last executing test programs: 3.649697099s ago: executing program 1 (id=1098): r0 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r0, 0x0, 0x40010002) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x55, 0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_config_ext={0x2, 0x5}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_clone(0x808a3000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r1, 0x0, 0xfffffffffffffe59, &(0x7f00000023c0)}, 0x30) 3.548257387s ago: executing program 1 (id=1099): socketpair(0x1, 0x4, 0x9, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9a1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000002, 0x0, @perf_config_ext={0x0, 0x5f}, 0x21, 0x0, 0x6, 0x0, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xac59, 0x9b0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x2400, 0xb01, 0x2, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="b4000000000000000f10000000000000181200001f1f01d3aef359d1301102d1e6c5ea5b6057180502098ad1c13e5e84b45290", @ANYRES32, @ANYRES16=r0], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='[&\xd3#\xaa{@\x00') r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000001}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x18, &(0x7f0000000000)=r7, 0x8) 2.666968934s ago: executing program 4 (id=1108): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080)) socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x5, 0x0, 0x9, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x7, @perf_config_ext={0xf, 0x5}, 0x0, 0xc78, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 2.358880269s ago: executing program 1 (id=1110): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="cb303564000000000000000000000000000000007b2154e36ac7e0b75e24e6b1aeedcac65d55d19cf922b7ad2985cc094292832707f76bfd691a6484924274cd76ca7d956098f03b6e1d83c2a7f0753c50008ffc5201cb33b4939b5d16991b2fd513a93864f364cfb7645d5471ba4ad0a033955285b3e9d55ea091aac9b34c6cbf68cc33497ca139f5e592a8ba390464e1149f44bb3ba2a3f55a5f1c0de42b04e15a6249c0d695e0ea2411", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200002237cd3db6b5030004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x567, 0x1064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffeffd, 0x14}, 0x2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x10000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x30}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/176, 0xb0}], 0x1, &(0x7f00000006c0)=""/159, 0x9f}, 0x104) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x100339, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={r5}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$kcm(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r8, 0x0, 0x20000000}, 0x20) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) 2.260792806s ago: executing program 4 (id=1111): r0 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r0, 0x0, 0x40010002) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000006c0)=""/127, 0x7f}], 0x5}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xa, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0x1218, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x1, 0xfffffffc, 0x6, 0x8, 0x5, 0x806, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)=r6, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x89fb, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) socket$kcm(0x29, 0x2, 0x0) close(r1) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="00000051dc5e6930c700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x808a3000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r11) 2.200744237s ago: executing program 2 (id=1112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="259f8863a9a34400000200000000", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.038177486s ago: executing program 0 (id=1114): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xb, 0x0, &(0x7f0000000040)="178d048604bf0bfb1945d7", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="186000000400000000400000ff0700000000040000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000440)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x0, 0x5, 0x1000}, 0x10}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035", 0x5}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00c0850000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r10}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0x2, &(0x7f0000000040)=ANY=[@ANYRES16=r5], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r11}, 0x94) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, 0x0, 0x0}, 0x94) 1.852537329s ago: executing program 4 (id=1116): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90224fc60", 0x14}], 0x8}, 0x0) (async) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0xfffffff6, 0x0, 0xffffffffffffbbfe, 0x200, 0x0, 0x0, 0xfffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 1.719831473s ago: executing program 2 (id=1118): r0 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async, rerun: 32) r2 = socket$kcm(0xa, 0x1, 0x106) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001180)="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", 0xf07}], 0x1}, 0x40001) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0xd, 0x0, 0x6, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) (async, rerun: 32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000000180)) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r6, &(0x7f0000000280), 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40002002) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000bbae889a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000002600008500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r11}, 0xc) 1.711850864s ago: executing program 0 (id=1119): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f0000000000000008000300182f0a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.519390439s ago: executing program 0 (id=1120): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad90200e006dcdf63951f215ce3bb9ad809d5e1ca", 0xb7}], 0x1}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x2}, 0x8806, 0x4, 0x0, 0x0, 0x800000000000000, 0xfffffffc}, r1, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf\t$[\xb8\x90\xa3^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd6') r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000000000000822be3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64c9f4d4938037e784f869526f9aff94880f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000610583000000000085000000270000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x2040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'macsec0\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r8, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="334e0300"}) close(r8) 1.355996968s ago: executing program 4 (id=1122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005, 0x3, 0x0, 0x1}, {0x2}]}, 0x94) (async) r1 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(r5) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x81400, 0xca, 0x0, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="3eda", @ANYRES8=r6], 0xf) (async) close(r3) close(r1) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) (async) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x64, &(0x7f0000000000)=r12, 0x10) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xe) 1.308846666s ago: executing program 2 (id=1123): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x1, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r3, &(0x7f00000002c0)="1f16be50c6b56b9c0066bd27d0d53bb6e18009881eb8f38e1e698d59234d26021ebba7d4fd26fa8bd22e5f14c96889668d0bd309b6d1df101b8d24cd18ec017cf967bef708b1903074983990809dcb3f4f4edfe8776d"}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r7 = gettid() r8 = perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x2, 0x3, 0xe9, 0x16, 0x0, 0x2, 0x97811, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xb1a, 0x9}, 0x82c8, 0x3, 0xfffffdb9, 0x4, 0x7, 0xcb9, 0x80, 0x0, 0x7fffffff}, r7, 0x2, r5, 0x9) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0xb, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0xa, 0x6, 0x0, 0xfffffffffffffff0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x2, 0x0, 0x2, 0x8, 0x7, 0x20, 0xfffffffffffffff1}], &(0x7f0000000500)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000540)=""/4096, 0x41100, 0x34, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001580)={0x3, 0xa, 0xc5f3, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000015c0)=[r5], &(0x7f0000001600)=[{0x5, 0x2, 0x0, 0x6}, {0x0, 0x2, 0x0, 0xb}, {0x0, 0x3, 0x3, 0x8}, {0x3, 0x2, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x8}, {0x3, 0x3, 0x7, 0x1}, {0x1, 0x3, 0x5, 0xa}, {0x4, 0x1, 0xb, 0x7}, {0x0, 0x1, 0x5, 0x6}], 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001780)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f00000017c0)={'some', 0x20, 0x6, 0x20, 0x2}, 0x2f) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001900)={@map=r5, 0x22, 0x0, 0x1, &(0x7f0000001800)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001840)=[0x0], &(0x7f0000001880)=[0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0], 0x0}, 0x40) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001980)='./cgroup/syz0\x00', 0x200002, 0x0) r14 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000019c0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001940)={@cgroup=r13, r2, 0x1, 0x2008, 0x0, @value=r14, @void, @void, @void, r12}, 0x20) r15 = perf_event_open(&(0x7f0000001a40)={0x1, 0x80, 0xf2, 0x0, 0x2, 0x1, 0x0, 0xb, 0x2511, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5bd60edf, 0x0, @perf_bp={&(0x7f0000001a00), 0x4}, 0x10202, 0x8, 0x7fffffff, 0x1, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0x8) ioctl$PERF_EVENT_IOC_ID(r15, 0x80082407, &(0x7f0000001ac0)) perf_event_open$cgroup(&(0x7f0000001b00)={0x1, 0x80, 0x6, 0x0, 0x9, 0xc, 0x0, 0x1, 0x200, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x6, @perf_config_ext={0x3, 0x7fffffffffffffff}, 0x10000, 0xffffffff, 0x1, 0x1, 0x6, 0x400, 0xfffd, 0x0, 0x5, 0x0, 0x9}, r13, 0x10, r8, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ec0)={r2, 0xe0, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000001c80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001d00), &(0x7f0000001d40), 0x8, 0xea, 0x8, 0x8, &(0x7f0000001d80)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001b80)={@ifindex=r4, r9, 0xb, 0x3b, r9, @void, @void, @void, @value=r16, r12}, 0x20) r17 = openat$cgroup_int(r13, &(0x7f0000001f00)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_int(r17, &(0x7f0000001f40)=0x800, 0x12) close(r6) bpf$TOKEN_CREATE(0x24, &(0x7f0000001f80)={0x0, r6}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002040)={{r11, 0xffffffffffffffff}, &(0x7f0000001fc0), &(0x7f0000002000)='%pi6 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002180)={r18, &(0x7f0000002080)="93aa0c241b359d317fb637a4db44a2a9b730d0b614b65f441ff6cf0b75527014ffe1", &(0x7f00000020c0)=""/142}, 0x20) 1.204721125s ago: executing program 1 (id=1124): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.204471065s ago: executing program 3 (id=1125): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r0}, 0xc) 1.101401483s ago: executing program 2 (id=1126): r0 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r0, 0x0, 0x40010002) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x55, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xa, 0x0, 0x8}, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_clone(0x808a3000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r1, 0x0, 0xfffffffffffffe59, &(0x7f00000023c0)}, 0x30) 1.044196143s ago: executing program 3 (id=1127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb835"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 925.370115ms ago: executing program 3 (id=1128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="259f8863a9a34400000200000000", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 840.70543ms ago: executing program 0 (id=1129): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x1, r2}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) 829.192762ms ago: executing program 4 (id=1130): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f0000000000000008000300182f0a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 681.050288ms ago: executing program 2 (id=1131): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000004800530c8e5eb88edc5a9c0e0a"], 0xfe33) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 547.897182ms ago: executing program 3 (id=1132): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x0, 0x8000, 0xc2ba, 0x0, 0x7ee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x10, 0x0, 0x0, 0x0, 0x7, 0x3075e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x5e02, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0xe, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffea) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x0, 0x36, 0x0, &(0x7f00000004c0)="52540012345652540012345786dd6000000000003b4000000000000000000000000000000001fe800000000000000000000000000001", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0x6edc, 0xe5a, 0x20020, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x6}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x10}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00d8f973650a0000000000000000ab87e4faed8135d499283a772f97"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x8, [@var={0xa, 0x0, 0x0, 0xe, 0x5, 0x1}, @union={0x20000000, 0x6, 0x0, 0x5, 0x1, 0x9, [{0xd, 0x5}, {0x1, 0x1, 0x4}, {0x10, 0x2, 0x1}, {0x1, 0x0, 0x8}, {0x4, 0x2, 0x8}, {0xe, 0x5}]}, @volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x6}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x17, 0x1}, @typedef={0xe, 0x0, 0x0, 0x8, 0x4}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x4}]}, {0x0, [0x30, 0x30, 0x61, 0x5f, 0xec, 0x0]}}, &(0x7f0000000680)=""/220, 0xd8, 0xdc, 0x1, 0x9, 0x10000, @value=r4}, 0x28) write$cgroup_subtree(r9, &(0x7f0000000c80)={[{0x2d, 'memory'}, {0x2b, 'devices'}, {0x2b, 'pids'}, {0x2b, 'pids'}, {0x2d, 'net'}, {0x2b, 'freezer'}]}, 0x2b) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x3477}, 0xc) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000a1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0xd}, 0x94) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x8, r1}, 0x18) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r18 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r19, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x25, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x0, 0x0, 0x0, 0x7, 0x7, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000480)='GPL\x00', 0x2, 0x4a, &(0x7f0000000500)=""/74, 0x41000, 0x0, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x9, 0x5, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[r11, r12, r13, r16, r17, 0xffffffffffffffff, r18, r19, r20], &(0x7f0000000b00)=[{0x1, 0x3, 0x9, 0xa}, {0x0, 0x1, 0xb, 0x9}, {0x5, 0x2, 0x1, 0x3}, {0x5, 0x5, 0x3, 0x8}, {0x2, 0x2, 0xf, 0xb}, {0x4, 0x5, 0x6, 0x1}, {0x0, 0x3, 0x10, 0x4}, {0x2, 0x3, 0x10, 0x4}, {0x2, 0x1, 0xb, 0x5}, {0x2, 0x2, 0x6, 0x4}], 0x10, 0x6}, 0x94) 525.321256ms ago: executing program 0 (id=1133): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x7, 0xe, 0x425a, 0x2, 0x1, 0x4, '\x00', 0x0, r0, 0x3, 0x5}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000000c0)=@caif, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="c5000fe283ae8b704d3ca328eb597ca033dffc2749449205a32a38b2e83a2a28743f9c673b25aa6df8e587739539f1c39db6ce9de13857d1680c1a09d87212e3936c8d38fc4d33104ebcaf497087016765b2d149988b9083009896c53d9f97aaf3c817596b907089a58073003a77abb7fcc827df4f75ed81e4da80", 0x7b}], 0x1, &(0x7f0000000200)=[{0x1010, 0x112, 0x7, "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"}], 0x1010}, 0x0) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000012c0)=@o_path={&(0x7f0000001280)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001300)={r2, r1}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={r2, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000001380)=[0x0], &(0x7f00000013c0)=[0x0, 0x0], 0x0, 0x6f, &(0x7f0000001400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x5f, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) r6 = perf_event_open$cgroup(&(0x7f0000001640)={0x2, 0x80, 0x4f, 0x6, 0x6f, 0xd, 0x0, 0xa9, 0x810, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x4}, 0x2220, 0x7, 0x7fff, 0x1, 0x10001, 0x6, 0x1ff, 0x0, 0x2, 0x0, 0x40}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x4b1ee2c7) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002880)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x1, 0x22, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @call={0x85, 0x0, 0x0, 0x45}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x9}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000001800)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000001840)=""/4096, 0x0, 0x19, '\x00', r4, @fallback=0x3, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002840)={0x1, 0xe, 0xffff, 0xae2}, 0x10, 0x0, r2, 0x2, &(0x7f00000028c0)=[r7, r1], &(0x7f0000002900)=[{0x0, 0x5, 0x8, 0x2}, {0x0, 0x3, 0x9, 0x4}], 0x10, 0x40}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002a00)=r5, 0x4) (async) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000002a40)=r8) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000002a80)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000002b00)=r8, 0x4) (async, rerun: 32) sendmsg(r10, &(0x7f0000002c40)={&(0x7f0000002b40)=@isdn={0x22, 0x4, 0xb, 0xc0, 0xc4}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)="eccbfd8eb7e83cb7a71ba3a0ec0af307ff0bf5fba6838cb1", 0x18}], 0x1}, 0x4008804) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000002f40)={0x8, 0x12, &(0x7f0000002c80)=@raw=[@jmp={0x5, 0x0, 0x7, 0x7, 0xa, 0x10, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4fd0}}], &(0x7f0000002d40)='GPL\x00', 0x2, 0xca, &(0x7f0000002d80)=""/202, 0x40f00, 0x0, '\x00', r4, @cgroup_skb=0x2f41ff8d8ed8ac3d, r9, 0x8, &(0x7f0000002e80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002ec0)={0x2, 0x0, 0x800, 0xffffffff}, 0x10, r5, r8, 0x0, &(0x7f0000002f00)=[r1], 0x0, 0x10, 0x4}, 0x94) r12 = openat$cgroup_ro(r7, &(0x7f0000003000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003040)={r3}, 0x4) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000003080)=r13, 0x4) (async) sendmsg$sock(r11, &(0x7f00000033c0)={&(0x7f00000030c0)=@isdn={0x22, 0xc0, 0x7f, 0x2, 0x9}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003140)="972029f17395f7616eb5a80256098e74ed8488fd24799c34dd4185c7cd2ccb92420a829dd437948b9b45ad9b66a737184fe8ccf98538acc6e9cce478b158753ca56dab692c56e8b3bc8dc22b", 0x4c}, {&(0x7f00000031c0)="33a0f62217276b686aa17cc422710ea672bb9ac828e173660ae5a1abe52ed621db9818ecd0f9b8aa293d8d4d5eec1f8979d299157eb2266880780e1e478b028ddf8251c6ecb6f5d1c9e1c11f632c4b9cf000bfc7350ecb71ec4b1bfb1d72f71cb70b42ddb5e9d9803105ddd8995cf84a5c61cb4dcb2c3f63d44e3a7e68128968c974861789ea60fbcb5a139bcdc718674c7d3d83ca12e149e9516172e96d2f4c3b51c0fc29cd703b8693f2ef52b10ec9fd15f6abe51eea35ad80c2d0aefc91d934e141e043555a63386ef5b0c3b82d8389844ebc89d1e827377a3b9a3b3eb2f1b775280f69a2", 0xe6}], 