155.637766][ T8872] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1024'. [ 155.820521][ T8880] netlink: 'syz.1.1027': attribute type 10 has an invalid length. [ 156.954850][ T8905] validate_nla: 1 callbacks suppressed [ 156.954865][ T8905] netlink: 'syz.4.1035': attribute type 4 has an invalid length. [ 157.101012][ T8911] netlink: 'syz.0.1037': attribute type 10 has an invalid length. [ 157.627604][ T8922] netlink: 'syz.0.1041': attribute type 21 has an invalid length. [ 157.707572][ T2142] sched: DL replenish lagged too much [ 158.159562][ T8944] netlink: 'syz.4.1047': attribute type 4 has an invalid length. [ 158.174673][ T8945] netlink: 'syz.4.1047': attribute type 4 has an invalid length. [ 158.184963][ T8944] netlink: 'syz.4.1047': attribute type 6 has an invalid length. [ 158.260103][ T8945] netlink: 'syz.4.1047': attribute type 6 has an invalid length. [ 158.608521][ T8959] netlink: 'syz.3.1051': attribute type 10 has an invalid length. [ 159.284649][ T8985] netlink: 'syz.1.1058': attribute type 6 has an invalid length. [ 159.310397][ T8985] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1058'. [ 160.067115][ T9001] netlink: 'syz.3.1063': attribute type 21 has an invalid length. [ 160.085536][ T9001] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1063'. [ 160.216001][ C1] net_ratelimit: 5186 callbacks suppressed [ 160.216044][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 160.247943][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 160.275018][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 160.297780][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 160.320594][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 160.335787][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 160.350007][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 160.363744][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 160.377223][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 160.389939][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 160.944513][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.145643][ T9038] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1076'. [ 162.072528][ T9049] validate_nla: 2 callbacks suppressed [ 162.072542][ T9049] netlink: 'syz.3.1078': attribute type 10 has an invalid length. [ 162.385943][ T9049] team0: Device hsr_slave_0 failed to register rx_handler [ 163.454509][ T9092] netlink: 'syz.0.1094': attribute type 21 has an invalid length. [ 163.486108][ T9092] netlink: 'syz.0.1094': attribute type 2 has an invalid length. [ 163.518099][ T9092] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.1094'. [ 163.561578][ T9093] syzkaller0: tun_chr_ioctl cmd 35108 [ 164.026696][ T9100] syzkaller0: entered promiscuous mode [ 164.055306][ T9100] syzkaller0: entered allmulticast mode [ 164.079399][ T1108] syzkaller0: tun_net_xmit 48 [ 164.127033][ T9100] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 165.220824][ C1] net_ratelimit: 6181 callbacks suppressed [ 165.220842][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 165.238401][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 165.250221][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 165.261830][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 165.273659][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 165.285227][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 165.296835][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 165.308661][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 165.320573][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 165.332211][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 166.872140][ T9141] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1109'. [ 166.956533][ T9143] netlink: 'syz.3.1106': attribute type 21 has an invalid length. [ 167.186217][ T9143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1106'. [ 167.812481][ T9157] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1112'. [ 168.247218][ T9176] netlink: 'syz.3.1118': attribute type 39 has an invalid length. [ 168.561168][ T9184] netlink: 'syz.3.1121': attribute type 39 has an invalid length. [ 168.625262][ T9185] netlink: 'syz.4.1119': attribute type 10 has an invalid length. [ 168.736020][ T9187] netlink: 'syz.0.1122': attribute type 10 has an invalid length. [ 169.144818][ T9187] bond0: (slave wlan1): Releasing backup interface [ 169.225266][ T9187] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 169.261336][ T9187] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 169.400520][ T9187] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 169.433155][ T9200] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1126'. [ 169.467943][ T9187] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 169.649356][ T9187] team0: Port device wlan1 added [ 170.213446][ T9217] netlink: 'syz.0.1130': attribute type 10 has an invalid length. [ 170.230445][ C1] net_ratelimit: 7665 callbacks suppressed [ 170.230460][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 170.248244][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 170.260142][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 170.272116][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 170.284019][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 170.295974][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 170.307937][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 170.319889][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 170.331972][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 170.343929][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 170.575581][ T9227] netlink: 'syz.1.1134': attribute type 39 has an invalid length. [ 171.126291][ T9244] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1140'. [ 171.439189][ T9254] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1143'. [ 171.521386][ T9257] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1144'. [ 171.636169][ T9244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.704677][ T9244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.790161][ T9244] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 171.877390][ T9244] bond0 (unregistering): Released all slaves [ 173.809071][ T9340] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1167'. [ 173.867402][ T9342] C: renamed from team_slave_0 (while UP) [ 173.878479][ T9342] netlink: 'syz.4.1168': attribute type 3 has an