last executing test programs: 3m5.629894223s ago: executing program 4 (id=475): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x26, 0x0, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 3m4.487892455s ago: executing program 4 (id=478): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x2, 0x98, 0x3, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x48) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f0000000580)=r7, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625cfeca4f2bf5c6c8d40f7ade5d2b5b4d9dbae36ef698b271b104b9f01c3a08a9a91a1a57e47110ec11141f044fdae6c1b5d9028923a75a21823f5858bda250f51fc5", 0x46}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee9"], 0x9a) 3m1.27694253s ago: executing program 4 (id=487): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a07, 0x1700) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x35, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x20}, 0x0, 0x3, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000faffffff0000000000010000180100002020702500000000002020207b1af8ff00000000bfa100000000000007000000f8ffffffb702000008000000b7000000154a0400ffffffff7832f4ff040000001851000005000000000000000000000085200000050000009500"/128], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xd1, &(0x7f0000000380)=""/209, 0x40f00, 0x12, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000008c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xf, 0x7750, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000009c0)=[{0x3, 0x3, 0x4, 0x5}, {0x5, 0x1, 0x0, 0x3}, {0x2, 0x2, 0x5, 0xa}, {0x5, 0x3, 0x9, 0x1}], 0x10, 0x7}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010125bd7000fcffffff8e0020587bccf00000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x408c000) 3m0.915905169s ago: executing program 4 (id=490): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x2, 0x98, 0x3, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f0000000580)=r7, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625cfeca4f2bf5c6c8d40f7ade5d2b5b4d9dbae36ef698b271b104b9f01c3a08a9a91a1a57e47110ec11141f044fdae6c1b5d9028923a75a21823f5858bda250f51fc5", 0x46}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 3m0.029177371s ago: executing program 4 (id=492): socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)={0x320, 0xd, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2f4, 0x3, 0x0, 0x1, [{0x2c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x50f9}]}}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "e76b1a4b0134218814e2dcb28d45d78304527abd06b7926ca485b7990884cde21451f6f17dc20ebd089edf7deaaf62eb899bdfb95e487c10b9ab3a2f6c6bc08ff97a8a110b6a80af7d5a000b0a0cbc836e2cc797a6506ff77a00e51bae"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x1c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "5c13efad8558210eabe7772060a620421651e125126c5e3364d0d17156b7d551b725608b301837baa9f522d16e4b8d0a55"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "f475e199d8e62b12610998bbc9aed163da424bddf745ad39f2546c9ec37f4cc41eab310f92b069d99af708c137fc2b469c8df1842a045e65075ee34abf08c8819bb54e7ca359aee9c6bb0bb624e7a3c2b7361f65c321ef4595e95cfafb760b8d7bd24db6a547c03e785a082a9aa951f2997dc9e70aae434c3449fc6d6e8e05b33ca4fb2d5d4efa16d7ae91ab0958545fb06cfdba729b37cfa18063f565648fd2dec725414a8e29a1cf3d8282b1f60e24b3f87dde62c2ac4d6dfa6ccdbeff657ddb9884e7424e70682c1969f660d8c31bcc"}, @NFTA_DATA_VALUE={0x89, 0x1, "97cef2c202218b4e31e4d9f7fc4cc907c50d9bf07c4271009a675f78f01e82d55745619aa6493cc5744f26e54cff2c0b674668e55027d7ab641ec5bbfe46a1edf29a76b08df6632e75a34836830c28be62b9c4feed3b4c7fcd05916ae51e99ebf36e38a787c3d87a9506b53d05586f351a93243a0ed39277aa2681606d0b81a1e7edc3e4cc"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x2005091}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0xfffffffc, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000102) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x8, 0xc, 0x1, 0xffffffffffffffff, 0xfffffff9}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x7, 0x0, 0x0, 0x42501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x200, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x814) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x14, &(0x7f0000000100), 0x120) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f00000006c0)) 2m58.540438107s ago: executing program 4 (id=502): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a07, 0x1700) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x35, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x20}, 0x0, 0x3, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000faffffff0000000000010000180100002020702500000000002020207b1af8ff00000000bfa100000000000007000000f8ffffffb702000008000000b7000000154a0400ffffffff7832f4ff040000001851000005000000000000000000000085200000050000009500"/128], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xd1, &(0x7f0000000380)=""/209, 0x40f00, 0x12, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000008c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xf, 0x7750, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000009c0)=[{0x3, 0x3, 0x4, 0x5}, {0x5, 0x1, 0x0, 0x3}, {0x2, 0x2, 0x5, 0xa}, {0x5, 0x3, 0x9, 0x1}], 0x10, 0x7}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010125bd7000fcffffff8e0020587bccf00000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x408c000) 2m42.96577082s ago: executing program 32 (id=502): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a07, 0x1700) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x35, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x20}, 0x0, 0x3, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000faffffff0000000000010000180100002020702500000000002020207b1af8ff00000000bfa100000000000007000000f8ffffffb702000008000000b7000000154a0400ffffffff7832f4ff040000001851000005000000000000000000000085200000050000009500"/128], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xd1, &(0x7f0000000380)=""/209, 0x40f00, 0x12, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000008c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xf, 0x7750, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000009c0)=[{0x3, 0x3, 0x4, 0x5}, {0x5, 0x1, 0x0, 0x3}, {0x2, 0x2, 0x5, 0xa}, {0x5, 0x3, 0x9, 0x1}], 0x10, 0x7}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010125bd7000fcffffff8e0020587bccf00000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x408c000) 5.682159646s ago: executing program 5 (id=1609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.391903188s ago: executing program 5 (id=1612): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={0x0, r2, 0x0, 0x6}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xce}, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000), 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000051411002cbd7000fbdbdf2508000100000000000800030004000000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0xc140) (fail_nth: 6) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000200)=0x1) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000580)=""/228, 0xe4}, {&(0x7f0000000680)=""/30, 0x1e}, {&(0x7f00000006c0)=""/167, 0xa7}], 0x4, &(0x7f0000000800)=""/134, 0x86}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 5.253203444s ago: executing program 0 (id=1614): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4.942642758s ago: executing program 0 (id=1616): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f0000000580)=r3, 0x4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB], 0x9a) 4.849480135s ago: executing program 0 (id=1617): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x2, 0x98, 0x3, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe771"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f0000000580)=r7, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625cfeca4f2bf5c6c8d40f7ade5d2b5b4d9dbae36ef698b271b104b9f01c3a08a9a91a1a57e47110ec11141f044fdae6c1b5d9028923a75a21823f5858bda250f51fc5", 0x46}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 2.64213066s ago: executing program 3 (id=1618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002007379"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.641646004s ago: executing program 5 (id=1619): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc884}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000640), 0xb47, r2}, 0x38) socket$kcm(0x29, 0x5, 0x0) 2.594399131s ago: executing program 2 (id=1620): r0 = getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x10000000007fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x100010, 0x2e, 0xfffffbff, 0x3, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x24706, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x4044850) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2}, 0x0) 2.560618943s ago: executing program 0 (id=1621): r0 = syz_clone(0x9a06400, &(0x7f0000000200)="580dccc8f5d9b25df6c0d59c233a8056d2f78e5a5b37fb9ba7396055e24ccdc759190c116a88f8b701ac52ccbce7cf180afe5e684753b3e19a737ed48d43f71fd63c1cead0eef2ca744928f715fda4f49c7916c19c563f37e879790de2035059595c7d4527e6545ac41c3d92e418192a1213709da581216b19100737f4d85a68aa36765b72a55877c94549c84d27b6a2eb57c0471e79e57f444b28992be3edfb702dfca9eafe4e738eb5415bf653c5f135799dd23a6a989298b8f0dbc1b11b5b14022c04516a0b793c9e7de7c0fdcc0586d7cdc0886558372b986d549f521ba255f21a8950ee5ffe504edf9a7329c5bbb7", 0xf1, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000300)="4a8d0bc47f820a86f0ec85e1aeaa9a86860a59382129a138f8497b8946eb383521f021599d5b9583dc6793f79f07594604dcc90daf45b26f6c83cd20ee359a628b93ee9b6d2fdb0cd1234dd45ff0c04d9ef09df683270ddb2a358d686c15d0d06e9cef2d5d372f5001641109ce63d32835c42f40ab85cc6ccf5babb91509532ae3163071087d60abd6c6f7f363eeb451b81fbfc476800331af6b") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000300000000000012010000000400000004000093020000000600000001040000130000000f00000006000000080000000200000000000080020000000f00000054670000d800"], &(0x7f0000000840)=""/190, 0x66, 0xbe, 0x0, 0x6, 0x10000}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x3d, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00'}, 0x18) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r4}, 0x18) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8eb0000080500df04000000001a548d01cd520008000000002e240000000034c06f29000000000000000000"], 0x0, 0x2c, 0x0, 0x1, 0x3}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000440), 0x1a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1a) mkdir(0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, &(0x7f0000000200), &(0x7f0000000780)='GPL\x00', 0x5}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x20, 0x140f, 0xa821769c5c00448b, 0x70bd2b, 0x25d7db7c, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000880}, 0xc044) r6 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r6, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000406010100000000000000000700000105000100070000000900020074797a32000000000900020073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) 2.450141829s ago: executing program 3 (id=1623): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x2, 0x98, 0x3, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625cfeca4f2bf5c6c8d40f7ade5d2b5b4d9dbae36ef698b271b104b9f01c3a08a9a91a1a57e47110ec11141f044fdae6c1b5d9028923a75a21823f5858bda250f51fc5", 0x46}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYRES8], 0x9a) 2.416456048s ago: executing program 1 (id=1624): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0x0, 0x0, 0x0, 0xe4b8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x2}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0xd, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, &(0x7f0000000100)) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r5 = socket$kcm(0xa, 0x5, 0x88) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x8000) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000300)=r4, 0x4) socket$kcm(0x29, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.370540432s ago: executing program 2 (id=1625): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, &(0x7f0000000200), &(0x7f0000000780)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000240)="78cafb363b0500070000000000004000000006", 0x13}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0xc044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xfc93}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={r7}) 2.209326815s ago: executing program 5 (id=1626): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.135975719s ago: executing program 2 (id=1627): r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x22, 0x2, 0x21) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x1004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x2, 0x4, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0xa, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000014) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000181401000000000000000600080001"], 0x20}}, 0x400c044) 1.993136047s ago: executing program 5 (id=1628): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/187, 0xbb}], 0x3, &(0x7f0000000580)=""/158, 0x9e}, 0x2100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6eff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0xc1c, @rand_addr=' \x01\x00', 0x6, 0x3}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000001980)="71253b2f48437969c8ce1be5cda818a72af18dbb3fef77127f3f84a1048a08a543872ba4e61053561615f62948623f3f7148a2952b19091898f45f593c31997e1107f836177d648c90954dc8f5d3e728a58e9ec162e468b748c48a945d90a691bbaa46c740c3acb4d34ddb1fb687d5d9ade0e3d806b35f4697c1bb922443a49347513b63ce7916685dc4f2c02e77072af80e1436f9463dd6b024627c0bb0edc2e77a61f93c48223e92f7ce45d0c2a2c79b95e96f67d270a1dd14e33d02ef3d9377570e629e48b115a9d9d4c58d68fbb1e9693890fbd6ba9b77dd30fd0e365154fd6d44921de4eb70c4dedaee3a1a8d0de0a8468be39fbc7b18242a81f80c135f832cb3b945d54b1513d6f48650fa4e9926e83f59c6de390f6810b062f72cf68d65df0c26a6d2916d29dccddc4658bd62fe9df14fd75454c03add7f788ebc6049900cc08f6b617e1af0ab68c43e6091bf0af954473acbe759cf8d913dfb87c7f37ad31af57a01a8e1013c5a397e8f57fb111db7ee3551974c4deb1e627213afc3302318baeeff7baf3c3a698294b00b50b7bb668c18323014ecbfb74563df03826da29fe214e4cff3cd4c937a8ebb0e22881e81dac80553a8b5b3b877c0a516b2ff48d9bd91c3ec56e0b3b220ce33e4a9d815d54635b43eb74fa41864ad9c2c78c07d1be9537a489f61ced38d3caa002858d84dc5c9cd98ea6ed7da02f0844b8494ac62926853cc08f32bbdb6201d708b4bb80564f48ec82e7bb5f26578733fabb4f0c6d7291db18bd0a8f4729c08648ff0917f1656953cb6cae0cfffa4ffaebad8be61a5e89a640af6a15396096069fefee8f2895f469e2232606f63d51bce03e545299d8ab334b027ea725fe5142ff2e4078e59e5f114272085de5ec486349a823dc19efe88a7ae62441466c4b253210cd3b943d4f81714a39c94a5b42d2f1c58b0f27d097dbec0aa3987ad184b07a9110b6301c67c9c18b758e1f00a354dc9cccfe5c29d75ba26f590d36ffe967fc392e221e070f00a83189b46d76473c72bfa1479a4c04c1c9b7b426446dbb4c62587d4b415309050f9c4c34adf3e2a6ce7a2b9d18a0eec0c2be13d1caac4924ce7197e1bca64d8f5a91dd768bfa55eb0e8e25a1ba4ada6a372074f7a80ce73242914ed81c2aee4b8286800a603a8ee5d61fd35239cfb42050195a4ce091a310c8f631f4a4544a4157c2e21224ba31dbfec2bb1a2385faa5bb1f827e6bf5d23b4f5ec259eef7cc4c39dc1d74c6a8bdba194d2f12d342b775f3d04ee6125b781e83338748c98f25349e28ce1bca32225fbe32dcc6324a5521308bf0b61d20646ed3916acf72c48f1d68d4e3b768335e03e827c2b01de026f5d9d5412925f8061305fe784be1a1335c1081214f24682ad5aafe7ab9c10dfeca047be811eda876fc37ee660a091d6f060095b3387c825df3734c726b6c8faff831d46573dd99a4c4cf50524939a906294c2df9ab4dd4fda454b30f33cac8e502fd55cd0f737f3890888fdb8a15058eb5ef2161fb4281cfaece4a630d7d43cf78319f73c8ee2ada816b53a4bfaed6a942c74d86fa6be8d66b6a13bc6b1b29811ad09a8ebd7436814a80aa5301697c628d8d767eb8c5e329dcf69e6b2fcc80c2d4f9346b649e972f06b9226510884ca682d291ed3ee0624663cc1f1991a7433575d4083e078c5038c23f9cc2056c26b447545682e6f36eed549d37f3f4a82e07da2fe77c19b5c9864d222890b85e6d016977e23337156e6b5fcb39ca922bda3bbe4234c267ab7f8d6cf6683a0ef7009f70143e45327d208b68c1b2ed8deaa0f95b10b42e2e19f132d89483f2b287d4496173b762748470ee71619c4ebe6310f4b898a53b209b374ce9ed82d52d4ad9d99d44771a3a75baabab4029d765c619d7587da347b658fdce21f73b85a4507658cf148dc421ccd0c1a90b86e0bd609d977bf0db2f51a6b51d94ed0205790158b8dbacae011ab7ca219fd8b65c0d5c33d699adf26e26b5ad257c6e3566874abacc556b794ecbaf2d7d05268c749ee03c7cf6ac3ceecdc083831f59fe03cde5e1949d48c61a62c1ce3c2784eab6e58b66dc7f66e6c4eeecc59a3ca36f81d2fc647a31b64d5c42b263739f9a514b740b05d30549b6c855929d7cee8342829411510ec9d700508ca9ddcf3bafd33e6c595c21cffc04f45262d18f5f0a2c82605269be5230047b966167f51af0673410a2aeca1346c4e0887c9a93f46fd9d8305fa66d1539b9e46f98c61ce7e8583c963b39a3de092c88f7d2eca6e389b633d083352fe7ee20ebb438b6f1416e79a6f223f07e8aa37a0191cb619590f96dd02a5666b6d399ea866d2694696257fc35c041f66ba63179bd8499e06aaa2fb4306112eaf9b5cb0ffda0a8855bf3b6d142d3db1a230de4df323cf679bed858cb3c2375997f343423375ab6a6feed3306591ee776fc7537d7838ea95308bcd1e7fc2061ede459e5d59f9ad216a280cb0e8f4e63cf39637611a1fae9e17a3cc1ff61c3c0a198b5a726e5b8c7d8f1490dace429e756c6e2d21517ececd2900ed861d89a830d9386267efbf7b140262c86fe212a9e5a43ee39bc1e215fe7b52743911f927da41842057a0c05e6d7ea5f3e3a6c040a9b54af5a0c219fdf16230350126723a6caa9b81c4e6f06285e55689677341e717c80409c1c5ef5a56b9f85c5613c2ec67d61f24205fe8612a9e3072d481c433b5b2f5f88d51b11a4638e46e52d1970aa1b83a01d5ba4233f459baad3f729f68aea43675902c646ae76b7532f4c75935a23d9378bb900ff0dc822ba6f49789cc10d05701f6384de0fd44bdbef388f6a679052a92338e24b58cae2d1633de558543887825c440c5547f78310c63185da092014a4ecb4ed412856e690b9469e52003da834e285f4b64c4ae85b47016ada1b7be41fb8ec87d9ab190a24e98f5754016f7cfa6cfb6de8cd5b7cd98c08d12d8f088c0a2b960ed094d3875f788f152aa840b961f8cddf9e9363c66da1c0ce8d5509653bbfba88cb6dae51c2d68e8eb07fd88a95cd1090c1d7b7bd5f9518d796883fdec04507a2b06daa768fed0971dedd9090a8b7229e6b10a6ae52d105787be9986069097d34a3d7b15b76af21c344ba4df98cdca653871fe629155107c7ad3baad2318844c6ff0d9fb825dcd64ea993c8be8cb18d4acc60a3592c284f63df0377e0af6a95d0bb72794693c82508c150d3469422d0cd8c2bb3750295a3af08335dfe429249f4a4eaa3eb39e2190550e42c3e09842ef1d3cad73f4f5bf56a03eb8f61ec6819e0ab6d3b282b61a010525117f11be73c7b213ca3d5ec0ce5afb941e5b962d00c863fff6fec47d81b5734ecc86c021bdd80e8b20f00494eda52d5cc31065088ee76976794acc41a85faa5d42bfc3740c797759e0dad2a34af2911ce135ea114c90852020dd4345db64375e0dc1e187c6328f2a822c1ca210c9bff82e5d29612c32875330b05dc9d4d0973173e47ba652b0d13ca0ab4ab9906457a0f63f605cb3bac7bd5755ecf9c95264929bbeb6e4dd73a7c6a9d257d8708f50516f5baf092a0136d7653ba86644482af2a22c7798485b7752ef0b02bc0e195b2dcd48353efc7040cc1c76e4909bfaa29f286b557555890931b91f71a8657ac5f84cd63b9b2851e0f9bfd91ae88d4822b10f0ff814fece7f07fa9171753e10a87f2a3c11454d977d3fc1f853919f23e03f1c97815b6dc51de377270a2796de55065016d58b7092eb94fa89fc98fed3c53037475e8d67da4b2d25fefe3c575600621c83ba513c8a1328ea83296b99c032a714b1dbb9c72a1c5ad8ed7604d2ed3c27e7cd649ae7b33cdd62f723a49363734403c57db53f251cbd90978a79d5bca6e8c7c69f764ede67ab21bcd9b2a17c6c5429a09c3266c0d842382d4e3e8742bae89087c3065e097a816e12d128708e7c2a5a79e7213211b340414b68b8becc06c479a8bd0e6b9298f267a775f5d84365ff0d661600a335e13e2eaeccf40d16cd5d4c4b84d9c2c479e32d3b7c3e0c5014028335a2546fd418ea2f519c9edfca385a301a05a1710985a69b64cef3c6ca26b6b3947e3f51255a39761221aecc8fa7161e01c0a5fab814c7212bc52cb8eced98c930ae177a8dcf9807ee7fbbef9f127d27550de02b72901fe0a7b4183e5c7b12e22d422e19ef9dde654843f8c695555103aadedb822a2913589c6bf7b9463c09aea7ef2273f53f5ccd678c114ac0c0375468cd0c9da89c95085cd833d8801ae9a88a3bacf0c5384886f36024a532984d8a14b1e8c2ebe0f9207c722aa2bea1c7aa720f8a39ee33fdad8ab4e2f13087ab8783db1354b965e3f09f143d8955fd79a8f44e0fbe3dcf389eb160065a2fe35b3f6dc3c9bb6bf239941ba7954771a9691c032f624d698a22b68514edce5da1835d323ecd55a6ab7e25d7b7e0e609bcdb87a7b24dfce85b75b19e20dc0d21f8f4fee9d27baf92f276af5aa2bda86f2fcf827377152f04eacde693d32ba67ee43a6f05cbd7685a878e7122d70c041250218d1f690baeab7a8ab0521df229e7dba64ef3728fc6962e5ed7b9dae31ca7d472e884064ca19f0da03a63c301d60f4c8c1f83335fb55e893ae6ca008ae40ff1f77eb3f635e6e9d6c29407992f8ad9e3366c63dc783603ee22cbb05ffae5d7daadfe66ce7912df46b8e696804517dfe689940e0cf63d75cb96f4d12f474565748a7105391a397077f57a7b18eaf9303ec440486b9dee26e9f0f578640183c6840dfbdba0298a94ad2b66e2592ed8015939f1e00a8e6cc7eaf83587ad857b4b87fcfc455470de08e6edc98e9075aceccd358444b51ee095dbc21c2793f91f7220055a14e975b091d120257b4fafd375cc7b1b064d39daa9e8170963d2e07cba80676f11593bab8145b6e00ec1b6d63d6c813c92c1db15345115ee7e45e4bc509d8e3acd32c4b521d0a471f967a772c4bdf373a82a0105b5672fcb008f7beec3a816bcce9aaeed84f791296585f029f78d184c8b9322a87609b76a481fd78c05ecc563ae91f667d3e2546b0ea8268f3a29dd58dd4250a43bf29e55528e3a8b54e89530843180ec7dd299fd80e37908059dc8f33f12d7c3d506805252aff16b1419e74f7cf45c63276e6fe4569c0a341c140e21adc362156a8dcea8d80cfbed7ac903ab006a437d9fc59883e96a9fb502f70f7fd858a82a43ebd78cddcb19cbaa66752ad254745bafce7a747d2eee2903ce60731ddea5e0a3ca653bcc1196217cdee97f4a699aa264cb9e9c1d50a13d1d3ede9aaddfaee157ff6b8d97eea7bf9318f328efe0bec470aa02b40f5b5305b5449b770c48e256a7987ffe14b60f16a2933f67ebbe5905ef834dc39f2c36fad2fd171b88a50309741369b400718a027a181a38b69741cd2201b909883b49be68ab3ab9d63e588d9632ba0d46f1c4cd64ac11615e2ae4f0b2dc2d0218546449d7e0081964e3e6df75b8b863fe0bc888f9fc1b7bea74f8c199989a87eb8239cb4e4a864a2bf42a6051493a1f435081e20ec91275ef26d6415c237465291e24dbd3035e12b8f6a7b94836b96ab231af05298d6815b9f29119a2396653a5c8c54a0a6fa7bd9670429b44a0c3f2d97eb1b4ad10ca3b134768398ecf304895fbe9987bb5cfc989d9d5628d5d00264aa2cbecc4193b23ee1ebdb6c844c9fa1d0d9b948cc99c38de0dc1539f33c72a48087ac526ba9eaf6182f87327c7bdfb4ec48985e21daf46b4249802ee068cb0967fa8f17a3a6d2975c351854e2bf37775b647c76efb55adf991ac761e38f0384e6cf899", 