0x2, &(0x7f0000003300)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9d9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xeb78}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xc0}, 0x8000) (async) r14 = socket$kcm(0x29, 0x7, 0x0) (async, rerun: 64) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000035c0)={0x11, 0x15, &(0x7f0000003400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000034c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x36, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000003500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000003540)={0x1, 0x9, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003580)=[{0x4, 0x4, 0x1, 0x3}], 0x10, 0x65cb}, 0x94) (rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r14, 0x89e0, &(0x7f0000003680)={r7, r15}) r16 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r16, &(0x7f0000003fc0)={&(0x7f00000036c0)=@rc={0x1f, @none, 0x8}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003740)="92b84e203668e00ba9573d7cfac07590d0093cee8b5ebddf7ff8c9f882f5a8e294b50396e751ff917f8698b62ac7400469b4b38ba38af0b4c8db996eaabf63e2ff6ec5f972f0d3a7b615eebd39c204dfce33a329fe43526df9b06f0c263b321c", 0x60}, {&(0x7f00000037c0)="aa640c119312d0a16ab5b340ce99d5388305ad2c87dd86f0aa2fc41d32568fe9608e671ea8e7a400a5a523026fb35fbfe3fe734baea53e3dd9cae0ae3c0a5a2f2e08170b572016d3fd9a8dd80d51bf368bf77ef6b9f0ff35d4ef70484b00bb5e023b75ae910887da7a7f3711ef54ac1e011da8ee55dec8042c5e462bede3ac7b6830d88e5b6564d9422d99b1d0c3bdcfe8e0a43aca997619d8b3c1859f7d06e70380db190416336490af16519541d50ea8836ed6d6bc6c0f6bff8444c44d59db2516c2d8f979ba377be9", 0xca}, {&(0x7f00000038c0)="f2fd570a7748a543febe8c65d4d5deb457112d9decd6820120c5c7bc2aea272bbc8aaccc6bc9f1278d28823a46450a10f74421cd099b3d846ac568d273fe4d4a4b0465900fb0defcc420c3505cd251fbfcecccfd8aed918f6ef3bb7369a41822cbf9192776a75b0925e6f68e088fd01eec71f59794efa8d9aca2bd05504cbd98254258325afa7df5cab4ababa5503adc4c1c1aba7af10f1ebe7ba5801f89b258823ae146a8d53f0a06ab9f1ffa9e2485f942d9c86b0a2ec8666cf7f4dbdb89500f4743a6276cfd87bc6ae2af0ff80dbb", 0xd0}, {&(0x7f00000039c0)="1cdabcbca0a3751b2dc0337475d140dd8863d66638cc074ad22e185374c9e2f7eb3cc6b2d113d0640819afe3262dd33fca6110b5", 0x34}, {&(0x7f0000003a00)="9a95dcfa01ffd26aa275b14ff2c9acc8a850d57ea7ff7d715c5c372f1c0769209ba92c7e4bb9e30aaae3354cd49b7ecba47cfabbd5da1a3433ad2bc77abc7c33beebc81be1e1004e9a4ce20f425d835dd6ee179dd6bbb0b07770877ba1596b08616533cc87189191f28c184a4e121f13a330500d6f9e518f9bf3dbe75da28a1cafe441826862aaefedbd3e6c", 0x8c}], 0x5, &(0x7f0000003b40)=[{0x78, 0x1, 0x100, "a778eca5af26d5443dbb09e76c9b70adc77e27ae06504543fc0ed8e5b826d73bb7b9d307a345c2d5891894ab3e754cbe33c41d9e8f687d3de8065f7b54012c9bd076ada0d8490b9e087e7431304218fe11686ec0a781c90a4008a721e7e314942b1c919918fcc2"}, {0x100, 0x118, 0x8, "6b1ab740cfc72f8dcac5bda153821aeb1a8c3fc5a15b125a1d25056574dc385134323aceb14ac07e148c8ef1b32e520b2391078e37a3003f802233f559497004c1f477b3afa82533ecd3de585912958853401b0fc2abc3f6512eccde4e64470a7dc21f32c48c505af844a23e5e5e550971dc3aa14ee9755a1d66e3735da58f186bc768f3ee22e28ecdb3661080fc6e1c6852b089bc7b33b0e11cbf7e822b0df836e7e060238f7a5d6087020193111809d1a40da59459d4131bfa4ada50bac7e4916676c5a9950e93223dd70471d0473c288ed1493b0dce77c4537b950f7b1daaef342946586994506101af1376eaee3e"}, {0xd8, 0xfb73566e9f5cff79, 0x2, "01eafaaf4f1fc3f383fd900dd89ed895ac0e164f63dc9f7827849aefdfc03c49e83bf2be2d3ed78bbd015af3618e86d0ef66e3eed8b29e89013984a0df6313f2dd6f86ddf0f504dc36626c975153e465aef673bfbb592557278012498ba22733bf3d80cd0a618851ff09c36098296bf6cf9f283a85936311e6e2badcf10b9c14db4e4d2193ab2aa4f0a8df1e49a54a35379b1621886d0ad5e8fb26deb73ec370cd02015c620bb07aecb08778d418096b92cc36ee0aa7ae52a2ef42c5565c0175f118f58dab"}, {0x58, 0x1, 0x3, "b26c8ae5ce2ba224871b8225a9eb1877f5cc2cc4c2af3cd5cceefaf0aa9af3ed4a75d81cb57622969794e4501b9da75059496d4a8324b26d65cb756aa50a797608abb9"}, {0xf8, 0x10c, 0xfffffffc, "62b66d41eb84630d96a0bc16b7ed172cc7c79cc43d3d1e5afeb5852b964b65916a0dfb0220a8fbece91b0d4aa9bb4eab1f6bbb13c4539b721b1195764f5f2fe596f0ab385732e361abc43f0e674fda78196dedf0619003e8f57c1490c4aa1f73f24791fc34140472d6c7954cb593059c6f2029a3cd027b739ecebcac7fe0831f88266d682cf55f918d2efe4c9cabce03ea2a974e255c13f2ea5ff196fb73323ccb6a3838711a9b3614247071d5b4cf16b1544517307753e3b4cd445692069b4b3f84aa95e0e78b5d440decf00e71478c79e62b5cdcadc030cca5277c78b76bdd4bd4"}, {0x18, 0x107, 0x10001, "e096fa07d75c4a"}, {0x30, 0x116, 0x81, "9470528509cb99cf983f0cc0d0d8617584f444455c55aa49bf2f8e5ff2"}, {0x88, 0x116, 0x9, "efb4fae2cb0eaa159693ea2a068927aa7037b6dae56da50e74a3ba350f9493075c37cdbe2b9cb94ea695c00123ecc4a9572e9bb5625629e220bd41bf813915ebb80badfac336f7df22ecb71160c9cfd0557268b061fd9829abf270787b051e181631d603edd464dcecb0b8b6e4567e5fe536"}], 0x470}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004100)={@cgroup=r12, 0x36, 0x1, 0x7, &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000004040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000040c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004140)={@fallback=r10, r12, 0x0, 0x8, 0x0, @void, @value=r7, @void, @void, r17}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004180)) (async, rerun: 32) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000004540)={&(0x7f00000041c0)="01fa3854356dbe57b4c1326abbf1d96b512109070c917f16ad2a7e098deed4ee01f4340fc4dbd29d82ceff8d8c5b4a3c147cf499bb455790d1ff924f7ab12ce29026b6e05faa93cc0abbd65a3f99842c6c873eb1b42b60be3aa3b1c184f56251279466017abbf644add060514a75baf5c557a0db0fd6d31eaa728a1f0192d46b75c2ebc51d0e820ef1547d47fcc7c7af252b96c04e5c7df5f3bece395d50de180e4b65d2db5cf18fcc23a479cffea339bd6eec661e77f62f72c0e5314e15fadb69fe96e0c4a9cdca063dccb9d0d867", &(0x7f00000042c0)=""/232, &(0x7f00000043c0)="fd2766679193e6f113b0e738d989712cfa2cd2dd8d4b372c56ed1fefd8f1dc187913e134d12189d00f92dd872967a5bb608546a006d0be922eaf6764e1e2c3b1797baa47c3327af635d704c82ecec938d837a79226e1e9e6d8c3def9f44f7cd233354f1576d6e024876321995f7c5034e9c86902420856c998459d34163082792e42d2d8ca8cafbbb41d7871b2e3935cfeeb", &(0x7f0000004480)="96aba728817e6981e11e3d80a9e1f31fbf154b2c41c9a0dbed34c53adc5d4554e2c2d5db78411183368e7f531d17a1f9b1b515baf2636974d22c804f8069b99c16fcd413b33442f16b23149bde2ba4b7dbb026c9c1da319d90d81e2fd7bffe4316589afe77f87493a989513d24d2e81f53fe90d4c63b68bad5ebc349e27ee4c676ca571c319abc08ccf0e7a7368acd37e95693d41827f75184", 0xccf6, r7, 0x4}, 0x38) (rerun: 32) 347.831037ms ago: executing program 4 (id=1134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000011e7cfde0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000a5d59ba7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x11, 0x2, 0x300) close(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x541b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0xfece) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r0, 0x26, 0x0, 0x9, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) write$cgroup_subtree(r5, &(0x7f0000001040)=ANY=[@ANYBLOB="2d85656d6f7279209f0000000000000080d3e28d76fc80f91609fd72353d71d422bf5b10dd822c18c8d1163980b2d554e9cbcea02123451e9b008c24cc5fe404e1b3d458937562aab4ae0144fe00000096cb8da231259aafed69057208bb6d91a8c40ae7ce59e16939a587b0afab141b5acacb984c87e1ca3fc0d123"], 0x11) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESOCT=r4], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 220.61506ms ago: executing program 0 (id=1135): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x50, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[], 0x38}, 0x0) close(0x3) r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc202, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x4) socket$kcm(0x10, 0x2, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000002740)={0x0, 0x39, &(0x7f0000000380)=[{&(0x7f0000000180)="2cd5", 0x2}], 0x1}, 0x24000801) openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 218.862391ms ago: executing program 1 (id=1136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009000000060019c00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d20000009500000000000000f3e7d3df7ae4029bc47eb65df3c72b776b70b28c0bbb76e601cf669c8c900bc92114e57e65ef47bd42e7e56c3d807329fefc8f51d38a12168cff6e6e9ae13513b81f6c90"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152}, 0x94) 188.111436ms ago: executing program 2 (id=1137): close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xd1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fdfffe05e8fe55a1bc0005000000000000000e41b0000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$tipc(0x1e, 0xf, 0x0, &(0x7f0000000080)) r2 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x11, 0x6, &(0x7f0000000100), 0x120) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="5aee41def8ffffff50dfef84420b", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 187.250097ms ago: executing program 3 (id=1138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 85.318055ms ago: executing program 1 (id=1139): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) (async, rerun: 32) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r0], 0xfe33) 0s ago: executing program 3 (id=1140): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x4, 0xc2ba, 0x0, 0x4000000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x4, 0xc2ba, 0x0, 0x4000000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) kernel console output (not intermixed with test programs): 49498][ T4281] ? mutex_unlock+0x10/0x10 [ 132.354011][ T4281] ? skb_pull_data+0xec/0x1f0 [ 132.358749][ T4281] hci_le_enh_conn_complete_evt+0x185/0x460 [ 132.364672][ T4281] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 132.371109][ T4281] ? hci_remote_host_features_evt+0x230/0x230 [ 132.377192][ T4281] hci_event_packet+0x7b3/0x1290 [ 132.382171][ T4281] ? lock_chain_count+0x20/0x20 [ 132.387042][ T4281] ? bis_list+0x280/0x280 [ 132.391379][ T4281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 132.397297][ T4281] ? kcov_remote_start+0x50f/0x810 [ 132.402423][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 132.407643][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 132.412866][ T4281] hci_rx_work+0x3eb/0xd40 [ 132.417300][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 132.422181][ T4281] ? process_one_work+0x7b4/0x1160 [ 132.427319][ T4281] process_one_work+0x8ab/0x1160 [ 132.432307][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 132.437950][ T4281] ? _raw_spin_lock_irq+0x86/0xf0 [ 132.442998][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 132.448037][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 132.453606][ T4281] ? wq_worker_running+0x97/0x190 [ 132.458648][ T4281] worker_thread+0xaf5/0x12a0 [ 132.463403][ T4281] kthread+0x29d/0x330 [ 132.467482][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 132.472521][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 132.477124][ T4281] ret_from_fork+0x1f/0x30 [ 132.481598][ T4281] [ 132.497068][ T4281] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 132.511067][ T4281] Bluetooth: hci4: failed to register connection device [ 132.590814][ T5539] netlink: 'syz.1.297': attribute type 21 has an invalid length. [ 132.731525][ T5536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.296'. [ 133.034288][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.040690][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.281961][ T5561] sctp: [Deprecated]: syz.1.301 (pid 5561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.281961][ T5561] Use struct sctp_sack_info instead [ 133.461226][ T5565] cgroup: fork rejected by pids controller in /syz2 [ 133.924884][ T5693] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.311'. [ 133.943870][ T5693] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.311'. [ 134.250271][ T4281] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 134.563475][ T4281] Bluetooth: hci4: command 0x2016 tx timeout [ 135.262472][ T4735] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.394900][ T5714] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.317'. [ 135.499245][ T4735] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.648947][ T4735] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.739406][ T4735] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.211110][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.220477][ T4273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.228968][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.238270][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.247014][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 136.254673][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.313272][ T4273] Bluetooth: hci1: command 0x2016 tx timeout [ 137.151209][ T5744] chnl_net:caif_netlink_parms(): no params data found [ 137.333443][ T5778] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.331'. [ 137.349135][ T4281] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 138.315087][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 138.589185][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.610986][ T5800] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.336'. [ 138.640520][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.670716][ T5744] device bridge_slave_0 entered promiscuous mode [ 138.720465][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.733322][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.759598][ T5744] device bridge_slave_1 entered promiscuous mode [ 138.949444][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.075446][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.254715][ T5816] validate_nla: 1 callbacks suppressed [ 139.254730][ T5816] netlink: 'syz.4.340': attribute type 10 has an invalid length. [ 139.291984][ T5816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.340'. [ 139.316709][ T5816] bridge0: port 3(veth0_vlan) entered blocking state [ 139.342260][ T5816] bridge0: port 3(veth0_vlan) entered disabled state [ 139.357871][ T5816] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 139.433253][ T4281] Bluetooth: hci0: command 0x2016 tx timeout [ 139.675733][ T5744] team0: Port device team_slave_0 added [ 139.805673][ T5744] team0: Port device team_slave_1 added [ 139.929951][ T5839] netlink: 'syz.4.345': attribute type 10 has an invalid length. [ 139.950287][ T4273] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 139.958941][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 139.969662][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 139.977275][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.987374][ T4273] Workqueue: hci0 hci_rx_work [ 139.992118][ T4273] Call Trace: [ 139.995442][ T4273] [ 139.998404][ T4273] dump_stack_lvl+0x188/0x24e [ 140.003136][ T4273] ? show_regs_print_info+0x12/0x12 [ 140.008386][ T4273] ? load_image+0x410/0x410 [ 140.012992][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 140.018158][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 140.023253][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 140.027993][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 140.033254][ T4273] kobject_add_internal+0x617/0xca0 [ 140.038512][ T4273] kobject_add+0x160/0x230 [ 140.042982][ T4273] ? kobject_init+0x1c0/0x1c0 [ 140.047705][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 140.053016][ T4273] ? klist_children_get+0x50/0x50 [ 140.058056][ T4273] ? get_device_parent+0x121/0x3e0 [ 140.063197][ T4273] device_add+0x470/0x1050 [ 140.067648][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 140.072603][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 140.077965][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 140.084262][ T4273] ? bt_info+0x180/0x180 [ 140.088522][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 140.094178][ T4273] ? mutex_unlock+0x10/0x10 [ 140.098690][ T4273] ? skb_pull_data+0xec/0x1f0 [ 140.103385][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 140.109304][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 140.115754][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 140.121837][ T4273] hci_event_packet+0x7b3/0x1290 [ 140.126803][ T4273] ? lock_chain_count+0x20/0x20 [ 140.131668][ T4273] ? bis_list+0x280/0x280 [ 140.136007][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.141934][ T4273] ? kcov_remote_start+0x50f/0x810 [ 140.147056][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 140.152274][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 140.157496][ T4273] hci_rx_work+0x3eb/0xd40 [ 140.161932][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 140.166814][ T4273] ? process_one_work+0x7b4/0x1160 [ 140.171945][ T4273] process_one_work+0x8ab/0x1160 [ 140.176935][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 140.182591][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 140.187638][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 140.193216][ T4273] ? wq_worker_running+0x97/0x190 [ 140.198279][ T4273] worker_thread+0xaf5/0x12a0 [ 140.203036][ T4273] kthread+0x29d/0x330 [ 140.207109][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 140.212140][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 140.216744][ T4273] ret_from_fork+0x1f/0x30 [ 140.221208][ T4273] [ 140.243322][ T4273] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 140.256521][ T4273] Bluetooth: hci0: failed to register connection device [ 140.301283][ T5839] device veth0_vlan left promiscuous mode [ 140.338367][ T5839] device veth0_vlan entered promiscuous mode [ 140.368543][ T5839] team0: Device veth0_vlan failed to register rx_handler [ 140.393457][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 140.469730][ T4735] device hsr_slave_0 left promiscuous mode [ 140.485809][ T4735] device hsr_slave_1 left promiscuous mode [ 140.500505][ T4735] device bridge_slave_1 left promiscuous mode [ 140.524801][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.566155][ T4735] device bridge_slave_0 left promiscuous mode [ 140.593847][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.676481][ T4735] device veth1_macvtap left promiscuous mode [ 140.703892][ T4735] device veth0_macvtap left promiscuous mode [ 140.710220][ T4735] device veth1_vlan left promiscuous mode [ 140.743651][ T4735] device veth0_vlan left promiscuous mode [ 141.314681][ T4735] team0 (unregistering): Port device team_slave_1 removed [ 141.351333][ T4735] team0 (unregistering): Port device team_slave_0 removed [ 141.392800][ T4735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.429636][ T4735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.660310][ T4735] bond0 (unregistering): Released all slaves [ 141.744239][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.751239][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.777501][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.843927][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.850906][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.913204][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.080010][ T5861] netlink: 763 bytes leftover after parsing attributes in process `syz.3.349'. [ 142.112630][ T5744] device hsr_slave_0 entered promiscuous mode [ 142.122342][ T5744] device hsr_slave_1 entered promiscuous mode [ 142.137900][ T5744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.147052][ T5744] Cannot create hsr debugfs directory [ 142.313574][ T4273] Bluetooth: hci0: command 0x2016 tx timeout [ 142.473478][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 