invalid length. [ 173.901994][ T9342] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1168'. [ 174.390536][ T9355] netlink: 'syz.4.1172': attribute type 41 has an invalid length. [ 174.406903][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1172'. [ 175.226487][ T9391] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 175.241174][ C1] net_ratelimit: 7022 callbacks suppressed [ 175.241187][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 175.246949][ T9391] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1185'. [ 175.247927][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 175.279622][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 175.291864][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 175.303554][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 175.315763][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 175.327769][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 175.339898][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 175.352052][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 175.363924][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 175.552146][ T9402] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1189'. [ 175.648296][ T9405] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.1190'. [ 176.157838][ T9434] netlink: 'syz.0.1197': attribute type 3 has an invalid length. [ 176.180237][ T9434] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1197'. [ 178.470933][ T9476] netlink: 'syz.0.1211': attribute type 21 has an invalid length. [ 178.490830][ T9476] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1211'. [ 179.075208][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 179.736891][ T9483] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1213'. [ 179.817801][ T9484] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1212'. [ 180.251757][ C1] net_ratelimit: 1960 callbacks suppressed [ 180.251785][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 180.271166][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 180.284649][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 180.298308][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 180.311883][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 180.325425][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 180.338971][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 180.352528][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 180.366091][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 180.378800][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 181.584938][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 181.598792][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 181.605742][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 185.260515][ C1] net_ratelimit: 4936 callbacks suppressed [ 185.260532][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 185.277811][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 185.290268][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.302122][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 185.313563][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 185.326000][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.337777][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 185.349222][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 185.361647][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.373395][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 188.611877][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.618170][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.812456][ T9499] netlink: 'syz.4.1219': attribute type 29 has an invalid length. [ 188.854690][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 189.988258][ T9544] netlink: 'syz.0.1231': attribute type 10 has an invalid length. [ 190.270465][ C1] net_ratelimit: 6767 callbacks suppressed [ 190.270481][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 190.287830][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 190.299865][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.311733][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 190.323037][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 190.335081][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.346559][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 190.357994][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 190.370040][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.381654][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 191.830489][ T9583] netlink: 'syz.0.1245': attribute type 21 has an invalid length. [ 191.974406][ T9581] netlink: 'syz.4.1243': attribute type 10 has an invalid length. [ 192.397206][ T9601] netlink: 'syz.0.1249': attribute type 39 has an invalid length. [ 192.643520][ T9601] hsr_slave_0 (unregistering): left promiscuous mode [ 193.048276][ T9628] netlink: 'syz.3.1259': attribute type 21 has an invalid length. [ 193.561113][ T9645] netlink: 'syz.4.1264': attribute type 1 has an invalid length. [ 195.281133][ C1] net_ratelimit: 6475 callbacks suppressed [ 195.281149][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.298677][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 195.310068][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 195.322367][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.334141][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 195.345555][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 195.357854][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.369555][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 195.380953][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 195.393293][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.719003][ T9652] netlink: 'syz.3.1266': attribute type 10 has an invalid length. [ 195.969461][ T9664] netlink: 'syz.0.1270': attribute type 10 has an invalid length. [ 196.062349][ T9664] team0: Device ipvlan1 failed to register rx_handler [ 196.191966][ T9669] netlink: 'syz.2.1273': attribute type 21 has an invalid length. [ 197.096388][ T9694] netlink: 'syz.0.1281': attribute type 10 has an invalid length. [ 197.147096][ T9696] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.1283'. [ 197.754826][ T9712] netlink: 'syz.3.1290': attribute type 21 has an invalid length. [ 199.780599][ T9757] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1306'. [ 199.914900][ T9760] netlink: 'syz.0.1307': attribute type 21 has an invalid length. [ 200.290331][ C1] net_ratelimit: 5796 callbacks suppressed [ 200.290347][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 200.307692][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 200.320315][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.332535][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 200.344039][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 200.356620][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.368490][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 200.380006][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 200.392592][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.404472][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 200.487542][ T9769] netlink: 'syz.1.1309': attribute type 9 has an invalid length. [ 200.525381][ T9769] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.1309'. [ 200.914512][ T9790] netlink: 'syz.4.1315': attribute type 39 has an invalid length. [ 201.059430][ T9795] netlink: 'syz.1.1318': attribute type 10 has an invalid length. [ 201.109263][ T9795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.146433][ T9804] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1319'. [ 201.161186][ T9796] netlink: 'syz.1.1318': attribute type 10 has an invalid length. [ 201.204414][ T9795] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 201.256226][ T9806] netlink: 'syz.2.1321': attribute type 21 has an invalid length. [ 201.276937][ T9796] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1318'. [ 201.319146][ T9796] batadv0: entered promiscuous mode [ 201.354931][ T9796] batadv0: entered allmulticast mode [ 201.390908][ T9796] bond0: (slave batadv0): Releasing backup interface [ 201.426013][ T9796] bridge0: port 3(batadv0) entered blocking state [ 201.449404][ T9796] bridge0: port 3(batadv0) entered disabled state [ 201.627102][ T78] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 201.636490][ T78] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 201.668160][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.839250][ T9819] netlink: 'syz.2.1325': attribute type 10 has an invalid length. [ 201.946745][ T9823] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1327'. [ 202.276011][ T9831] netlink: 'syz.4.1330': attribute type 39 has an invalid length. [ 202.556724][ T9846] netlink: 'syz.2.1336': attribute type 21 has an invalid length. [ 203.229753][ T9865] netlink: 'syz.3.1344': attribute type 39 has an invalid length. [ 203.264730][ T9866] netlink: 'syz.2.1343': attribute type 10 has an invalid length. [ 204.092214][ T9882] netlink: 'syz.0.1348': attribute type 21 has an invalid length. [ 204.585042][ T9903] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1354'. [ 205.300795][ C1] net_ratelimit: 5833 callbacks suppressed [ 205.300811][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.318365][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 205.330051][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 205.342346][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.354050][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 205.365445][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 205.377731][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.389430][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 205.400867][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 205.413167][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.416209][ T9912] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1356'. [ 207.529824][ T9925] validate_nla: 2 callbacks suppressed [ 207.529865][ T9925] netlink: 'syz.0.1361': attribute type 21 has an invalid length. [ 207.710059][ T9933] netlink: 'syz.2.1362': attribute type 10 has an invalid length. [ 209.431645][ T9974] netlink: 'syz.4.1377': attribute type 21 has an invalid length. [ 209.472964][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.172839][ T9997] netlink: 'syz.0.1381': attribute type 10 has an invalid length. [ 210.310281][ C1] net_ratelimit: 6231 callbacks suppressed [ 210.310298][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 210.327681][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 210.340311][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.352165][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 210.363709][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 210.376330][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.388214][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 210.399654][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 210.412161][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.423982][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 210.588955][T10014] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1389'. [ 211.026983][T10023] netlink: 'syz.4.1392': attribute type 21 has an invalid length. [ 212.196256][T10063] netlink: 'syz.3.1405': attribute type 21 has an invalid length. [ 212.792808][T10079] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1410'. [ 213.013508][T10085] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1412'. [ 213.954046][T10098] netlink: 'syz.2.1414': attribute type 39 has an invalid length. [ 214.064783][T10102] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1418'. [ 214.435988][T10119] FAULT_INJECTION: forcing a failure. [ 214.435988][T10119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.493694][T10119] CPU: 1 UID: 0 PID: 10119 Comm: syz.3.1424 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 214.493714][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.493721][T10119] Call Trace: [ 214.493726][T10119] [ 214.493731][T10119] dump_stack_lvl+0x189/0x250 [ 214.493750][T10119] ? __pfx____ratelimit+0x10/0x10 [ 214.493766][T10119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.493778][T10119] ? __pfx__printk+0x10/0x10 [ 214.493792][T10119] ? __might_fault+0xb0/0x130 [ 214.493808][T10119] ? __might_fault+0xb0/0x130 [ 214.493826][T10119] should_fail_ex+0x414/0x560 [ 214.493845][T10119] _copy_from_user+0x2d/0xb0 [ 214.493858][T10119] ___sys_sendmsg+0x158/0x2a0 [ 214.493874][T10119] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.493903][T10119] ? __fget_files+0x2a/0x420 [ 214.493928][T10119] ? __fget_files+0x2a/0x420 [ 214.493942][T10119] ? __fget_files+0x3a0/0x420 [ 214.493964][T10119] __x64_sys_sendmsg+0x19b/0x260 [ 