0x1000}, {&(0x7f0000000d40)="08ec9bf3795d3aa4b375ed64888b5720ba8c5f2f9a57e1a82e92944228f1ee9dd7b312d06ad607e11de9ee34bf161249a70f0c1d6fca5002e3a7c30f3fb714ae35db225cfd42a5b548c869e0bc0beb21f0b740cb1134fa78c6f463a978c36934e24339e2258ce2343a4d2b39b5a2f280a72791b56720228bb9039633d963f1bf23b1f2d3690ab484198fe3b3cdc8bc3278ff755dd2c65d77095490e864617f61d033cd56752726e1ea90e958cee4d399137c974801a29fd1a7c537d946fb02f36f8c536970211aa8445836327e94862dbc8e06639c3d8d03890ce4e50564cc9cf9b04fc7fdce", 0xe6}, {&(0x7f0000000e40)="0137bcc62f59d51b0823a5a985bab88b651c75dbe06223448db7551d2121ecff94a171adddf76ef250cff29a11dc39b8698503061ccbbe0b78e5651f1da5a5475ac88f1426090a257db71b457e3fbbe18f74f0afd7304aff3e50da3f7084598a1ff08277ebf2ce857333aff230fcb3fb3a8c3744681d4d801a9b317dee61fd911a58ad8159cc8298c5291858de4446324515b433b1bd6e6a1c1f524fffbaaa763b3c628223e93beb18dc", 0xaa}, {&(0x7f0000002980)="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", 0x1000}], 0x4, &(0x7f0000000f40)=[{0x38, 0x11, 0x56, "3665f516cc7e4a9bed43f86b81adad833637a0619df3dc86bc486b08dad3cc2e1d9831"}, {0x28, 0x114, 0x8bc, "a98632a1bc47707f6917f9c16264b3fc75"}, {0xb8, 0x182, 0xa, "de30a0cb0f30297c4b0e1613ba48233bd0677cce5b3e42261aff926fbe6c05ac3fcb1d7b14c8defe4a80e345e0f9f161bf98fa7e1af42073040ddfdb926b6f1b81e54d29e9fdeb7406cbd910beea3e9970dd3b1028200f197136179da74f8fe48665e0f9656b3b8c2d3579062ce9dd650307fab4ad16761a7511a3db71bec166a11b602b16165638d02db931147370e66e73c978ee73edc6402cfd98d9a363a5285bae"}, {0x88, 0x11, 0xe2, "0ab52fd465b9b68732ed9fe11474cdc5aaa916937524ee511da18b381678de336122adf9dc0060ec715d57415583b8fb7bbc9cdcedf0aa6ceade84c9a1c5a3c03449133009123651736502267e2cf41dd2a2b713dea906b8d7841db439ab3df55de13cc8a66637373a436885536f08de87919fd2"}, {0x100, 0x10f, 0x9, "cf36f5dbbbc610dadea39f7601478c95cfe930cd42ca3a9f8a7959af35523c1057b117a100418e1eedf047b90cb7c45f5849193ffba17716d023163c488143073c3769141c203bbe3922fa8d852d0997e9b9ac85a74155eea545a896cd7f154a00d82680868d93147d85d6964a66a03bd8d0f270770e51b38c16674db716615cd20c0971610574dd731025c3eb1a8daaccd5c899a3b5118d1e0105e72d4a96e6e03b5ff7be64b6c492f053b5c6c0bae5d8ce79c8c03bf37005f9851642330457f42970ccbdbda5413e21a4c0203b8e47cbc2e46aae0946d69180ed61a9fa9100daa1a009da58747b9ce23e94"}, {0x80, 0x111, 0x0, "24d42fa7f3f3c390c13277bcf03118d273fcd03d472932576b435182336af185886af43a7adfa84d0abad3831c3bc586652acf78b77a5e06b4770bfa904842cb51be47693b55d020720c83941981bbcafcb658f73e16cfb73faf0ce87735329834039c386d7b71cb0e02894b7944"}], 0x320}, 0x40011) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdf7ffff0a0000094890a9a1ebcd2a00060000000000000e05000000010000e1096000302e615f5f61e40000"], 0x0, 0x4c}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000012c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000bc0)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="700b5e47b7faf35f70eb12152e4caa893b1b40bbef44ef68d2b64772e4cba6b5461cf34d3f70fe8e6cb632ae6c1f615a9e8a3335a723914aa5cc26395b12b254f18de4d3c944633204e57640ad2830465f2750c2f4a52c1cad59e5e5398b84411689", 0x62}, {&(0x7f0000000800)="f998a86bdb2f9b7443530128895b732c9fff70fe0f3e66885802e108224df736f3c7fcae9c774c38e426f2f33f6cbd6f417e0c2177eeeef4ce5296c0e084a44f1512bc388e00a89e477d5d632b9e0184f1c08fbe601a7058c10cba018446c3b4933909433d80ddc6df766100881f18eec8ee6b951b4192201f0c3a6a065d59797a4a947d093d842d3c4feab8e2efbfc2289cb1c9060b68cc81f0d4a4ef48a5ddcff0d67f28fb9592a066df05f0899ed2b845411b4feeca53437ba143cde8ddb88d29f7d59bb5360688df9b213985b97cdebfd6e362b57e79ec96cb3d665d38050b13b4b643f55545ff2c97c7d5b908821ad1643698", 0xf5}], 0x2, &(0x7f0000000940)=[{0xd8, 0x84, 0xff, "74857486f5221d503de050eefec8cb327b9ee4cc2b73965b84cbd5c324948ffa09a677cab86a753281508c36c23746b2da525bedf3e954c99f70119b22bb87f19cdb78208d907498774de8e4ee5462fd94b65edd1294dd446604e79ea5f94d638d2029e290dd03042da85b3a6bacabdf4f8010ae68bace5e0bebea24bd94839c485bed273463e773d5d0b30d908609e4cfeb474f75f799011880fbb691a55f87f27790909298658845780948cdfa7897de7cb3a210468d2490a82b3174b5171d03bec451af8c6e"}, {0xc8, 0x111, 0x7, "c3bbdfacd332cba0e0c0230db769d3b3cbd242c48f45a062b5cbcdd267c5dfef8a0853b2629da3261d70027579415049adada6e58bc1d5fb93d624bb0b90680fe66a402dab6839438b20c0ed8c348164290b032d8612208fba73f9546e3a5c204302897c0c5b0217551ad099f53b2b291b00831d39487b196165b7c73f69e0d7811403a5cea7fd092843e27d97c03e2d302ba23114bd669fda31879e15f75ca2f3a981e571e6265125de4e02675b48569cb9"}, {0xb8, 0x0, 0x7, "c9b5fa8a364fbc7acb23c7f87920c8204dbf98e477898fccd35bc59f1905ed772164c0a162cf529c4c99eace082d9d82d63eb517bc43931871461643a996f420df4b325f96dfe45eeaf77512c95273dc0537312b37f1f72e968c15ba60a3e8bfbf806fde1b985333983334e907929bbda8e7edda841da9b991678e2cc5f02848b694913e1300f02286cf8ebdd84c634eb2e12b1d45edf220c8cda2bffc07fe80c470"}], 0x258}, 0xc054) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x18) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x2980, 0x6, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0xf}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.905098817s ago: executing program 3 (id=1629): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x11, &(0x7f00000002c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000380)='syzkaller\x00', 0xd8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xa, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, r0, 0x1], &(0x7f0000000700)=[{0x1, 0x3, 0x3, 0x1}, {0x2, 0x5, 0xe, 0x2}, {0x2, 0x5, 0xb}, {0x5, 0x1, 0x9, 0x3}, {0x3, 0x1, 0x4}, {0x5, 0x5, 0x10, 0xb}, {0x4, 0x2, 0x10, 0x2}], 0x10, 0xfffffff9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x32, 0xcc, &(0x7f0000000240)="b96af9fbf72d8ba9c90734e1fd898cb702c3a3551c4dc8a54a069858cc2a093368bc791d25f82412c1279e3032b2f57687df", &(0x7f00000004c0)=""/204, 0x9, 0x0, 0x104e, 0x1000, &(0x7f0000003b40)="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", &(0x7f0000002b40)="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", 0xb, 0x0, 0x5}, 0x50) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x122) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) 1.03124688s ago: executing program 0 (id=1630): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x2, 0x98, 0x3, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f0000000580)=r7, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625cfeca4f2bf5c6c8d40f7ade5d2b5b4d9dbae36ef698b271b104b9f01c3a08a9a91a1a57e47110ec11141f044fdae6c1b5d9028923a75a21823f5858bda250f51fc5", 0x46}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 892.22857ms ago: executing program 2 (id=1631): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x0, 0x5}, {0x0, 0x3}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0xc0d9}, 0x28) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x4000000) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r0], 0x4394) 661.247447ms ago: executing program 2 (id=1632): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xb8, 0x1, 0x2, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x8}, 0x4400, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xe51}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x80000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x408a00, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x2, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x10ff, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x240003e8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01", 0x9}], 0x2}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40047438, 0x110c23003f) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90235fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1400000016000b63d2030000000000000724fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x84) 660.409262ms ago: executing program 1 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 482.519512ms ago: executing program 1 (id=1634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 336.400673ms ago: executing program 1 (id=1635): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 331.798669ms ago: executing program 3 (id=1636): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f0000000580)=r3, 0x4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB], 0x9a) 300.685865ms ago: executing program 5 (id=1637): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000500000002000000070000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1943}, 0x101020, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) socket$kcm(0xa, 0x5, 0x0) (rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$kcm(0xf, 0x3, 0x2) (async, rerun: 64) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x23, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYRES16=r2, @ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000"], 0xc4}}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010108007000fcffffff110000000800030047000000"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r0, &(0x7f0000001b00)={&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000640)="c7f9ff3930", 0x5}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r0, 0x84, 0x65, &(0x7f0000000000)=r6, 0x10) 180.037879ms ago: executing program 3 (id=1638): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 179.226401ms ago: executing program 0 (id=1639): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x2, 0x98, 0x3, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625cfeca4f2bf5c6c8d40f7ade5d2b5b4d9dbae36ef698b271b104b9f01c3a08a9a91a1a57e47110ec11141f044fdae6c1b5d9028923a75a21823f5858bda250f51fc5", 0x46}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYRES8], 0x9a) 56.58427ms ago: executing program 1 (id=1640): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 56.192146ms ago: executing program 2 (id=1641): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000f, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x80000000, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) 54.902461ms ago: executing program 3 (id=1642): r0 = socket(0xd, 0x1, 0xfb) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000000)={0xa, 0x4e21, 0x1ff, @mcast1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000040)="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", 0xff}, {&(0x7f0000000140)="a864d033c1d3e011eae4ae17ed1db52852aaa068d5f7064a318a31316b0f89dbced2d718bad7aebb97b91e7114425edd890d8a6e7f175cc8ab0365af6429e3f7812d748105e244219f94b4f6064c2fe6c3bb8b0722f4e9899e4bb2e0fe1bb2f98828786a3b84d8526a9d23048e6ca75ff6af8c10310f48968554159871f372e6c18dcede2a6a0608fdc93ca6e25738560aae4671d4014c46b778270ec89b65aba785900426b23e872ee26d0e18ecea4902482f5a90bbe473bfc5ad8d402787bb25e7c6836aad81df954e909eae252c3a0f468140cd01ab16eca60a8f78b32ba059f18f", 0xe3}, {&(0x7f0000000240)="09b8fbcbd709d10bcbb229bbf580ab5c75153e8b996f7844c461a687ec03c589d55802f2895b623e1535249f317691cfcc25a0dd9df7bc3138c6e41d982e703a8b3e6373c28c785f95e78e23512359b216b238ba6fc05598769fc0618bc3b1821ac9752c40830be6e75f0d0b701ed712b2f627bfaf9cf61503088236adf111c9e249ced7efb0377bcd51c0f4ebfe69477a079e9b1010c2b1a54e0d84a9c7758e46305968bac05c777bc5c0cb29a34dc7fcc5b30aa618223964a68e9b03ab6837c6403e2b27df9496545166366254eac86f221fc6d5a59a33713d416a2e43638da47c6da8", 0xe4}, {&(0x7f0000000340)="e2333eaee9ead5530a3c25bed8bc48e448c23baf62577c973c35a3e5b9c1b08cb20d7c76fbc1d54df457625498f1298ebe72eae50030253d00f446895948b204ce328cdce80ad627add491", 0x4b}, {&(0x7f00000003c0)="60c19dc79cca66036c80790a13e56ee600ee8f98c34b600cef370d59044538487a2923a0fb94a968739b124d9af899ad79eb64061ffd07236adc5dc348e0189a2ef865c98fc3dd3f32f2b8249ddbd6d79cb9ab3d55b3239e83e8181413d300085abfc1569c23980da6d5180212c1bd0d2553208e2e5c97f228dfd257f133bf171fea406e", 0x84}], 0x5}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x1b, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xb1d}, [@tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x7, 0x8, 0xea08}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000700)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000740)=[{0x0, 0x3, 0x8, 0xa}, {0x3, 0x4, 0x7, 0x5}, {0x3, 0x2, 0x4, 0x6}, {0x3, 0x5, 0x3, 0x1}]}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000008c0)='@+\\$[\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@cgroup=r2, r1, 0x16, 0x20, 0x0, @void, @void, @void, @value=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000dc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a40)=@updpolicy={0x308, 0x19, 0x200, 0x70bd26, 0x25dfdbfc, {{@in=@empty, @in6=@remote, 0x4e24, 0x7, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x21, r4, 0xffffffffffffffff}, {0x7, 0x3, 0x0, 0x4, 0x0, 0x800, 0x1, 0x2}, {0x0, 0x6, 0x8000000000000001, 0xec75}, 0x8000, 0x6e6bbb, 0x1, 0x1, 0x0, 0x2}, [@sec_ctx={0x43, 0x8, {0x3f, 0x8, 0x1, 0x7, 0x37, "debf75c2458a0f3ca9aa2edd689b75be0c25a6a7c5d97a2d454177f3f82b24480b13428f23aab2b3246ae8a3af7dbda48c0334adcbd26e"}}, @algo_crypt={0x137, 0x2, {{'cbc(des3_ede)\x00'}, 0x778, "a31759c1ab6970ae6f649c9e8aef340297b40872b91893f9bd47c13ceb831a13127d0c6646238f8feb837804ec7c6e7598aded5e38822dafe9dc95ca5b49e16c11cf26a78e88887664e9cbf71f9a7d48af45012743dc2333222a2df34f23710c8eb1fc02ce00da028cb231bf2dd652586a982b3c0ecae26d48b9f2e996ac792507c6b93db769a130ad55de9f68198d7190a6619c46e9b6367de559b40f4822bd9057af179705ba2a50deb4c674af1522305a160c5069257b1c061bc690b5aedc2531a445649eed2431bcf5e5b3716df377d492826b6e5e12a7837ecbaf007de5a3d9123067df30d53583313c03df4e"}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd25, 0x70bd29, 0x70bd26, 0x70bd26, 0x1, [0x387, 0x7]}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@local, 0x0, 0x2}}, @algo_auth={0x7b, 0x1, {{'mcryptd(streebog512)\x00'}, 0x198, "61fd08d70f2f31c8fb0344d707e2ff2b4b7227e4f5132669d18150fd632d65b4890dbdc0a803aa7076bf75946f964cf845c97a"}}, @tfcpad={0x8}]}, 0x308}}, 0x20000000) socket$kcm(0x29, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e00), 0x400000, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000e40), 0x4) sendmsg$key(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x2, 0xf, 0x3, 0x7, 0x9, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@local, @in6=@private1, 0x21, 0x4, 0x10}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd28}]}, 0x48}}, 0x24004000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x2614e225, 0x0, 0xffffffffffffffff, 0x5, '\x00', r4, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x4, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r4, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001480)=@o_path={&(0x7f0000001440)='.\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_lsm={0x1d, 0x12, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x51c7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0x9d, &(0x7f0000001100)=""/157, 0x80000, 0x5d, '\x00', r4, 0x1b, r7, 0x8, &(0x7f0000001200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0xa, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000014c0)=[r8, r9, r10, r11, r12], &(0x7f0000001500)=[{0x4, 0x2, 0x1, 0x7}, {0x0, 0x4, 0x3, 0x2}, {0x3, 0x3, 0x10, 0x4}, {0x3, 0x1, 0x10, 0xc}, {0x0, 0x1, 0x9, 0x3}, {0x3, 0x4, 0x10}, {0x1, 0x2, 0x7}, {0x5, 0x3, 0x7, 0x4}], 0x10, 0x4c1d}, 0x94) r13 = syz_clone(0x4200000, &(0x7f00000016c0)="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", 0xfa, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)="2b427ce4c3697dd4b2bb5a147e5930128b1bfa182402251d90280bf4103f5539ef1e925c15dadb6b8345052dbebbd9279e69a8db6ac0a6356e0cd5abdf58cb5bb03517f6ed286f8975d7d8738b9e1d3cf0884a58c5b03f054945f74f5c574893569924c2d60e5c2eb6ddb24b985d5a2d4c3cdc67187bb171430fc79fbe3ae35788e96eb6fdeed6678397870839460e9571d8206f0c0afca64fab0dbad171d7e2c4a2c5adea2f86950be78bae22d3f5933dce4c5aaaa296df34214621604257fa1899083a") r14 = perf_event_open(&(0x7f0000001640)={0x1, 0x80, 0x8, 0x4, 0x7f, 0x2, 0x0, 0x7, 0x180a0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xf, 0xfffffffeffffffff}, 0x8000, 0xfffffffffffffff7, 0x8cd, 0x0, 0x3, 0x867, 0x5, 0x0, 0x4bec, 0x0, 0xffffffffffffff76}, r13, 0xc, r12, 0x4) sendmsg$inet(r5, &(0x7f0000001c00)={&(0x7f0000001940)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001980)="63aa86ca86da16804e66dc04854ca177b855c26a0ede3059cd62fecc3471e665fdfa8bd3fe02e09ff799f800c2e0f3626f519275660d3a266860a749a3ce69125e915305b7520cb982fbd00f0ccba34cd5704ed45699ee4d02bd0ac2d7301cd0aedd4cf59bfbc233de03c4bc2d9cc58439291ba8e5c687487219155bb79aeabfde52475e397f44cb563ceef49cc6e02025db626d8936cbc2fd1381b70e1b", 0x9e}, {&(0x7f0000001a40)="02578260dfa7a8e8009682a27e0398391b225c091bc64371a2728683", 0x1c}, {&(0x7f0000001a80)="70f71c278dddc61b9a679a3e5bc8c2de7bc809659b7c2adb74b4cfa82a248d1855d01b977f88de828bad86723e32c80e0b2e3e6b89bac512924cbefd307289c6b158f7a336", 0x45}], 0x3, &(0x7f0000001b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x9a, 0x1, 0x0, [{@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7}, {@broadcast, 0x3}, {@rand_addr=0x64010101, 0x7}, {@local, 0x6}, {@rand_addr=0x64010100, 0x7}]}, @ssrr={0x89, 0x7, 0x6f, [@dev={0xac, 0x14, 0x14, 0x10}]}]}}}], 0xb0}, 0x400c0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x14, 0x4, 0x1, 0xc1517981619f0642, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000080) r15 = socket(0x8, 0x3, 0x7) sendmsg$IPSET_CMD_RENAME(r15, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20010500}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x20, 0x5, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={r1, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001e40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001e80)=[0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0], 0x0, 0xb0, &(0x7f0000001f00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001f40), &(0x7f0000001f80), 0x8, 0x89, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10) r16 = perf_event_open(&(0x7f00000021c0)={0x2, 0x80, 0xb, 0x58, 0x9, 0xa, 0x0, 0x9d1, 0x801, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x400}, 0x21, 0xb, 0xa6, 0x4, 0x8, 0x8, 0x1ff, 0x0, 0x8, 0x0, 0x43}, r13, 0xc, r14, 0xb) perf_event_open(&(0x7f0000002140)={0x4, 0x80, 0x7, 0xc8, 0x2, 0x5, 0x0, 0x3, 0x10210, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0xe}, 0xa800, 0x7ff, 0x4, 0x9, 0x4, 0xfffffff5, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffe}, r13, 0x2, r16, 0x0) 0s ago: executing program 1 (id=1643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) kernel console output (not intermixed with test programs): send_to_monitor+0xe2/0x570 [ 226.822888][ T5859] hci_rx_work+0x46a/0xe80 [ 226.822922][ T5859] ? process_scheduled_works+0x9ef/0x17b0 [ 226.822945][ T5859] process_scheduled_works+0xade/0x17b0 [ 226.822996][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.823040][ T5859] worker_thread+0x8a0/0xda0 [ 226.823088][ T5859] kthread+0x711/0x8a0 [ 226.823115][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 226.823133][ T5859] ? __pfx_kthread+0x10/0x10 [ 226.823156][ T5859] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.823179][ T5859] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.823192][ T5859] ? __pfx_kthread+0x10/0x10 [ 226.823219][ T5859] ret_from_fork+0x436/0x7d0 [ 226.823244][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 226.823272][ T5859] ? __switch_to_asm+0x39/0x70 [ 226.823295][ T5859] ? __switch_to_asm+0x33/0x70 [ 226.823317][ T5859] ? __pfx_kthread+0x10/0x10 [ 226.823346][ T5859] ret_from_fork_asm+0x1a/0x30 [ 226.823386][ T5859] [ 226.823486][ T5859] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 227.104191][ T5859] Bluetooth: hci0: failed to register connection device [ 227.865774][ T5859] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 228.536556][ T8516] netlink: 