143.091991][ T5892] netlink: 'syz.1.353': attribute type 2 has an invalid length. [ 143.535577][ T5907] netlink: 'syz.3.355': attribute type 27 has an invalid length. [ 143.613456][ T5907] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.355'. [ 143.919082][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.987552][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.011278][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.041732][ T4273] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 144.051628][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 144.063983][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 144.071595][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.081694][ T4273] Workqueue: hci0 hci_rx_work [ 144.086432][ T4273] Call Trace: [ 144.089733][ T4273] [ 144.092690][ T4273] dump_stack_lvl+0x188/0x24e [ 144.097413][ T4273] ? show_regs_print_info+0x12/0x12 [ 144.102657][ T4273] ? load_image+0x410/0x410 [ 144.107248][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 144.112414][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 144.117499][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 144.122219][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 144.127456][ T4273] kobject_add_internal+0x617/0xca0 [ 144.132713][ T4273] kobject_add+0x160/0x230 [ 144.137164][ T4273] ? kobject_init+0x1c0/0x1c0 [ 144.141865][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 144.147166][ T4273] ? klist_children_get+0x50/0x50 [ 144.152201][ T4273] ? get_device_parent+0x121/0x3e0 [ 144.157342][ T4273] device_add+0x470/0x1050 [ 144.161788][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 144.166750][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 144.172077][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 144.178346][ T4273] ? bt_info+0x180/0x180 [ 144.182602][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 144.188256][ T4273] ? mutex_unlock+0x10/0x10 [ 144.192768][ T4273] ? skb_pull_data+0xec/0x1f0 [ 144.197463][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 144.203374][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 144.209809][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 144.215891][ T4273] hci_event_packet+0x7b3/0x1290 [ 144.220863][ T4273] ? lock_chain_count+0x20/0x20 [ 144.225738][ T4273] ? bis_list+0x280/0x280 [ 144.230073][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 144.235988][ T4273] ? kcov_remote_start+0x50f/0x810 [ 144.241110][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 144.246333][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 144.251561][ T4273] hci_rx_work+0x3eb/0xd40 [ 144.256007][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 144.260889][ T4273] ? process_one_work+0x7b4/0x1160 [ 144.266028][ T4273] process_one_work+0x8ab/0x1160 [ 144.271022][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 144.276667][ T4273] ? _raw_spin_lock_irq+0x86/0xf0 [ 144.281718][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 144.286763][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 144.292335][ T4273] ? wq_worker_running+0x97/0x190 [ 144.297378][ T4273] worker_thread+0xaf5/0x12a0 [ 144.302137][ T4273] kthread+0x29d/0x330 [ 144.306211][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 144.311245][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 144.315847][ T4273] ret_from_fork+0x1f/0x30 [ 144.320322][ T4273] [ 144.332277][ T4273] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 144.353367][ T4273] Bluetooth: hci0: failed to register connection device [ 144.386375][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.545116][ T5914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.357'. [ 144.563210][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 144.736590][ T5912] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 144.773792][ T5912] netlink: 2 bytes leftover after parsing attributes in process `syz.0.356'. [ 144.816734][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.908350][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.915708][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.955355][ T5912] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 144.963920][ T5927] netlink: 'syz.3.361': attribute type 29 has an invalid length. [ 145.041223][ T5927] netlink: 'syz.3.361': attribute type 29 has an invalid length. [ 145.062550][ T5929] netlink: 'syz.3.361': attribute type 29 has an invalid length. [ 145.165793][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.256276][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.282491][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.338324][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.379361][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.409631][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.464289][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.471533][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.518795][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.567459][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.613212][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.640402][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.647713][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.678447][ T5954] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.365'. [ 145.728936][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.772746][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.846306][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.899324][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.962256][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.004328][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.031875][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.061385][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.085964][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.109885][ T5744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.154141][ T5744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.194374][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.220644][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.260608][ T5969] netlink: 'syz.4.366': attribute type 9 has an invalid length. [ 146.288728][ T5969] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.366'. [ 146.399526][ T4273] Bluetooth: hci0: command 0x2016 tx timeout [ 146.700048][ T5979] netlink: 'syz.3.368': attribute type 10 has an invalid length. [ 148.717981][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.743459][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.780860][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.792638][ T4273] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 148.930969][ T5997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.371'. [ 148.980285][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.034451][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.114410][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.122875][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.186444][ T5744] device veth0_vlan entered promiscuous mode [ 149.233886][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.241857][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.251429][ T6012] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 149.287463][ T5744] device veth1_vlan entered promiscuous mode [ 149.293608][ T6012] netlink: 132 bytes leftover after parsing attributes in process `syz.4.375'. [ 149.349339][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.364915][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.420140][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.484000][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.495194][ T5744] device veth0_macvtap entered promiscuous mode [ 149.555985][ T5744] device veth1_macvtap entered promiscuous mode [ 149.642266][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.691630][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.753378][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.793338][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.878092][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.941648][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.962617][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.978324][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.042946][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.064992][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.091786][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.100954][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.148526][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.189631][ T6032] netlink: 'syz.0.379': attribute type 12 has an invalid length. [ 150.219237][ T6032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.379'. [ 150.273527][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.293011][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.324449][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.348015][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.365415][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.376353][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.386683][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.398001][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.441461][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.460527][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.485230][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.536256][ T5744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.570951][ T5744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.595982][ T5744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.622650][ T5744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.874264][ T4273] Bluetooth: hci3: command 0x2016 tx timeout [ 151.064527][ T4273] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 151.072543][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 151.082876][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 151.090491][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.100597][ T4273] Workqueue: hci4 hci_rx_work [ 151.105339][ T4273] Call Trace: [ 151.108653][ T4273] [ 151.111623][ T4273] dump_stack_lvl+0x188/0x24e [ 151.116363][ T4273] ? show_regs_print_info+0x12/0x12 [ 151.121615][ T4273] ? load_image+0x410/0x410 [ 151.126220][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 151.131402][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 151.136497][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 151.141223][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 151.146455][ T4273] kobject_add_internal+0x617/0xca0 [ 151.151701][ T4273] kobject_add+0x160/0x230 [ 151.156156][ T4273] ? kobject_init+0x1c0/0x1c0 [ 151.160862][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 151.166159][ T4273] ? klist_children_get+0x50/0x50 [ 151.171200][ T4273] ? get_device_parent+0x121/0x3e0 [ 151.176348][ T4273] device_add+0x470/0x1050 [ 151.180837][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 151.185808][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 151.191142][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 151.197407][ T4273] ? bt_info+0x180/0x180 [ 151.201671][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 151.207335][ T4273] ? mutex_unlock+0x10/0x10 [ 151.211854][ T4273] ? skb_pull_data+0xec/0x1f0 [ 151.216582][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 151.222504][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 151.228945][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 151.235037][ T4273] hci_event_packet+0x7b3/0x1290 [ 151.240006][ T4273] ? lock_chain_count+0x20/0x20 [ 151.244880][ T4273] ? bis_list+0x280/0x280 [ 151.249219][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 151.255164][ T4273] ? kcov_remote_start+0x50f/0x810 [ 151.260297][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 151.265523][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 151.270751][ T4273] hci_rx_work+0x3eb/0xd40 [ 151.275235][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 151.280133][ T4273] ? process_one_work+0x7b4/0x1160 [ 151.285270][ T4273] process_one_work+0x8ab/0x1160 [ 151.290264][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 151.295910][ T4273] ? _raw_spin_lock_irq+0x86/0xf0 [ 151.300960][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 151.306006][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 151.311584][ T4273] ? wq_worker_running+0x97/0x190 [ 151.316627][ T4273] worker_thread+0xaf5/0x12a0 [ 151.321397][ T4273] kthread+0x29d/0x330 [ 151.325476][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 151.330513][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 151.335128][ T4273] ret_from_fork+0x1f/0x30 [ 151.339602][ T4273] [ 151.348895][ T4273] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 151.362316][ T4273] Bluetooth: hci4: failed to register connection device [ 151.651616][ T6062] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.384'. [ 152.297401][ T6061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.386'. [ 152.320308][ T6057] ¥: port 1(team0) entered blocking state [ 152.327316][ T6057] ¥: port 1(team0) entered disabled state [ 152.359546][ T6057] device team0 entered promiscuous mode [ 152.400616][ T6057] device team_slave_0 entered promiscuous mode [ 152.444300][ T6057] device team_slave_1 entered promiscuous mode [ 152.469898][ T4735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.493255][ T4735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.501590][ T6067] device team0 left promiscuous mode [ 152.543313][ T6067] device team_slave_0 left promiscuous mode [ 152.567719][ T6067] device team_slave_1 left promiscuous mode [ 152.584517][ T6067] ¥: port 1(team0) entered disabled state [ 152.711370][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.065390][ T4735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.099301][ T4735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.139785][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.433319][ T4273] Bluetooth: hci4: command 0x2016 tx timeout [ 153.956601][ T6147] syz.2.402[6147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.956731][ T6147] syz.2.402[6147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.968651][ T4273] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 153.991961][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 154.002100][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 154.009701][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.019795][ T4273] Workqueue: hci3 hci_rx_work [ 154.024525][ T4273] Call Trace: [ 154.027827][ T4273] [ 154.030789][ T4273] dump_stack_lvl+0x188/0x24e [ 154.035521][ T4273] ? show_regs_print_info+0x12/0x12 [ 154.040762][ T4273] ? load_image+0x410/0x410 [ 154.045352][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 154.050513][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 154.055595][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 154.060331][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 154.065636][ T4273] kobject_add_internal+0x617/0xca0 [ 154.070893][ T4273] kobject_add+0x160/0x230 [ 154.075350][ T4273] ? kobject_init+0x1c0/0x1c0 [ 154.080087][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 154.085383][ T4273] ? klist_children_get+0x50/0x50 [ 154.090415][ T4273] ? get_device_parent+0x121/0x3e0 [ 154.095549][ T4273] device_add+0x470/0x1050 [ 154.100006][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 154.104963][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 154.110293][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 154.116555][ T4273] ? bt_info+0x180/0x180 [ 154.120812][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 154.126470][ T4273] ? mutex_unlock+0x10/0x10 [ 154.130984][ T4273] ? skb_pull_data+0xec/0x1f0 [ 154.135678][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 154.141600][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 154.148035][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 154.154114][ T4273] hci_event_packet+0x7b3/0x1290 [ 154.159078][ T4273] ? lock_chain_count+0x20/0x20 [ 154.163945][ T4273] ? bis_list+0x280/0x280 [ 154.168277][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 154.174190][ T4273] ? kcov_remote_start+0x50f/0x810 [ 154.179318][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 154.184536][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 154.189758][ T4273] hci_rx_work+0x3eb/0xd40 [ 154.194198][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 154.199085][ T4273] ? process_one_work+0x7b4/0x1160 [ 154.204222][ T4273] process_one_work+0x8ab/0x1160 [ 154.209212][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 154.214873][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 154.220003][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 154.225567][ T4273] ? wq_worker_running+0x97/0x190 [ 154.230609][ T4273] worker_thread+0xaf5/0x12a0 [ 154.235365][ T4273] kthread+0x29d/0x330 [ 154.239442][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 154.244477][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 154.249079][ T4273] ret_from_fork+0x1f/0x30 [ 154.253547][ T4273] [ 154.263454][ T4273] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 154.276880][ T4273] Bluetooth: hci3: failed to register connection device [ 154.579302][ T6155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.399'. [ 155.192092][ T6179] netlink: 'syz.1.407': attribute type 3 has an invalid length. [ 155.214686][ T6177] netlink: 'syz.4.404': attribute type 2 has an invalid length. [ 155.256163][ T6173] netlink: 'syz.2.406': attribute type 41 has an invalid length. [ 155.313403][ T6177] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.404'. [ 155.861931][ T6196] netlink: 132 bytes leftover after parsing attributes in process `syz.4.411'. [ 155.906800][ T6198] netlink: 132 bytes leftover after parsing attributes in process `syz.4.411'. [ 156.192365][ T6209] netlink: 68520 bytes leftover after parsing attributes in process `syz.3.413'. [ 156.313723][ T4273] Bluetooth: hci3: command 0x2016 tx timeout [ 156.736163][ T6226] netlink: 14 bytes leftover after parsing attributes in process `syz.2.418'. [ 156.771107][ T6225] FAULT_INJECTION: forcing a failure. [ 156.771107][ T6225] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.858518][ T6225] CPU: 0 PID: 6225 Comm: syz.1.417 Not tainted syzkaller #0 [ 156.865875][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.875953][ T6225] Call Trace: [ 156.879297][ T6225] [ 156.882243][ T6225] dump_stack_lvl+0x188/0x24e [ 156.886955][ T6225] ? show_regs_print_info+0x12/0x12 [ 156.892183][ T6225] ? load_image+0x410/0x410 [ 156.896725][ T6225] ? __lock_acquire+0x7c40/0x7c40 [ 156.901782][ T6225] ? snprintf+0xe5/0x140 [ 156.906054][ T6225] should_fail_ex+0x390/0x4c0 [ 156.910774][ T6225] _copy_to_user+0x2c/0x130 [ 156.915299][ T6225] simple_read_from_buffer+0xe3/0x150 [ 156.920699][ T6225] proc_fail_nth_read+0x1a6/0x220 [ 156.925754][ T6225] ? proc_fault_inject_write+0x310/0x310 [ 156.931418][ T6225] ? fsnotify_perm+0x248/0x550 [ 156.936208][ T6225] ? proc_fault_inject_write+0x310/0x310 [ 156.941869][ T6225] vfs_read+0x2db/0x960 [ 156.946066][ T6225] ? kernel_read+0x1e0/0x1e0 [ 156.950692][ T6225] ? __fget_files+0x28/0x460 [ 156.955311][ T6225] ? __fget_files+0x3fc/0x460 [ 156.960025][ T6225] ? __fdget_pos+0x2ae/0x360 [ 156.964642][ T6225] ? ksys_read+0x70/0x260 [ 156.968991][ T6225] ksys_read+0x14d/0x260 [ 156.973259][ T6225] ? vfs_write+0x9a0/0x9a0 [ 156.977705][ T6225] ? lockdep_hardirqs_on+0x94/0x140 [ 156.982936][ T6225] do_syscall_64+0x4c/0xa0 [ 156.987370][ T6225] ? clear_bhb_loop+0x60/0xb0 [ 156.992091][ T6225] ? clear_bhb_loop+0x60/0xb0 [ 156.996794][ T6225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.002738][ T6225] RIP: 0033:0x7fb0e9b5e98e [ 157.007187][ T6225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.030642][ T6225] RSP: 002b:00007fb0eab0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.039096][ T6225] RAX: ffffffffffffffda RBX: 00007fb0eab0d6c0 RCX: 00007fb0e9b5e98e [ 157.047101][ T6225] RDX: 000000000000000f RSI: 00007fb0eab0d0a0 RDI: 000000000000000a [ 157.055112][ T6225] RBP: 00007fb0eab0d090 R08: 0000000000000000 R09: 0000000000000000 [ 157.063228][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.071253][ T6225] R13: 00007fb0e9e26218 R14: 00007fb0e9e26180 R15: 00007ffe1bf29b68 [ 157.079265][ T6225] [ 157.531417][ T4273] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 157.540561][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 157.550063][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 157.557638][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.567716][ T4273] Workqueue: hci0 hci_rx_work [ 157.572432][ T4273] Call Trace: [ 157.575744][ T4273] [ 157.578715][ T4273] dump_stack_lvl+0x188/0x24e [ 157.583434][ T4273] ? show_regs_print_info+0x12/0x12 [ 157.588671][ T4273] ? load_image+0x410/0x410 [ 157.593220][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 157.598453][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 157.603520][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 157.608223][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 157.613424][ T4273] kobject_add_internal+0x617/0xca0 [ 157.618630][ T4273] kobject_add+0x160/0x230 [ 157.623075][ T4273] ? kobject_init+0x1c0/0x1c0 [ 157.627783][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 157.633073][ T4273] ? klist_children_get+0x50/0x50 [ 157.638189][ T4273] ? get_device_parent+0x121/0x3e0 [ 157.643329][ T4273] device_add+0x470/0x1050 [ 157.647766][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 157.652832][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 157.658192][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 157.664452][ T4273] ? bt_info+0x180/0x180 [ 157.668702][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 157.674333][ T4273] ? mutex_unlock+0x10/0x10 [ 157.678857][ T4273] ? skb_pull_data+0xec/0x1f0 [ 157.683563][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 157.689487][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 157.695932][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 157.702025][ T4273] hci_event_packet+0x7b3/0x1290 [ 157.706980][ T4273] ? lock_chain_count+0x20/0x20 [ 157.711847][ T4273] ? bis_list+0x280/0x280 [ 157.716172][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 157.722072][ T4273] ? kcov_remote_start+0x50f/0x810 [ 157.727187][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 157.732391][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 157.737605][ T4273] hci_rx_work+0x3eb/0xd40 [ 157.742024][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 157.746880][ T4273] ? process_one_work+0x7b4/0x1160 [ 157.751999][ T4273] process_one_work+0x8ab/0x1160 [ 157.756950][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 157.762592][ T4273] ? _raw_spin_lock_irq+0x86/0xf0 [ 157.767620][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 157.772648][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 157.778202][ T4273] ? wq_worker_running+0x97/0x190 [ 157.783230][ T4273] worker_thread+0xaf5/0x12a0 [ 157.787934][ T4273] kthread+0x29d/0x330 [ 157.791994][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 157.797014][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 157.801600][ T4273] ret_from_fork+0x1f/0x30 [ 157.806028][ T4273] [ 157.819902][ T4273] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 157.833560][ T4273] Bluetooth: hci0: failed to register connection device [ 158.038276][ T6233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.419'. [ 159.579908][ T6237] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.420'. [ 159.684056][ T6240] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 159.731927][ T6240] netlink: 7295 bytes leftover after parsing attributes in process `syz.1.422'. [ 159.929345][ T4273] Bluetooth: hci0: command 0x2016 tx timeout [ 160.887098][ T6286] netlink: 'syz.1.431': attribute type 21 has an invalid length. [ 161.058358][ T6286] netlink: 'syz.1.431': attribute type 12 has an invalid length. [ 161.130061][ T6286] netlink: 'syz.1.431': attribute type 13 has an invalid length. [ 161.216722][ T6286] netlink: 'syz.1.431': attribute type 14 has an invalid length. [ 161.337128][ T6286] netlink: 'syz.1.431': attribute type 15 has an invalid length. [ 161.413895][ T6286] netlink: 'syz.1.431': attribute type 16 has an invalid length. [ 161.421689][ T6286] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.431'. [ 161.608228][ T6294] netlink: 'syz.1.431': attribute type 21 has an invalid length. [ 161.654928][ T6294] netlink: 'syz.1.431': attribute type 11 has an invalid length. [ 161.662724][ T6294] netlink: 'syz.1.431': attribute type 12 has an invalid length. [ 161.735100][ T6294] netlink: 'syz.1.431': attribute type 13 has an invalid length. [ 161.794517][ T6294] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.431'. [ 161.828636][ T6299] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.433'. [ 162.138466][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 162.176738][ T4281] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 162.185470][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 162.195464][ T4281] CPU: 1 PID: 4281 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 162.203066][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.213169][ T4281] Workqueue: hci3 hci_rx_work [ 162.217926][ T4281] Call Trace: [ 162.221250][ T4281] [ 162.224231][ T4281] dump_stack_lvl+0x188/0x24e [ 162.228967][ T4281] ? show_regs_print_info+0x12/0x12 [ 162.234224][ T4281] ? load_image+0x410/0x410 [ 162.238829][ T4281] sysfs_create_dir_ns+0x26a/0x290 [ 162.243996][ T4281] ? __lock_acquire+0x7c40/0x7c40 [ 162.249080][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 162.253818][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 162.259073][ T4281] kobject_add_internal+0x617/0xca0 [ 162.264322][ T4281] kobject_add+0x160/0x230 [ 162.268790][ T4281] ? kobject_init+0x1c0/0x1c0 [ 162.273509][ T4281] ? __raw_spin_lock_init+0x41/0x100 [ 162.278805][ T4281] ? klist_children_get+0x50/0x50 [ 162.283837][ T4281] ? get_device_parent+0x121/0x3e0 [ 162.288979][ T4281] device_add+0x470/0x1050 [ 162.293424][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 162.298383][ T4281] le_conn_complete_evt+0xf93/0x15c0 [ 162.303707][ T4281] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 162.309968][ T4281] ? bt_info+0x180/0x180 [ 162.314227][ T4281] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 162.319881][ T4281] ? mutex_unlock+0x10/0x10 [ 162.324396][ T4281] ? skb_pull_data+0xec/0x1f0 [ 162.329126][ T4281] hci_le_enh_conn_complete_evt+0x185/0x460 [ 162.335045][ T4281] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 162.341488][ T4281] ? hci_remote_host_features_evt+0x230/0x230 [ 162.347569][ T4281] hci_event_packet+0x7b3/0x1290 [ 162.352532][ T4281] ? lock_chain_count+0x20/0x20 [ 162.357403][ T4281] ? bis_list+0x280/0x280 [ 162.361741][ T4281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 162.367657][ T4281] ? kcov_remote_start+0x50f/0x810 [ 162.372781][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 162.378032][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 162.383300][ T4281] hci_rx_work+0x3eb/0xd40 [ 162.387752][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 162.392650][ T4281] ? process_one_work+0x7b4/0x1160 [ 162.397778][ T4281] process_one_work+0x8ab/0x1160 [ 162.402768][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 162.408414][ T4281] ? _raw_spin_lock_irq+0x86/0xf0 [ 162.413466][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 162.418506][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 162.424157][ T4281] ? wq_worker_running+0x97/0x190 [ 162.429206][ T4281] worker_thread+0xaf5/0x12a0 [ 162.433961][ T4281] kthread+0x29d/0x330 [ 162.438052][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 162.443097][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 162.447709][ T4281] ret_from_fork+0x1f/0x30 [ 162.452180][ T4281] [ 162.457248][ T4281] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 162.474049][ T4281] Bluetooth: hci3: failed to register connection device [ 162.488838][ T6306] netlink: 132 bytes leftover after parsing attributes in process `syz.4.435'. [ 164.553492][ T4281] Bluetooth: hci3: command 0x2016 tx timeout [ 165.117242][ T6308] netlink: 36 bytes leftover after parsing attributes in process `syz.0.436'. [ 165.140999][ T6324] netlink: 55 bytes leftover after parsing attributes in process `syz.2.439'. [ 165.979454][ T6345] netlink: 60 bytes leftover after parsing attributes in process `syz.4.444'. [ 166.052255][ T6351] validate_nla: 6 callbacks suppressed [ 166.052272][ T6351] netlink: 'syz.2.445': attribute type 27 has an invalid length. [ 166.087854][ T6345] netlink: 60 bytes leftover after parsing attributes in process `syz.4.444'. [ 166.112189][ T6354] netlink: 60 bytes leftover after parsing attributes in process `syz.4.444'. [ 166.768707][ T6368] netlink: 132 bytes leftover after parsing attributes in process `syz.4.451'. [ 167.443413][ T4273] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 167.452192][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 167.461736][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 167.469307][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.479392][ T4273] Workqueue: hci0 hci_rx_work [ 167.484098][ T4273] Call Trace: [ 167.487389][ T4273] [ 167.490336][ T4273] dump_stack_lvl+0x188/0x24e [ 167.495041][ T4273] ? show_regs_print_info+0x12/0x12 [ 167.500259][ T4273] ? load_image+0x410/0x410 [ 167.504803][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 167.509944][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 167.514995][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 167.519718][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 167.524961][ T4273] kobject_add_internal+0x617/0xca0 [ 167.530196][ T4273] kobject_add+0x160/0x230 [ 167.534662][ T4273] ? kobject_init+0x1c0/0x1c0 [ 167.539400][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 167.544716][ T4273] ? klist_children_get+0x50/0x50 [ 167.549769][ T4273] ? get_device_parent+0x121/0x3e0 [ 167.554916][ T4273] device_add+0x470/0x1050 [ 167.559375][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 167.564349][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 167.569679][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 167.575968][ T4273] ? bt_info+0x180/0x180 [ 167.580243][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 167.585913][ T4273] ? mutex_unlock+0x10/0x10 [ 167.590447][ T4273] ? skb_pull_data+0xec/0x1f0 [ 167.595147][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 167.601074][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 167.607519][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 167.613606][ T4273] hci_event_packet+0x7b3/0x1290 [ 167.618571][ T4273] ? lock_chain_count+0x20/0x20 [ 167.623634][ T4273] ? bis_list+0x280/0x280 [ 167.627991][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 167.633923][ T4273] ? kcov_remote_start+0x50f/0x810 [ 167.639070][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 167.644305][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 167.649540][ T4273] hci_rx_work+0x3eb/0xd40 [ 167.653991][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 167.658878][ T4273] ? process_one_work+0x7b4/0x1160 [ 167.664013][ T4273] process_one_work+0x8ab/0x1160 [ 167.668986][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 167.674635][ T4273] ? _raw_spin_lock_irq+0x86/0xf0 [ 167.679688][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 167.684732][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 167.690357][ T4273] ? wq_worker_running+0x97/0x190 [ 167.695404][ T4273] worker_thread+0xaf5/0x12a0 [ 167.700143][ T4273] kthread+0x29d/0x330 [ 167.704240][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 167.709293][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 167.713909][ T4273] ret_from_fork+0x1f/0x30 [ 167.718369][ T4273] [ 167.725511][ T4273] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 167.735108][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.452'. [ 167.738945][ T4273] Bluetooth: hci0: failed to register connection device [ 169.117729][ T6376] tc_dump_action: action bad kind [ 169.143464][ T6377] netlink: 16174 bytes leftover after parsing attributes in process `syz.2.453'. [ 169.358028][ T6383] netlink: 168 bytes leftover after parsing attributes in process `syz.0.455'. [ 169.485981][ T6388] netlink: 'syz.3.458': attribute type 9 has an invalid length. [ 169.535507][ T6388] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.458'. [ 169.797499][ T6390] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 169.812573][ T6390] netlink: 'syz.3.458': attribute type 8 has an invalid length. [ 169.833927][ T4273] Bluetooth: hci0: command 0x2016 tx timeout [ 170.629829][ T6418] __nla_validate_parse: 1 callbacks suppressed [ 170.629867][ T6418] netlink: 48 bytes leftover after parsing attributes in process `syz.3.465'. [ 170.977492][ T4273] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 170.985671][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 170.995593][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 171.003186][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.013284][ T4273] Workqueue: hci3 hci_rx_work [ 171.018006][ T4273] Call Trace: [ 171.021312][ T4273] [ 171.024256][ T4273] dump_stack_lvl+0x188/0x24e [ 171.028959][ T4273] ? show_regs_print_info+0x12/0x12 [ 171.034170][ T4273] ? load_image+0x410/0x410 [ 171.038722][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 171.043850][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 171.048895][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 171.053611][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 171.058844][ T4273] kobject_add_internal+0x617/0xca0 [ 171.064087][ T4273] kobject_add+0x160/0x230 [ 171.068534][ T4273] ? kobject_init+0x1c0/0x1c0 [ 171.073241][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 171.078538][ T4273] ? klist_children_get+0x50/0x50 [ 171.083575][ T4273] ? get_device_parent+0x121/0x3e0 [ 171.088712][ T4273] device_add+0x470/0x1050 [ 171.093159][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 171.098115][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 171.103449][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 171.109766][ T4273] ? bt_info+0x180/0x180 [ 171.114031][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 171.119683][ T4273] ? mutex_unlock+0x10/0x10 [ 171.124196][ T4273] ? skb_pull_data+0xec/0x1f0 [ 171.128892][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 171.134820][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 171.141257][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 171.147338][ T4273] hci_event_packet+0x7b3/0x1290 [ 171.152305][ T4273] ? lock_chain_count+0x20/0x20 [ 171.157177][ T4273] ? bis_list+0x280/0x280 [ 171.161512][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 171.167429][ T4273] ? kcov_remote_start+0x50f/0x810 [ 171.172556][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 171.177777][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 171.183007][ T4273] hci_rx_work+0x3eb/0xd40 [ 171.188435][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 171.194920][ T4273] ? process_one_work+0x7b4/0x1160 [ 171.200193][ T4273] process_one_work+0x8ab/0x1160 [ 171.205229][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 171.210904][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 171.215970][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 171.221583][ T4273] ? wq_worker_running+0x97/0x190 [ 171.226650][ T4273] worker_thread+0xaf5/0x12a0 [ 171.231411][ T4273] kthread+0x29d/0x330 [ 171.235492][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 171.240528][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 171.245134][ T4273] ret_from_fork+0x1f/0x30 [ 171.249622][ T4273] [ 171.265139][ T4273] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 171.278541][ T4273] Bluetooth: hci3: failed to register connection device [ 172.291178][ T6452] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.472'. [ 173.353192][ T4273] Bluetooth: hci3: command 0x2016 tx timeout [ 174.774839][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.782889][ T6426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.805921][ T6429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.468'. [ 174.994598][ T6461] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.475'. [ 175.010093][ T6464] netlink: 'syz.1.476': attribute type 3 has an invalid length. [ 175.057394][ T6464] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.476'. [ 175.076108][ T6466] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.474'. [ 175.358148][ T6473] device sit0 entered promiscuous mode [ 175.520738][ T6482] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.481'. [ 175.640288][ T6478] netlink: 'syz.1.481': attribute type 10 has an invalid length. [ 175.662350][ T6478] batman_adv: batadv0: Adding interface: netdevsim0 [ 175.681290][ T6478] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.737859][ T6478] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 176.067588][ T4273] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 176.075906][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 176.089108][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 176.096729][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.106821][ T4273] Workqueue: hci3 hci_rx_work [ 176.111551][ T4273] Call Trace: [ 176.114860][ T4273] [ 176.117820][ T4273] dump_stack_lvl+0x188/0x24e [ 176.122542][ T4273] ? show_regs_print_info+0x12/0x12 [ 176.127784][ T4273] ? load_image+0x410/0x410 [ 176.132390][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 176.137564][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 176.142630][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 176.147355][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 176.152601][ T4273] kobject_add_internal+0x617/0xca0 [ 176.157859][ T4273] kobject_add+0x160/0x230 [ 176.162330][ T4273] ? kobject_init+0x1c0/0x1c0 [ 176.167055][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 176.172373][ T4273] ? klist_children_get+0x50/0x50 [ 176.177431][ T4273] ? get_device_parent+0x121/0x3e0 [ 176.182592][ T4273] device_add+0x470/0x1050 [ 176.187064][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 176.192049][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 