last executing test programs: 8.576208978s ago: executing program 4 (id=10393): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0xffffffffffffffff, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x13f200, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0xa000000, &(0x7f00000001c0)="6e95e7ce72b837064c8c47ef62df2320c24ca7c8e8472f21607522f4af32de9502fbf316c7bb0b25914ff9661ca01cf8b104901d3177379c8a077984793051c5cae582e7946325f74022e03eea12adeeef469cfb69cf660e6b90a8f2f775249a9014828029b20b6fe51a4bc48d0a4b25c1d4f2e6ad4cd0fbb2bdbfb5cea7be43029f6980eccc62fdb77962f376d91af03b92eb26a026a8c68d4353b0f7a48da2d0c8cb53800cbe2747071cf8b83897b9e16373ebd4cb2206f1e49cb7dd205c1df84e78", 0xc3, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001140)="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") r4 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x40, 0x0, 0x0, 0x5d31, 0x60452, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff}, 0x50) 6.094065662s ago: executing program 4 (id=10408): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 5.909970082s ago: executing program 1 (id=10411): r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002b40)=""/174, 0xae}, {&(0x7f0000000500)=""/230, 0xe6}, {&(0x7f0000000b00)=""/4109, 0x100d}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000a40)=""/129, 0x81}], 0x5}, 0x20) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4cf6dd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x4}, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x0, 0x3, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}}}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="3380f50cee1d5ecd81ad6ac0a45ffdfe1ba9f2af02bcead2751163d3b50d95c3186d56068984785635b9493418fb12bfc4f2a7595cfd1d20edb85a676f391b65e2c7f964f966cc8f631721651c4bbca69b607d76e0c90e2486791bcc21c5dfda3e5118091760455f954e884f8e927d080c720841120476ece9cd041ba781f42db66265d7925307b6a294fc0beeedd009b485c57efc8f23f820ab320ba9071fbe0b3fe6ab", 0xa4}], 0x2}, 0x10000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000060000000800007da61f11275c4f4d6f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) r7 = openat$cgroup(r6, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000340)='syz0\x00', 0x1ff) 5.584154179s ago: executing program 1 (id=10414): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4011) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.58035809s ago: executing program 4 (id=10415): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x17, &(0x7f0000000200)=r9, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r11) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pI4 \x00'}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x7c7}, [@ldst={0x3, 0x1, 0x6, 0x2, 0x5, 0x0, 0xfffffffffffffff0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x30, &(0x7f00000003c0)=""/48, 0x40f00, 0x48, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000780)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000900)=[r9, r10, r11, r12, r13, 0xffffffffffffffff], &(0x7f0000000940)=[{0x0, 0x3, 0x7, 0x1}, {0x3, 0x2, 0xf, 0x3}, {0x0, 0x4, 0xe, 0x7}, {0x0, 0x3, 0x3, 0xa}, {0x3, 0x5, 0x8, 0x4}, {0x2, 0x1, 0x1, 0x4}, {0x3, 0x3, 0x3, 0x2}, {0x2, 0xfffff001, 0x5, 0x5}, {0x3, 0x2, 0x3, 0xc}, {0x4, 0x5, 0xa, 0xa}], 0x10, 0x4}, 0x94) 5.476973975s ago: executing program 0 (id=10416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x1200, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0xf, 0x6, 0x1, 0x0, 0x6, 0x504, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000100)}, 0x80, 0x1, 0x9, 0x7, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0xd, r2, 0x4) 5.436855337s ago: executing program 2 (id=10417): socket$kcm(0x11, 0x200000000000003, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x0, 0x9, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 4.756872184s ago: executing program 1 (id=10419): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001740)={@ifindex, 0x2e, 0x0, 0x5, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000001700)}, 0x40) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000200000000000000080000000c910c00080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400"], &(0x7f0000001440)='syzkaller\x00', 0x7d3, 0x7, &(0x7f0000001480)=""/7, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x2, 0x5, 0x6474, 0xfffffffd}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001500)=[0x1], &(0x7f0000001540)=[{0x5, 0x2, 0xf, 0x8}, {0xef, 0x5, 0x8, 0xa}], 0x10, 0xc2d1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r2, 0xffffffffffffffff, 0x4, 0x0, r1, @void, @value=r3}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [], {0x95, 0x0, 0x0, 0xff000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$kcm(0x2, 0x922000000004, 0x106) 4.672324738s ago: executing program 0 (id=10420): perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.865511982s ago: executing program 3 (id=10421): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.53292136s ago: executing program 0 (id=10422): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x11c64b, 0xac5d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2063) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000001e00002c0000002c00000006000000000000000100000d000000000200000003000000000000000000000d000000000400000000000012030000000057d3616100"], &(0x7f0000001f00)=""/4083, 0x4a, 0xff3, 0x3}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xa, 0x1, 0xfe, 0x3, 0x0, 0x10000000000, 0x1218, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4118, 0x2, 0xfffffffc, 0x6, 0x8, 0x5, 0x806, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES16=r1, @ANYRES32, @ANYRES8=r0], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, 0x1}, 0xc) close(r3) recvmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x2a, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000022) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000022778cf140431a5095ec0600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0xfffffffffffffd47, 0x0, 0x0, 0x0, 0x9bce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r7, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) 3.381223718s ago: executing program 1 (id=10423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f00000004000000080000000400000000000000a053d64cb46bcb8b8014bfe14e3e6c2108ea80d750165cd2341bbbfad5a92d72dfcae3f2a34d59a771a28f25a550b59ac1168a9a3741f18a0a8dc6ec7fbd", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000005c0)='r', 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000440)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f00000006c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x10000, 0x0, r7, 0x10001, '\x00', r8, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x13, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0x8, 0x0, 0x6, 0x2, 0xffffffffffffffff}, @alu={0x0, 0x1, 0xa, 0x1, 0x7, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x7, 0xb, &(0x7f0000000c40)=""/11, 0x41100, 0x8, '\x00', r8, 0x25, r5, 0x8, &(0x7f0000000c80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x5, 0x0, 0xfffffff8, 0x1ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000d00), &(0x7f0000000d40)=[{0x1, 0x3, 0x9, 0x9}, {0x5, 0x2, 0x6, 0x1}, {0x5, 0x1, 0x6, 0x2}, {0x5, 0x5, 0xb, 0x6}, {0x5, 0x3, 0x2, 0x8}], 0x10, 0x81}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x8, 0x8, 0x2, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB="3ee901"], 0x9a) 2.994017249s ago: executing program 4 (id=10424): r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002b40)=""/174, 0xae}, {&(0x7f0000000500)=""/230, 0xe6}, {&(0x7f0000000b00)=""/4109, 0x100d}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000a40)=""/129, 0x81}], 0x5}, 0x20) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4cf6dd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x4}, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x0, 0x3, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}}}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="3380f50cee1d5ecd81ad6ac0a45ffdfe1ba9f2af02bcead2751163d3b50d95c3186d56068984785635b9493418fb12bfc4f2a7595cfd1d20edb85a676f391b65e2c7f964f966cc8f631721651c4bbca69b607d76e0c90e2486791bcc21c5dfda3e5118091760455f954e884f8e927d080c720841120476ece9cd041ba781f42db66265d7925307b6a294fc0beeedd009b485c57efc8f23f820ab320ba9071fbe0b3fe6ab", 0xa4}], 0x2}, 0x10000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000060000000800007da61f11275c4f4d6f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) r7 = openat$cgroup(r6, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000340)='syz0\x00', 0x1ff) 2.861174036s ago: executing program 0 (id=10425): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 2.835708808s ago: executing program 1 (id=10426): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x2c, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000040)=r4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94) r7 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c022, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0xb, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d0000000000000000000000000000000000000000006101"], 0x0, 0x43}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xe5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000014006b030231a6080c000af32cd6cfccdc03870adb02000f00e5aa000017d344486566e2765cb7e67f60bc24ea000007000000002756f475ce36c2d13b48df000000000000ecb9f6ec66c9f4d4938037e786a6d1000000e6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002842afcffff564500004e23e3f58e76110165f4080000000000000000028d459e37000febffffffffbe9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44000) 2.744312032s ago: executing program 0 (id=10427): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 2.732255683s ago: executing program 3 (id=10428): socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x24040004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0xff00, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.553174753s ago: executing program 2 (id=10429): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) unlink(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x25) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000050000000000000000400000000000000cc6fee55f6dcb1344927140203c4a1e2f662434ee5ffcc34251ef31910d107379dd01588848aebfaccdb3fe8b01048543e280722c11c5c7d7b41c7cdbb019fff55f36d48ff9e08b5a8b016c6607fc69a17600134c0e43e6b6eef1e370ea15a09e4059143ff7f5f6a9d8417efb143645db599af46b03d4ba5f13bd3fde2824e88d3600de2d045f70f413a794", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef4, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) 2.552777843s ago: executing program 0 (id=10430): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000003000000000000000000000d0a0000000000000002000006040000000100000000000133bae0d6cacee500000600000004000013030000000900000006000000020000000900000008000000530e000003000000ffffffff0f0000000c0000000000000002000000002e"], &(0x7f0000000f40)=""/4089, 0x7f, 0xff9, 0x1}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x32}]}}, &(0x7f0000001f00)=""/4083, 0x26, 0xff3, 0x3}, 0x28) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000001c0), 0x4) 2.525389054s ago: executing program 3 (id=10431): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r7, 0x4) ioctl$TUNGETVNETLE(r0, 0x40107447, 0x0) 2.190740222s ago: executing program 2 (id=10432): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000025c0)={&(0x7f0000000500)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0xe0, &(0x7f0000002500)=ANY=[@ANYBLOB="2c000000000000000000000007000000008903b80717e8ac1e00017f0000010a0101007f000001e000000100000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414"], 0x50}, 0x20000044) 2.090268188s ago: executing program 3 (id=10433): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) socket$kcm(0x28, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000c00000020000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r6, 0x0, 0xfefb) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="140000001e007f039e", 0x9}, {&(0x7f0000000140)="78cafb73fc020107000000", 0xb}], 0x2}, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x3}, 0x14501, 0x7, 0x0, 0x4, 0x40000, 0xfffffffc}, 0x0, 0xffffffffffffffff, r5, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[], 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x1c) recvmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x2042) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) 2.089849868s ago: executing program 4 (id=10434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b2388a84b"], 0xffdd) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x2000000000000019, 0x0, &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'geneve0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x989a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) 1.457317952s ago: executing program 1 (id=10435): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x17, &(0x7f0000000200)=r9, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r11) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pI4 \x00'}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x7c7}, [@ldst={0x3, 0x1, 0x6, 0x2, 0x5, 0x0, 0xfffffffffffffff0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x30, &(0x7f00000003c0)=""/48, 0x40f00, 0x48, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000780)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000900)=[r9, r10, r11, r12, r13, 0xffffffffffffffff], &(0x7f0000000940)=[{0x0, 0x3, 0x7, 0x1}, {0x3, 0x2, 0xf, 0x3}, {0x0, 0x4, 0xe, 0x7}, {0x0, 0x3, 0x3, 0xa}, {0x3, 0x5, 0x8, 0x4}, {0x2, 0x1, 0x1, 0x4}, {0x3, 0x3, 0x3, 0x2}, {0x2, 0xfffff001, 0x5, 0x5}, {0x3, 0x2, 0x3, 0xc}, {0x4, 0x5, 0xa, 0xa}], 0x10, 0x4}, 0x94) 1.456846302s ago: executing program 2 (id=10436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f00000004000000080000000400000000000000a053d64cb46bcb8b8014bfe14e3e6c2108ea80d750165cd2341bbbfad5a92d72dfcae3f2a34d59a771a28f25a550b59ac1168a9a3741f18a0a8dc6ec7fbd", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000005c0)='r', 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000440)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f00000006c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x10000, 0x0, r7, 0x10001, '\x00', r8, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x13, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0x8, 0x0, 0x6, 0x2, 0xffffffffffffffff}, @alu={0x0, 0x1, 0xa, 0x1, 0x7, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x7, 0xb, &(0x7f0000000c40)=""/11, 0x41100, 0x8, '\x00', r8, 0x25, r5, 0x8, &(0x7f0000000c80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x5, 0x0, 0xfffffff8, 0x1ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000d00), &(0x7f0000000d40)=[{0x1, 0x3, 0x9, 0x9}, {0x5, 0x2, 0x6, 0x1}, {0x5, 0x1, 0x6, 0x2}, {0x5, 0x5, 0xb, 0x6}, {0x5, 0x3, 0x2, 0x8}], 0x10, 0x81}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x8, 0x8, 0x2, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB="3ee901"], 0x9a) 1.385483636s ago: executing program 3 (id=10437): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f0000000680)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b400000000008510000002c3000000850000002a0000002000000000a900009500a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 1.015406045s ago: executing program 2 (id=10438): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 776.957418ms ago: executing program 3 (id=10439): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x28, 0x34, &(0x7f00000002c0), 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r7}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_config_ext, 0x1080d2, 0x89, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) 128.531333ms ago: executing program 2 (id=10440): socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x24040004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6886558", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=10441): socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x24040004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0xff00, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): mplete_evt+0xe9/0x1670 [ 1918.940611][ T48] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1918.947175][ T48] ? bt_info+0x180/0x180 [ 1918.951477][ T48] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1918.957326][ T48] ? skb_pull_data+0xf7/0x200 [ 1918.962567][ T48] hci_le_conn_complete_evt+0x183/0x440 [ 1918.968699][ T48] ? hci_remote_host_features_evt+0x270/0x270 [ 1918.974828][ T48] hci_event_packet+0x7b9/0x1280 [ 1918.979819][ T48] ? bis_list+0x280/0x280 [ 1918.984179][ T48] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1918.990219][ T48] ? kcov_remote_start+0x4c7/0x7e0 [ 1918.995562][ T48] ? patch_conexant_auto+0x1260/0x1650 [ 1919.001084][ T48] ? hci_send_to_monitor+0x9c/0x4a0 [ 1919.006509][ T48] hci_rx_work+0x3eb/0xd40 [ 1919.010950][ T48] ? _raw_spin_unlock+0x40/0x40 [ 1919.015840][ T48] ? process_one_work+0x7b0/0x1160 [ 1919.021198][ T48] process_one_work+0x8a2/0x1160 [ 1919.026368][ T48] ? worker_detach_from_pool+0x240/0x240 [ 1919.032131][ T48] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1919.037269][ T48] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1919.042840][ T48] ? kthread_data+0x4b/0xc0 [ 1919.047381][ T48] worker_thread+0xaa2/0x1270 [ 1919.052127][ T48] kthread+0x29d/0x330 [ 1919.056300][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 