last executing test programs: 17m59.181541165s ago: executing program 2 (id=3): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x10, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='/\a\"xI', 0x5}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000), 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xda, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x10000, 0x92, 0xfffffffd, 0x2050, 0xffffffffffffffff, 0x707, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x7}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r5, 0x31, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0]}, 0x40) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x38}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 17m59.044795903s ago: executing program 1 (id=2): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x5, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x108, 0x0, 0x0, 0x8, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x2, 0x88) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x3, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01008b8183c58bfc38120c0000000c00e6ff0500000003005cb100000013040000000030edecc4b4a0edc970a9bcdcbe5951e9d0c91f0a7ca98c295584b5a9c5a0bea153d94d61775a4215264459909bdb568945a4f26f5ebf"], &(0x7f0000000340)=""/167, 0x2b, 0xa7, 0x1, 0xfffffffe}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0xe402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r8}, 0x18) 17m58.606986829s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="14000000320081024e817903dbdcda3d0f3f1696", 0x14}], 0x1}, 0x4000) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200)) 17m58.558095215s ago: executing program 0 (id=1): socket$kcm(0x21, 0x6, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='*\x00') write$cgroup_type(r4, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d40)=ANY=[@ANYRES32=r0, @ANYRES8=r3, @ANYBLOB="1a0000000020000020000000", @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES64=r4, @ANYRES64=r0], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a5, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x81, 0xff, 0x3, 0xf, 0x0, 0x4, 0x440, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x96, 0x1, @perf_config_ext={0x1310, 0x7}, 0x120, 0xfffffffffffffff4, 0xfffffffa, 0x5, 0x2, 0x6, 0x4, 0x0, 0x485, 0x0, 0xb0000000}, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x1) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={0x0, 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x4, 0x1ff, 0x5}, 0x10, 0x1729b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@fallback=r10, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32=r11, @ANYBLOB="2e0000003000001f58040000232015bc6d3b98189986eab4f5e6444d9c6527ff367047d3a35fc3c64382cc20dbde8ea98a368e1d2ff1b1ade083ab9b6ed91e8bb069744f94301c1b891b44fb1e1f61d329b148a9f749ec56bd41375ff392b2", @ANYRES32=0x0, @ANYRES64=r12], 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r9, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32=r13, @ANYRES32=r8, @ANYBLOB="2a0000002400000000000000592403b8ab774e9d64fd96f1111e88fb385c6528c5a34a140d55762f2be9088ea9df0aad67dd538c4fc16136ef9af4c3c55a366aac5a559ae4df8e8fd4c8d731ce3c31d15c8c11e0050e1ae7b56c29248f6d690e98b08de5a213441219866a5a01296ec6bdda7fcc1645194bde835ee5fdacc54c2873f52af96d43ff0f0000154dfcac6c86e1ef1482ce4f21b9a00f62e947b55e38776496fd5ecd62c1e6e530e868289206ca33", @ANYRES32=r14, @ANYRES64=r12], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB=')\x00\x00\x001\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="cb", @ANYRES32=r14, @ANYRES64=0x0], 0x20) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}, 0x3e8) 17m58.303260008s ago: executing program 0 (id=6): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8c0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2a}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 17m58.301062438s ago: executing program 1 (id=7): socket$kcm(0x1e, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d000c6c7ea60864160af365040043000a001d002b7f6f4c9ee517d34460bc060000f0a705651e6182949a3651f60a84f709d182c5bb5b64f69853362a65a113827e4b4237268a9a", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700050005"], 0xfe33) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000600000000000000000000001800"/27], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000004040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000040000000b705000008000000850000003900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r6}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000b985840600000000020000000000"], &(0x7f0000000600)=""/4, 0x1a, 0x4, 0x1}, 0x28) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x60044084) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) 17m58.262635383s ago: executing program 3 (id=8): socket$kcm(0x2, 0x1, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) recvmsg$unix(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002280)=""/145, 0x91}, {&(0x7f0000002340)=""/79, 0x4f}, {&(0x7f00000023c0)=""/255, 0xff}, {&(0x7f00000024c0)=""/233, 0xe9}, {&(0x7f00000025c0)=""/7, 0x7}, {&(0x7f0000002600)=""/228, 0xe4}, {&(0x7f0000002700)=""/139, 0x8b}, {&(0x7f00000027c0)=""/157, 0x9d}], 0x8, &(0x7f0000002900)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x40002322) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={r4, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000001e40)=[0x0], &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000001ec0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001f00), &(0x7f0000001f40), 0x8, 0x67, 0x8, 0x8, &(0x7f0000001f80)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0x7, &(0x7f0000001d80)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000001dc0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41000, 0x4, '\x00', r8, 0x0, r0, 0x8, &(0x7f0000002100)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000002140)={0x4, 0x9, 0x80000001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002180)=[r5, r5, r5, r7, r5, r5], 0x0, 0x10, 0x81}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000001d40)={&(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001c80)=[{&(0x7f00000019c0)="370e06c2aa5068212321c4e3a26bb519587952d807e42a123f9fb7b8c4f4d0f5cb72065d0306434fb8b687e0ace0c03b3fb497b3af933de7128557151aba496cfdf2dac21ec7d1b761cf3f4f77f114eb0b409eae3d080988bcd942e684b5a90b7b2cbbb95c773a7c5272a96ec5d89529588d45dec6ceec3a959bd96dcbec6e48b78d4183a1dbfa69de9e0c0e02315d0ee8e8b3942f4be0066e9dc17bc2a6a99304260a1881a3f80dc689db6e12dd5b1864d6864653caea6d3c", 0xb9}, {&(0x7f0000001a80)="5a79e9e84d1dbd2082ed15f7b6c613c756153e5bbc0b6c8a235097093517f3ebba4ace7d38cd91ae8be41c0b0d1e16753db3b241cbe1a2c54fb984d12746323e69a61b6042f466b1d0f609ad4eb7f00bcb9bb1f586a8c35b1b17c5685ad6e599337214d23c0713014e926c21ce29053575e983586bdad59ac19c0720407c79cd42a12505c63a0f3afa3ca6a42cc37fa853f31249b227b24fad23354d66f278313696ec0678edbd7bf833e86a0db238c71a9feb31372fedf09b1191b98227b97f54e1e9a0ba12c363bac74c854563432c524a34de", 0xd4}, {&(0x7f0000000180)="bab7c769f2a261a8f90f49566e72c55b16d4040f090a26", 0x17}, {&(0x7f0000001b80)="a2a91e2b4091596d973adc5e7b9de05048e8bd7df94297561200410a5b76576a681bd5042d9030bd8af23ebc0040fb43c18eaf4bd82f1e3d6b4287d515384245fb200f5517c7e4750862eab21d44ed03dc61b4e10c98224180816a7df22527ef0a473d558add52de5cac5bc78870b090a1dab63c88e96001e8e76f0ff6ce47636098c88bf06ac24a7b72ef5a858999798e5b1436a3b442bc92832f1109452d853376f295298ebdd9809c627fec3f735af9ac4a57b9ea", 0xb6}, {&(0x7f0000001c40)="44596e2bd61b9debaf4580cac5c46022452709c56bfd", 0x16}], 0x5, &(0x7f0000001d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x4044014) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r9, 0x29, 0x48, &(0x7f0000000100)=r10, 0x120) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0) 17m58.220746819s ago: executing program 4 (id=5): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x86008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/user\x00') r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x80, &(0x7f00000001c0)}, 0x8000) r3 = perf_event_open$cgroup(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x5, 0xfd, 0x5, 0x0, 0x80000000, 0x10, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x8008, 0x8, 0x2, 0x84a41cb25253a5be, 0x6, 0xb, 0x4, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xffffffffffffff1e) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00'}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000009500000000000000e5e72c3131887efa3a7760cba85342b8d0fce6e46a88e93e42aa276062b68d945479e86a875a4d2c001e979f2c8856b7512a03eee782bd91072374a7"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair(0x6, 0xa, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x4, 0x0, 0xf5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca481f7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x7, 0x42, 0x3, 0x0, 0x0, 0x5d605, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x10137f, 0x7ff, 0x7, 0x2, 0x81, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x2) syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) 17m58.13196059s ago: executing program 2 (id=9): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000880)=""/174, 0xae, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b4861ea30df81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf5"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x22}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000500)='neigh_update\x00', r7}, 0x18) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000736fc00070000000000000018040000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r11}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, 0x0, 0x0, 0x4}, 0x20) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xf00, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 17m57.031751582s ago: executing program 0 (id=10): perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000400)=""/126, 0x7e}, {0x0}], 0x6, &(0x7f00000005c0)=""/57, 0x39}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x49, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008000000e27f00000100000041000000", @ANYRES32, @ANYBLOB], 0x48) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40000) 17m56.987135348s ago: executing program 4 (id=11): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x10, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='/\a\"xI', 0x5}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000), 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xda, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x10000, 0x92, 0xfffffffd, 0x2050, 0xffffffffffffffff, 0x707, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x7}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r5, 0x31, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0]}, 0x40) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x38}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 17m56.913926807s ago: executing program 1 (id=12): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="a2f9", 0x2}], 0x1}, 0x4006041) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) write$cgroup_int(r2, &(0x7f0000000240)=0x2, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, 0x0, 0x3000c0c4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.events\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r7}, 0x8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x894a, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r5) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r6, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 17m13.362975966s ago: executing program 32 (id=10): perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000400)=""/126, 0x7e}, {0x0}], 0x6, &(0x7f00000005c0)=""/57, 0x39}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x49, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008000000e27f00000100000041000000", @ANYRES32, @ANYBLOB], 0x48) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40000) 17m13.274601557s ago: executing program 33 (id=12): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="a2f9", 0x2}], 0x1}, 0x4006041) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) write$cgroup_int(r2, &(0x7f0000000240)=0x2, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, 0x0, 0x3000c0c4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.events\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r7}, 0x8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x894a, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r5) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r6, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 17m12.984233274s ago: executing program 35 (id=13): socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000010) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0xb3d8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x44f42a23c5719ff6, 0x80, 0x3, 0x85, 0x7f, 0x7, 0x0, 0x6, 0x10000, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x6}, 0x1000, 0x5, 0x2, 0x6, 0x3, 0x3, 0x6, 0x0, 0x1, 0x0, 0xad}, r2, 0x2000000000000003, r1, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) close(0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x1020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x78}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0x80ffffff}, {0x20}, {}, {}, {0x6}]}) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afe0000000009000000000000000000ff003b", 0x29}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000300), 0x2, 0x0) 17m12.843671603s ago: executing program 36 (id=11): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x10, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='/\a\"xI', 0x5}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000), 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xda, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x10000, 0x92, 0xfffffffd, 0x2050, 0xffffffffffffffff, 0x707, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x7}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r5, 0x31, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0]}, 0x40) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x38}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 2.723683799s ago: executing program 7 (id=7084): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x200}, 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x6b, 0x1, 0x1, 0x5f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x10, 0x0, &(0x7f0000000200)="26807800fb206f0100cf61e0b9547ed3", 0x0, 0x41ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='f2fs_readdir\x00', r0, 0x0, 0x80}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'pimreg0\x00', 0x7c2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000e4c000000010000850200000000000000020000000000000000000000da"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x28) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}) ioctl$SIOCSIFHWADDR(r0, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8f7ff0ff0600"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xfffffffffffffffe) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x40012043) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="09367d9715d7fd1be122c25f4b6ca824776d2c6b78ea81cccbacd820614cfb644c27ca65b3d41b16f7fefd3aae1c0ab31dcb7daf0238a40d3b41603f60bb23c8c7b6c98fd4547aeb135ea1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.547205841s ago: executing program 6 (id=7088): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x26, 0x0, 0xc2ba}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xc, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40000000000002}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000dc0000000000000010010000000000001401000000800000a77e5020c9fed937fbac8f1073ab8ed84783d1c9cf91eaca844d956cd76fe211d2f0b4476534eadbcabf40ae1b38813c3c62ea063932eadc5656b4a25e02d00c4c30fa73a7fc1b384facf2e1f3e22b15308716edea685ee392b4f6961921ddb4d48d0b8ef4fb590a16ca3ea91cbf87aa41515d58848e944d5f6368807051edf120c070dff217e3701a2c414cc6f6c89becf37166a7589f54e4c81bdd4d2edb053faa3e7a66e92a7ccb80a00e9c36cb06fb1d0e248290d7ab36a8e0a5fd5e0fcfbaa685ffa91a"], 0x280}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000c80)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0xb7, 0x5, 0xc, 0xfb, 0x0, 0xe74, 0x17780, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1000, 0x1, @perf_config_ext={0x100, 0x9}, 0x10000, 0x0, 0x9, 0x7, 0x1, 0x5, 0x7, 0x0, 0x9, 0x0, 0xbee2}, r2, 0xe, r3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000003f000061106d000000000063013849dca9"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = getpid() r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r6, r7, 0x0, 0x0, 0x0}, 0x30) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESDEC=r0], 0xffffffe6) 2.448624764s ago: executing program 7 (id=7099): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40040, 0x0) socket$kcm(0xf, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180)) 2.183322888s ago: executing program 5 (id=7091): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081044e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edb", 0xa2}], 0x1}, 0xc000) 2.059399055s ago: executing program 9 (id=7093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.94039126s ago: executing program 7 (id=7094): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a, 0x0, 0x40000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f0", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10b8}, 0x20044010) close(r2) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030200590200000000002f1eafbcf706e1050000008906", 0x18}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r4, 0x8) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 1.812256796s ago: executing program 5 (id=7095): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000ff08ffff0000000000000000850000004100000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000011c0)=""/105, 0x69}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/158, 0x9e}], 0x6}, 0x12002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000240)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1, &(0x7f0000000500)=""/194, 0xc2}, 0x2022) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10}, {0x18, 0x29, 0xb, '\x00'}], 0x28}, 0x0) 1.636440769s ago: executing program 9 (id=7096): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000088"], &(0x7f0000000000)=""/205, 0x28, 0xcd, 0x1}, 0x20) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r5, &(0x7f0000000780)}, 0x20) close(0x3) close(0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001800000000786c250000000000202020db1af8ff51000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) 1.557338119s ago: executing program 6 (id=7098): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) 1.428123986s ago: executing program 5 (id=7100): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x33fe0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f00000006c0)=""/4096}, 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x22) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.368790384s ago: executing program 8 (id=7101): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f00000000c0)="c00e020032000b35d25a806f8c6394f90324fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x3b}, 0x0) 1.324289469s ago: executing program 6 (id=7102): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40040, 0x0) socket$kcm(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) 1.279475395s ago: executing program 7 (id=7103): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000200), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/90, 0x5a}], 0x4, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40022122) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRES64, @ANYRESDEC=r3, @ANYRESOCT=r6, @ANYRESHEX=r6, @ANYRES16=r4, @ANYRES16=r5, @ANYRES64=r4], 0x1458}, 0x48800) r8 = gettid() sendmsg$unix(r0, &(0x7f0000000300)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000001c0)="9858652c3efc7cc3cbbac95d307d01cead9300b4d54f54a7b20aa7cdc744372118425e24be20b57eb3cc26441c138c3f0d26caeee02c798ad46c0612e0bab089e62176be52", 0x45}, {&(0x7f0000000240)="fbc4a31c79f45ecdfebbe571bb063bedfaf78c1624e0ec4ea456707f3ad14247db332129fced5ab35d293b93aae5d9f5d3796b6b2cba14dff50105d49a7082b444462ca546d4d672ffc44c43de5309d2340afe266d1f42ab8391470d5b68e390e066bbbc50c4e275b27ee3794bf2be65da821299832f2e4b8dd4", 0x7a}, {&(0x7f0000000400)="41e5972703565a8699067409d6ecdc7f0653fd168793f8c5e055b5e623c7f33b240c5a5bac95a2215dcb2604a46e670fd50e205e2885311ec2ce20f9245e5768a8f558f85eda3480b93147e10cbbdf59b510d009c06bed5bbb077aa58dd943b7a31e3485e15ce9", 0x67}, {&(0x7f0000000500)="8412763624cd715a21f67745ae609673c1286459902834770ec60766f651d778ac54ef152b8005b21c1f73d69aad7f44c44b1f4b344564c745935135cb9cf5551b49d48662654deca1ae04daa8aaf911e03e78914679d90743580f41bf57aff7feb50ada7b22759c23d39a2c4ba8afe12cbae6b9547f23f83c876e362bda57c31488eb284782895c4b994521b58cc2b71effdbbbbd279ebd67b5aeb398568d5d8f95704fc87694d80f5f7671833422591272dde62ff83d7ff688e7", 0xbb}], 0x4, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r4}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee01}}}], 0x40, 0x400c0}, 0x40) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 1.278864175s ago: executing program 5 (id=7104): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfeff}, 0x80, 0x0}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x5, 0x80, 0x9, 0x81, 0x5, 0x1, 0x0, 0x8, 0x1328, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0xaafa}, 0x20, 0x6bdeca34, 0x80000000, 0x9, 0xfff, 0x1ff, 0x7fff, 0x0, 0x7, 0x0, 0x3}, r4, 0x4, r0, 0x2) 1.254573928s ago: executing program 9 (id=7105): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40040, 0x0) socket$kcm(0xf, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180)) 1.180069748s ago: executing program 8 (id=7106): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081044e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edb", 0xa2}], 0x1}, 0xc000) 1.173435059s ago: executing program 5 (id=7107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 875.245267ms ago: executing program 6 (id=7108): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0x20000001) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91424fc60040011000a7414004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 800.871927ms ago: executing program 5 (id=7109): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x26, 0x0, 0xc2ba}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xc, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40000000000002}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000dc0000000000000010010000000000001401000000800000a77e5020c9fed937fbac8f1073ab8ed84783d1c9cf91eaca844d956cd76fe211d2f0b4476534eadbcabf40ae1b38813c3c62ea063932eadc5656b4a25e02d00c4c30fa73a7fc1b384facf2e1f3e22b15308716edea685ee392b4f6961921ddb4d48d0b8ef4fb590a16ca3ea91cbf87aa41515d58848e944d5f6368807051edf120c070dff217e3701a2c414cc6f6c89becf37166a7589f54e4c81bdd4d2edb053faa3e7a66e92a7ccb80a00e9c36cb06fb1d0e248290d7ab36a8e0a5fd5e0fcfbaa685ffa91a"], 0x280}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000c80)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0xb7, 0x5, 0xc, 0xfb, 0x0, 0xe74, 0x17780, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1000, 0x1, @perf_config_ext={0x100, 0x9}, 0x10000, 0x0, 0x9, 0x7, 0x1, 0x5, 0x7, 0x0, 0x9, 0x0, 0xbee2}, r2, 0xe, r3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000003f000061106d000000000063013849dca9"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = getpid() r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r6, r7, 0x0, 0x0, 0x0}, 0x30) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESDEC=r0], 0xffffffe6) 800.467807ms ago: executing program 8 (id=7110): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x1ff) 708.442739ms ago: executing program 8 (id=7111): r0 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x4, 0xa, 0x6, 0xd, 0x0, 0x5, 0x10004, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x2, 0x0, 0x1, 0x2, 0x0, 0x82, 0x3, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x33fe0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000680)="e02742e80f1c33", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000002c0), &(0x7f00000006c0)=""/4096}, 0x20) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe4, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6150000, 0x0, @perf_config_ext={0xabd, 0xfffffffffffffffd}, 0x0, 0x0, 0x8000c2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r3, 0xc, 0x0, 0xfffffffd, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x22) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 620.63838ms ago: executing program 6 (id=7112): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) 548.03489ms ago: executing program 9 (id=7122): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40040, 0x0) socket$kcm(0xf, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180)) 495.187556ms ago: executing program 6 (id=7113): r0 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x4, 0xa, 0x6, 0xd, 0x0, 0x5, 0x10004, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x2, 0x0, 0x1, 0x2, 0x0, 0x82, 0x3, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x33fe0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000680)="e02742e80f1c33", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000002c0), &(0x7f00000006c0)=""/4096}, 0x20) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe4, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6150000, 0x0, @perf_config_ext={0xabd, 0xfffffffffffffffd}, 0x0, 0x0, 0x8000c2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r3, 0xc, 0x0, 0xfffffffd, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x22) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 460.777881ms ago: executing program 8 (id=7114): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f00000007c0)='./cgroup\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000000c0)='rpcgss_svc_seqno_low\x00', r0, 0x0, 0x8}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0xa}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000000), 0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfc, '\x00', 0x0, r0, 0x2, 0x5, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0x58, &(0x7f0000000d40)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xd, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_query]}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x3a, &(0x7f0000000500)=""/58, 0x41100, 0x6, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xa, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000b80)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0], &(0x7f0000000bc0)=[{0x3, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x0, 0x1}, {0x5, 0x1, 0x6, 0x1}, {0x5, 0x4, 0xa, 0xf}, {0x5, 0x2, 0x4, 0x18683993c40a9e88}, {0x0, 0x4, 0xb}, {0x0, 0x5, 0x1, 0x5}, {0x2, 0x2, 0x8, 0x6}, {0x3, 0x3, 0x5, 0x1}], 0x10, 0x2}, 0x94) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 268.622186ms ago: executing program 7 (id=7115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0xc000000}, 