214.493981][T10119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.494004][T10119] ? __pfx_ksys_write+0x10/0x10 [ 214.494015][T10119] ? rcu_is_watching+0x15/0xb0 [ 214.494034][T10119] ? do_syscall_64+0xbe/0x3b0 [ 214.494048][T10119] do_syscall_64+0xfa/0x3b0 [ 214.494058][T10119] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.494075][T10119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.494085][T10119] ? clear_bhb_loop+0x60/0xb0 [ 214.494100][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.494110][T10119] RIP: 0033:0x7f8dd018e929 [ 214.494121][T10119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.494130][T10119] RSP: 002b:00007f8dd0f1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.494144][T10119] RAX: ffffffffffffffda RBX: 00007f8dd03b5fa0 RCX: 00007f8dd018e929 [ 214.494151][T10119] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 214.494158][T10119] RBP: 00007f8dd0f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 214.494165][T10119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.494171][T10119] R13: 0000000000000000 R14: 00007f8dd03b5fa0 R15: 00007fff3067d918 [ 214.494193][T10119] [ 214.758003][T10117] netlink: 'syz.0.1423': attribute type 10 has an invalid length. [ 215.321019][ C1] net_ratelimit: 4354 callbacks suppressed [ 215.321037][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.338786][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 215.357914][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 215.370763][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.382704][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 215.394272][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 215.406956][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.418888][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 215.430501][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 215.443198][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.497512][T10135] netlink: 'syz.2.1430': attribute type 39 has an invalid length. [ 215.883643][T10152] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1436'. [ 216.005236][T10157] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.1438'. [ 216.268818][T10166] netlink: 'syz.4.1441': attribute type 39 has an invalid length. [ 216.515296][T10170] netlink: 'syz.1.1442': attribute type 10 has an invalid length. [ 216.572442][T10170] bridge0: port 4(team0) entered blocking state [ 216.584598][T10170] bridge0: port 4(team0) entered disabled state [ 216.605741][T10170] team0: entered allmulticast mode [ 216.660533][T10170] team_slave_0: entered allmulticast mode [ 216.729581][T10170] team_slave_1: entered allmulticast mode [ 216.791031][T10170] geneve1: entered allmulticast mode [ 216.982971][T10170] team0: entered promiscuous mode [ 216.989175][T10170] team_slave_0: entered promiscuous mode [ 217.017792][T10170] team_slave_1: entered promiscuous mode [ 217.069258][T10170] geneve1: entered promiscuous mode [ 217.333688][T10170] bridge0: port 4(team0) entered blocking state [ 217.343299][T10170] bridge0: port 4(team0) entered forwarding state [ 217.799714][T10181] netlink: 'syz.2.1445': attribute type 39 has an invalid length. [ 220.332119][ C1] net_ratelimit: 2696 callbacks suppressed [ 220.332136][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.351263][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 220.363477][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 220.378968][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.392281][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 220.404533][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 220.419959][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.433317][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 220.445573][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 220.461008][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.341651][ C1] net_ratelimit: 1955 callbacks suppressed [ 225.341669][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.360636][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 225.372858][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 225.388345][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.401597][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 225.413812][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 225.429082][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.442308][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 225.454525][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 225.467661][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.351503][ C1] net_ratelimit: 2591 callbacks suppressed [ 230.351521][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.370610][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 230.382840][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 230.398045][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.411283][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 230.423476][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 230.438775][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.452042][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 230.464928][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 230.480182][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.386422][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.400582][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.410685][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.420279][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.428696][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.361173][ C1] net_ratelimit: 2014 callbacks suppressed [ 235.361189][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 235.382441][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.395799][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 235.408008][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 235.424434][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.437711][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 235.449958][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 235.465276][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.478505][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 235.490744][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 235.560333][ T5166] Bluetooth: hci5: command tx timeout [ 