1919.061364][ T48] ? kthread_blkcg+0xd0/0xd0 [ 1919.066200][ T48] ret_from_fork+0x1f/0x30 [ 1919.071032][ T48] [ 1919.078066][ T48] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1919.093049][ T48] Bluetooth: hci3: failed to register connection device [ 1921.141988][ T48] Bluetooth: hci3: command 0x2016 tx timeout [ 1921.964459][T31536] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1921.972579][T31536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1921.982315][T31536] CPU: 0 PID: 31536 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1921.990186][T31536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1922.000291][T31536] Workqueue: hci4 hci_rx_work [ 1922.005040][T31536] Call Trace: [ 1922.008366][T31536] [ 1922.011341][T31536] dump_stack_lvl+0x188/0x24e [ 1922.016099][T31536] ? show_regs_print_info+0x12/0x12 [ 1922.021365][T31536] ? load_image+0x400/0x400 [ 1922.025954][T31536] sysfs_create_dir_ns+0x26a/0x290 [ 1922.031118][T31536] ? sysfs_warn_dup+0xa0/0xa0 [ 1922.035834][T31536] ? do_raw_spin_unlock+0x11d/0x230 [ 1922.041068][T31536] kobject_add_internal+0x61c/0xcc0 [ 1922.046308][T31536] kobject_add+0x160/0x230 [ 1922.050766][T31536] ? kobject_init+0x1d0/0x1d0 [ 1922.055476][T31536] ? klist_children_get+0x50/0x50 [ 1922.060525][T31536] ? get_device_parent+0x121/0x3f0 [ 1922.065887][T31536] device_add+0x483/0xfb0 [ 1922.070251][T31536] ? kmem_cache_free+0xf7/0x290 [ 1922.075246][T31536] hci_conn_add_sysfs+0xd1/0x1e0 [ 1922.080230][T31536] le_conn_complete_evt+0x1062/0x1670 [ 1922.085643][T31536] ? le_conn_complete_evt+0xe9/0x1670 [ 1922.091082][T31536] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1922.097373][T31536] ? bt_info+0x180/0x180 [ 1922.101749][T31536] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1922.107771][T31536] ? skb_pull_data+0xf7/0x200 [ 1922.112487][T31536] hci_le_conn_complete_evt+0x183/0x440 [ 1922.118072][T31536] ? hci_remote_host_features_evt+0x270/0x270 [ 1922.124174][T31536] hci_event_packet+0x7b9/0x1280 [ 1922.129171][T31536] ? bis_list+0x280/0x280 [ 1922.133524][T31536] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1922.139457][T31536] ? kcov_remote_start+0x4c7/0x7e0 [ 1922.144793][T31536] ? patch_conexant_auto+0x1260/0x1650 [ 1922.150281][T31536] ? hci_send_to_monitor+0x9c/0x4a0 [ 1922.155618][T31536] hci_rx_work+0x3eb/0xd40 [ 1922.160267][T31536] ? _raw_spin_unlock+0x40/0x40 [ 1922.165187][T31536] ? process_one_work+0x7b0/0x1160 [ 1922.170340][T31536] process_one_work+0x8a2/0x1160 [ 1922.175337][T31536] ? worker_detach_from_pool+0x240/0x240 [ 1922.180995][T31536] ? _raw_spin_lock_irq+0x86/0xf0 [ 1922.186051][T31536] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1922.191095][T31536] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1922.196660][T31536] ? kthread_data+0x4b/0xc0 [ 1922.201203][T31536] worker_thread+0xaa2/0x1270 [ 1922.205938][T31536] ? __kthread_parkme+0x162/0x1c0 [ 1922.211177][T31536] kthread+0x29d/0x330 [ 1922.215266][T31536] ? worker_clr_flags+0x1a0/0x1a0 [ 1922.220323][T31536] ? kthread_blkcg+0xd0/0xd0 [ 1922.225026][T31536] ret_from_fork+0x1f/0x30 [ 1922.229522][T31536] [ 1922.233467][T31536] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1922.246875][T31536] Bluetooth: hci4: failed to register connection device [ 1922.376973][ T3825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9550'. [ 1922.386238][ T3825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9550'. [ 1922.397547][ T3825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9550'. [ 1922.428940][ T3825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9550'. [ 1922.517087][ T3827] netlink: 'syz.4.9551': attribute type 3 has an invalid length. [ 1922.560453][ T3827] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9551'. [ 1923.689306][ T3845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1923.696750][ T3845] IPv6: NLM_F_CREATE should be set when creating new route [ 1923.704144][ T3845] IPv6: NLM_F_CREATE should be set when creating new route [ 1923.711388][ T3845] IPv6: NLM_F_CREATE should be set when creating new route [ 1923.920718][ T3842] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9554'. [ 1924.261924][ T48] Bluetooth: hci4: command 0x2016 tx timeout [ 1924.711086][T31536] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1924.718964][T31536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1924.728724][T31536] CPU: 0 PID: 31536 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1924.736410][T31536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1924.746513][T31536] Workqueue: hci4 hci_rx_work [ 1924.751337][T31536] Call Trace: [ 1924.754663][T31536] [ 1924.757631][T31536] dump_stack_lvl+0x188/0x24e [ 1924.762368][T31536] ? show_regs_print_info+0x12/0x12 [ 1924.767611][T31536] ? load_image+0x400/0x400 [ 1924.772286][T31536] sysfs_create_dir_ns+0x26a/0x290 [ 1924.777452][T31536] ? sysfs_warn_dup+0xa0/0xa0 [ 1924.782175][T31536] ? do_raw_spin_unlock+0x11d/0x230 [ 1924.787419][T31536] kobject_add_internal+0x61c/0xcc0 [ 1924.792697][T31536] kobject_add+0x160/0x230 [ 1924.797148][T31536] ? kobject_init+0x1d0/0x1d0 [ 1924.801854][T31536] ? klist_children_get+0x50/0x50 [ 1924.806997][T31536] ? get_device_parent+0x121/0x3f0 [ 1924.812317][T31536] device_add+0x483/0xfb0 [ 1924.816663][T31536] ? kmem_cache_free+0xf7/0x290 [ 1924.821549][T31536] hci_conn_add_sysfs+0xd1/0x1e0 [ 1924.826688][T31536] le_conn_complete_evt+0x1062/0x1670 [ 1924.832346][T31536] ? le_conn_complete_evt+0xe9/0x1670 [ 1924.837748][T31536] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1924.844187][T31536] ? bt_info+0x180/0x180 [ 1924.848712][T31536] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1924.854517][T31536] ? skb_pull_data+0xf7/0x200 [ 1924.859249][T31536] hci_le_conn_complete_evt+0x183/0x440 [ 1924.864913][T31536] ? hci_remote_host_features_evt+0x270/0x270 [ 1924.871002][T31536] hci_event_packet+0x7b9/0x1280 [ 1924.876007][T31536] ? bis_list+0x280/0x280 [ 1924.880422][T31536] ? kcov_remote_start+0x27/0x7e0 [ 1924.885475][T31536] ? hci_send_to_monitor+0x9c/0x4a0 [ 1924.890947][T31536] hci_rx_work+0x3eb/0xd40 [ 1924.895403][T31536] ? process_one_work+0x7b0/0x1160 [ 1924.900533][T31536] process_one_work+0x8a2/0x1160 [ 1924.905514][T31536] ? worker_detach_from_pool+0x240/0x240 [ 1924.911172][T31536] ? _raw_spin_lock_irq+0x86/0xf0 [ 1924.916217][T31536] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1924.921286][T31536] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1924.926847][T31536] ? kthread_data+0x4b/0xc0 [ 1924.931464][T31536] worker_thread+0xaa2/0x1270 [ 1924.936263][T31536] ? __kthread_parkme+0x162/0x1c0 [ 1924.941316][T31536] kthread+0x29d/0x330 [ 1924.945575][T31536] ? worker_clr_flags+0x1a0/0x1a0 [ 1924.950648][T31536] ? kthread_blkcg+0xd0/0xd0 [ 1924.955344][T31536] ret_from_fork+0x1f/0x30 [ 1924.959800][T31536] [ 1924.966132][T31536] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1924.979670][T31536] Bluetooth: hci4: failed to register connection device [ 1926.770698][ T3868] netlink: 'syz.3.9562': attribute type 13 has an invalid length. [ 1926.833021][ T3868] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9562'. [ 1926.853537][ T3868] syz_tun: refused to change device tx_queue_len [ 1926.871898][ T3868] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1926.908170][ T3874] netlink: 'syz.3.9562': attribute type 13 has an invalid length. [ 1926.943676][ T3874] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9562'. [ 1926.968371][ T3874] syz_tun: refused to change device tx_queue_len [ 1926.975163][ T3874] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1927.031472][ T3868] netlink: 'syz.3.9562': attribute type 10 has an invalid length. [ 1927.062036][T31536] Bluetooth: hci4: command 0x2016 tx timeout [ 1927.114558][ T3868] team0: Port device netdevsim0 added [ 1927.181310][ T3881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9567'. [ 1927.191965][ T3881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9567'. [ 1927.430944][ T3884] netlink: 'syz.2.9568': attribute type 2 has an invalid length. [ 1927.462722][ T3884] netlink: 'syz.2.9568': attribute type 8 has an invalid length. [ 1927.484838][ T3884] __nla_validate_parse: 2 callbacks suppressed [ 1927.484859][ T3884] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9568'. [ 1927.583060][ T3894] netlink: 'syz.3.9570': attribute type 1 has an invalid length. [ 1927.590873][ T3894] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.9570'. [ 1927.823771][ T3901] netlink: 'syz.1.9573': attribute type 10 has an invalid length. [ 1927.862402][ T3901] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1928.132596][ T3901] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1928.336537][ T3901] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1928.611851][ T3901] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1928.612098][T31536] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1928.626730][T31536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1928.636198][T31536] CPU: 0 PID: 31536 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1928.643899][T31536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1928.654236][T31536] Workqueue: hci3 hci_rx_work [ 1928.658944][T31536] Call Trace: [ 1928.662237][T31536] [ 1928.665179][T31536] dump_stack_lvl+0x188/0x24e [ 1928.669883][T31536] ? show_regs_print_info+0x12/0x12 [ 1928.675193][T31536] ? load_image+0x400/0x400 [ 1928.679728][T31536] sysfs_create_dir_ns+0x26a/0x290 [ 1928.684872][T31536] ? sysfs_warn_dup+0xa0/0xa0 [ 1928.689630][T31536] ? do_raw_spin_unlock+0x11d/0x230 [ 1928.695122][T31536] kobject_add_internal+0x61c/0xcc0 [ 1928.700399][T31536] kobject_add+0x160/0x230 [ 1928.704885][T31536] ? kobject_init+0x1d0/0x1d0 [ 1928.709607][T31536] ? klist_children_get+0x50/0x50 [ 1928.714744][T31536] ? get_device_parent+0x121/0x3f0 [ 1928.719880][T31536] device_add+0x483/0xfb0 [ 1928.724240][T31536] ? kmem_cache_free+0xf7/0x290 [ 1928.729132][T31536] hci_conn_add_sysfs+0xd1/0x1e0 [ 1928.734121][T31536] le_conn_complete_evt+0x1062/0x1670 [ 1928.739687][T31536] ? le_conn_complete_evt+0xe9/0x1670 [ 1928.745083][T31536] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1928.751356][T31536] ? bt_info+0x180/0x180 [ 1928.755794][T31536] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1928.761541][T31536] ? skb_pull_data+0xf7/0x200 [ 1928.766254][T31536] hci_le_conn_complete_evt+0x183/0x440 [ 1928.771912][T31536] ? hci_remote_host_features_evt+0x270/0x270 [ 1928.778088][T31536] hci_event_packet+0x7b9/0x1280 [ 1928.783255][T31536] ? bis_list+0x280/0x280 [ 1928.787695][T31536] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1928.793707][T31536] ? kcov_remote_start+0x4c7/0x7e0 [ 1928.798926][T31536] ? patch_conexant_auto+0x1260/0x1650 [ 1928.804577][T31536] ? hci_send_to_monitor+0x9c/0x4a0 [ 1928.809888][T31536] hci_rx_work+0x3eb/0xd40 [ 1928.814703][T31536] ? _raw_spin_unlock+0x40/0x40 [ 1928.819790][T31536] ? process_one_work+0x7b0/0x1160 [ 1928.825026][T31536] process_one_work+0x8a2/0x1160 [ 1928.830216][T31536] ? worker_detach_from_pool+0x240/0x240 [ 1928.835917][T31536] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1928.841075][T31536] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1928.846967][T31536] ? kthread_data+0x4b/0xc0 [ 1928.851531][T31536] worker_thread+0xaa2/0x1270 [ 1928.856272][T31536] ? __kthread_parkme+0x162/0x1c0 [ 1928.861445][T31536] kthread+0x29d/0x330 [ 1928.865559][T31536] ? worker_clr_flags+0x1a0/0x1a0 [ 1928.870658][T31536] ? kthread_blkcg+0xd0/0xd0 [ 1928.875487][T31536] ret_from_fork+0x1f/0x30 [ 1928.880230][T31536] [ 1928.891840][T31536] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1928.905180][T31536] Bluetooth: hci3: failed to register connection device [ 1929.436195][ T3915] netlink: 'syz.3.9578': attribute type 2 has an invalid length. [ 1929.465482][ T3915] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9578'. [ 1930.991911][T31536] Bluetooth: hci3: command 0x2016 tx timeout [ 1932.414923][ T3942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9585'. [ 1932.482012][ T3942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9585'. [ 1932.526471][ T3943] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9585'. [ 1932.538200][ T3942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9585'. [ 1932.580516][ T3945] netlink: 'syz.4.9587': attribute type 21 has an invalid length. [ 1932.634971][T31536] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1932.643188][T31536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1932.652647][T31536] CPU: 0 PID: 31536 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1932.660331][T31536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1932.670530][T31536] Workqueue: hci4 hci_rx_work [ 1932.675331][T31536] Call Trace: [ 1932.678909][T31536] [ 1932.681874][T31536] dump_stack_lvl+0x188/0x24e [ 1932.686586][T31536] ? show_regs_print_info+0x12/0x12 [ 1932.691849][T31536] ? load_image+0x400/0x400 [ 1932.696394][T31536] sysfs_create_dir_ns+0x26a/0x290 [ 1932.701641][T31536] ? sysfs_warn_dup+0xa0/0xa0 [ 1932.706433][T31536] ? do_raw_spin_unlock+0x11d/0x230 [ 1932.711667][T31536] kobject_add_internal+0x61c/0xcc0 [ 1932.716908][T31536] kobject_add+0x160/0x230 [ 1932.721442][T31536] ? kobject_init+0x1d0/0x1d0 [ 1932.726237][T31536] ? klist_children_get+0x50/0x50 [ 1932.731372][T31536] ? get_device_parent+0x121/0x3f0 [ 1932.736506][T31536] device_add+0x483/0xfb0 [ 1932.740853][T31536] ? kmem_cache_free+0xf7/0x290 [ 1932.745738][T31536] hci_conn_add_sysfs+0xd1/0x1e0 [ 1932.750709][T31536] le_conn_complete_evt+0x1062/0x1670 [ 1932.756134][T31536] ? le_conn_complete_evt+0xe9/0x1670 [ 1932.761986][T31536] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1932.768277][T31536] ? bt_info+0x180/0x180 [ 1932.772547][T31536] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1932.778226][T31536] ? skb_pull_data+0xf7/0x200 [ 1932.782927][T31536] hci_le_conn_complete_evt+0x183/0x440 [ 1932.788499][T31536] ? hci_remote_host_features_evt+0x270/0x270 [ 1932.794595][T31536] hci_event_packet+0x7b9/0x1280 [ 1932.799588][T31536] ? bis_list+0x280/0x280 [ 1932.803961][T31536] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1932.809885][T31536] ? kcov_remote_start+0x4c7/0x7e0 [ 1932.815106][T31536] ? patch_conexant_auto+0x1260/0x1650 [ 1932.820682][T31536] ? hci_send_to_monitor+0x9c/0x4a0 [ 1932.825926][T31536] hci_rx_work+0x3eb/0xd40 [ 1932.830379][T31536] ? _raw_spin_unlock+0x40/0x40 [ 1932.835294][T31536] ? process_one_work+0x7b0/0x1160 [ 1932.840432][T31536] process_one_work+0x8a2/0x1160 [ 1932.845510][T31536] ? worker_detach_from_pool+0x240/0x240 [ 1932.851168][T31536] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1932.856218][T31536] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1932.861784][T31536] ? kthread_data+0x4b/0xc0 [ 1932.866335][T31536] worker_thread+0xaa2/0x1270 [ 1932.871068][T31536] ? __kthread_parkme+0x162/0x1c0 [ 1932.876133][T31536] kthread+0x29d/0x330 [ 1932.880273][T31536] ? worker_clr_flags+0x1a0/0x1a0 [ 1932.885422][T31536] ? kthread_blkcg+0xd0/0xd0 [ 1932.890126][T31536] ret_from_fork+0x1f/0x30 [ 1932.894850][T31536] [ 1932.898773][T31536] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1932.912909][T31536] Bluetooth: hci4: failed to register connection device [ 1932.937231][ T3945] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9587'. [ 1932.951977][ T3945] netlink: 'syz.4.9587': attribute type 5 has an invalid length. [ 1932.971904][ T3945] netlink: 'syz.4.9587': attribute type 6 has an invalid length. [ 1933.005373][ T3945] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9587'. [ 1933.296160][ T3962] netlink: 'syz.2.9593': attribute type 8 has an invalid length. [ 1933.444917][ T3968] syz.4.9595[3968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1933.445047][ T3968] syz.4.9595[3968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1933.549250][ T3962] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9593'. [ 1933.597164][ T3966] netlink: 41459 bytes leftover after parsing attributes in process `syz.2.9593'. [ 1933.965272][ T3988] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9599'. [ 1934.705606][T31536] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1934.713921][T31536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1934.723797][T31536] CPU: 0 PID: 31536 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1934.731572][T31536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1934.741708][T31536] Workqueue: hci2 hci_rx_work [ 1934.746437][T31536] Call Trace: [ 1934.749754][T31536] [ 1934.752851][T31536] dump_stack_lvl+0x188/0x24e [ 1934.757663][T31536] ? show_regs_print_info+0x12/0x12 [ 1934.762894][T31536] ? load_image+0x400/0x400 [ 1934.767464][T31536] sysfs_create_dir_ns+0x26a/0x290 [ 1934.772618][T31536] ? sysfs_warn_dup+0xa0/0xa0 [ 1934.777335][T31536] ? do_raw_spin_unlock+0x11d/0x230 [ 1934.782656][T31536] kobject_add_internal+0x61c/0xcc0 [ 1934.787889][T31536] kobject_add+0x160/0x230 [ 1934.792336][T31536] ? kobject_init+0x1d0/0x1d0 [ 1934.797306][T31536] ? klist_children_get+0x50/0x50 [ 1934.802384][T31536] ? get_device_parent+0x121/0x3f0 [ 1934.807518][T31536] device_add+0x483/0xfb0 [ 1934.811869][T31536] ? kmem_cache_free+0xf7/0x290 [ 1934.816845][T31536] hci_conn_add_sysfs+0xd1/0x1e0 [ 1934.821817][T31536] le_conn_complete_evt+0x1062/0x1670 [ 1934.827221][T31536] ? le_conn_complete_evt+0xe9/0x1670 [ 