last executing test programs: 3m25.476804117s ago: executing program 2 (id=1148): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) 3m25.180734923s ago: executing program 2 (id=1152): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3m24.093654618s ago: executing program 2 (id=1165): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x7}, 0x140, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000040), &(0x7f0000000180)=r4}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 3m23.494311821s ago: executing program 3 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000711095000000000095000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="190000000300000000000000004000101811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0xfffeffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNGETSNDBUF(r2, 0x400454dc, &(0x7f0000001700)) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x4, &(0x7f0000002240)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="667fa2ca000000df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xd, 0x3, 0x4, 0x400, r1, 0x64, '\x00', 0x0, r9, 0x1, 0x3, 0x3, 0x9}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r6, 0x0, 0x0}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 3m18.499011313s ago: executing program 2 (id=1180): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000010070000000000000071122500e3ffffff95000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={0xffffffffffffffff, r0}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) unlink(&(0x7f0000000340)='./file0\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x12) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1ff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) socketpair(0x8, 0x80000, 0x1ff, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0xc006000000000000) 3m17.616560893s ago: executing program 2 (id=1183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/306], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x2, 0x80, 0x9, 0x6, 0xa0, 0x2, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x7}, 0x0, 0x6, 0xffff8001, 0x1, 0xd, 0x39a, 0x80, 0x0, 0x4, 0x0, 0x5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x20, 0x0, 0x0, 0x0, 0x4, 0x8002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0xc}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xfd70, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 3m15.484080291s ago: executing program 3 (id=1188): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x2, 0xa, 0x4, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xc5bf) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x31) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xa4, 0x0, 0xe2, 0xfffff03c}, {0xc, 0x0, 0x0, 0xfffffffe}, {0x5d, 0x6e, 0x4, 0x1}]}) 3m12.324864792s ago: executing program 3 (id=1193): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040001018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 3m12.235095594s ago: executing program 3 (id=1194): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000010070000000000000071122500e3ffffff95000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={0xffffffffffffffff, r0}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) unlink(&(0x7f0000000340)='./file0\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x12) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1ff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) socketpair(0x8, 0x80000, 0x1ff, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0xc006000000000000) 3m11.395542953s ago: executing program 3 (id=1197): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) 3m11.320046905s ago: executing program 2 (id=1198): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r5], 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r4}, &(0x7f00000008c0), 0x0}, 0x20) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xfd70, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 3m11.108600649s ago: executing program 3 (id=1199): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r2}, &(0x7f00000008c0), &(0x7f0000000940)='%-010d \x00'}, 0x20) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xfd70, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2m55.774763494s ago: executing program 32 (id=1198): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r5], 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r4}, &(0x7f00000008c0), 0x0}, 0x20) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xfd70, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2m55.06286067s ago: executing program 33 (id=1199): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r2}, &(0x7f00000008c0), &(0x7f0000000940)='%-010d \x00'}, 0x20) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xfd70, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 24.762768384s ago: executing program 6 (id=1567): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x200c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x5a}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, &(0x7f00000001c0)=""/5, 0x0, &(0x7f0000000300)="a0d4f3783a0fd85c48d000f35c41057ce93f7c3599d46c506139056194d811c176d526ee710e92da09a1b3939b2c2483535fcbf4a9", 0x7, r3, 0x4}, 0x38) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r2, 0x58, &(0x7f0000000480)}, 0x10) 24.375528763s ago: executing program 6 (id=1569): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0306"], 0xffdd) 22.088164284s ago: executing program 6 (id=1573): syz_clone(0x400, &(0x7f0000000000)="2f69d5c24cc47cb38068285b6d506b5314a74cb10697adb4f10638a775aa4aa08dcb1b857f87a08fbd7add0216e436e0470881a033facdef7100dff169db901889253923f0706e1603c585488d06d73c77bb50e8ef3f9f44f9b7a6c51bac778db8418beb1c9d6e9686523594975e50ba36d259ed9a1f8e13f68562eacec0c26501543499a46de74f704fe7f740cf8313fb592b588fbce2a0ebb8e2b173543cd8706c76d7e8d90ae5cc883b7e15267871543a131a2cc18f90", 0xb8, 0x0, 0x0, 0x0) 21.582749486s ago: executing program 6 (id=1575): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r1}, 0x38) 21.060573917s ago: executing program 5 (id=1578): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xc}, 0x118002, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="00000000000000009a1ea2050000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/24], 0x48) 20.0547323s ago: executing program 0 (id=1581): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x200c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000030000000002000000020000000043000000000000000000010500000008010000000000000100000500000000000000000100000000000000000088f42e9879cdb11486c3835833edcb56ec71c1e4fc6a8bb4dd61fc2c0757dd76d40171aa79d9118b905e5ac3ad5c9a1d205083da841b46f38320dcb09faa1f5663f56da77228bc37c76f9799d507c6e3e5515b3806135dac6afa0901c91dbcd2189de4381fc82b1baaaec9d42b58fd08579e2066770ad50e3eb8863f6de22d3c6f61be8cd17bff6acda20f8003fd1c517e581984ee798b124e06"], 0x0, 0x5a}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, &(0x7f00000001c0)=""/5, 0x0, &(0x7f0000000300)="a0d4f3783a0fd85c48d000f35c41057ce93f7c3599d46c506139056194d811c176d526ee710e92da09a1b3939b2c2483535fcbf4a9", 0x7, r2, 0x4}, 0x38) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000480)}, 0x10) 19.820206435s ago: executing program 5 (id=1583): r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x400000000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0x8b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0006000000000000000000009300000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a6167ffffffffff7ffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x9, &(0x7f0000000000), 0x8}, 0x94) 19.715279398s ago: executing program 6 (id=1584): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x80005, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0xffffffff, 0x4, 0x4006, 0x1145, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x202, 0x8000001}, 0x50) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.983572904s ago: executing program 5 (id=1587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r1}, &(0x7f0000000b00), &(0x7f0000000b40)=r0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x81, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[], 0xffdd) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 18.968458365s ago: executing program 0 (id=1597): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x4240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xc, 0x1, 0x9, 0x1, 0xa0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0x4932, 0x4, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)="259c9a57c93d0d816904c5f3e5a10500000000000000e218718a4a4200553f6fd74e699d2e0300bde3c5f8789e369a854c17d9dc9200018f3cb5d050e5e7d624256053d63cf3af558ca4a233f8f1667f868921cd0d0cd643f873e49377891fa98dcf5a0867748ab168", &(0x7f0000000140), 0xca, r1, 0x100000000000000}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2309e}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x8, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xf}, 0x70a, 0x5, 0x7, 0x2, 0xfcbd, 0x7, 0x8, 0x0, 0x58, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 18.614777742s ago: executing program 4 (id=1588): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00060000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a6167ffffffffff7ffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000100)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x9, &(0x7f0000000000), 0x8}, 0x94) 13.694981073s ago: executing program 0 (id=1600): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 13.473307178s ago: executing program 4 (id=1590): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) socketpair(0x1, 0x1, 0x0, 0x0) 9.063790027s ago: executing program 0 (id=1591): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x200c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x5a}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 9.063481667s ago: executing program 1 (id=1592): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 9.063115827s ago: executing program 5 (id=1593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ef5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1869d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f33ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff799a29459aff1374df5c49ca11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc006b340658342d2d9e06008c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e9dffd8918de33aed5bb09cb2a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf422b7473c24b93085c51e02af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00bb02000000000000c84799aa792cdaeb607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee127ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c435c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fceea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfe089e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cf594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f5bce1cdaa99705a8fa48f61071f548d411353965615c24c1860790dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9776f89c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba26bb91d7b1b98f11fb7a77b03206c151b00015305af815f7da19872085b503a21cbe722842c26ad8dd6b83018300000000000000000000f4ffffffffffffff000000000000000000000000000000000000798d011c62dbfdbad9e58e07d371e3a2399f2369631138ad4fb3aeb3f51233922b4c700fb163efbc55c912276685a774f2dce9bb9c54fd1f505eccf06323fad86c37adafb5e80b96ba9f925a6fd57de5fedf691e8b41c9835a840d12a224ed233c93ed92603401e5a61298294e9cab078c231121d4e32fb8286478fb12f5804d13c7bcff5dcffccd1d520dc04910239efc397b7736682e1c0ef0d001c17ec1441026ed4b1395b8e88a58d667a65cec1ddee1b30bcc96652a238c990a2701e2ee0915335fa4b8c33372bd00021f17c012451519ad56594c9469f164bb915edb1fd4ce76fb37bb9512632e9c9e7dcc772128c280c6e6cc0e859bd65c666e8b7732a2c2d517af56f4cde502f364922f3c2bbf9f4ced5c6f3d33428775b7399e6c6cf52bc8d5b48079700db251c7cdad3836c1e137b11917cff00e0ecc5e93fd7e8bdd83313a27197651c92f2f9be4a6f83662fa948c46632a979e8c66d22777a06601c5f5d3ab28b9f9e39543d2bb9de6ce57a6c1c3a635a0515c87abd11988cae405b9495f54b8d89503a8c9e96bdf08eb563e4cffe00e27272ca6e392ffca16b172ce8b6ee542ec9135e969b7b029beaeba12836110fcb686d82c066d0fc67fee8a00acda99a302a7aac9e920e34174323e7c6aeefd0a092545274fb164f21ac2f46849a6d0b51ad5a230a5ffab7a66e7dde5a335aeaa9736678319f344a32c99ac748bf200368963de24c237873ff5a01f14335de9a6d06c8b49ff27ddf0f13d5fe0901355765c397ce52791339d666eec141f0d33ca51f7b8aa6e9937631269b064d9c7323df8b7154f76708b912e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 8.806781913s ago: executing program 4 (id=1594): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r1}, 0x38) 8.804047823s ago: executing program 6 (id=1606): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 8.664181686s ago: executing program 1 (id=1595): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdd, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 8.421077922s ago: executing program 0 (id=1596): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000000c0)=r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="1e030600bc5cb61128876360865866702c1ffe800000000000005ab71367167d3311041bbfcbeca912b4f059e5"], 0xffdd) 7.941243282s ago: executing program 4 (id=1598): r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x400000000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0x8b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0006000000000000000000009300000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a6167ffffffffff7ffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x9, &(0x7f0000000000), 0x8}, 0x94) 7.296489157s ago: executing program 1 (id=1599): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x140, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) syz_clone(0x400, &(0x7f0000000000)="2f69d5c24cc47cb38068285b6d506b5314a74cb10697adb4f10638a775aa4aa08dcb1b857f87a08fbd7add0216e436e0470881a033facdef7100dff169db901889253923f0706e1603c585488d06d73c77bb50e8ef3f9f44f9b7a6c51bac778db8418beb1c9d6e9686523594975e50ba36d259ed9a1f8e13f68562eacec0c26501543499a46de74f704fe7f740cf8313fb592b588fbce2a0ebb8e2b173543cd8706c76d7e8d90ae5cc883b7e15267871543a131a2cc18f90", 0xb8, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd63, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1622}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) 3.963959062s ago: executing program 5 (id=1601): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600), 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="1d2e2aa1c2b5a046b6c6bb4ea669b7d84116ef0cd043507fb86b007d59a7543764", 0x21}, {&(0x7f0000000440)="0f30b9452fd40760c4b311f436106dd90bc42b8d282a943781a6710cca58d0c15dc6cfbba63929914a1d6fa03a813029308ce3e56d565f0c84fd406747e51343860e7809796ecef780c9b05ac91c9d854533be5af28f4210174581297986111702c85504da68b6e451e256f3d4e43778008b5c30673960071f7a9e21e191f8b732333b3f5a168f6dfa90df9accd8be9d709773edc8dce50730bff9ca59abaa6ddde944818cbd6b1351af168a5827e7025d293a22d31a726041", 0xb9}], 0x2, &(0x7f0000000880)}, 0x4040080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x300f000, 0xe, 0x0, &(0x7f0000000e40)="0049c69d2786a4b8d3dce769c270", 0x0, 0xad27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x1000, 0x12) 3.729773167s ago: executing program 1 (id=1602): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 3.683797228s ago: executing program 4 (id=1603): openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbd, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80420, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c97a160, 0x1, @perf_config_ext={0x100000000040, 0x9}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xb5, 0x1, 0x0, 0x0, 0x0, 0x3, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x4}, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.586074412s ago: executing program 1 (id=1604): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x200c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x5a}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, &(0x7f00000001c0)=""/5, 0x0, &(0x7f0000000300)="a0d4f3783a0fd85c48d000f35c41057ce93f7c3599d46c506139056194d811c176d526ee710e92da09a1b3939b2c2483535fcbf4a9", 0x7, r3, 0x4}, 0x38) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r2, 0x58, &(0x7f0000000480)}, 0x10) 2.204312191s ago: executing program 1 (id=1605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r1}, &(0x7f0000000b00), &(0x7f0000000b40)=r0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x81, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[], 0xffdd) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 148.200297ms ago: executing program 5 (id=1607): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b"], 