'syz.0.772': attribute type 27 has an invalid length. [ 228.561775][ T8516] netlink: 'syz.0.772': attribute type 10 has an invalid length. [ 228.675999][ T8516] team0: Port device netdevsim0 added [ 228.880905][ T5859] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 228.914273][ T8532] netlink: 'syz.2.778': attribute type 5 has an invalid length. [ 229.089884][ T8543] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 229.178237][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 229.342644][ T8550] netlink: 'syz.1.780': attribute type 6 has an invalid length. [ 229.419930][ T8550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.780'. [ 229.546203][ T8541] lo: entered allmulticast mode [ 229.721127][ T8551] lo: entered promiscuous mode [ 229.803859][ T8551] lo: left allmulticast mode [ 230.026642][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 230.770646][ T8581] netlink: 'syz.0.791': attribute type 5 has an invalid length. [ 231.513785][ T5859] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 231.613632][ T5159] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 231.632128][ T5159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 231.642898][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 231.642923][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.642935][ T5159] Workqueue: hci0 hci_rx_work [ 231.642965][ T5159] Call Trace: [ 231.642976][ T5159] [ 231.642986][ T5159] dump_stack_lvl+0x189/0x250 [ 231.643035][ T5159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.643067][ T5159] ? __pfx__printk+0x10/0x10 [ 231.643125][ T5159] ? kernfs_path_from_node+0x250/0x290 [ 231.643143][ T5159] ? kernfs_path_from_node+0x2f/0x290 [ 231.643187][ T5159] sysfs_create_dir_ns+0x259/0x280 [ 231.643228][ T5159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 231.643267][ T5159] ? do_raw_spin_unlock+0x122/0x240 [ 231.643320][ T5159] kobject_add_internal+0x59f/0xb40 [ 231.643389][ T5159] kobject_add+0x155/0x220 [ 231.643446][ T5159] ? __pfx_kobject_add+0x10/0x10 [ 231.643482][ T5159] ? _raw_spin_unlock+0x28/0x50 [ 231.643532][ T5159] ? get_device_parent+0x366/0x3a0 [ 231.643588][ T5159] device_add+0x408/0xb50 [ 231.643642][ T5159] hci_conn_add_sysfs+0xd5/0x1e0 [ 231.643693][ T5159] le_conn_complete_evt+0xf39/0x1500 [ 231.643782][ T5159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 231.643811][ T5159] ? __pfx_bt_warn+0x10/0x10 [ 231.643828][ T5159] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 231.643906][ T5159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 231.643925][ T5159] ? skb_pull_data+0xfb/0x200 [ 231.643982][ T5159] hci_le_conn_complete_evt+0x187/0x450 [ 231.644047][ T5159] hci_event_packet+0x78f/0x1200 [ 231.644098][ T5159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 231.644140][ T5159] ? __pfx_hci_event_packet+0x10/0x10 [ 231.644185][ T5159] ? kcov_remote_start+0x4d3/0x7f0 [ 231.644208][ T5159] ? warn_bogus_irq_restore+0x20/0x40 [ 231.644247][ T5159] ? hci_send_to_monitor+0xe2/0x570 [ 231.644299][ T5159] hci_rx_work+0x46a/0xe80 [ 231.644373][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 231.644412][ T5159] process_scheduled_works+0xade/0x17b0 [ 231.644585][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.644695][ T5159] worker_thread+0x8a0/0xda0 [ 231.644738][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 231.644809][ T5159] ? __kthread_parkme+0x7b/0x200 [ 231.644886][ T5159] kthread+0x711/0x8a0 [ 231.644935][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 231.644961][ T5159] ? __pfx_kthread+0x10/0x10 [ 231.645004][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.645035][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.645049][ T5159] ? __pfx_kthread+0x10/0x10 [ 231.645089][ T5159] ret_from_fork+0x436/0x7d0 [ 231.645131][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 231.645191][ T5159] ? __switch_to_asm+0x39/0x70 [ 231.645213][ T5159] ? __switch_to_asm+0x33/0x70 [ 231.645234][ T5159] ? __pfx_kthread+0x10/0x10 [ 231.645274][ T5159] ret_from_fork_asm+0x1a/0x30 [ 231.645378][ T5159] [ 231.645444][ T5159] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 231.952544][ T5159] Bluetooth: hci0: failed to register connection device [ 232.133859][ T8595] team0: Port device team_slave_0 removed [ 232.148748][ T8595] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 232.625801][ T5159] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 232.745822][ T8602] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 234.038197][ T5159] Bluetooth: hci0: command 0x0406 tx timeout [ 235.377097][ T8625] netlink: 'syz.1.805': attribute type 5 has an invalid length. [ 235.587371][ T5159] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 235.616315][ T8636] netlink: 'syz.0.811': attribute type 27 has an invalid length. [ 235.635230][ T5159] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 235.643739][ T5159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 235.654439][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 235.654463][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.654475][ T5159] Workqueue: hci1 hci_rx_work [ 235.654502][ T5159] Call Trace: [ 235.654513][ T5159] [ 235.654523][ T5159] dump_stack_lvl+0x189/0x250 [ 235.654569][ T5159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.654601][ T5159] ? __pfx__printk+0x10/0x10 [ 235.654657][ T5159] ? kernfs_path_from_node+0x250/0x290 [ 235.654675][ T5159] ? kernfs_path_from_node+0x2f/0x290 [ 235.654719][ T5159] sysfs_create_dir_ns+0x259/0x280 [ 235.654761][ T5159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 235.654796][ T5159] ? do_raw_spin_unlock+0x122/0x240 [ 235.654851][ T5159] kobject_add_internal+0x59f/0xb40 [ 235.654920][ T5159] kobject_add+0x155/0x220 [ 235.654978][ T5159] ? __pfx_kobject_add+0x10/0x10 [ 235.655020][ T5159] ? _raw_spin_unlock+0x28/0x50 [ 235.655078][ T5159] ? get_device_parent+0x366/0x3a0 [ 235.655129][ T5159] device_add+0x408/0xb50 [ 235.655183][ T5159] hci_conn_add_sysfs+0xd5/0x1e0 [ 235.655235][ T5159] le_conn_complete_evt+0xf39/0x1500 [ 235.655325][ T5159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 235.655353][ T5159] ? __pfx_bt_warn+0x10/0x10 [ 235.655369][ T5159] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 235.655426][ T5159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.655443][ T5159] ? skb_pull_data+0xfb/0x200 [ 235.655500][ T5159] hci_le_conn_complete_evt+0x187/0x450 [ 235.655565][ T5159] hci_event_packet+0x78f/0x1200 [ 235.655615][ T5159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 235.655659][ T5159] ? __pfx_hci_event_packet+0x10/0x10 [ 235.655705][ T5159] ? kcov_remote_start+0x4d3/0x7f0 [ 235.655729][ T5159] ? warn_bogus_irq_restore+0x20/0x40 [ 235.655769][ T5159] ? hci_send_to_monitor+0xe2/0x570 [ 235.655814][ T5159] hci_rx_work+0x46a/0xe80 [ 235.655888][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 235.655925][ T5159] process_scheduled_works+0xade/0x17b0 [ 235.656096][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.656206][ T5159] worker_thread+0x8a0/0xda0 [ 235.656250][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 235.656317][ T5159] ? __kthread_parkme+0x7b/0x200 [ 235.656394][ T5159] kthread+0x711/0x8a0 [ 235.656443][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 235.656469][ T5159] ? __pfx_kthread+0x10/0x10 [ 235.656512][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.656542][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.656557][ T5159] ? __pfx_kthread+0x10/0x10 [ 235.656596][ T5159] ret_from_fork+0x436/0x7d0 [ 235.656640][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 235.656700][ T5159] ? __switch_to_asm+0x39/0x70 [ 235.656722][ T5159] ? __switch_to_asm+0x33/0x70 [ 235.656743][ T5159] ? __pfx_kthread+0x10/0x10 [ 235.656783][ T5159] ret_from_fork_asm+0x1a/0x30 [ 235.656888][ T5159] [ 235.656952][ T5159] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 235.708426][ T8636] netlink: 'syz.0.811': attribute type 4 has an invalid length. [ 235.709536][ T5159] Bluetooth: hci1: failed to register connection device [ 235.780113][ T8635] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.809'. [ 235.791664][ T8636] netlink: 152 bytes leftover after parsing attributes in process `syz.0.811'. [ 236.290159][ T8647] netlink: 44 bytes leftover after parsing attributes in process `syz.5.812'. [ 236.450441][ T8653] lo speed is unknown, defaulting to 1000 [ 236.475452][ T8653] lo speed is unknown, defaulting to 1000 [ 236.502013][ T8653] lo speed is unknown, defaulting to 1000 [ 236.627538][ T5859] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 236.892759][ T8664] netlink: 'syz.0.820': attribute type 5 has an invalid length. [ 236.994453][ T5859] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 237.011555][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 237.048266][ T8670] netlink: 'syz.3.824': attribute type 10 has an invalid length. [ 237.670980][ T8681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.828'. [ 237.747804][ T8686] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 237.799234][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 238.515619][ T8653] infiniband syz2: set active [ 238.523073][ T5962] lo speed is unknown, defaulting to 1000 [ 238.548860][ T8653] infiniband syz2: added lo [ 238.554351][ T8653] syz2: rxe_create_cq: returned err = -12 [ 238.568218][ T8653] infiniband syz2: Couldn't create ib_mad CQ [ 238.584177][ T8653] infiniband syz2: Couldn't open port 1 [ 238.674146][ T8653] RDS/IB: syz2: added [ 238.688254][ T8653] smc: adding ib device syz2 with port count 1 [ 238.751057][ T8653] smc: ib device syz2 port 1 has pnetid [ 238.757453][ T10] lo speed is unknown, defaulting to 1000 [ 238.773927][ T8653] lo speed is unknown, defaulting to 1000 [ 239.218643][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 239.288698][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 239.337003][ T8709] FAULT_INJECTION: forcing a failure. [ 239.337003][ T8709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.352301][ T8709] CPU: 1 UID: 0 PID: 8709 Comm: syz.5.833 Not tainted syzkaller #0 PREEMPT(full) [ 239.352325][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.352335][ T8709] Call Trace: [ 239.352342][ T8709] [ 239.352349][ T8709] dump_stack_lvl+0x189/0x250 [ 239.352375][ T8709] ? irqentry_exit+0x74/0x90 [ 239.352394][ T8709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.352434][ T8709] should_fail_ex+0x414/0x560 [ 239.352463][ T8709] _copy_from_iter+0x1de/0x1790 [ 239.352488][ T8709] ? rcu_is_watching+0x15/0xb0 [ 239.352510][ T8709] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 239.352534][ T8709] ? __pfx__copy_from_iter+0x10/0x10 [ 239.352553][ T8709] ? __build_skb_around+0x257/0x3e0 [ 239.352580][ T8709] ? netlink_sendmsg+0x642/0xb30 [ 239.352596][ T8709] ? skb_put+0x11b/0x210 [ 239.352618][ T8709] netlink_sendmsg+0x6b2/0xb30 [ 239.352645][ T8709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.352666][ T8709] ? aa_sock_msg_perm+0xf1/0x1d0 [ 239.352692][ T8709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.352708][ T8709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.352725][ T8709] __sock_sendmsg+0x219/0x270 [ 239.352753][ T8709] ____sys_sendmsg+0x505/0x830 [ 239.352779][ T8709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.352808][ T8709] ? import_iovec+0x74/0xa0 [ 239.352831][ T8709] ___sys_sendmsg+0x21f/0x2a0 [ 239.352853][ T8709] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.352910][ T8709] ? __fget_files+0x2a/0x420 [ 239.352932][ T8709] ? __fget_files+0x3a0/0x420 [ 239.352978][ T8709] __x64_sys_sendmsg+0x19b/0x260 [ 239.353001][ T8709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.353046][ T8709] do_syscall_64+0xfa/0x3b0 [ 239.353065][ T8709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.353081][ T8709] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 239.353097][ T8709] ? clear_bhb_loop+0x60/0xb0 [ 239.353118][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.353134][ T8709] RIP: 0033:0x7f8ac318eec9 [ 239.353149][ T8709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.353164][ T8709] RSP: 002b:00007f8ac3f93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.353182][ T8709] RAX: ffffffffffffffda RBX: 00007f8ac33e5fa0 RCX: 00007f8ac318eec9 [ 239.353194][ T8709] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000c [ 239.353205][ T8709] RBP: 00007f8ac3f93090 R08: 0000000000000000 R09: 0000000000000000 [ 239.353215][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.353225][ T8709] R13: 00007f8ac33e6038 R14: 00007f8ac33e5fa0 R15: 00007ffda0e9d318 [ 239.353253][ T8709] [ 239.897059][ T8653] lo speed is unknown, defaulting to 1000 [ 240.129061][ T5859] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 240.157200][ T8721] netlink: 'syz.3.836': attribute type 5 has an invalid length. [ 240.785322][ T8653] lo speed is unknown, defaulting to 1000 [ 241.414143][ T8653] lo speed is unknown, defaulting to 1000 [ 241.678213][ T5859] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 241.686402][ T5859] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 241.696049][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 241.696075][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.696087][ T5859] Workqueue: hci1 hci_rx_work [ 241.696116][ T5859] Call Trace: [ 241.696123][ T5859] [ 241.696131][ T5859] dump_stack_lvl+0x189/0x250 [ 241.696160][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.696183][ T5859] ? __pfx__printk+0x10/0x10 [ 241.696208][ T5859] ? kernfs_path_from_node+0x250/0x290 [ 241.696227][ T5859] ? kernfs_path_from_node+0x2f/0x290 [ 241.696250][ T5859] sysfs_create_dir_ns+0x259/0x280 [ 241.696271][ T5859] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 241.696292][ T5859] ? do_raw_spin_unlock+0x122/0x240 [ 241.696321][ T5859] kobject_add_internal+0x59f/0xb40 [ 241.696352][ T5859] kobject_add+0x155/0x220 [ 241.696379][ T5859] ? __pfx_kobject_add+0x10/0x10 [ 241.696401][ T5859] ? _raw_spin_unlock+0x28/0x50 [ 241.696430][ T5859] ? get_device_parent+0x366/0x3a0 [ 241.696455][ T5859] device_add+0x408/0xb50 [ 241.696481][ T5859] hci_conn_add_sysfs+0xd5/0x1e0 [ 241.696507][ T5859] le_conn_complete_evt+0xf39/0x1500 [ 241.696541][ T5859] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 241.696559][ T5859] ? __pfx_bt_warn+0x10/0x10 [ 241.696575][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 241.696601][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.696618][ T5859] ? skb_pull_data+0xfb/0x200 [ 241.696646][ T5859] hci_le_conn_complete_evt+0x187/0x450 [ 241.696673][ T5859] hci_event_packet+0x78f/0x1200 [ 241.696701][ T5859] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 241.696722][ T5859] ? __pfx_hci_event_packet+0x10/0x10 [ 241.696748][ T5859] ? kcov_remote_start+0x4d3/0x7f0 [ 241.696766][ T5859] ? warn_bogus_irq_restore+0x20/0x40 [ 241.696787][ T5859] ? hci_send_to_monitor+0xe2/0x570 [ 241.696817][ T5859] hci_rx_work+0x46a/0xe80 [ 241.696851][ T5859] ? process_scheduled_works+0x9ef/0x17b0 [ 241.696875][ T5859] process_scheduled_works+0xade/0x17b0 [ 241.696927][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 241.696966][ T5859] worker_thread+0x8a0/0xda0 [ 241.697015][ T5859] kthread+0x711/0x8a0 [ 241.697043][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 241.697062][ T5859] ? __pfx_kthread+0x10/0x10 [ 241.697088][ T5859] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.697112][ T5859] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.697127][ T5859] ? __pfx_kthread+0x10/0x10 [ 241.697152][ T5859] ret_from_fork+0x436/0x7d0 [ 241.697175][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 241.697202][ T5859] ? __switch_to_asm+0x39/0x70 [ 241.697224][ T5859] ? __switch_to_asm+0x33/0x70 [ 241.697246][ T5859] ? __pfx_kthread+0x10/0x10 [ 241.697270][ T5859] ret_from_fork_asm+0x1a/0x30 [ 241.697311][ T5859] [ 241.697338][ T5859] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 242.006793][ T5859] Bluetooth: hci1: failed to register connection device [ 242.454559][ T8653] lo speed is unknown, defaulting to 1000 [ 242.920984][ T8733] netlink: 'syz.1.841': attribute type 9 has an invalid length. [ 242.930571][ T8733] netlink: 'syz.1.841': attribute type 8 has an invalid length. [ 242.938286][ T8733] netlink: 143452 bytes leftover after parsing attributes in process `syz.1.841'. [ 243.263976][ T8741] netlink: 44 bytes leftover after parsing attributes in process `syz.5.842'. [ 243.292735][ T8742] openvswitch: netlink: IP tunnel TTL not specified. [ 243.505682][ T8714] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 243.524249][ T8714] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 243.534174][ T8714] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 243.793689][ T8750] FAULT_INJECTION: forcing a failure. [ 243.793689][ T8750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.816559][ T8750] CPU: 1 UID: 0 PID: 8750 Comm: syz.0.846 Not tainted syzkaller #0 PREEMPT(full) [ 243.816585][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.816596][ T8750] Call Trace: [ 243.816604][ T8750] [ 243.816612][ T8750] dump_stack_lvl+0x189/0x250 [ 243.816638][ T8750] ? __pfx____ratelimit+0x10/0x10 [ 243.816656][ T8750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.816677][ T8750] ? __pfx__printk+0x10/0x10 [ 243.816693][ T8750] ? __might_fault+0xb0/0x130 [ 243.816732][ T8750] should_fail_ex+0x414/0x560 [ 243.816760][ T8750] _copy_from_user+0x2d/0xb0 [ 243.816781][ T8750] smc_setsockopt+0x3b8/0xab0 [ 243.816805][ T8750] ? __pfx_smc_setsockopt+0x10/0x10 [ 243.816819][ T8750] ? aa_sock_opt_perm+0xff/0x1b0 [ 243.816846][ T8750] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 243.816862][ T8750] ? __pfx_smc_setsockopt+0x10/0x10 [ 243.816881][ T8750] do_sock_setsockopt+0x179/0x1b0 [ 243.816906][ T8750] __x64_sys_setsockopt+0x13f/0x1b0 [ 243.816931][ T8750] do_syscall_64+0xfa/0x3b0 [ 243.816950][ T8750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.816965][ T8750] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.816981][ T8750] ? clear_bhb_loop+0x60/0xb0 [ 243.817002][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.817018][ T8750] RIP: 0033:0x7f19ba78eec9 [ 243.817033][ T8750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.817048][ T8750] RSP: 002b:00007f19bb5ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 243.817067][ T8750] RAX: ffffffffffffffda RBX: 00007f19ba9e6090 RCX: 00007f19ba78eec9 [ 243.817079][ T8750] RDX: 0000000000000022 RSI: 0000000000000006 RDI: 0000000000000008 [ 243.817089][ T8750] RBP: 00007f19bb5ac090 R08: 0000000000000004 R09: 0000000000000000 [ 243.817099][ T8750] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 243.817110][ T8750] R13: 00007f19ba9e6128 R14: 00007f19ba9e6090 R15: 00007ffe7f5be608 [ 243.817138][ T8750] [ 244.068300][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 244.530472][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 244.555944][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 244.585276][ T8760] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 244.693406][ T8760] bond0: (slave 5@ÿ): Releasing backup interface [ 244.703742][ T8766] rdma_rxe: rxe_newlink: failed to add lo [ 245.070751][ T5859] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 245.399455][ T8761] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 245.541454][ T8789] netlink: 'syz.3.857': attribute type 5 has an invalid length. [ 245.641333][ T8793] syz2: rxe_newlink: already configured on lo [ 245.784717][ T8802] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.862'. [ 246.198376][ T5859] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 246.453569][ T8828] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 246.478297][ T5859] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 246.491675][ T8829] netlink: 'syz.5.873': attribute type 5 has an invalid length. [ 246.852419][ T8836] netlink: 156 bytes leftover after parsing attributes in process `syz.5.877'. [ 247.550875][ T5859] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 248.378476][ T5859] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 248.877926][ T8876] Unknown options in mask b7f2 [ 248.947217][ T8885] FAULT_INJECTION: forcing a failure. [ 248.947217][ T8885] name failslab, interval 1, probability 0, space 0, times 0 [ 248.961074][ T8885] CPU: 1 UID: 0 PID: 8885 Comm: syz.1.893 Not tainted syzkaller #0 PREEMPT(full) [ 248.961099][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.961109][ T8885] Call Trace: [ 248.961116][ T8885] [ 248.961124][ T8885] dump_stack_lvl+0x189/0x250 [ 248.961151][ T8885] ? __pfx____ratelimit+0x10/0x10 [ 248.961170][ T8885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.961191][ T8885] ? __pfx__printk+0x10/0x10 [ 248.961215][ T8885] ? __pfx___might_resched+0x10/0x10 [ 248.961239][ T8885] should_fail_ex+0x414/0x560 [ 248.961274][ T8885] should_failslab+0xa8/0x100 [ 248.961300][ T8885] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 248.961322][ T8885] ? __alloc_skb+0x112/0x2d0 [ 248.961337][ T8885] ? kasan_save_track+0x3e/0x80 [ 248.961362][ T8885] __alloc_skb+0x112/0x2d0 [ 248.961386][ T8885] __ip_append_data+0x2dae/0x40c0 [ 248.961436][ T8885] ? __pfx_raw_getfrag+0x10/0x10 [ 248.961486][ T8885] ? __pfx___ip_append_data+0x10/0x10 [ 248.961506][ T8885] ? ip_setup_cork+0x322/0x9a0 [ 248.961534][ T8885] ? ip_setup_cork+0x577/0x9a0 [ 248.961560][ T8885] ip_append_data+0x10e/0x190 [ 248.961587][ T8885] ? __pfx_raw_getfrag+0x10/0x10 [ 248.961611][ T8885] raw_sendmsg+0x13d8/0x18b0 [ 248.961657][ T8885] ? __pfx_raw_sendmsg+0x10/0x10 [ 248.961704][ T8885] ? aa_sk_perm+0x81e/0x950 [ 248.961735][ T8885] ? __pfx_aa_sk_perm+0x10/0x10 [ 248.961755][ T8885] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 248.961785][ T8885] ? sock_rps_record_flow+0x19/0x410 [ 248.961813][ T8885] ? inet_sendmsg+0x2f4/0x370 [ 248.961834][ T8885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.961856][ T8885] __sock_sendmsg+0x19c/0x270 [ 248.961886][ T8885] ____sys_sendmsg+0x505/0x830 [ 248.961914][ T8885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.961947][ T8885] ? import_iovec+0x74/0xa0 [ 248.961973][ T8885] ___sys_sendmsg+0x21f/0x2a0 [ 248.961997][ T8885] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.962046][ T8885] ? __fget_files+0x2a/0x420 [ 248.962084][ T8885] ? __fget_files+0x2a/0x420 [ 248.962105][ T8885] ? __fget_files+0x3a0/0x420 [ 248.962139][ T8885] __x64_sys_sendmsg+0x19b/0x260 [ 248.962163][ T8885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.962197][ T8885] ? __pfx_ksys_write+0x10/0x10 [ 248.962214][ T8885] ? rcu_is_watching+0x15/0xb0 [ 248.962241][ T8885] ? do_syscall_64+0xbe/0x3b0 [ 248.962270][ T8885] do_syscall_64+0xfa/0x3b0 [ 248.962286][ T8885] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.962303][ T8885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.962320][ T8885] ? clear_bhb_loop+0x60/0xb0 [ 248.962342][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.962359][ T8885] RIP: 0033:0x7f2ec278eec9 [ 248.962375][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.962390][ T8885] RSP: 002b:00007f2ec35c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.962408][ T8885] RAX: ffffffffffffffda RBX: 00007f2ec29e5fa0 RCX: 00007f2ec278eec9 [ 248.962420][ T8885] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 248.962430][ T8885] RBP: 00007f2ec35c1090 R08: 0000000000000000 R09: 0000000000000000 [ 248.962441][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.962450][ T8885] R13: 00007f2ec29e6038 R14: 00007f2ec29e5fa0 R15: 00007ffd7b2db128 [ 248.962482][ T8885] [ 250.845235][ T8893] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 251.007334][ T5859] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 251.070945][ T8900] FAULT_INJECTION: forcing a failure. [ 251.070945][ T8900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.108547][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: syz.1.896 Not tainted syzkaller #0 PREEMPT(full) [ 251.108572][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.108583][ T8900] Call Trace: [ 251.108592][ T8900] [ 251.108604][ T8900] dump_stack_lvl+0x189/0x250 [ 251.108638][ T8900] ? __pfx____ratelimit+0x10/0x10 [ 251.108664][ T8900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.108693][ T8900] ? __pfx__printk+0x10/0x10 [ 251.108734][ T8900] ? __might_fault+0xb0/0x130 [ 251.108786][ T8900] should_fail_ex+0x414/0x560 [ 251.108840][ T8900] _copy_from_user+0x2d/0xb0 [ 251.108870][ T8900] get_user_ifreq+0x6c/0x180 [ 251.108924][ T8900] sock_ioctl+0x6dd/0x790 [ 251.108966][ T8900] ? __pfx_sock_ioctl+0x10/0x10 [ 251.109007][ T8900] ? __fget_files+0x3a0/0x420 [ 251.109032][ T8900] ? __fget_files+0x2a/0x420 [ 251.109075][ T8900] ? bpf_lsm_file_ioctl+0x9/0x20 [ 251.109102][ T8900] ? __pfx_sock_ioctl+0x10/0x10 [ 251.109132][ T8900] __se_sys_ioctl+0xf9/0x170 [ 251.109168][ T8900] do_syscall_64+0xfa/0x3b0 [ 251.109186][ T8900] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.109210][ T8900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.109227][ T8900] ? clear_bhb_loop+0x60/0xb0 [ 251.109264][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.109284][ T8900] RIP: 0033:0x7f2ec278eec9 [ 251.109305][ T8900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.109320][ T8900] RSP: 002b:00007f2ec35c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.109338][ T8900] RAX: ffffffffffffffda RBX: 00007f2ec29e5fa0 RCX: 00007f2ec278eec9 [ 251.109351][ T8900] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000a [ 251.109362][ T8900] RBP: 00007f2ec35c1090 R08: 0000000000000000 R09: 0000000000000000 [ 251.109373][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.109383][ T8900] R13: 00007f2ec29e6038 R14: 00007f2ec29e5fa0 R15: 00007ffd7b2db128 [ 251.109468][ T8900] [ 251.378200][ T8905] delete_channel: no stack [ 251.416397][ T8911] netlink: 'syz.0.902': attribute type 21 has an invalid length. [ 251.450500][ T8911] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.902'. [ 251.530621][ T5859] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 251.786478][ T8924] rdma_rxe: rxe_newlink: failed to add lo [ 252.053204][ T5859] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 252.526818][ T8951] delete_channel: no stack [ 252.646844][ T8954] sit0: entered allmulticast mode [ 252.817669][ T8955] sit0: entered promiscuous mode [ 252.966176][ T8962] netlink: 32 bytes leftover after parsing attributes in process `syz.5.919'. [ 254.327724][ T5859] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 254.695557][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'. [ 254.851030][ T8990] delete_channel: no stack [ 254.858923][ T8988] delete_channel: no stack [ 254.945952][ T8995] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 254.964273][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.933'. [ 255.550120][ T9013] FAULT_INJECTION: forcing a failure. [ 255.550120][ T9013] name failslab, interval 1, probability 0, space 0, times 0 [ 255.596539][ T9013] CPU: 1 UID: 0 PID: 9013 Comm: syz.5.935 Not tainted syzkaller #0 PREEMPT(full) [ 255.596560][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.596568][ T9013] Call Trace: [ 255.596574][ T9013] [ 255.596588][ T9013] dump_stack_lvl+0x189/0x250 [ 255.596610][ T9013] ? __pfx____ratelimit+0x10/0x10 [ 255.596624][ T9013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.596639][ T9013] ? __pfx__printk+0x10/0x10 [ 255.596661][ T9013] should_fail_ex+0x414/0x560 [ 255.596683][ T9013] should_failslab+0xa8/0x100 [ 255.596704][ T9013] __kmalloc_cache_noprof+0x70/0x3d0 [ 255.596722][ T9013] ? sctp_add_bind_addr+0x8c/0x370 [ 255.596742][ T9013] sctp_add_bind_addr+0x8c/0x370 [ 255.596763][ T9013] sctp_copy_local_addr_list+0x30b/0x4e0 [ 255.596791][ T9013] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 255.596814][ T9013] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 255.596842][ T9013] ? sctp_v4_is_any+0x35/0x60 [ 255.596858][ T9013] ? sctp_copy_one_addr+0x93/0x360 [ 255.596873][ T9013] sctp_bind_addr_copy+0xb3/0x3c0 [ 255.596888][ T9013] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 255.596913][ T9013] sctp_connect_new_asoc+0x2e0/0x690 [ 255.596936][ T9013] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 255.596957][ T9013] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 255.596977][ T9013] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 255.596994][ T9013] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 255.597013][ T9013] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 255.597030][ T9013] ? security_sctp_bind_connect+0x7e/0x2e0 [ 255.597053][ T9013] sctp_sendmsg+0x155c/0x2810 [ 255.597086][ T9013] ? __pfx_sctp_sendmsg+0x10/0x10 [ 255.597107][ T9013] ? aa_sk_perm+0x81e/0x950 [ 255.597133][ T9013] ? __pfx_aa_sk_perm+0x10/0x10 [ 255.597158][ T9013] ? sock_rps_record_flow+0x19/0x410 [ 255.597185][ T9013] ? inet_sendmsg+0x2f4/0x370 [ 255.597205][ T9013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.597225][ T9013] __sock_sendmsg+0x19c/0x270 [ 255.597249][ T9013] ____sys_sendmsg+0x505/0x830 [ 255.597274][ T9013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.597301][ T9013] ? import_iovec+0x74/0xa0 [ 255.597325][ T9013] ___sys_sendmsg+0x21f/0x2a0 [ 255.597349][ T9013] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.597371][ T9013] ? perf_trace_preemptirq_template+0xa3/0x340 [ 255.597386][ T9013] ? irqentry_enter+0x3d/0x60 [ 255.597433][ T9013] ? __x64_sys_sendmsg+0x180/0x260 [ 255.597458][ T9013] __x64_sys_sendmsg+0x19b/0x260 [ 255.597481][ T9013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.597508][ T9013] ? __pfx_ksys_write+0x10/0x10 [ 255.597534][ T9013] ? do_syscall_64+0xbe/0x3b0 [ 255.597555][ T9013] do_syscall_64+0xfa/0x3b0 [ 255.597573][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.597596][ T9013] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.597612][ T9013] ? clear_bhb_loop+0x60/0xb0 [ 255.597632][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.597647][ T9013] RIP: 0033:0x7f8ac318eec9 [ 255.597663][ T9013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.597677][ T9013] RSP: 002b:00007f8ac3f72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.597695][ T9013] RAX: ffffffffffffffda RBX: 00007f8ac33e6090 RCX: 00007f8ac318eec9 [ 255.597706][ T9013] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 255.597715][ T9013] RBP: 00007f8ac3f72090 R08: 0000000000000000 R09: 0000000000000000 [ 255.597724][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.597732][ T9013] R13: 00007f8ac33e6128 R14: 00007f8ac33e6090 R15: 00007ffda0e9d318 [ 255.597760][ T9013] [ 255.956626][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.967107][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.233191][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 256.312872][ T9038] netlink: 144 bytes leftover after parsing attributes in process `syz.5.942'. [ 256.607807][ T9047] raw_sendmsg: syz.3.948 forgot to set AF_INET. Fix it! [ 256.664877][ T9048] syz2: rxe_newlink: already configured on lo [ 256.692446][ T9043] delete_channel: no stack [ 256.911915][ T9056] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 257.390801][ T5859] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 257.473395][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.962'. [ 257.544329][ T9079] delete_channel: no stack [ 258.632231][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 258.645802][ T9095] delete_channel: no stack [ 258.747917][ T5859] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 258.777644][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.975'. [ 261.466528][ T5859] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 261.474723][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.981'. [ 261.501066][ T9127] netlink: 356 bytes leftover after parsing attributes in process `syz.3.981'. [ 261.899290][ T9119] delete_channel: no stack [ 262.682052][ T9137] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 262.931848][ T9166] netlink: 51 bytes leftover after parsing attributes in process `syz.0.990'. [ 262.942027][ T9165] rdma_rxe: rxe_newlink: failed to add lo [ 262.971167][ T5859] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 263.097922][ T9170] netlink: 'syz.3.992': attribute type 3 has an invalid length. [ 263.131044][ T9170] netlink: 163552 bytes leftover after parsing attributes in process `syz.3.992'. [ 263.144325][ T9170] netlink: 'syz.3.992': attribute type 2 has an invalid length. [ 263.348326][ T9176] C: renamed from team_slave_0 [ 263.361691][ T9176] netlink: 'syz.1.994': attribute type 1 has an invalid length. [ 263.394045][ T9176] netlink: 152 bytes leftover after parsing attributes in process `syz.1.994'. [ 263.432704][ T9176] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 263.526378][ T9185] delete_channel: no stack [ 263.534145][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.997'. [ 263.632105][ T9190] netlink: 44 bytes leftover after parsing attributes in process `syz.2.999'. [ 263.723795][ T9194] netlink: 'syz.3.1001': attribute type 22 has an invalid length. [ 263.732487][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 263.751701][ T9196] rdma_rxe: rxe_newlink: failed to add lo [ 264.021942][ T9208] FAULT_INJECTION: forcing a failure. [ 264.021942][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 264.056853][ T9209] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 264.140384][ T9208] CPU: 1 UID: 0 PID: 9208 Comm: syz.5.1005 Not tainted syzkaller #0 PREEMPT(full) [ 264.140428][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.140441][ T9208] Call Trace: [ 264.140447][ T9208] [ 264.140453][ T9208] dump_stack_lvl+0x189/0x250 [ 264.140477][ T9208] ? __pfx____ratelimit+0x10/0x10 [ 264.140492][ T9208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.140508][ T9208] ? __pfx__printk+0x10/0x10 [ 264.140529][ T9208] ? __pfx___might_resched+0x10/0x10 [ 264.140549][ T9208] should_fail_ex+0x414/0x560 [ 264.140574][ T9208] should_failslab+0xa8/0x100 [ 264.140594][ T9208] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 264.140611][ T9208] ? __alloc_skb+0x112/0x2d0 [ 264.140631][ T9208] __alloc_skb+0x112/0x2d0 [ 264.140650][ T9208] netlink_sendmsg+0x5c6/0xb30 [ 264.140676][ T9208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.140694][ T9208] ? aa_sock_msg_perm+0xf1/0x1d0 [ 264.140720][ T9208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.140732][ T9208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.140748][ T9208] __sock_sendmsg+0x219/0x270 [ 264.140771][ T9208] ____sys_sendmsg+0x505/0x830 [ 264.140793][ T9208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.140820][ T9208] ? import_iovec+0x74/0xa0 [ 264.140840][ T9208] ___sys_sendmsg+0x21f/0x2a0 [ 264.140859][ T9208] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.140899][ T9208] ? __fget_files+0x2a/0x420 [ 264.140930][ T9208] ? __fget_files+0x2a/0x420 [ 264.140945][ T9208] ? __fget_files+0x3a0/0x420 [ 264.140974][ T9208] __x64_sys_sendmsg+0x19b/0x260 [ 264.140994][ T9208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.141021][ T9208] ? __pfx_ksys_write+0x10/0x10 [ 264.141035][ T9208] ? rcu_is_watching+0x15/0xb0 [ 264.141057][ T9208] ? do_syscall_64+0xbe/0x3b0 [ 264.141075][ T9208] do_syscall_64+0xfa/0x3b0 [ 264.141087][ T9208] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.141100][ T9208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.141113][ T9208] ? clear_bhb_loop+0x60/0xb0 [ 264.141130][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.141143][ T9208] RIP: 0033:0x7f8ac318eec9 [ 264.141156][ T9208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.141167][ T9208] RSP: 002b:00007f8ac3f72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.141182][ T9208] RAX: ffffffffffffffda RBX: 00007f8ac33e6090 RCX: 00007f8ac318eec9 [ 264.141191][ T9208] RDX: 000000002400c000 RSI: 0000200000000040 RDI: 0000000000000008 [ 264.141199][ T9208] RBP: 00007f8ac3f72090 R08: 0000000000000000 R09: 0000000000000000 [ 264.141207][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.141215][ T9208] R13: 00007f8ac33e6128 R14: 00007f8ac33e6090 R15: 00007ffda0e9d318 [ 264.141248][ T9208] [ 267.093328][ T9226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1010'. [ 267.271167][ T9233] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1012'. [ 267.351804][ T9227] delete_channel: no stack [ 268.121012][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'. [ 268.446998][ T9272] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1026'. [ 268.463737][ T9275] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 268.949035][ T9277] delete_channel: no stack [ 269.519179][ T9303] netlink: 'syz.3.1035': attribute type 10 has an invalid length. [ 269.543128][ T9303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1035'. [ 269.568187][ T9308] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1037'. [ 269.591198][ T9303] bridge0: port 3(batadv0) entered blocking state [ 269.597818][ T9303] bridge0: port 3(batadv0) entered disabled state [ 269.632627][ T9303] batadv0: entered allmulticast mode [ 269.649317][ T9303] batadv0: entered promiscuous mode [ 269.655399][ T9303] bridge0: port 3(batadv0) entered blocking state [ 269.662977][ T9303] bridge0: port 3(batadv0) entered forwarding state [ 269.707087][ T9316] netlink: 'syz.2.1040': attribute type 10 has an invalid length. [ 269.768178][ T9323] bpf: Bad value for 'gid' [ 269.774799][ T9316] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 269.897476][ T9325] rdma_rxe: rxe_newlink: failed to add lo [ 269.907575][ T9319] delete_channel: no stack [ 269.933226][ T9322] rdma_rxe: rxe_newlink: failed to add lo [ 270.092907][ T4517] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 270.102491][ T4517] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 270.193983][ T9338] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 270.967383][ T9354] macvtap0: refused to change device tx_queue_len [ 271.366243][ T9373] syz2: rxe_newlink: already configured on lo [ 271.392528][ T9361] delete_channel: no stack [ 271.643095][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 272.733732][ T9393] FAULT_INJECTION: forcing a failure. [ 272.733732][ T9393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.766993][ T9393] CPU: 0 UID: 0 PID: 9393 Comm: syz.5.1065 Not tainted syzkaller #0 PREEMPT(full) [ 272.767018][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.767027][ T9393] Call Trace: [ 272.767034][ T9393] [ 272.767042][ T9393] dump_stack_lvl+0x189/0x250 [ 272.767067][ T9393] ? __pfx____ratelimit+0x10/0x10 [ 272.767086][ T9393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.767106][ T9393] ? __pfx__printk+0x10/0x10 [ 272.767127][ T9393] ? __might_fault+0xb0/0x130 [ 272.767154][ T9393] should_fail_ex+0x414/0x560 [ 272.767182][ T9393] _copy_from_user+0x2d/0xb0 [ 272.767204][ T9393] perf_copy_attr+0x167/0x880 [ 272.767236][ T9393] __se_sys_perf_event_open+0xdd/0x1d70 [ 272.767263][ T9393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 272.767292][ T9393] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 272.767337][ T9393] ? __pfx_ksys_write+0x10/0x10 [ 272.767355][ T9393] ? rcu_is_watching+0x15/0xb0 [ 272.767383][ T9393] ? do_syscall_64+0xbe/0x3b0 [ 272.767398][ T9393] ? __x64_sys_perf_event_open+0x20/0xc0 [ 272.767419][ T9393] do_syscall_64+0xfa/0x3b0 [ 272.767435][ T9393] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.767452][ T9393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.767469][ T9393] ? clear_bhb_loop+0x60/0xb0 [ 272.767491][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.767507][ T9393] RIP: 0033:0x7f8ac318eec9 [ 272.767523][ T9393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.767537][ T9393] RSP: 002b:00007f8ac3f93038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 272.767555][ T9393] RAX: ffffffffffffffda RBX: 00007f8ac33e5fa0 RCX: 00007f8ac318eec9 [ 272.767567][ T9393] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500 [ 272.767579][ T9393] RBP: 00007f8ac3f93090 R08: 0000000000000009 R09: 0000000000000000 [ 272.767590][ T9393] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 272.767600][ T9393] R13: 00007f8ac33e6038 R14: 00007f8ac33e5fa0 R15: 00007ffda0e9d318 [ 272.767634][ T9393] [ 273.091597][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 273.128532][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 273.262744][ T9401] netlink: 'syz.2.1068': attribute type 10 has an invalid length. [ 273.283018][ T9401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1068'. [ 273.370938][ T9401] batman_adv: batadv0: Adding interface: virt_wifi0 [ 273.382320][ T9401] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.416064][ T9401] batman_adv: batadv0: Interface activated: virt_wifi0 [ 273.418459][ T5859] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 273.665518][ T9406] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 274.874348][ T9411] delete_channel: no stack [ 274.967841][ T9427] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1077'. [ 275.029259][ T9427] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1077'. [ 275.077407][ T9432] netlink: 'syz.1.1079': attribute type 10 has an invalid length. [ 275.209249][ T9432] team0: Port device netdevsim0 added [ 275.284092][ T9437] FAULT_INJECTION: forcing a failure. [ 275.284092][ T9437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.387006][ T9437] CPU: 1 UID: 0 PID: 9437 Comm: syz.2.1081 Not tainted syzkaller #0 PREEMPT(full) [ 275.387032][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.387041][ T9437] Call Trace: [ 275.387049][ T9437] [ 275.387058][ T9437] dump_stack_lvl+0x189/0x250 [ 275.387087][ T9437] ? __pfx____ratelimit+0x10/0x10 [ 275.387107][ T9437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.387132][ T9437] ? __pfx__printk+0x10/0x10 [ 275.387153][ T9437] ? __might_fault+0xb0/0x130 [ 275.387181][ T9437] ? __might_fault+0xb0/0x130 [ 275.387214][ T9437] should_fail_ex+0x414/0x560 [ 275.387254][ T9437] _copy_from_user+0x2d/0xb0 [ 275.387280][ T9437] __sys_bpf+0x1e3/0x860 [ 275.387315][ T9437] ? __pfx___sys_bpf+0x10/0x10 [ 275.387373][ T9437] ? do_syscall_64+0xb7/0x3b0 [ 275.387389][ T9437] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 275.387410][ T9437] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 275.387430][ T9437] ? __pfx_ksys_write+0x10/0x10 [ 275.387448][ T9437] ? rcu_is_watching+0x15/0xb0 [ 275.387491][ T9437] __x64_sys_bpf+0x7c/0x90 [ 275.387520][ T9437] do_syscall_64+0xfa/0x3b0 [ 275.387537][ T9437] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.387555][ T9437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.387573][ T9437] ? clear_bhb_loop+0x60/0xb0 [ 275.387598][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.387612][ T9437] RIP: 0033:0x7fcaa938eec9 [ 275.387628][ T9437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.387643][ T9437] RSP: 002b:00007fcaaa1c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.387661][ T9437] RAX: ffffffffffffffda RBX: 00007fcaa95e5fa0 RCX: 00007fcaa938eec9 [ 275.387673][ T9437] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 000000000000000f [ 275.387684][ T9437] RBP: 00007fcaaa1c6090 R08: 0000000000000000 R09: 0000000000000000 [ 275.387694][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.387704][ T9437] R13: 00007fcaa95e6038 R14: 00007fcaa95e5fa0 R15: 00007fff230f8978 [ 275.387759][ T9437] [ 275.391407][ T5159] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 275.464426][ T9444] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1084'. [ 275.468381][ T5159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 275.476443][ T9444] netlink: 'syz.0.1084': attribute type 2 has an invalid length. [ 275.481365][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 275.481390][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.481402][ T5159] Workqueue: hci5 hci_rx_work [ 275.481431][ T5159] Call Trace: [ 275.481438][ T5159] [ 275.481446][ T5159] dump_stack_lvl+0x189/0x250 [ 275.481475][ T5159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.481499][ T5159] ? __pfx__printk+0x10/0x10 [ 275.481525][ T5159] ? kernfs_path_from_node+0x250/0x290 [ 275.481542][ T5159] ? kernfs_path_from_node+0x2f/0x290 [ 275.481566][ T5159] sysfs_create_dir_ns+0x259/0x280 [ 275.481588][ T5159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 275.481610][ T5159] ? do_raw_spin_unlock+0x122/0x240 [ 275.481640][ T5159] kobject_add_internal+0x59f/0xb40 [ 275.481672][ T5159] kobject_add+0x155/0x220 [ 275.481699][ T5159] ? __pfx_kobject_add+0x10/0x10 [ 275.481719][ T5159] ? _raw_spin_unlock+0x28/0x50 [ 275.481743][ T5159] ? get_device_parent+0x366/0x3a0 [ 275.481770][ T5159] device_add+0x408/0xb50 [ 275.481797][ T5159] hci_conn_add_sysfs+0xd5/0x1e0 [ 275.481825][ T5159] le_conn_complete_evt+0xf39/0x1500 [ 275.481859][ T5159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 275.481877][ T5159] ? __pfx_bt_warn+0x10/0x10 [ 275.481893][ T5159] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 275.481920][ T5159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.481937][ T5159] ? skb_pull_data+0xfb/0x200 [ 275.481966][ T5159] hci_le_conn_complete_evt+0x187/0x450 [ 275.481994][ T5159] hci_event_packet+0x78f/0x1200 [ 275.482022][ T5159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 275.482042][ T5159] ? __pfx_hci_event_packet+0x10/0x10 [ 275.482068][ T5159] ? kcov_remote_start+0x4d3/0x7f0 [ 275.482084][ T5159] ? warn_bogus_irq_restore+0x20/0x40 [ 275.482106][ T5159] ? hci_send_to_monitor+0xe2/0x570 [ 275.482129][ T5159] hci_rx_work+0x46a/0xe80 [ 275.482163][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 275.482185][ T5159] process_scheduled_works+0xade/0x17b0 [ 275.482240][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 275.482281][ T5159] worker_thread+0x8a0/0xda0 [ 275.482312][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 275.482349][ T5159] ? __kthread_parkme+0x7b/0x200 [ 275.482383][ T5159] kthread+0x711/0x8a0 [ 275.482410][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 275.482429][ T5159] ? __pfx_kthread+0x10/0x10 [ 275.482456][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.482479][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.482494][ T5159] ? __pfx_kthread+0x10/0x10 [ 275.482518][ T5159] ret_from_fork+0x436/0x7d0 [ 275.482542][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 275.482569][ T5159] ? __switch_to_asm+0x39/0x70 [ 275.482589][ T5159] ? __switch_to_asm+0x33/0x70 [ 275.482610][ T5159] ? __pfx_kthread+0x10/0x10 [ 275.482634][ T5159] ret_from_fork_asm+0x1a/0x30 [ 275.482677][ T5159] [ 275.482706][ T5159] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 275.552473][ T9445] netlink: 'syz.0.1084': attribute type 10 has an invalid length. [ 275.555189][ T5159] Bluetooth: hci5: failed to register connection device [ 275.686343][ T9444] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1084'. [ 275.692739][ T5159] Bluetooth: hci5: command tx timeout [ 276.266887][ T9450] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 276.718643][ T9468] lo: entered allmulticast mode [ 276.765473][ T9468] lo: entered promiscuous mode [ 276.775092][ T9468] lo: left allmulticast mode [ 277.322616][ T9484] netlink: 'syz.0.1098': attribute type 10 has an invalid length. [ 277.542879][ T5159] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 277.959141][ T5859] Bluetooth: hci5: command tx timeout [ 279.558339][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 280.978370][ T9513] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1106'. [ 281.040592][ T9517] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 281.175361][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 281.418936][ T5859] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 281.427666][ T5859] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 281.437283][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 281.437308][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.437320][ T5859] Workqueue: hci5 hci_rx_work [ 281.437348][ T5859] Call Trace: [ 281.437356][ T5859] [ 281.437364][ T5859] dump_stack_lvl+0x189/0x250 [ 281.437393][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.437416][ T5859] ? __pfx__printk+0x10/0x10 [ 281.437441][ T5859] ? kernfs_path_from_node+0x250/0x290 [ 281.437458][ T5859] ? kernfs_path_from_node+0x2f/0x290 [ 281.437481][ T5859] sysfs_create_dir_ns+0x259/0x280 [ 281.437503][ T5859] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 281.437523][ T5859] ? do_raw_spin_unlock+0x122/0x240 [ 281.437553][ T5859] kobject_add_internal+0x59f/0xb40 [ 281.437584][ T5859] kobject_add+0x155/0x220 [ 281.437611][ T5859] ? __pfx_kobject_add+0x10/0x10 [ 281.437633][ T5859] ? _raw_spin_unlock+0x28/0x50 [ 281.437669][ T5859] ? get_device_parent+0x366/0x3a0 [ 281.437696][ T5859] device_add+0x408/0xb50 [ 281.437723][ T5859] hci_conn_add_sysfs+0xd5/0x1e0 [ 281.437750][ T5859] le_conn_complete_evt+0xf39/0x1500 [ 281.437786][ T5859] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 281.437805][ T5859] ? __pfx_bt_warn+0x10/0x10 [ 281.437821][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 281.437848][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 281.437865][ T5859] ? skb_pull_data+0xfb/0x200 [ 281.437895][ T5859] hci_le_conn_complete_evt+0x187/0x450 [ 281.437921][ T5859] hci_event_packet+0x78f/0x1200 [ 281.437948][ T5859] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 281.437974][ T5859] ? __pfx_hci_event_packet+0x10/0x10 [ 281.437998][ T5859] ? kcov_remote_start+0x4d3/0x7f0 [ 281.438016][ T5859] ? warn_bogus_irq_restore+0x20/0x40 [ 281.438038][ T5859] ? hci_send_to_monitor+0xe2/0x570 [ 281.438062][ T5859] hci_rx_work+0x46a/0xe80 [ 281.438095][ T5859] ? process_scheduled_works+0x9ef/0x17b0 [ 281.438117][ T5859] process_scheduled_works+0xade/0x17b0 [ 281.438170][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 281.438210][ T5859] worker_thread+0x8a0/0xda0 [ 281.438261][ T5859] kthread+0x711/0x8a0 [ 281.438288][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 281.438308][ T5859] ? __pfx_kthread+0x10/0x10 [ 281.438333][ T5859] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.438358][ T5859] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.438373][ T5859] ? __pfx_kthread+0x10/0x10 [ 281.438397][ T5859] ret_from_fork+0x436/0x7d0 [ 281.438421][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 281.438447][ T5859] ? __switch_to_asm+0x39/0x70 [ 281.438469][ T5859] ? __switch_to_asm+0x33/0x70 [ 281.438491][ T5859] ? __pfx_kthread+0x10/0x10 [ 281.438516][ T5859] ret_from_fork_asm+0x1a/0x30 [ 281.438558][ T5859] [ 281.738672][ T5859] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 281.752588][ T5859] Bluetooth: hci5: failed to register connection device [ 281.810542][ T9526] FAULT_INJECTION: forcing a failure. [ 281.810542][ T9526] name failslab, interval 1, probability 0, space 0, times 0 [ 281.828864][ T9526] CPU: 1 UID: 0 PID: 9526 Comm: syz.3.1110 Not tainted syzkaller #0 PREEMPT(full) [ 281.828889][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.828899][ T9526] Call Trace: [ 281.828906][ T9526] [ 281.828914][ T9526] dump_stack_lvl+0x189/0x250 [ 281.828938][ T9526] ? __pfx____ratelimit+0x10/0x10 [ 281.828956][ T9526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.828975][ T9526] ? __pfx__printk+0x10/0x10 [ 281.828994][ T9526] ? __pfx___might_resched+0x10/0x10 [ 281.829016][ T9526] should_fail_ex+0x414/0x560 [ 281.829044][ T9526] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 281.829059][ T9526] should_failslab+0xa8/0x100 [ 281.829084][ T9526] __kvmalloc_node_noprof+0x161/0x5f0 [ 281.829106][ T9526] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 281.829129][ T9526] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 281.829146][ T9526] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 281.829173][ T9526] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 281.829199][ T9526] ? synchronize_rcu+0x11a/0x310 [ 281.829218][ T9526] ? __pfx_synchronize_rcu+0x10/0x10 [ 281.829241][ T9526] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 281.829261][ T9526] ? 0xffffffffa02057c0 [ 281.829295][ T9526] ? 0xffffffffa0203bd0 [ 281.829336][ T9526] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 281.829366][ T9526] ? _copy_from_user+0x94/0xb0 [ 281.829386][ T9526] ? bpf_test_init+0x113/0x150 [ 281.829400][ T9526] ? xdp_convert_md_to_buff+0x5b/0x330 [ 281.829420][ T9526] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 281.829454][ T9526] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.829476][ T9526] ? __fget_files+0x2a/0x420 [ 281.829504][ T9526] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.829522][ T9526] bpf_prog_test_run+0x2c4/0x340 [ 281.829544][ T9526] __sys_bpf+0x562/0x860 [ 281.829561][ T9526] ? __pfx___sys_bpf+0x10/0x10 [ 281.829592][ T9526] ? do_syscall_64+0xb7/0x3b0 [ 281.829611][ T9526] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 281.829629][ T9526] ? __pfx_ksys_write+0x10/0x10 [ 281.829647][ T9526] ? rcu_is_watching+0x15/0xb0 [ 281.829674][ T9526] __x64_sys_bpf+0x7c/0x90 [ 281.829697][ T9526] do_syscall_64+0xfa/0x3b0 [ 281.829713][ T9526] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.829729][ T9526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.829746][ T9526] ? clear_bhb_loop+0x60/0xb0 [ 281.829766][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.829782][ T9526] RIP: 0033:0x7febbad8eec9 [ 281.829797][ T9526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.829811][ T9526] RSP: 002b:00007febbbc4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.829836][ T9526] RAX: ffffffffffffffda RBX: 00007febbafe5fa0 RCX: 00007febbad8eec9 [ 281.829848][ T9526] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 281.829859][ T9526] RBP: 00007febbbc4a090 R08: 0000000000000000 R09: 0000000000000000 [ 281.829870][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.829880][ T9526] R13: 00007febbafe6038 R14: 00007febbafe5fa0 R15: 00007fffe476c2e8 [ 281.829908][ T9526] [ 282.167784][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 282.187267][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 283.007719][ T9540] netlink: 'syz.0.1115': attribute type 64 has an invalid length. [ 283.103146][ T5159] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 283.112858][ T5159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 283.123721][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 283.123746][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.123765][ T5159] Workqueue: hci1 hci_rx_work [ 283.123795][ T5159] Call Trace: [ 283.123806][ T5159] [ 283.123817][ T5159] dump_stack_lvl+0x189/0x250 [ 283.123867][ T5159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.123900][ T5159] ? __pfx__printk+0x10/0x10 [ 283.123959][ T5159] ? kernfs_path_from_node+0x250/0x290 [ 283.123978][ T5159] ? kernfs_path_from_node+0x2f/0x290 [ 283.124024][ T5159] sysfs_create_dir_ns+0x259/0x280 [ 283.124065][ T5159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 283.124105][ T5159] ? do_raw_spin_unlock+0x122/0x240 [ 283.124156][ T5159] kobject_add_internal+0x59f/0xb40 [ 283.124230][ T5159] kobject_add+0x155/0x220 [ 283.124293][ T5159] ? __pfx_kobject_add+0x10/0x10 [ 283.124332][ T5159] ? _raw_spin_unlock+0x28/0x50 [ 283.124385][ T5159] ? get_device_parent+0x366/0x3a0 [ 283.124437][ T5159] device_add+0x408/0xb50 [ 283.124496][ T5159] hci_conn_add_sysfs+0xd5/0x1e0 [ 283.124549][ T5159] le_conn_complete_evt+0xf39/0x1500 [ 283.124642][ T5159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 283.124668][ T5159] ? __pfx_bt_warn+0x10/0x10 [ 283.124683][ T5159] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 283.124740][ T5159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.124757][ T5159] ? skb_pull_data+0xfb/0x200 [ 283.124856][ T5159] hci_le_conn_complete_evt+0x187/0x450 [ 283.124926][ T5159] hci_event_packet+0x78f/0x1200 [ 283.124980][ T5159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 283.125021][ T5159] ? __pfx_hci_event_packet+0x10/0x10 [ 283.125065][ T5159] ? kcov_remote_start+0x4d3/0x7f0 [ 283.125088][ T5159] ? warn_bogus_irq_restore+0x20/0x40 [ 283.125129][ T5159] ? hci_send_to_monitor+0xe2/0x570 [ 283.125175][ T5159] hci_rx_work+0x46a/0xe80 [ 283.125253][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 283.125292][ T5159] process_scheduled_works+0xade/0x17b0 [ 283.125479][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.125599][ T5159] worker_thread+0x8a0/0xda0 [ 283.125642][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.125716][ T5159] ? __kthread_parkme+0x7b/0x200 [ 283.125807][ T5159] kthread+0x711/0x8a0 [ 283.125861][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 283.125889][ T5159] ? __pfx_kthread+0x10/0x10 [ 283.125936][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.125968][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.125983][ T5159] ? __pfx_kthread+0x10/0x10 [ 283.126025][ T5159] ret_from_fork+0x436/0x7d0 [ 283.126070][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 283.126135][ T5159] ? __switch_to_asm+0x39/0x70 [ 283.126157][ T5159] ? __switch_to_asm+0x33/0x70 [ 283.126178][ T5159] ? __pfx_kthread+0x10/0x10 [ 283.126218][ T5159] ret_from_fork_asm+0x1a/0x30 [ 283.126329][ T5159] [ 283.126403][ T5159] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 283.427023][ T5159] Bluetooth: hci1: failed to register connection device [ 283.665191][ T9559] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1122'. [ 283.708248][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 283.717233][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'. [ 283.782643][ T9561] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1124'. [ 283.784798][ T9559] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 283.800597][ T5859] Bluetooth: hci5: command tx timeout [ 283.813738][ T9559] netlink: 'syz.0.1122': attribute type 2 has an invalid length. [ 283.891447][ T9559] netlink: 'syz.0.1122': attribute type 3 has an invalid length. [ 283.908798][ T9559] netlink: 'syz.0.1122': attribute type 5 has an invalid length. [ 283.983460][ T9559] netlink: 'syz.0.1122': attribute type 6 has an invalid length. [ 284.037466][ T9559] netlink: 'syz.0.1122': attribute type 7 has an invalid length. [ 284.096547][ T9559] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 284.171518][ T9559] netlink: 449 bytes leftover after parsing attributes in process `syz.0.1122'. [ 284.233694][ T5859] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 284.251306][ T9570] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 284.277080][ T9559] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.1122'. [ 284.317819][ T9559] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 284.357940][ T9559] netlink: 'syz.0.1122': attribute type 2 has an invalid length. [ 284.576137][ T5859] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 285.480198][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 286.293442][ T9582] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 286.474273][ T5859] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 287.254184][ T5962] lo speed is unknown, defaulting to 1000 [ 287.883788][ T9643] team0: Port device netdevsim0 added [ 288.005451][ T9650] syzkaller0: entered promiscuous mode [ 288.035282][ T9650] syzkaller0: entered allmulticast mode [ 288.054710][ T9650] syzkaller0: create flow: hash 364581909 index 1 [ 288.272525][ T9654] syzkaller0: entered promiscuous mode [ 288.285528][ T9654] syzkaller0: entered allmulticast mode [ 288.295168][ T9649] syzkaller0: delete flow: hash 364581909 index 1 [ 288.438719][ T9670] __nla_validate_parse: 2 callbacks suppressed [ 288.438736][ T9670] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1165'. [ 290.164943][ T9693] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1174'. [ 290.504615][ T9705] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1181'. [ 290.969623][ T9722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1188'. [ 291.997089][ T9714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1183'. [ 292.106292][ T9741] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1197'. [ 292.734942][ T5859] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 292.807150][ T9771] syz2: rxe_newlink: already configured on lo [ 293.267088][ T9785] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 294.081362][ T9792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1213'. [ 294.275218][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1216'. [ 294.729902][ T5859] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 294.782874][ T5859] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 294.799537][ T5859] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 294.810064][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 294.810089][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.810101][ T5859] Workqueue: hci0 hci_rx_work [ 294.810129][ T5859] Call Trace: [ 294.810135][ T5859] [ 294.810143][ T5859] dump_stack_lvl+0x189/0x250 [ 294.810172][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.810194][ T5859] ? __pfx__printk+0x10/0x10 [ 294.810218][ T5859] ? kernfs_path_from_node+0x250/0x290 [ 294.810233][ T5859] ? kernfs_path_from_node+0x2f/0x290 [ 294.810254][ T5859] sysfs_create_dir_ns+0x259/0x280 [ 294.810273][ T5859] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 294.810292][ T5859] ? do_raw_spin_unlock+0x122/0x240 [ 294.810321][ T5859] kobject_add_internal+0x59f/0xb40 [ 294.810349][ T5859] kobject_add+0x155/0x220 [ 294.810375][ T5859] ? __pfx_kobject_add+0x10/0x10 [ 294.810397][ T5859] ? _raw_spin_unlock+0x28/0x50 [ 294.810426][ T5859] ? get_device_parent+0x366/0x3a0 [ 294.810451][ T5859] device_add+0x408/0xb50 [ 294.810475][ T5859] hci_conn_add_sysfs+0xd5/0x1e0 [ 294.810502][ T5859] le_conn_complete_evt+0xf39/0x1500 [ 294.810536][ T5859] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 294.810556][ T5859] ? __pfx_bt_warn+0x10/0x10 [ 294.810572][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 294.810599][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.810616][ T5859] ? skb_pull_data+0xfb/0x200 [ 294.810646][ T5859] hci_le_conn_complete_evt+0x187/0x450 [ 294.810670][ T5859] hci_event_packet+0x78f/0x1200 [ 294.810697][ T5859] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 294.810718][ T5859] ? __pfx_hci_event_packet+0x10/0x10 [ 294.810744][ T5859] ? kcov_remote_start+0x4d3/0x7f0 [ 294.810762][ T5859] ? warn_bogus_irq_restore+0x20/0x40 [ 294.810783][ T5859] ? hci_send_to_monitor+0xe2/0x570 [ 294.810806][ T5859] hci_rx_work+0x46a/0xe80 [ 294.810839][ T5859] ? process_scheduled_works+0x9ef/0x17b0 [ 294.810861][ T5859] process_scheduled_works+0xade/0x17b0 [ 294.810917][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.810957][ T5859] worker_thread+0x8a0/0xda0 [ 294.811006][ T5859] kthread+0x711/0x8a0 [ 294.811033][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 294.811054][ T5859] ? __pfx_kthread+0x10/0x10 [ 294.811079][ T5859] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.811103][ T5859] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.811117][ T5859] ? __pfx_kthread+0x10/0x10 [ 294.811141][ T5859] ret_from_fork+0x436/0x7d0 [ 294.811163][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 294.811188][ T5859] ? __switch_to_asm+0x39/0x70 [ 294.811210][ T5859] ? __switch_to_asm+0x33/0x70 [ 294.811232][ T5859] ? __pfx_kthread+0x10/0x10 [ 294.811257][ T5859] ret_from_fork_asm+0x1a/0x30 [ 294.811297][ T5859] [ 294.811325][ T5859] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 295.096963][ T5859] Bluetooth: hci0: failed to register connection device [ 295.115692][ T9826] validate_nla: 12 callbacks suppressed [ 295.115775][ T9826] netlink: 'syz.5.1225': attribute type 58 has an invalid length. [ 295.130785][ T9826] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1225'. [ 295.142891][ T9826] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1225'. [ 295.144086][ T9827] rdma_rxe: rxe_newlink: failed to add lo [ 295.152822][ T9826] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1225'. [ 296.170685][ T5859] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 296.799733][ T9875] rdma_rxe: rxe_newlink: failed to add lo [ 297.188166][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 297.390241][ T9900] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 297.448299][ T5859] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 297.456221][ T5859] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 297.465602][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 297.465627][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.465640][ T5859] Workqueue: hci1 hci_rx_work [ 297.465669][ T5859] Call Trace: [ 297.465677][ T5859] [ 297.465693][ T5859] dump_stack_lvl+0x189/0x250 [ 297.465723][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.465747][ T5859] ? __pfx__printk+0x10/0x10 [ 297.465772][ T5859] ? kernfs_path_from_node+0x250/0x290 [ 297.465789][ T5859] ? kernfs_path_from_node+0x2f/0x290 [ 297.465813][ T5859] sysfs_create_dir_ns+0x259/0x280 [ 297.465835][ T5859] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 297.465860][ T5859] ? do_raw_spin_unlock+0x122/0x240 [ 297.465890][ T5859] kobject_add_internal+0x59f/0xb40 [ 297.465922][ T5859] kobject_add+0x155/0x220 [ 297.465949][ T5859] ? __pfx_kobject_add+0x10/0x10 [ 297.465971][ T5859] ? _raw_spin_unlock+0x28/0x50 [ 297.466000][ T5859] ? get_device_parent+0x366/0x3a0 [ 297.466026][ T5859] device_add+0x408/0xb50 [ 297.466052][ T5859] hci_conn_add_sysfs+0xd5/0x1e0 [ 297.466079][ T5859] le_conn_complete_evt+0xf39/0x1500 [ 297.466113][ T5859] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 297.466132][ T5859] ? __pfx_bt_warn+0x10/0x10 [ 297.466148][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 297.466175][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.466192][ T5859] ? skb_pull_data+0xfb/0x200 [ 297.466222][ T5859] hci_le_conn_complete_evt+0x187/0x450 [ 297.466249][ T5859] hci_event_packet+0x78f/0x1200 [ 297.466278][ T5859] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 297.466299][ T5859] ? __pfx_hci_event_packet+0x10/0x10 [ 297.466327][ T5859] ? kcov_remote_start+0x4d3/0x7f0 [ 297.466343][ T5859] ? warn_bogus_irq_restore+0x20/0x40 [ 297.466365][ T5859] ? hci_send_to_monitor+0xe2/0x570 [ 297.466389][ T5859] hci_rx_work+0x46a/0xe80 [ 297.466422][ T5859] ? process_scheduled_works+0x9ef/0x17b0 [ 297.466444][ T5859] process_scheduled_works+0xade/0x17b0 [ 297.466498][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.466537][ T5859] worker_thread+0x8a0/0xda0 [ 297.466588][ T5859] kthread+0x711/0x8a0 [ 297.466616][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 297.466636][ T5859] ? __pfx_kthread+0x10/0x10 [ 297.466661][ T5859] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.466692][ T5859] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.466706][ T5859] ? __pfx_kthread+0x10/0x10 [ 297.466731][ T5859] ret_from_fork+0x436/0x7d0 [ 297.466754][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 297.466782][ T5859] ? __switch_to_asm+0x39/0x70 [ 297.466803][ T5859] ? __switch_to_asm+0x33/0x70 [ 297.466825][ T5859] ? __pfx_kthread+0x10/0x10 [ 297.466849][ T5859] ret_from_fork_asm+0x1a/0x30 [ 297.466891][ T5859] [ 297.467058][ T5859] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 297.777843][ T5859] Bluetooth: hci1: failed to register connection device [ 297.925431][ T5159] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 298.630221][ T9917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1259'. [ 298.755182][ T5159] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 299.303713][ T5159] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 299.367640][ T9939] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 299.630341][ T5159] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 299.801523][ T5159] Bluetooth: hci1: command 0x0406 tx timeout [ 300.065287][ T9959] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 300.141028][ T5159] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 301.083583][ T9977] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 301.404224][ T9997] rdma_rxe: rxe_newlink: failed to add lo [ 301.766087][ T5159] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 301.924926][T10021] rdma_rxe: rxe_newlink: failed to add lo [ 301.968745][T10024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.327703][T10038] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 302.784302][T10040] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 303.646424][T10048] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 303.921510][T10056] rdma_rxe: rxe_newlink: failed to add lo [ 305.566795][T10068] syz2: rxe_newlink: already configured on lo [ 306.365617][T10101] rdma_rxe: rxe_newlink: failed to add lo [ 306.743013][ T5159] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 306.970330][ T5859] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 309.000597][ T5159] Bluetooth: hci5: command tx timeout [ 309.239596][T10151] rdma_rxe: rxe_newlink: failed to add lo [ 309.399977][ T5159] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 309.408068][ T5159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 309.417516][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 309.417549][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.417561][ T5159] Workqueue: hci5 hci_rx_work [ 309.417601][ T5159] Call Trace: [ 309.417610][ T5159] [ 309.417619][ T5159] dump_stack_lvl+0x189/0x250 [ 309.417649][ T5159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.417672][ T5159] ? __pfx__printk+0x10/0x10 [ 309.417696][ T5159] ? kernfs_path_from_node+0x250/0x290 [ 309.417715][ T5159] ? kernfs_path_from_node+0x2f/0x290 [ 309.417738][ T5159] sysfs_create_dir_ns+0x259/0x280 [ 309.417760][ T5159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 309.417782][ T5159] ? do_raw_spin_unlock+0x122/0x240 [ 309.417811][ T5159] kobject_add_internal+0x59f/0xb40 [ 309.417844][ T5159] kobject_add+0x155/0x220 [ 309.417872][ T5159] ? __pfx_kobject_add+0x10/0x10 [ 309.417895][ T5159] ? _raw_spin_unlock+0x28/0x50 [ 309.417924][ T5159] ? get_device_parent+0x366/0x3a0 [ 309.417952][ T5159] device_add+0x408/0xb50 [ 309.417975][ T5159] hci_conn_add_sysfs+0xd5/0x1e0 [ 309.418000][ T5159] le_conn_complete_evt+0xf39/0x1500 [ 309.418027][ T5159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 309.418044][ T5159] ? __pfx_bt_warn+0x10/0x10 [ 309.418061][ T5159] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 309.418085][ T5159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.418101][ T5159] ? skb_pull_data+0xfb/0x200 [ 309.418126][ T5159] hci_le_conn_complete_evt+0x187/0x450 [ 309.418151][ T5159] hci_event_packet+0x78f/0x1200 [ 309.418177][ T5159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 309.418196][ T5159] ? __pfx_hci_event_packet+0x10/0x10 [ 309.418222][ T5159] ? kcov_remote_start+0x4d3/0x7f0 [ 309.418240][ T5159] ? warn_bogus_irq_restore+0x20/0x40 [ 309.418262][ T5159] ? hci_send_to_monitor+0xe2/0x570 [ 309.418285][ T5159] hci_rx_work+0x46a/0xe80 [ 309.418319][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 309.418341][ T5159] process_scheduled_works+0xade/0x17b0 [ 309.418389][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 309.418429][ T5159] worker_thread+0x8a0/0xda0 [ 309.418452][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 309.418488][ T5159] ? __kthread_parkme+0x7b/0x200 [ 309.418518][ T5159] kthread+0x711/0x8a0 [ 309.418550][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 309.418568][ T5159] ? __pfx_kthread+0x10/0x10 [ 309.418592][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.418613][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.418627][ T5159] ? __pfx_kthread+0x10/0x10 [ 309.418650][ T5159] ret_from_fork+0x436/0x7d0 [ 309.418673][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 309.418696][ T5159] ? __switch_to_asm+0x39/0x70 [ 309.418715][ T5159] ? __switch_to_asm+0x33/0x70 [ 309.418736][ T5159] ? __pfx_kthread+0x10/0x10 [ 309.418758][ T5159] ret_from_fork_asm+0x1a/0x30 [ 309.418793][ T5159] [ 309.689815][ T5159] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 309.703817][ T5159] Bluetooth: hci5: failed to register connection device [ 309.827860][T10157] syz2: rxe_newlink: already configured on lo [ 309.994193][ T5159] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 310.621985][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1352'. [ 310.784999][T10171] wg2: entered promiscuous mode [ 310.798546][T10171] wg2: entered allmulticast mode [ 311.154574][ T5159] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 311.377010][ T5159] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 311.718146][ T5159] Bluetooth: hci5: command tx timeout [ 312.098881][T10215] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1365'. [ 312.129964][T10218] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1365'. [ 312.290695][T10230] FAULT_INJECTION: forcing a failure. [ 312.290695][T10230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.321034][T10230] CPU: 0 UID: 0 PID: 10230 Comm: syz.3.1369 Not tainted syzkaller #0 PREEMPT(full) [ 312.321058][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.321069][T10230] Call Trace: [ 312.321076][T10230] [ 312.321084][T10230] dump_stack_lvl+0x189/0x250 [ 312.321111][T10230] ? __pfx____ratelimit+0x10/0x10 [ 312.321130][T10230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.321152][T10230] ? __pfx__printk+0x10/0x10 [ 312.321170][T10230] ? __might_fault+0xb0/0x130 [ 312.321195][T10230] ? __might_fault+0xb0/0x130 [ 312.321225][T10230] should_fail_ex+0x414/0x560 [ 312.321257][T10230] _copy_from_user+0x2d/0xb0 [ 312.321279][T10230] ___sys_sendmsg+0x158/0x2a0 [ 312.321305][T10230] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.321358][T10230] ? __fget_files+0x2a/0x420 [ 312.321399][T10230] ? __fget_files+0x2a/0x420 [ 312.321419][T10230] ? __fget_files+0x3a0/0x420 [ 312.321457][T10230] __x64_sys_sendmsg+0x19b/0x260 [ 312.321482][T10230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.321517][T10230] ? __pfx_ksys_write+0x10/0x10 [ 312.321535][T10230] ? rcu_is_watching+0x15/0xb0 [ 312.321563][T10230] ? do_syscall_64+0xbe/0x3b0 [ 312.321587][T10230] do_syscall_64+0xfa/0x3b0 [ 312.321603][T10230] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.321620][T10230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.321637][T10230] ? clear_bhb_loop+0x60/0xb0 [ 312.321665][T10230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.321682][T10230] RIP: 0033:0x7febbad8eec9 [ 312.321698][T10230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.321713][T10230] RSP: 002b:00007febbbc4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.321731][T10230] RAX: ffffffffffffffda RBX: 00007febbafe5fa0 RCX: 00007febbad8eec9 [ 312.321743][T10230] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 312.321754][T10230] RBP: 00007febbbc4a090 R08: 0000000000000000 R09: 0000000000000000 [ 312.321764][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.321774][T10230] R13: 00007febbafe6038 R14: 00007febbafe5fa0 R15: 00007fffe476c2e8 [ 312.321811][T10230] [ 313.082592][T10258] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 313.238254][ T5159] Bluetooth: hci2: command 0x0406 tx timeout [ 314.112775][T10276] FAULT_INJECTION: forcing a failure. [ 314.112775][T10276] name failslab, interval 1, probability 0, space 0, times 0 [ 314.143085][T10276] CPU: 0 UID: 0 PID: 10276 Comm: syz.2.1384 Not tainted syzkaller #0 PREEMPT(full) [ 314.143110][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 314.143120][T10276] Call Trace: [ 314.143132][T10276] [ 314.143142][T10276] dump_stack_lvl+0x189/0x250 [ 314.143178][T10276] ? __pfx____ratelimit+0x10/0x10 [ 314.143205][T10276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.143235][T10276] ? __pfx__printk+0x10/0x10 [ 314.143278][T10276] ? __pfx___might_resched+0x10/0x10 [ 314.143303][T10276] ? fs_reclaim_acquire+0x7d/0x100 [ 314.143359][T10276] should_fail_ex+0x414/0x560 [ 314.143419][T10276] should_failslab+0xa8/0x100 [ 314.143465][T10276] __kmalloc_noprof+0xcb/0x4f0 [ 314.143490][T10276] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 314.143546][T10276] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 314.143611][T10276] genl_family_rcv_msg_doit+0xb8/0x300 [ 314.143676][T10276] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 314.143747][T10276] ? apparmor_capable+0x137/0x1b0 [ 314.143785][T10276] ? bpf_lsm_capable+0x9/0x20 [ 314.143804][T10276] ? security_capable+0x7e/0x2e0 [ 314.143870][T10276] genl_rcv_msg+0x60e/0x790 [ 314.143936][T10276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.143963][T10276] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 314.143983][T10276] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 314.143998][T10276] ? __pfx_nl80211_post_doit+0x10/0x10 [ 314.144034][T10276] ? perf_trace_lock_acquire+0xf5/0x410 [ 314.144052][T10276] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 314.144132][T10276] netlink_rcv_skb+0x205/0x470 [ 314.144151][T10276] ? __lock_acquire+0xab9/0xd20 [ 314.144178][T10276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.144218][T10276] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.144345][T10276] ? down_read+0x1ad/0x2e0 [ 314.144388][T10276] genl_rcv+0x28/0x40 [ 314.144413][T10276] netlink_unicast+0x82f/0x9e0 [ 314.144499][T10276] ? __pfx_netlink_unicast+0x10/0x10 [ 314.144546][T10276] ? netlink_sendmsg+0x642/0xb30 [ 314.144561][T10276] ? skb_put+0x11b/0x210 [ 314.144611][T10276] netlink_sendmsg+0x805/0xb30 [ 314.144687][T10276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.144724][T10276] ? perf_trace_run_bpf_submit+0x100/0x170 [ 314.144750][T10276] ? aa_sock_msg_perm+0xf1/0x1d0 [ 314.144792][T10276] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.144811][T10276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.144844][T10276] __sock_sendmsg+0x219/0x270 [ 314.144897][T10276] ____sys_sendmsg+0x505/0x830 [ 314.144958][T10276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.145039][T10276] ? import_iovec+0x74/0xa0 [ 314.145089][T10276] ___sys_sendmsg+0x21f/0x2a0 [ 314.145133][T10276] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.145275][T10276] ? __fget_files+0x2a/0x420 [ 314.145371][T10276] ? __fget_files+0x2a/0x420 [ 314.145395][T10276] ? __fget_files+0x3a0/0x420 [ 314.145497][T10276] __x64_sys_sendmsg+0x19b/0x260 [ 314.145542][T10276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.145623][T10276] ? __pfx_ksys_write+0x10/0x10 [ 314.145641][T10276] ? rcu_is_watching+0x15/0xb0 [ 314.145696][T10276] ? do_syscall_64+0xbe/0x3b0 [ 314.145742][T10276] do_syscall_64+0xfa/0x3b0 [ 314.145760][T10276] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.145783][T10276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.145803][T10276] ? clear_bhb_loop+0x60/0xb0 [ 314.145844][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.145861][T10276] RIP: 0033:0x7fcaa938eec9 [ 314.145884][T10276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.145898][T10276] RSP: 002b:00007fcaaa1c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.145916][T10276] RAX: ffffffffffffffda RBX: 00007fcaa95e5fa0 RCX: 00007fcaa938eec9 [ 314.145943][T10276] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 314.145953][T10276] RBP: 00007fcaaa1c6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.145963][T10276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.145973][T10276] R13: 00007fcaa95e6038 R14: 00007fcaa95e5fa0 R15: 00007fff230f8978 [ 314.146076][T10276] [ 316.356108][T10285] netlink: 'syz.5.1388': attribute type 29 has an invalid length. [ 316.407702][T10285] netlink: 'syz.5.1388': attribute type 29 has an invalid length. [ 316.437730][T10285] netlink: 'syz.5.1388': attribute type 29 has an invalid length. [ 317.246737][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.253343][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.481301][T10315] C: renamed from team_slave_0 [ 317.555754][T10315] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 317.715090][T10315] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1400'. [ 317.732257][T10315] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 318.058884][T10322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1398'. [ 318.236308][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 318.648284][ T5859] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 318.901206][T10361] rdma_rxe: rxe_newlink: failed to add lo [ 319.322205][ T5859] Bluetooth: hci5: command 0x0406 tx timeout [ 319.738155][ T5159] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 319.746147][ T5159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 319.756249][ T5159] CPU: 1 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 319.756274][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.756285][ T5159] Workqueue: hci2 hci_rx_work [ 319.756314][ T5159] Call Trace: [ 319.756321][ T5159] [ 319.756329][ T5159] dump_stack_lvl+0x189/0x250 [ 319.756358][ T5159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.756381][ T5159] ? __pfx__printk+0x10/0x10 [ 319.756406][ T5159] ? kernfs_path_from_node+0x250/0x290 [ 319.756424][ T5159] ? kernfs_path_from_node+0x2f/0x290 [ 319.756448][ T5159] sysfs_create_dir_ns+0x259/0x280 [ 319.756470][ T5159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 319.756492][ T5159] ? do_raw_spin_unlock+0x122/0x240 [ 319.756521][ T5159] kobject_add_internal+0x59f/0xb40 [ 319.756554][ T5159] kobject_add+0x155/0x220 [ 319.756581][ T5159] ? __pfx_kobject_add+0x10/0x10 [ 319.756603][ T5159] ? _raw_spin_unlock+0x28/0x50 [ 319.756633][ T5159] ? get_device_parent+0x366/0x3a0 [ 319.756658][ T5159] device_add+0x408/0xb50 [ 319.756684][ T5159] hci_conn_add_sysfs+0xd5/0x1e0 [ 319.756712][ T5159] le_conn_complete_evt+0xf39/0x1500 [ 319.756748][ T5159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 