1934.832714][T31536] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1934.838981][T31536] ? bt_info+0x180/0x180 [ 1934.843248][T31536] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1934.848933][T31536] ? skb_pull_data+0xf7/0x200 [ 1934.853723][T31536] hci_le_conn_complete_evt+0x183/0x440 [ 1934.859301][T31536] ? hci_remote_host_features_evt+0x270/0x270 [ 1934.865393][T31536] hci_event_packet+0x7b9/0x1280 [ 1934.870480][T31536] ? bis_list+0x280/0x280 [ 1934.874946][T31536] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1934.880888][T31536] ? kcov_remote_start+0x4c7/0x7e0 [ 1934.886037][T31536] ? patch_conexant_auto+0x1260/0x1650 [ 1934.891584][T31536] ? hci_send_to_monitor+0x9c/0x4a0 [ 1934.896905][T31536] hci_rx_work+0x3eb/0xd40 [ 1934.901352][T31536] ? _raw_spin_unlock+0x40/0x40 [ 1934.906325][T31536] ? process_one_work+0x7b0/0x1160 [ 1934.911455][T31536] process_one_work+0x8a2/0x1160 [ 1934.916445][T31536] ? worker_detach_from_pool+0x240/0x240 [ 1934.922125][T31536] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1934.927257][T31536] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1934.932820][T31536] ? kthread_data+0x4b/0xc0 [ 1934.937357][T31536] worker_thread+0xaa2/0x1270 [ 1934.942276][T31536] ? __kthread_parkme+0x162/0x1c0 [ 1934.947361][T31536] kthread+0x29d/0x330 [ 1934.951557][T31536] ? worker_clr_flags+0x1a0/0x1a0 [ 1934.956722][T31536] ? kthread_blkcg+0xd0/0xd0 [ 1934.961341][T31536] ret_from_fork+0x1f/0x30 [ 1934.965891][T31536] [ 1934.971031][T31536] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1934.984498][ T48] Bluetooth: hci4: command 0x2016 tx timeout [ 1934.990933][T31536] Bluetooth: hci2: failed to register connection device [ 1935.255871][ T4017] netlink: 'syz.3.9608': attribute type 8 has an invalid length. [ 1935.263744][ T4017] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9608'. [ 1935.344969][ T4017] netlink: 41459 bytes leftover after parsing attributes in process `syz.3.9608'. [ 1935.638097][T31536] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1935.977117][ T4042] FAULT_INJECTION: forcing a failure. [ 1935.977117][ T4042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1935.998182][ T4042] CPU: 1 PID: 4042 Comm: syz.3.9616 Not tainted syzkaller #0 [ 1936.005649][ T4042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1936.015842][ T4042] Call Trace: [ 1936.019158][ T4042] [ 1936.022125][ T4042] dump_stack_lvl+0x188/0x24e [ 1936.026859][ T4042] ? show_regs_print_info+0x12/0x12 [ 1936.032109][ T4042] ? load_image+0x400/0x400 [ 1936.036673][ T4042] ? __lock_acquire+0x7d10/0x7d10 [ 1936.041757][ T4042] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1936.047719][ T4042] should_fail_ex+0x399/0x4d0 [ 1936.052456][ T4042] _copy_from_user+0x2c/0x170 [ 1936.057201][ T4042] ___sys_sendmsg+0x1c3/0x360 [ 1936.061947][ T4042] ? __sys_sendmsg+0x290/0x290 [ 1936.066869][ T4042] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1936.072761][ T4042] __se_sys_sendmsg+0x1bb/0x2a0 [ 1936.077848][ T4042] ? __x64_sys_sendmsg+0x80/0x80 [ 1936.083208][ T4042] ? lockdep_hardirqs_on+0x94/0x140 [ 1936.088573][ T4042] ? __x64_sys_sendmsg+0x4f/0x80 [ 1936.093577][ T4042] do_syscall_64+0x4c/0xa0 [ 1936.098054][ T4042] ? clear_bhb_loop+0x60/0xb0 [ 1936.102774][ T4042] ? clear_bhb_loop+0x60/0xb0 [ 1936.107599][ T4042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1936.113534][ T4042] RIP: 0033:0x7f4fbd99c819 [ 1936.117987][ T4042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1936.137813][ T4042] RSP: 002b:00007f4fbe7c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1936.146282][ T4042] RAX: ffffffffffffffda RBX: 00007f4fbdc15fa0 RCX: 00007f4fbd99c819 [ 1936.154307][ T4042] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1936.162523][ T4042] RBP: 00007f4fbe7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1936.170534][ T4042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1936.178577][ T4042] R13: 00007f4fbdc16038 R14: 00007f4fbdc15fa0 R15: 00007ffe3816c3e8 [ 1936.186695][ T4042] [ 1937.062565][T31536] Bluetooth: hci2: command 0x2016 tx timeout [ 1938.351547][ T4040] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9615'. [ 1938.470325][ T4049] netlink: 'syz.1.9617': attribute type 39 has an invalid length. [ 1938.560093][T23615] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1938.568502][T23615] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1938.578153][T23615] CPU: 1 PID: 23615 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1938.585831][T23615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1938.595908][T23615] Workqueue: hci3 hci_rx_work [ 1938.600706][T23615] Call Trace: [ 1938.604001][T23615] [ 1938.606974][T23615] dump_stack_lvl+0x188/0x24e [ 1938.611737][T23615] ? show_regs_print_info+0x12/0x12 [ 1938.616998][T23615] ? load_image+0x400/0x400 [ 1938.621538][T23615] sysfs_create_dir_ns+0x26a/0x290 [ 1938.626763][T23615] ? sysfs_warn_dup+0xa0/0xa0 [ 1938.631458][T23615] ? do_raw_spin_unlock+0x11d/0x230 [ 1938.636678][T23615] kobject_add_internal+0x61c/0xcc0 [ 1938.641920][T23615] kobject_add+0x160/0x230 [ 1938.646370][T23615] ? kobject_init+0x1d0/0x1d0 [ 1938.651077][T23615] ? klist_children_get+0x50/0x50 [ 1938.656403][T23615] ? get_device_parent+0x121/0x3f0 [ 1938.661552][T23615] device_add+0x483/0xfb0 [ 1938.665905][T23615] ? kmem_cache_free+0xf7/0x290 [ 1938.670784][T23615] hci_conn_add_sysfs+0xd1/0x1e0 [ 1938.675767][T23615] le_conn_complete_evt+0x1062/0x1670 [ 1938.681188][T23615] ? le_conn_complete_evt+0xe9/0x1670 [ 1938.686602][T23615] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1938.692909][T23615] ? bt_info+0x180/0x180 [ 1938.697201][T23615] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1938.702874][T23615] ? skb_pull_data+0xf7/0x200 [ 1938.707580][T23615] hci_le_conn_complete_evt+0x183/0x440 [ 1938.713164][T23615] ? hci_remote_host_features_evt+0x270/0x270 [ 1938.719276][T23615] hci_event_packet+0x7b9/0x1280 [ 1938.724331][T23615] ? bis_list+0x280/0x280 [ 1938.728726][T23615] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1938.734997][T23615] ? kcov_remote_start+0x4c7/0x7e0 [ 1938.740338][T23615] ? patch_conexant_auto+0x1260/0x1650 [ 1938.745934][T23615] ? hci_send_to_monitor+0x9c/0x4a0 [ 1938.751193][T23615] hci_rx_work+0x3eb/0xd40 [ 1938.755745][T23615] ? _raw_spin_unlock+0x40/0x40 [ 1938.760678][T23615] ? process_one_work+0x7b0/0x1160 [ 1938.765867][T23615] process_one_work+0x8a2/0x1160 [ 1938.770855][T23615] ? worker_detach_from_pool+0x240/0x240 [ 1938.776525][T23615] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1938.781568][T23615] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1938.787223][T23615] ? kthread_data+0x4b/0xc0 [ 1938.791815][T23615] worker_thread+0xaa2/0x1270 [ 1938.796539][T23615] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1938.802465][T23615] ? __kthread_parkme+0x162/0x1c0 [ 1938.807602][T23615] kthread+0x29d/0x330 [ 1938.811684][T23615] ? worker_clr_flags+0x1a0/0x1a0 [ 1938.816729][T23615] ? kthread_blkcg+0xd0/0xd0 [ 1938.821426][T23615] ret_from_fork+0x1f/0x30 [ 1938.825879][T23615] [ 1938.830526][T23615] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1938.843737][T23615] Bluetooth: hci3: failed to register connection device [ 1938.949105][ T4062] netlink: 'syz.1.9622': attribute type 8 has an invalid length. [ 1938.957493][ T4062] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9622'. [ 1938.974289][ T4062] netlink: 41459 bytes leftover after parsing attributes in process `syz.1.9622'. [ 1941.102150][T31536] Bluetooth: hci3: command 0x2016 tx timeout [ 1941.385124][ T4087] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9630'. [ 1941.511239][ T4084] netlink: 830 bytes leftover after parsing attributes in process `syz.4.9628'. [ 1942.351646][ T4103] netlink: 'syz.2.9633': attribute type 39 has an invalid length. [ 1942.962166][T23615] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1942.969894][T23615] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1942.979606][T23615] CPU: 1 PID: 23615 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1942.987303][T23615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1942.997406][T23615] Workqueue: hci3 hci_rx_work [ 1943.002231][T23615] Call Trace: [ 1943.005545][T23615] [ 1943.008526][T23615] dump_stack_lvl+0x188/0x24e [ 1943.013275][T23615] ? show_regs_print_info+0x12/0x12 [ 1943.018638][T23615] ? load_image+0x400/0x400 [ 1943.023377][T23615] sysfs_create_dir_ns+0x26a/0x290 [ 1943.028611][T23615] ? sysfs_warn_dup+0xa0/0xa0 [ 1943.033377][T23615] ? do_raw_spin_unlock+0x11d/0x230 [ 1943.038608][T23615] kobject_add_internal+0x61c/0xcc0 [ 1943.044025][T23615] kobject_add+0x160/0x230 [ 1943.048558][T23615] ? kobject_init+0x1d0/0x1d0 [ 1943.053383][T23615] ? klist_children_get+0x50/0x50 [ 1943.058455][T23615] ? get_device_parent+0x121/0x3f0 [ 1943.063609][T23615] device_add+0x483/0xfb0 [ 1943.067979][T23615] ? kmem_cache_free+0xf7/0x290 [ 1943.072867][T23615] hci_conn_add_sysfs+0xd1/0x1e0 [ 1943.077856][T23615] le_conn_complete_evt+0x1062/0x1670 [ 1943.083354][T23615] ? le_conn_complete_evt+0xe9/0x1670 [ 1943.088758][T23615] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1943.095199][T23615] ? bt_info+0x180/0x180 [ 1943.099497][T23615] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1943.105311][T23615] ? skb_pull_data+0xf7/0x200 [ 1943.110194][T23615] hci_le_conn_complete_evt+0x183/0x440 [ 1943.116040][T23615] ? hci_remote_host_features_evt+0x270/0x270 [ 1943.122134][T23615] hci_event_packet+0x7b9/0x1280 [ 1943.127109][T23615] ? bis_list+0x280/0x280 [ 1943.131652][T23615] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1943.137576][T23615] ? kcov_remote_start+0x4c7/0x7e0 [ 1943.142809][T23615] ? patch_conexant_auto+0x1260/0x1650 [ 1943.148302][T23615] ? hci_send_to_monitor+0x9c/0x4a0 [ 1943.153549][T23615] hci_rx_work+0x3eb/0xd40 [ 1943.157992][T23615] ? _raw_spin_unlock+0x40/0x40 [ 1943.162953][T23615] ? process_one_work+0x7b0/0x1160 [ 1943.168087][T23615] process_one_work+0x8a2/0x1160 [ 1943.173241][T23615] ? worker_detach_from_pool+0x240/0x240 [ 1943.178988][T23615] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1943.184053][T23615] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1943.189625][T23615] ? kthread_data+0x4b/0xc0 [ 1943.194254][T23615] worker_thread+0xaa2/0x1270 [ 1943.199076][T23615] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1943.205009][T23615] ? __kthread_parkme+0x162/0x1c0 [ 1943.210162][T23615] kthread+0x29d/0x330 [ 1943.214252][T23615] ? worker_clr_flags+0x1a0/0x1a0 [ 1943.219312][T23615] ? kthread_blkcg+0xd0/0xd0 [ 1943.223921][T23615] ret_from_fork+0x1f/0x30 [ 1943.228381][T23615] [ 1943.232873][T23615] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1943.247278][T23615] Bluetooth: hci3: failed to register connection device [ 1943.468092][ T4120] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1943.510706][ T4120] netlink: zone id is out of range [ 1943.525330][ T4120] netlink: zone id is out of range [ 1943.557451][ T4120] netlink: zone id is out of range [ 1943.579424][ T4120] netlink: zone id is out of range [ 1943.609630][ T4120] netlink: zone id is out of range [ 1943.651627][ T4120] netlink: zone id is out of range [ 1943.693784][ T4120] netlink: zone id is out of range [ 1943.750811][ T4120] netlink: zone id is out of range [ 1943.772148][ T4120] netlink: zone id is out of range [ 1943.777757][ T4120] netlink: zone id is out of range [ 1944.844785][ T4156] device syzkaller0 entered promiscuous mode [ 1944.917223][ T4141] device wlan1 entered promiscuous mode [ 1944.954219][ T4141] netlink: 'syz.4.9645': attribute type 2 has an invalid length. [ 1944.982016][ T4141] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9645'. [ 1945.302134][T31536] Bluetooth: hci3: command 0x2016 tx timeout [ 1947.280020][T23615] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1947.287901][T23615] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1947.298703][T23615] CPU: 1 PID: 23615 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1947.306422][T23615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1947.314138][ T4180] netlink: 192156 bytes leftover after parsing attributes in process `syz.2.9654'. [ 1947.316512][T23615] Workqueue: hci1 hci_rx_work [ 1947.330563][T23615] Call Trace: [ 1947.333897][T23615] [ 1947.336875][T23615] dump_stack_lvl+0x188/0x24e [ 1947.341620][T23615] ? show_regs_print_info+0x12/0x12 [ 1947.346965][T23615] ? load_image+0x400/0x400 [ 1947.351720][T23615] sysfs_create_dir_ns+0x26a/0x290 [ 1947.357102][T23615] ? sysfs_warn_dup+0xa0/0xa0 [ 1947.361807][T23615] ? do_raw_spin_unlock+0x11d/0x230 [ 1947.367027][T23615] kobject_add_internal+0x61c/0xcc0 [ 1947.372277][T23615] kobject_add+0x160/0x230 [ 1947.376781][T23615] ? kobject_init+0x1d0/0x1d0 [ 1947.381500][T23615] ? klist_children_get+0x50/0x50 [ 1947.386569][T23615] ? get_device_parent+0x121/0x3f0 [ 1947.391705][T23615] device_add+0x483/0xfb0 [ 1947.396204][T23615] ? kmem_cache_free+0xf7/0x290 [ 1947.401185][T23615] hci_conn_add_sysfs+0xd1/0x1e0 [ 1947.406159][T23615] le_conn_complete_evt+0x1062/0x1670 [ 1947.411645][T23615] ? le_conn_complete_evt+0xe9/0x1670 [ 1947.417050][T23615] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1947.423414][T23615] ? bt_info+0x180/0x180 [ 1947.427788][T23615] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1947.433538][T23615] ? skb_pull_data+0xf7/0x200 [ 1947.438247][T23615] hci_le_conn_complete_evt+0x183/0x440 [ 1947.443906][T23615] ? hci_remote_host_features_evt+0x270/0x270 [ 1947.449998][T23615] hci_event_packet+0x7b9/0x1280 [ 1947.455060][T23615] ? bis_list+0x280/0x280 [ 1947.459552][T23615] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1947.465482][T23615] ? kcov_remote_start+0x4c7/0x7e0 [ 1947.470699][T23615] ? patch_conexant_auto+0x1260/0x1650 [ 1947.476180][T23615] ? hci_send_to_monitor+0x9c/0x4a0 [ 1947.481401][T23615] hci_rx_work+0x3eb/0xd40 [ 1947.485838][T23615] ? _raw_spin_unlock+0x40/0x40 [ 1947.490716][T23615] ? process_one_work+0x7b0/0x1160 [ 1947.496019][T23615] process_one_work+0x8a2/0x1160 [ 1947.500993][T23615] ? worker_detach_from_pool+0x240/0x240 [ 1947.506645][T23615] ? _raw_spin_lock_irq+0x86/0xf0 [ 1947.511868][T23615] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1947.516923][T23615] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1947.522506][T23615] ? kthread_data+0x4b/0xc0 [ 1947.527103][T23615] worker_thread+0xaa2/0x1270 [ 1947.531849][T23615] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1947.537807][T23615] ? __kthread_parkme+0x162/0x1c0 [ 1947.543000][T23615] kthread+0x29d/0x330 [ 1947.547106][T23615] ? worker_clr_flags+0x1a0/0x1a0 [ 1947.552182][T23615] ? kthread_blkcg+0xd0/0xd0 [ 1947.556818][T23615] ret_from_fork+0x1f/0x30 [ 1947.561331][T23615] [ 1947.566443][T23615] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1947.580545][T23615] Bluetooth: hci1: failed to register connection device [ 1949.627909][T23615] Bluetooth: hci1: command 0x2016 tx timeout [ 1949.832455][ T4170] netlink: 'syz.0.9648': attribute type 39 has an invalid length. [ 1950.129442][ T4191] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9657'. [ 1950.158636][ T4198] netlink: 'syz.4.9668': attribute type 29 has an invalid length. [ 1950.179097][ T4198] netlink: 'syz.4.9668': attribute type 29 has an invalid length. [ 1950.223854][ T4198] netlink: 'syz.4.9668': attribute type 29 has an invalid length. [ 1950.999098][ T4209] netlink: 'syz.0.9661': attribute type 10 has an invalid length. [ 1951.007804][ T4209] netlink: 'syz.0.9661': attribute type 19 has an invalid length. [ 1951.015844][ T4209] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9661'. [ 1953.524092][ T4229] netlink: 'syz.3.9667': attribute type 39 has an invalid length. [ 1953.720378][ T4238] netlink: 'syz.0.9671': attribute type 1 has an invalid length. [ 1953.772403][ T4238] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9671'. [ 1954.637656][ T4264] netlink: 'syz.4.9680': attribute type 2 has an invalid length. [ 1954.683311][ T4264] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9680'. [ 1954.730206][ T4271] netlink: 'syz.1.9682': attribute type 1 has an invalid length. [ 1954.756229][ T4271] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9682'. [ 1956.007259][ T4284] netlink: 'syz.4.9685': attribute type 39 has an invalid length. [ 1956.657528][ T4294] mac80211_hwsim hwsim80 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1957.015947][ T4319] netlink: 'syz.0.9694': attribute type 2 has an invalid length. [ 1957.111043][ T4319] netlink: 'syz.0.9694': attribute type 8 has an invalid length. [ 1957.155796][ T4319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9694'. [ 1957.438394][ T4318] device syzkaller0 entered promiscuous mode [ 1958.982133][T31850] wlan1: Trigger new scan to find an IBSS to join [ 1960.412660][ T4343] netlink: 'syz.4.9701': attribute type 1 has an invalid length. [ 1960.445099][ T4343] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.9701'. [ 1962.850058][ T4345] netlink: 'syz.3.9700': attribute type 39 has an invalid length. [ 1962.983044][T12642] wlan1: Trigger new scan to find an IBSS to join [ 1962.989773][ T4363] netlink: 'syz.2.9707': attribute type 33 has an invalid length. [ 1963.006328][ T4363] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9707'. [ 1963.732598][ T4370] mac80211_hwsim hwsim82 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1964.212173][ T4381] syz.0.9709[4381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1964.212302][ T4381] syz.0.9709[4381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1965.711497][ T39] wlan1: Creating new IBSS network, BSSID be:bb:eb:05:ea:a3 [ 1965.983611][ T4385] netlink: 'syz.4.9715': attribute type 39 has an invalid length. [ 1966.201691][ T4399] netlink: 'syz.4.9721': attribute type 1 has an invalid length. [ 1966.210317][ T4399] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1966.303296][ T4403] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.9723'. [ 1970.016986][ T4446] netlink: 'syz.3.9737': attribute type 1 has an invalid length. [ 1970.058217][ T4446] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.9737'. [ 1971.628906][ T4471] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9743'. [ 1971.811100][ T4478] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.9743'. [ 1972.283895][ T4484] netlink: 'syz.4.9745': attribute type 29 has an invalid length. [ 1972.473875][ T4471] team0: Port device team_slave_0 removed [ 1972.605882][ T4471] net_ratelimit: 4 callbacks suppressed [ 1972.606036][ T4471] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1974.594948][ T4484] netlink: 'syz.4.9745': attribute type 29 has an invalid length. [ 1974.637347][ T4478] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1974.693236][ T4478] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1974.793062][ T4478] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1975.868809][ T4448] delete_channel: no stack [ 1976.108757][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.115185][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.345856][ T4511] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1976.378147][ T4511] netlink: zone id is out of range [ 1976.397116][ T4511] netlink: zone id is out of range [ 1976.428308][ T4511] netlink: zone id is out of range [ 1976.465036][ T4511] netlink: zone id is out of range [ 1976.482214][ T4511] netlink: zone id is out of range [ 1976.491894][ T4511] netlink: zone id is out of range [ 1976.519686][ T4511] netlink: zone id is out of range [ 1976.548681][ T4511] netlink: zone id is out of range [ 1976.566540][ T4511] netlink: zone id is out of range [ 1976.623329][T23615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1976.642136][T23615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1976.651365][T23615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1976.732112][T23615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1976.739916][T23615] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1976.755878][T23615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1977.393950][ T4516] team0: Port device team_slave_0 removed [ 1978.821929][T23615] Bluetooth: hci5: command 0x0409 tx timeout [ 1980.113811][T12642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.196510][ T4551] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.9767'. [ 1980.402044][T12642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.704267][ T4519] chnl_net:caif_netlink_parms(): no params data found [ 1980.733956][ T4559] netlink: 'syz.1.9770': attribute type 10 has an invalid length. [ 1980.750351][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1980.901890][T23615] Bluetooth: hci5: command 0x041b tx timeout [ 1982.981857][T31536] Bluetooth: hci5: command 0x040f tx timeout [ 1983.098922][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1983.133372][ T4559] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1983.174090][T12642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.354535][T12642] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.672974][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.680307][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.710875][ T4519] device bridge_slave_0 entered promiscuous mode [ 1983.746002][ T4572] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.9772'. [ 1983.760396][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.773777][ T4572] net_ratelimit: 18 callbacks suppressed [ 1983.773815][ T4572] netlink: zone id is out of range [ 1983.787400][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.805156][ T4519] device bridge_slave_1 entered promiscuous mode [ 1983.926965][ T4572] netlink: zone id is out of range [ 1983.945776][ T4519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1983.995355][ T4572] netlink: zone id is out of range [ 1984.015178][ T4519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1984.109768][ T4572] netlink: zone id is out of range [ 1984.155270][ T4519] team0: Port device team_slave_0 added [ 1984.166098][ T4572] netlink: zone id is out of range [ 1984.224537][ T4519] team0: Port device team_slave_1 added [ 1984.267685][ T4572] netlink: zone id is out of range [ 1984.371922][ T4572] netlink: zone id is out of range [ 1984.393244][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1984.413807][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1984.493359][ T4572] netlink: zone id is out of range [ 1984.498561][ T4572] netlink: zone id is out of range [ 1984.558778][ T4572] netlink: zone id is out of range [ 1984.561792][ T4519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1985.062807][T31536] Bluetooth: hci5: command 0x0419 tx timeout [ 1986.641193][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1986.668915][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1986.741848][ T4519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1986.804857][T12642] device 0 left promiscuous mode [ 1986.938552][ T4519] device hsr_slave_0 entered promiscuous mode [ 1986.983651][ T4519] device hsr_slave_1 entered promiscuous mode [ 1987.020520][ T4519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1987.029666][ T4519] Cannot create hsr debugfs directory [ 1987.050949][T12642] tipc: Left network mode [ 1988.802645][ T4642] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.9789'. [ 1988.885103][ T4642] net_ratelimit: 17 callbacks suppressed [ 1988.885173][ T4642] netlink: zone id is out of range [ 1988.935841][ T4642] netlink: zone id is out of range [ 1988.959563][ T4642] netlink: zone id is out of range [ 1988.974935][ T4642] netlink: zone id is out of range [ 1989.027245][ T4664] netlink: 'syz.1.9795': attribute type 13 has an invalid length. [ 1989.068819][ T4642] netlink: zone id is out of range [ 1989.075284][ T4664] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9795'. [ 1989.122269][ T4642] netlink: zone id is out of range [ 1989.137142][ T4664] syz_tun: refused to change device tx_queue_len [ 1989.144109][ T4642] netlink: zone id is out of range [ 1989.171220][ T4642] netlink: zone id is out of range [ 1989.189534][ T4664] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1989.215827][ T4642] netlink: zone id is out of range [ 1990.108444][ T4668] device wg2 entered promiscuous mode [ 1990.123577][ T4679] netlink: 'syz.1.9796': attribute type 15 has an invalid length. [ 1990.145461][ T4679] netlink: 'syz.1.9796': attribute type 5 has an invalid length. [ 1990.176880][ T4679] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9796'. [ 1990.486691][T12642] device gretap0 left promiscuous mode [ 1990.550819][T12642] Ÿë: port 1(gretap0) entered disabled state [ 1990.950075][ T4519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1991.336405][ T4701] FAULT_INJECTION: forcing a failure. [ 1991.336405][ T4701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1991.411915][ T4701] CPU: 1 PID: 4701 Comm: syz.2.9804 Not tainted syzkaller #0 [ 1991.419457][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1991.429550][ T4701] Call Trace: [ 1991.432873][ T4701] [ 1991.435842][ T4701] dump_stack_lvl+0x188/0x24e [ 1991.440574][ T4701] ? show_regs_print_info+0x12/0x12 [ 1991.445923][ T4701] ? load_image+0x400/0x400 [ 1991.450812][ T4701] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1991.456999][ T4701] should_fail_ex+0x399/0x4d0 [ 1991.461973][ T4701] _copy_from_user+0x2c/0x170 [ 1991.466674][ T4701] bpf_prog_test_run_skb+0x262/0x12a0 [ 1991.472080][ T4701] ? __fget_files+0x28/0x4b0 [ 1991.476695][ T4701] ? __fget_files+0x28/0x4b0 [ 1991.481328][ T4701] ? __fget_files+0x43d/0x4b0 [ 1991.486093][ T4701] ? cpu_online+0xa0/0xa0 [ 1991.490461][ T4701] bpf_prog_test_run+0x31e/0x390 [ 1991.495438][ T4701] __sys_bpf+0x62b/0x780 [ 1991.499709][ T4701] ? bpf_link_show_fdinfo+0x380/0x380 [ 1991.505115][ T4701] ? lock_chain_count+0x20/0x20 [ 1991.509986][ T4701] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1991.516197][ T4701] __x64_sys_bpf+0x78/0x90 [ 1991.520652][ T4701] do_syscall_64+0x4c/0xa0 [ 1991.525109][ T4701] ? clear_bhb_loop+0x60/0xb0 [ 1991.529814][ T4701] ? clear_bhb_loop+0x60/0xb0 [ 1991.534523][ T4701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1991.540443][ T4701] RIP: 0033:0x7fe54759c819 [ 1991.545050][ T4701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1991.564701][ T4701] RSP: 002b:00007fe5483e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1991.573250][ T4701] RAX: ffffffffffffffda RBX: 00007fe547815fa0 RCX: 00007fe54759c819 [ 1991.581352][ T4701] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 1991.589435][ T4701] RBP: 00007fe5483e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1991.597551][ T4701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1991.605568][ T4701] R13: 00007fe547816038 R14: 00007fe547815fa0 R15: 00007fff9ee5b308 [ 1991.613684][ T4701] [ 1991.777420][ T4519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1991.840142][ T4519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1991.909099][ T4519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1991.979620][ T4722] netlink: 'syz.3.9809': attribute type 2 has an invalid length. [ 1992.698587][ T4519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1992.979126][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1993.007339][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1993.025360][ T4740] tipc: Started in network mode [ 1993.035850][ T4740] tipc: Node identity 9215a268, cluster identity 4711 [ 1993.091983][ T4740] tipc: Node number set to 2450891368 [ 1993.126921][ T4519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1993.235271][ T4721] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.9807'. [ 1993.257813][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1993.322874][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1993.331515][ T4992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.338768][ T4992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1993.392219][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1993.424880][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1993.461420][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1993.480800][ T4992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.488224][ T4992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1993.567245][ T4744] netlink: 'syz.4.9813': attribute type 15 has an invalid length. [ 1993.589310][ T4744] netlink: 'syz.4.9813': attribute type 5 has an invalid length. [ 1993.602129][ T4744] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9813'. [ 1993.772832][T31850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1993.820162][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1993.882203][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1993.908298][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1993.956132][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1994.001658][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1994.017602][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1994.044168][T12642] device veth0_to_team left promiscuous mode [ 1994.050559][T12642] Ÿë: port 2(veth0_to_team) entered disabled state [ 1994.126727][T12642] device veth1_macvtap left promiscuous mode [ 1994.146278][T12642] device veth0_macvtap left promiscuous mode [ 1994.156497][T12642] device veth1_vlan left promiscuous mode [ 1995.122794][T12642] team0 (unregistering): Port device macvlan0 removed [ 1995.455564][T12642] team0 (unregistering): Port device hsr_slave_0 removed [ 1995.741220][ T4322] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1995.788609][T12642] team0 (unregistering): Port device team_slave_1 removed [ 1995.926670][T12642] team0 (unregistering): Port device team_slave_0 removed [ 1996.022192][T12642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1996.153853][T12642] team0 (unregistering): Port device bridge_slave_1 removed [ 1996.624450][T12642] bond0 (unregistering): Released all slaves [ 1996.675021][ T4765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1996.690552][ T4776] netlink: 'syz.3.9821': attribute type 10 has an invalid length. [ 1996.800182][ T4776] team0 (unregistering): Port device team_slave_1 removed [ 1996.831830][ T4776] team0 (unregistering): Port device netdevsim0 removed [ 1996.861979][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1996.870850][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1996.932981][ T4519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1996.979979][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1997.007721][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1997.043062][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1997.110985][ T4812] netlink: 'syz.3.9829': attribute type 15 has an invalid length. [ 1997.187917][ T4812] netlink: 'syz.3.9829': attribute type 5 has an invalid length. [ 1997.199998][ T4812] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9829'. [ 1998.432662][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1998.448403][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1998.495404][ T4519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1998.609315][T31850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1998.618833][T31850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1998.748746][T31850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1998.767342][T31850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1998.827135][T31850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1998.845612][T31850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1998.883057][ T4519] device veth0_vlan entered promiscuous mode [ 1998.971580][ T4519] device veth1_vlan entered promiscuous mode [ 1999.011363][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1999.153421][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1999.186350][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1999.236542][ T4519] device veth0_macvtap entered promiscuous mode [ 1999.268711][ T4519] device veth1_macvtap entered promiscuous mode [ 1999.357227][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1999.397026][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.431393][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1999.462285][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.483878][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1999.516528][T12642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1999.535275][T12642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1999.546527][T12642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1999.557041][T12642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1999.589152][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.609494][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.620421][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.636626][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.646785][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.665963][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.702183][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1999.750021][ T4854] netlink: 'syz.1.9840': attribute type 2 has an invalid length. [ 1999.831512][ T4854] netlink: 'syz.1.9840': attribute type 8 has an invalid length. [ 1999.875900][ T4854] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9840'. [ 1999.968779][ T4850] netlink: 'syz.2.9839': attribute type 10 has an invalid length. [ 2000.080862][ T4850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9839'. [ 2000.245627][ T4850] net_ratelimit: 45 callbacks suppressed [ 2000.245721][ T4850] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2000.366842][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2000.392674][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2000.450868][ T4519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.464356][ T4519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.478122][ T4519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.492281][ T4519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.782329][T12653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2000.790338][T12653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2000.880933][T12653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2000.930550][T12653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2000.958113][T12653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2000.958467][ T4870] netlink: 'syz.3.9844': attribute type 1 has an invalid length. [ 2000.991025][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2001.036945][ T4876] FAULT_INJECTION: forcing a failure. [ 2001.036945][ T4876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2001.054022][ T4870] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.9844'. [ 2001.146802][ T4876] CPU: 1 PID: 4876 Comm: syz.2.9847 Not tainted syzkaller #0 [ 2001.154601][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2001.164878][ T4876] Call Trace: [ 2001.168194][ T4876] [ 2001.171156][ T4876] dump_stack_lvl+0x188/0x24e [ 2001.175893][ T4876] ? show_regs_print_info+0x12/0x12 [ 2001.181145][ T4876] ? load_image+0x400/0x400 [ 2001.185694][ T4876] ? __might_fault+0xa6/0x120 [ 2001.190447][ T4876] should_fail_ex+0x399/0x4d0 [ 2001.195164][ T4876] copyin+0x1b/0x120 [ 2001.199113][ T4876] _copy_from_iter+0x447/0x1130 [ 2001.204008][ T4876] ? slab_pre_alloc_hook+0x59/0x310 [ 2001.209259][ T4876] ? copyout_mc+0x110/0x110 [ 2001.213971][ T4876] ? __virt_addr_valid+0x188/0x540 [ 2001.219149][ T4876] ? __virt_addr_valid+0x188/0x540 [ 2001.224434][ T4876] ? __virt_addr_valid+0x465/0x540 [ 2001.229590][ T4876] ? __phys_addr_symbol+0x2b/0x70 [ 2001.234654][ T4876] ? __check_object_size+0x500/0xa40 [ 2001.239985][ T4876] sctp_user_addto_chunk+0x8b/0x220 [ 2001.245230][ T4876] sctp_datamsg_from_user+0x73d/0xee0 [ 2001.250740][ T4876] sctp_sendmsg_to_asoc+0x107b/0x1830 [ 2001.256194][ T4876] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 2001.262236][ T4876] ? __local_bh_enable_ip+0x136/0x1c0 [ 2001.267646][ T4876] ? _local_bh_enable+0xa0/0xa0 [ 2001.272546][ T4876] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2001.278417][ T4876] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2001.284279][ T4876] ? sctp_sendmsg_check_sflags+0x18d/0x2d0 [ 2001.290146][ T4876] sctp_sendmsg+0x1984/0x2940 [ 2001.294914][ T4876] ? aa_sk_perm+0x791/0x950 [ 2001.299473][ T4876] ? sctp_getsockopt+0x8a0/0x8a0 [ 2001.304490][ T4876] ? __might_fault+0xa6/0x120 [ 2001.309227][ T4876] ? aa_af_perm+0x340/0x340 [ 2001.313777][ T4876] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2001.320702][ T4876] ? inet_sendmsg+0x78/0x2f0 [ 2001.325524][ T4876] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2001.330862][ T4876] ? security_socket_sendmsg+0x7c/0xa0 [ 2001.336488][ T4876] ? inet_send_prepare+0x260/0x260 [ 2001.341738][ T4876] ____sys_sendmsg+0x5be/0x970 [ 2001.346915][ T4876] ? __sys_sendmsg_sock+0x30/0x30 [ 2001.352081][ T4876] ? __import_iovec+0x315/0x500 [ 2001.357169][ T4876] ? import_iovec+0x6f/0xa0 [ 2001.361735][ T4876] ___sys_sendmsg+0x2a2/0x360 [ 2001.366488][ T4876] ? __sys_sendmsg+0x290/0x290 [ 2001.371539][ T4876] ? __lock_acquire+0x7d10/0x7d10 [ 2001.376734][ T4876] __se_sys_sendmsg+0x1bb/0x2a0 [ 2001.381646][ T4876] ? __x64_sys_sendmsg+0x80/0x80 [ 2001.386660][ T4876] ? lockdep_hardirqs_on+0x94/0x140 [ 2001.391929][ T4876] do_syscall_64+0x4c/0xa0 [ 2001.396183][ T4874] netlink: 'syz.1.9846': attribute type 29 has an invalid length. [ 2001.396475][ T4876] ? clear_bhb_loop+0x60/0xb0 [ 2001.396508][ T4876] ? clear_bhb_loop+0x60/0xb0 [ 2001.396537][ T4876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2001.396562][ T4876] RIP: 0033:0x7fe54759c819 [ 2001.396584][ T4876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2001.396604][ T4876] RSP: 002b:00007fe5483e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2001.396630][ T4876] RAX: ffffffffffffffda RBX: 00007fe547815fa0 RCX: 00007fe54759c819 [ 2001.396645][ T4876] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2001.396660][ T4876] RBP: 00007fe5483e2090 R08: 0000000000000000 R09: 0000000000000000 [ 2001.476629][ T4876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2001.484620][ T4876] R13: 00007fe547816038 R14: 00007fe547815fa0 R15: 00007fff9ee5b308 [ 2001.492620][ T4876] [ 2001.530092][ T4874] netlink: 'syz.1.9846': attribute type 29 has an invalid length. [ 2001.798081][ T4874] netlink: 'syz.1.9846': attribute type 29 has an invalid length. [ 2001.897608][ T4874] netlink: 'syz.1.9846': attribute type 29 has an invalid length. [ 2002.008469][ T4898] netlink: 'syz.3.9851': attribute type 2 has an invalid length. [ 2002.041980][ T4898] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9851'. [ 2002.279399][ T4907] netlink: 'syz.1.9853': attribute type 2 has an invalid length. [ 2002.284591][ T39] tipc: Subscription rejected, illegal request [ 2002.350392][ T4907] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9853'. [ 2002.496520][ T4914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9859'. [ 2003.400333][ T4914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9859'. [ 2003.460268][ T4933] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9861'. [ 2003.781918][T23615] Bluetooth: hci3: command 0x0406 tx timeout [ 2004.013591][ T4952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2004.059028][ T4952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2004.073605][ T4952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2004.094854][ T4952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2004.329912][ T4949] netlink: 'syz.0.9864': attribute type 29 has an invalid length. [ 2004.642167][ T4949] netlink: 'syz.0.9864': attribute type 29 has an invalid length. [ 2004.790361][ T4956] netlink: 'syz.0.9864': attribute type 29 has an invalid length. [ 2005.090570][ T4970] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.9875'. [ 2007.752197][ T4995] netlink: 'syz.0.9882': attribute type 3 has an invalid length. [ 2008.013488][ T4995] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9882'. [ 2008.391846][ T5003] netlink: 'syz.1.9883': attribute type 27 has an invalid length. [ 2008.433562][ T5003] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9883'. [ 2008.486420][ T5004] netlink: 'syz.1.9883': attribute type 10 has an invalid length. [ 2008.563119][ T5004] team0: Port device wlan1 added [ 2008.677263][ T5011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9886'. [ 2010.112978][ T5035] netlink: 'syz.1.9893': attribute type 1 has an invalid length. [ 2010.277475][ T5035] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9893'. [ 2010.370312][ T5009] netlink: 'syz.3.9885': attribute type 29 has an invalid length. [ 2010.448302][ T5009] netlink: 'syz.3.9885': attribute type 29 has an invalid length. [ 2010.981948][ T4992] wlan1: Trigger new scan to find an IBSS to join [ 2011.188795][ T5062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9902'. [ 2011.274867][ T5062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9902'. [ 2011.411194][ T5067] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9902'. [ 2011.547571][ T5069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9902'. [ 2012.291092][ T5086] netlink: 'syz.0.9907': attribute type 1 has an invalid length. [ 2012.317962][ T5086] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9907'. [ 2012.320080][ T5089] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9908'. [ 2013.385189][ T5094] netlink: 'syz.2.9910': attribute type 29 has an invalid length. [ 2013.595416][ T5094] netlink: 'syz.2.9910': attribute type 29 has an invalid length. [ 2013.981317][T31850] wlan1: Trigger new scan to find an IBSS to join [ 2014.067765][ T5109] netlink: 'syz.2.9910': attribute type 29 has an invalid length. [ 2014.088602][ T5114] netlink: 'syz.2.9910': attribute type 29 has an invalid length. [ 2014.704436][ T5124] netlink: 'syz.1.9920': attribute type 12 has an invalid length. [ 2014.712656][ T5124] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9920'. [ 2015.378080][ T5126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9921'. [ 2015.696055][ T4322] wlan1: Creating new IBSS network, BSSID 62:61:3d:99:11:4b [ 2015.729233][ T5126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9921'. [ 2015.780421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2015.867099][ T5128] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9921'. [ 2015.931057][ T5131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9921'. [ 2016.085804][ T5139] netlink: 'syz.2.9925': attribute type 1 has an invalid length. [ 2016.154061][ T5139] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.9925'. [ 2017.400824][ T5168] FAULT_INJECTION: forcing a failure. [ 2017.400824][ T5168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2017.442681][ T5168] CPU: 0 PID: 5168 Comm: syz.1.9934 Not tainted syzkaller #0 [ 2017.450154][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2017.460271][ T5168] Call Trace: [ 2017.463679][ T5168] [ 2017.466675][ T5168] dump_stack_lvl+0x188/0x24e [ 2017.471428][ T5168] ? show_regs_print_info+0x12/0x12 [ 2017.476777][ T5168] ? load_image+0x400/0x400 [ 2017.481439][ T5168] ? __lock_acquire+0x7d10/0x7d10 [ 2017.486620][ T5168] should_fail_ex+0x399/0x4d0 [ 2017.491363][ T5168] _copy_from_user+0x2c/0x170 [ 2017.496113][ T5168] iovec_from_user+0x143/0x360 [ 2017.501029][ T5168] __import_iovec+0x6d/0x500 [ 2017.505689][ T5168] import_iovec+0x6f/0xa0 [ 2017.510076][ T5168] ___sys_sendmsg+0x252/0x360 [ 2017.514828][ T5168] ? __sys_sendmsg+0x290/0x290 [ 2017.519696][ T5168] ? __lock_acquire+0x7d10/0x7d10 [ 2017.524836][ T5168] __se_sys_sendmsg+0x1bb/0x2a0 [ 2017.529743][ T5168] ? __x64_sys_sendmsg+0x80/0x80 [ 2017.534769][ T5168] ? lockdep_hardirqs_on+0x94/0x140 [ 2017.540030][ T5168] do_syscall_64+0x4c/0xa0 [ 2017.544502][ T5168] ? clear_bhb_loop+0x60/0xb0 [ 2017.549222][ T5168] ? clear_bhb_loop+0x60/0xb0 [ 2017.553953][ T5168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2017.559896][ T5168] RIP: 0033:0x7f27dd79c819 [ 2017.564452][ T5168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2017.584129][ T5168] RSP: 002b:00007f27db9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2017.592591][ T5168] RAX: ffffffffffffffda RBX: 00007f27dda15fa0 RCX: 00007f27dd79c819 [ 2017.600702][ T5168] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2017.608807][ T5168] RBP: 00007f27db9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2017.616996][ T5168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2017.625093][ T5168] R13: 00007f27dda16038 R14: 00007f27dda15fa0 R15: 00007fff7dd67318 [ 2017.633241][ T5168] [ 2018.129491][ T5173] netlink: 'syz.4.9938': attribute type 1 has an invalid length. [ 2018.166315][ T5176] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9937'. [ 2018.186589][ T5173] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.9938'. [ 2018.286250][ T5176] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9937'. [ 2018.306110][ T5179] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9937'. [ 2018.688859][ T5189] device syzkaller0 entered promiscuous mode [ 2019.094563][T31536] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2019.102456][T31536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2019.116714][T31536] CPU: 1 PID: 31536 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2019.124532][T31536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2019.134642][T31536] Workqueue: hci3 hci_rx_work [ 2019.139372][T31536] Call Trace: [ 2019.142688][T31536] [ 2019.145653][T31536] dump_stack_lvl+0x188/0x24e [ 2019.150397][T31536] ? show_regs_print_info+0x12/0x12 [ 2019.155652][T31536] ? load_image+0x400/0x400 [ 2019.160212][T31536] sysfs_create_dir_ns+0x26a/0x290 [ 2019.165382][T31536] ? sysfs_warn_dup+0xa0/0xa0 [ 2019.170109][T31536] ? do_raw_spin_unlock+0x11d/0x230 [ 2019.175366][T31536] kobject_add_internal+0x61c/0xcc0 [ 2019.180616][T31536] kobject_add+0x160/0x230 [ 2019.185097][T31536] ? kobject_init+0x1d0/0x1d0 [ 2019.189859][T31536] ? klist_children_get+0x50/0x50 [ 2019.194960][T31536] ? get_device_parent+0x121/0x3f0 [ 2019.200144][T31536] device_add+0x483/0xfb0 [ 2019.204613][T31536] ? kmem_cache_free+0xf7/0x290 [ 2019.209514][T31536] hci_conn_add_sysfs+0xd1/0x1e0 [ 2019.214510][T31536] le_conn_complete_evt+0x1062/0x1670 [ 2019.219965][T31536] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2019.226444][T31536] ? bt_info+0x180/0x180 [ 2019.230739][T31536] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2019.236538][T31536] ? skb_pull_data+0xf7/0x200 [ 2019.241311][T31536] hci_le_conn_complete_evt+0x183/0x440 [ 2019.246913][T31536] ? hci_remote_host_features_evt+0x270/0x270 [ 2019.253036][T31536] hci_event_packet+0x7b9/0x1280 [ 2019.258052][T31536] ? bis_list+0x280/0x280 [ 2019.262444][T31536] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2019.268403][T31536] ? kcov_remote_start+0x4c7/0x7e0 [ 2019.273654][T31536] ? patch_conexant_auto+0x1260/0x1650 [ 2019.279164][T31536] ? hci_send_to_monitor+0x9c/0x4a0 [ 2019.284414][T31536] hci_rx_work+0x3eb/0xd40 [ 2019.288976][T31536] ? _raw_spin_unlock+0x40/0x40 [ 2019.294059][T31536] ? process_one_work+0x7b0/0x1160 [ 2019.299352][T31536] process_one_work+0x8a2/0x1160 [ 2019.304365][T31536] ? worker_detach_from_pool+0x240/0x240 [ 2019.310047][T31536] ? _raw_spin_lock_irq+0x86/0xf0 [ 2019.315216][T31536] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2019.320266][T31536] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2019.325842][T31536] ? kthread_data+0x4b/0xc0 [ 2019.330394][T31536] worker_thread+0xaa2/0x1270 [ 2019.335309][T31536] ? __kthread_parkme+0x162/0x1c0 [ 2019.340393][T31536] kthread+0x29d/0x330 [ 2019.344506][T31536] ? worker_clr_flags+0x1a0/0x1a0 [ 2019.349657][T31536] ? kthread_blkcg+0xd0/0xd0 [ 2019.354271][T31536] ret_from_fork+0x1f/0x30 [ 2019.358830][T31536] [ 2019.365388][T31536] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2019.379674][T31536] Bluetooth: hci3: failed to register connection device [ 2022.533672][ T5233] netlink: 'syz.0.9950': attribute type 1 has an invalid length. [ 2022.541494][ T5233] __nla_validate_parse: 2 callbacks suppressed [ 2022.541510][ T5233] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9950'. [ 2022.837278][ T5243] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9953'. [ 2023.898019][ T5252] netlink: 'syz.1.9955': attribute type 1 has an invalid length. [ 2023.928515][ T5252] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9955'. [ 2024.244611][T31536] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2024.252336][T31536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2025.677312][ T5204] netlink: 'syz.2.9942': attribute type 13 has an invalid length. [ 2025.686478][ T5204] netlink: 'syz.2.9942': attribute type 58 has an invalid length. [ 2025.694449][ T5204] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9942'. [ 2025.713272][ T5243] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9953'. [ 2026.598937][T23615] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2026.606620][T23615] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2026.670076][ T39] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2026.736664][ T5278] tun0: tun_chr_ioctl cmd 2147767507 [ 2027.179347][ T5306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9974'. [ 2027.182588][ T5304] netlink: 'syz.0.9973': attribute type 1 has an invalid length. [ 2027.203523][ T5306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9974'. [ 2027.268024][ T5336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9974'. [ 2027.397107][ T5306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9974'. [ 2027.426947][ T5304] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9973'. [ 2028.729441][T23615] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2028.737874][T23615] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2028.971070][ T5416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9990'. [ 2028.981003][ T5416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9990'. [ 2028.994958][ T5416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9990'. [ 2029.005657][ T5416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9990'. [ 2029.155978][ T5418] netlink: 'syz.0.9988': attribute type 10 has an invalid length. [ 2029.175992][ T5418] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9988'. [ 2029.518876][ T5430] netlink: 'syz.2.9992': attribute type 1 has an invalid length. [ 2029.547243][ T5430] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.9992'. [ 2030.036551][T23615] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2030.044187][T23615] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2031.107268][ T5492] netlink: 'syz.1.9999': attribute type 2 has an invalid length. [ 2031.152671][ T5492] netlink: 'syz.1.9999': attribute type 1 has an invalid length. [ 2031.187241][ T5492] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9999'. [ 2031.230425][ T5499] netlink: 'syz.1.9999': attribute type 21 has an invalid length. [ 2031.260400][ T5499] netlink: 'syz.1.9999': attribute type 3 has an invalid length. [ 2031.304472][ T5499] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9999'. [ 2031.746167][ T5507] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10004'. [ 2031.809321][ T5507] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10004'. [ 2032.197067][ T5512] tun0: tun_chr_ioctl cmd 1074025675 [ 2032.216258][ T5512] tun0: persist enabled [ 2032.227311][ T5512] tun0: tun_chr_ioctl cmd 1074025675 [ 2032.247041][ T5512] tun0: persist enabled [ 2032.336622][T31536] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2032.344315][T31536] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2032.727628][T23615] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2032.735385][T23615] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2032.963691][ T5531] netlink: 'syz.1.10011': attribute type 2 has an invalid length. [ 2033.134292][ T5533] netlink: 'syz.3.10013': attribute type 1 has an invalid length. [ 2034.043969][ T5591] netlink: 'syz.2.10018': attribute type 2 has an invalid length. [ 2034.183148][ T5591] netlink: 'syz.2.10018': attribute type 8 has an invalid length. [ 2034.191149][ T5591] __nla_validate_parse: 4 callbacks suppressed [ 2034.191165][ T5591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10018'. [ 