176.197404][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 176.203691][ T4273] ? bt_info+0x180/0x180 [ 176.207970][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 176.213647][ T4273] ? mutex_unlock+0x10/0x10 [ 176.218183][ T4273] ? skb_pull_data+0xec/0x1f0 [ 176.222909][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 176.228852][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 176.235308][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 176.241407][ T4273] hci_event_packet+0x7b3/0x1290 [ 176.246404][ T4273] ? lock_chain_count+0x20/0x20 [ 176.251298][ T4273] ? bis_list+0x280/0x280 [ 176.255658][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 176.261596][ T4273] ? kcov_remote_start+0x50f/0x810 [ 176.266835][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 176.272083][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 176.277701][ T4273] hci_rx_work+0x3eb/0xd40 [ 176.282173][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 176.287094][ T4273] ? process_one_work+0x7b4/0x1160 [ 176.292258][ T4273] process_one_work+0x8ab/0x1160 [ 176.297284][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 176.302993][ T4273] ? _raw_spin_lock_irq+0x86/0xf0 [ 176.308091][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 176.313189][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 176.318785][ T4273] ? wq_worker_running+0x97/0x190 [ 176.323859][ T4273] worker_thread+0xaf5/0x12a0 [ 176.328662][ T4273] kthread+0x29d/0x330 [ 176.332761][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 176.337815][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 176.342440][ T4273] ret_from_fork+0x1f/0x30 [ 176.346936][ T4273] [ 176.355656][ T4273] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 176.368881][ T4273] Bluetooth: hci3: failed to register connection device [ 176.477472][ T6503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.484'. [ 177.349355][ T6539] netlink: 168 bytes leftover after parsing attributes in process `syz.3.493'. [ 177.373776][ T6540] netlink: 168 bytes leftover after parsing attributes in process `syz.3.493'. [ 177.773274][ T6554] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 178.056984][ T4273] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 178.274066][ T6559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.498'. [ 178.393467][ T4273] Bluetooth: hci3: command 0x2016 tx timeout [ 180.073587][ T4273] Bluetooth: hci2: command 0x2016 tx timeout [ 180.436374][ T6579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.486445][ T6579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.101474][ T6576] delete_channel: no stack [ 181.269342][ T6579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.293406][ T6579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.334217][ T6579] batman_adv: batadv0: Removing interface: netdevsim0 [ 181.711471][ T6584] netlink: 'syz.0.504': attribute type 3 has an invalid length. [ 181.758405][ T6583] netlink: 'syz.0.504': attribute type 3 has an invalid length. [ 181.823273][ T6584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.504'. [ 181.874256][ T6583] netlink: 132 bytes leftover after parsing attributes in process `syz.0.504'. [ 182.767933][ T6614] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 182.843379][ T6614] netlink: 'syz.0.512': attribute type 4 has an invalid length. [ 182.874459][ T6614] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.512'. [ 183.846263][ T4273] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 183.854123][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 183.863632][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 183.871204][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.881275][ T4273] Workqueue: hci4 hci_rx_work [ 183.885960][ T4273] Call Trace: [ 183.889231][ T4273] [ 183.892154][ T4273] dump_stack_lvl+0x188/0x24e [ 183.896835][ T4273] ? show_regs_print_info+0x12/0x12 [ 183.902030][ T4273] ? load_image+0x410/0x410 [ 183.906552][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 183.911669][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 183.916702][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 183.921382][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 183.926581][ T4273] kobject_add_internal+0x617/0xca0 [ 183.931787][ T4273] kobject_add+0x160/0x230 [ 183.936209][ T4273] ? kobject_init+0x1c0/0x1c0 [ 183.940890][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 183.946171][ T4273] ? klist_children_get+0x50/0x50 [ 183.951188][ T4273] ? get_device_parent+0x121/0x3e0 [ 183.956315][ T4273] device_add+0x470/0x1050 [ 183.960763][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 183.965703][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 183.970999][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 183.977248][ T4273] ? bt_info+0x180/0x180 [ 183.981488][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 183.987124][ T4273] ? mutex_unlock+0x10/0x10 [ 183.991619][ T4273] ? skb_pull_data+0xec/0x1f0 [ 183.996294][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 184.002196][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 184.008615][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 184.014680][ T4273] hci_event_packet+0x7b3/0x1290 [ 184.019622][ T4273] ? lock_chain_count+0x20/0x20 [ 184.024470][ T4273] ? bis_list+0x280/0x280 [ 184.028805][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 184.034705][ T4273] ? kcov_remote_start+0x50f/0x810 [ 184.039813][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 184.045014][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 184.050218][ T4273] hci_rx_work+0x3eb/0xd40 [ 184.054638][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 184.059503][ T4273] ? process_one_work+0x7b4/0x1160 [ 184.064630][ T4273] process_one_work+0x8ab/0x1160 [ 184.069582][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 184.075209][ T4273] ? _raw_spin_lock_irq+0x86/0xf0 [ 184.080237][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.085266][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.090815][ T4273] ? wq_worker_running+0x97/0x190 [ 184.095839][ T4273] worker_thread+0xaf5/0x12a0 [ 184.100547][ T4273] kthread+0x29d/0x330 [ 184.104611][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 184.109635][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 184.114222][ T4273] ret_from_fork+0x1f/0x30 [ 184.118651][ T4273] [ 184.128703][ T4273] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 184.142034][ T4273] Bluetooth: hci4: failed to register connection device [ 184.430651][ T6639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.516'. [ 185.734086][ T6645] netlink: 'syz.3.519': attribute type 17 has an invalid length. [ 186.242016][ T4273] Bluetooth: hci4: command 0x2016 tx timeout [ 187.143263][ T12] rcu_tasks_wait_gp: rcu_tasks grace period 21 is 1053 jiffies old. [ 187.443405][ T6665] netlink: 72 bytes leftover after parsing attributes in process `syz.0.523'. [ 187.452676][ T6665] netlink: 72 bytes leftover after parsing attributes in process `syz.0.523'. [ 188.133981][ T6676] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.536'. [ 190.757034][ T6691] netlink: 'syz.4.527': attribute type 3 has an invalid length. [ 191.089567][ T6691] netlink: 152 bytes leftover after parsing attributes in process `syz.4.527'. [ 191.353677][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 191.353789][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 191.359742][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 191.366937][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 191.401742][ T4286] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 191.410727][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 191.420711][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 191.428314][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.438414][ T4286] Workqueue: hci2 hci_rx_work [ 191.443161][ T4286] Call Trace: [ 191.446486][ T4286] [ 191.449453][ T4286] dump_stack_lvl+0x188/0x24e [ 191.454208][ T4286] ? show_regs_print_info+0x12/0x12 [ 191.459557][ T4286] ? load_image+0x410/0x410 [ 191.464172][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 191.469348][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 191.474435][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 191.479174][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 191.484424][ T4286] kobject_add_internal+0x617/0xca0 [ 191.489700][ T4286] kobject_add+0x160/0x230 [ 191.494191][ T4286] ? kobject_init+0x1c0/0x1c0 [ 191.498936][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 191.502461][ T6706] netlink: 36 bytes leftover after parsing attributes in process `syz.2.532'. [ 191.504241][ T4286] ? klist_children_get+0x50/0x50 [ 191.504300][ T4286] ? get_device_parent+0x121/0x3e0 [ 191.504342][ T4286] device_add+0x470/0x1050 [ 191.504397][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 191.504435][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 191.504500][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 191.504535][ T4286] ? bt_info+0x180/0x180 [ 191.504565][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 191.504613][ T4286] ? mutex_unlock+0x10/0x10 [ 191.504639][ T4286] ? skb_pull_data+0xec/0x1f0 [ 191.504675][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 191.504714][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 191.504754][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 191.504782][ T4286] hci_event_packet+0x7b3/0x1290 [ 191.504832][ T4286] ? lock_chain_count+0x20/0x20 [ 191.504864][ T4286] ? bis_list+0x280/0x280 [ 191.504885][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 191.504925][ T4286] ? kcov_remote_start+0x50f/0x810 [ 191.504953][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 191.504994][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 191.505038][ T4286] hci_rx_work+0x3eb/0xd40 [ 191.505072][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 191.627565][ T4286] ? process_one_work+0x7b4/0x1160 [ 191.632739][ T4286] process_one_work+0x8ab/0x1160 [ 191.637744][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 191.643392][ T4286] ? _raw_spin_lock_irq+0x86/0xf0 [ 191.648449][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 191.653507][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 191.659090][ T4286] ? wq_worker_running+0x97/0x190 [ 191.664137][ T4286] worker_thread+0xaf5/0x12a0 [ 191.668892][ T4286] kthread+0x29d/0x330 [ 191.672967][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 191.678007][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 191.682615][ T4286] ret_from_fork+0x1f/0x30 [ 191.687085][ T4286] [ 191.695701][ T4286] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.708930][ T4286] Bluetooth: hci2: failed to register connection device [ 193.754079][ T4286] Bluetooth: hci2: command 0x2016 tx timeout [ 194.400208][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.406667][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.346921][ T6734] netlink: 'syz.4.541': attribute type 17 has an invalid length. [ 195.385776][ T6740] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.544'. [ 196.163622][ T6751] device bond0 entered promiscuous mode [ 196.196534][ T6751] device bond_slave_0 entered promiscuous mode [ 196.244240][ T6751] device bond_slave_1 entered promiscuous mode [ 196.387457][ T6755] netlink: 'syz.1.545': attribute type 39 has an invalid length. [ 197.085662][ T6771] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 197.137365][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.145516][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.156301][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.163823][ T6771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.368283][ T6771] team0: Port device bridge0 added [ 197.452918][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.624005][ T4286] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 197.632294][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 197.642041][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 197.649641][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.659729][ T4286] Workqueue: hci0 hci_rx_work [ 197.664443][ T4286] Call Trace: [ 197.667735][ T4286] [ 197.670680][ T4286] dump_stack_lvl+0x188/0x24e [ 197.675390][ T4286] ? show_regs_print_info+0x12/0x12 [ 197.680609][ T4286] ? load_image+0x410/0x410 [ 197.685161][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 197.690287][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 197.695332][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 197.700044][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 197.705266][ T4286] kobject_add_internal+0x617/0xca0 [ 197.710494][ T4286] kobject_add+0x160/0x230 [ 197.714940][ T4286] ? kobject_init+0x1c0/0x1c0 [ 197.719646][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 197.724946][ T4286] ? klist_children_get+0x50/0x50 [ 197.729980][ T4286] ? get_device_parent+0x121/0x3e0 [ 197.735118][ T4286] device_add+0x470/0x1050 [ 197.739603][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 197.744747][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 197.750093][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 197.756354][ T4286] ? bt_info+0x180/0x180 [ 197.760614][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 197.766268][ T4286] ? mutex_unlock+0x10/0x10 [ 197.770778][ T4286] ? skb_pull_data+0xec/0x1f0 [ 197.775478][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 197.781408][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 197.787848][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 197.793929][ T4286] hci_event_packet+0x7b3/0x1290 [ 197.798897][ T4286] ? lock_chain_count+0x20/0x20 [ 197.803852][ T4286] ? bis_list+0x280/0x280 [ 197.808281][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 197.814206][ T4286] ? kcov_remote_start+0x50f/0x810 [ 197.819358][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 197.824608][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 197.829830][ T4286] hci_rx_work+0x3eb/0xd40 [ 197.834268][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 197.839148][ T4286] ? process_one_work+0x7b4/0x1160 [ 197.844273][ T4286] process_one_work+0x8ab/0x1160 [ 197.849256][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 197.854894][ T4286] ? _raw_spin_lock_irq+0x86/0xf0 [ 197.859940][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 197.864983][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 197.870550][ T4286] ? wq_worker_running+0x97/0x190 [ 197.875602][ T4286] worker_thread+0xaf5/0x12a0 [ 197.880360][ T4286] kthread+0x29d/0x330 [ 197.884434][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 197.889467][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 197.894070][ T4286] ret_from_fork+0x1f/0x30 [ 197.898531][ T4286] [ 197.904378][ T4286] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 197.917827][ T4286] Bluetooth: hci0: failed to register connection device [ 198.724723][ T6789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.552'. [ 198.773556][ T6795] raw_sendmsg: syz.1.556 forgot to set AF_INET. Fix it! [ 199.993335][ T4286] Bluetooth: hci0: command 0x2016 tx timeout [ 200.193431][ T6810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.559'. [ 200.244614][ T6810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.559'. [ 200.297509][ T6816] netlink: 60 bytes leftover after parsing attributes in process `syz.2.559'. [ 200.343768][ T6817] netlink: 60 bytes leftover after parsing attributes in process `syz.2.559'. [ 204.009737][ T6828] netlink: 14 bytes leftover after parsing attributes in process `syz.4.564'. [ 204.104361][ T6828] device veth0_macvtap left promiscuous mode [ 205.363445][ T6856] netlink: 'syz.1.570': attribute type 1 has an invalid length. [ 205.371383][ T6856] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.570'. [ 205.877871][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.571'. [ 205.948161][ T4286] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 205.956542][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 205.965940][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 205.972922][ T6859] : renamed from caif0 [ 205.973508][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.973546][ T4286] Workqueue: hci1 hci_rx_work [ 205.973581][ T4286] Call Trace: [ 205.973592][ T4286] [ 205.973605][ T4286] dump_stack_lvl+0x188/0x24e [ 205.973647][ T4286] ? show_regs_print_info+0x12/0x12 [ 205.973676][ T4286] ? load_image+0x410/0x410 [ 205.973755][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 205.973784][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 205.973817][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 205.973864][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 205.973901][ T4286] kobject_add_internal+0x617/0xca0 [ 206.038708][ T4286] kobject_add+0x160/0x230 [ 206.043182][ T4286] ? kobject_init+0x1c0/0x1c0 [ 206.047890][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 206.053190][ T4286] ? klist_children_get+0x50/0x50 [ 206.058231][ T4286] ? get_device_parent+0x121/0x3e0 [ 206.063372][ T4286] device_add+0x470/0x1050 [ 206.067822][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 206.072788][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 206.078211][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 206.084478][ T4286] ? bt_info+0x180/0x180 [ 206.088744][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 206.094402][ T4286] ? mutex_unlock+0x10/0x10 [ 206.098915][ T4286] ? skb_pull_data+0xec/0x1f0 [ 206.103618][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 206.109534][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 206.115978][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 206.122061][ T4286] hci_event_packet+0x7b3/0x1290 [ 206.127036][ T4286] ? lock_chain_count+0x20/0x20 [ 206.131904][ T4286] ? bis_list+0x280/0x280 [ 206.136245][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 206.142166][ T4286] ? kcov_remote_start+0x50f/0x810 [ 206.147294][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 206.152518][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 206.157747][ T4286] hci_rx_work+0x3eb/0xd40 [ 206.162186][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 206.167076][ T4286] ? process_one_work+0x7b4/0x1160 [ 206.172206][ T4286] process_one_work+0x8ab/0x1160 [ 206.177199][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 206.182842][ T4286] ? _raw_spin_lock_irq+0x86/0xf0 [ 206.187893][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 206.192930][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 206.198514][ T4286] ? wq_worker_running+0x97/0x190 [ 206.203561][ T4286] worker_thread+0xaf5/0x12a0 [ 206.208338][ T4286] kthread+0x29d/0x330 [ 206.212415][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 206.217454][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 206.222064][ T4286] ret_from_fork+0x1f/0x30 [ 206.226542][ T4286] [ 206.231574][ T4286] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 206.245073][ T4286] Bluetooth: hci1: failed to register connection device [ 206.567550][ T6859] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 206.695918][ T6866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.575'. [ 206.743850][ T12] rcu_tasks_wait_gp: rcu_tasks grace period 25 is 1053 jiffies