0x10) 214.928853ms ago: executing program 9 (id=7116): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 44.125925ms ago: executing program 8 (id=7117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (fail_nth: 9) 43.867935ms ago: executing program 9 (id=7118): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40040, 0x0) socket$kcm(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) 0s ago: executing program 7 (id=7119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): uetooth: hci2: command 0x2016 tx timeout [ 1099.564865][T14805] Bluetooth: hci0: command 0x0409 tx timeout [ 1099.839942][T23403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.854433][T23403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.883111][T23403] device bridge_slave_0 entered promiscuous mode [ 1099.978495][T23403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.986004][T23403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.997613][T23403] device bridge_slave_1 entered promiscuous mode [ 1100.026046][T14805] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1100.033682][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1100.043126][T14805] CPU: 1 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1100.050791][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1100.060870][T14805] Workqueue: hci4 hci_rx_work [ 1100.065590][T14805] Call Trace: [ 1100.068881][T14805] [ 1100.071815][T14805] dump_stack_lvl+0x188/0x24e [ 1100.076520][T14805] ? show_regs_print_info+0x12/0x12 [ 1100.081742][T14805] ? load_image+0x400/0x400 [ 1100.086290][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1100.091414][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1100.096099][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1100.101310][T14805] kobject_add_internal+0x61c/0xcc0 [ 1100.106520][T14805] kobject_add+0x160/0x230 [ 1100.110946][T14805] ? kobject_init+0x1d0/0x1d0 [ 1100.115632][T14805] ? klist_children_get+0x50/0x50 [ 1100.120659][T14805] ? get_device_parent+0x121/0x3f0 [ 1100.125775][T14805] device_add+0x483/0xfb0 [ 1100.130103][T14805] ? kmem_cache_free+0xf7/0x290 [ 1100.134960][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1100.139908][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1100.145290][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1100.150686][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1100.156933][T14805] ? bt_info+0x180/0x180 [ 1100.161183][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1100.166865][T14805] ? skb_pull_data+0xf7/0x200 [ 1100.171548][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1100.177102][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1100.183197][T14805] hci_event_packet+0x7b6/0x1280 [ 1100.188166][T14805] ? bis_list+0x280/0x280 [ 1100.192506][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1100.198410][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1100.203526][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1100.208906][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1100.214112][T14805] hci_rx_work+0x3eb/0xd40 [ 1100.218532][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1100.223391][T14805] ? process_one_work+0x7b0/0x1160 [ 1100.228506][T14805] process_one_work+0x8a2/0x1160 [ 1100.233498][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1100.239171][T14805] ? _raw_spin_lock_irq+0x86/0xf0 [ 1100.244206][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1100.249234][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1100.254780][T14805] ? kthread_data+0x4b/0xc0 [ 1100.259314][T14805] worker_thread+0xaa2/0x1270 [ 1100.264022][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1100.269072][T14805] kthread+0x29d/0x330 [ 1100.273150][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1100.278194][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1100.282807][T14805] ret_from_fork+0x1f/0x30 [ 1100.287255][T14805] [ 1100.291792][T14805] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1100.305328][T14805] Bluetooth: hci4: failed to register connection device [ 1100.329690][T23403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.352472][T23457] netlink: 'syz.7.6182': attribute type 39 has an invalid length. [ 1100.365923][T23457] device veth0_macvtap left promiscuous mode [ 1100.461981][T23403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.498487][T23459] __nla_validate_parse: 6 callbacks suppressed [ 1100.498505][T23459] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6184'. [ 1100.549484][T23403] team0: Port device team_slave_0 added [ 1100.620690][T23403] team0: Port device team_slave_1 added [ 1100.715053][T23403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.732205][T23403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.781676][T23403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.842568][T23403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.856640][T23403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.906639][T23403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.918582][T23468] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6188'. [ 1101.178439][T23403] device hsr_slave_0 entered promiscuous mode [ 1101.227337][T23403] device hsr_slave_1 entered promiscuous mode [ 1101.260348][T23403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1101.268256][T23403] Cannot create hsr debugfs directory [ 1101.555722][T23484] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6193'. [ 1101.644388][T14805] Bluetooth: hci0: command 0x041b tx timeout [ 1101.824774][ T75] team0: Port device wlan1 removed [ 1102.123787][T23495] netlink: 'syz.7.6197': attribute type 21 has an invalid length. [ 1102.171682][T23499] netlink: 'syz.6.6198': attribute type 3 has an invalid length. [ 1102.208827][ T75] device hsr_slave_0 left promiscuous mode [ 1102.215565][T23499] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6198'. [ 1102.228961][ T75] device hsr_slave_1 left promiscuous mode [ 1102.242347][ T75] device bridge_slave_0 left promiscuous mode [ 1102.251158][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.275219][ T75] device veth1_macvtap left promiscuous mode [ 1102.364833][T14805] Bluetooth: hci4: command 0x2016 tx timeout [ 1102.633999][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1102.677608][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1103.078003][T23495] netlink: 'syz.7.6197': attribute type 10 has an invalid length. [ 1103.111833][T23502] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6199'. [ 1103.153603][T23504] netlink: 'syz.8.6200': attribute type 10 has an invalid length. [ 1103.167895][T23504] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1103.326506][T23507] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6201'. [ 1103.379045][T23509] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6202'. [ 1103.724401][T14805] Bluetooth: hci0: command 0x040f tx timeout [ 1103.813143][T23403] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1103.841123][T23403] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1103.881353][T23403] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1103.924022][T23403] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1103.933558][T23520] netlink: 'syz.5.6206': attribute type 3 has an invalid length. [ 1103.948241][T23520] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6206'. [ 1104.040312][T23522] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6207'. [ 1104.286312][T23403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.328135][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1104.346205][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1104.381262][T23403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.434586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1104.465286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1104.505092][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.512330][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.533952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1104.543709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1104.553591][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.560837][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.570861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1104.608130][T23540] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6209'. [ 1104.620205][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1104.655415][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1104.700197][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1104.748178][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1104.772066][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1104.801892][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1104.871100][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1104.908645][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1104.939872][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1104.969273][T23403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1104.996738][T23403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1105.027356][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1105.043728][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1105.201673][T23547] netlink: 'syz.5.6212': attribute type 10 has an invalid length. [ 1105.445703][T23552] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1105.508087][T23552] netlink: 'syz.8.6213': attribute type 21 has an invalid length. [ 1105.535363][T23557] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6215'. [ 1105.557770][T23552] netlink: 'syz.8.6213': attribute type 10 has an invalid length. [ 1105.751416][T23561] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6216'. [ 1105.795591][T23565] netlink: 'syz.5.6217': attribute type 2 has an invalid length. [ 1105.804397][T14805] Bluetooth: hci0: command 0x0419 tx timeout [ 1105.823059][T23565] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6217'. [ 1105.856454][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1105.870512][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1105.933645][T23403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.983619][T23574] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6220'. [ 1106.020460][T23574] netlink: 'syz.5.6220': attribute type 39 has an invalid length. [ 1106.033922][T14805] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1106.042261][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1106.053004][T14805] CPU: 1 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1106.060689][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1106.070778][T14805] Workqueue: hci2 hci_rx_work [ 1106.075479][T14805] Call Trace: [ 1106.078756][T14805] [ 1106.081682][T14805] dump_stack_lvl+0x188/0x24e [ 1106.086365][T14805] ? show_regs_print_info+0x12/0x12 [ 1106.091566][T14805] ? load_image+0x400/0x400 [ 1106.096075][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1106.101192][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1106.105878][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1106.111090][T14805] kobject_add_internal+0x61c/0xcc0 [ 1106.116295][T14805] kobject_add+0x160/0x230 [ 1106.120716][T14805] ? kobject_init+0x1d0/0x1d0 [ 1106.125399][T14805] ? klist_children_get+0x50/0x50 [ 1106.130423][T14805] ? get_device_parent+0x121/0x3f0 [ 1106.135535][T14805] device_add+0x483/0xfb0 [ 1106.139864][T14805] ? kmem_cache_free+0xf7/0x290 [ 1106.144716][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1106.149668][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1106.155068][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1106.160469][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1106.166717][T14805] ? bt_info+0x180/0x180 [ 1106.170964][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1106.176607][T14805] ? skb_pull_data+0xf7/0x200 [ 1106.181288][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1106.186838][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1106.192905][T14805] hci_event_packet+0x7b6/0x1280 [ 1106.197885][T14805] ? bis_list+0x280/0x280 [ 1106.202230][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1106.208126][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1106.213240][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1106.218619][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1106.223827][T14805] hci_rx_work+0x3eb/0xd40 [ 1106.228245][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1106.233105][T14805] ? process_one_work+0x7b0/0x1160 [ 1106.238216][T14805] process_one_work+0x8a2/0x1160 [ 1106.243165][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1106.248794][T14805] ? _raw_spin_lock_irq+0x86/0xf0 [ 1106.253823][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1106.258847][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1106.264390][T14805] ? kthread_data+0x4b/0xc0 [ 1106.268901][T14805] worker_thread+0xaa2/0x1270 [ 1106.273591][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1106.278626][T14805] kthread+0x29d/0x330 [ 1106.282696][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1106.287741][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1106.292339][T14805] ret_from_fork+0x1f/0x30 [ 1106.296776][T14805] [ 1106.305255][T14805] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1106.318681][T14805] Bluetooth: hci2: failed to register connection device [ 1106.467870][T23580] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6224'. [ 