2034.199203][ T5595] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10021'. [ 2034.232138][ T5595] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10021'. [ 2034.337435][ T5598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10021'. [ 2034.477791][ T5595] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10021'. [ 2034.878524][ T5597] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10022'. [ 2035.000204][T31536] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2035.007813][T31536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2037.567228][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.573788][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.011658][ T5644] netlink: 'syz.0.10032': attribute type 3 has an invalid length. [ 2038.296994][ T5644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10032'. [ 2038.994863][ T5658] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10036'. [ 2039.090151][T31536] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2039.097910][T31536] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2039.332045][ T5664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10037'. [ 2039.341433][ T5664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10037'. [ 2039.427177][ T5667] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.10040'. [ 2039.438037][ T5670] FAULT_INJECTION: forcing a failure. [ 2039.438037][ T5670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2039.482151][ T5664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10037'. [ 2039.518228][ T5674] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10037'. [ 2039.525875][ T5670] CPU: 0 PID: 5670 Comm: syz.3.10041 Not tainted syzkaller #0 [ 2039.534919][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2039.545104][ T5670] Call Trace: [ 2039.548559][ T5670] [ 2039.551524][ T5670] dump_stack_lvl+0x188/0x24e [ 2039.556260][ T5670] ? show_regs_print_info+0x12/0x12 [ 2039.561527][ T5670] ? load_image+0x400/0x400 [ 2039.566173][ T5670] ? __lock_acquire+0x7d10/0x7d10 [ 2039.571254][ T5670] ? snprintf+0xe5/0x140 [ 2039.575631][ T5670] should_fail_ex+0x399/0x4d0 [ 2039.580362][ T5670] _copy_to_user+0x2c/0x130 [ 2039.584926][ T5670] simple_read_from_buffer+0xe3/0x150 [ 2039.590360][ T5670] proc_fail_nth_read+0x1a6/0x220 [ 2039.595436][ T5670] ? proc_fault_inject_write+0x310/0x310 [ 2039.601248][ T5670] ? fsnotify_perm+0x248/0x550 [ 2039.606046][ T5670] ? proc_fault_inject_write+0x310/0x310 [ 2039.611714][ T5670] vfs_read+0x2de/0xa00 [ 2039.615906][ T5670] ? kernel_read+0x1e0/0x1e0 [ 2039.620521][ T5670] ? __fget_files+0x28/0x4b0 [ 2039.625149][ T5670] ? __fget_files+0x28/0x4b0 [ 2039.629763][ T5670] ? __fget_files+0x43d/0x4b0 [ 2039.634480][ T5670] ? __fdget_pos+0x2ae/0x360 [ 2039.639087][ T5670] ? ksys_read+0x71/0x250 [ 2039.643442][ T5670] ksys_read+0x14c/0x250 [ 2039.647710][ T5670] ? vfs_write+0xa30/0xa30 [ 2039.652150][ T5670] ? lockdep_hardirqs_on+0x94/0x140 [ 2039.657363][ T5670] do_syscall_64+0x4c/0xa0 [ 2039.661798][ T5670] ? clear_bhb_loop+0x60/0xb0 [ 2039.666588][ T5670] ? clear_bhb_loop+0x60/0xb0 [ 2039.671290][ T5670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2039.677292][ T5670] RIP: 0033:0x7f4fbd95d04e [ 2039.681724][ T5670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2039.701343][ T5670] RSP: 002b:00007f4fbe7bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2039.709782][ T5670] RAX: ffffffffffffffda RBX: 00007f4fbe7c06c0 RCX: 00007f4fbd95d04e [ 2039.717769][ T5670] RDX: 000000000000000f RSI: 00007f4fbe7c00a0 RDI: 0000000000000004 [ 2039.725761][ T5670] RBP: 00007f4fbe7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 2039.733755][ T5670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2039.741770][ T5670] R13: 00007f4fbdc16038 R14: 00007f4fbdc15fa0 R15: 00007ffe3816c3e8 [ 2039.749796][ T5670] [ 2040.928933][ T5691] netlink: 'syz.2.10057': attribute type 3 has an invalid length. [ 2041.021867][ T5691] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10057'. [ 2042.056563][T31536] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 2042.454059][ T5726] netlink: 'syz.3.10054': attribute type 2 has an invalid length. [ 2042.516555][ T5726] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10054'. [ 2042.893686][ T5736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10061'. [ 2043.059705][ T5736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10061'. [ 2043.112560][ T5738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10061'. [ 2043.423182][ T5754] netlink: 'syz.3.10062': attribute type 4 has an invalid length. [ 2043.477188][ T5754] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2044.019965][T31536] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2044.027616][T31536] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2044.710126][ T5791] __nla_validate_parse: 4 callbacks suppressed [ 2044.710150][ T5791] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10075'. [ 2044.818527][ T5793] netlink: 'syz.0.10073': attribute type 10 has an invalid length. [ 2044.896690][ T5793] device veth1_macvtap left promiscuous mode [ 2045.231459][ T5791] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10075'. [ 2045.318503][ T5794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10075'. [ 2045.377447][ T5797] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10075'. [ 2045.718314][ T4992] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2045.733955][T31536] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2045.742578][T31536] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2045.800353][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2045.886543][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2046.026577][ T5817] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.10080'. [ 2046.118289][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2046.144969][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2046.697261][ T5820] netlink: 'syz.0.10081': attribute type 10 has an invalid length. [ 2046.717582][ T5820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10081'. [ 2046.732555][ T5817] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2046.744082][ T5817] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2046.761292][ T5817] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2046.863706][ T5833] netlink: 207840 bytes leftover after parsing attributes in process `syz.2.10086'. [ 2047.190724][ T5849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10093'. [ 2047.191450][ T5845] netlink: 'syz.4.10092': attribute type 10 has an invalid length. [ 2047.269160][ T5849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10093'. [ 2047.322243][ T5850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10093'. [ 2047.360593][T23615] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2047.369102][T23615] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2047.648053][ T5861] netlink: 'syz.3.10098': attribute type 10 has an invalid length. [ 2047.693685][ T5861] device hsr0 entered promiscuous mode [ 2047.727234][ T5861] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2047.811971][ T5861] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2047.878096][ T5861] bond0: (slave hsr0): Error -95 calling set_mac_address [ 2048.294679][ T5868] netlink: 'syz.4.10099': attribute type 2 has an invalid length. [ 2048.313777][ T5877] pimreg0: tun_chr_ioctl cmd 35111 [ 2048.445863][T23615] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2048.453820][T23615] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2048.930591][ T5901] netlink: 'syz.1.10110': attribute type 10 has an invalid length. [ 2048.975122][ T5901] device veth1_macvtap left promiscuous mode [ 2049.543339][ T5914] FAULT_INJECTION: forcing a failure. [ 2049.543339][ T5914] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.656852][ T5914] CPU: 1 PID: 5914 Comm: syz.0.10114 Not tainted syzkaller #0 [ 2049.664513][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2049.674623][ T5914] Call Trace: [ 2049.677956][ T5914] [ 2049.680942][ T5914] dump_stack_lvl+0x188/0x24e [ 2049.685697][ T5914] ? show_regs_print_info+0x12/0x12 [ 2049.690975][ T5914] ? load_image+0x400/0x400 [ 2049.695570][ T5914] ? __might_sleep+0xd0/0xd0 [ 2049.700231][ T5914] ? __lock_acquire+0x7d10/0x7d10 [ 2049.705362][ T5914] should_fail_ex+0x399/0x4d0 [ 2049.710120][ T5914] should_failslab+0x5/0x20 [ 2049.714680][ T5914] slab_pre_alloc_hook+0x59/0x310 [ 2049.719869][ T5914] kmem_cache_alloc_node+0x5a/0x320 [ 2049.725135][ T5914] ? __alloc_skb+0xfc/0x7e0 [ 2049.729829][ T5914] __alloc_skb+0xfc/0x7e0 [ 2049.734447][ T5914] __ip6_append_data+0x2bb8/0x3d40 [ 2049.739759][ T5914] ? rawv6_send_hdrinc+0x16c0/0x16c0 [ 2049.745566][ T5914] ? ip6_mtu+0x79/0x3f0 [ 2049.749886][ T5914] ? ip6_setup_cork+0xfe0/0xfe0 [ 2049.754819][ T5914] ? ip6_setup_cork+0xa30/0xfe0 [ 2049.760136][ T5914] ip6_append_data+0x1ea/0x3e0 [ 2049.765108][ T5914] ? rawv6_send_hdrinc+0x16c0/0x16c0 [ 2049.770469][ T5914] rawv6_sendmsg+0x1224/0x1700 [ 2049.775414][ T5914] ? compat_rawv6_ioctl+0x60/0x60 [ 2049.780506][ T5914] ? aa_sk_perm+0x81f/0x950 [ 2049.785075][ T5914] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 2049.791557][ T5914] ? inet_sendmsg+0x78/0x2f0 [ 2049.796175][ T5914] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2049.801850][ T5914] ? security_socket_sendmsg+0x7c/0xa0 [ 2049.807445][ T5914] ? inet_send_prepare+0x260/0x260 [ 2049.812591][ T5914] ____sys_sendmsg+0x5be/0x970 [ 2049.817431][ T5914] ? __sys_sendmsg_sock+0x30/0x30 [ 2049.822494][ T5914] ? __import_iovec+0x315/0x500 [ 2049.827486][ T5914] ? import_iovec+0x6f/0xa0 [ 2049.832138][ T5914] ___sys_sendmsg+0x2a2/0x360 [ 2049.836888][ T5914] ? __sys_sendmsg+0x290/0x290 [ 2049.841928][ T5914] ? __lock_acquire+0x7d10/0x7d10 [ 2049.847124][ T5914] __se_sys_sendmsg+0x1bb/0x2a0 [ 2049.852232][ T5914] ? __x64_sys_sendmsg+0x80/0x80 [ 2049.857293][ T5914] ? lockdep_hardirqs_on+0x94/0x140 [ 2049.862558][ T5914] do_syscall_64+0x4c/0xa0 [ 2049.867033][ T5914] ? clear_bhb_loop+0x60/0xb0 [ 2049.871760][ T5914] ? clear_bhb_loop+0x60/0xb0 [ 2049.876772][ T5914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2049.882748][ T5914] RIP: 0033:0x7f59cd79c819 [ 2049.887216][ T5914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2049.907037][ T5914] RSP: 002b:00007f59ce6db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2049.915487][ T5914] RAX: ffffffffffffffda RBX: 00007f59cda16090 RCX: 00007f59cd79c819 [ 2049.923750][ T5914] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000c [ 2049.931837][ T5914] RBP: 00007f59ce6db090 R08: 0000000000000000 R09: 0000000000000000 [ 2049.939836][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2049.947837][ T5914] R13: 00007f59cda16128 R14: 00007f59cda16090 R15: 00007fff7f8242e8 [ 2049.955880][ T5914] [ 2050.163273][T31536] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2050.171299][T31536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2050.407550][ T5929] __nla_validate_parse: 10 callbacks suppressed [ 2050.407573][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10122'. [ 2050.424090][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10122'. [ 2050.474986][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10122'. [ 2050.518922][ T5934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10125'. [ 2050.538932][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10122'. [ 2050.571066][ T5934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10125'. [ 2050.582580][ T5937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10125'. [ 2050.664015][ T5934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10125'. [ 2050.801129][ T5945] netlink: 'syz.4.10128': attribute type 1 has an invalid length. [ 2050.872331][ T5945] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.10128'. [ 2051.643645][T31536] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2051.651633][T31536] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 2051.760614][ T5967] netlink: 'syz.2.10134': attribute type 6 has an invalid length. [ 2051.768699][ T5967] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10134'. [ 2053.053173][ T5997] netlink: 'syz.3.10142': attribute type 1 has an invalid length. [ 2053.325849][ T6004] netlink: 'syz.2.10146': attribute type 2 has an invalid length. [ 2053.382332][ T6004] netlink: 'syz.2.10146': attribute type 1 has an invalid length. [ 2053.423022][T31536] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 2053.430563][T31536] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 2053.608070][ T6012] tap0: tun_chr_ioctl cmd 1074025677 [ 2053.629484][ T6012] tap0: linktype set to 780 [ 2053.639796][ T6012] netlink: 'syz.1.10149': attribute type 21 has an invalid length. [ 2053.661959][ T6012] netlink: 'syz.1.10149': attribute type 4 has an invalid length. [ 2053.940807][ T6020] netlink: 'syz.3.10153': attribute type 27 has an invalid length. [ 2053.964509][ T6020] netlink: 'syz.3.10153': attribute type 3 has an invalid length. [ 2054.293109][ T6028] netlink: 'syz.2.10155': attribute type 1 has an invalid length. [ 2054.638483][T31536] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2054.646360][T31536] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2055.486539][ T6064] __nla_validate_parse: 16 callbacks suppressed [ 2055.486562][ T6064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10166'. [ 2055.515477][ T6064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10166'. [ 2055.531321][ T6064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10166'. [ 2055.548327][ T6065] netlink: 'syz.0.10167': attribute type 2 has an invalid length. [ 2055.557887][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10167'. [ 2055.573017][ T6064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10166'. [ 2056.271401][T31536] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2056.279458][T31536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2058.277442][ T6113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10181'. [ 2058.420608][ T6113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10181'. [ 2058.524631][ T5333] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2058.749168][T31536] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2058.757790][T31536] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2058.774714][ T6115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10181'. [ 2058.902159][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10181'. [ 2059.335945][ T6141] veth0_vlan: mtu greater than device maximum [ 2059.492454][ T6143] validate_nla: 4 callbacks suppressed [ 2059.492546][ T6143] netlink: 'syz.3.10192': attribute type 21 has an invalid length. [ 2060.278764][T23615] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2060.286645][T23615] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2061.350740][ T6170] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10200'. [ 2061.535865][ T6175] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10203'. [ 2061.634491][ T6175] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10203'. [ 2061.722708][ T6180] netlink: 'syz.4.10205': attribute type 2 has an invalid length. [ 2061.741464][ T6178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10203'. [ 2061.810601][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10203'. [ 2063.710434][ T6180] device 0 entered promiscuous mode [ 2064.156957][ T6193] netlink: 'syz.0.10202': attribute type 39 has an invalid length. [ 2064.489898][T23615] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2064.497879][T23615] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2064.749703][ T6224] netlink: 'syz.3.10210': attribute type 21 has an invalid length. [ 2064.804572][ T6224] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10210'. [ 2065.540076][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10216'. [ 2065.549884][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10216'. [ 2065.560945][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10216'. [ 2065.612236][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10216'. [ 2065.728105][ T6246] netlink: 'syz.2.10217': attribute type 2 has an invalid length. [ 2066.949584][ T6269] netlink: 'syz.3.10223': attribute type 29 has an invalid length. [ 2066.991899][ T6269] netlink: 'syz.3.10223': attribute type 29 has an invalid length. [ 2067.024979][ T6273] netlink: 'syz.3.10223': attribute type 29 has an invalid length. [ 2067.053185][ T6269] netlink: 'syz.3.10223': attribute type 29 has an invalid length. [ 2067.076961][ T6269] netlink: 'syz.3.10223': attribute type 29 has an invalid length. [ 2067.109631][T31536] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2067.117901][T31536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2067.984355][ T6300] veth0_vlan: mtu greater than device maximum [ 2068.222734][ T6304] __nla_validate_parse: 5 callbacks suppressed [ 2068.222754][ T6304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10233'. [ 2068.321869][ T6304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10233'. [ 2068.397372][ T6307] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10233'. [ 2068.412977][ T6304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10233'. [ 2068.739838][ T6309] netlink: 'syz.0.10234': attribute type 1 has an invalid length. [ 2068.841250][ T6309] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.10234'. [ 2069.225939][ T6326] netlink: 