236.455109][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.463868][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.472403][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.482332][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.497105][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.750456][ T5166] Bluetooth: hci1: command 0x0406 tx timeout [ 236.898472][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.912025][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.920073][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.930421][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.945329][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.198256][T10196] chnl_net:caif_netlink_parms(): no params data found [ 237.630470][ T5844] Bluetooth: hci5: command tx timeout [ 237.963186][ T9496] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 237.971914][ T9496] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 237.979864][ T9496] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 237.989971][ T9496] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 237.998483][ T9496] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 238.227430][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 238.237101][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 238.256154][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 238.265440][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 238.276548][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 238.590409][ T50] Bluetooth: hci6: command tx timeout [ 239.711418][ T50] Bluetooth: hci5: command tx timeout [ 240.370736][ C1] net_ratelimit: 2080 callbacks suppressed [ 240.370755][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 240.388673][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 240.406267][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.418402][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 240.430401][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 240.447821][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.461139][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 240.473360][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 240.489718][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.503000][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 240.670982][ T50] Bluetooth: hci6: command tx timeout [ 241.790795][ T50] Bluetooth: hci5: command tx timeout [ 242.750599][ T50] Bluetooth: hci6: command tx timeout [ 244.830633][ T50] Bluetooth: hci6: command tx timeout [ 245.381930][ C1] net_ratelimit: 1851 callbacks suppressed [ 245.381947][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.400966][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.413176][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 245.425404][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 245.442879][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.456131][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.468310][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 245.480527][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 245.497979][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.511223][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.049462][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.055976][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.391402][ C1] net_ratelimit: 2170 callbacks suppressed [ 250.391420][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.410477][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.422670][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 250.434882][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 250.450944][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.464212][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.476398][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 250.488140][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 250.506299][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.518402][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.400555][ C1] net_ratelimit: 2065 callbacks suppressed [ 255.400573][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.418531][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 255.430771][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 255.449121][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.462326][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 255.474525][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.486697][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 255.499045][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 255.517520][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.530795][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 260.410988][ C1] net_ratelimit: 2279 callbacks suppressed [ 260.411005][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 260.428999][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.442180][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 260.454397][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 260.472818][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.486055][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 260.498253][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.510485][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 260.522661][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 260.541169][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.421766][ C1] net_ratelimit: 2160 callbacks suppressed [ 265.421783][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 265.439775][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.451950][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 265.464182][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 265.482520][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.495725][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 265.507894][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.520110][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 265.532367][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 265.551863][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.435715][ C1] net_ratelimit: 2314 callbacks suppressed [ 270.435732][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.454922][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 270.467140][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.479339][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 270.491533][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 