1107.152587][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1107.171011][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1107.236754][T23602] netlink: 'syz.6.6229': attribute type 21 has an invalid length. [ 1107.268066][T23602] netlink: 'syz.6.6229': attribute type 10 has an invalid length. [ 1107.306352][T23605] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1107.319619][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1107.354077][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1107.394672][T23403] device veth0_vlan entered promiscuous mode [ 1107.402007][T23608] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6232'. [ 1107.424566][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1107.434687][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1107.453037][T23610] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6233'. [ 1107.509801][T23403] device veth1_vlan entered promiscuous mode [ 1107.580126][T12618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1107.602236][T12618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1107.625051][T12618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1107.636611][T12618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1107.649088][T23403] device veth0_macvtap entered promiscuous mode [ 1107.668336][T23615] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6234'. [ 1107.686366][T23403] device veth1_macvtap entered promiscuous mode [ 1107.742705][T23403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.773186][T23403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.792447][T23403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.813833][T23403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.834555][T23403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.854291][T23403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.889173][T23403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.909094][T23403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.937795][T23627] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6240'. [ 1107.965106][T23403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.975724][T23403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.992210][T23403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.003134][T23403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.014784][T23403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.032766][T23403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.041495][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.060850][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1108.072333][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1108.090451][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1108.100291][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.109335][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1108.122500][T23403] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.133524][T23403] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.153982][T23403] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.163231][T23403] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.187348][T23630] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6241'. [ 1108.376329][T14805] Bluetooth: hci2: command 0x2016 tx timeout [ 1108.511103][T23639] validate_nla: 3 callbacks suppressed [ 1108.511121][T23639] netlink: 'syz.5.6243': attribute type 2 has an invalid length. [ 1108.563146][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.578922][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.589848][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1108.711885][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.749123][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.769184][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1108.830911][T23646] netlink: 'syz.5.6245': attribute type 21 has an invalid length. [ 1108.887636][T23646] netlink: 'syz.5.6245': attribute type 10 has an invalid length. [ 1108.919546][T23652] FAULT_INJECTION: forcing a failure. [ 1108.919546][T23652] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.963397][T23652] CPU: 0 PID: 23652 Comm: syz.9.6163 Not tainted syzkaller #0 [ 1108.970915][T23652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1108.980993][T23652] Call Trace: [ 1108.984295][T23652] [ 1108.987243][T23652] dump_stack_lvl+0x188/0x24e [ 1108.991957][T23652] ? show_regs_print_info+0x12/0x12 [ 1108.997191][T23652] ? load_image+0x400/0x400 [ 1109.001905][T23652] ? __might_sleep+0xd0/0xd0 [ 1109.006534][T23652] ? __lock_acquire+0x7d10/0x7d10 [ 1109.011685][T23652] ? verify_lock_unused+0x140/0x140 [ 1109.016914][T23652] should_fail_ex+0x399/0x4d0 [ 1109.021630][T23652] should_failslab+0x5/0x20 [ 1109.026165][T23652] slab_pre_alloc_hook+0x59/0x310 [ 1109.031215][T23652] ? verify_lock_unused+0x140/0x140 [ 1109.036450][T23652] kmem_cache_alloc_lru+0x49/0x2e0 [ 1109.041588][T23652] ? __d_alloc+0x31/0x700 [ 1109.045958][T23652] __d_alloc+0x31/0x700 [ 1109.050154][T23652] d_alloc_parallel+0xdc/0x1530 [ 1109.055030][T23652] ? __d_lookup+0x8b/0x7c0 [ 1109.059459][T23652] ? __lock_acquire+0x7d10/0x7d10 [ 1109.064500][T23652] ? __d_lookup+0x8b/0x7c0 [ 1109.068919][T23652] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1109.074042][T23652] path_openat+0x927/0x2ee0 [ 1109.078557][T23652] ? do_syscall_64+0x4c/0xa0 [ 1109.083151][T23652] ? do_filp_open+0x430/0x430 [ 1109.087835][T23652] do_filp_open+0x1f1/0x430 [ 1109.092333][T23652] ? vfs_tmpfile+0x480/0x480 [ 1109.096930][T23652] ? noop_direct_IO+0x10/0x10 [ 1109.101653][T23652] ? _raw_spin_unlock+0x24/0x40 [ 1109.106498][T23652] ? alloc_fd+0x58f/0x630 [ 1109.110831][T23652] do_sys_openat2+0x150/0x4b0 [ 1109.115509][T23652] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1109.121658][T23652] ? do_sys_open+0xe0/0xe0 [ 1109.126071][T23652] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1109.132049][T23652] ? lock_chain_count+0x20/0x20 [ 1109.136897][T23652] __x64_sys_openat+0x135/0x160 [ 1109.141747][T23652] do_syscall_64+0x4c/0xa0 [ 1109.146159][T23652] ? clear_bhb_loop+0x60/0xb0 [ 1109.150917][T23652] ? clear_bhb_loop+0x60/0xb0 [ 1109.155593][T23652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1109.161507][T23652] RIP: 0033:0x7f58e0b5b58e [ 1109.165915][T23652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1109.185514][T23652] RSP: 002b:00007f58e1a96ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1109.194097][T23652] RAX: ffffffffffffffda RBX: 00007f58e1a976c0 RCX: 00007f58e0b5b58e [ 1109.202078][T23652] RDX: 0000000000000002 RSI: 00007f58e1a96f90 RDI: ffffffffffffff9c [ 1109.210064][T23652] RBP: 00007f58e1a97090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.218033][T23652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.225996][T23652] R13: 00007f58e0e16038 R14: 00007f58e0e15fa0 R15: 00007ffdf6c899f8 [ 1109.233975][T23652] [ 1109.891349][T23670] netlink: 'syz.8.6253': attribute type 10 has an invalid length. [ 1109.946870][T23671] netlink: 'syz.9.6254': attribute type 3 has an invalid length. [ 1110.248926][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1110.265248][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1110.274133][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1110.287216][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1110.311064][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1110.318559][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1110.551583][T23673] chnl_net:caif_netlink_parms(): no params data found [ 1110.664604][T23673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.672030][T23673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.695923][T23673] device bridge_slave_0 entered promiscuous mode [ 1110.707446][T23673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.722548][T23673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.731271][T23673] device bridge_slave_1 entered promiscuous mode [ 1110.772619][T23673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.794030][T23673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.849363][T23673] team0: Port device team_slave_0 added [ 1110.866310][T23673] team0: Port device team_slave_1 added [ 1110.896957][T23673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.914081][T23673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.950498][T23673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.963826][T23673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.976355][T23673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.008966][T23673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.139877][T23673] device hsr_slave_0 entered promiscuous mode [ 1111.194799][T23673] device hsr_slave_1 entered promiscuous mode [ 1111.209121][T23673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1111.218970][T23673] Cannot create hsr debugfs directory [ 1111.361458][T23681] __nla_validate_parse: 5 callbacks suppressed [ 1111.361474][T23681] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6255'. [ 1111.425800][T23681] netlink: 'syz.7.6255': attribute type 39 has an invalid length. [ 1111.879639][T23673] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.902245][T23694] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1111.931643][T23697] netlink: 'syz.7.6259': attribute type 21 has an invalid length. [ 1111.943766][T23699] netlink: 'syz.7.6259': attribute type 10 has an invalid length. [ 1111.960840][T23703] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6261'. [ 1112.003240][T23673] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.138544][T23673] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.296779][T23711] netlink: 'syz.6.6265': attribute type 3 has an invalid length. [ 1112.311069][T23711] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6265'. [ 1112.330578][T23673] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.364782][T14805] Bluetooth: hci5: command 0x0409 tx timeout [ 1112.582757][T23720] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6268'. [ 1112.630353][T23720] netlink: 'syz.6.6268': attribute type 39 has an invalid length. [ 1112.906282][T23721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.937826][T23721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.627018][T23731] netlink: 'syz.8.6271': attribute type 2 has an invalid length. [ 1113.647831][T23731] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6271'. [ 1113.658587][T23673] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1113.698236][T23673] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1113.737050][T23673] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1113.810068][T23673] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1114.081248][T23741] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6274'. [ 1114.221618][T15157] device wlan1 left promiscuous mode [ 1114.242404][T15157] team0: Port device wlan1 removed [ 1114.409915][T23673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.442032][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1114.449718][T14805] Bluetooth: hci5: command 0x041b tx timeout [ 1114.467211][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1114.511858][T23673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.531263][T23759] FAULT_INJECTION: forcing a failure. [ 1114.531263][T23759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.558237][T23759] CPU: 0 PID: 23759 Comm: syz.9.6278 Not tainted syzkaller #0 [ 1114.565767][T23759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1114.575843][T23759] Call Trace: [ 1114.579131][T23759] [ 1114.582067][T23759] dump_stack_lvl+0x188/0x24e [ 1114.586770][T23759] ? show_regs_print_info+0x12/0x12 [ 1114.591988][T23759] ? load_image+0x400/0x400 [ 1114.596522][T23759] ? __lock_acquire+0x7d10/0x7d10 [ 1114.601588][T23759] should_fail_ex+0x399/0x4d0 [ 1114.606297][T23759] _copy_from_user+0x2c/0x170 [ 1114.610989][T23759] __sys_bpf+0x2ea/0x780 [ 1114.615265][T23759] ? bpf_link_show_fdinfo+0x380/0x380 [ 1114.620679][T23759] ? lock_chain_count+0x20/0x20 [ 1114.625561][T23759] __x64_sys_bpf+0x78/0x90 [ 1114.629993][T23759] do_syscall_64+0x4c/0xa0 [ 1114.634422][T23759] ? clear_bhb_loop+0x60/0xb0 [ 1114.639108][T23759] ? clear_bhb_loop+0x60/0xb0 [ 1114.643803][T23759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1114.649704][T23759] RIP: 0033:0x7f58e0b9acb9 [ 1114.654129][T23759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.673748][T23759] RSP: 002b:00007f58e1a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1114.682171][T23759] RAX: ffffffffffffffda RBX: 00007f58e0e15fa0 RCX: 00007f58e0b9acb9 [ 1114.690152][T23759] RDX: 0000000000000020 RSI: 0000200000000800 RDI: 0000000000000003 [ 1114.698128][T23759] RBP: 00007f58e1a97090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.706103][T23759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.714080][T23759] R13: 00007f58e0e16038 R14: 00007f58e0e15fa0 R15: 00007ffdf6c899f8 [ 1114.722090][T23759] [ 1114.749057][T15157] device hsr_slave_0 left promiscuous mode [ 1114.767541][T15157] device hsr_slave_1 left promiscuous mode [ 1114.795435][T15157] bridge0: port 3(team0) entered disabled state [ 1114.811686][T15157] device bridge_slave_0 left promiscuous mode [ 1114.826666][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.865119][T15157] device veth1_macvtap left promiscuous mode [ 1115.098970][T23771] netlink: 'syz.9.6282': attribute type 3 has an invalid length. [ 1115.126865][T23771] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.6282'. [ 1115.450507][T15157] device