319.756767][ T5159] ? __pfx_bt_warn+0x10/0x10 [ 319.756783][ T5159] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 319.756808][ T5159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 319.756826][ T5159] ? skb_pull_data+0xfb/0x200 [ 319.756856][ T5159] hci_le_conn_complete_evt+0x187/0x450 [ 319.756883][ T5159] hci_event_packet+0x78f/0x1200 [ 319.756912][ T5159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 319.756933][ T5159] ? __pfx_hci_event_packet+0x10/0x10 [ 319.756960][ T5159] ? kcov_remote_start+0x4d3/0x7f0 [ 319.756975][ T5159] ? warn_bogus_irq_restore+0x20/0x40 [ 319.756997][ T5159] ? hci_send_to_monitor+0xe2/0x570 [ 319.757021][ T5159] hci_rx_work+0x46a/0xe80 [ 319.757061][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 319.757084][ T5159] process_scheduled_works+0xade/0x17b0 [ 319.757139][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 319.757183][ T5159] worker_thread+0x8a0/0xda0 [ 319.757208][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 319.757243][ T5159] ? __kthread_parkme+0x7b/0x200 [ 319.757276][ T5159] kthread+0x711/0x8a0 [ 319.757304][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 319.757323][ T5159] ? __pfx_kthread+0x10/0x10 [ 319.757349][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.757374][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.757389][ T5159] ? __pfx_kthread+0x10/0x10 [ 319.757413][ T5159] ret_from_fork+0x436/0x7d0 [ 319.757437][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 319.757465][ T5159] ? __switch_to_asm+0x39/0x70 [ 319.757487][ T5159] ? __switch_to_asm+0x33/0x70 [ 319.757508][ T5159] ? __pfx_kthread+0x10/0x10 [ 319.757533][ T5159] ret_from_fork_asm+0x1a/0x30 [ 319.757575][ T5159] [ 319.757750][ T5159] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 320.049805][ T5159] Bluetooth: hci2: failed to register connection device [ 320.058234][T10376] delete_channel: no stack [ 320.742206][ T5859] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 320.755287][T10407] rdma_rxe: rxe_newlink: failed to add lo [ 321.214767][ T5159] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 321.555300][ T5859] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 322.118043][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 322.758241][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 323.593968][T10454] netlink: 'syz.1.1454': attribute type 21 has an invalid length. [ 323.607283][T10454] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1454'. [ 323.620450][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 323.638375][ T5159] Bluetooth: hci5: command 0x0406 tx timeout [ 323.657314][T10454] FAULT_INJECTION: forcing a failure. [ 323.657314][T10454] name failslab, interval 1, probability 0, space 0, times 0 [ 323.683909][T10454] CPU: 1 UID: 0 PID: 10454 Comm: syz.1.1454 Not tainted syzkaller #0 PREEMPT(full) [ 323.683932][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 323.683942][T10454] Call Trace: [ 323.683949][T10454] [ 323.683957][T10454] dump_stack_lvl+0x189/0x250 [ 323.683983][T10454] ? __pfx____ratelimit+0x10/0x10 [ 323.683998][T10454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.684017][T10454] ? __pfx__printk+0x10/0x10 [ 323.684037][T10454] ? __pfx___might_resched+0x10/0x10 [ 323.684055][T10454] ? fs_reclaim_acquire+0x7d/0x100 [ 323.684083][T10454] should_fail_ex+0x414/0x560 [ 323.684107][T10454] should_failslab+0xa8/0x100 [ 323.684130][T10454] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 323.684149][T10454] ? __alloc_skb+0x112/0x2d0 [ 323.684169][T10454] __alloc_skb+0x112/0x2d0 [ 323.684189][T10454] netlink_ack+0x146/0xa50 [ 323.684202][T10454] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.684216][T10454] ? ref_tracker_free+0x63a/0x7d0 [ 323.684238][T10454] ? __asan_memcpy+0x40/0x70 [ 323.684253][T10454] ? __pfx_ref_tracker_free+0x10/0x10 [ 323.684274][T10454] ? __skb_clone+0x63/0x7a0 [ 323.684304][T10454] netlink_rcv_skb+0x28c/0x470 [ 323.684320][T10454] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.684338][T10454] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.684366][T10454] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.684391][T10454] netlink_unicast+0x82f/0x9e0 [ 323.684424][T10454] ? __pfx_netlink_unicast+0x10/0x10 [ 323.684449][T10454] ? netlink_sendmsg+0x642/0xb30 [ 323.684464][T10454] ? skb_put+0x11b/0x210 [ 323.684484][T10454] netlink_sendmsg+0x805/0xb30 [ 323.684508][T10454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.684527][T10454] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.684547][T10454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.684560][T10454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.684574][T10454] __sock_sendmsg+0x219/0x270 [ 323.684594][T10454] ____sys_sendmsg+0x505/0x830 [ 323.684614][T10454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.684636][T10454] ? import_iovec+0x74/0xa0 [ 323.684654][T10454] ___sys_sendmsg+0x21f/0x2a0 [ 323.684671][T10454] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.684714][T10454] ? __fget_files+0x2a/0x420 [ 323.684730][T10454] ? __fget_files+0x3a0/0x420 [ 323.684778][T10454] __x64_sys_sendmsg+0x19b/0x260 [ 323.684796][T10454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.684818][T10454] ? __pfx_ksys_write+0x10/0x10 [ 323.684832][T10454] ? rcu_is_watching+0x15/0xb0 [ 323.684851][T10454] ? do_syscall_64+0xbe/0x3b0 [ 323.684867][T10454] do_syscall_64+0xfa/0x3b0 [ 323.684883][T10454] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.684895][T10454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.684907][T10454] ? clear_bhb_loop+0x60/0xb0 [ 323.684923][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.684935][T10454] RIP: 0033:0x7f2ec278eec9 [ 323.684948][T10454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.684959][T10454] RSP: 002b:00007f2ec35c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.684974][T10454] RAX: ffffffffffffffda RBX: 00007f2ec29e5fa0 RCX: 00007f2ec278eec9 [ 323.684984][T10454] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 323.684992][T10454] RBP: 00007f2ec35c1090 R08: 0000000000000000 R09: 0000000000000000 [ 323.684999][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.685007][T10454] R13: 00007f2ec29e6038 R14: 00007f2ec29e5fa0 R15: 00007ffd7b2db128 [ 323.685029][T10454] [ 324.071698][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 324.349665][ T5159] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 324.848836][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1470'. [ 325.435746][T10491] delete_channel: no stack [ 326.446131][T10500] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 327.279658][ T5159] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 327.544998][ T5159] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 327.858312][ T5159] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 327.873432][ T5159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 327.882887][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 327.882912][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 327.882924][ T5159] Workqueue: hci0 hci_rx_work [ 327.882952][ T5159] Call Trace: [ 327.882960][ T5159] [ 327.882968][ T5159] dump_stack_lvl+0x189/0x250 [ 327.882998][ T5159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.883020][ T5159] ? __pfx__printk+0x10/0x10 [ 327.883045][ T5159] ? kernfs_path_from_node+0x250/0x290 [ 327.883066][ T5159] ? kernfs_path_from_node+0x2f/0x290 [ 327.883090][ T5159] sysfs_create_dir_ns+0x259/0x280 [ 327.883111][ T5159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 327.883133][ T5159] ? do_raw_spin_unlock+0x122/0x240 [ 327.883163][ T5159] kobject_add_internal+0x59f/0xb40 [ 327.883194][ T5159] kobject_add+0x155/0x220 [ 327.883222][ T5159] ? __pfx_kobject_add+0x10/0x10 [ 327.883249][ T5159] ? _raw_spin_unlock+0x28/0x50 [ 327.883280][ T5159] ? get_device_parent+0x366/0x3a0 [ 327.883307][ T5159] device_add+0x408/0xb50 [ 327.883332][ T5159] hci_conn_add_sysfs+0xd5/0x1e0 [ 327.883360][ T5159] le_conn_complete_evt+0xf39/0x1500 [ 327.883396][ T5159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 327.883415][ T5159] ? __pfx_bt_warn+0x10/0x10 [ 327.883431][ T5159] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 327.883457][ T5159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 327.883474][ T5159] ? skb_pull_data+0xfb/0x200 [ 327.883502][ T5159] hci_le_conn_complete_evt+0x187/0x450 [ 327.883527][ T5159] hci_event_packet+0x78f/0x1200 [ 327.883553][ T5159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 327.883574][ T5159] ? __pfx_hci_event_packet+0x10/0x10 [ 327.883602][ T5159] ? kcov_remote_start+0x4d3/0x7f0 [ 327.883619][ T5159] ? warn_bogus_irq_restore+0x20/0x40 [ 327.883641][ T5159] ? hci_send_to_monitor+0xe2/0x570 [ 327.883666][ T5159] hci_rx_work+0x46a/0xe80 [ 327.883699][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 327.883722][ T5159] process_scheduled_works+0xade/0x17b0 [ 327.883776][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.883815][ T5159] worker_thread+0x8a0/0xda0 [ 327.883839][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.883874][ T5159] ? __kthread_parkme+0x7b/0x200 [ 327.883907][ T5159] kthread+0x711/0x8a0 [ 327.883934][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 327.883953][ T5159] ? __pfx_kthread+0x10/0x10 [ 327.883976][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.884000][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.884014][ T5159] ? __pfx_kthread+0x10/0x10 [ 327.884038][ T5159] ret_from_fork+0x436/0x7d0 [ 327.884062][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 327.884089][ T5159] ? __switch_to_asm+0x39/0x70 [ 327.884110][ T5159] ? __switch_to_asm+0x33/0x70 [ 327.884132][ T5159] ? __pfx_kthread+0x10/0x10 [ 327.884157][ T5159] ret_from_fork_asm+0x1a/0x30 [ 327.884198][ T5159] [ 327.884523][ T5159] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 328.080531][T10522] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 328.086754][ T5159] Bluetooth: hci0: failed to register connection device [ 328.470941][T10533] lo speed is unknown, defaulting to 1000 [ 328.599771][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1487'. [ 328.666794][T10537] delete_channel: no stack [ 328.889547][ T5859] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 329.356458][T10550] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 329.481486][ T5859] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 330.005246][T10558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 330.438328][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 331.267699][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 331.382853][T10591] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1506'. [ 331.405678][T10576] delete_channel: no stack [ 331.623275][T10600] netlink: 'syz.0.1509': attribute type 27 has an invalid length. [ 331.626683][ T5859] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 331.639821][ T5859] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 331.650457][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 331.650482][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 331.650494][ T5859] Workqueue: hci2 hci_rx_work [ 331.650522][ T5859] Call Trace: [ 331.650529][ T5859] [ 331.650537][ T5859] dump_stack_lvl+0x189/0x250 [ 331.650567][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.650589][ T5859] ? __pfx__printk+0x10/0x10 [ 331.650614][ T5859] ? kernfs_path_from_node+0x250/0x290 [ 331.650632][ T5859] ? kernfs_path_from_node+0x2f/0x290 [ 331.650655][ T5859] sysfs_create_dir_ns+0x259/0x280 [ 331.650677][ T5859] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 331.650697][ T5859] ? do_raw_spin_unlock+0x122/0x240 [ 331.650727][ T5859] kobject_add_internal+0x59f/0xb40 [ 331.650758][ T5859] kobject_add+0x155/0x220 [ 331.650785][ T5859] ? __pfx_kobject_add+0x10/0x10 [ 331.650807][ T5859] ? _raw_spin_unlock+0x28/0x50 [ 331.650835][ T5859] ? get_device_parent+0x366/0x3a0 [ 331.650862][ T5859] device_add+0x408/0xb50 [ 331.650887][ T5859] hci_conn_add_sysfs+0xd5/0x1e0 [ 331.650914][ T5859] le_conn_complete_evt+0xf39/0x1500 [ 331.650957][ T5859] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 331.650978][ T5859] ? __pfx_bt_warn+0x10/0x10 [ 331.650995][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 331.651022][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 331.651040][ T5859] ? skb_pull_data+0xfb/0x200 [ 331.651071][ T5859] hci_le_conn_complete_evt+0x187/0x450 [ 331.651098][ T5859] hci_event_packet+0x78f/0x1200 [ 331.651127][ T5859] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 331.651148][ T5859] ? __pfx_hci_event_packet+0x10/0x10 [ 331.651175][ T5859] ? kcov_remote_start+0x4d3/0x7f0 [ 331.651193][ T5859] ? warn_bogus_irq_restore+0x20/0x40 [ 331.651215][ T5859] ? hci_send_to_monitor+0xe2/0x570 [ 331.651238][ T5859] hci_rx_work+0x46a/0xe80 [ 331.651272][ T5859] ? process_scheduled_works+0x9ef/0x17b0 [ 331.651295][ T5859] process_scheduled_works+0xade/0x17b0 [ 331.651353][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.651393][ T5859] worker_thread+0x8a0/0xda0 [ 331.651444][ T5859] kthread+0x711/0x8a0 [ 331.651472][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 331.651492][ T5859] ? __pfx_kthread+0x10/0x10 [ 331.651518][ T5859] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.651543][ T5859] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.651559][ T5859] ? __pfx_kthread+0x10/0x10 [ 331.651584][ T5859] ret_from_fork+0x436/0x7d0 [ 331.651605][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 331.651630][ T5859] ? __switch_to_asm+0x39/0x70 [ 331.651649][ T5859] ? __switch_to_asm+0x33/0x70 [ 331.651668][ T5859] ? __pfx_kthread+0x10/0x10 [ 331.651693][ T5859] ret_from_fork_asm+0x1a/0x30 [ 331.651735][ T5859] [ 331.651763][ T5859] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 331.715318][T10600] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1509'. [ 331.720778][ T5859] Bluetooth: hci2: failed to register connection device [ 332.349155][T10609] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 332.432402][T10619] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1515'. [ 332.564679][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 332.805326][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 332.841968][T10631] delete_channel: no stack [ 333.132465][T10613] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 333.448039][T10641] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1519'. [ 333.850730][ T5859] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 333.858635][ T5859] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 333.868445][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 333.868469][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 333.868481][ T5859] Workqueue: hci2 hci_rx_work [ 333.868508][ T5859] Call Trace: [ 333.868515][ T5859] [ 333.868522][ T5859] dump_stack_lvl+0x189/0x250 [ 333.868550][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.868572][ T5859] ? __pfx__printk+0x10/0x10 [ 333.868596][ T5859] ? kernfs_path_from_node+0x250/0x290 [ 333.868613][ T5859] ? kernfs_path_from_node+0x2f/0x290 [ 333.868636][ T5859] sysfs_create_dir_ns+0x259/0x280 [ 333.868655][ T5859] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 333.868676][ T5859] ? do_raw_spin_unlock+0x122/0x240 [ 333.868704][ T5859] kobject_add_internal+0x59f/0xb40 [ 333.868735][ T5859] kobject_add+0x155/0x220 [ 333.868761][ T5859] ? __pfx_kobject_add+0x10/0x10 [ 333.868781][ T5859] ? _raw_spin_unlock+0x28/0x50 [ 333.868806][ T5859] ? get_device_parent+0x366/0x3a0 [ 333.868829][ T5859] device_add+0x408/0xb50 [ 333.868853][ T5859] hci_conn_add_sysfs+0xd5/0x1e0 [ 333.868876][ T5859] le_conn_complete_evt+0xf39/0x1500 [ 333.868906][ T5859] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 333.868923][ T5859] ? __pfx_bt_warn+0x10/0x10 [ 333.868938][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 333.868962][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.868980][ T5859] ? skb_pull_data+0xfb/0x200 [ 333.869010][ T5859] hci_le_conn_complete_evt+0x187/0x450 [ 333.869046][ T5859] hci_event_packet+0x78f/0x1200 [ 333.869076][ T5859] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 333.869096][ T5859] ? __pfx_hci_event_packet+0x10/0x10 [ 333.869116][ T5859] ? kcov_remote_start+0x4d3/0x7f0 [ 333.869131][ T5859] ? warn_bogus_irq_restore+0x20/0x40 [ 333.869152][ T5859] ? hci_send_to_monitor+0xe2/0x570 [ 333.869172][ T5859] hci_rx_work+0x46a/0xe80 [ 333.869206][ T5859] ? process_scheduled_works+0x9ef/0x17b0 [ 333.869228][ T5859] process_scheduled_works+0xade/0x17b0 [ 333.869279][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.869317][ T5859] worker_thread+0x8a0/0xda0 [ 333.869366][ T5859] kthread+0x711/0x8a0 [ 333.869393][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 333.869412][ T5859] ? __pfx_kthread+0x10/0x10 [ 333.869437][ T5859] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.869461][ T5859] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.869476][ T5859] ? __pfx_kthread+0x10/0x10 [ 333.869500][ T5859] ret_from_fork+0x436/0x7d0 [ 333.869523][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 333.869549][ T5859] ? __switch_to_asm+0x39/0x70 [ 333.869570][ T5859] ? __switch_to_asm+0x33/0x70 [ 333.869589][ T5859] ? __pfx_kthread+0x10/0x10 [ 333.869611][ T5859] ret_from_fork_asm+0x1a/0x30 [ 333.869645][ T5859] [ 333.869681][ T5859] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 334.065433][T10649] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1525'. [ 334.070516][ T5859] Bluetooth: hci2: failed to register connection device [ 334.168995][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 334.558455][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 334.595651][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1531'. [ 334.665911][T10660] delete_channel: no stack [ 335.456602][T10649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.562201][T10649] bond0 (unregistering): Released all slaves [ 335.916794][T10676] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 336.202572][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 336.401117][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1544'. [ 336.409264][T10697] netlink: 'syz.2.1541': attribute type 10 has an invalid length. [ 336.428426][T10697] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1541'. [ 336.781184][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 337.172383][T10715] rdma_rxe: rxe_newlink: failed to add lo [ 337.368240][T10704] delete_channel: no stack [ 340.045690][T10726] netlink: 'syz.3.1553': attribute type 21 has an invalid length. [ 340.077078][T10726] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1553'. [ 340.123206][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 340.188504][T10731] syz2: rxe_newlink: already configured on lo [ 340.375086][T10741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1559'. [ 340.534830][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1563'. [ 340.611774][T10753] openvswitch: netlink: Multiple metadata blocks provided [ 340.704603][T10757] rdma_rxe: rxe_newlink: failed to add lo [ 340.745698][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 340.783981][T10761] sit0: entered allmulticast mode [ 340.811725][T10761] sit0: entered promiscuous mode [ 341.389297][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1569'. [ 341.550304][T10774] rdma_rxe: rxe_newlink: failed to add lo [ 342.237460][T10784] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 342.369985][ T5859] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 342.995456][ T5859] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 343.351146][T10811] rdma_rxe: rxe_newlink: failed to add lo [ 344.462459][ T5159] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 344.775453][T10840] siw: device registration error -23 [ 344.817114][T10842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1595'. [ 345.078372][ T5159] Bluetooth: hci5: command 0x0406 tx timeout [ 347.197275][T10842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.434813][T10848] rdma_rxe: rxe_newlink: failed to add lo [ 347.527609][ T5159] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 347.536044][ T5159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 347.545752][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 347.545776][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.545789][ T5159] Workqueue: hci4 hci_rx_work [ 347.545818][ T5159] Call Trace: [ 347.545825][ T5159] [ 347.545833][ T5159] dump_stack_lvl+0x189/0x250 [ 347.545862][ T5159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.545885][ T5159] ? __pfx__printk+0x10/0x10 [ 347.545909][ T5159] ? kernfs_path_from_node+0x250/0x290 [ 347.545927][ T5159] ? kernfs_path_from_node+0x2f/0x290 [ 347.545950][ T5159] sysfs_create_dir_ns+0x259/0x280 [ 347.545972][ T5159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 347.545994][ T5159] ? do_raw_spin_unlock+0x122/0x240 [ 347.546023][ T5159] kobject_add_internal+0x59f/0xb40 [ 347.546063][ T5159] kobject_add+0x155/0x220 [ 347.546090][ T5159] ? __pfx_kobject_add+0x10/0x10 [ 347.546112][ T5159] ? _raw_spin_unlock+0x28/0x50 [ 347.546141][ T5159] ? get_device_parent+0x366/0x3a0 [ 347.546167][ T5159] device_add+0x408/0xb50 [ 347.546192][ T5159] hci_conn_add_sysfs+0xd5/0x1e0 [ 347.546219][ T5159] le_conn_complete_evt+0xf39/0x1500 [ 347.546252][ T5159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 347.546271][ T5159] ? __pfx_bt_warn+0x10/0x10 [ 347.546287][ T5159] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 347.546313][ T5159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 347.546330][ T5159] ? skb_pull_data+0xfb/0x200 [ 347.546359][ T5159] hci_le_conn_complete_evt+0x187/0x450 [ 347.546386][ T5159] hci_event_packet+0x78f/0x1200 [ 347.546414][ T5159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 347.546435][ T5159] ? __pfx_hci_event_packet+0x10/0x10 [ 347.546461][ T5159] ? kcov_remote_start+0x4d3/0x7f0 [ 347.546478][ T5159] ? warn_bogus_irq_restore+0x20/0x40 [ 347.546499][ T5159] ? hci_send_to_monitor+0xe2/0x570 [ 347.546522][ T5159] hci_rx_work+0x46a/0xe80 [ 347.546555][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 347.546577][ T5159] process_scheduled_works+0xade/0x17b0 [ 347.546629][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 347.546668][ T5159] worker_thread+0x8a0/0xda0 [ 347.546691][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.546726][ T5159] ? __kthread_parkme+0x7b/0x200 [ 347.546758][ T5159] kthread+0x711/0x8a0 [ 347.546784][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 347.546802][ T5159] ? __pfx_kthread+0x10/0x10 [ 347.546827][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.546851][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.546865][ T5159] ? __pfx_kthread+0x10/0x10 [ 347.546889][ T5159] ret_from_fork+0x436/0x7d0 [ 347.546913][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 347.546939][ T5159] ? __switch_to_asm+0x39/0x70 [ 347.546960][ T5159] ? __switch_to_asm+0x33/0x70 [ 347.546981][ T5159] ? __pfx_kthread+0x10/0x10 [ 347.547012][ T5159] ret_from_fork_asm+0x1a/0x30 [ 347.547060][ T5159] [ 347.547088][ T5159] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 347.758457][ T5859] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 347.762249][ T5159] Bluetooth: hci4: failed to register connection device [ 347.981864][ T5858] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 348.368629][T10869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1605'. [ 349.563037][ T5858] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 349.571077][ T5858] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 349.580931][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 349.580957][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.580970][ T5858] Workqueue: hci0 hci_rx_work [ 349.580999][ T5858] Call Trace: [ 349.581007][ T5858] [ 349.581015][ T5858] dump_stack_lvl+0x189/0x250 [ 349.581043][ T5858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.581064][ T5858] ? __pfx__printk+0x10/0x10 [ 349.581083][ T5858] ? kernfs_path_from_node+0x250/0x290 [ 349.581098][ T5858] ? kernfs_path_from_node+0x2f/0x290 [ 349.581117][ T5858] sysfs_create_dir_ns+0x259/0x280 [ 349.581134][ T5858] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 349.581151][ T5858] ? do_raw_spin_unlock+0x122/0x240 [ 349.581174][ T5858] kobject_add_internal+0x59f/0xb40 [ 349.581198][ T5858] kobject_add+0x155/0x220 [ 349.581218][ T5858] ? __pfx_kobject_add+0x10/0x10 [ 349.581234][ T5858] ? _raw_spin_unlock+0x28/0x50 [ 349.581257][ T5858] ? get_device_parent+0x366/0x3a0 [ 349.581276][ T5858] device_add+0x408/0xb50 [ 349.581295][ T5858] hci_conn_add_sysfs+0xd5/0x1e0 [ 349.581316][ T5858] le_conn_complete_evt+0xf39/0x1500 [ 349.581342][ T5858] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 349.581356][ T5858] ? __pfx_bt_warn+0x10/0x10 [ 349.581368][ T5858] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 349.581388][ T5858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.581401][ T5858] ? skb_pull_data+0xfb/0x200 [ 349.581423][ T5858] hci_le_conn_complete_evt+0x187/0x450 [ 349.581443][ T5858] hci_event_packet+0x78f/0x1200 [ 349.581464][ T5858] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 349.581481][ T5858] ? __pfx_hci_event_packet+0x10/0x10 [ 349.581500][ T5858] ? kcov_remote_start+0x4d3/0x7f0 [ 349.581514][ T5858] ? warn_bogus_irq_restore+0x20/0x40 [ 349.581530][ T5858] ? hci_send_to_monitor+0xe2/0x570 [ 349.581547][ T5858] hci_rx_work+0x46a/0xe80 [ 349.581572][ T5858] ? process_scheduled_works+0x9ef/0x17b0 [ 349.581589][ T5858] process_scheduled_works+0xade/0x17b0 [ 349.581637][ T5858] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.581667][ T5858] worker_thread+0x8a0/0xda0 [ 349.581706][ T5858] kthread+0x711/0x8a0 [ 349.581729][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 349.581744][ T5858] ? __pfx_kthread+0x10/0x10 [ 349.581764][ T5858] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.581783][ T5858] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.581794][ T5858] ? __pfx_kthread+0x10/0x10 [ 349.581813][ T5858] ret_from_fork+0x436/0x7d0 [ 349.581831][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 349.581852][ T5858] ? __switch_to_asm+0x39/0x70 [ 349.581872][ T5858] ? __switch_to_asm+0x33/0x70 [ 349.581890][ T5858] ? __pfx_kthread+0x10/0x10 [ 349.581908][ T5858] ret_from_fork_asm+0x1a/0x30 [ 349.581939][ T5858] [ 349.582524][ T5858] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 349.658921][T10884] rdma_rxe: rxe_newlink: failed to add lo [ 349.662702][ T5858] Bluetooth: hci0: failed to register connection device [ 349.803610][ T5159] Bluetooth: hci1: command 0x0406 tx timeout [ 349.881927][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 349.976038][ T5159] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 350.155971][ T5159] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 350.164824][ T5159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 350.178017][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 350.178044][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.178057][ T5159] Workqueue: hci4 hci_rx_work [ 350.178084][ T5159] Call Trace: [ 350.178091][ T5159] [ 350.178098][ T5159] dump_stack_lvl+0x189/0x250 [ 350.178129][ T5159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.178151][ T5159] ? __pfx__printk+0x10/0x10 [ 350.178175][ T5159] ? kernfs_path_from_node+0x250/0x290 [ 350.178192][ T5159] ? kernfs_path_from_node+0x2f/0x290 [ 350.178214][ T5159] sysfs_create_dir_ns+0x259/0x280 [ 350.178234][ T5159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 350.178255][ T5159] ? do_raw_spin_unlock+0x122/0x240 [ 350.178283][ T5159] kobject_add_internal+0x59f/0xb40 [ 350.178313][ T5159] kobject_add+0x155/0x220 [ 350.178338][ T5159] ? __pfx_kobject_add+0x10/0x10 [ 350.178358][ T5159] ? _raw_spin_unlock+0x28/0x50 [ 350.178386][ T5159] ? get_device_parent+0x366/0x3a0 [ 350.178412][ T5159] device_add+0x408/0xb50 [ 350.178439][ T5159] hci_conn_add_sysfs+0xd5/0x1e0 [ 350.178467][ T5159] le_conn_complete_evt+0xf39/0x1500 [ 350.178504][ T5159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 350.178525][ T5159] ? __pfx_bt_warn+0x10/0x10 [ 350.178541][ T5159] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 350.178577][ T5159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 350.178595][ T5159] ? skb_pull_data+0xfb/0x200 [ 350.178626][ T5159] hci_le_conn_complete_evt+0x187/0x450 [ 350.178655][ T5159] hci_event_packet+0x78f/0x1200 [ 350.178684][ T5159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 350.178706][ T5159] ? __pfx_hci_event_packet+0x10/0x10 [ 350.178733][ T5159] ? kcov_remote_start+0x4d3/0x7f0 [ 350.178751][ T5159] ? warn_bogus_irq_restore+0x20/0x40 [ 350.178773][ T5159] ? hci_send_to_monitor+0xe2/0x570 [ 350.178796][ T5159] hci_rx_work+0x46a/0xe80 [ 350.178830][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 350.178853][ T5159] process_scheduled_works+0xade/0x17b0 [ 350.178909][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 350.178949][ T5159] worker_thread+0x8a0/0xda0 [ 350.178972][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 350.179008][ T5159] ? __kthread_parkme+0x7b/0x200 [ 350.179041][ T5159] kthread+0x711/0x8a0 [ 350.179070][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 350.179087][ T5159] ? __pfx_kthread+0x10/0x10 [ 350.179113][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.179138][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.179153][ T5159] ? __pfx_kthread+0x10/0x10 [ 350.179178][ T5159] ret_from_fork+0x436/0x7d0 [ 350.179207][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 350.179236][ T5159] ? __switch_to_asm+0x39/0x70 [ 350.179259][ T5159] ? __switch_to_asm+0x33/0x70 [ 350.179281][ T5159] ? __pfx_kthread+0x10/0x10 [ 350.179306][ T5159] ret_from_fork_asm+0x1a/0x30 [ 350.179351][ T5159] [ 350.179381][ T5159] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 350.468234][ T5159] Bluetooth: hci4: failed to register connection device [ 351.891819][ T5159] Bluetooth: hci0: command 0x0406 tx timeout [ 352.335889][T10902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1618'. [ 352.518619][ T5159] Bluetooth: hci4: command 0x0406 tx timeout [ 352.654580][T10917] rdma_rxe: rxe_newlink: failed to add lo [ 353.077769][T10928] netlink: 'syz.5.1628': attribute type 39 has an invalid length. [ 353.161080][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'. [ 353.726317][T10924] delete_channel: no stack [ 354.027697][ T5159] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 354.035586][ T5159] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 354.045106][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 354.045132][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.045144][ T5159] Workqueue: hci4 hci_rx_work [ 354.045172][ T5159] Call Trace: [ 354.045179][ T5159] [ 354.045188][ T5159] dump_stack_lvl+0x189/0x250 [ 354.045217][ T5159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.045240][ T5159] ? __pfx__printk+0x10/0x10 [ 354.045264][ T5159] ? kernfs_path_from_node+0x250/0x290 [ 354.045282][ T5159] ? kernfs_path_from_node+0x2f/0x290 [ 354.045305][ T5159] sysfs_create_dir_ns+0x259/0x280 [ 354.045336][ T5159] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 354.045358][ T5159] ? do_raw_spin_unlock+0x122/0x240 [ 354.045388][ T5159] kobject_add_internal+0x59f/0xb40 [ 354.045420][ T5159] kobject_add+0x155/0x220 [ 354.045446][ T5159] ? __pfx_kobject_add+0x10/0x10 [ 354.045468][ T5159] ? _raw_spin_unlock+0x28/0x50 [ 354.045497][ T5159] ? get_device_parent+0x366/0x3a0 [ 354.045524][ T5159] device_add+0x408/0xb50 [ 354.045550][ T5159] hci_conn_add_sysfs+0xd5/0x1e0 [ 354.045577][ T5159] le_conn_complete_evt+0xf39/0x1500 [ 354.045610][ T5159] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 354.045630][ T5159] ? __pfx_bt_warn+0x10/0x10 [ 354.045647][ T5159] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 354.045673][ T5159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 354.045691][ T5159] ? skb_pull_data+0xfb/0x200 [ 354.045720][ T5159] hci_le_conn_complete_evt+0x187/0x450 [ 354.045747][ T5159] hci_event_packet+0x78f/0x1200 [ 354.045775][ T5159] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 354.045796][ T5159] ? __pfx_hci_event_packet+0x10/0x10 [ 354.045822][ T5159] ? kcov_remote_start+0x4d3/0x7f0 [ 354.045839][ T5159] ? warn_bogus_irq_restore+0x20/0x40 [ 354.045860][ T5159] ? hci_send_to_monitor+0xe2/0x570 [ 354.045883][ T5159] hci_rx_work+0x46a/0xe80 [ 354.045917][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 354.045939][ T5159] process_scheduled_works+0xade/0x17b0 [ 354.045991][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 354.046030][ T5159] worker_thread+0x8a0/0xda0 [ 354.046054][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 354.046093][ T5159] ? __kthread_parkme+0x7b/0x200 [ 354.046124][ T5159] kthread+0x711/0x8a0 [ 354.046152][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 354.046172][ T5159] ? __pfx_kthread+0x10/0x10 [ 354.046198][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.046223][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.046238][ T5159] ? __pfx_kthread+0x10/0x10 [ 354.046262][ T5159] ret_from_fork+0x436/0x7d0 [ 354.046285][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 354.046317][ T5159] ? __switch_to_asm+0x39/0x70 [ 354.046341][ T5159] ? __switch_to_asm+0x33/0x70 [ 354.046360][ T5159] ? __pfx_kthread+0x10/0x10 [ 354.046382][ T5159] ret_from_fork_asm+0x1a/0x30 [ 354.046418][ T5159] [ 354.046471][ T5159] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 354.338150][ T5159] Bluetooth: hci4: failed to register connection device [ 354.353248][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1633'. [ 354.647465][ T5859] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 354.827801][ T5838] ------------[ cut here ]------------ [ 354.833379][ T5838] ida_free called for id=981 which is not allocated. [ 354.888789][ T5838] WARNING: CPU: 1 PID: 5838 at lib/idr.c:592 ida_free+0x280/0x310 [ 354.896796][ T5838] Modules linked in: [ 354.900813][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 354.910750][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.921190][ T5838] RIP: 0010:ida_free+0x280/0x310 [ 354.926149][ T5838] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 71 2c 0c 00 90 48 c7 c7 a0 7b 76 8c 44 89 fe e8 41 11 54 f6 90 <0f> 0b 90 90 eb 34 e8 85 a2 90 f6 49 bd 00 00 00 00 00 fc ff df eb [ 354.947075][ T5838] RSP: 0018:ffffc9000406fac0 EFLAGS: 00010246 [ 354.954152][ T5838] RAX: 7e2a7bf8826b6000 RBX: 0000000000000a06 RCX: ffff888027635ac0 [ 354.962726][ T5838] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 354.972142][ T5838] RBP: ffffc9000406fba8 R08: 0000000000000003 R09: 0000000000000004 [ 354.980705][ T5838] R10: dffffc0000000000 R11: fffffbfff1b7a138 R12: 1ffff9200080df5c [ 354.989362][ T5838] R13: dffffc0000000000 R14: ffff888140eaa000 R15: 00000000000003d5 [ 354.997372][ T5838] FS: 0000000000000000(0000) GS:ffff888126473000(0000) knlGS:0000000000000000 [ 355.006904][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.014308][ T5838] CR2: 000055558caad808 CR3: 0000000053aba000 CR4: 00000000003526f0 [ 355.023623][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.032218][ T5838] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 355.040261][ T5838] Call Trace: [ 355.043570][ T5838] [ 355.046513][ T5838] ? __pfx_ida_free+0x10/0x10 [ 355.051257][ T5838] ? namespace_unlock+0x486/0x760 [ 355.056306][ T5838] free_mnt_ns+0x52/0xe0 [ 355.060604][ T5838] namespace_unlock+0x529/0x760 [ 355.065476][ T5838] ? __pfx_namespace_unlock+0x10/0x10 [ 355.070918][ T5838] ? free_nsproxy+0x3e/0x350 [ 355.075535][ T5838] free_nsproxy+0x3e/0x350 [ 355.080087][ T5838] do_exit+0x6b0/0x2300 [ 355.084269][ T5838] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 355.089712][ T5838] ? __pfx_do_exit+0x10/0x10 [ 355.094332][ T5838] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.099664][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.104881][ T5838] do_group_exit+0x21c/0x2d0 [ 355.109563][ T5838] __x64_sys_exit_group+0x3f/0x40 [ 355.114611][ T5838] x64_sys_call+0x21f7/0x2200 [ 355.119369][ T5838] do_syscall_64+0xfa/0x3b0 [ 355.124637][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.130273][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.136358][ T5838] ? clear_bhb_loop+0x60/0xb0 [ 355.141105][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.147010][ T5838] RIP: 0033:0x7fcaa938eec9 [ 355.151512][ T5838] Code: Unable to access opcode bytes at 0x7fcaa938ee9f. [ 355.158609][ T5838] RSP: 002b:00007fff230f4828 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 355.167132][ T5838] RAX: ffffffffffffffda RBX: 00007fcaa9411def RCX: 00007fcaa938eec9 [ 355.175171][ T5838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 355.183179][ T5838] RBP: 0000000000000016 R08: 00007fff230f25c6 R09: 00007fff230f5ae0 [ 355.191218][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff230f5ae0 [ 355.199225][ T5838] R13: 00007fcaa9411d7d R14: 000055556061e4a8 R15: 00007fff230f8d90 [ 355.207226][ T5838] [ 355.210339][ T5838] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.217619][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 355.227063][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 355.237110][ T5838] Call Trace: [ 355.240413][ T5838] [ 355.243347][ T5838] dump_stack_lvl+0x99/0x250 [ 355.247951][ T5838] ? __asan_memcpy+0x40/0x70 [ 355.252545][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.257829][ T5838] ? __pfx__printk+0x10/0x10 [ 355.262417][ T5838] vpanic+0x281/0x750 [ 355.266398][ T5838] ? __pfx__printk+0x10/0x10 [ 355.271061][ T5838] ? __pfx_vpanic+0x10/0x10 [ 355.275560][ T5838] ? is_bpf_text_address+0x26/0x2b0 [ 355.280752][ T5838] panic+0xb9/0xc0 [ 355.284470][ T5838] ? __pfx_panic+0x10/0x10 [ 355.288887][ T5838] __warn+0x31b/0x4b0 [ 355.292858][ T5838] ? ida_free+0x280/0x310 [ 355.297173][ T5838] ? ida_free+0x280/0x310 [ 355.301496][ T5838] report_bug+0x2be/0x4f0 [ 355.305812][ T5838] ? ida_free+0x280/0x310 [ 355.310129][ T5838] ? ida_free+0x280/0x310 [ 355.314449][ T5838] ? ida_free+0x282/0x310 [ 355.318763][ T5838] handle_bug+0x84/0x160 [ 355.322998][ T5838] exc_invalid_op+0x1a/0x50 [ 355.327486][ T5838] asm_exc_invalid_op+0x1a/0x20 [ 355.332322][ T5838] RIP: 0010:ida_free+0x280/0x310 [ 355.337249][ T5838] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 71 2c 0c 00 90 48 c7 c7 a0 7b 76 8c 44 89 fe e8 41 11 54 f6 90 <0f> 0b 90 90 eb 34 e8 85 a2 90 f6 49 bd 00 00 00 00 00 fc ff df eb [ 355.356843][ T5838] RSP: 0018:ffffc9000406fac0 EFLAGS: 00010246 [ 355.362905][ T5838] RAX: 7e2a7bf8826b6000 RBX: 0000000000000a06 RCX: ffff888027635ac0 [ 355.370859][ T5838] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 355.378834][ T5838] RBP: ffffc9000406fba8 R08: 0000000000000003 R09: 0000000000000004 [ 355.386812][ T5838] R10: dffffc0000000000 R11: fffffbfff1b7a138 R12: 1ffff9200080df5c [ 355.394796][ T5838] R13: dffffc0000000000 R14: ffff888140eaa000 R15: 00000000000003d5 [ 355.402807][ T5838] ? __pfx_ida_free+0x10/0x10 [ 355.407494][ T5838] ? namespace_unlock+0x486/0x760 [ 355.412516][ T5838] free_mnt_ns+0x52/0xe0 [ 355.416747][ T5838] namespace_unlock+0x529/0x760 [ 355.421595][ T5838] ? __pfx_namespace_unlock+0x10/0x10 [ 355.426964][ T5838] ? free_nsproxy+0x3e/0x350 [ 355.431543][ T5838] free_nsproxy+0x3e/0x350 [ 355.435949][ T5838] do_exit+0x6b0/0x2300 [ 355.440097][ T5838] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 355.445462][ T5838] ? __pfx_do_exit+0x10/0x10 [ 355.450055][ T5838] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.455246][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.460432][ T5838] do_group_exit+0x21c/0x2d0 [ 355.465019][ T5838] __x64_sys_exit_group+0x3f/0x40 [ 355.470032][ T5838] x64_sys_call+0x21f7/0x2200 [ 355.474700][ T5838] do_syscall_64+0xfa/0x3b0 [ 355.479199][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.484385][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.490445][ T5838] ? clear_bhb_loop+0x60/0xb0 [ 355.495109][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.500986][ T5838] RIP: 0033:0x7fcaa938eec9 [ 355.505383][ T5838] Code: Unable to access opcode bytes at 0x7fcaa938ee9f. [ 355.512555][ T5838] RSP: 002b:00007fff230f4828 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 355.520957][ T5838] RAX: ffffffffffffffda RBX: 00007fcaa9411def RCX: 00007fcaa938eec9 [ 355.528917][ T5838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 355.536872][ T5838] RBP: 0000000000000016 R08: 00007fff230f25c6 R09: 00007fff230f5ae0 [ 355.544831][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff230f5ae0 [ 355.552786][ T5838] R13: 00007fcaa9411d7d R14: 000055556061e4a8 R15: 00007fff230f8d90 [ 355.560758][ T5838] [ 355.564214][ T5838] Kernel Offset: disabled [ 355.568546][ T5838] Rebooting in 86400 seconds..