270.510912][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.524163][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 270.536404][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.548608][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 270.560840][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 272.751222][T10213] Bluetooth: hci2: command 0x0406 tx timeout [ 275.440881][ C1] net_ratelimit: 2325 callbacks suppressed [ 275.440899][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.459978][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 275.472196][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.484469][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 275.496670][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 275.515045][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.528305][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 275.540536][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.552790][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 275.565259][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 280.455759][ C1] net_ratelimit: 2300 callbacks suppressed [ 280.455770][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.474943][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 280.487151][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.499376][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 280.511577][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 280.529888][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.543179][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 280.555365][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.567646][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 280.579958][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 285.461627][ C1] net_ratelimit: 2291 callbacks suppressed [ 285.461646][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 285.479802][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.492106][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 285.504341][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 285.522686][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.535972][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 285.547620][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.559831][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 285.572057][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 285.589777][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.476543][ C1] net_ratelimit: 2314 callbacks suppressed [ 290.476562][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.495765][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 290.508003][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.520259][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 290.532544][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 290.551036][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.564335][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 290.576524][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.588753][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 290.600954][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 294.616582][ T5842] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 294.625583][ T5842] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 294.636599][ T5842] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 294.646184][ T5842] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 294.670414][ T5842] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 295.481062][ C1] net_ratelimit: 2038 callbacks suppressed [ 295.481081][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 295.499108][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 295.517644][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.530918][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 295.543122][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.555330][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 295.567537][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 295.586030][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.599270][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 295.611553][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.366946][T10219] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 297.381317][T10219] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 297.389523][T10219] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 297.402658][T10219] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 297.411950][T10219] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 297.784921][T10224] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 297.794520][T10224] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 297.803606][T10224] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 297.813255][T10224] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 297.822321][T10224] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 298.758939][T10229] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 298.767946][T10229] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 298.776681][T10229] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 298.796935][T10229] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 298.805742][T10229] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 299.049918][T10232] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 299.064684][T10232] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 299.073915][T10232] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 299.092719][T10232] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 299.103437][T10232] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 300.490412][ C1] net_ratelimit: 2034 callbacks suppressed [ 300.490430][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.508447][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 300.520689][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 300.539030][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.552252][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 300.564449][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.576666][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 300.588837][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 300.607399][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.620864][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 