0xffdd) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) 108.091538ms ago: executing program 4 (id=1608): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 0s ago: executing program 0 (id=1609): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kernel console output (not intermixed with test programs): 35.492368][ T5073] ? __hrtimer_init+0x189/0x270 [ 135.497411][ T5073] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 135.503278][ T5073] ? memcpy+0x3c/0x60 [ 135.507316][ T5073] hwsim_new_radio_nl+0xab7/0xc90 [ 135.512501][ T5073] genl_family_rcv_msg_doit+0x22f/0x350 [ 135.518210][ T5073] ? end_current_label_crit_section+0x170/0x170 [ 135.524840][ T5073] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 135.530785][ T5073] ? bpf_lsm_capable+0x5/0x10 [ 135.535501][ T5073] ? security_capable+0x85/0xb0 [ 135.540566][ T5073] genl_rcv_msg+0x601/0x790 [ 135.545142][ T5073] ? genl_bind+0x360/0x360 [ 135.549593][ T5073] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 135.556310][ T5073] netlink_rcv_skb+0x1ef/0x440 [ 135.561463][ T5073] ? genl_bind+0x360/0x360 [ 135.566074][ T5073] ? netlink_ack+0x1160/0x1160 [ 135.571303][ T5073] ? down_read+0x1a8/0x2d0 [ 135.575757][ T5073] genl_rcv+0x24/0x40 [ 135.579795][ T5073] netlink_unicast+0x7ad/0x920 [ 135.584632][ T5073] netlink_sendmsg+0x8ad/0xbd0 [ 135.589535][ T5073] ? netlink_getsockopt+0x550/0x550 [ 135.594868][ T5073] ? apparmor_socket_sendmsg+0x8a/0x330 [ 135.600468][ T5073] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 135.605789][ T5073] ? security_socket_sendmsg+0x7c/0xa0 [ 135.611374][ T5073] ? netlink_getsockopt+0x550/0x550 [ 135.616702][ T5073] ____sys_sendmsg+0x5ed/0x9a0 [ 135.621503][ T5073] ? __sys_sendmsg_sock+0x30/0x30 [ 135.626573][ T5073] ? __import_iovec+0x306/0x510 [ 135.631498][ T5073] ? import_iovec+0x6f/0xa0 [ 135.636039][ T5073] ___sys_sendmsg+0x2a2/0x360 [ 135.641047][ T5073] ? __sys_sendmsg+0x2a0/0x2a0 [ 135.645970][ T5073] __se_sys_sendmsg+0x1c3/0x2b0 [ 135.651205][ T5073] ? __x64_sys_sendmsg+0x80/0x80 [ 135.656759][ T5073] ? lockdep_hardirqs_on+0x94/0x140 [ 135.661987][ T5073] do_syscall_64+0x4c/0xa0 [ 135.666893][ T5073] ? clear_bhb_loop+0x60/0xb0 [ 135.671612][ T5073] ? clear_bhb_loop+0x60/0xb0 [ 135.676412][ T5073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.682498][ T5073] RIP: 0033:0x7f560979de99 [ 135.687038][ T5073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.707303][ T5073] RSP: 002b:00007f56079d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.715925][ T5073] RAX: ffffffffffffffda RBX: 00007f5609a26180 RCX: 00007f560979de99 [ 135.723928][ T5073] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 135.731911][ T5073] RBP: 00007f5609833eaf R08: 0000000000000000 R09: 0000000000000000 [ 135.740155][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.748226][ T5073] R13: 00007f5609a26218 R14: 00007f5609a26180 R15: 00007ffd8b8f1728 [ 135.756398][ T5073] [ 135.807776][ T5075] validate_nla: 3 callbacks suppressed [ 135.807828][ T5075] netlink: 'syz.4.199': attribute type 29 has an invalid length. [ 135.894548][ T5084] netlink: 'syz.0.200': attribute type 10 has an invalid length. [ 135.916160][ T5075] netlink: 'syz.4.199': attribute type 29 has an invalid length. [ 136.139906][ T5079] netlink: 830 bytes leftover after parsing attributes in process `syz.2.197'. [ 136.371348][ T5088] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 137.089906][ T5104] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 137.236055][ T5108] netlink: 'syz.3.206': attribute type 29 has an invalid length. [ 137.619541][ T5108] netlink: 'syz.3.206': attribute type 29 has an invalid length. [ 137.870728][ T5116] netlink: 'syz.4.208': attribute type 10 has an invalid length. [ 138.525411][ T5126] netlink: 'syz.2.210': attribute type 10 has an invalid length. [ 139.821526][ T5144] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 141.037625][ T5159] validate_nla: 2 callbacks suppressed [ 141.037647][ T5159] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 141.299468][ T5162] netlink: 'syz.1.219': attribute type 29 has an invalid length. [ 141.363416][ T5161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.219'. [ 141.374932][ T5162] netlink: 'syz.1.219': attribute type 29 has an invalid length. [ 141.507654][ T5166] netlink: 'syz.2.221': attribute type 10 has an invalid length. [ 141.726233][ T5169] netlink: 'syz.1.223': attribute type 10 has an invalid length. [ 142.742396][ T5183] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 143.987772][ T5183] syz.2.227 (5183) used greatest stack depth: 20368 bytes left [ 144.140161][ T5202] netlink: 'syz.4.236': attribute type 10 has an invalid length. [ 144.719415][ T5211] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 145.642431][ T5227] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 146.642939][ T5235] netlink: 'syz.1.245': attribute type 10 has an invalid length. [ 147.180877][ T5243] netlink: 'syz.4.247': attribute type 29 has an invalid length. [ 147.259345][ T5243] netlink: 'syz.4.247': attribute type 29 has an invalid length. [ 147.768855][ T5254] netlink: 'syz.3.251': attribute type 10 has an invalid length. [ 148.036434][ T5257] netlink: 'syz.2.263': attribute type 10 has an invalid length. [ 148.120772][ T5263] netlink: 'syz.3.252': attribute type 29 has an invalid length. [ 148.203265][ T5263] netlink: 'syz.3.252': attribute type 29 has an invalid length. [ 148.863217][ T5275] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 148.923564][ T5279] netlink: 'syz.4.259': attribute type 10 has an invalid length. [ 149.814537][ T5292] netlink: 'syz.1.262': attribute type 10 has an invalid length. [ 150.500018][ T5298] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.265'. [ 150.581155][ T5298] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 150.698879][ T5298] netlink: 830 bytes leftover after parsing attributes in process `syz.3.265'. [ 151.362419][ T5315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.269'. [ 152.032323][ T5325] validate_nla: 6 callbacks suppressed [ 152.032340][ T5325] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 152.098995][ T5323] netlink: 'syz.4.272': attribute type 29 has an invalid length. [ 152.147947][ T5323] netlink: 'syz.4.272': attribute type 29 has an invalid length. [ 152.861392][ T5333] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 152.889490][ T5333] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.275'. [ 152.931199][ T5338] netlink: 'syz.4.275': attribute type 29 has an invalid length. [ 153.119407][ T5338] netlink: 'syz.4.275': attribute type 29 has an invalid length. [ 153.172578][ T5333] netlink: 60 bytes leftover after parsing attributes in process `syz.4.275'. [ 153.282332][ T5347] netlink: 'syz.1.277': attribute type 29 has an invalid length. [ 153.771173][ T5347] netlink: 'syz.1.277': attribute type 29 has an invalid length. [ 153.843098][ T5353] netlink: 'syz.4.279': attribute type 10 has an invalid length. [ 154.380149][ T5366] netlink: 'syz.4.283': attribute type 29 has an invalid length. [ 154.525743][ T5369] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.285'. [ 154.712213][ T5369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.285'. [ 155.052337][ T5380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.287'. [ 155.130411][ T5383] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.288'. [ 155.192030][ T5380] device team0 entered promiscuous mode [ 155.248845][ T5380] device team_slave_0 entered promiscuous mode [ 155.301984][ T5380] device team_slave_1 entered promiscuous mode [ 155.356073][ T5380] bridge0: port 2(team0) entered blocking state [ 155.388460][ T5380] bridge0: port 2(team0) entered disabled state [ 155.397816][ T5380] bridge0: port 2(team0) entered blocking state [ 155.404763][ T5380] bridge0: port 2(team0) entered forwarding state [ 155.447779][ T5389] netlink: 60 bytes leftover after parsing attributes in process `syz.1.288'. [ 155.705841][ T5396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.291'. [ 156.060707][ T5401] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.293'. [ 156.216722][ T5401] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 156.905223][ T5413] netlink: 830 bytes leftover after parsing attributes in process `syz.1.293'. [ 157.033195][ T5425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.308'. [ 157.374939][ T5429] validate_nla: 13 callbacks suppressed [ 157.374955][ T5429] netlink: 'syz.1.299': attribute type 10 has an invalid length. [ 158.029557][ T5441] netlink: 'syz.3.301': attribute type 27 has an invalid length. [ 158.045315][ T5441] netlink: 164 bytes leftover after parsing attributes in process `syz.3.301'. [ 158.214779][ T5442] netlink: 'syz.4.302': attribute type 29 has an invalid length. [ 158.230570][ T5442] netlink: 'syz.4.302': attribute type 29 has an invalid length. [ 158.249019][ T5442] netlink: 60 bytes leftover after parsing attributes in process `syz.4.302'. [ 158.531945][ T5449] netlink: 'syz.0.304': attribute type 29 has an invalid length. [ 158.549751][ T5444] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 158.583367][ T5444] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.304'. [ 158.606270][ T5450] netlink: 'syz.3.305': attribute type 10 has an invalid length. [ 158.631748][ T5450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.305'. [ 158.715623][ T5449] netlink: 'syz.0.304': attribute type 29 has an invalid length. [ 158.750332][ T5451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.304'. [ 159.089658][ T5459] netlink: 'syz.1.307': attribute type 29 has an invalid length. [ 159.186332][ T5455] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 159.218423][ T5455] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.307'. [ 159.798990][ T5471] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 159.911179][ T5471] CPU: 1 PID: 5471 Comm: syz.2.310 Not tainted syzkaller #0 [ 159.918997][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.929175][ T5471] Call Trace: [ 159.932618][ T5471] [ 159.935580][ T5471] dump_stack_lvl+0x188/0x24e [ 159.940316][ T5471] ? show_regs_print_info+0x12/0x12 [ 159.945555][ T5471] ? load_image+0x410/0x410 [ 159.950370][ T5471] sysfs_warn_dup+0x8a/0xa0 [ 159.954908][ T5471] sysfs_do_create_link_sd+0xc0/0x110 [ 159.960324][ T5471] device_add+0x83b/0x1050 [ 159.964783][ T5471] wiphy_register+0x1d8b/0x2aa0 [ 159.969880][ T5471] ? cfg80211_event_work+0x40/0x40 [ 159.975323][ T5471] ? minstrel_ht_alloc+0x894/0xa20 [ 159.980587][ T5471] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 159.986863][ T5471] ieee80211_register_hw+0x2d48/0x39f0 [ 159.992982][ T5471] ? ieee80211_register_hw+0xf61/0x39f0 [ 159.998750][ T5471] ? ieee80211_register_hw+0xf61/0x39f0 [ 160.004435][ T5471] ? ieee80211_tasklet_handler+0x20/0x20 [ 160.010461][ T5471] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 160.016565][ T5471] ? __debug_object_init+0xed/0x440 [ 160.021804][ T5471] ? memset+0x1e/0x40 [ 160.025814][ T5471] ? __hrtimer_init+0x189/0x270 [ 160.030969][ T5471] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 160.036829][ T5471] ? memcpy+0x3c/0x60 [ 160.040940][ T5471] hwsim_new_radio_nl+0xab7/0xc90 [ 160.046321][ T5471] genl_family_rcv_msg_doit+0x22f/0x350 [ 160.052070][ T5471] ? end_current_label_crit_section+0x170/0x170 [ 160.059873][ T5471] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 160.065938][ T5471] ? bpf_lsm_capable+0x5/0x10 [ 160.070768][ T5471] ? security_capable+0x85/0xb0 [ 160.075689][ T5471] genl_rcv_msg+0x601/0x790 [ 160.080425][ T5471] ? genl_bind+0x360/0x360 [ 160.084969][ T5471] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 160.091899][ T5471] netlink_rcv_skb+0x1ef/0x440 [ 160.097037][ T5471] ? genl_bind+0x360/0x360 [ 160.101578][ T5471] ? netlink_ack+0x1160/0x1160 [ 160.106574][ T5471] ? down_read+0x1a8/0x2d0 [ 160.111027][ T5471] genl_rcv+0x24/0x40 [ 160.115133][ T5471] netlink_unicast+0x7ad/0x920 [ 160.119949][ T5471] netlink_sendmsg+0x8ad/0xbd0 [ 160.124862][ T5471] ? netlink_getsockopt+0x550/0x550 [ 160.130481][ T5471] ? apparmor_socket_sendmsg+0x8a/0x330 [ 160.136343][ T5471] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 160.141751][ T5471] ? security_socket_sendmsg+0x7c/0xa0 [ 160.147239][ T5471] ? netlink_getsockopt+0x550/0x550 [ 160.152475][ T5471] ____sys_sendmsg+0x5ed/0x9a0 [ 160.158044][ T5471] ? __sys_sendmsg_sock+0x30/0x30 [ 160.163147][ T5471] ? __import_iovec+0x306/0x510 [ 160.168084][ T5471] ? import_iovec+0x6f/0xa0 [ 160.172631][ T5471] ___sys_sendmsg+0x2a2/0x360 [ 160.177359][ T5471] ? __sys_sendmsg+0x2a0/0x2a0 [ 160.182403][ T5471] __se_sys_sendmsg+0x1c3/0x2b0 [ 160.187744][ T5471] ? __x64_sys_sendmsg+0x80/0x80 [ 160.192983][ T5471] ? lockdep_hardirqs_on+0x94/0x140 [ 160.198239][ T5471] do_syscall_64+0x4c/0xa0 [ 160.202795][ T5471] ? clear_bhb_loop+0x60/0xb0 [ 160.207611][ T5471] ? clear_bhb_loop+0x60/0xb0 [ 160.212610][ T5471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.218710][ T5471] RIP: 0033:0x7f560979de99 [ 160.223244][ T5471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.243346][ T5471] RSP: 002b:00007f56079d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.253812][ T5471] RAX: ffffffffffffffda RBX: 00007f5609a26180 RCX: 00007f560979de99 [ 160.262281][ T5471] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 160.270738][ T5471] RBP: 00007f5609833eaf R08: 0000000000000000 R09: 0000000000000000 [ 160.279027][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.287114][ T5471] R13: 00007f5609a26218 R14: 00007f5609a26180 R15: 00007ffd8b8f1728 [ 160.295226][ T5471] [ 161.282076][ T5492] __nla_validate_parse: 3 callbacks suppressed [ 161.282098][ T5492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.315'. [ 161.334175][ T5487] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.324'. [ 161.344661][ T5492] device team0 entered promiscuous mode [ 161.344682][ T5492] device team_slave_0 entered promiscuous mode [ 161.351951][ T5492] device team_slave_1 entered promiscuous mode [ 161.471992][ T5492] bridge0: port 2(team0) entered blocking state [ 161.494305][ T5492] bridge0: port 2(team0) entered disabled state [ 161.537007][ T5492] bridge0: port 2(team0) entered blocking state [ 161.543513][ T5492] bridge0: port 2(team0) entered forwarding state [ 161.805014][ T5501] netlink: 830 bytes leftover after parsing attributes in process `syz.1.324'. [ 161.863564][ T5487] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 161.942410][ T5487] CPU: 0 PID: 5487 Comm: syz.1.324 Not tainted syzkaller #0 [ 161.949962][ T5487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.960232][ T5487] Call Trace: [ 161.963553][ T5487] [ 161.966608][ T5487] dump_stack_lvl+0x188/0x24e [ 161.971437][ T5487] ? show_regs_print_info+0x12/0x12 [ 161.976695][ T5487] ? load_image+0x410/0x410 [ 161.981368][ T5487] sysfs_warn_dup+0x8a/0xa0 [ 161.985928][ T5487] sysfs_do_create_link_sd+0xc0/0x110 [ 161.991357][ T5487] device_add+0x83b/0x1050 [ 161.995830][ T5487] wiphy_register+0x1d8b/0x2aa0 [ 162.000852][ T5487] ? cfg80211_event_work+0x40/0x40 [ 162.006106][ T5487] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.012423][ T5487] ? ieee80211_register_hw+0x2ca9/0x39f0 [ 162.018206][ T5487] ieee80211_register_hw+0x2d48/0x39f0 [ 162.023708][ T5487] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.029974][ T5487] ? ieee80211_register_hw+0xf61/0x39f0 [ 162.035575][ T5487] ? ieee80211_register_hw+0xf61/0x39f0 [ 162.041514][ T5487] ? ieee80211_tasklet_handler+0x20/0x20 [ 162.047570][ T5487] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 162.053620][ T5487] ? __debug_object_init+0xed/0x440 [ 162.058968][ T5487] ? memset+0x1e/0x40 [ 162.063011][ T5487] ? __hrtimer_init+0x189/0x270 [ 162.067913][ T5487] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 162.073777][ T5487] ? memcpy+0x3c/0x60 [ 162.077921][ T5487] hwsim_new_radio_nl+0xab7/0xc90 [ 162.083209][ T5487] genl_family_rcv_msg_doit+0x22f/0x350 [ 162.088909][ T5487] ? rcu_is_watching+0x11/0xa0 [ 162.093957][ T5487] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 162.100108][ T5487] ? lockdep_hardirqs_on+0x94/0x140 [ 162.105639][ T5487] ? genl_rcv_msg+0x5d9/0x790 [ 162.110654][ T5487] genl_rcv_msg+0x601/0x790 [ 162.115510][ T5487] ? genl_bind+0x360/0x360 [ 162.120080][ T5487] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 162.126612][ T5487] netlink_rcv_skb+0x1ef/0x440 [ 162.131541][ T5487] ? genl_bind+0x360/0x360 [ 162.136199][ T5487] ? netlink_ack+0x1160/0x1160 [ 162.141112][ T5487] ? down_read+0x1a8/0x2d0 [ 162.145567][ T5487] genl_rcv+0x24/0x40 [ 162.149582][ T5487] netlink_unicast+0x7ad/0x920 [ 162.154568][ T5487] netlink_sendmsg+0x8ad/0xbd0 [ 162.159556][ T5487] ? netlink_getsockopt+0x550/0x550 [ 162.164881][ T5487] ? apparmor_socket_sendmsg+0x8a/0x330 [ 162.170660][ T5487] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 162.176108][ T5487] ? security_socket_sendmsg+0x7c/0xa0 [ 162.181632][ T5487] ? netlink_getsockopt+0x550/0x550 [ 162.187077][ T5487] ____sys_sendmsg+0x5ed/0x9a0 [ 162.192001][ T5487] ? rcu_is_watching+0x11/0xa0 [ 162.197086][ T5487] ? lockdep_hardirqs_on+0x94/0x140 [ 162.202498][ T5487] ? __sys_sendmsg_sock+0x30/0x30 [ 162.207655][ T5487] ? ___sys_sendmsg+0x287/0x360 [ 162.212827][ T5487] ___sys_sendmsg+0x2a2/0x360 [ 162.218503][ T5487] ? __sys_sendmsg+0x2a0/0x2a0 [ 162.223669][ T5487] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 162.229552][ T5487] __se_sys_sendmsg+0x1c3/0x2b0 [ 162.234449][ T5487] ? __x64_sys_sendmsg+0x80/0x80 [ 162.239649][ T5487] ? syscall_enter_from_user_mode+0x2a/0x80 [ 162.245878][ T5487] do_syscall_64+0x4c/0xa0 [ 162.250417][ T5487] ? clear_bhb_loop+0x60/0xb0 [ 162.255124][ T5487] ? clear_bhb_loop+0x60/0xb0 [ 162.259831][ T5487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.265932][ T5487] RIP: 0033:0x7f20e399de99 [ 162.270643][ T5487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.291072][ T5487] RSP: 002b:00007f20e4883028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.299707][ T5487] RAX: ffffffffffffffda RBX: 00007f20e3c26090 RCX: 00007f20e399de99 [ 162.308053][ T5487] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 162.316339][ T5487] RBP: 00007f20e3a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 162.324430][ T5487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.332711][ T5487] R13: 00007f20e3c26128 R14: 00007f20e3c26090 R15: 00007fffb4e096c8 [ 162.342319][ T5487] [ 162.413648][ T5508] validate_nla: 5 callbacks suppressed [ 162.413684][ T5508] netlink: 'syz.2.318': attribute type 27 has an invalid length. [ 162.461895][ T5508] netlink: 164 bytes leftover after parsing attributes in process `syz.2.318'. [ 162.894419][ T5517] netlink: 'syz.3.320': attribute type 29 has an invalid length. [ 162.909095][ T5513] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 162.928340][ T5513] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.320'. [ 162.983119][ T5517] netlink: 'syz.3.320': attribute type 29 has an invalid length. [ 163.085903][ T5513] netlink: 60 bytes leftover after parsing attributes in process `syz.3.320'. [ 163.593399][ T5528] netlink: 'syz.0.325': attribute type 27 has an invalid length. [ 163.674418][ T5528] netlink: 164 bytes leftover after parsing attributes in process `syz.0.325'. [ 163.834629][ T5529] netlink: 'syz.4.326': attribute type 29 has an invalid length. [ 164.038121][ T5529] netlink: 'syz.4.326': attribute type 29 has an invalid length. [ 164.198939][ T5538] netlink: 'syz.1.328': attribute type 29 has an invalid length. [ 164.370243][ T5538] netlink: 'syz.1.328': attribute type 29 has an invalid length. [ 164.413707][ T5542] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 165.403851][ T5563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.335'. [ 165.582870][ T5565] netlink: 40 bytes leftover after parsing attributes in process `syz.1.336'. [ 165.839100][ T5565] device team0 entered promiscuous mode [ 165.851242][ T5565] device team_slave_0 entered promiscuous mode [ 165.870211][ T5565] device team_slave_1 entered promiscuous mode [ 165.950543][ T5565] bridge0: port 2(team0) entered blocking state [ 166.042824][ T5565] bridge0: port 2(team0) entered disabled state [ 166.142945][ T5565] bridge0: port 2(team0) entered blocking state [ 166.149337][ T5565] bridge0: port 2(team0) entered forwarding state [ 166.264230][ T5576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.337'. [ 167.168679][ T5588] netlink: 164 bytes leftover after parsing attributes in process `syz.4.342'. [ 167.529953][ T5597] validate_nla: 8 callbacks suppressed [ 167.529970][ T5597] netlink: 'syz.2.345': attribute type 10 has an invalid length. [ 167.744170][ T5599] netlink: 'syz.3.346': attribute type 29 has an invalid length. [ 167.769070][ T5599] netlink: 'syz.3.346': attribute type 29 has an invalid length. [ 168.343499][ T5610] netlink: 'syz.3.349': attribute type 10 has an invalid length. [ 169.166614][ T5616] netlink: 'syz.1.350': attribute type 10 has an invalid length. [ 169.281808][ T5616] netlink: 40 bytes leftover after parsing attributes in process `syz.1.350'. [ 169.593232][ T5627] netlink: 'syz.2.352': attribute type 10 has an invalid length. [ 169.664730][ T5627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.352'. [ 170.309093][ T5631] netlink: 'syz.2.354': attribute type 10 has an invalid length. [ 171.311466][ T5649] netlink: 'syz.1.357': attribute type 10 has an invalid length. [ 171.614422][ T5649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.357'. [ 172.436025][ T5665] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 172.668670][ T5672] netlink: 'syz.2.364': attribute type 29 has an invalid length. [ 172.736239][ T5672] netlink: 'syz.2.364': attribute type 29 has an invalid length. [ 172.946355][ T5676] netlink: 'syz.4.365': attribute type 10 has an invalid length. [ 172.990030][ T5676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.365'. [ 173.366370][ T5681] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 173.671501][ T5687] netlink: 'syz.2.369': attribute type 10 has an invalid length. [ 173.862488][ T5691] netlink: 'syz.1.370': attribute type 10 has an invalid length. [ 175.113210][ T5710] netlink: 'syz.4.374': attribute type 10 has an invalid length. [ 175.177904][ T5714] netlink: 'syz.0.383': attribute type 29 has an invalid length. [ 175.250890][ T5708] netlink: 'syz.3.375': attribute type 29 has an invalid length. [ 175.328013][ T5716] netlink: 'syz.3.375': attribute type 1 has an invalid length. [ 175.389930][ T5710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.374'. [ 175.428681][ T5716] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.375'. [ 175.645373][ T5716] netlink: 60 bytes leftover after parsing attributes in process `syz.3.375'. [ 176.710622][ T5740] netlink: 40 bytes leftover after parsing attributes in process `syz.1.379'. [ 178.879100][ T5773] validate_nla: 5 callbacks suppressed [ 178.879117][ T5773] netlink: 'syz.0.390': attribute type 29 has an invalid length. [ 178.880233][ T5767] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 178.924033][ T5773] netlink: 'syz.0.390': attribute type 29 has an invalid length. [ 179.014772][ T5767] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.390'. [ 179.100258][ T5778] netlink: 'syz.2.393': attribute type 10 has an invalid length. [ 179.150279][ T5767] netlink: 60 bytes leftover after parsing attributes in process `syz.0.390'. [ 179.219088][ T5783] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 179.281788][ T5783] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 179.816909][ T5791] netlink: 'syz.2.397': attribute type 29 has an invalid length. [ 179.843213][ T5791] netlink: 'syz.2.397': attribute type 29 has an invalid length. [ 179.966682][ T5795] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 180.425874][ T5804] netlink: 'syz.2.401': attribute type 10 has an invalid length. [ 181.356527][ T5812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.402'. [ 181.376138][ T5812] device team0 entered promiscuous mode [ 181.417771][ T5812] device team_slave_0 entered promiscuous mode [ 181.514436][ T5812] device team_slave_1 entered promiscuous mode [ 181.574043][ T5812] bridge0: port 2(team0) entered blocking state [ 181.582769][ T5812] bridge0: port 2(team0) entered disabled state [ 181.591178][ T5812] bridge0: port 2(team0) entered blocking state [ 181.597642][ T5812] bridge0: port 2(team0) entered forwarding state [ 182.792537][ T5836] netlink: 164 bytes leftover after parsing attributes in process `syz.1.410'. [ 183.655197][ T5846] netlink: 60 bytes leftover after parsing attributes in process `syz.0.423'. [ 184.176325][ T5858] validate_nla: 10 callbacks suppressed [ 184.176364][ T5858] netlink: 'syz.1.416': attribute type 27 has an invalid length. [ 184.250191][ T5860] netlink: 'syz.0.415': attribute type 10 has an invalid length. [ 184.251211][ T5858] netlink: 164 bytes leftover after parsing attributes in process `syz.1.416'. [ 184.279289][ T5860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.415'. [ 184.488974][ T5866] netlink: 'syz.3.418': attribute type 10 has an invalid length. [ 185.236812][ T5877] netlink: 'syz.4.421': attribute type 10 has an invalid length. [ 185.576274][ T5884] netlink: 'syz.3.424': attribute type 27 has an invalid length. [ 185.611917][ T5884] netlink: 164 bytes leftover after parsing attributes in process `syz.3.424'. [ 185.624615][ T5886] netlink: 'syz.2.422': attribute type 29 has an invalid length. [ 185.803538][ T5886] netlink: 'syz.2.422': attribute type 29 has an invalid length. [ 185.856304][ T5888] netlink: 60 bytes leftover after parsing attributes in process `syz.2.422'. [ 186.477426][ T5895] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 186.501476][ T5895] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.427'. [ 186.527745][ T5901] netlink: 'syz.3.427': attribute type 29 has an invalid length. [ 186.645894][ T5900] netlink: 'syz.2.429': attribute type 10 has an invalid length. [ 186.712536][ T5895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.427'. [ 186.789229][ T5907] netlink: 164 bytes leftover after parsing attributes in process `syz.4.430'. [ 188.191399][ T5932] netlink: 164 bytes leftover after parsing attributes in process `syz.2.436'. [ 188.381693][ T5931] netlink: 40 bytes leftover after parsing attributes in process `syz.3.435'. [ 188.652583][ T5939] netlink: 164 bytes leftover after parsing attributes in process `syz.1.438'. [ 189.457808][ T5957] validate_nla: 7 callbacks suppressed [ 189.457825][ T5957] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 189.594726][ T5957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.453'. [ 189.731258][ T5963] netlink: 'syz.4.445': attribute type 27 has an invalid length. [ 189.783326][ T5961] netlink: 'syz.2.444': attribute type 27 has an invalid length. [ 189.814992][ T5963] netlink: 164 bytes leftover after parsing attributes in process `syz.4.445'. [ 189.870561][ T5961] netlink: 164 bytes leftover after parsing attributes in process `syz.2.444'. [ 189.959241][ T5967] netlink: 'syz.3.446': attribute type 10 has an invalid length. [ 190.113769][ T5970] netlink: 'syz.1.448': attribute type 10 has an invalid length. [ 190.462150][ T5978] netlink: 'syz.3.450': attribute type 10 has an invalid length. [ 190.907899][ T5983] netlink: 'syz.4.451': attribute type 27 has an invalid length. [ 190.942562][ T5983] netlink: 164 bytes leftover after parsing attributes in process `syz.4.451'. [ 192.081932][ T6004] netlink: 'syz.2.456': attribute type 29 has an invalid length. [ 192.168888][ T6004] netlink: 'syz.2.456': attribute type 29 has an invalid length. [ 192.957011][ T6019] netlink: 'syz.3.460': attribute type 27 has an invalid length. [ 192.974995][ T6019] netlink: 164 bytes leftover after parsing attributes in process `syz.3.460'. [ 194.365810][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372656][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.425791][ T6046] netlink: 164 bytes leftover after parsing attributes in process `syz.2.470'. [ 194.559476][ T6047] validate_nla: 3 callbacks suppressed [ 194.559496][ T6047] netlink: 'syz.4.469': attribute type 10 has an invalid length. [ 195.573178][ T6064] netlink: 'syz.1.476': attribute type 10 has an invalid length. [ 195.895720][ T6071] netlink: 'syz.3.478': attribute type 10 has an invalid length. [ 195.919593][ T6075] netlink: 'syz.2.477': attribute type 27 has an invalid length. [ 195.970298][ T6075] netlink: 164 bytes leftover after parsing attributes in process `syz.2.477'. [ 196.983387][ T6095] netlink: 'syz.0.485': attribute type 27 has an invalid length. [ 197.072074][ T6095] netlink: 164 bytes leftover after parsing attributes in process `syz.0.485'. [ 197.259812][ T6101] netlink: 'syz.1.486': attribute type 27 has an invalid length. [ 197.284291][ T6101] netlink: 164 bytes leftover after parsing attributes in process `syz.1.486'. [ 197.507505][ T6104] netlink: 'syz.0.498': attribute type 27 has an invalid length. [ 197.566861][ T6104] netlink: 164 bytes leftover after parsing attributes in process `syz.0.498'. [ 197.774628][ T6115] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 197.949826][ T6116] netlink: 'syz.2.487': attribute type 10 has an invalid length. [ 198.022242][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.2.487'. [ 198.371534][ T6129] netlink: 'syz.1.493': attribute type 27 has an invalid length. [ 198.463695][ T6129] netlink: 164 bytes leftover after parsing attributes in process `syz.1.493'. [ 198.950065][ T6139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.495'. [ 199.284276][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.496'. [ 200.137335][ T6155] validate_nla: 2 callbacks suppressed [ 200.137374][ T6155] netlink: 'syz.3.500': attribute type 27 has an invalid length. [ 200.245009][ T6155] netlink: 164 bytes leftover after parsing attributes in process `syz.3.500'. [ 201.056452][ T6165] netlink: 'syz.3.513': attribute type 27 has an invalid length. [ 201.111958][ T6165] netlink: 164 bytes leftover after parsing attributes in process `syz.3.513'. [ 201.169826][ T6167] netlink: 'syz.4.503': attribute type 1 has an invalid length. [ 201.198845][ T6167] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.503'. [ 201.220431][ T6174] netlink: 'syz.4.503': attribute type 29 has an invalid length. [ 201.228229][ T6173] netlink: 'syz.1.504': attribute type 10 has an invalid length. [ 201.289011][ T6176] netlink: 60 bytes leftover after parsing attributes in process `syz.4.503'. [ 201.384984][ T6174] netlink: 'syz.4.503': attribute type 29 has an invalid length. [ 201.572222][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 201.578339][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 201.591747][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 201.591886][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 201.598505][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 201.763488][ T6189] netlink: 'syz.0.508': attribute type 27 has an invalid length. [ 201.821972][ T6189] netlink: 164 bytes leftover after parsing attributes in process `syz.0.508'. [ 201.891179][ T6193] netlink: 'syz.1.509': attribute type 10 has an invalid length. [ 202.082132][ T6193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.509'. [ 202.229634][ T6198] netlink: 'syz.2.511': attribute type 27 has an invalid length. [ 202.317075][ T6198] netlink: 164 bytes leftover after parsing attributes in process `syz.2.511'. [ 202.952433][ T6213] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 202.982265][ T6213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.514'. [ 203.115012][ T6216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.516'. [ 203.219985][ T6222] netlink: 164 bytes leftover after parsing attributes in process `syz.4.519'. [ 204.081069][ T6233] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.522'. [ 204.333050][ T6233] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 204.341259][ T6233] CPU: 1 PID: 6233 Comm: syz.4.522 Not tainted syzkaller #0 [ 204.348704][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 204.358902][ T6233] Call Trace: [ 204.362307][ T6233] [ 204.365399][ T6233] dump_stack_lvl+0x188/0x24e [ 204.370324][ T6233] ? show_regs_print_info+0x12/0x12 [ 204.375578][ T6233] ? load_image+0x410/0x410 [ 204.380149][ T6233] ? kasan_save_alloc_info+0x7/0x20 [ 204.385413][ T6233] sysfs_warn_dup+0x8a/0xa0 [ 204.389994][ T6233] sysfs_do_create_link_sd+0xc0/0x110 [ 204.395619][ T6233] device_add+0x83b/0x1050 [ 204.400117][ T6233] wiphy_register+0x1d8b/0x2aa0 [ 204.405404][ T6233] ? cfg80211_event_work+0x40/0x40 [ 204.410580][ T6233] ? minstrel_ht_alloc+0x894/0xa20 [ 204.415754][ T6233] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 204.422137][ T6233] ieee80211_register_hw+0x2d48/0x39f0 [ 204.427749][ T6233] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 204.434077][ T6233] ? ieee80211_register_hw+0xf61/0x39f0 [ 204.439853][ T6233] ? ieee80211_register_hw+0xf61/0x39f0 [ 204.445552][ T6233] ? ieee80211_tasklet_handler+0x20/0x20 [ 204.451307][ T6233] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 204.457240][ T6233] ? __debug_object_init+0xed/0x440 [ 204.462741][ T6233] ? memset+0x1e/0x40 [ 204.466769][ T6233] ? __hrtimer_init+0x189/0x270 [ 204.471676][ T6233] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 204.477880][ T6233] ? memcpy+0x3c/0x60 [ 204.481895][ T6233] hwsim_new_radio_nl+0xab7/0xc90 [ 204.487083][ T6233] genl_family_rcv_msg_doit+0x22f/0x350 [ 204.492743][ T6233] ? end_current_label_crit_section+0x170/0x170 [ 204.499091][ T6233] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 204.505014][ T6233] ? bpf_lsm_capable+0x5/0x10 [ 204.509794][ T6233] ? security_capable+0x85/0xb0 [ 204.515026][ T6233] genl_rcv_msg+0x601/0x790 [ 204.519548][ T6233] ? rcu_is_watching+0x11/0xa0 [ 204.524340][ T6233] ? genl_bind+0x360/0x360 [ 204.529160][ T6233] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 204.535984][ T6233] ? netlink_rcv_skb+0x1ce/0x440 [ 204.541050][ T6233] netlink_rcv_skb+0x1ef/0x440 [ 204.545841][ T6233] ? genl_bind+0x360/0x360 [ 204.550368][ T6233] ? netlink_ack+0x1160/0x1160 [ 204.555160][ T6233] ? down_read+0x1a8/0x2d0 [ 204.559594][ T6233] genl_rcv+0x24/0x40 [ 204.563593][ T6233] netlink_unicast+0x7ad/0x920 [ 204.568386][ T6233] netlink_sendmsg+0x8ad/0xbd0 [ 204.573527][ T6233] ? apparmor_socket_sendmsg+0x8a/0x330 [ 204.579096][ T6233] ? netlink_getsockopt+0x550/0x550 [ 204.584410][ T6233] ? __sanitizer_cov_trace_pc+0x53/0x60 [ 204.590063][ T6233] ? apparmor_socket_sendmsg+0x8a/0x330 [ 204.595635][ T6233] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 204.601023][ T6233] ? security_socket_sendmsg+0x7c/0xa0 [ 204.606596][ T6233] ? netlink_getsockopt+0x550/0x550 [ 204.611813][ T6233] ____sys_sendmsg+0x5ed/0x9a0 [ 204.616600][ T6233] ? __sys_sendmsg_sock+0x30/0x30 [ 204.621666][ T6233] ? __import_iovec+0x306/0x510 [ 204.626630][ T6233] ? import_iovec+0x6f/0xa0 [ 204.631238][ T6233] ___sys_sendmsg+0x2a2/0x360 [ 204.635941][ T6233] ? __sys_sendmsg+0x2a0/0x2a0 [ 204.641266][ T6233] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 204.647112][ T6233] __se_sys_sendmsg+0x1c3/0x2b0 [ 204.652020][ T6233] ? __x64_sys_sendmsg+0x80/0x80 [ 204.657281][ T6233] ? syscall_enter_from_user_mode+0x2a/0x80 [ 204.664103][ T6233] do_syscall_64+0x4c/0xa0 [ 204.668737][ T6233] ? clear_bhb_loop+0x60/0xb0 [ 204.673464][ T6233] ? clear_bhb_loop+0x60/0xb0 [ 204.678505][ T6233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.684800][ T6233] RIP: 0033:0x7fd30bf9de99 [ 204.689691][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.709582][ T6233] RSP: 002b:00007fd30ce90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.718024][ T6233] RAX: ffffffffffffffda RBX: 00007fd30c226090 RCX: 00007fd30bf9de99 [ 204.726035][ T6233] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 204.734124][ T6233] RBP: 00007fd30c033eaf R08: 0000000000000000 R09: 0000000000000000 [ 204.742304][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.750381][ T6233] R13: 00007fd30c226128 R14: 00007fd30c226090 R15: 00007ffcef61e2b8 [ 204.758557][ T6233] [ 206.101114][ T6270] validate_nla: 4 callbacks suppressed [ 206.101130][ T6270] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 206.128503][ T6272] netlink: 'syz.4.528': attribute type 29 has an invalid length. [ 206.173756][ T6270] __nla_validate_parse: 3 callbacks suppressed [ 206.173773][ T6270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.529'. [ 206.229199][ T6262] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 206.255117][ T6262] CPU: 1 PID: 6262 Comm: syz.2.539 Not tainted syzkaller #0 [ 206.262841][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 206.273122][ T6262] Call Trace: [ 206.276570][ T6262] [ 206.279538][ T6262] dump_stack_lvl+0x188/0x24e [ 206.284277][ T6262] ? show_regs_print_info+0x12/0x12 [ 206.289574][ T6262] ? load_image+0x410/0x410 [ 206.294180][ T6262] sysfs_warn_dup+0x8a/0xa0 [ 206.298744][ T6262] sysfs_do_create_link_sd+0xc0/0x110 [ 206.304348][ T6262] device_add+0x83b/0x1050 [ 206.308955][ T6262] wiphy_register+0x1d8b/0x2aa0 [ 206.313993][ T6262] ? cfg80211_event_work+0x40/0x40 [ 206.319128][ T6262] ? minstrel_ht_alloc+0x894/0xa20 [ 206.324279][ T6262] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 206.330368][ T6262] ieee80211_register_hw+0x2d48/0x39f0 [ 206.335945][ T6262] ? ieee80211_register_hw+0xf61/0x39f0 [ 206.341593][ T6262] ? ieee80211_register_hw+0xf61/0x39f0 [ 206.347196][ T6262] ? ieee80211_tasklet_handler+0x20/0x20 [ 206.352847][ T6262] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 206.358850][ T6262] ? __debug_object_init+0xed/0x440 [ 206.364166][ T6262] ? memset+0x1e/0x40 [ 206.368248][ T6262] ? __hrtimer_init+0x189/0x270 [ 206.373115][ T6262] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 206.378865][ T6262] ? memcpy+0x3c/0x60 [ 206.382870][ T6262] hwsim_new_radio_nl+0xab7/0xc90 [ 206.388012][ T6262] genl_family_rcv_msg_doit+0x22f/0x350 [ 206.393575][ T6262] ? rcu_is_watching+0x11/0xa0 [ 206.398360][ T6262] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 206.404385][ T6262] ? lockdep_hardirqs_on+0x94/0x140 [ 206.409781][ T6262] ? genl_rcv_msg+0x550/0x790 [ 206.414571][ T6262] genl_rcv_msg+0x601/0x790 [ 206.419091][ T6262] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 206.425296][ T6262] ? genl_bind+0x360/0x360 [ 206.429824][ T6262] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 206.436181][ T6262] ? lock_acquire+0x225/0x4a0 [ 206.440891][ T6262] netlink_rcv_skb+0x1ef/0x440 [ 206.445671][ T6262] ? genl_bind+0x360/0x360 [ 206.450215][ T6262] ? netlink_ack+0x1160/0x1160 [ 206.454993][ T6262] ? netlink_deliver_tap+0x108/0x1b0 [ 206.460299][ T6262] ? down_read+0x1a8/0x2d0 [ 206.464733][ T6262] genl_rcv+0x24/0x40 [ 206.468729][ T6262] netlink_unicast+0x7ad/0x920 [ 206.473517][ T6262] netlink_sendmsg+0x8ad/0xbd0 [ 206.478654][ T6262] ? netlink_getsockopt+0x550/0x550 [ 206.484234][ T6262] ? apparmor_socket_sendmsg+0x8a/0x330 [ 206.490081][ T6262] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 206.495377][ T6262] ? security_socket_sendmsg+0x7c/0xa0 [ 206.500859][ T6262] ? netlink_getsockopt+0x550/0x550 [ 206.506524][ T6262] ____sys_sendmsg+0x5ed/0x9a0 [ 206.511317][ T6262] ? __sys_sendmsg_sock+0x30/0x30 [ 206.516357][ T6262] ? __import_iovec+0x306/0x510 [ 206.521232][ T6262] ? import_iovec+0x6f/0xa0 [ 206.525845][ T6262] ___sys_sendmsg+0x2a2/0x360 [ 206.530633][ T6262] ? __sys_sendmsg+0x2a0/0x2a0 [ 206.535462][ T6262] __se_sys_sendmsg+0x1c3/0x2b0 [ 206.540329][ T6262] ? __x64_sys_sendmsg+0x80/0x80 [ 206.545301][ T6262] ? syscall_enter_from_user_mode+0x2a/0x80 [ 206.551299][ T6262] do_syscall_64+0x4c/0xa0 [ 206.555817][ T6262] ? clear_bhb_loop+0x60/0xb0 [ 206.560509][ T6262] ? clear_bhb_loop+0x60/0xb0 [ 206.565296][ T6262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.571306][ T6262] RIP: 0033:0x7f560979de99 [ 206.575762][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.595655][ T6262] RSP: 002b:00007f56079f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.604214][ T6262] RAX: ffffffffffffffda RBX: 00007f5609a26090 RCX: 00007f560979de99 [ 206.612460][ T6262] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 206.620536][ T6262] RBP: 00007f5609833eaf R08: 0000000000000000 R09: 0000000000000000 [ 206.628521][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.636869][ T6262] R13: 00007f5609a26128 R14: 00007f5609a26090 R15: 00007ffd8b8f1728 [ 206.644954][ T6262] [ 207.290973][ T6272] netlink: 'syz.4.528': attribute type 29 has an invalid length. [ 207.332703][ T6275] netlink: 60 bytes leftover after parsing attributes in process `syz.4.528'. [ 207.385740][ T6267] netlink: 'syz.4.528': attribute type 1 has an invalid length. [ 207.401705][ T6267] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.528'. [ 207.623740][ T6291] netlink: 'syz.2.531': attribute type 10 has an invalid length. [ 207.861561][ T6297] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 207.908259][ T6300] netlink: 'syz.0.533': attribute type 29 has an invalid length. [ 207.934487][ T6302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.533'. [ 207.982571][ T6297] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.533'. [ 208.159617][ T6300] netlink: 'syz.0.533': attribute type 29 has an invalid length. [ 209.247242][ T6327] netlink: 'syz.4.544': attribute type 27 has an invalid length. [ 209.343790][ T6327] netlink: 164 bytes leftover after parsing attributes in process `syz.4.544'. [ 209.454097][ T6329] netlink: 'syz.0.545': attribute type 10 has an invalid length. [ 210.360926][ T6346] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.546'. [ 210.399035][ T6346] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 210.434564][ T6346] CPU: 1 PID: 6346 Comm: syz.3.546 Not tainted syzkaller #0 [ 210.442208][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 210.452578][ T6346] Call Trace: [ 210.455915][ T6346] [ 210.458892][ T6346] dump_stack_lvl+0x188/0x24e [ 210.463807][ T6346] ? show_regs_print_info+0x12/0x12 [ 210.469507][ T6346] ? load_image+0x410/0x410 [ 210.474095][ T6346] sysfs_warn_dup+0x8a/0xa0 [ 210.479196][ T6346] sysfs_do_create_link_sd+0xc0/0x110 [ 210.484717][ T6346] device_add+0x83b/0x1050 [ 210.489198][ T6346] wiphy_register+0x1d8b/0x2aa0 [ 210.494317][ T6346] ? cfg80211_event_work+0x40/0x40 [ 210.499555][ T6346] ? minstrel_ht_alloc+0x894/0xa20 [ 210.505052][ T6346] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 210.511242][ T6346] ieee80211_register_hw+0x2d48/0x39f0 [ 210.516824][ T6346] ? ieee80211_register_hw+0xf61/0x39f0 [ 210.523807][ T6346] ? ieee80211_register_hw+0xf61/0x39f0 [ 210.529749][ T6346] ? ieee80211_tasklet_handler+0x20/0x20 [ 210.535412][ T6346] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 210.541587][ T6346] ? __debug_object_init+0xed/0x440 [ 210.546820][ T6346] ? memset+0x1e/0x40 [ 210.551073][ T6346] ? __hrtimer_init+0x189/0x270 [ 210.555943][ T6346] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 210.562210][ T6346] ? memcpy+0x3c/0x60 [ 210.566208][ T6346] hwsim_new_radio_nl+0xab7/0xc90 [ 210.571346][ T6346] genl_family_rcv_msg_doit+0x22f/0x350 [ 210.576915][ T6346] ? end_current_label_crit_section+0x170/0x170 [ 210.583265][ T6346] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 210.589277][ T6346] ? bpf_lsm_capable+0x5/0x10 [ 210.593968][ T6346] ? security_capable+0x85/0xb0 [ 210.598841][ T6346] genl_rcv_msg+0x601/0x790 [ 210.603430][ T6346] ? genl_bind+0x360/0x360 [ 210.607895][ T6346] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 210.614358][ T6346] netlink_rcv_skb+0x1ef/0x440 [ 210.619635][ T6346] ? genl_bind+0x360/0x360 [ 210.624260][ T6346] ? netlink_ack+0x1160/0x1160 [ 210.629107][ T6346] ? down_read+0x1a8/0x2d0 [ 210.633801][ T6346] genl_rcv+0x24/0x40 [ 210.637894][ T6346] netlink_unicast+0x7ad/0x920 [ 210.642767][ T6346] netlink_sendmsg+0x8ad/0xbd0 [ 210.647829][ T6346] ? netlink_getsockopt+0x550/0x550 [ 210.653130][ T6346] ? apparmor_socket_sendmsg+0x8a/0x330 [ 210.658778][ T6346] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 210.664161][ T6346] ? security_socket_sendmsg+0x7c/0xa0 [ 210.670031][ T6346] ? netlink_getsockopt+0x550/0x550 [ 210.675511][ T6346] ____sys_sendmsg+0x5ed/0x9a0 [ 210.680480][ T6346] ? __sys_sendmsg_sock+0x30/0x30 [ 210.685605][ T6346] ? __import_iovec+0x306/0x510 [ 210.690513][ T6346] ? import_iovec+0x6f/0xa0 [ 210.695125][ T6346] ___sys_sendmsg+0x2a2/0x360 [ 210.699818][ T6346] ? __sys_sendmsg+0x2a0/0x2a0 [ 210.704636][ T6346] __se_sys_sendmsg+0x1c3/0x2b0 [ 210.709606][ T6346] ? __x64_sys_sendmsg+0x80/0x80 [ 210.714844][ T6346] ? lockdep_hardirqs_on+0x94/0x140 [ 210.720166][ T6346] do_syscall_64+0x4c/0xa0 [ 210.724596][ T6346] ? clear_bhb_loop+0x60/0xb0 [ 210.729287][ T6346] ? clear_bhb_loop+0x60/0xb0 [ 210.734359][ T6346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.740623][ T6346] RIP: 0033:0x7f373d59de99 [ 210.745486][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.765112][ T6346] RSP: 002b:00007f373e492028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.773716][ T6346] RAX: ffffffffffffffda RBX: 00007f373d826180 RCX: 00007f373d59de99 [ 210.781973][ T6346] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 210.789978][ T6346] RBP: 00007f373d633eaf R08: 0000000000000000 R09: 0000000000000000 [ 210.798048][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.806173][ T6346] R13: 00007f373d826218 R14: 00007f373d826180 R15: 00007fff8d689fb8 [ 210.816611][ T6346] [ 211.212813][ T6353] validate_nla: 1 callbacks suppressed [ 211.212833][ T6353] netlink: 'syz.2.552': attribute type 29 has an invalid length. [ 211.221963][ T6351] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 211.307229][ T6361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.552'. [ 211.311748][ T6351] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.552'. [ 211.432192][ T6353] netlink: 'syz.2.552': attribute type 29 has an invalid length. [ 213.122002][ T6388] netlink: 'syz.2.560': attribute type 29 has an invalid length. [ 213.163308][ T6385] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 213.262162][ T6388] netlink: 'syz.2.560': attribute type 29 has an invalid length. [ 213.325959][ T6385] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.560'. [ 213.507596][ T6389] netlink: 60 bytes leftover after parsing attributes in process `syz.2.560'. [ 213.763602][ T6396] netlink: 'syz.1.562': attribute type 29 has an invalid length. [ 213.902001][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.562'. [ 214.032118][ T6396] netlink: 'syz.1.562': attribute type 29 has an invalid length. [ 214.154096][ T6403] netlink: 'syz.2.564': attribute type 27 has an invalid length. [ 214.173739][ T6403] netlink: 164 bytes leftover after parsing attributes in process `syz.2.564'. [ 214.991305][ T6425] netlink: 'syz.0.572': attribute type 27 has an invalid length. [ 215.211801][ T6425] netlink: 164 bytes leftover after parsing attributes in process `syz.0.572'. [ 216.293616][ T6449] netlink: 'syz.0.579': attribute type 29 has an invalid length. [ 216.389716][ T6449] netlink: 'syz.0.579': attribute type 29 has an invalid length. [ 216.572284][ T6445] netlink: 60 bytes leftover after parsing attributes in process `syz.0.579'. [ 216.774315][ T6454] netlink: 'syz.1.581': attribute type 27 has an invalid length. [ 216.821904][ T6454] netlink: 164 bytes leftover after parsing attributes in process `syz.1.581'. [ 217.180448][ T6466] netlink: 'syz.0.594': attribute type 29 has an invalid length. [ 217.190335][ T6462] netlink: 'syz.0.594': attribute type 1 has an invalid length. [ 217.233506][ T6462] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.594'. [ 217.287277][ T6467] netlink: 'syz.4.582': attribute type 27 has an invalid length. [ 217.314389][ T6467] netlink: 164 bytes leftover after parsing attributes in process `syz.4.582'. [ 217.354392][ T6466] netlink: 'syz.0.594': attribute type 29 has an invalid length. [ 217.483966][ T6462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.594'. [ 219.473684][ T6513] netlink: 'syz.4.595': attribute type 29 has an invalid length. [ 219.516393][ T6510] netlink: 'syz.4.595': attribute type 1 has an invalid length. [ 219.553813][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.595'. [ 219.693651][ T6513] netlink: 'syz.4.595': attribute type 29 has an invalid length. [ 219.761434][ T6510] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.595'. [ 219.841710][ T6519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.597'. [ 220.615275][ T6531] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.612'. [ 220.761039][ T6531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.612'. [ 222.871988][ T6576] validate_nla: 6 callbacks suppressed [ 222.872004][ T6576] netlink: 'syz.2.616': attribute type 10 has an invalid length. [ 223.021821][ T6576] __nla_validate_parse: 1 callbacks suppressed [ 223.021839][ T6576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.616'. [ 223.052343][ T6582] netlink: 'syz.3.618': attribute type 29 has an invalid length. [ 223.128943][ T6582] netlink: 'syz.3.618': attribute type 29 has an invalid length. [ 223.212088][ T6577] netlink: 60 bytes leftover after parsing attributes in process `syz.3.618'. [ 223.513849][ T6589] netlink: 'syz.0.620': attribute type 27 has an invalid length. [ 223.560076][ T6589] netlink: 164 bytes leftover after parsing attributes in process `syz.0.620'. [ 223.854372][ T6597] netlink: 'syz.3.624': attribute type 10 has an invalid length. [ 224.960716][ T6609] netlink: 'syz.1.628': attribute type 27 has an invalid length. [ 225.023993][ T6609] netlink: 164 bytes leftover after parsing attributes in process `syz.1.628'. [ 225.913174][ T6621] netlink: 4091 bytes leftover after parsing attributes in process `syz.1.632'. [ 226.368897][ T6628] netlink: 'syz.0.634': attribute type 27 has an invalid length. [ 226.526117][ T6628] netlink: 164 bytes leftover after parsing attributes in process `syz.0.634'. [ 227.759785][ T6645] netlink: 'syz.2.638': attribute type 10 has an invalid length. [ 227.878375][ T6645] netlink: 'syz.2.638': attribute type 11 has an invalid length. [ 227.958008][ T6645] netlink: 95 bytes leftover after parsing attributes in process `syz.2.638'. [ 229.135264][ T6662] netlink: 'syz.3.644': attribute type 27 has an invalid length. [ 229.172001][ T6662] netlink: 164 bytes leftover after parsing attributes in process `syz.3.644'. [ 229.361399][ T6665] netlink: 2759 bytes leftover after parsing attributes in process `syz.4.657'. [ 229.365387][ T6669] netlink: 'syz.1.645': attribute type 10 has an invalid length. [ 229.557451][ T6673] netlink: 'syz.2.646': attribute type 10 has an invalid length. [ 229.651915][ T6673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.646'. [ 229.792612][ T6679] netlink: 'syz.4.651': attribute type 10 has an invalid length. [ 231.346708][ T6700] netlink: 'syz.2.656': attribute type 10 has an invalid length. [ 234.245735][ T6731] netlink: 'syz.2.666': attribute type 10 has an invalid length. [ 237.066766][ T6758] netlink: 'syz.1.671': attribute type 10 has an invalid length. [ 237.985732][ T6779] netlink: 2759 bytes leftover after parsing attributes in process `syz.3.674'. [ 238.815284][ T6798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.679'. [ 239.304506][ T6804] netlink: 'syz.4.683': attribute type 10 has an invalid length. [ 239.641170][ T6810] netlink: 'syz.2.684': attribute type 10 has an invalid length. [ 241.436919][ T6828] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.689'. [ 241.659300][ T6833] netlink: 'syz.4.692': attribute type 27 has an invalid length. [ 241.668799][ T6833] netlink: 164 bytes leftover after parsing attributes in process `syz.4.692'. [ 242.612481][ T6844] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.694'. [ 243.498271][ T6859] netlink: 'syz.2.699': attribute type 10 has an invalid length. [ 243.524245][ T6859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.699'. [ 243.700154][ T6858] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.698'. [ 243.900133][ T6858] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 244.399674][ T6866] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 245.313253][ T6884] netlink: 'syz.0.714': attribute type 10 has an invalid length. [ 245.907176][ T6893] netlink: 'syz.2.705': attribute type 27 has an invalid length. [ 246.033575][ T6893] netlink: 164 bytes leftover after parsing attributes in process `syz.2.705'. [ 247.590868][ T6906] netlink: 'syz.2.708': attribute type 10 has an invalid length. [ 248.647865][ T6917] netlink: 'syz.4.711': attribute type 10 has an invalid length. [ 248.744151][ T6917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.711'. [ 248.882388][ T6919] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 249.844661][ T6924] netlink: 2639 bytes leftover after parsing attributes in process `syz.2.713'. [ 249.901875][ T6926] netlink: 'syz.0.716': attribute type 10 has an invalid length. [ 250.442010][ T6932] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 251.149117][ T6936] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 251.179922][ T6936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.718'. [ 252.446049][ T6950] netlink: 'syz.3.721': attribute type 27 has an invalid length. [ 252.574883][ T6950] netlink: 164 bytes leftover after parsing attributes in process `syz.3.721'. [ 252.750038][ T6954] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 253.660846][ T6970] netlink: 'syz.1.726': attribute type 10 has an invalid length. [ 254.002188][ T6978] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 255.803932][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.811084][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.410110][ T6999] netlink: 'syz.4.733': attribute type 10 has an invalid length. [ 257.168436][ T7003] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 258.243645][ T7008] netlink: 'syz.0.736': attribute type 29 has an invalid length. [ 258.479957][ T7009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.736'. [ 258.756152][ T7008] netlink: 'syz.0.736': attribute type 29 has an invalid length. [ 258.895458][ T7013] netlink: 'syz.2.737': attribute type 10 has an invalid length. [ 258.987352][ T7013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.737'. [ 259.455138][ T7023] netlink: 'syz.3.739': attribute type 10 has an invalid length. [ 259.497505][ T7021] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 259.528835][ T7024] netlink: 'syz.1.751': attribute type 29 has an invalid length. [ 259.552436][ T7021] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.751'. [ 259.618225][ T7025] netlink: 60 bytes leftover after parsing attributes in process `syz.1.751'. [ 259.661981][ T7024] netlink: 'syz.1.751': attribute type 29 has an invalid length. [ 261.709441][ T7059] netlink: 'syz.2.746': attribute type 10 has an invalid length. [ 261.871237][ T7059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.746'. [ 262.287606][ T7071] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 262.509014][ T7074] netlink: 'syz.0.755': attribute type 10 has an invalid length. [ 262.563050][ T7074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.755'. [ 262.702282][ T7080] netlink: 'syz.3.756': attribute type 29 has an invalid length. [ 262.710621][ T7080] netlink: 'syz.3.756': attribute type 29 has an invalid length. [ 263.238441][ T7080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.756'. [ 263.974203][ T7093] netlink: 'syz.2.759': attribute type 10 has an invalid length. [ 263.997096][ T7090] netlink: 'syz.4.758': attribute type 10 has an invalid length. [ 266.202161][ T7123] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 266.294580][ T7128] netlink: 'syz.3.770': attribute type 27 has an invalid length. [ 266.354279][ T7128] netlink: 164 bytes leftover after parsing attributes in process `syz.3.770'. [ 266.819652][ T7138] netlink: 'syz.2.773': attribute type 10 has an invalid length. [ 266.898589][ T7138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.773'. [ 267.912081][ T7151] netlink: 'syz.1.777': attribute type 10 has an invalid length. [ 267.972799][ T7151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.777'. [ 270.211405][ T7190] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 270.582186][ T7197] netlink: 'syz.1.791': attribute type 10 has an invalid length. [ 270.663870][ T7197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.791'. [ 270.859347][ T7201] netlink: 'syz.4.792': attribute type 27 has an invalid length. [ 270.948535][ T7201] netlink: 164 bytes leftover after parsing attributes in process `syz.4.792'. [ 272.272442][ T7213] netlink: 'syz.0.795': attribute type 10 has an invalid length. [ 272.280434][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.795'. [ 272.920606][ T7220] syz.3.797 uses obsolete (PF_INET,SOCK_PACKET) [ 274.368679][ T7250] netlink: 'syz.0.802': attribute type 27 has an invalid length. [ 274.430336][ T7250] netlink: 164 bytes leftover after parsing attributes in process `syz.0.802'. [ 275.040959][ T7256] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 277.238507][ T7277] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 279.277421][ T7298] netlink: 'syz.2.816': attribute type 10 has an invalid length. [ 279.348382][ T7298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.816'. [ 279.375675][ T7300] netlink: 'syz.1.826': attribute type 27 has an invalid length. [ 279.460734][ T7300] netlink: 164 bytes leftover after parsing attributes in process `syz.1.826'. [ 279.648093][ T7304] netlink: 'syz.0.817': attribute type 29 has an invalid length. [ 279.749790][ T7304] netlink: 'syz.0.817': attribute type 29 has an invalid length. [ 279.986140][ T7308] netlink: 'syz.1.818': attribute type 10 has an invalid length. [ 288.340305][ T7356] netlink: 'syz.4.831': attribute type 10 has an invalid length. [ 289.098999][ T7366] netlink: 'syz.0.833': attribute type 10 has an invalid length. [ 289.498737][ T7370] netlink: 'syz.1.832': attribute type 29 has an invalid length. [ 289.664023][ T7370] netlink: 'syz.1.832': attribute type 29 has an invalid length. [ 290.767299][ T7384] netlink: 'syz.3.835': attribute type 10 has an invalid length. [ 294.547217][ T7413] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 294.578432][ T7436] netlink: 'syz.0.849': attribute type 10 has an invalid length. [ 295.769133][ T7457] netlink: 'syz.2.857': attribute type 10 has an invalid length. [ 296.014392][ T7459] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.856'. [ 296.117893][ T7461] netlink: 'syz.3.855': attribute type 10 has an invalid length. [ 296.162796][ T7461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.855'. [ 296.645509][ T7470] delete_channel: no stack [ 297.222078][ T7482] netlink: 'syz.2.863': attribute type 10 has an invalid length. [ 297.288855][ T7476] delete_channel: no stack [ 298.649381][ T7494] delete_channel: no stack [ 298.837019][ T7504] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 299.200667][ T7512] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 299.217854][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.872'. [ 299.232941][ T7502] delete_channel: no stack [ 301.167772][ T7541] delete_channel: no stack [ 302.104119][ T7564] delete_channel: no stack [ 302.104581][ T7570] netlink: 'syz.1.886': attribute type 10 has an invalid length. [ 302.158295][ T7570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.886'. [ 302.268730][ T7573] netlink: 'syz.2.888': attribute type 10 has an invalid length. [ 302.492855][ T7578] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 305.002761][ T7614] delete_channel: no stack [ 305.454906][ T7627] delete_channel: no stack [ 305.671535][ T7635] netlink: 'syz.3.901': attribute type 10 has an invalid length. [ 306.082025][ T7644] netlink: 'syz.2.904': attribute type 10 has an invalid length. [ 306.145027][ T7644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.904'. [ 306.678431][ T7647] delete_channel: no stack [ 308.635749][ T7680] delete_channel: no stack [ 309.229730][ T7697] netlink: 'syz.2.921': attribute type 10 has an invalid length. [ 309.478900][ T7700] netlink: 'syz.4.922': attribute type 29 has an invalid length. [ 309.546241][ T7700] netlink: 'syz.4.922': attribute type 29 has an invalid length. [ 309.791555][ T7707] netlink: 'syz.1.924': attribute type 10 has an invalid length. [ 309.846599][ T7707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.924'. [ 309.855661][ T7704] delete_channel: no stack [ 311.776575][ T7744] netlink: 'syz.1.945': attribute type 10 has an invalid length. [ 311.874121][ T7744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.945'. [ 312.579629][ T7754] delete_channel: no stack [ 312.925272][ T7759] netlink: 'syz.2.937': attribute type 29 has an invalid length. [ 312.960261][ T7759] netlink: 'syz.2.937': attribute type 29 has an invalid length. [ 313.245054][ T7770] netlink: 'syz.3.939': attribute type 29 has an invalid length. [ 313.390813][ T7770] netlink: 'syz.3.939': attribute type 29 has an invalid length. [ 313.682404][ T7777] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 316.118736][ T7808] delete_channel: no stack [ 316.257650][ T7817] netlink: 'syz.3.954': attribute type 10 has an invalid length. [ 316.342361][ T7817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.954'. [ 316.617954][ T7820] netlink: 'syz.2.956': attribute type 29 has an invalid length. [ 316.756369][ T7820] netlink: 'syz.2.956': attribute type 29 has an invalid length. [ 317.471175][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.477916][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.759647][ T7859] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.964'. [ 318.796772][ T7859] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 318.825512][ T7859] CPU: 1 PID: 7859 Comm: syz.1.964 Not tainted syzkaller #0 [ 318.832982][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 318.843527][ T7859] Call Trace: [ 318.846849][ T7859] [ 318.850010][ T7859] dump_stack_lvl+0x188/0x24e [ 318.855377][ T7859] ? show_regs_print_info+0x12/0x12 [ 318.861709][ T7859] ? load_image+0x410/0x410 [ 318.866290][ T7859] sysfs_warn_dup+0x8a/0xa0 [ 318.871038][ T7859] sysfs_do_create_link_sd+0xc0/0x110 [ 318.876649][ T7859] device_add+0x83b/0x1050 [ 318.881257][ T7859] wiphy_register+0x1d8b/0x2aa0 [ 318.886485][ T7859] ? cfg80211_event_work+0x40/0x40 [ 318.893223][ T7859] ? minstrel_ht_alloc+0x894/0xa20 [ 318.898659][ T7859] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 318.905177][ T7859] ieee80211_register_hw+0x2d48/0x39f0 [ 318.911055][ T7859] ? ieee80211_register_hw+0xf61/0x39f0 [ 318.917972][ T7859] ? ieee80211_register_hw+0xf61/0x39f0 [ 318.924057][ T7859] ? ieee80211_tasklet_handler+0x20/0x20 [ 318.930120][ T7859] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 318.936422][ T7859] ? __debug_object_init+0xed/0x440 [ 318.942126][ T7859] ? memset+0x1e/0x40 [ 318.946162][ T7859] ? __hrtimer_init+0x189/0x270 [ 318.952037][ T7859] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 318.958019][ T7859] ? memcpy+0x3c/0x60 [ 318.962236][ T7859] hwsim_new_radio_nl+0xab7/0xc90 [ 318.968705][ T7859] genl_family_rcv_msg_doit+0x22f/0x350 [ 318.974581][ T7859] ? end_current_label_crit_section+0x170/0x170 [ 318.980887][ T7859] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 318.987630][ T7859] ? bpf_lsm_capable+0x5/0x10 [ 318.992400][ T7859] ? security_capable+0x85/0xb0 [ 318.997587][ T7859] genl_rcv_msg+0x601/0x790 [ 319.002835][ T7859] ? genl_bind+0x360/0x360 [ 319.007592][ T7859] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 319.014461][ T7859] netlink_rcv_skb+0x1ef/0x440 [ 319.019485][ T7859] ? genl_bind+0x360/0x360 [ 319.023973][ T7859] ? netlink_ack+0x1160/0x1160 [ 319.028984][ T7859] ? down_read+0x1a8/0x2d0 [ 319.033547][ T7859] genl_rcv+0x24/0x40 [ 319.037580][ T7859] netlink_unicast+0x7ad/0x920 [ 319.042421][ T7859] netlink_sendmsg+0x8ad/0xbd0 [ 319.047417][ T7859] ? netlink_getsockopt+0x550/0x550 [ 319.052757][ T7859] ? apparmor_socket_sendmsg+0x8a/0x330 [ 319.058522][ T7859] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 319.064022][ T7859] ? security_socket_sendmsg+0x7c/0xa0 [ 319.069879][ T7859] ? netlink_getsockopt+0x550/0x550 [ 319.075313][ T7859] ____sys_sendmsg+0x5ed/0x9a0 [ 319.080210][ T7859] ? __sys_sendmsg_sock+0x30/0x30 [ 319.085472][ T7859] ? __import_iovec+0x306/0x510 [ 319.090594][ T7859] ? import_iovec+0x6f/0xa0 [ 319.095445][ T7859] ___sys_sendmsg+0x2a2/0x360 [ 319.100280][ T7859] ? __sys_sendmsg+0x2a0/0x2a0 [ 319.105259][ T7859] __se_sys_sendmsg+0x1c3/0x2b0 [ 319.110273][ T7859] ? __x64_sys_sendmsg+0x80/0x80 [ 319.115390][ T7859] ? lockdep_hardirqs_on+0x94/0x140 [ 319.121272][ T7859] do_syscall_64+0x4c/0xa0 [ 319.125849][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 319.130930][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 319.136110][ T7859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.142676][ T7859] RIP: 0033:0x7f20e399de99 [ 319.147441][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.168799][ T7859] RSP: 002b:00007f20e4862028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.177277][ T7859] RAX: ffffffffffffffda RBX: 00007f20e3c26180 RCX: 00007f20e399de99 [ 319.185576][ T7859] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 319.193961][ T7859] RBP: 00007f20e3a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 319.202073][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.210521][ T7859] R13: 00007f20e3c26218 R14: 00007f20e3c26180 R15: 00007fffb4e096c8 [ 319.219047][ T7859] [ 319.288549][ T7866] delete_channel: no stack [ 319.693853][ T7872] delete_channel: no stack [ 320.479999][ T7901] netlink: 'syz.2.976': attribute type 10 has an invalid length. [ 320.562184][ T7901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.976'. [ 320.615504][ T7895] netlink: 'syz.4.975': attribute type 29 has an invalid length. [ 320.634824][ T7895] netlink: 'syz.4.975': attribute type 29 has an invalid length. [ 322.527455][ T7924] delete_channel: no stack [ 323.561806][ T7947] netlink: 'syz.1.990': attribute type 10 has an invalid length. [ 325.420191][ T7977] netlink: 'syz.4.997': attribute type 10 has an invalid length. [ 325.429230][ T7977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.997'. [ 330.416627][ T8041] netlink: 'syz.2.1015': attribute type 10 has an invalid length. [ 330.428008][ T8050] netlink: 'syz.0.1017': attribute type 10 has an invalid length. [ 330.471971][ T8050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1017'. [ 333.473133][ T8084] netlink: 'syz.2.1026': attribute type 29 has an invalid length. [ 333.806216][ T8084] netlink: 'syz.2.1026': attribute type 29 has an invalid length. [ 336.265913][ T8095] netlink: 'syz.1.1030': attribute type 10 has an invalid length. [ 336.376228][ T8095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1030'. [ 339.056740][ T8142] delete_channel: no stack [ 339.324206][ T8159] netlink: 'syz.4.1045': attribute type 29 has an invalid length. [ 339.370325][ T8159] netlink: 'syz.4.1045': attribute type 29 has an invalid length. [ 339.756763][ T8165] netlink: 'syz.0.1047': attribute type 10 has an invalid length. [ 339.832285][ T8165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1047'. [ 341.459872][ T8186] delete_channel: no stack [ 341.481842][ T8192] netlink: 'syz.3.1057': attribute type 10 has an invalid length. [ 341.929315][ T8189] delete_channel: no stack [ 341.971667][ T8199] netlink: 'syz.0.1068': attribute type 10 has an invalid length. [ 342.020224][ T8199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1068'. [ 343.485870][ T8215] netlink: 'syz.3.1062': attribute type 29 has an invalid length. [ 343.694183][ T8215] netlink: 'syz.3.1062': attribute type 29 has an invalid length. [ 346.518910][ T8277] netlink: 'syz.3.1081': attribute type 10 has an invalid length. [ 346.621285][ T8277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1081'. [ 349.656109][ T8332] delete_channel: no stack [ 350.184903][ T8351] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 350.204964][ T8351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1102'. [ 354.864999][ T8476] device syzkaller0 entered promiscuous mode [ 359.084370][ T8508] device syzkaller0 entered promiscuous mode [ 361.337437][ T8537] device syzkaller0 entered promiscuous mode [ 361.719788][ T8552] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 366.266588][ T8579] bridge0: port 2(team0) entered disabled state [ 366.274562][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.795636][ T8579] bridge0: port 2(team0) entered disabled state [ 366.860781][ T8579] device bridge_slave_0 left promiscuous mode [ 366.916561][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.412193][ T8593] device syzkaller0 entered promiscuous mode [ 372.693955][ T8625] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.718266][ T8625] device syzkaller0 entered promiscuous mode [ 374.870772][ T8630] device syzkaller0 entered promiscuous mode [ 378.680674][ T8646] bridge0: port 2(team0) entered disabled state [ 378.688708][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.692175][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.703580][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.132244][ T8649] bridge0: port 2(team0) entered disabled state [ 379.140575][ T8649] device bridge_slave_0 left promiscuous mode [ 379.158473][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.309912][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.319784][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.328477][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.352534][ T4279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.362894][ T4279] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.371629][ T8687] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 385.371826][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.396727][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 385.406187][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.437381][ T4286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 385.452175][ T4286] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 385.460538][ T4286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 385.613313][ T8610] bond0: (slave syz_tun): Releasing backup interface [ 385.643826][ T8601] bond0: (slave syz_tun): Releasing backup interface [ 385.896492][ T8698] bridge0: port 2(team0) entered disabled state [ 385.903438][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.927454][ T8685] chnl_net:caif_netlink_parms(): no params data found [ 386.438028][ T8700] bridge0: port 2(team0) entered disabled state [ 386.484917][ T8700] device bridge_slave_0 left promiscuous mode [ 386.507921][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.780037][ T8684] chnl_net:caif_netlink_parms(): no params data found [ 387.120063][ T8685] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.147845][ T8685] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.181807][ T8685] device bridge_slave_0 entered promiscuous mode [ 387.204502][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.213127][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.223041][ T8684] device bridge_slave_0 entered promiscuous mode [ 387.233585][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.251180][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.272665][ T8684] device bridge_slave_1 entered promiscuous mode [ 387.286602][ T8685] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.301771][ T8685] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.321495][ T8685] device bridge_slave_1 entered promiscuous mode [ 387.456805][ T8684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.482033][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 387.500457][ T8685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.513603][ T8685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.558867][ T8684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.572244][ T4286] Bluetooth: hci6: command 0x0409 tx timeout [ 387.595546][ T7434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.695166][ T8685] team0: Port device team_slave_0 added [ 387.727065][ T7434] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.751979][ T8685] team0: Port device team_slave_1 added [ 387.762620][ T8684] team0: Port device team_slave_0 added [ 387.788130][ T8684] team0: Port device team_slave_1 added [ 387.811378][ T7434] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.858625][ T8685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.868363][ T8685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.896725][ T8685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.913074][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.920357][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.960758][ T8684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.017714][ T8685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.052444][ T8685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.128678][ T8685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.141945][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.149650][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.245637][ T8684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.295412][ T7434] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.505296][ T8684] device hsr_slave_0 entered promiscuous mode [ 388.531423][ T8684] device hsr_slave_1 entered promiscuous mode [ 388.567056][ T8684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.579547][ T8684] Cannot create hsr debugfs directory [ 388.594673][ T8685] device hsr_slave_0 entered promiscuous mode [ 388.613938][ T8685] device hsr_slave_1 entered promiscuous mode [ 388.630891][ T8685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.641252][ T8685] Cannot create hsr debugfs directory [ 389.037660][ T7434] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.160428][ T7434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.264656][ T7434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.292836][ T8685] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 389.326722][ T8685] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 389.356652][ T7434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.377127][ T8685] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 389.402790][ T8685] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 389.466377][ T8684] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 389.506332][ T8684] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 389.533805][ T8684] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 389.572925][ T8684] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 389.579288][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 389.641934][ T4286] Bluetooth: hci6: command 0x041b tx timeout [ 389.917470][ T8685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.950606][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 389.964250][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 390.027696][ T8685] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.061439][ T8684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.133871][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 390.163238][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 390.182387][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.189650][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.211718][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 390.222889][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 390.240314][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.247963][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.265976][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 390.278038][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 390.331359][ T8684] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.351640][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 390.434357][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 390.444360][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 390.454110][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 390.469029][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 390.480335][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 390.536272][ T8685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 390.547531][ T8685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.609661][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 390.619130][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 390.630016][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.637697][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.647351][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 390.657457][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 390.666254][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 390.676623][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 390.689325][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.697483][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.708255][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 390.717218][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 390.726845][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 390.737762][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.748233][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 390.758662][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 390.768415][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 390.777835][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 390.786740][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 390.796161][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 390.806104][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 390.815594][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 390.824166][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 390.930712][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 390.950127][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 390.976793][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 391.035708][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 391.065618][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 391.554824][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.574359][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 391.621462][ T8685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.641874][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 391.730806][ T4286] Bluetooth: hci6: command 0x040f tx timeout [ 391.875253][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.886328][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 391.927786][ T8684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.350915][ T7434] device hsr_slave_0 left promiscuous mode [ 392.363106][ T7434] device hsr_slave_1 left promiscuous mode [ 392.382502][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.396247][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.423505][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.431380][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.460628][ T7434] bridge0: port 2(team0) entered disabled state [ 392.488863][ T7434] device bridge_slave_0 left promiscuous mode [ 392.501064][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.522572][ T7434] device hsr_slave_0 left promiscuous mode [ 392.529640][ T7434] device hsr_slave_1 left promiscuous mode [ 392.536668][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.544330][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.554078][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.561993][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.570714][ T7434] bridge0: port 3(team0) entered disabled state [ 392.580445][ T7434] device bridge_slave_0 left promiscuous mode [ 392.587055][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.621032][ T7434] device veth1_macvtap left promiscuous mode [ 392.627872][ T7434] device veth0_macvtap left promiscuous mode [ 392.636422][ T7434] device veth1_vlan left promiscuous mode [ 392.644280][ T7434] device veth0_vlan left promiscuous mode [ 392.656107][ T7434] device veth1_macvtap left promiscuous mode [ 392.664866][ T7434] device veth0_macvtap left promiscuous mode [ 392.671738][ T7434] device veth1_vlan left promiscuous mode [ 392.678520][ T7434] device veth0_vlan left promiscuous mode [ 393.327752][ T7434] device team_slave_1 left promiscuous mode [ 393.338906][ T7434] team0 (unregistering): Port device team_slave_1 removed [ 393.380468][ T7434] device team_slave_0 left promiscuous mode [ 393.389143][ T7434] team0 (unregistering): Port device team_slave_0 removed [ 393.430762][ T7434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.485651][ T7434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.531051][ T7434] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 393.727070][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 393.804057][ T4286] Bluetooth: hci6: command 0x0419 tx timeout [ 393.855145][ T7434] bond0 (unregistering): Released all slaves [ 394.765783][ T7434] device team_slave_1 left promiscuous mode [ 394.776603][ T7434] team0 (unregistering): Port device team_slave_1 removed [ 394.820204][ T7434] device team_slave_0 left promiscuous mode [ 394.827767][ T7434] team0 (unregistering): Port device team_slave_0 removed [ 394.887572][ T7434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.937352][ T7434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.987138][ T7434] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 395.290844][ T7434] bond0 (unregistering): Released all slaves [ 395.744301][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 395.763575][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.844626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 395.863275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.906198][ T8685] device veth0_vlan entered promiscuous mode [ 395.915948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.936659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.946960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 395.993171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.032385][ T8685] device veth1_vlan entered promiscuous mode [ 396.087765][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 396.112926][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 396.133362][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 396.152455][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.182124][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.208374][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.219197][ T8684] device veth0_vlan entered promiscuous mode [ 396.231001][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.252710][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.266812][ T8685] device veth0_macvtap entered promiscuous mode [ 396.290657][ T8684] device veth1_vlan entered promiscuous mode [ 396.331421][ T8685] device veth1_macvtap entered promiscuous mode [ 