team_slave_1 left promiscuous mode [ 1115.457349][T15157] team0 (unregistering): Port device team_slave_1 removed [ 1115.503160][T15157] device team_slave_0 left promiscuous mode [ 1115.510097][T15157] team0 (unregistering): Port device team_slave_0 removed [ 1115.809920][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.816435][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.954660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1115.973780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1115.984084][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.991278][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.007564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1116.019250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1116.028001][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.035122][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.043408][T23763] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6280'. [ 1116.053737][T23766] netlink: 'syz.8.6280': attribute type 39 has an invalid length. [ 1116.065445][T23775] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1116.088007][T23776] netlink: 'syz.7.6284': attribute type 21 has an invalid length. [ 1116.097418][T23777] netlink: 'syz.7.6284': attribute type 10 has an invalid length. [ 1116.117377][T23779] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6285'. [ 1116.139304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1116.155241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1116.190908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1116.226633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1116.237206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1116.255325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1116.290323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1116.310819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1116.526324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1116.534704][T14805] Bluetooth: hci5: command 0x040f tx timeout [ 1116.553846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1116.604914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1116.675182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1116.695673][T23673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1117.774749][T23818] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6294'. [ 1117.797348][T23816] netlink: 'syz.7.6295': attribute type 2 has an invalid length. [ 1117.843114][T23816] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6295'. [ 1117.944688][T23818] netlink: 'syz.6.6294': attribute type 10 has an invalid length. [ 1117.985949][T23818] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6294'. [ 1118.057856][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1118.071284][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1118.173849][T23826] netlink: 'syz.7.6297': attribute type 3 has an invalid length. [ 1118.193954][T23826] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6297'. [ 1118.418176][T23673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.456703][T23829] netlink: 'syz.9.6298': attribute type 21 has an invalid length. [ 1118.465956][T23831] netlink: 'syz.9.6298': attribute type 10 has an invalid length. [ 1118.604495][T14805] Bluetooth: hci5: command 0x0419 tx timeout [ 1118.946444][T23852] netlink: 'syz.8.6305': attribute type 10 has an invalid length. [ 1119.493103][T23852] team0: Device hsr_slave_0 failed to register rx_handler [ 1119.938657][T23864] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6306'. [ 1120.158043][T23868] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6308'. [ 1120.279744][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1120.300058][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1120.393855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1120.422001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1120.477673][T23673] device veth0_vlan entered promiscuous mode [ 1120.492073][T23875] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6309'. [ 1120.556176][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1120.584744][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1120.624703][T23874] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6310'. [ 1120.650690][T23673] device veth1_vlan entered promiscuous mode [ 1120.669507][T23874] netlink: 'syz.6.6310': attribute type 39 has an invalid length. [ 1120.759316][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1120.779879][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1120.809474][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1120.831133][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1120.865709][T23886] netlink: 'syz.8.6312': attribute type 3 has an invalid length. [ 1120.883047][T23673] device veth0_macvtap entered promiscuous mode [ 1120.911283][T23881] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1120.923278][T23890] FAULT_INJECTION: forcing a failure. [ 1120.923278][T23890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.946765][T23890] CPU: 0 PID: 23890 Comm: syz.9.6316 Not tainted syzkaller #0 [ 1120.954280][T23890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.964352][T23890] Call Trace: [ 1120.967648][T23890] [ 1120.970589][T23890] dump_stack_lvl+0x188/0x24e [ 1120.975302][T23890] ? show_regs_print_info+0x12/0x12 [ 1120.980566][T23890] ? load_image+0x400/0x400 [ 1120.985110][T23890] ? __lock_acquire+0x7d10/0x7d10 [ 1120.989576][T23886] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6312'. [ 1120.990139][T23890] ? snprintf+0xe5/0x140 [ 1120.990170][T23890] should_fail_ex+0x399/0x4d0 [ 1120.990201][T23890] _copy_to_user+0x2c/0x130 [ 1121.012852][T23890] simple_read_from_buffer+0xe3/0x150 [ 1121.018235][T23890] proc_fail_nth_read+0x1a6/0x220 [ 1121.023257][T23890] ? proc_fault_inject_write+0x310/0x310 [ 1121.028887][T23890] ? fsnotify_perm+0x248/0x550 [ 1121.033647][T23890] ? proc_fault_inject_write+0x310/0x310 [ 1121.039273][T23890] vfs_read+0x2de/0xa00 [ 1121.043456][T23890] ? kernel_read+0x1e0/0x1e0 [ 1121.048067][T23890] ? __fget_files+0x28/0x4b0 [ 1121.052670][T23890] ? __fget_files+0x28/0x4b0 [ 1121.057265][T23890] ? __fget_files+0x43d/0x4b0 [ 1121.061948][T23890] ? __fdget_pos+0x2ae/0x360 [ 1121.066539][T23890] ? ksys_read+0x71/0x250 [ 1121.070868][T23890] ksys_read+0x14c/0x250 [ 1121.075112][T23890] ? vfs_write+0xa30/0xa30 [ 1121.079537][T23890] ? lockdep_hardirqs_on+0x94/0x140 [ 1121.084733][T23890] do_syscall_64+0x4c/0xa0 [ 1121.089159][T23890] ? clear_bhb_loop+0x60/0xb0 [ 1121.093832][T23890] ? clear_bhb_loop+0x60/0xb0 [ 1121.098507][T23890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1121.104397][T23890] RIP: 0033:0x7f58e0b5b58e [ 1121.108808][T23890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1121.128407][T23890] RSP: 002b:00007f58e1a96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1121.136825][T23890] RAX: ffffffffffffffda RBX: 00007f58e1a976c0 RCX: 00007f58e0b5b58e [ 1121.144791][T23890] RDX: 000000000000000f RSI: 00007f58e1a970a0 RDI: 0000000000000004 [ 1121.152754][T23890] RBP: 00007f58e1a97090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.160719][T23890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.168697][T23890] R13: 00007f58e0e16038 R14: 00007f58e0e15fa0 R15: 00007ffdf6c899f8 [ 1121.176689][T23890] [ 1121.198609][T23881] netlink: 'syz.7.6315': attribute type 10 has an invalid length. [ 1121.248947][T23888] netlink: 'syz.7.6315': attribute type 21 has an invalid length. [ 1121.271002][T23673] device veth1_macvtap entered promiscuous mode [ 1121.311155][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.349716][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.379061][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.401164][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.452269][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.481734][T23899] netlink: 'syz.8.6318': attribute type 3 has an invalid length. [ 1121.495890][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.514050][T23899] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6318'. [ 1121.529272][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.547693][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.600528][T23673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.613136][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.623829][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.647476][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.666541][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.677323][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.687949][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.698284][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.709008][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.721729][T23673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.755119][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1121.773475][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1121.799701][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1121.819620][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1121.850954][T23673] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.860934][T23673] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.871119][T23673] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.890848][T23673] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.011874][T23805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.030815][T23805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.059985][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.071087][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1122.079362][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.121400][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1122.447148][T23922] netlink: 'syz.7.6327': attribute type 39 has an invalid length. [ 1122.706908][T23931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1122.733191][T23931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.743485][T23931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1122.784479][T23931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.885981][T23923] __nla_validate_parse: 3 callbacks suppressed [ 1122.885994][T23923] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6250'. [ 1123.055950][T23938] netlink: 'syz.8.6333': attribute type 3 has an invalid length. [ 1123.074811][T23938] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6333'. [ 1123.254451][T23948] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6335'. [ 1123.498076][T23953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.514439][T23953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.522889][T23953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.531135][T23953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.753706][T23960] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6343'. [ 1123.996914][T23966] netlink: 184 bytes leftover after parsing attributes in process `syz.8.6345'. [ 1124.071331][T23970] netlink: 'syz.5.6346': attribute type 9 has an invalid length. [ 1124.101196][T23972] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1124.127251][T23966] netlink: 'syz.8.6345': attribute type 3 has an invalid length. [ 1124.128491][T23972] netlink: 'syz.7.6347': attribute type 21 has an invalid length. [ 1124.164710][T23966] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6345'. [ 1124.182372][T23972] netlink: 'syz.7.6347': attribute type 10 has an invalid length. [ 1124.312817][T23983] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6352'. [ 1124.322924][T23983] netlink: 152 bytes leftover after parsing attributes in process `syz.9.6352'. [ 1124.387681][T23980] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6350'. [ 1124.398233][T14805] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1124.615549][T23995] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6353'. [ 1124.665769][T23994] netlink: 'syz.6.6354': attribute type 21 has an invalid length. [ 1124.678433][T23994] netlink: 'syz.6.6354': attribute type 3 has an invalid length. [ 1126.302969][T24022] netlink: 'syz.5.6363': attribute type 39 has an invalid length. [ 1126.321368][T24022] device veth0_macvtap left promiscuous mode [ 1126.446004][T14805] Bluetooth: hci1: command 0x2016 tx timeout [ 1126.859241][T14805] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1126.990791][T24044] netlink: 'syz.7.6371': attribute type 3 has an invalid length. [ 1127.011258][T24046] netlink: 'syz.6.6372': attribute type 2 has an invalid length. [ 1127.069667][T24048] netlink: 'syz.5.6373': attribute type 21 has an invalid length. [ 1128.107669][T24081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.142342][T24081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.155967][T24081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.164644][T24081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.235640][T24076] __nla_validate_parse: 12 callbacks suppressed [ 1128.235679][T24076] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6384'. [ 1128.282400][T24085] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6387'. [ 1128.493514][T24092] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6390'. [ 1128.822335][T14805] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1128.832773][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1128.842605][T14805] CPU: 0 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1128.850262][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.860336][T14805] Workqueue: hci2 hci_rx_work [ 1128.865050][T14805] Call Trace: [ 1128.868350][T14805] [ 1128.871301][T14805] dump_stack_lvl+0x188/0x24e [ 1128.876013][T14805] ? show_regs_print_info+0x12/0x12 [ 1128.881225][T14805] ? load_image+0x400/0x400 [ 1128.885738][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1128.890853][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1128.895533][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1128.900740][T14805] kobject_add_internal+0x61c/0xcc0 [ 1128.905951][T14805] kobject_add+0x160/0x230 [ 1128.910377][T14805] ? kobject_init+0x1d0/0x1d0 [ 1128.915060][T14805] ? klist_children_get+0x50/0x50 [ 1128.920090][T14805] ? get_device_parent+0x121/0x3f0 [ 1128.925207][T14805] device_add+0x483/0xfb0 [ 1128.929706][T14805] ? kmem_cache_free+0xf7/0x290 [ 1128.934567][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1128.939514][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1128.944897][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1128.950286][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1128.956530][T14805] ? bt_info+0x180/0x180 [ 1128.960783][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1128.966507][T14805] ? skb_pull_data+0xf7/0x200 [ 1128.971181][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1128.976728][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1128.982789][T14805] hci_event_packet+0x7b6/0x1280 [ 1128.987735][T14805] ? bis_list+0x280/0x280 [ 1128.992062][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1128.997954][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1129.003059][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1129.008436][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1129.013724][T14805] hci_rx_work+0x3eb/0xd40 [ 1129.018138][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1129.022989][T14805] ? process_one_work+0x7b0/0x1160 [ 1129.028097][T14805] process_one_work+0x8a2/0x1160 [ 1129.033057][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1129.038692][T14805] ? _raw_spin_lock_irq+0x86/0xf0 [ 1129.043717][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1129.048735][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1129.054276][T14805] ? kthread_data+0x4b/0xc0 [ 1129.058783][T14805] worker_thread+0xaa2/0x1270 [ 1129.063486][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1129.068532][T14805] kthread+0x29d/0x330 [ 1129.072622][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1129.077648][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1129.082249][T14805] ret_from_fork+0x1f/0x30 [ 1129.086679][T14805] [ 1129.091812][ T4291] Bluetooth: hci0: command 0x2016 tx timeout [ 1129.098192][T14805] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1129.111744][T14805] Bluetooth: hci2: failed to register connection device [ 1129.297383][T24114] validate_nla: 9 callbacks suppressed [ 1129.297417][T24114] netlink: 'syz.7.6399': attribute type 3 has an invalid length. [ 1129.314718][T24114] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6399'. [ 1129.325931][T24112] netlink: 'syz.5.6398': attribute type 21 has an invalid length. [ 1129.544725][T24120] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6401'. [ 1129.581310][T24118] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6400'. [ 1130.016122][T24130] device bridge_slave_1 left promiscuous mode [ 1130.052415][T24130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.066677][T24130] device bridge_slave_0 left promiscuous mode [ 1130.085003][T24130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.241981][T24134] netlink: 'syz.7.6406': attribute type 3 has an invalid length. [ 1130.282831][T24134] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6406'. [ 1130.424669][T24141] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1130.498105][T24141] netlink: 'syz.8.6409': attribute type 21 has an invalid length. [ 1130.615668][T24151] netlink: 'syz.5.6412': attribute type 2 has an invalid length. [ 1130.636071][T24151] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6412'. [ 1130.649434][T24141] netlink: 'syz.8.6409': attribute type 10 has an invalid length. [ 1130.798541][T24156] netlink: 'syz.9.6413': attribute type 3 has an invalid length. [ 1130.814456][T24156] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.6413'. [ 1130.834091][T24158] netlink: 'syz.5.6414': attribute type 3 has an invalid length. [ 1130.845988][T24158] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6414'. [ 1130.900884][T14805] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1130.909315][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1130.919008][T14805] CPU: 0 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1130.926759][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1130.936836][T14805] Workqueue: hci2 hci_rx_work [ 1130.941541][T14805] Call Trace: [ 1130.944830][T14805] [ 1130.947784][T14805] dump_stack_lvl+0x188/0x24e [ 1130.952494][T14805] ? show_regs_print_info+0x12/0x12 [ 1130.957723][T14805] ? load_image+0x400/0x400 [ 1130.962255][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1130.967392][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1130.972090][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1130.977311][T14805] kobject_add_internal+0x61c/0xcc0 [ 1130.982538][T14805] kobject_add+0x160/0x230 [ 1130.986980][T14805] ? kobject_init+0x1d0/0x1d0 [ 1130.991683][T14805] ? klist_children_get+0x50/0x50 [ 1130.996723][T14805] ? get_device_parent+0x121/0x3f0 [ 1131.001853][T14805] device_add+0x483/0xfb0 [ 1131.006192][T14805] ? kmem_cache_free+0xf7/0x290 [ 1131.011062][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1131.016018][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1131.021409][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1131.026830][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1131.033108][T14805] ? bt_info+0x180/0x180 [ 1131.037378][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1131.043040][T14805] ? skb_pull_data+0xf7/0x200 [ 1131.047735][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1131.053304][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1131.059592][T14805] hci_event_packet+0x7b6/0x1280 [ 1131.064561][T14805] ? bis_list+0x280/0x280 [ 1131.068911][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1131.074816][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1131.079937][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1131.085330][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1131.090548][T14805] hci_rx_work+0x3eb/0xd40 [ 1131.094982][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1131.099852][T14805] ? process_one_work+0x7b0/0x1160 [ 1131.104972][T14805] process_one_work+0x8a2/0x1160 [ 1131.109936][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1131.115596][T14805] ? _raw_spin_lock_irq+0x86/0xf0 [ 1131.120638][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1131.125672][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1131.131226][T14805] ? kthread_data+0x4b/0xc0 [ 1131.135746][T14805] worker_thread+0xaa2/0x1270 [ 1131.140454][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1131.145503][T14805] kthread+0x29d/0x330 [ 1131.149594][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1131.154633][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1131.159244][T14805] ret_from_fork+0x1f/0x30 [ 1131.163786][T14805] [ 1131.172247][T14805] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1131.186523][T14805] Bluetooth: hci2: failed to register connection device [ 1131.194735][T14805] Bluetooth: hci2: command 0x2016 tx timeout [ 1131.391661][T24171] netlink: 'syz.9.6419': attribute type 2 has an invalid length. [ 1131.507711][T24173] netlink: 'syz.6.6431': attribute type 39 has an invalid length. [ 1131.700663][T24178] device bridge_slave_1 left promiscuous mode [ 1131.720826][T24178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.751954][T24178] device bridge_slave_0 left promiscuous mode [ 1131.772311][T24178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.899660][T24186] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1132.057157][T24194] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1132.798079][T24221] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1132.811291][T14805] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1133.245402][T14805] Bluetooth: hci2: command 0x2016 tx timeout [ 1133.328291][T24236] __nla_validate_parse: 10 callbacks suppressed [ 1133.328417][T24236] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6446'. [ 1133.534807][T24235] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6445'. [ 1134.063641][T24249] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6450'. [ 1134.556585][T24252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.564223][T24252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.641444][T24264] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6457'. [ 1134.660814][T24267] validate_nla: 16 callbacks suppressed [ 1134.660837][T24267] netlink: 'syz.8.6457': attribute type 39 has an invalid length. [ 1134.853470][T24272] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1134.864245][T14805] Bluetooth: hci5: command 0x2016 tx timeout [ 1134.936160][T24275] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6459'. [ 1134.970431][T24277] netlink: 'syz.5.6460': attribute type 3 has an invalid length. [ 1134.993555][T24272] netlink: 'syz.7.6458': attribute type 21 has an invalid length. [ 1134.999236][T24277] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6460'. [ 1135.020579][T24278] netlink: 'syz.7.6458': attribute type 10 has an invalid length. [ 1135.042148][T24281] netlink: 156 bytes leftover after parsing attributes in process `syz.9.6461'. [ 1135.305927][T24289] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6465'. [ 1135.403682][T24293] netlink: 156 bytes leftover after parsing attributes in process `syz.9.6466'. [ 1135.443002][T24298] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1135.525025][T24300] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6478'. [ 1135.642664][T24298] netlink: 'syz.8.6469': attribute type 10 has an invalid length. [ 1135.802506][T24304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.810239][T24304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.962109][T24310] netlink: 'syz.7.6481': attribute type 2 has an invalid length. [ 1136.069152][T24317] netlink: 'syz.9.6470': attribute type 2 has an invalid length. [ 1136.467151][T24322] netlink: 'syz.6.6475': attribute type 3 has an invalid length. [ 1136.822027][T24331] netlink: 'syz.9.6476': attribute type 21 has an invalid length. [ 1136.886399][T24332] netlink: 'syz.9.6476': attribute type 10 has an invalid length. [ 1138.417016][T24363] __nla_validate_parse: 8 callbacks suppressed [ 1138.417058][T24363] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6490'. [ 1138.437844][T24365] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6491'. [ 1138.542882][T24372] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6493'. [ 1138.977396][T24383] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6498'. [ 1139.087460][T24385] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6497'. [ 1139.329239][T24388] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6499'. [ 1139.770924][T24393] validate_nla: 6 callbacks suppressed [ 1139.770962][T24393] netlink: 'syz.9.6500': attribute type 21 has an invalid length. [ 1139.789045][T24394] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6502'. [ 1139.803631][T24395] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6501'. [ 1139.817067][T24396] netlink: 'syz.9.6500': attribute type 10 has an invalid length. [ 1140.061744][T24402] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6504'. [ 1140.440862][T24404] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6505'. [ 1140.942445][T24424] netlink: 'syz.6.6511': attribute type 2 has an invalid length. [ 1141.200973][T24432] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1141.259417][T24432] netlink: 'syz.7.6514': attribute type 21 has an invalid length. [ 1141.291547][T24432] netlink: 'syz.7.6514': attribute type 10 has an invalid length. [ 1141.300200][T24438] netlink: 'syz.9.6517': attribute type 3 has an invalid length. [ 1141.784793][T24450] netlink: 'syz.7.6521': attribute type 39 has an invalid length. [ 1143.157975][T24470] netlink: 'syz.7.6526': attribute type 2 has an invalid length. [ 1143.378800][T24479] netlink: 'syz.6.6529': attribute type 3 has an invalid length. [ 1143.440853][T24481] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1143.518569][T24481] netlink: 'syz.7.6530': attribute type 21 has an invalid length. [ 1143.598345][T24489] __nla_validate_parse: 11 callbacks suppressed [ 1143.598395][T24489] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6532'. [ 1143.746644][T24489] device veth0_macvtap left promiscuous mode [ 1144.326328][T24494] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6533'. [ 1144.508690][T24506] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6539'. [ 1144.796679][T24517] validate_nla: 3 callbacks suppressed [ 1144.796693][T24517] netlink: 'syz.5.6541': attribute type 2 has an invalid length. [ 1144.818264][T24517] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6541'. [ 1144.838074][T24516] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6543'. [ 1144.955404][T24522] netlink: 'syz.7.6545': attribute type 3 has an invalid length. [ 