305.507442][ C1] net_ratelimit: 2303 callbacks suppressed [ 305.507461][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.526669][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 305.538885][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.551167][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 305.563428][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 305.581831][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.595146][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 305.607450][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.619721][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 305.631945][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 310.514776][ C1] net_ratelimit: 2285 callbacks suppressed [ 310.514794][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.533965][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 310.546157][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.558382][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 310.570589][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 310.588943][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.602254][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 310.614505][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.626846][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 310.639064][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 311.492508][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.498872][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.520842][ C1] net_ratelimit: 2294 callbacks suppressed [ 315.520860][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 315.545394][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.558786][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 315.571010][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.583243][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 315.595421][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 315.614041][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.627289][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 315.639531][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.651743][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 320.530444][ C1] net_ratelimit: 2302 callbacks suppressed [ 320.530464][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 320.548590][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.560836][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 320.573021][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 320.591550][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.604827][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 320.617053][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.629352][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 320.641620][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 320.659930][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.380121][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 322.386752][ C1] rcu: 1-....: (10475 ticks this GP) idle=6344/1/0x4000000000000000 softirq=34928/40181 fqs=5209 [ 322.398031][ C1] rcu: hardirqs softirqs csw/system [ 322.404434][ C1] rcu: number: 45740 8573 0 [ 322.410839][ C1] rcu: cputime: 176 52309 206 ==> 52500(ms) [ 322.418631][ C1] rcu: (t=10501 jiffies g=24325 q=3133 ncpus=2) [ 322.424964][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 322.424978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.424985][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 322.425006][ C1] RIP: 0010:memset_orig+0x8a/0xb0 [ 322.425019][ C1] Code: 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 <4c> 89 d0 e9 ce b4 02 00 48 83 fa 07 76 e3 48 89 07 49 c7 c0 08 00 [ 322.425028][ C1] RSP: 0018:ffffc90000a07bd0 EFLAGS: 00000246 [ 322.425036][ C1] RAX: 0000000000000000 RBX: ffffc90000a07ce0 RCX: 0000000000000000 [ 322.425044][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000a07d08 [ 322.425050][ C1] RBP: dffffc0000000000 R08: ffffc90000a07d07 R09: 0000000000000000 [ 322.425057][ C1] R10: ffffc90000a07cf8 R11: fffff52000140fa1 R12: ffffc90000a08640 [ 322.425064][ C1] R13: ffffc90000a07cf8 R14: ffffc90000a07ca8 R15: ffffc90000a07cf0 [ 322.425072][ C1] FS: 0000000000000000(0000) GS:ffff888125d1f000(0000) knlGS:0000000000000000 [ 322.425081][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.425088][ C1] CR2: 000000110c33a10d CR3: 000000000df38000 CR4: 00000000003526f0 [ 322.425098][ C1] DR0: ffff8880b8927a20 DR1: 0000000000000000 DR2: 0000000000000000 [ 322.425105][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 322.425112][ C1] Call Trace: [ 322.425119][ C1] [ 322.425123][ C1] unwind_next_frame+0xc98/0x2390 [ 322.425166][ C1] ? unwind_next_frame+0xa5/0x2390 [ 322.425185][ C1] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 322.425221][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 322.425241][ C1] arch_stack_walk+0x11c/0x150 [ 322.425282][ C1] ? br_handle_frame+0x97f/0x14c0 [ 322.425317][ C1] stack_trace_save+0x9c/0xe0 [ 322.425337][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 322.425367][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 322.425405][ C1] kasan_save_track+0x3e/0x80 [ 322.425418][ C1] ? kasan_save_track+0x3e/0x80 [ 322.425428][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 322.425439][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 322.425450][ C1] ? skb_clone+0x212/0x3a0 [ 322.425464][ C1] ? maybe_deliver+0x98/0x160 [ 322.425473][ C1] ? br_flood+0x31a/0x6a0 [ 322.425482][ C1] ? br_handle_frame_finish+0x14b4/0x19b0 [ 322.425493][ C1] ? br_nf_hook_thresh+0x3c3/0x4a0 [ 322.425503][ C1] ? br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 322.425515][ C1] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 322.425705][ C1] __kasan_slab_alloc+0x6c/0x80 [ 322.425729][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 322.425745][ C1] ? skb_clone+0x212/0x3a0 [ 322.425781][ C1] skb_clone+0x212/0x3a0 [ 322.425816][ C1] maybe_deliver+0x98/0x160 [ 322.425848][ C1] br_flood+0x31a/0x6a0 [ 322.425906][ C1] br_handle_frame_finish+0x14b4/0x19b0 [ 322.425922][ C1] ? trace_call_bpf+0xb7/0x850 [ 322.425988][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 322.426023][ C1] ? trace_call_bpf+0x5ba/0x850 [ 322.426042][ C1] ? trace_call_bpf+0xb7/0x850 [ 322.426061][ C1] ? ip6t_do_table+0x1db/0x1560 [ 322.426101][ C1] ? nf_hook_slow+0x176/0x220 [ 