old. [ 207.577177][ T6888] delete_channel: no stack [ 207.825676][ T6897] netlink: 'syz.1.582': attribute type 3 has an invalid length. [ 207.864366][ T6897] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.582'. [ 207.908705][ T4286] Bluetooth: hci3: unexpected event 0x09 length: 151 > 3 [ 208.330467][ T4286] Bluetooth: hci1: command 0x2016 tx timeout [ 208.896238][ T6902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.584'. [ 208.943169][ T6902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.584'. [ 208.993287][ T6903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.584'. [ 209.023376][ T6903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.584'. [ 209.218944][ T6906] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.586'. [ 209.447659][ T6909] netlink: 'syz.2.585': attribute type 2 has an invalid length. [ 209.471622][ T6909] netlink: 'syz.2.585': attribute type 8 has an invalid length. [ 209.494455][ T6909] netlink: 132 bytes leftover after parsing attributes in process `syz.2.585'. [ 209.668193][ T4286] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 209.677161][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 209.688068][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 209.695699][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.705804][ T4286] Workqueue: hci4 hci_rx_work [ 209.710549][ T4286] Call Trace: [ 209.713861][ T4286] [ 209.716810][ T4286] dump_stack_lvl+0x188/0x24e [ 209.721515][ T4286] ? show_regs_print_info+0x12/0x12 [ 209.726735][ T4286] ? load_image+0x410/0x410 [ 209.731300][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 209.736443][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 209.741493][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 209.746201][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 209.751432][ T4286] kobject_add_internal+0x617/0xca0 [ 209.756680][ T4286] kobject_add+0x160/0x230 [ 209.761134][ T4286] ? kobject_init+0x1c0/0x1c0 [ 209.765840][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 209.771135][ T4286] ? klist_children_get+0x50/0x50 [ 209.776176][ T4286] ? get_device_parent+0x121/0x3e0 [ 209.781319][ T4286] device_add+0x470/0x1050 [ 209.785782][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 209.790918][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 209.796683][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 209.802945][ T4286] ? bt_info+0x180/0x180 [ 209.807204][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 209.812866][ T4286] ? mutex_unlock+0x10/0x10 [ 209.817382][ T4286] ? skb_pull_data+0xec/0x1f0 [ 209.822096][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 209.828013][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 209.834488][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 209.840606][ T4286] hci_event_packet+0x7b3/0x1290 [ 209.845607][ T4286] ? lock_chain_count+0x20/0x20 [ 209.850499][ T4286] ? bis_list+0x280/0x280 [ 209.854900][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 209.860885][ T4286] ? kcov_remote_start+0x50f/0x810 [ 209.866023][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 209.871257][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 209.876498][ T4286] hci_rx_work+0x3eb/0xd40 [ 209.880944][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 209.885846][ T4286] ? process_one_work+0x7b4/0x1160 [ 209.890982][ T4286] process_one_work+0x8ab/0x1160 [ 209.895976][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 209.901620][ T4286] ? _raw_spin_lock_irq+0x86/0xf0 [ 209.906679][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 209.911936][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 209.917555][ T4286] ? wq_worker_running+0x97/0x190 [ 209.922619][ T4286] worker_thread+0xaf5/0x12a0 [ 209.927394][ T4286] kthread+0x29d/0x330 [ 209.931480][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 209.936524][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 209.941134][ T4286] ret_from_fork+0x1f/0x30 [ 209.945602][ T4286] [ 209.961240][ T4286] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 209.974412][ T4286] Bluetooth: hci4: failed to register connection device [ 210.116570][ T6919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.589'. [ 210.335225][ T6922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 211.058891][ T6938] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.595'. [ 211.134933][ T6938] netlink: 2013 bytes leftover after parsing attributes in process `syz.4.595'. [ 211.153345][ T6938] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.595'. [ 211.249121][ T6944] netlink: 'syz.3.597': attribute type 21 has an invalid length. [ 211.293791][ T6944] netlink: 156 bytes leftover after parsing attributes in process `syz.3.597'. [ 211.619177][ T6950] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 211.666405][ T6950] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.600'. [ 212.003750][ T4286] Bluetooth: hci4: command 0x2016 tx timeout [ 212.385957][ T6977] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 212.429402][ T4286] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 212.437972][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 212.453593][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 212.461217][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.471490][ T4286] Workqueue: hci3 hci_rx_work [ 212.476230][ T4286] Call Trace: [ 212.479531][ T4286] [ 212.482485][ T4286] dump_stack_lvl+0x188/0x24e [ 212.487198][ T4286] ? show_regs_print_info+0x12/0x12 [ 212.492432][ T4286] ? load_image+0x410/0x410 [ 212.496995][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 212.502215][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 212.507338][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 212.512065][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 212.517292][ T4286] kobject_add_internal+0x617/0xca0 [ 212.522521][ T4286] kobject_add+0x160/0x230 [ 212.526970][ T4286] ? kobject_init+0x1c0/0x1c0 [ 212.531672][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 212.536971][ T4286] ? klist_children_get+0x50/0x50 [ 212.542012][ T4286] ? get_device_parent+0x121/0x3e0 [ 212.547160][ T4286] device_add+0x470/0x1050 [ 212.551610][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 212.556578][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 212.561903][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 212.568170][ T4286] ? bt_info+0x180/0x180 [ 212.572428][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 212.578089][ T4286] ? mutex_unlock+0x10/0x10 [ 212.582608][ T4286] ? skb_pull_data+0xec/0x1f0 [ 212.587309][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 212.593227][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 212.599672][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 212.605759][ T4286] hci_event_packet+0x7b3/0x1290 [ 212.610732][ T4286] ? lock_chain_count+0x20/0x20 [ 212.615627][ T4286] ? bis_list+0x280/0x280 [ 212.619988][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 212.625984][ T4286] ? kcov_remote_start+0x50f/0x810 [ 212.631127][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 212.636362][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 212.641606][ T4286] hci_rx_work+0x3eb/0xd40 [ 212.646050][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 212.650939][ T4286] ? process_one_work+0x7b4/0x1160 [ 212.656076][ T4286] process_one_work+0x8ab/0x1160 [ 212.661066][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 212.666709][ T4286] ? _raw_spin_lock_irq+0x86/0xf0 [ 212.671766][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 212.676813][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 212.682384][ T4286] ? wq_worker_running+0x97/0x190 [ 212.687434][ T4286] worker_thread+0xaf5/0x12a0 [ 212.692188][ T4286] kthread+0x29d/0x330 [ 212.696265][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 212.701297][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 212.705911][ T4286] ret_from_fork+0x1f/0x30 [ 212.710380][ T4286] [ 212.715804][ T4286] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 212.729960][ T4286] Bluetooth: hci3: failed to register connection device [ 213.955542][ T7004] Â: renamed from pim6reg1 [ 214.803566][ T4286] Bluetooth: hci3: command 0x2016 tx timeout [ 215.041328][ T7020] netlink: 'syz.2.620': attribute type 21 has an invalid length. [ 215.060202][ T7020] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 215.081930][ T7020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.620'. [ 215.622691][ T7037] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.626'. [ 215.720366][ T7036] netlink: 156 bytes leftover after parsing attributes in process `syz.0.626'. [ 215.849733][ T4286] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 215.858104][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 215.869530][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 215.877147][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.887250][ T4286] Workqueue: hci1 hci_rx_work [ 215.891981][ T4286] Call Trace: [ 215.895295][ T4286] [ 215.898259][ T4286] dump_stack_lvl+0x188/0x24e [ 215.902993][ T4286] ? show_regs_print_info+0x12/0x12 [ 215.908236][ T4286] ? load_image+0x410/0x410 [ 215.912838][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 215.917999][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 215.923064][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 215.927802][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 215.933059][ T4286] kobject_add_internal+0x617/0xca0 [ 215.938328][ T4286] kobject_add+0x160/0x230 [ 215.942833][ T4286] ? kobject_init+0x1c0/0x1c0 [ 215.947576][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 215.952907][ T4286] ? klist_children_get+0x50/0x50 [ 215.957976][ T4286] ? get_device_parent+0x121/0x3e0 [ 215.963157][ T4286] device_add+0x470/0x1050 [ 215.967674][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 215.972662][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 215.978007][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 215.984278][ T4286] ? bt_info+0x180/0x180 [ 215.988536][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 215.994197][ T4286] ? mutex_unlock+0x10/0x10 [ 215.998730][ T4286] ? skb_pull_data+0xec/0x1f0 [ 216.003435][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 216.009359][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 216.015828][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 216.022357][ T4286] hci_event_packet+0x7b3/0x1290 [ 216.027326][ T4286] ? lock_chain_count+0x20/0x20 [ 216.032200][ T4286] ? bis_list+0x280/0x280 [ 216.036539][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 216.042458][ T4286] ? kcov_remote_start+0x50f/0x810 [ 216.047586][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 216.052806][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 216.058029][ T4286] hci_rx_work+0x3eb/0xd40 [ 216.062494][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 216.067497][ T4286] ? process_one_work+0x7b4/0x1160 [ 216.072650][ T4286] process_one_work+0x8ab/0x1160 [ 216.077659][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 216.083325][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 216.088386][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 216.093967][ T4286] ? wq_worker_running+0x97/0x190 [ 216.099007][ T4286] worker_thread+0xaf5/0x12a0 [ 216.103787][ T4286] kthread+0x29d/0x330 [ 216.107870][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 216.112904][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 216.117514][ T4286] ret_from_fork+0x1f/0x30 [ 216.121980][ T4286] [ 216.129989][ T4286] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 216.143390][ T4286] Bluetooth: hci1: failed to register connection device [ 216.527582][ T7047] netlink: 152 bytes leftover after parsing attributes in process `syz.2.631'. [ 216.557757][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 216.614623][ T7046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.629'. [ 217.022101][ T7062] device syzkaller0 entered promiscuous mode [ 218.153573][ T4286] Bluetooth: hci1: command 0x2016 tx timeout [ 219.199946][ T7102] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.640'. [ 223.128420][ T7148] netlink: 'syz.0.652': attribute type 2 has an invalid length. [ 223.167298][ T7148] netlink: 10 bytes leftover after parsing attributes in process `syz.0.652'. [ 223.549449][ T7153] netlink: 'syz.2.656': attribute type 9 has an invalid length. [ 223.892830][ T7172] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.661'. [ 224.795877][ T7179] netlink: 'syz.3.659': attribute type 13 has an invalid length. [ 224.840356][ T7179] netlink: 172 bytes leftover after parsing attributes in process `syz.3.659'. [ 224.932124][ T7179] erspan0: refused to change device tx_queue_len [ 225.139759][ T4273] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 225.140552][ T4286] Bluetooth: hci1: hardware error 0x00 [ 226.584297][ T4273] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 226.592171][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 226.604835][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 226.612450][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.622537][ T4273] Workqueue: hci2 hci_rx_work [ 226.627268][ T4273] Call Trace: [ 226.630576][ T4273] [ 226.633539][ T4273] dump_stack_lvl+0x188/0x24e [ 226.638239][ T4273] ? show_regs_print_info+0x12/0x12 [ 226.643453][ T4273] ? load_image+0x410/0x410 [ 226.648005][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 226.653136][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 226.658172][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 226.662853][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 226.668050][ T4273] kobject_add_internal+0x617/0xca0 [ 226.673267][ T4273] kobject_add+0x160/0x230 [ 226.677726][ T4273] ? kobject_init+0x1c0/0x1c0 [ 226.682428][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 226.687708][ T4273] ? klist_children_get+0x50/0x50 [ 226.692758][ T4273] ? get_device_parent+0x121/0x3e0 [ 226.698299][ T4273] device_add+0x470/0x1050 [ 226.703331][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 226.708306][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 226.713625][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 226.719884][ T4273] ? bt_info+0x180/0x180 [ 226.724129][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 226.729772][ T4273] ? mutex_unlock+0x10/0x10 [ 226.734276][ T4273] ? skb_pull_data+0xec/0x1f0 [ 226.738962][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 226.744868][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 226.751293][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 226.757359][ T4273] hci_event_packet+0x7b3/0x1290 [ 226.762301][ T4273] ? lock_chain_count+0x20/0x20 [ 226.767168][ T4273] ? bis_list+0x280/0x280 [ 226.771498][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 226.777402][ T4273] ? kcov_remote_start+0x50f/0x810 [ 226.782513][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 226.787721][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 226.792929][ T4273] hci_rx_work+0x3eb/0xd40 [ 226.797353][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 226.802306][ T4273] ? process_one_work+0x7b4/0x1160 [ 226.807425][ T4273] process_one_work+0x8ab/0x1160 [ 226.812372][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 226.818028][ T4273] ? _raw_spin_lock_irq+0x86/0xf0 [ 226.823093][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 226.828125][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 226.833686][ T4273] ? wq_worker_running+0x97/0x190 [ 226.838714][ T4273] worker_thread+0xaf5/0x12a0 [ 226.843415][ T4273] kthread+0x29d/0x330 [ 226.847478][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 226.852501][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 226.857177][ T4273] ret_from_fork+0x1f/0x30 [ 226.861624][ T4273] [ 226.870120][ T4273] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 226.886021][ T4273] Bluetooth: hci2: failed to register connection device [ 226.914458][ T7242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.678'. [ 226.987961][ T7240] device syzkaller0 entered promiscuous mode [ 227.024499][ T7245] tun0: tun_chr_ioctl cmd 1074025673 [ 227.111503][ T7250] tun0: tun_chr_ioctl cmd 1074025675 [ 227.173338][ T7250] tun0: persist enabled [ 227.205028][ T7245] tun0: tun_chr_ioctl cmd 1074025673 [ 227.219649][ T7245] tun0: tun_chr_ioctl cmd 1074025673 [ 227.273721][ T4286] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 227.444834][ T7258] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 227.483214][ T7258] netlink: 'syz.2.680': attribute type 3 has an invalid length. [ 227.492517][ T7245] tun0: tun_chr_ioctl cmd 1074025673 [ 227.494320][ T7258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.680'. [ 227.634276][ T7261] device caif0 entered promiscuous mode [ 227.826181][ T7268] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.685'. [ 228.259635][ T7285] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.689'. [ 228.294837][ T7285] netlink: zone id is out of range [ 228.304286][ T7280] device lo entered promiscuous mode [ 228.363793][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 228.574592][ T4286] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 228.582306][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 228.591732][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 228.599305][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.609387][ T4286] Workqueue: hci0 hci_rx_work [ 228.614096][ T4286] Call Trace: [ 228.617381][ T4286] [ 228.620320][ T4286] dump_stack_lvl+0x188/0x24e [ 228.625017][ T4286] ? show_regs_print_info+0x12/0x12 [ 228.630214][ T4286] ? load_image+0x410/0x410 [ 228.634731][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 228.639849][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 228.644911][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 228.649597][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 228.654797][ T4286] kobject_add_internal+0x617/0xca0 [ 228.660006][ T4286] kobject_add+0x160/0x230 [ 228.664427][ T4286] ? kobject_init+0x1c0/0x1c0 [ 228.669106][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 228.674396][ T4286] ? klist_children_get+0x50/0x50 [ 228.679419][ T4286] ? get_device_parent+0x121/0x3e0 [ 228.684532][ T4286] device_add+0x470/0x1050 [ 228.688955][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 228.693903][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 228.699200][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 228.705446][ T4286] ? bt_info+0x180/0x180 [ 228.709705][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 228.715336][ T4286] ? mutex_unlock+0x10/0x10 [ 228.719833][ T4286] ? skb_pull_data+0xec/0x1f0 [ 228.724508][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 228.730406][ T4286] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 228.736827][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 228.742901][ T4286] hci_event_packet+0x7b3/0x1290 [ 228.747845][ T4286] ? lock_chain_count+0x20/0x20 [ 228.752700][ T4286] ? bis_list+0x280/0x280 [ 228.757035][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 228.762928][ T4286] ? kcov_remote_start+0x50f/0x810 [ 228.768037][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 