'syz.1.10240': attribute type 2 has an invalid length. [ 2069.261814][ T6326] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.10240'. [ 2070.210963][ T6352] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10248'. [ 2070.331345][ T6361] netlink: 'syz.4.10250': attribute type 1 has an invalid length. [ 2070.401575][ T6361] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.10250'. [ 2070.919417][ T6352] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10248'. [ 2070.955352][ T6362] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10248'. [ 2071.074047][T23615] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2071.081644][T23615] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2071.602700][ T6380] netlink: 'syz.0.10258': attribute type 21 has an invalid length. [ 2071.766281][ T6388] netlink: 'syz.3.10262': attribute type 2 has an invalid length. [ 2072.228980][ T6403] netlink: 'syz.2.10267': attribute type 1 has an invalid length. [ 2072.323718][T31536] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2072.331257][T31536] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 2073.725815][ T6428] __nla_validate_parse: 8 callbacks suppressed [ 2073.725836][ T6428] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10277'. [ 2074.388439][ T6435] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10279'. [ 2074.432175][T31536] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2074.433248][ T6435] device hsr_slave_0 left promiscuous mode [ 2074.439692][T31536] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2074.536509][ T6435] device hsr_slave_1 left promiscuous mode [ 2075.172946][ T6450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10285'. [ 2075.269384][ T6443] netlink: 'syz.2.10282': attribute type 21 has an invalid length. [ 2075.302559][ T6446] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10282'. [ 2075.342284][ T6450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10285'. [ 2075.354909][ T6451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10285'. [ 2075.394650][ T6454] netlink: 'syz.0.10286': attribute type 21 has an invalid length. [ 2075.414629][ T6454] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10286'. [ 2075.450415][ T6457] netlink: 'syz.0.10286': attribute type 49 has an invalid length. [ 2075.501188][ T6453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10285'. [ 2075.696388][ T6468] netlink: 'syz.0.10290': attribute type 1 has an invalid length. [ 2075.734948][ T6468] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.10290'. [ 2075.931517][T31536] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2075.939263][T31536] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 2076.361229][ T6498] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10302'. [ 2076.842386][ T4992] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2076.871146][ T6517] netlink: 'syz.1.10308': attribute type 1 has an invalid length. [ 2077.135384][T31536] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2077.142999][T31536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2077.209876][ T6526] netlink: 'syz.0.10312': attribute type 2 has an invalid length. [ 2077.379334][ T6529] FAULT_INJECTION: forcing a failure. [ 2077.379334][ T6529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.416704][ T6529] CPU: 1 PID: 6529 Comm: syz.1.10314 Not tainted syzkaller #0 [ 2077.424433][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2077.434620][ T6529] Call Trace: [ 2077.437937][ T6529] [ 2077.441021][ T6529] dump_stack_lvl+0x188/0x24e [ 2077.445854][ T6529] ? show_regs_print_info+0x12/0x12 [ 2077.451103][ T6529] ? load_image+0x400/0x400 [ 2077.455664][ T6529] ? __lock_acquire+0x7d10/0x7d10 [ 2077.460752][ T6529] should_fail_ex+0x399/0x4d0 [ 2077.465474][ T6529] _copy_from_iter+0x1c0/0x1130 [ 2077.470362][ T6529] ? __lock_acquire+0x7d10/0x7d10 [ 2077.475434][ T6529] ? __kmem_cache_alloc_node+0x140/0x260 [ 2077.481116][ T6529] ? copyout_mc+0x110/0x110 [ 2077.485664][ T6529] ? __virt_addr_valid+0x188/0x540 [ 2077.490894][ T6529] ? __virt_addr_valid+0x188/0x540 [ 2077.496121][ T6529] ? __virt_addr_valid+0x465/0x540 [ 2077.501261][ T6529] ? __phys_addr_symbol+0x2b/0x70 [ 2077.506342][ T6529] ? __check_object_size+0x500/0xa40 [ 2077.511648][ T6529] tipc_msg_build+0x7f1/0xde0 [ 2077.516370][ T6529] tipc_send_group_bcast+0x7d4/0xad0 [ 2077.521717][ T6529] ? tipc_wait_for_connect+0x640/0x640 [ 2077.527288][ T6529] ? verify_lock_unused+0x140/0x140 [ 2077.532504][ T6529] ? tomoyo_check_open_permission+0x1bf/0x440 [ 2077.538585][ T6529] ? wait_woken+0x1c0/0x1c0 [ 2077.543118][ T6529] ? mark_lock+0x94/0x320 [ 2077.547478][ T6529] __tipc_sendmsg+0x332/0x2c90 [ 2077.552360][ T6529] ? rht_lock+0x150/0x150 [ 2077.556713][ T6529] ? verify_lock_unused+0x140/0x140 [ 2077.561933][ T6529] ? verify_lock_unused+0x140/0x140 [ 2077.567162][ T6529] ? __might_sleep+0xd0/0xd0 [ 2077.571769][ T6529] ? mark_lock+0x94/0x320 [ 2077.576121][ T6529] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2077.582129][ T6529] ? __local_bh_enable_ip+0x136/0x1c0 [ 2077.587529][ T6529] ? lockdep_hardirqs_on+0x94/0x140 [ 2077.592751][ T6529] ? __local_bh_enable_ip+0x136/0x1c0 [ 2077.598136][ T6529] ? _local_bh_enable+0xa0/0xa0 [ 2077.603012][ T6529] tipc_sendmsg+0x51/0x70 [ 2077.607359][ T6529] sock_write_iter+0x2d9/0x3e0 [ 2077.612321][ T6529] ? sock_read_iter+0x3a0/0x3a0 [ 2077.617290][ T6529] ? common_file_perm+0x171/0x1c0 [ 2077.622335][ T6529] vfs_write+0x4b1/0xa30 [ 2077.626685][ T6529] ? file_end_write+0x250/0x250 [ 2077.631652][ T6529] ? __fget_files+0x43d/0x4b0 [ 2077.636412][ T6529] ? __fdget_pos+0x1d4/0x360 [ 2077.641123][ T6529] ? ksys_write+0x71/0x250 [ 2077.645680][ T6529] ksys_write+0x14c/0x250 [ 2077.650067][ T6529] ? __ia32_sys_read+0x80/0x80 [ 2077.654870][ T6529] ? lockdep_hardirqs_on+0x94/0x140 [ 2077.660095][ T6529] do_syscall_64+0x4c/0xa0 [ 2077.664542][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 2077.669239][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 2077.673938][ T6529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2077.679852][ T6529] RIP: 0033:0x7f27dd79c819 [ 2077.684294][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2077.704181][ T6529] RSP: 002b:00007f27db9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2077.713059][ T6529] RAX: ffffffffffffffda RBX: 00007f27dda15fa0 RCX: 00007f27dd79c819 [ 2077.721041][ T6529] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 2077.729112][ T6529] RBP: 00007f27db9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2077.737183][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2077.745311][ T6529] R13: 00007f27dda16038 R14: 00007f27dda15fa0 R15: 00007fff7dd67318 [ 2077.753428][ T6529] [ 2078.217439][ T6546] netlink: 'syz.3.10321': attribute type 2 has an invalid length. [ 2078.532426][ T6550] netlink: 'syz.4.10320': attribute type 4 has an invalid length. [ 2080.682784][ T6568] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 2080.713294][ T6565] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2080.966277][T31536] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2080.973920][T31536] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2081.253686][ T6587] __nla_validate_parse: 13 callbacks suppressed [ 2081.253707][ T6587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10331'. [ 2081.293206][ T6587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10331'. [ 2081.343661][ T6590] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10331'. [ 2081.358649][ T6587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10331'. [ 2081.502295][ T6598] netlink: 'syz.0.10335': attribute type 2 has an invalid length. [ 2081.524394][ T6598] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.10335'. [ 2082.145855][ T6608] netlink: 'syz.2.10338': attribute type 3 has an invalid length. [ 2082.216988][ T6608] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10338'. [ 2082.324679][ T6609] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.10338'. [ 2082.378429][ T6603] netlink: 'syz.3.10336': attribute type 21 has an invalid length. [ 2082.384691][ T6609] netlink: zone id is out of range [ 2082.388497][ T6603] netlink: 'syz.3.10336': attribute type 11 has an invalid length. [ 2082.412450][ T6609] netlink: zone id is out of range [ 2082.419028][ T6609] netlink: zone id is out of range [ 2082.652081][ T6609] netlink: zone id is out of range [ 2082.657401][ T6609] netlink: zone id is out of range [ 2082.767446][ T6609] netlink: zone id is out of range [ 2082.893289][ T6612] tipc: Started in network mode [ 2082.900756][ T6612] tipc: Node identity 9215a268, cluster identity 4711 [ 2082.943358][ T6609] netlink: zone id is out of range [ 2082.948583][ T6609] netlink: zone id is out of range [ 2082.951575][ T6612] tipc: Node number set to 2450891368 [ 2082.990133][ T6609] netlink: zone id is out of range [ 2083.001927][ T6609] netlink: zone id is out of range [ 2083.079438][ T6616] netlink: 'syz.4.10339': attribute type 10 has an invalid length. [ 2083.268696][ T6616] team0: Port device hsr_slave_0 added [ 2083.353458][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10342'. [ 2083.417984][T31536] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2083.425796][T31536] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2083.725727][ T6627] netlink: 'syz.4.10344': attribute type 2 has an invalid length. [ 2083.797051][ T6627] netlink: 'syz.4.10344': attribute type 8 has an invalid length. [ 2083.837187][ T6627] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10344'. [ 2083.851218][ T6635] netlink: 'syz.4.10344': attribute type 2 has an invalid length. [ 2083.882904][ T6635] netlink: 'syz.4.10344': attribute type 8 has an invalid length. [ 2083.890982][ T6635] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10344'. [ 2083.903774][ T6641] netlink: 'syz.2.10347': attribute type 10 has an invalid length. [ 2083.914137][ T6641] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2083.926896][ T6641] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2083.937596][ T6641] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2083.951159][ T6641] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2083.959372][ T6641] FAULT_INJECTION: forcing a failure. [ 2083.959372][ T6641] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.974053][ T6641] CPU: 0 PID: 6641 Comm: syz.2.10347 Not tainted syzkaller #0 [ 2083.981623][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2083.991896][ T6641] Call Trace: [ 2083.995465][ T6641] [ 2083.998433][ T6641] dump_stack_lvl+0x188/0x24e [ 2084.003164][ T6641] ? show_regs_print_info+0x12/0x12 [ 2084.008578][ T6641] ? load_image+0x400/0x400 [ 2084.013213][ T6641] ? verify_lock_unused+0x140/0x140 [ 2084.018532][ T6641] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 2084.024241][ T6641] should_fail_ex+0x399/0x4d0 [ 2084.029058][ T6641] should_failslab+0x5/0x20 [ 2084.033589][ T6641] slab_pre_alloc_hook+0x59/0x310 [ 2084.038657][ T6641] kmem_cache_alloc+0x56/0x2f0 [ 2084.043478][ T6641] ? skb_clone+0x1e7/0x370 [ 2084.047954][ T6641] skb_clone+0x1e7/0x370 [ 2084.052246][ T6641] __netlink_deliver_tap+0x3ed/0x800 [ 2084.057700][ T6641] ? netlink_deliver_tap+0x2e/0x1b0 [ 2084.063037][ T6641] netlink_deliver_tap+0x19c/0x1b0 [ 2084.068199][ T6641] netlink_sendskb+0x64/0x130 [ 2084.072942][ T6641] netlink_ack+0xcdd/0x1170 [ 2084.077507][ T6641] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2084.083353][ T6641] ? netlink_dump+0xd00/0xd00 [ 2084.088088][ T6641] ? __skb_clone+0x480/0x790 [ 2084.092733][ T6641] netlink_rcv_skb+0x280/0x450 [ 2084.097533][ T6641] ? rtnetlink_bind+0x80/0x80 [ 2084.102259][ T6641] ? netlink_ack+0x1170/0x1170 [ 2084.107096][ T6641] ? netlink_deliver_tap+0x2e/0x1b0 [ 2084.112350][ T6641] netlink_unicast+0x74d/0x8d0 [ 2084.117178][ T6641] netlink_sendmsg+0x8ad/0xbd0 [ 2084.122010][ T6641] ? netlink_getsockopt+0x550/0x550 [ 2084.127380][ T6641] ? aa_sock_msg_perm+0x94/0x150 [ 2084.132357][ T6641] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2084.137776][ T6641] ? security_socket_sendmsg+0x7c/0xa0 [ 2084.143278][ T6641] ? netlink_getsockopt+0x550/0x550 [ 2084.148687][ T6641] ____sys_sendmsg+0x5be/0x970 [ 2084.153509][ T6641] ? __sys_sendmsg_sock+0x30/0x30 [ 2084.158567][ T6641] ? __import_iovec+0x315/0x500 [ 2084.163494][ T6641] ? import_iovec+0x6f/0xa0 [ 2084.168039][ T6641] ___sys_sendmsg+0x2a2/0x360 [ 2084.172775][ T6641] ? __sys_sendmsg+0x290/0x290 [ 2084.177665][ T6641] ? __lock_acquire+0x7d10/0x7d10 [ 2084.182823][ T6641] __se_sys_sendmsg+0x1bb/0x2a0 [ 2084.187830][ T6641] ? __x64_sys_sendmsg+0x80/0x80 [ 2084.193035][ T6641] ? lockdep_hardirqs_on+0x94/0x140 [ 2084.198300][ T6641] do_syscall_64+0x4c/0xa0 [ 2084.202773][ T6641] ? clear_bhb_loop+0x60/0xb0 [ 2084.207502][ T6641] ? clear_bhb_loop+0x60/0xb0 [ 2084.212228][ T6641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2084.218168][ T6641] RIP: 0033:0x7fe54759c819 [ 2084.222762][ T6641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2084.242397][ T6641] RSP: 002b:00007fe5483e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2084.250848][ T6641] RAX: ffffffffffffffda RBX: 00007fe547815fa0 RCX: 00007fe54759c819 [ 2084.258852][ T6641] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000006 [ 2084.266849][ T6641] RBP: 00007fe5483e2090 R08: 0000000000000000 R09: 0000000000000000 [ 2084.274846][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2084.283015][ T6641] R13: 00007fe547816038 R14: 00007fe547815fa0 R15: 00007fff9ee5b308 [ 2084.291050][ T6641] [ 2085.394083][T31536] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2085.401589][T31536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2086.268682][ T6680] __nla_validate_parse: 7 callbacks suppressed [ 2086.269883][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10363'. [ 2086.330279][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10363'. [ 2086.382724][ T6683] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10363'. [ 2086.414056][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10363'. [ 2087.588023][T31536] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 2087.595912][T31536] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 2087.704479][ T6706] validate_nla: 1 callbacks suppressed [ 2087.704502][ T6706] netlink: 'syz.1.10369': attribute type 2 has an invalid length. [ 2087.801990][ T6706] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.10369'. [ 2088.199898][ T6722] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10375'. [ 2088.225080][ T6721] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10376'. [ 2088.299616][ T6721] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10376'. [ 2088.426550][ T6724] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10376'. [ 2088.649169][ T6723] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10376'. [ 2089.398586][T31536] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 2089.406182][T31536] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 2090.589909][ T6774] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 2090.620039][ T6774] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 2090.841549][ T6777] netlink: 'syz.3.10391': attribute type 2 has an invalid length. [ 2093.005665][ T6780] __nla_validate_parse: 1 callbacks suppressed [ 2093.005688][ T6780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10392'. [ 2093.056906][ T6780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10392'. [ 2093.114891][ T6791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10392'. [ 2093.154802][ T6788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10392'. [ 2093.198510][T31536] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 2093.206387][T31536] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 2093.268455][ T6790] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10395'. [ 2093.887623][ T6809] netlink: 'syz.1.10401': attribute type 1 has an invalid length. [ 2093.917174][ T6809] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.10401'. [ 2094.962837][ T6824] netlink: 'syz.1.10406': attribute type 2 has an invalid length. [ 2095.098162][ T6824] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.10406'. [ 2095.607337][T31536] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2095.614944][T31536] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2095.652537][ T6839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10410'. [ 2095.719578][ T6842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10411'. [ 2095.729238][ T6842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10411'. [ 2096.237220][ T6857] FAULT_INJECTION: forcing a failure. [ 2096.237220][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.320521][ T6855] netlink: 'syz.4.10415': attribute type 3 has an invalid length. [ 2096.340839][ T6857] CPU: 0 PID: 6857 Comm: syz.2.10417 Not tainted syzkaller #0 [ 2096.348489][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2096.358615][ T6857] Call Trace: [ 2096.361967][ T6857] [ 2096.365058][ T6857] dump_stack_lvl+0x188/0x24e [ 2096.369830][ T6857] ? show_regs_print_info+0x12/0x12 [ 2096.375195][ T6857] ? load_image+0x400/0x400 [ 2096.379783][ T6857] ? __might_sleep+0xd0/0xd0 [ 2096.384446][ T6857] ? __lock_acquire+0x7d10/0x7d10 [ 2096.389561][ T6857] should_fail_ex+0x399/0x4d0 [ 2096.394409][ T6857] should_failslab+0x5/0x20 [ 2096.398977][ T6857] slab_pre_alloc_hook+0x59/0x310 [ 2096.404091][ T6857] ? __get_vm_area_node+0x122/0x330 [ 2096.409370][ T6857] __kmem_cache_alloc_node+0x4f/0x260 [ 2096.414825][ T6857] ? __get_vm_area_node+0x122/0x330 [ 2096.420097][ T6857] kmalloc_node_trace+0x22/0xe0 [ 2096.425033][ T6857] __get_vm_area_node+0x122/0x330 [ 2096.430135][ T6857] ? mod_objcg_state+0x50d/0x8a0 [ 2096.435166][ T6857] __vmalloc_node_range+0x357/0x13b0 [ 2096.440528][ T6857] ? copy_process+0x5fa/0x4030 [ 2096.445476][ T6857] ? free_vm_area+0x50/0x50 [ 2096.450066][ T6857] ? rcu_is_watching+0x11/0xa0 [ 2096.455016][ T6857] dup_task_struct+0x3d3/0x6b0 [ 2096.459856][ T6857] ? copy_process+0x5fa/0x4030 [ 2096.464710][ T6857] copy_process+0x5fa/0x4030 [ 2096.469480][ T6857] ? trace_event_raw_event_lock+0x250/0x250 [ 2096.475557][ T6857] ? perf_trace_lock+0xf8/0x390 [ 2096.480504][ T6857] ? perf_trace_lock+0xf8/0x390 [ 2096.485468][ T6857] ? idle_dummy+0x10/0x10 [ 2096.489920][ T6857] kernel_clone+0x24b/0x900 [ 2096.494576][ T6857] ? ksys_write+0x1c0/0x250 [ 2096.499162][ T6857] ? create_io_thread+0x170/0x170 [ 2096.504326][ T6857] __x64_sys_clone+0x1a7/0x220 [ 2096.509149][ T6857] ? __fget_files+0x43d/0x4b0 [ 2096.513910][ T6857] ? __ia32_sys_vfork+0x140/0x140 [ 2096.519136][ T6857] ? lock_chain_count+0x20/0x20 [ 2096.524083][ T6857] ? lockdep_hardirqs_on+0x94/0x140 [ 2096.529361][ T6857] do_syscall_64+0x4c/0xa0 [ 2096.533847][ T6857] ? clear_bhb_loop+0x60/0xb0 [ 2096.538599][ T6857] ? clear_bhb_loop+0x60/0xb0 [ 2096.543440][ T6857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2096.549410][ T6857] RIP: 0033:0x7fe54759c819 [ 2096.553896][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2096.573532][ T6857] RSP: 002b:00007fe5483e1fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2096.581980][ T6857] RAX: ffffffffffffffda RBX: 00007fe547815fa0 RCX: 00007fe54759c819 [ 2096.589982][ T6857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 2096.598066][ T6857] RBP: 00007fe5483e2090 R08: 0000000000000000 R09: 0000000000000000 [ 2096.606085][ T6857] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2096.614094][ T6857] R13: 00007fe547816038 R14: 00007fe547815fa0 R15: 00007fff9ee5b308 [ 2096.622142][ T6857] [ 2096.694883][ T6855] net_ratelimit: 140 callbacks suppressed [ 2096.694909][ T6855] netlink: zone id is out of range [ 2096.837327][ T6855] netlink: zone id is out of range [ 2096.863123][ T6855] netlink: zone id is out of range [ 2096.952162][ T6857] syz.2.10417: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2097.003849][ T6857] CPU: 1 PID: 6857 Comm: syz.2.10417 Not tainted syzkaller #0 [ 2097.011427][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2097.021556][ T6857] Call Trace: [ 2097.024902][ T6857] [ 2097.027903][ T6857] dump_stack_lvl+0x188/0x24e [ 2097.032663][ T6857] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2097.039148][ T6857] ? show_regs_print_info+0x12/0x12 [ 2097.044418][ T6857] ? load_image+0x400/0x400 [ 2097.048999][ T6857] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2097.053406][ T6855] netlink: zone id is out of range [ 2097.055542][ T6857] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2097.060754][ T6855] netlink: zone id is out of range [ 2097.067478][ T6857] warn_alloc+0x242/0x330 [ 2097.067529][ T6857] ? __get_vm_area_node+0x122/0x330 [ 2097.067575][ T6857] ? zone_watermark_ok_safe+0x270/0x270 [ 2097.067613][ T6857] ? rcu_is_watching+0x11/0xa0 [ 2097.067664][ T6857] ? __get_vm_area_node+0x318/0x330 [ 2097.067696][ T6857] ? mod_objcg_state+0x50d/0x8a0 [ 2097.067751][ T6857] __vmalloc_node_range+0x37c/0x13b0 [ 2097.067987][ T6857] ? free_vm_area+0x50/0x50 [ 2097.068031][ T6857] ? rcu_is_watching+0x11/0xa0 [ 2097.068094][ T6857] dup_task_struct+0x3d3/0x6b0 [ 2097.068127][ T6857] ? copy_process+0x5fa/0x4030 [ 2097.068174][ T6857] copy_process+0x5fa/0x4030 [ 2097.068205][ T6857] ? trace_event_raw_event_lock+0x250/0x250 [ 2097.068252][ T6857] ? perf_trace_lock+0xf8/0x390 [ 2097.068318][ T6857] ? perf_trace_lock+0xf8/0x390 [ 2097.068383][ T6857] ? idle_dummy+0x10/0x10 [ 2097.068459][ T6857] kernel_clone+0x24b/0x900 [ 2097.068490][ T6857] ? ksys_write+0x1c0/0x250 [ 2097.068542][ T6857] ? create_io_thread+0x170/0x170 [ 2097.068645][ T6857] __x64_sys_clone+0x1a7/0x220 [ 2097.068672][ T6857] ? __fget_files+0x43d/0x4b0 [ 2097.068726][ T6857] ? __ia32_sys_vfork+0x140/0x140 [ 2097.182320][ T6857] ? lock_chain_count+0x20/0x20 [ 2097.187274][ T6857] ? lockdep_hardirqs_on+0x94/0x140 [ 2097.192553][ T6857] do_syscall_64+0x4c/0xa0 [ 2097.197123][ T6857] ? clear_bhb_loop+0x60/0xb0 [ 2097.201862][ T6857] ? clear_bhb_loop+0x60/0xb0 [ 2097.206627][ T6857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2097.212581][ T6857] RIP: 0033:0x7fe54759c819 [ 2097.217059][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2097.237614][ T6857] RSP: 002b:00007fe5483e1fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2097.246101][ T6857] RAX: ffffffffffffffda RBX: 00007fe547815fa0 RCX: 00007fe54759c819 [ 2097.254151][ T6857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 2097.262284][ T6857] RBP: 00007fe5483e2090 R08: 0000000000000000 R09: 0000000000000000 [ 2097.270418][ T6857] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2097.278446][ T6857] R13: 00007fe547816038 R14: 00007fe547815fa0 R15: 00007fff9ee5b308 [ 2097.286623][ T6857] [ 2097.341138][ T6855] netlink: zone id is out of range [ 2097.404946][ T6855] netlink: zone id is out of range [ 2097.450190][ T6855] netlink: zone id is out of range [ 2097.456082][ T6855] netlink: zone id is out of range [ 2097.461250][ T6855] netlink: zone id is out of range [ 2097.558260][ T6857] Mem-Info: [ 2097.561468][ T6857] active_anon:14584 inactive_anon:0 isolated_anon:0 [ 2097.561468][ T6857] active_file:21788 inactive_file:40740 isolated_file:0 [ 2097.561468][ T6857] unevictable:768 dirty:73 writeback:9 [ 2097.561468][ T6857] slab_reclaimable:21547 slab_unreclaimable:93818 [ 2097.561468][ T6857] mapped:36604 shmem:7225 pagetables:621 [ 2097.561468][ T6857] sec_pagetables:0 bounce:0 [ 2097.561468][ T6857] kernel_misc_reclaimable:0 [ 2097.561468][ T6857] free:1311910 free_pcp:8681 free_cma:0 [ 2097.692617][ T6857] Node 0 active_anon:58836kB inactive_anon:0kB active_file:87152kB inactive_file:162756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146616kB dirty:292kB writeback:36kB shmem:27564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10904kB pagetables:2584kB sec_pagetables:0kB all_unreclaimable? no [ 2097.802540][ T6857] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2097.966642][ T6857] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2098.048386][ T6878] netlink: 'syz.3.10421': attribute type 2 has an invalid length. [ 2098.067364][ T6878] __nla_validate_parse: 5 callbacks suppressed [ 2098.067384][ T6878] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.10421'. [ 2098.092949][ T6857] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 2098.122222][ T6857] Node 0 DMA32 free:1330224kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:60552kB inactive_anon:0kB active_file:87152kB inactive_file:162756kB unevictable:1536kB writepending:328kB present:3129332kB managed:2592968kB mlocked:0kB bounce:0kB free_pcp:16032kB local_pcp:7224kB free_cma:0kB [ 2098.244724][ T6857] lowmem_reserve[]: 0 0 1 1 1 [ 2098.249705][ T6857] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 2098.386223][ T6857] lowmem_reserve[]: 0 0 0 0 0 [ 2098.410664][ T6857] Node 1 Normal free:3899772kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20088kB local_pcp:12640kB free_cma:0kB [ 2098.492046][T31536] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2098.499782][T31536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2098.522859][ T6857] lowmem_reserve[]: 0 0 0 0 0 [ 2098.527879][ T6857] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2098.552176][ T6857] Node 0 DMA32: 1596*4kB (U) 2126*8kB (UME) 2825*16kB (UME) 841*32kB (UME) 1193*64kB (UME) 908*128kB (UM) 281*256kB (UME) 129*512kB (UM) 31*1024kB (UM) 11*2048kB (UME) 207*4096kB (UM) = 1328208kB [ 2098.607058][ T6857] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 2098.685272][ T6857] Node 1 Normal: 191*4kB (UME) 54*8kB (UME) 37*16kB (UME) 52*32kB (UE) 20*64kB (UME) 8*128kB (UME) 3*256kB (UM) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3899772kB [ 2098.712335][ T6857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2098.736557][ T6857] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2098.766681][ T6857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2098.788231][ T6890] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10424'. [ 2098.798079][ T6857] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2098.821945][ T6857] 71575 total pagecache pages [ 2098.826700][ T6857] 0 pages in swap cache [ 2098.830968][ T6857] Free swap = 124728kB [ 2098.835679][ T6890] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10424'. [ 2098.856968][ T6857] Total swap = 124996kB [ 2098.865497][ T6857] 2097051 pages RAM [ 2098.869736][ T6857] 0 pages HighMem/MovableOnly [ 2098.874827][ T6857] 415208 pages reserved [ 2098.879759][ T6857] 0 pages cma reserved [ 2098.892253][ T6898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10424'. [ 2098.989275][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.995834][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.205337][T23615] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2100.213009][T23615] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 2100.318059][ T6920] netlink: 'syz.1.10435': attribute type 3 has an invalid length. [ 2100.412027][ T6920] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10435'. [ 2100.494921][ T6923] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.10435'. [ 2101.075274][T23615] Bluetooth: hci5: command 0x0406 tx timeout [ 2101.531628][ T6906] ------------[ cut here ]------------ [ 2101.537285][ T6906] WARNING: CPU: 0 PID: 6906 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 2101.547133][ T6906] Modules linked in: [ 2101.551080][ T6906] CPU: 0 PID: 6906 Comm: syz.0.10430 Not tainted syzkaller #0 [ 2101.558654][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2101.568820][ T6906] RIP: 0010:perf_pending_task+0x358/0x470 [ 2101.574779][ T6906] Code: ff 84 db 75 14 e8 e8 76 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 76 da ff e8 37 85 58 ff eb e5 e8 c8 76 da ff <0f> 0b e9 f3 fe ff ff e8 bc 76 da ff 48 c7 c7 d0 2c bc 8c 4c 89 f6 [ 2101.594782][ T6906] RSP: 0018:ffffc9000cadf8e0 EFLAGS: 00010293 [ 2101.600913][ T6906] RAX: ffffffff81a7fe88 RBX: ffff888024005e58 RCX: ffff88802c8ebb80 [ 2101.609477][ T6906] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2101.617536][ T6906] RBP: 0000000000000001 R08: ffff88802c8ec583 R09: 1ffff1100591d8b0 [ 2101.626115][ T6906] R10: dffffc0000000000 R11: ffffed100591d8b1 R12: ffff88802c8ebb80 [ 2101.634260][ T6906] R13: ffff8880770af960 R14: ffff888024005c20 R15: 1ffff11004800b84 [ 2101.642491][ T6906] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2101.651474][ T6906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2101.658228][ T6906] CR2: 00007fe5483456b8 CR3: 000000007688d000 CR4: 00000000003506f0 [ 2101.666331][ T6906] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 2101.674381][ T6906] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2101.682443][ T6906] Call Trace: [ 2101.685754][ T6906] [ 2101.688719][ T6906] task_work_run+0x1d0/0x260 [ 2101.693423][ T6906] ? task_work_cancel+0x220/0x220 [ 2101.698600][ T6906] ? do_raw_spin_unlock+0x11d/0x230 [ 2101.703930][ T6906] do_exit+0x982/0x2480 [ 2101.708413][ T6906] ? lock_chain_count+0x20/0x20 [ 2101.713378][ T6906] ? put_task_struct+0x80/0x80 [ 2101.718201][ T6906] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2101.724541][ T6906] ? lockdep_hardirqs_on+0x94/0x140 [ 2101.730479][ T6906] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2101.736742][ T6906] do_group_exit+0x217/0x2d0 [ 2101.741461][ T6906] ? _raw_spin_unlock_irq+0x25/0x40 [ 2101.746803][ T6906] get_signal+0x1272/0x1350 [ 2101.751370][ T6906] arch_do_signal_or_restart+0xc4/0x1350 [ 2101.757190][ T6906] ? perf_trace_preemptirq_template+0x268/0x320 [ 2101.763557][ T6906] ? irqentry_enter+0x33/0x50 [ 2101.768380][ T6906] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2101.774498][ T6906] ? get_sigframe_size+0x10/0x10 [ 2101.779496][ T6906] ? lock_chain_count+0x20/0x20 [ 2101.784444][ T6906] ? rcu_is_watching+0x11/0xa0 [ 2101.789287][ T6906] exit_to_user_mode_loop+0x70/0x110 [ 2101.794672][ T6906] exit_to_user_mode_prepare+0xee/0x180 [ 2101.800324][ T6906] syscall_exit_to_user_mode+0x16/0x40 [ 2101.805990][ T6906] do_syscall_64+0x58/0xa0 [ 2101.810634][ T6906] ? clear_bhb_loop+0x60/0xb0 [ 2101.815527][ T6906] ? clear_bhb_loop+0x60/0xb0 [ 2101.820258][ T6906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2101.826334][ T6906] RIP: 0033:0x7f59cd79c819 [ 2101.831118][ T6906] Code: Unable to access opcode bytes at 0x7f59cd79c7ef. [ 2101.838400][ T6906] RSP: 002b:00007f59ce6fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2101.847511][ T6906] RAX: fffffffffffffe00 RBX: 00007f59cda15fa8 RCX: 00007f59cd79c819 [ 2101.855631][ T6906] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f59cda15fa8 [ 2101.863766][ T6906] RBP: 00007f59cda15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2101.871937][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2101.879961][ T6906] R13: 00007f59cda16038 R14: 00007fff7f824200 R15: 00007fff7f8242e8 [ 2101.888326][ T6906] [ 2101.891391][ T6906] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2101.898693][ T6906] CPU: 0 PID: 6906 Comm: syz.0.10430 Not tainted syzkaller #0 [ 2101.906172][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2101.916239][ T6906] Call Trace: [ 2101.919530][ T6906] [ 2101.922472][ T6906] dump_stack_lvl+0x188/0x24e [ 2101.927169][ T6906] ? memcpy+0x3c/0x60 [ 2101.931167][ T6906] ? show_regs_print_info+0x12/0x12 [ 2101.936384][ T6906] ? load_image+0x400/0x400 [ 2101.940945][ T6906] panic+0x2e5/0x730 [ 2101.944943][ T6906] ? bpf_jit_dump+0xd0/0xd0 [ 2101.949468][ T6906] __warn+0x2f8/0x4f0 [ 2101.953463][ T6906] ? perf_pending_task+0x358/0x470 [ 2101.958591][ T6906] ? perf_pending_task+0x358/0x470 [ 2101.963741][ T6906] report_bug+0x2ba/0x4f0 [ 2101.968173][ T6906] ? perf_pending_task+0x358/0x470 [ 2101.973299][ T6906] handle_bug+0x3a/0x70 [ 2101.977481][ T6906] exc_invalid_op+0x16/0x40 [ 2101.982003][ T6906] asm_exc_invalid_op+0x16/0x20 [ 2101.986867][ T6906] RIP: 0010:perf_pending_task+0x358/0x470 [ 2101.992611][ T6906] Code: ff 84 db 75 14 e8 e8 76 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 76 da ff e8 37 85 58 ff eb e5 e8 c8 76 da ff <0f> 0b e9 f3 fe ff ff e8 bc 76 da ff 48 c7 c7 d0 2c bc 8c 4c 89 f6 [ 2102.012514][ T6906] RSP: 0018:ffffc9000cadf8e0 EFLAGS: 00010293 [ 2102.018607][ T6906] RAX: ffffffff81a7fe88 RBX: ffff888024005e58 RCX: ffff88802c8ebb80 [ 2102.026595][ T6906] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2102.034580][ T6906] RBP: 0000000000000001 R08: ffff88802c8ec583 R09: 1ffff1100591d8b0 [ 2102.042564][ T6906] R10: dffffc0000000000 R11: ffffed100591d8b1 R12: ffff88802c8ebb80 [ 2102.050567][ T6906] R13: ffff8880770af960 R14: ffff888024005c20 R15: 1ffff11004800b84 [ 2102.058666][ T6906] ? perf_pending_task+0x358/0x470 [ 2102.063823][ T6906] task_work_run+0x1d0/0x260 [ 2102.068697][ T6906] ? task_work_cancel+0x220/0x220 [ 2102.073893][ T6906] ? do_raw_spin_unlock+0x11d/0x230 [ 2102.079199][ T6906] do_exit+0x982/0x2480 [ 2102.083473][ T6906] ? lock_chain_count+0x20/0x20 [ 2102.088368][ T6906] ? put_task_struct+0x80/0x80 [ 2102.093165][ T6906] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2102.099359][ T6906] ? lockdep_hardirqs_on+0x94/0x140 [ 2102.104751][ T6906] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2102.110951][ T6906] do_group_exit+0x217/0x2d0 [ 2102.115563][ T6906] ? _raw_spin_unlock_irq+0x25/0x40 [ 2102.120777][ T6906] get_signal+0x1272/0x1350 [ 2102.125312][ T6906] arch_do_signal_or_restart+0xc4/0x1350 [ 2102.131136][ T6906] ? perf_trace_preemptirq_template+0x268/0x320 [ 2102.137479][ T6906] ? irqentry_enter+0x33/0x50 [ 2102.142280][ T6906] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2102.148309][ T6906] ? get_sigframe_size+0x10/0x10 [ 2102.153459][ T6906] ? lock_chain_count+0x20/0x20 [ 2102.158425][ T6906] ? rcu_is_watching+0x11/0xa0 [ 2102.163234][ T6906] exit_to_user_mode_loop+0x70/0x110 [ 2102.168588][ T6906] exit_to_user_mode_prepare+0xee/0x180 [ 2102.174266][ T6906] syscall_exit_to_user_mode+0x16/0x40 [ 2102.179781][ T6906] do_syscall_64+0x58/0xa0 [ 2102.184322][ T6906] ? clear_bhb_loop+0x60/0xb0 [ 2102.189058][ T6906] ? clear_bhb_loop+0x60/0xb0 [ 2102.193756][ T6906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2102.199756][ T6906] RIP: 0033:0x7f59cd79c819 [ 2102.204183][ T6906] Code: Unable to access opcode bytes at 0x7f59cd79c7ef. [ 2102.211206][ T6906] RSP: 002b:00007f59ce6fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2102.219638][ T6906] RAX: fffffffffffffe00 RBX: 00007f59cda15fa8 RCX: 00007f59cd79c819 [ 2102.227629][ T6906] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f59cda15fa8 [ 2102.235622][ T6906] RBP: 00007f59cda15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2102.243862][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2102.251861][ T6906] R13: 00007f59cda16038 R14: 00007fff7f824200 R15: 00007fff7f8242e8 [ 2102.259976][ T6906] [ 2102.263318][ T6906] Kernel Offset: disabled [ 2102.267649][ T6906] Rebooting in 86400 seconds..