396.388505][ T8685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.420141][ T8685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.442235][ T8685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.461702][ T8685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.474544][ T8685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.491123][ T8685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.507713][ T8685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.524571][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 396.542833][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 396.554713][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.564889][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 396.574438][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.584475][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.598410][ T8685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.631624][ T8685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.661993][ T8685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.681040][ T8685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.691912][ T8685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.707190][ T8685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.719281][ T8685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.735598][ T8685] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.752858][ T8685] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.763080][ T8685] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.773246][ T8685] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.801442][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.814472][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.826287][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.836883][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.879225][ T8684] device veth0_macvtap entered promiscuous mode [ 396.933271][ T8684] device veth1_macvtap entered promiscuous mode [ 396.990033][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.007235][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.023268][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.038982][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.049770][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.063188][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.074082][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.088922][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.108296][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.124075][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 397.124440][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.137445][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 397.150102][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 397.160196][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.183037][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.197982][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.213006][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.223844][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.241477][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.265548][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.287311][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.299307][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.315937][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.339868][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.352403][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.360374][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.377646][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.397057][ T8684] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.417615][ T8684] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.439792][ T8684] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.455772][ T8684] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.517709][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.528970][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.543470][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.614977][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.636751][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.701297][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.811750][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.891673][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.049664][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 398.704958][ T8843] device syzkaller0 entered promiscuous mode [ 402.071257][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.080291][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.786822][ T8865] device bridge_slave_1 left promiscuous mode [ 402.837294][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.905260][ T8865] device bridge_slave_0 left promiscuous mode [ 402.958947][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.412793][ T8880] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 403.449570][ T8880] device syzkaller0 entered promiscuous mode [ 405.932547][ T8912] tap0: tun_chr_ioctl cmd 35111 [ 415.299374][ T9008] syz.4.1274[9008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.299549][ T9008] syz.4.1274[9008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.161718][ T9034] tap0: tun_chr_ioctl cmd 35111 [ 426.429074][ T9100] tap0: tun_chr_ioctl cmd 35111 [ 426.601437][ T9107] IPv6: pim6reg1: Disabled Multicast RS [ 431.836212][ T9178] cgroup: fork rejected by pids controller in /syz4 [ 433.085916][ T4270] bond0: (slave syz_tun): Releasing backup interface [ 433.304507][ T7434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.582704][ T7434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.798038][ T7434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.990685][ T7434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.880832][ T9234] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 435.046928][ T9234] device syzkaller0 entered promiscuous mode [ 435.854571][ T9243] cgroup: fork rejected by pids controller in /syz0 [ 435.864349][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.888615][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.917668][ T8687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.928572][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.947740][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 435.963992][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.041686][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 438.050760][ T4272] bond0: (slave syz_tun): Releasing backup interface [ 440.125361][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.132359][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 440.139445][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.824662][ T9241] chnl_net:caif_netlink_parms(): no params data found [ 441.376244][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.402914][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.414879][ T8687] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.427190][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.459193][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 441.468775][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 441.685156][ T7434] device hsr_slave_0 left promiscuous mode [ 441.712134][ T7434] device hsr_slave_1 left promiscuous mode [ 441.764648][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.861753][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.919912][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.959892][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.085850][ T7434] device veth1_macvtap left promiscuous mode [ 442.097275][ T7434] device veth0_macvtap left promiscuous mode [ 442.113608][ T7434] device veth1_vlan left promiscuous mode [ 442.128958][ T7434] device veth0_vlan left promiscuous mode [ 442.201911][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 443.562001][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 443.685218][ T7434] device team_slave_1 left promiscuous mode [ 443.695693][ T7434] team0 (unregistering): Port device team_slave_1 removed [ 443.740061][ T7434] device team_slave_0 left promiscuous mode [ 443.747306][ T7434] team0 (unregistering): Port device team_slave_0 removed [ 443.794932][ T7434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.844344][ T7434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.898814][ T7434] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 444.224985][ T7434] bond0 (unregistering): Released all slaves [ 444.289287][ T9314] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 444.297892][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 444.309258][ T9314] device syzkaller0 entered promiscuous mode [ 445.641796][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 447.727057][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 448.174784][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.192317][ T9241] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.225752][ T9241] device bridge_slave_0 entered promiscuous mode [ 448.293548][ T9241] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.301271][ T9241] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.332903][ T9241] device bridge_slave_1 entered promiscuous mode [ 448.462716][ T9241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.606810][ T9241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.735173][ T9241] team0: Port device team_slave_0 added [ 448.804119][ T9241] team0: Port device team_slave_1 added [ 448.927434][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.950389][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.056139][ T9241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.179865][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.204150][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.291901][ T9241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.402122][ T9287] chnl_net:caif_netlink_parms(): no params data found [ 449.507370][ T9376] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1370'. [ 449.540475][ T9241] device hsr_slave_0 entered promiscuous mode [ 449.550372][ T9241] device hsr_slave_1 entered promiscuous mode [ 449.582987][ T9376] netlink: 'syz.5.1370': attribute type 12 has an invalid length. [ 449.591324][ T9376] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1370'. [ 449.801818][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 449.861416][ T9387] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 450.037551][ T9387] device syzkaller0 entered promiscuous mode [ 450.238763][ T7434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.300056][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.310451][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.325785][ T9287] device bridge_slave_0 entered promiscuous mode [ 450.413873][ T7434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.450427][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.461803][ T9287] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.492587][ T9287] device bridge_slave_1 entered promiscuous mode [ 453.391126][ T9416] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1382'. [ 453.415372][ T9417] netlink: 'syz.6.1382': attribute type 12 has an invalid length. [ 453.428190][ T9417] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1382'. [ 453.480055][ T9433] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1390'. [ 453.567601][ T7434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.628711][ T9287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.705125][ T9287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.859111][ T7434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.034375][ T9287] team0: Port device team_slave_0 added [ 454.070263][ T9287] team0: Port device team_slave_1 added [ 454.160192][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.174419][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.289853][ T9287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.349465][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.364123][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.471669][ T9287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.580865][ T9458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1402'. [ 454.701756][ T9459] netlink: 'syz.1.1402': attribute type 12 has an invalid length. [ 454.710461][ T9459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1402'. [ 454.735190][ T9241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 454.800241][ T9241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 454.858387][ T9287] device hsr_slave_0 entered promiscuous mode [ 454.924626][ T9287] device hsr_slave_1 entered promiscuous mode [ 454.952547][ T9287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.979423][ T9287] Cannot create hsr debugfs directory [ 455.014872][ T9241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 455.064819][ T9241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 455.387258][ T9468] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 455.418090][ T9468] device syzkaller0 entered promiscuous mode [ 458.532873][ T9494] device syzkaller0 entered promiscuous mode [ 461.448828][ T9241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.573177][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.582182][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.670066][ T9241] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.742935][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.768650][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.792934][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.801263][ T8563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.915216][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.962819][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.977239][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.999804][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.008917][ T8563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.036705][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 462.146651][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 462.159097][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 462.173777][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 462.311663][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 462.320375][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 462.346175][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 462.357292][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 462.366436][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.404799][ T7434] device hsr_slave_0 left promiscuous mode [ 462.413978][ T7434] device hsr_slave_1 left promiscuous mode [ 462.423193][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.433821][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.443187][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.451374][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.472480][ T7434] device veth1_macvtap left promiscuous mode [ 462.479121][ T7434] device veth0_macvtap left promiscuous mode [ 462.486629][ T7434] device veth1_vlan left promiscuous mode [ 462.493085][ T7434] device veth0_vlan left promiscuous mode [ 463.050334][ T7434] device team_slave_1 left promiscuous mode [ 463.059002][ T7434] team0 (unregistering): Port device team_slave_1 removed [ 463.102358][ T7434] device team_slave_0 left promiscuous mode [ 463.109678][ T7434] team0 (unregistering): Port device team_slave_0 removed [ 463.154366][ T7434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.201868][ T7434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.253640][ T7434] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 463.569626][ T7434] bond0 (unregistering): Released all slaves [ 463.617301][ T9241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.631043][ T9241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 463.691009][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 463.704012][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 463.832849][ T9287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 463.866097][ T9287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 463.922702][ T9287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 463.972928][ T9287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 464.272686][ T9287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.313770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 464.348553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.404019][ T9287] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.434837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 464.460224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.483492][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.491588][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.506750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 464.527860][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.547214][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.567653][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.586785][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.597559][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.604828][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.630336][ T9241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.649323][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.672004][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 464.722947][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 464.739028][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.789530][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.813317][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.843256][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.890049][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.901211][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.920421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.942910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.961133][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 465.477612][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.516205][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.565422][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.578793][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.597701][ T9287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.616954][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 465.627458][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.640782][ T9241] device veth0_vlan entered promiscuous mode [ 465.667720][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.679079][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.714769][ T9241] device veth1_vlan entered promiscuous mode [ 465.736542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 465.763531][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.777895][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.848667][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 465.872434][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.895673][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 465.909303][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.919789][ T9241] device veth0_macvtap entered promiscuous mode [ 465.929139][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 465.939055][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.949909][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.968384][ T9287] device veth0_vlan entered promiscuous mode [ 465.989234][ T9241] device veth1_macvtap entered promiscuous mode [ 466.009785][ T9287] device veth1_vlan entered promiscuous mode [ 466.045514][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.059338][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.072871][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.091737][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.105544][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.117296][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.131120][ T9241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.158778][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.173092][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.184555][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.200004][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.210822][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.223747][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.243005][ T9241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.254559][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 466.282561][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 466.302919][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 466.316308][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 466.329022][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 466.348682][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 466.362737][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.384803][ T9241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.404978][ T9241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.431624][ T9241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.440479][ T9241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.465463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 466.480694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.503093][ T9287] device veth0_macvtap entered promiscuous mode [ 466.536838][ T9287] device veth1_macvtap entered promiscuous mode [ 466.610851][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.633918][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.650692][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.664164][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.674804][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.687986][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.698716][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.714218][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.727323][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.743102][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 466.763942][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 466.777009][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 466.787568][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 466.811377][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.825518][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.835766][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.847450][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.857778][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.869499][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.879780][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.891622][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.904389][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.917282][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 466.931188][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.943081][ T8563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.949163][ T9287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.961117][ T8563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.965927][ T9287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.981043][ T9287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.990761][ T9287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.024438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 467.056295][ T8563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.078463][ T8563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.116148][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 467.198108][ T8563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.212640][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.220710][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.228979][ T8563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.229261][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 467.258257][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 467.498145][ T9591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1415'. [ 467.543888][ T9591] netlink: 'syz.4.1415': attribute type 12 has an invalid length. [ 467.630701][ T9591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1415'. [ 472.992432][ T9649] netlink: 'syz.5.1432': attribute type 12 has an invalid length. [ 473.122206][ T9649] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1432'. [ 474.912764][ T9668] device macsec0 entered promiscuous mode [ 476.107792][ T9681] device syzkaller0 entered promiscuous mode [ 480.065907][ T9699] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.073825][ T9699] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.118636][ T9702] device bridge_slave_1 left promiscuous mode [ 480.141978][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.172397][ T9702] device bridge_slave_0 left promiscuous mode [ 480.178793][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.311619][ T9708] netlink: 'syz.4.1445': attribute type 12 has an invalid length. [ 480.320120][ T9708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1445'. [ 482.355907][ T9735] device syzkaller0 entered promiscuous mode [ 484.979287][ T9751] device syzkaller0 entered promiscuous mode [ 489.437587][ T9779] netlink: 'syz.0.1459': attribute type 12 has an invalid length. [ 489.461705][ T9779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1459'. [ 490.792794][ T9792] device syzkaller0 entered promiscuous mode [ 494.632406][ T9834] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1473'. [ 497.555337][ T9891] device syzkaller0 entered promiscuous mode [ 497.587493][ T9893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1486'. [ 500.374263][ T9907] device syzkaller0 entered promiscuous mode [ 501.569099][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.579720][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.936615][ T9933] device syzkaller0 entered promiscuous mode [ 503.311955][ T9939] bridge0: port 3(veth1_to_hsr) entered blocking state [ 503.323798][ T9939] bridge0: port 3(veth1_to_hsr) entered disabled state [ 503.347152][ T9939] device veth1_to_hsr entered promiscuous mode [ 503.355474][ T9939] bridge0: port 3(veth1_to_hsr) entered blocking state [ 503.363462][ T9939] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 506.395166][ T9956] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1499'. [ 508.361378][ T9986] device syzkaller0 entered promiscuous mode [ 508.761930][ T8687] Bluetooth: hci5: command 0x0406 tx timeout [ 508.772899][ T4282] Bluetooth: hci6: command 0x0406 tx timeout [ 511.535528][T10008] netlink: 'syz.5.1513': attribute type 12 has an invalid length. [ 511.544915][T10008] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1513'. [ 511.672460][T10005] device syzkaller0 entered promiscuous mode [ 518.352232][T10113] netlink: 'syz.5.1540': attribute type 12 has an invalid length. [ 518.373215][T10111] ref_ctr_offset mismatch. inode: 0x91 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 518.382413][T10113] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 519.190432][T10126] device syzkaller0 entered promiscuous mode [ 521.747129][T10163] ref_ctr_offset mismatch. inode: 0xa6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 526.373361][T10165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1553'. [ 526.388418][T10166] netlink: 'syz.4.1553': attribute type 12 has an invalid length. [ 526.427005][T10166] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1553'. [ 526.624441][T10170] device syzkaller0 entered promiscuous mode [ 528.313815][T10219] ref_ctr_offset mismatch. inode: 0x1c5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 530.893042][T10186] device sit0 entered promiscuous mode [ 531.009031][T10181] device syzkaller0 entered promiscuous mode [ 531.117544][T10224] device syzkaller0 entered promiscuous mode [ 534.323073][T10235] ref_ctr_offset mismatch. inode: 0x153 offset: 0x0 ref_ctr_offset(old): 0x1fe ref_ctr_offset(new): 0x0 [ 536.400106][T10237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1568'. [ 536.409774][T10238] netlink: 'syz.0.1568': attribute type 12 has an invalid length. [ 536.421771][T10238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1568'. [ 537.911733][T10270] ref_ctr_offset mismatch. inode: 0x6cc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 538.672368][T10284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1580'. [ 538.754150][T10284] netlink: 'syz.1.1580': attribute type 12 has an invalid length. [ 538.871971][T10284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1580'. [ 539.287530][T10291] ref_ctr_offset mismatch. inode: 0xba offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 540.251108][T10297] device syzkaller0 entered promiscuous mode [ 545.067363][T10318] device syzkaller0 entered promiscuous mode [ 549.906077][T10393] device syzkaller0 entered promiscuous mode [ 549.926075][T10395] netlink: 'syz.1.1592': attribute type 12 has an invalid length. [ 549.971977][T10395] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1592'. [ 550.109960][T10405] ref_ctr_offset mismatch. inode: 0xca offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 554.942071][T10415] device syzkaller0 entered promiscuous mode [ 556.369401][T10447] ref_ctr_offset mismatch. inode: 0x6f7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 558.799987][T10451] device syzkaller0 entered promiscuous mode [ 558.838450][T10463] [ 558.842786][T10463] ============================= [ 558.848581][T10463] WARNING: suspicious RCU usage [ 558.854565][T10463] syzkaller #0 Not tainted [ 558.859978][T10463] ----------------------------- [ 558.864944][T10463] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 558.875323][T10463] [ 558.875323][T10463] other info that might help us debug this: [ 558.875323][T10463] [ 558.888047][T10463] [ 558.888047][T10463] rcu_scheduler_active = 2, debug_locks = 1 [ 558.897320][T10463] 1 lock held by syz.4.1608/10463: [ 558.903435][T10463] #0: ffffffff8cb2dce0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 558.914612][T10463] [ 558.914612][T10463] stack backtrace: [ 558.921750][T10463] CPU: 1 PID: 10463 Comm: syz.4.1608 Not tainted syzkaller #0 [ 558.929862][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 558.944810][T10463] Call Trace: [ 558.948964][T10463] [ 558.952362][T10463] dump_stack_lvl+0x188/0x24e [ 558.957870][T10463] ? show_regs_print_info+0x12/0x12 [ 558.963990][T10463] ? load_image+0x410/0x410 [ 558.968735][T10463] ? __lock_acquire+0x138a/0x7c40 [ 558.974162][T10463] lockdep_rcu_suspicious+0x1dd/0x300 [ 558.979574][T10463] get_callchain_entry+0x2a5/0x3b0 [ 558.984996][T10463] get_perf_callchain+0xc4/0x490 [ 558.990172][T10463] ? put_callchain_entry+0xb0/0xb0 [ 558.996025][T10463] ? preempt_schedule_common+0xa5/0xd0 [ 559.001912][T10463] ? verify_lock_unused+0x140/0x140 [ 559.007430][T10463] ? preempt_schedule+0xbc/0xd0 [ 559.012413][T10463] __bpf_get_stack+0x2de/0x520 [ 559.017966][T10463] ? stack_map_get_build_id_offset+0x9d0/0x9d0 [ 559.025215][T10463] ? __cant_sleep+0x220/0x220 [ 559.031028][T10463] ? bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 559.037459][T10463] bpf_get_stack_raw_tp+0x189/0x1c0 [ 559.044239][T10463] bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 559.050390][T10463] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 559.056449][T10463] bpf_prog_test_run_syscall+0x31c/0x4b0 [ 559.063115][T10463] ? sock_gen_cookie+0x60/0x60 [ 559.068809][T10463] ? sock_gen_cookie+0x60/0x60 [ 559.074347][T10463] bpf_prog_test_run+0x31c/0x390 [ 559.080048][T10463] __sys_bpf+0x62b/0x780 [ 559.085577][T10463] ? bpf_link_show_fdinfo+0x380/0x380 [ 559.091812][T10463] ? lock_chain_count+0x20/0x20 [ 559.097432][T10463] __x64_sys_bpf+0x78/0x90 [ 559.102102][T10463] do_syscall_64+0x4c/0xa0 [ 559.107079][T10463] ? clear_bhb_loop+0x60/0xb0 [ 559.112511][T10463] ? clear_bhb_loop+0x60/0xb0 [ 559.118487][T10463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.125144][T10463] RIP: 0033:0x7fef0fb9de99 [ 559.130309][T10463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.154303][T10463] RSP: 002b:00007fef10ae9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 559.163204][T10463] RAX: ffffffffffffffda RBX: 00007fef0fe25fa0 RCX: 00007fef0fb9de99 [ 559.175076][T10463] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 559.189941][T10463] RBP: 00007fef0fc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 559.201152][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.213318][T10463] R13: 00007fef0fe26038 R14: 00007fef0fe25fa0 R15: 00007ffe67e79028 [ 559.223273][T10463] [ 559.964183][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 561.860512][T10464] netlink: 'syz.0.1609': attribute type 12 has an invalid length. [ 561.871710][T10464] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1609'. [ 563.005254][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.016554][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.081865][ T4286] Bluetooth: hci2: command 0x0406 tx timeout