228.773238][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 228.778444][ T4286] hci_rx_work+0x3eb/0xd40 [ 228.782866][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 228.787735][ T4286] ? process_one_work+0x7b4/0x1160 [ 228.792847][ T4286] process_one_work+0x8ab/0x1160 [ 228.797804][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 228.803465][ T4286] ? _raw_spin_lock_irq+0x86/0xf0 [ 228.808494][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 228.813516][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 228.819066][ T4286] ? wq_worker_running+0x97/0x190 [ 228.824088][ T4286] worker_thread+0xaf5/0x12a0 [ 228.828800][ T4286] kthread+0x29d/0x330 [ 228.832867][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 228.837896][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 228.842484][ T4286] ret_from_fork+0x1f/0x30 [ 228.846913][ T4286] [ 228.850869][ T4286] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 228.864825][ T4286] Bluetooth: hci0: failed to register connection device [ 228.963136][ T4286] Bluetooth: hci2: command 0x2016 tx timeout [ 229.154701][ T7295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.690'. [ 229.413714][ T7312] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.695'. [ 229.495916][ T7312] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.695'. [ 229.581759][ T7312] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.695'. [ 229.624091][ T7312] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.695'. [ 229.674042][ T7312] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.695'. [ 229.709018][ T7312] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.695'. [ 229.749142][ T7312] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.695'. [ 229.778465][ T7312] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.695'. [ 230.408779][ T7337] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 230.942100][ T7354] netlink: 'syz.1.704': attribute type 27 has an invalid length. [ 230.953779][ T4286] Bluetooth: hci0: command 0x2016 tx timeout [ 231.007390][ T4273] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 231.016063][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 231.025532][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 231.033122][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.043265][ T4273] Workqueue: hci4 hci_rx_work [ 231.048009][ T4273] Call Trace: [ 231.051315][ T4273] [ 231.054285][ T4273] dump_stack_lvl+0x188/0x24e [ 231.059027][ T4273] ? show_regs_print_info+0x12/0x12 [ 231.064335][ T4273] ? load_image+0x410/0x410 [ 231.068941][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 231.074099][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 231.079164][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 231.083875][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 231.089134][ T4273] kobject_add_internal+0x617/0xca0 [ 231.094369][ T4273] kobject_add+0x160/0x230 [ 231.098827][ T4273] ? kobject_init+0x1c0/0x1c0 [ 231.103526][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 231.108827][ T4273] ? klist_children_get+0x50/0x50 [ 231.113865][ T4273] ? get_device_parent+0x121/0x3e0 [ 231.119009][ T4273] device_add+0x470/0x1050 [ 231.123465][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 231.128429][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 231.133758][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 231.140022][ T4273] ? bt_info+0x180/0x180 [ 231.144369][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 231.150022][ T4273] ? mutex_unlock+0x10/0x10 [ 231.154535][ T4273] ? skb_pull_data+0xec/0x1f0 [ 231.159234][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 231.165153][ T4273] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 231.171593][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 231.177679][ T4273] hci_event_packet+0x7b3/0x1290 [ 231.182645][ T4273] ? lock_chain_count+0x20/0x20 [ 231.187514][ T4273] ? bis_list+0x280/0x280 [ 231.191850][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 231.197765][ T4273] ? kcov_remote_start+0x50f/0x810 [ 231.202892][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 231.208114][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 231.213341][ T4273] hci_rx_work+0x3eb/0xd40 [ 231.217778][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 231.222666][ T4273] ? process_one_work+0x7b4/0x1160 [ 231.227823][ T4273] process_one_work+0x8ab/0x1160 [ 231.232823][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 231.238481][ T4273] ? _raw_spin_lock_irq+0x86/0xf0 [ 231.243553][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 231.248625][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 231.254204][ T4273] ? wq_worker_running+0x97/0x190 [ 231.259260][ T4273] worker_thread+0xaf5/0x12a0 [ 231.264025][ T4273] kthread+0x29d/0x330 [ 231.268101][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 231.273152][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 231.277757][ T4273] ret_from_fork+0x1f/0x30 [ 231.282230][ T4273] [ 231.286966][ T4273] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 231.300119][ T4273] Bluetooth: hci4: failed to register connection device [ 231.304349][ T7354] netlink: 'syz.1.704': attribute type 4 has an invalid length. [ 231.501985][ T7354] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.363171][ T4286] Bluetooth: hci4: command 0x2016 tx timeout [ 234.506205][ T7493] __nla_validate_parse: 32 callbacks suppressed [ 234.506223][ T7493] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.724'. [ 234.721513][ T7493] netlink: 132 bytes leftover after parsing attributes in process `syz.4.724'. [ 234.943809][ T7496] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 235.046581][ T7496] device syzkaller0 entered promiscuous mode [ 239.455389][ T7523] netlink: 'syz.1.730': attribute type 2 has an invalid length. [ 239.463255][ T7500] netlink: 'syz.2.726': attribute type 2 has an invalid length. [ 239.470934][ T7500] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.726'. [ 239.486391][ T7523] netlink: 119 bytes leftover after parsing attributes in process `syz.1.730'. [ 239.727657][ T7536] netlink: 36 bytes leftover after parsing attributes in process `syz.0.735'. [ 239.836293][ T7533] netlink: 'syz.1.733': attribute type 2 has an invalid length. [ 239.865161][ T7533] netlink: 119 bytes leftover after parsing attributes in process `syz.1.733'. [ 240.318401][ T7557] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.743'. [ 240.403275][ T7557] netlink: 132 bytes leftover after parsing attributes in process `syz.3.743'. [ 240.467534][ T7559] bridge0: port 3(batadv0) entered blocking state [ 240.503359][ T7559] bridge0: port 3(batadv0) entered disabled state [ 240.539308][ T7472] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 240.548945][ T7472] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 240.563919][ T7559] device batadv0 entered promiscuous mode [ 240.594059][ T7559] bridge0: port 3(batadv0) entered blocking state [ 240.600703][ T7559] bridge0: port 3(batadv0) entered forwarding state [ 241.505803][ T7578] netlink: 36 bytes leftover after parsing attributes in process `syz.1.749'. [ 241.596663][ T7583] netlink: 196 bytes leftover after parsing attributes in process `syz.2.750'. [ 241.640256][ T7584] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.750'. [ 241.675822][ T7583] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 241.887731][ T7580] delete_channel: no stack [ 242.113778][ T7602] netlink: 'syz.4.755': attribute type 4 has an invalid length. [ 243.027032][ T7640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.766'. [ 244.054412][ T7673] netlink: 'syz.3.773': attribute type 7 has an invalid length. [ 244.087683][ T7672] delete_channel: no stack [ 244.218147][ T7676] netlink: 'syz.4.775': attribute type 21 has an invalid length. [ 244.448695][ T7687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.779'. [ 244.466121][ T7684] tap0: tun_chr_ioctl cmd 1074025677 [ 244.471747][ T7684] tap0: linktype set to 776 [ 244.681965][ T7694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.781'. [ 244.825957][ T7700] netlink: 'syz.2.782': attribute type 2 has an invalid length. [ 244.877921][ T7700] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 244.906477][ T7709] netlink: 'syz.2.782': attribute type 2 has an invalid length. [ 244.940269][ T7700] __nla_validate_parse: 18 callbacks suppressed [ 244.940296][ T7700] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.782'. [ 244.988348][ T7709] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.782'. [ 245.036831][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 245.103570][ T7700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.184864][ T7718] device macvlan0 entered promiscuous mode [ 245.270532][ T7715] netlink: 'syz.1.783': attribute type 2 has an invalid length. [ 245.313783][ T7715] netlink: 'syz.1.783': attribute type 8 has an invalid length. [ 245.321504][ T7715] netlink: 132 bytes leftover after parsing attributes in process `syz.1.783'. [ 246.193710][ T7738] netlink: 36 bytes leftover after parsing attributes in process `syz.4.792'. [ 246.557580][ T7754] syz_tun: tun_net_xmit 86 [ 246.649923][ T7755] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.796'. [ 246.679857][ T7736] device syzkaller0 entered promiscuous mode [ 246.721181][ T7746] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.794'. [ 246.753681][ T7753] netlink: 'syz.1.794': attribute type 10 has an invalid length. [ 246.793158][ T7753] netlink: 156 bytes leftover after parsing attributes in process `syz.1.794'. [ 247.593222][ C0] syz_tun: tun_net_xmit 86 [ 248.643228][ C0] syz_tun: tun_net_xmit 86 [ 250.129687][ T7755] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 250.165740][ T7752] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.796'. [ 250.186890][ T7752] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 250.199040][ T7752] CPU: 0 PID: 7752 Comm: syz.3.796 Not tainted syzkaller #0 [ 250.206375][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.216447][ T7752] Call Trace: [ 250.219759][ T7752] [ 250.222782][ T7752] dump_stack_lvl+0x188/0x24e [ 250.227485][ T7752] ? show_regs_print_info+0x12/0x12 [ 250.232704][ T7752] ? load_image+0x410/0x410 [ 250.237244][ T7752] sysfs_warn_dup+0x8a/0xa0 [ 250.241779][ T7752] sysfs_do_create_link_sd+0xc0/0x110 [ 250.247174][ T7752] device_add+0x83b/0x1050 [ 250.251590][ T7752] wiphy_register+0x1d8b/0x2aa0 [ 250.256460][ T7752] ? cfg80211_event_work+0x40/0x40 [ 250.261581][ T7752] ? minstrel_ht_alloc+0x894/0xa20 [ 250.266707][ T7752] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 250.272783][ T7752] ieee80211_register_hw+0x2d48/0x39f0 [ 250.278253][ T7752] ? ieee80211_register_hw+0xf41/0x39f0 [ 250.283789][ T7752] ? ieee80211_register_hw+0xf41/0x39f0 [ 250.289335][ T7752] ? ieee80211_tasklet_handler+0x20/0x20 [ 250.294960][ T7752] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 250.300861][ T7752] ? __debug_object_init+0xed/0x440 [ 250.306064][ T7752] ? memset+0x1e/0x40 [ 250.310037][ T7752] ? __hrtimer_init+0x189/0x270 [ 250.314887][ T7752] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 250.320611][ T7752] ? memcpy+0x3c/0x60 [ 250.324585][ T7752] hwsim_new_radio_nl+0xab7/0xc90 [ 250.329615][ T7752] genl_family_rcv_msg_doit+0x22f/0x350 [ 250.335157][ T7752] ? end_current_label_crit_section+0x170/0x170 [ 250.341399][ T7752] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 250.347291][ T7752] ? bpf_lsm_capable+0x5/0x10 [ 250.351959][ T7752] ? security_capable+0x85/0xb0 [ 250.356813][ T7752] genl_rcv_msg+0x601/0x790 [ 250.361336][ T7752] ? genl_bind+0x360/0x360 [ 250.365747][ T7752] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 250.372102][ T7752] netlink_rcv_skb+0x1ef/0x440 [ 250.376884][ T7752] ? genl_bind+0x360/0x360 [ 250.381308][ T7752] ? netlink_ack+0x1160/0x1160 [ 250.386077][ T7752] ? down_read+0x1a8/0x2d0 [ 250.390490][ T7752] genl_rcv+0x24/0x40 [ 250.394480][ T7752] netlink_unicast+0x7ad/0x920 [ 250.399260][ T7752] netlink_sendmsg+0x8ad/0xbd0 [ 250.404032][ T7752] ? netlink_getsockopt+0x550/0x550 [ 250.409224][ T7752] ? apparmor_socket_sendmsg+0x8a/0x330 [ 250.414772][ T7752] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 250.420051][ T7752] ? security_socket_sendmsg+0x7c/0xa0 [ 250.425508][ T7752] ? netlink_getsockopt+0x550/0x550 [ 250.430735][ T7752] ____sys_sendmsg+0x5ed/0x9a0 [ 250.435499][ T7752] ? __sys_sendmsg_sock+0x30/0x30 [ 250.440514][ T7752] ? __import_iovec+0x306/0x510 [ 250.445395][ T7752] ? import_iovec+0x6f/0xa0 [ 250.449896][ T7752] ___sys_sendmsg+0x2a2/0x360 [ 250.454580][ T7752] ? __sys_sendmsg+0x2a0/0x2a0 [ 250.459348][ T7752] ? ktime_get+0x7b/0x270 [ 250.463778][ T7752] __se_sys_sendmsg+0x1c3/0x2b0 [ 250.468628][ T7752] ? __x64_sys_sendmsg+0x80/0x80 [ 250.473568][ T7752] ? lockdep_hardirqs_on+0x94/0x140 [ 250.478777][ T7752] do_syscall_64+0x4c/0xa0 [ 250.483214][ T7752] ? clear_bhb_loop+0x60/0xb0 [ 250.487884][ T7752] ? clear_bhb_loop+0x60/0xb0 [ 250.492552][ T7752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.498446][ T7752] RIP: 0033:0x7fcdde19e159 [ 250.502860][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.522463][ T7752] RSP: 002b:00007fcddf06d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.530875][ T7752] RAX: ffffffffffffffda RBX: 00007fcdde425fa0 RCX: 00007fcdde19e159 [ 250.538847][ T7752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 250.546826][ T7752] RBP: 00007fcdde23506b R08: 0000000000000000 R09: 0000000000000000 [ 250.554802][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.562781][ T7752] R13: 00007fcdde426038 R14: 00007fcdde425fa0 R15: 00007fff18f6c028 [ 250.570771][ T7752] [ 250.973462][ T7788] netlink: 36 bytes leftover after parsing attributes in process `syz.4.805'. [ 251.203534][ T7793] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.807'. [ 251.212829][ T7793] netlink: zone id is out of range [ 251.276498][ T7793] netlink: zone id is out of range [ 251.303697][ T7793] netlink: del zone limit has 4 unknown bytes [ 252.234434][ T7832] netlink: 36 bytes leftover after parsing attributes in process `syz.1.817'. [ 255.461197][ T7848] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.821'. [ 255.715310][ T7854] netlink: 'syz.2.822': attribute type 11 has an invalid length. [ 255.748057][ T7854] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.822'. [ 255.836716][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.843239][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.007812][ T7853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.783311][ T7890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.915649][ T7895] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.832'. [ 257.011655][ T7894] netlink: 'syz.0.833': attribute type 13 has an invalid length. [ 257.033893][ T7894] netlink: 172 bytes leftover after parsing attributes in process `syz.0.833'. [ 257.246076][ T7894] erspan0: refused to change device tx_queue_len [ 257.295800][ T7895] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 257.332024][ T7895] CPU: 0 PID: 7895 Comm: syz.3.832 Not tainted syzkaller #0 [ 257.339377][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.349463][ T7895] Call Trace: [ 257.352763][ T7895] [ 257.355712][ T7895] dump_stack_lvl+0x188/0x24e [ 257.360428][ T7895] ? show_regs_print_info+0x12/0x12 [ 257.365676][ T7895] ? load_image+0x410/0x410 [ 257.370228][ T7895] sysfs_warn_dup+0x8a/0xa0 [ 257.374762][ T7895] sysfs_do_create_link_sd+0xc0/0x110 [ 257.380163][ T7895] device_add+0x83b/0x1050 [ 257.384612][ T7895] wiphy_register+0x1d8b/0x2aa0 [ 257.389507][ T7895] ? cfg80211_event_work+0x40/0x40 [ 257.394643][ T7895] ? minstrel_ht_alloc+0x894/0xa20 [ 257.399790][ T7895] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 257.405890][ T7895] ieee80211_register_hw+0x2d48/0x39f0 [ 257.411394][ T7895] ? ieee80211_register_hw+0xf41/0x39f0 [ 257.416987][ T7895] ? ieee80211_register_hw+0xf41/0x39f0 [ 257.422571][ T7895] ? ieee80211_tasklet_handler+0x20/0x20 [ 257.428237][ T7895] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 257.434169][ T7895] ? __debug_object_init+0xed/0x440 [ 257.439408][ T7895] ? memset+0x1e/0x40 [ 257.443421][ T7895] ? __hrtimer_init+0x189/0x270 [ 257.448305][ T7895] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 257.454070][ T7895] ? memcpy+0x3c/0x60 [ 257.458088][ T7895] hwsim_new_radio_nl+0xab7/0xc90 [ 257.463155][ T7895] genl_family_rcv_msg_doit+0x22f/0x350 [ 257.468728][ T7895] ? end_current_label_crit_section+0x170/0x170 [ 257.475003][ T7895] ? trace_call_bpf+0xbf/0x6b0 [ 257.479802][ T7895] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 257.485743][ T7895] ? bpf_lsm_capable+0x5/0x10 [ 257.490468][ T7895] ? security_capable+0x85/0xb0 [ 257.495439][ T7895] genl_rcv_msg+0x601/0x790 [ 257.499989][ T7895] ? genl_bind+0x360/0x360 [ 257.504436][ T7895] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 257.510834][ T7895] netlink_rcv_skb+0x1ef/0x440 [ 257.515630][ T7895] ? genl_bind+0x360/0x360 [ 257.520082][ T7895] ? netlink_ack+0x1160/0x1160 [ 257.524883][ T7895] ? down_read+0x1a8/0x2d0 [ 257.529333][ T7895] genl_rcv+0x24/0x40 [ 257.533346][ T7895] netlink_unicast+0x7ad/0x920 [ 257.538158][ T7895] netlink_sendmsg+0x8ad/0xbd0 [ 257.542981][ T7895] ? netlink_getsockopt+0x550/0x550 [ 257.548214][ T7895] ? apparmor_socket_sendmsg+0x8a/0x330 [ 257.553803][ T7895] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 257.559127][ T7895] ? security_socket_sendmsg+0x7c/0xa0 [ 257.564626][ T7895] ? netlink_getsockopt+0x550/0x550 [ 257.569866][ T7895] ____sys_sendmsg+0x5ed/0x9a0 [ 257.574680][ T7895] ? __sys_sendmsg_sock+0x30/0x30 [ 257.579742][ T7895] ? __import_iovec+0x306/0x510 [ 257.584656][ T7895] ? import_iovec+0x6f/0xa0 [ 257.589208][ T7895] ___sys_sendmsg+0x2a2/0x360 [ 257.593931][ T7895] ? __sys_sendmsg+0x2a0/0x2a0 [ 257.598792][ T7895] __se_sys_sendmsg+0x1c3/0x2b0 [ 257.603690][ T7895] ? __x64_sys_sendmsg+0x80/0x80 [ 257.608696][ T7895] ? lockdep_hardirqs_on+0x94/0x140 [ 257.613952][ T7895] do_syscall_64+0x4c/0xa0 [ 257.618416][ T7895] ? clear_bhb_loop+0x60/0xb0 [ 257.623134][ T7895] ? clear_bhb_loop+0x60/0xb0 [ 257.627860][ T7895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.633802][ T7895] RIP: 0033:0x7fcdde19e159 [ 257.638252][ T7895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.657891][ T7895] RSP: 002b:00007fcddf06d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.666346][ T7895] RAX: ffffffffffffffda RBX: 00007fcdde425fa0 RCX: 00007fcdde19e159 [ 257.674360][ T7895] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 257.682362][ T7895] RBP: 00007fcdde23506b R08: 0000000000000000 R09: 0000000000000000 [ 257.690364][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.698366][ T7895] R13: 00007fcdde426038 R14: 00007fcdde425fa0 R15: 00007fff18f6c028 [ 257.706390][ T7895] [ 257.729758][ T7904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.836'. [ 257.915073][ T7910] netlink: 'syz.0.838': attribute type 3 has an invalid length. [ 257.953197][ T7910] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.838'. [ 258.950641][ T7946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.851'. [ 259.206282][ T7958] netlink: 'syz.2.852': attribute type 12 has an invalid length. [ 259.250218][ T7958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.852'. [ 