322.426131][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 322.426148][ C1] br_nf_hook_thresh+0x3c3/0x4a0 [ 322.426202][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 322.426230][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 322.426253][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 322.426304][ C1] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 322.426318][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 322.426368][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 322.426388][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 322.426420][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 322.426450][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 322.426461][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 322.426511][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 322.426527][ C1] br_handle_frame+0x97f/0x14c0 [ 322.426581][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 322.426610][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 322.426655][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 322.426680][ C1] __netif_receive_skb_core+0x10de/0x4180 [ 322.426692][ C1] ? trace_call_bpf+0xb7/0x850 [ 322.426708][ C1] ? trace_call_bpf+0x5ba/0x850 [ 322.426717][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 322.426731][ C1] ? kmem_cache_free+0x18f/0x400 [ 322.426745][ C1] ? trace_call_bpf+0xb7/0x850 [ 322.426785][ C1] ? __pfx_trace_call_bpf+0x10/0x10 [ 322.426840][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 322.426853][ C1] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 322.426891][ C1] ? perf_trace_lock+0x2f8/0x3b0 [ 322.426923][ C1] ? __lock_acquire+0xab9/0xd20 [ 322.426970][ C1] ? process_backlog+0x2d5/0x14f0 [ 322.426993][ C1] ? process_backlog+0x2d5/0x14f0 [ 322.427024][ C1] __netif_receive_skb+0x72/0x380 [ 322.427053][ C1] ? process_backlog+0x2d5/0x14f0 [ 322.427078][ C1] process_backlog+0x60e/0x14f0 [ 322.427156][ C1] ? __pfx_process_backlog+0x10/0x10 [ 322.427210][ C1] __napi_poll+0xc4/0x480 [ 322.427221][ C1] ? net_rx_action+0x46d/0xe30 [ 322.427252][ C1] net_rx_action+0x707/0xe30 [ 322.427342][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 322.427376][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 322.427431][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 322.427514][ C1] handle_softirqs+0x286/0x870 [ 322.427548][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 322.427589][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 322.427602][ C1] ? irq_work_single+0x1ac/0x240 [ 322.427633][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 322.427665][ C1] __irq_exit_rcu+0xca/0x1f0 [ 322.427683][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 322.427718][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.427744][ C1] irq_exit_rcu+0x9/0x30 [ 322.427756][ C1] sysvec_irq_work+0xa3/0xc0 [ 322.427773][ C1] [ 322.427776][ C1] [ 322.427786][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 322.427798][ C1] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0 [ 322.427809][ C1] Code: 8b e8 6f a1 e9 09 65 66 8b 05 7f 6e 1a 11 66 85 c0 75 5a bf 01 00 00 00 e8 a8 32 0b 00 e8 f3 48 42 00 fb 65 8b 05 5b 6e 1a 11 <85> c0 75 05 e8 92 04 ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 322.427817][ C1] RSP: 0018:ffffc90000ac7900 EFLAGS: 00000286 [ 322.427826][ C1] RAX: 0000000000000001 RBX: 0000000000000201 RCX: 64af82b495ecc600 [ 322.427832][ C1] RDX: 0000000000000006 RSI: ffffffff8d996a93 RDI: ffffffff8be28f40 [ 322.427839][ C1] RBP: ffffc90000ac7980 R08: ffffffff8fa1d6f7 R09: 1ffffffff1f43ade [ 322.427846][ C1] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: ffffffff870c7467 [ 322.427853][ C1] R13: ffff88805f4c0dc0 R14: dffffc0000000000 R15: 1ffff92000158f20 [ 322.427870][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 322.427945][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 322.427968][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 322.427990][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 322.428017][ C1] nsim_dev_trap_report_work+0x7c7/0xb80 [ 322.428100][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 322.428127][ C1] process_scheduled_works+0xade/0x17b0 [ 322.428251][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 322.428334][ C1] worker_thread+0x8a0/0xda0 [ 322.428450][ C1] kthread+0x70e/0x8a0 [ 322.428486][ C1] ? __pfx_worker_thread+0x10/0x10 [ 322.428502][ C1] ? __pfx_kthread+0x10/0x10 [ 322.428533][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.428552][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.428565][ C1] ? __pfx_kthread+0x10/0x10 [ 322.428592][ C1] ret_from_fork+0x3fc/0x770 [ 322.428622][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 322.428664][ C1] ? __switch_to_asm+0x39/0x70 [ 322.428677][ C1] ? __switch_to_asm+0x33/0x70 [ 322.428689][ C1] ? __pfx_kthread+0x10/0x10 [ 322.428716][ C1] ret_from_fork_asm+0x1a/0x30 [ 322.428793][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 325.543277][ C1] net_ratelimit: 1724 callbacks suppressed [ 325.543295][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.562440][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 325.574745][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.586450][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 325.598921][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 325.617611][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.631009][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 325.643251][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.655476][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 325.667110][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 330.553112][ C1] net_ratelimit: 2360 callbacks suppressed [ 330.553128][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.572214][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 330.584441][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.596664][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 330.608855][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 330.628394][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.641709][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 330.653921][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.666138][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0) [ 330.678325][ C1] bridge0: received packet on team0 with own address as source address (addr:aa:aa:aa:aa:aa:20, vlan:0)