261.231988][ T7985] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.859'. [ 261.494042][ T7996] netlink: 36 bytes leftover after parsing attributes in process `syz.0.863'. [ 262.178481][ T8009] sctp: [Deprecated]: syz.2.868 (pid 8009) Use of int in max_burst socket option deprecated. [ 262.178481][ T8009] Use struct sctp_assoc_value instead [ 262.995677][ T8019] netlink: 10 bytes leftover after parsing attributes in process `syz.3.869'. [ 263.042362][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 269.540096][ T8055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.877'. [ 270.337942][ T8092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.889'. [ 270.449894][ T8095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.890'. [ 270.507643][ T8097] netlink: 'syz.0.891': attribute type 29 has an invalid length. [ 270.533544][ T8097] netlink: 'syz.0.891': attribute type 29 has an invalid length. [ 270.604878][ T8102] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.892'. [ 270.664498][ T8105] netlink: 'syz.0.891': attribute type 29 has an invalid length. [ 270.765759][ T8107] netlink: 'syz.0.891': attribute type 29 has an invalid length. [ 271.531623][ T8129] netlink: 'syz.3.898': attribute type 10 has an invalid length. [ 271.566584][ T8129] netlink: 64911 bytes leftover after parsing attributes in process `syz.3.898'. [ 271.710425][ T8127] netlink: 'syz.2.896': attribute type 10 has an invalid length. [ 272.062240][ T8127] team0 (unregistering): Port device team_slave_0 removed [ 272.119248][ T8127] team0 (unregistering): Port device team_slave_1 removed [ 272.269785][ T8158] netlink: 36 bytes leftover after parsing attributes in process `syz.4.904'. [ 272.638313][ T8176] netlink: 'syz.4.910': attribute type 29 has an invalid length. [ 272.642431][ T8177] netlink: 188 bytes leftover after parsing attributes in process `syz.0.908'. [ 272.694620][ T8176] netlink: 'syz.4.910': attribute type 29 has an invalid length. [ 272.773536][ T8178] netlink: 'syz.4.910': attribute type 29 has an invalid length. [ 273.273258][ T8208] netlink: 'syz.4.913': attribute type 29 has an invalid length. [ 273.546730][ T4273] Bluetooth: Frame is too long (len 149, expected len 4) [ 275.026991][ T8273] netlink: 36 bytes leftover after parsing attributes in process `syz.4.921'. [ 275.256086][ T8284] netlink: 164 bytes leftover after parsing attributes in process `syz.1.924'. [ 275.662795][ T8289] delete_channel: no stack [ 276.456605][ T8320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.936'. [ 276.748058][ T8332] validate_nla: 3 callbacks suppressed [ 276.748077][ T8332] netlink: 'syz.3.940': attribute type 21 has an invalid length. [ 276.774119][ T8332] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 276.781825][ T8332] netlink: 132 bytes leftover after parsing attributes in process `syz.3.940'. [ 277.378254][ T8363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.948'. [ 277.547944][ T8366] netlink: 'syz.1.950': attribute type 10 has an invalid length. [ 277.573680][ T8366] team0: Device hsr_slave_0 failed to register rx_handler [ 277.635542][ T8370] netlink: 10 bytes leftover after parsing attributes in process `syz.4.951'. [ 277.907381][ T8383] netlink: 14 bytes leftover after parsing attributes in process `syz.2.955'. [ 277.945939][ T8383] device hsr_slave_0 left promiscuous mode [ 277.960138][ T8383] device hsr_slave_1 left promiscuous mode [ 278.119061][ T8384] netlink: 63719 bytes leftover after parsing attributes in process `syz.2.955'. [ 278.426077][ T8409] netlink: 11903 bytes leftover after parsing attributes in process `syz.4.959'. [ 278.573518][ T8413] netlink: 36 bytes leftover after parsing attributes in process `syz.2.961'. [ 279.155685][ T8424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.167822][ T8424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.207617][ T8424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.234606][ T8424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.384989][ T8485] netlink: 'syz.2.985': attribute type 2 has an invalid length. [ 281.421088][ T8485] __nla_validate_parse: 2 callbacks suppressed [ 281.421106][ T8485] netlink: 10 bytes leftover after parsing attributes in process `syz.2.985'. [ 281.868185][ T8489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.987'. [ 285.078852][ T8530] netlink: 'syz.1.997': attribute type 9 has an invalid length. [ 285.107684][ T8530] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.997'. [ 285.234224][ T8537] netlink: 'syz.3.998': attribute type 33 has an invalid length. [ 285.320681][ T8537] netlink: 152 bytes leftover after parsing attributes in process `syz.3.998'. [ 285.525283][ T8542] netlink: 'syz.4.1001': attribute type 2 has an invalid length. [ 285.624982][ T8545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1002'. [ 285.668929][ T8542] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 285.719403][ T8542] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1001'. [ 286.001528][ T8546] delete_channel: no stack [ 286.352829][ T8567] netlink: 'syz.1.1010': attribute type 10 has an invalid length. [ 286.369834][ T8567] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1010'. [ 286.393598][ T8567] device hsr0 entered promiscuous mode [ 286.411272][ T8567] bridge0: port 3(hsr0) entered blocking state [ 286.432161][ T8567] bridge0: port 3(hsr0) entered disabled state [ 286.468717][ T8567] bridge0: port 3(hsr0) entered blocking state [ 286.475356][ T8567] bridge0: port 3(hsr0) entered forwarding state [ 286.802226][ T8589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1015'. [ 287.033911][ T8590] netlink: 'syz.0.1013': attribute type 21 has an invalid length. [ 287.111874][ T8590] netlink: 'syz.0.1013': attribute type 6 has an invalid length. [ 287.147509][ T8590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1013'. [ 287.371841][ T8595] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1016'. [ 287.586822][ T8604] netlink: 'syz.1.1019': attribute type 10 has an invalid length. [ 287.805840][ T8604] bridge0: port 4(netdevsim0) entered blocking state [ 287.877836][ T8604] bridge0: port 4(netdevsim0) entered disabled state [ 288.029416][ T8604] device netdevsim0 entered promiscuous mode [ 288.193204][ T8615] netlink: 'syz.0.1022': attribute type 16 has an invalid length. [ 288.241166][ T8615] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1022'. [ 288.320600][ T8633] syz_tun: tun_net_xmit 42 [ 288.493112][ T8629] netlink: 'syz.3.1024': attribute type 10 has an invalid length. [ 288.595859][ T8629] team0: Device nlmon0 is of different type [ 288.750254][ T8647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'. [ 289.126580][ T8651] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1030'. [ 289.214310][ T8655] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1031'. [ 289.353296][ C1] syz_tun: tun_net_xmit 42 [ 290.137425][ T8676] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1039'. [ 290.222679][ T8673] FAULT_INJECTION: forcing a failure. [ 290.222679][ T8673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.332953][ T8673] CPU: 0 PID: 8673 Comm: syz.2.1038 Not tainted syzkaller #0 [ 290.340397][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.350517][ T8673] Call Trace: [ 290.353826][ T8673] [ 290.356784][ T8673] dump_stack_lvl+0x188/0x24e [ 290.361486][ T8673] ? show_regs_print_info+0x12/0x12 [ 290.366718][ T8673] ? load_image+0x410/0x410 [ 290.371270][ T8673] ? __lock_acquire+0x7c40/0x7c40 [ 290.376554][ T8673] ? trace_call_bpf+0x5d6/0x6b0 [ 290.381469][ T8673] should_fail_ex+0x390/0x4c0 [ 290.386196][ T8673] _copy_from_user+0x2c/0x170 [ 290.390908][ T8673] __sys_bpf+0x2ea/0x780 [ 290.393361][ C1] syz_tun: tun_net_xmit 42 [ 290.395165][ T8673] ? bpf_link_show_fdinfo+0x380/0x380 [ 290.405070][ T8673] ? lock_chain_count+0x20/0x20 [ 290.409956][ T8673] __x64_sys_bpf+0x78/0x90 [ 290.414401][ T8673] do_syscall_64+0x4c/0xa0 [ 290.418864][ T8673] ? clear_bhb_loop+0x60/0xb0 [ 290.423570][ T8673] ? clear_bhb_loop+0x60/0xb0 [ 290.428288][ T8673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.434218][ T8673] RIP: 0033:0x7f9ed9f9e159 [ 290.438742][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.458375][ T8673] RSP: 002b:00007f9edae6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.466830][ T8673] RAX: ffffffffffffffda RBX: 00007f9eda225fa0 RCX: 00007f9ed9f9e159 [ 290.474833][ T8673] RDX: 0000000000000030 RSI: 0000200000000180 RDI: 0000000000000014 [ 290.482831][ T8673] RBP: 00007f9edae6c090 R08: 0000000000000000 R09: 0000000000000000 [ 290.490921][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.499100][ T8673] R13: 00007f9eda226038 R14: 00007f9eda225fa0 R15: 00007fff4317e028 [ 290.507117][ T8673] [ 290.550157][ T8682] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.691143][ T8703] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1046'. [ 292.843887][ T8725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1052'. [ 293.057467][ T8730] netlink: 'syz.1.1056': attribute type 19 has an invalid length. [ 293.089385][ T8730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1056'. [ 293.128781][ T8734] netlink: 'syz.0.1055': attribute type 21 has an invalid length. [ 293.345289][ T8734] netlink: 'syz.0.1055': attribute type 3 has an invalid length. [ 293.518896][ T8734] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1055'. [ 294.101124][ T8755] netlink: 'syz.3.1064': attribute type 12 has an invalid length. [ 294.178031][ T8755] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1064'. [ 294.256553][ T8768] netlink: 'syz.4.1065': attribute type 19 has an invalid length. [ 294.478079][ T8768] netlink: 'syz.4.1065': attribute type 19 has an invalid length. [ 294.513698][ T8768] netlink: 'syz.4.1065': attribute type 19 has an invalid length. [ 294.521822][ T8768] netlink: 'syz.4.1065': attribute type 19 has an invalid length. [ 294.565803][ T8768] netlink: 'syz.4.1065': attribute type 19 has an invalid length. [ 294.615696][ T8768] netlink: 'syz.4.1065': attribute type 19 has an invalid length. [ 294.697907][ T8774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1067'. [ 295.048285][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 295.451176][ T8794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1066'. [ 295.572295][ T8794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1066'. [ 295.973589][ T8793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1066'. [ 296.704986][ T8821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1079'. [ 305.104770][ T8867] validate_nla: 62 callbacks suppressed [ 305.104781][ T8867] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 305.310690][ T8922] __nla_validate_parse: 3 callbacks suppressed [ 305.310707][ T8922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1094'. [ 305.331663][ T8920] netlink: 'syz.3.1092': attribute type 29 has an invalid length. [ 305.360893][ T8920] netlink: 'syz.3.1092': attribute type 29 has an invalid length. [ 305.420331][ T8929] netlink: 'syz.3.1092': attribute type 29 has an invalid length. [ 305.448111][ T8932] veth1_to_bond: mtu less than device minimum [ 305.964012][ T8950] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1099'. [ 305.987344][ T8950] netlink: zone id is out of range [ 306.034951][ T8950] netlink: 'syz.1.1099': attribute type 3 has an invalid length. [ 306.047494][ T8950] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1099'. [ 306.196884][ T8956] netlink: 'syz.4.1102': attribute type 21 has an invalid length. [ 306.215158][ T8956] netlink: 'syz.4.1102': attribute type 39 has an invalid length. [ 306.322484][ T8961] device sit0 left promiscuous mode [ 306.506924][ T8971] netlink: 'syz.3.1105': attribute type 15 has an invalid length. [ 306.528706][ T8971] netlink: 'syz.3.1105': attribute type 7 has an invalid length. [ 306.543398][ T8972] netlink: 'syz.3.1105': attribute type 15 has an invalid length. [ 306.560497][ T8981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 307.027810][ T8998] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1107'. [ 307.509195][ T9021] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1114'. [ 307.783810][ T9030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1119'. [ 307.860616][ T9033] netlink: 108384 bytes leftover after parsing attributes in process `syz.2.1118'. [ 308.757063][ T9069] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1130'. [ 309.053525][ T9072] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1132'. [ 309.471566][ C0] [ 309.471580][ C0] ================================ [ 309.471584][ C0] WARNING: inconsistent lock state [ 309.471603][ C0] syzkaller #0 Not tainted [ 309.471611][ C0] -------------------------------- [ 309.471616][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 309.471622][ C0] syz.0.1135/9090 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 309.471640][ C0] ffff88807dabea18 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 309.471685][ C0] {INITIAL USE} state was registered at: [ 309.471690][ C0] lock_acquire+0x1bb/0x4a0 [ 309.471709][ C0] _raw_spin_lock+0x2a/0x40 [ 309.471729][ C0] htab_lock_bucket+0x179/0x2f0 [ 309.471745][ C0] htab_map_delete_elem+0x197/0x5c0 [ 309.471759][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 309.471776][ C0] bpf_overflow_handler+0x50b/0x790 [ 309.471792][ C0] __perf_event_overflow+0x457/0x630 [ 309.471813][ C0] perf_swevent_overflow+0x19b/0x230 [ 309.471829][ C0] perf_swevent_event+0x458/0x570 [ 309.471848][ C0] perf_bp_event+0x311/0x3f0 [ 309.471868][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 309.471888][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 309.471902][ C0] notify_die+0x141/0x1a0 [ 309.471915][ C0] notify_debug+0x20/0x30 [ 309.471931][ C0] noist_exc_debug+0x73/0x120 [ 309.471945][ C0] asm_exc_debug+0x2f/0x40 [ 309.471963][ C0] irq event stamp: 7936 [ 309.471968][ C0] hardirqs last enabled at (7935): [] exc_debug+0xf0/0x130 [ 309.471986][ C0] hardirqs last disabled at (7936): [] exc_debug+0x6e/0x130 [ 309.472004][ C0] softirqs last enabled at (7450): [] __irq_exit_rcu+0x13b/0x230 [ 309.472020][ C0] softirqs last disabled at (7433): [] __irq_exit_rcu+0x13b/0x230 [ 309.472035][ C0] [ 309.472035][ C0] other info that might help us debug this: [ 309.472039][ C0] Possible unsafe locking scenario: [ 309.472039][ C0] [ 309.472043][ C0] CPU0 [ 309.472046][ C0] ---- [ 309.472048][ C0] lock(&htab->lockdep_key); [ 309.472057][ C0] [ 309.472059][ C0] lock(&htab->lockdep_key); [ 309.472066][ C0] [ 309.472066][ C0] *** DEADLOCK *** [ 309.472066][ C0] [ 309.472069][ C0] no locks held by syz.0.1135/9090. [ 309.472076][ C0] [ 309.472076][ C0] stack backtrace: [ 309.472081][ C0] CPU: 0 PID: 9090 Comm: syz.0.1135 Not tainted syzkaller #0 [ 309.472096][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.472109][ C0] Call Trace: [ 309.472115][ C0] <#DB> [ 309.472121][ C0] dump_stack_lvl+0x188/0x24e [ 309.472140][ C0] ? show_regs_print_info+0x12/0x12 [ 309.472164][ C0] ? print_usage_bug+0x42a/0x690 [ 309.472184][ C0] ? verify_lock_unused+0x15/0x140 [ 309.472208][ C0] lock_acquire+0x2df/0x4a0 [ 309.472268][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 309.472290][ C0] ? read_lock_is_recursive+0x10/0x10 [ 309.472312][ C0] ? look_up_lock_class+0x75/0x140 [ 309.472340][ C0] ? perf_trace_lock_acquire+0x101/0x3f0 [ 309.472357][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 309.472386][ C0] _raw_spin_lock+0x2a/0x40 [ 309.472406][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 309.472424][ C0] htab_lock_bucket+0x179/0x2f0 [ 309.472448][ C0] ? htab_lru_map_delete_node+0x610/0x610 [ 309.472467][ C0] ? look_up_lock_class+0x75/0x140 [ 309.472490][ C0] ? verify_lock_unused+0x15/0x140 [ 309.472514][ C0] ? htab_map_hash+0x301/0x6d0 [ 309.472536][ C0] htab_map_delete_elem+0x197/0x5c0 [ 309.472563][ C0] ? htab_map_update_elem+0xb20/0xb20 [ 309.472579][ C0] ? perf_trace_buf_update+0xa8/0x230 [ 309.472598][ C0] ? perf_tp_event+0xc10/0xc10 [ 309.472618][ C0] ? perf_trace_lock+0x19c/0x390 [ 309.472636][ C0] ? perf_trace_buf_alloc+0x300/0x300 [ 309.472662][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 309.472681][ C0] bpf_overflow_handler+0x50b/0x790 [ 309.472705][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 309.472722][ C0] ? perf_swevent_overflow+0x230/0x230 [ 309.472738][ C0] ? rcu_is_watching+0x11/0xa0 [ 309.472762][ C0] ? lock_release+0xcf/0x920 [ 309.472791][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 309.472819][ C0] __perf_event_overflow+0x457/0x630 [ 309.472852][ C0] perf_swevent_overflow+0x19b/0x230 [ 309.472877][ C0] perf_swevent_event+0x458/0x570 [ 309.472901][ C0] ? perf_tp_event+0xc10/0xc10 [ 309.472922][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 309.472959][ C0] perf_bp_event+0x311/0x3f0 [ 309.472988][ C0] ? perf_trace_lock_acquire+0x101/0x3f0 [ 309.473006][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 309.473064][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 309.473087][ C0] ? read_lock_is_recursive+0x10/0x10 [ 309.473119][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 309.473149][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 309.473166][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 309.473190][ C0] notify_die+0x141/0x1a0 [ 309.473210][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 309.473255][ C0] notify_debug+0x20/0x30 [ 309.473272][ C0] exc_debug+0xd9/0x130 [ 309.473293][ C0] asm_exc_debug+0x1a/0x40 [ 309.473306][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 309.473323][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 309.473336][ C0] RSP: 0018:ffffc90003917d48 EFLAGS: 00050206 [ 309.473348][ C0] RAX: ffffffff84164501 RBX: 0000000000000090 RCX: 000000000000000c [ 309.473357][ C0] RDX: 0000000000000090 RSI: 0000200000000304 RDI: ffffc90003917e44 [ 309.473367][ C0] RBP: 0000000000000000 R08: ffffc90003917e4f R09: 1ffff92000722fc9 [ 309.473376][ C0] R10: dffffc0000000000 R11: fffff52000722fca R12: 00007fffffffef70 [ 309.473387][ C0] R13: 0000000000000090 R14: ffffc90003917dc0 R15: 0000200000000280 [ 309.473408][ C0] ? _copy_from_user+0x21/0x170 [ 309.473436][ C0] [ 309.473440][ C0] [ 309.473444][ C0] _copy_from_user+0xf4/0x170 [ 309.473465][ C0] __sys_bpf+0x2ea/0x780 [ 309.473492][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 309.473535][ C0] ? lock_chain_count+0x20/0x20 [ 309.473569][ C0] __x64_sys_bpf+0x78/0x90 [ 309.473591][ C0] do_syscall_64+0x4c/0xa0 [ 309.473606][ C0] ? clear_bhb_loop+0x60/0xb0 [ 309.473620][ C0] ? clear_bhb_loop+0x60/0xb0 [ 309.473639][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.473661][ C0] RIP: 0033:0x7fab1b59e159 [ 309.473676][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.473688][ C0] RSP: 002b:00007fab1c3c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.473702][ C0] RAX: ffffffffffffffda RBX: 00007fab1b825fa0 RCX: 00007fab1b59e159 [ 309.473711][ C0] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 309.473719][ C0] RBP: 00007fab1b63506b R08: 0000000000000000 R09: 0000000000000000 [ 309.473726][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.473733][ C0] R13: 00007fab1b826038 R14: 00007fab1b825fa0 R15: 00007ffdb2f6b388 [ 309.473758][ C0] [ 317.274684][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.281011][ T1279] ieee802154 phy1 wpan1: encryption failed: -22