1144.963647][T24522] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6545'. [ 1145.199446][T24532] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1145.228894][T24532] netlink: 'syz.8.6548': attribute type 21 has an invalid length. [ 1145.256012][T24532] netlink: 'syz.8.6548': attribute type 10 has an invalid length. [ 1145.320881][T24535] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6550'. [ 1145.380656][T24536] netlink: 'syz.5.6550': attribute type 39 has an invalid length. [ 1145.598375][T24540] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6551'. [ 1145.984899][T24557] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6558'. [ 1146.061300][T24559] netlink: 'syz.9.6559': attribute type 3 has an invalid length. [ 1146.076198][T24559] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.6559'. [ 1146.446357][T24569] netlink: 'syz.5.6562': attribute type 21 has an invalid length. [ 1146.484299][T24569] netlink: 'syz.5.6562': attribute type 10 has an invalid length. [ 1146.640109][T24575] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1146.708262][T24579] netlink: 'syz.7.6564': attribute type 21 has an invalid length. [ 1146.731707][T24582] netlink: 'syz.6.6566': attribute type 39 has an invalid length. [ 1148.639961][T24638] __nla_validate_parse: 9 callbacks suppressed [ 1148.639980][T24638] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6584'. [ 1148.742778][T24642] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6587'. [ 1149.323836][T24659] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6595'. [ 1149.746596][T24679] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6601'. [ 1149.886988][T24682] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6602'. [ 1149.975411][T24687] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6603'. [ 1150.025848][T24684] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6604'. [ 1150.210033][T24691] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6606'. [ 1150.277154][T24695] validate_nla: 13 callbacks suppressed [ 1150.277166][T24695] netlink: 'syz.8.6606': attribute type 39 has an invalid length. [ 1150.828345][T24716] netlink: 'syz.6.6615': attribute type 21 has an invalid length. [ 1150.869477][T24716] netlink: 'syz.6.6615': attribute type 10 has an invalid length. [ 1150.973820][T24722] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6617'. [ 1151.001349][T24724] netlink: 'syz.7.6616': attribute type 3 has an invalid length. [ 1151.013079][T24724] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6616'. [ 1151.041007][T24722] device hsr_slave_0 left promiscuous mode [ 1151.060929][T24722] device hsr_slave_1 left promiscuous mode [ 1151.571246][T24735] netlink: 'syz.6.6621': attribute type 39 has an invalid length. [ 1151.659445][T24740] netlink: 'syz.5.6624': attribute type 10 has an invalid length. [ 1151.765698][T24749] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1151.862484][T24752] netlink: 'syz.8.6629': attribute type 3 has an invalid length. [ 1152.116710][T24761] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1152.246818][T24768] netlink: 'syz.8.6632': attribute type 21 has an invalid length. [ 1152.261782][T24768] netlink: 'syz.8.6632': attribute type 10 has an invalid length. [ 1152.627557][T24775] netlink: 'syz.6.6636': attribute type 39 has an invalid length. [ 1153.182619][T24799] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1153.670310][T24809] __nla_validate_parse: 8 callbacks suppressed [ 1153.670328][T24809] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6651'. [ 1153.801013][T24814] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6652'. [ 1153.893905][T24819] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6654'. [ 1154.139202][T24826] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6657'. [ 1154.362818][T24838] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1154.518965][T24843] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6663'. [ 1155.210055][T24862] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6668'. [ 1155.308803][T24866] validate_nla: 9 callbacks suppressed [ 1155.308839][T24866] netlink: 'syz.9.6670': attribute type 21 has an invalid length. [ 1155.342283][T24866] netlink: 'syz.9.6670': attribute type 10 has an invalid length. [ 1155.442389][T24874] netlink: 'syz.5.6674': attribute type 3 has an invalid length. [ 1155.464574][T24874] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6674'. [ 1155.610718][T24879] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6677'. [ 1155.806752][T24886] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1155.835738][T24881] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6678'. [ 1155.875180][T24886] netlink: 'syz.8.6680': attribute type 21 has an invalid length. [ 1156.154799][T24897] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6684'. [ 1156.186909][T24897] netlink: 'syz.9.6684': attribute type 39 has an invalid length. [ 1156.227395][T24901] netlink: 'syz.5.6686': attribute type 21 has an invalid length. [ 1156.269575][T24901] netlink: 'syz.5.6686': attribute type 10 has an invalid length. [ 1156.397332][T24908] netlink: 'syz.9.6689': attribute type 3 has an invalid length. [ 1156.612864][T24913] netlink: 'syz.6.6693': attribute type 21 has an invalid length. [ 1156.635472][T24916] netlink: 'syz.5.6692': attribute type 21 has an invalid length. [ 1157.216894][T24937] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1157.951963][T24967] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1158.494119][T24990] device hsr_slave_0 left promiscuous mode [ 1158.525358][T24990] device hsr_slave_1 left promiscuous mode [ 1158.690366][T24993] __nla_validate_parse: 9 callbacks suppressed [ 1158.690414][T24993] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6729'. [ 1158.737469][T24995] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6730'. [ 1158.909760][T25005] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6734'. [ 1158.951774][T25003] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6732'. [ 1159.387716][T25024] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.6741'. [ 1159.408478][T14805] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1159.416473][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1159.427000][T14805] CPU: 0 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1159.434680][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1159.444763][T14805] Workqueue: hci0 hci_rx_work [ 1159.449489][T14805] Call Trace: [ 1159.452789][T14805] [ 1159.455743][T14805] dump_stack_lvl+0x188/0x24e [ 1159.460467][T14805] ? show_regs_print_info+0x12/0x12 [ 1159.465709][T14805] ? load_image+0x400/0x400 [ 1159.470241][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1159.475364][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1159.480047][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1159.485255][T14805] kobject_add_internal+0x61c/0xcc0 [ 1159.490463][T14805] kobject_add+0x160/0x230 [ 1159.494883][T14805] ? kobject_init+0x1d0/0x1d0 [ 1159.499562][T14805] ? klist_children_get+0x50/0x50 [ 1159.504588][T14805] ? get_device_parent+0x121/0x3f0 [ 1159.509699][T14805] device_add+0x483/0xfb0 [ 1159.514024][T14805] ? kmem_cache_free+0xf7/0x290 [ 1159.518885][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1159.523832][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1159.529209][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1159.534590][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1159.540837][T14805] ? rcu_is_watching+0x11/0xa0 [ 1159.545603][T14805] ? asm_sysvec_call_function_single+0x16/0x20 [ 1159.551760][T14805] ? lockdep_hardirqs_on+0x94/0x140 [ 1159.556967][T14805] ? asm_sysvec_call_function_single+0x16/0x20 [ 1159.563126][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1159.569193][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1159.574747][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1159.580811][T14805] hci_event_packet+0x7b6/0x1280 [ 1159.585763][T14805] ? bis_list+0x280/0x280 [ 1159.590095][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1159.595989][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1159.601101][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1159.606479][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1159.611685][T14805] hci_rx_work+0x3eb/0xd40 [ 1159.616109][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1159.620967][T14805] ? process_one_work+0x7b0/0x1160 [ 1159.626078][T14805] process_one_work+0x8a2/0x1160 [ 1159.631037][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1159.636668][T14805] ? _raw_spin_lock_irq+0x86/0xf0 [ 1159.641698][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1159.646720][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1159.652270][T14805] ? kthread_data+0x4b/0xc0 [ 1159.656785][T14805] worker_thread+0xaa2/0x1270 [ 1159.661485][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1159.666538][T14805] kthread+0x29d/0x330 [ 1159.670610][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1159.675630][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1159.680223][T14805] ret_from_fork+0x1f/0x30 [ 1159.684650][T14805] [ 1159.690262][T14805] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1159.704028][T14805] Bluetooth: hci0: failed to register connection device [ 1159.723912][T25027] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6753'. [ 1159.888370][T25034] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 1160.119302][T25042] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6747'. [ 1160.359946][T25046] validate_nla: 22 callbacks suppressed [ 1160.359968][T25046] netlink: 'syz.5.6748': attribute type 3 has an invalid length. [ 1160.445680][T25046] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6748'. [ 1160.488163][T25048] netlink: 'syz.6.6749': attribute type 10 has an invalid length. [ 1160.721165][T25057] netlink: 'syz.6.6754': attribute type 10 has an invalid length. [ 1160.821690][T25061] netlink: 156 bytes leftover after parsing attributes in process `syz.9.6756'. [ 1161.243663][T25071] netlink: 'syz.6.6759': attribute type 39 has an invalid length. [ 1161.369376][T25078] FAULT_INJECTION: forcing a failure. [ 1161.369376][T25078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.427511][T25078] CPU: 1 PID: 25078 Comm: syz.9.6761 Not tainted syzkaller #0 [ 1161.435028][T25078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1161.445092][T25078] Call Trace: [ 1161.448389][T25078] [ 1161.451337][T25078] dump_stack_lvl+0x188/0x24e [ 1161.456044][T25078] ? show_regs_print_info+0x12/0x12 [ 1161.461263][T25078] ? load_image+0x400/0x400 [ 1161.465784][T25078] ? __lock_acquire+0x7d10/0x7d10 [ 1161.470832][T25078] should_fail_ex+0x399/0x4d0 [ 1161.475538][T25078] _copy_from_user+0x2c/0x170 [ 1161.480241][T25078] ___sys_sendmsg+0x1c3/0x360 [ 1161.484940][T25078] ? __sys_sendmsg+0x290/0x290 [ 1161.489731][T25078] ? __lock_acquire+0x7d10/0x7d10 [ 1161.494796][T25078] __se_sys_sendmsg+0x1bb/0x2a0 [ 1161.499675][T25078] ? ct_nmi_exit+0x145/0x1c0 [ 1161.504282][T25078] ? __x64_sys_sendmsg+0x80/0x80 [ 1161.509243][T25078] ? lockdep_hardirqs_on+0x94/0x140 [ 1161.514465][T25078] do_syscall_64+0x4c/0xa0 [ 1161.518902][T25078] ? clear_bhb_loop+0x60/0xb0 [ 1161.523614][T25078] ? clear_bhb_loop+0x60/0xb0 [ 1161.528301][T25078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.534206][T25078] RIP: 0033:0x7f58e0b9acb9 [ 1161.538629][T25078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.558231][T25078] RSP: 002b:00007f58e1a97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1161.566644][T25078] RAX: ffffffffffffffda RBX: 00007f58e0e15fa0 RCX: 00007f58e0b9acb9 [ 1161.574615][T25078] RDX: 0000000000000810 RSI: 0000200000007940 RDI: 0000000000000004 [ 1161.582580][T25078] RBP: 00007f58e1a97090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.590551][T25078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.598519][T25078] R13: 00007f58e0e16038 R14: 00007f58e0e15fa0 R15: 00007ffdf6c899f8 [ 1161.606501][T25078] [ 1161.689741][T14805] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1161.698874][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1161.710238][T14805] CPU: 0 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1161.717901][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1161.727979][T14805] Workqueue: hci3 hci_rx_work [ 1161.732694][T14805] Call Trace: [ 1161.735984][T14805] [ 1161.738924][T14805] dump_stack_lvl+0x188/0x24e [ 1161.743631][T14805] ? show_regs_print_info+0x12/0x12 [ 1161.748854][T14805] ? load_image+0x400/0x400 [ 1161.753388][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1161.758521][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1161.763217][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1161.768446][T14805] kobject_add_internal+0x61c/0xcc0 [ 1161.773661][T14805] kobject_add+0x160/0x230 [ 1161.778081][T14805] ? kobject_init+0x1d0/0x1d0 [ 1161.782761][T14805] ? klist_children_get+0x50/0x50 [ 1161.787792][T14805] ? get_device_parent+0x121/0x3f0 [ 1161.792906][T14805] device_add+0x483/0xfb0 [ 1161.797232][T14805] ? kmem_cache_free+0xf7/0x290 [ 1161.802089][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1161.807043][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1161.812426][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1161.817812][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1161.824076][T14805] ? bt_info+0x180/0x180 [ 1161.828322][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1161.833967][T14805] ? skb_pull_data+0xf7/0x200 [ 1161.838652][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1161.844211][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1161.850279][T14805] hci_event_packet+0x7b6/0x1280 [ 1161.855233][T14805] ? bis_list+0x280/0x280 [ 1161.859570][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1161.865467][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1161.870582][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1161.875960][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1161.881163][T14805] hci_rx_work+0x3eb/0xd40 [ 1161.885582][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1161.890437][T14805] ? process_one_work+0x7b0/0x1160 [ 1161.895546][T14805] process_one_work+0x8a2/0x1160 [ 1161.900497][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1161.906129][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1161.911153][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1161.916699][T14805] ? kthread_data+0x4b/0xc0 [ 1161.921211][T14805] worker_thread+0xaa2/0x1270 [ 1161.925905][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1161.930940][T14805] kthread+0x29d/0x330 [ 1161.935016][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1161.940041][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1161.944637][T14805] ret_from_fork+0x1f/0x30 [ 1161.949063][T14805] [ 1161.953666][ T4291] Bluetooth: hci0: command 0x2016 tx timeout [ 1161.964355][T14805] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1161.977555][T14805] Bluetooth: hci3: failed to register connection device [ 1162.091045][T25086] netlink: 'syz.5.6764': attribute type 3 has an invalid length. [ 1162.104950][T25089] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1162.136114][T25089] netlink: 'syz.8.6766': attribute type 10 has an invalid length. [ 1162.643113][T25108] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1162.700841][T14805] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1162.707860][T25108] netlink: 'syz.7.6772': attribute type 21 has an invalid length. [ 1162.708537][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1162.726671][T14805] CPU: 0 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1162.734350][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1162.744431][T14805] Workqueue: hci3 hci_rx_work [ 1162.749164][T14805] Call Trace: [ 1162.752493][T14805] [ 1162.755552][T14805] dump_stack_lvl+0x188/0x24e [ 1162.760285][T14805] ? show_regs_print_info+0x12/0x12 [ 1162.765535][T14805] ? load_image+0x400/0x400 [ 1162.769420][T25108] netlink: 'syz.7.6772': attribute type 10 has an invalid length. [ 1162.770071][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1162.770109][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1162.787729][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1162.792974][T14805] kobject_add_internal+0x61c/0xcc0 [ 1162.798194][T14805] kobject_add+0x160/0x230 [ 1162.802627][T14805] ? kobject_init+0x1d0/0x1d0 [ 1162.807310][T14805] ? klist_children_get+0x50/0x50 [ 1162.812336][T14805] ? get_device_parent+0x121/0x3f0 [ 1162.817453][T14805] device_add+0x483/0xfb0 [ 1162.821786][T14805] ? kmem_cache_free+0xf7/0x290 [ 1162.826649][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1162.831603][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1162.836989][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1162.842371][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1162.848621][T14805] ? bt_info+0x180/0x180 [ 1162.852869][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1162.858515][T14805] ? skb_pull_data+0xf7/0x200 [ 1162.863202][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1162.868755][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1162.874820][T14805] hci_event_packet+0x7b6/0x1280 [ 1162.879777][T14805] ? bis_list+0x280/0x280 [ 1162.884113][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1162.890017][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1162.895128][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1162.900510][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1162.905719][T14805] hci_rx_work+0x3eb/0xd40 [ 1162.910140][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1162.915004][T14805] ? process_one_work+0x7b0/0x1160 [ 1162.920115][T14805] process_one_work+0x8a2/0x1160 [ 1162.925069][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1162.930727][T14805] ? _raw_spin_lock_irq+0x86/0xf0 [ 1162.935783][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1162.940821][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1162.946369][T14805] ? kthread_data+0x4b/0xc0 [ 1162.950884][T14805] worker_thread+0xaa2/0x1270 [ 1162.955586][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1162.960625][T14805] kthread+0x29d/0x330 [ 1162.964703][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1162.969727][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1162.974328][T14805] ret_from_fork+0x1f/0x30 [ 1162.978765][T14805] [ 1162.983307][T14805] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1162.996931][T14805] Bluetooth: hci3: failed to register connection device [ 1163.789668][T25139] __nla_validate_parse: 7 callbacks suppressed [ 1163.789689][T25139] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6784'. [ 1163.868007][T25139] netlink: 'syz.8.6784': attribute type 39 has an invalid length. [ 1163.970586][T25144] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6786'. [ 1164.022931][T25144] netlink: 'syz.5.6786': attribute type 39 has an invalid length. [ 1164.044383][T14805] Bluetooth: hci3: command 0x2016 tx timeout [ 1164.538923][T25168] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6797'. [ 1164.814975][T25175] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6799'. [ 1165.296641][T25180] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6801'. [ 1165.313905][T25183] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6800'. [ 1165.369566][T25185] FAULT_INJECTION: forcing a failure. [ 1165.369566][T25185] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.400667][T25185] CPU: 1 PID: 25185 Comm: syz.7.6803 Not tainted syzkaller #0 [ 1165.408201][T25185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1165.418287][T25185] Call Trace: [ 1165.421580][T25185] [ 1165.424523][T25185] dump_stack_lvl+0x188/0x24e [ 1165.429233][T25185] ? show_regs_print_info+0x12/0x12 [ 1165.434475][T25185] ? load_image+0x400/0x400 [ 1165.439023][T25185] ? __might_sleep+0xd0/0xd0 [ 1165.443655][T25185] ? __lock_acquire+0x7d10/0x7d10 [ 1165.448720][T25185] should_fail_ex+0x399/0x4d0 [ 1165.453435][T25185] should_failslab+0x5/0x20 [ 1165.457969][T25185] slab_pre_alloc_hook+0x59/0x310 [ 1165.463024][T25185] kmem_cache_alloc+0x56/0x2f0 [ 1165.467812][T25185] ? security_file_alloc+0x30/0x110 [ 1165.473044][T25185] security_file_alloc+0x30/0x110 [ 1165.478350][T25185] __alloc_file+0xc2/0x230 [ 1165.482758][T25185] alloc_empty_file+0x90/0x180 [ 1165.487507][T25185] path_openat+0x10f/0x2ee0 [ 1165.492024][T25185] ? verify_lock_unused+0x140/0x140 [ 1165.497236][T25185] ? kasan_set_track+0x60/0x70 [ 1165.502003][T25185] ? perf_trace_lock+0xf8/0x390 [ 1165.506851][T25185] ? __x64_sys_openat+0x135/0x160 [ 1165.511879][T25185] ? do_filp_open+0x430/0x430 [ 1165.516564][T25185] ? perf_trace_lock+0xf8/0x390 [ 1165.521416][T25185] ? trace_event_raw_event_lock+0x250/0x250 [ 1165.527317][T25185] do_filp_open+0x1f1/0x430 [ 1165.531832][T25185] ? vfs_tmpfile+0x480/0x480 [ 1165.536436][T25185] ? _raw_spin_unlock+0x24/0x40 [ 1165.541295][T25185] ? alloc_fd+0x58f/0x630 [ 1165.545631][T25185] do_sys_openat2+0x150/0x4b0 [ 1165.550320][T25185] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1165.556480][T25185] ? do_sys_open+0xe0/0xe0 [ 1165.560902][T25185] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1165.566885][T25185] ? lock_chain_count+0x20/0x20 [ 1165.571747][T25185] __x64_sys_openat+0x135/0x160 [ 1165.576619][T25185] do_syscall_64+0x4c/0xa0 [ 1165.581057][T25185] ? clear_bhb_loop+0x60/0xb0 [ 1165.585741][T25185] ? clear_bhb_loop+0x60/0xb0 [ 1165.590421][T25185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.596325][T25185] RIP: 0033:0x7f5857d9acb9 [ 1165.600739][T25185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.620354][T25185] RSP: 002b:00007f5858c1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1165.628762][T25185] RAX: ffffffffffffffda RBX: 00007f5858015fa0 RCX: 00007f5857d9acb9 [ 1165.636727][T25185] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1165.644691][T25185] RBP: 00007f5858c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.652746][T25185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.660709][T25185] R13: 00007f5858016038 R14: 00007f5858015fa0 R15: 00007ffdb135d478 [ 1165.668688][T25185] [ 1165.859654][T25197] validate_nla: 4 callbacks suppressed [ 1165.859674][T25197] netlink: 'syz.9.6809': attribute type 10 has an invalid length. [ 1165.893935][T25197] team0: Port device netdevsim0 added [ 1165.906635][T25195] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1165.930437][T25198] netlink: 'syz.9.6809': attribute type 10 has an invalid length. [ 1165.969615][T25197] netlink: 'syz.9.6809': attribute type 1 has an invalid length. [ 1165.982534][T25197] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.6809'. [ 1166.003586][T25195] netlink: 'syz.7.6808': attribute type 10 has an invalid length. [ 1166.131383][T14805] Bluetooth: hci3: command 0x2016 tx timeout [ 1166.144855][T25210] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6813'. [ 1166.198195][T25209] netlink: 'syz.5.6812': attribute type 10 has an invalid length. [ 1166.233309][T25213] netlink: 'syz.9.6813': attribute type 39 has an invalid length. [ 1166.471573][T25223] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6819'. [ 1166.831873][T25239] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1166.858476][T25239] netlink: 'syz.7.6825': attribute type 10 has an invalid length. [ 1167.167508][T25250] netlink: 'syz.5.6830': attribute type 21 has an invalid length. [ 1167.270120][T25252] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1167.307175][T25252] netlink: 'syz.7.6831': attribute type 10 has an invalid length. [ 1167.380097][T25256] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6843'. [ 1167.418573][T25256] netlink: 'syz.5.6843': attribute type 39 has an invalid length. [ 1167.480985][T25258] team0: Port device netdevsim0 removed [ 1167.651986][T14805] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1167.660988][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1167.671753][T14805] CPU: 0 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1167.679428][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1167.689506][T14805] Workqueue: hci2 hci_rx_work [ 1167.694211][T14805] Call Trace: [ 1167.697500][T14805] [ 1167.700425][T14805] dump_stack_lvl+0x188/0x24e [ 1167.705130][T14805] ? show_regs_print_info+0x12/0x12 [ 1167.710339][T14805] ? load_image+0x400/0x400 [ 1167.714854][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1167.719971][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1167.724661][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1167.729879][T14805] kobject_add_internal+0x61c/0xcc0 [ 1167.735086][T14805] kobject_add+0x160/0x230 [ 1167.739509][T14805] ? kobject_init+0x1d0/0x1d0 [ 1167.744212][T14805] ? klist_children_get+0x50/0x50 [ 1167.749257][T14805] ? get_device_parent+0x121/0x3f0 [ 1167.754374][T14805] device_add+0x483/0xfb0 [ 1167.758709][T14805] ? kmem_cache_free+0xf7/0x290 [ 1167.763563][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1167.768508][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1167.773890][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1167.779272][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1167.785521][T14805] ? bt_info+0x180/0x180 [ 1167.789770][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1167.795407][T14805] ? skb_pull_data+0xf7/0x200 [ 1167.800088][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1167.805641][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1167.811705][T14805] hci_event_packet+0x7b6/0x1280 [ 1167.816664][T14805] ? bis_list+0x280/0x280 [ 1167.821000][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1167.826898][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1167.832010][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1167.837388][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1167.842595][T14805] hci_rx_work+0x3eb/0xd40 [ 1167.847016][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1167.851874][T14805] ? process_one_work+0x7b0/0x1160 [ 1167.856984][T14805] process_one_work+0x8a2/0x1160 [ 1167.861939][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1167.867573][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1167.872595][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1167.878143][T14805] ? kthread_data+0x4b/0xc0 [ 1167.882652][T14805] worker_thread+0xaa2/0x1270 [ 1167.887346][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1167.892379][T14805] kthread+0x29d/0x330 [ 1167.896451][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1167.901477][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1167.906160][T14805] ret_from_fork+0x1f/0x30 [ 1167.910591][T14805] [ 1167.918005][T14805] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1167.932009][T14805] Bluetooth: hci2: failed to register connection device [ 1168.813031][T25300] FAULT_INJECTION: forcing a failure. [ 1168.813031][T25300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.836530][T25300] CPU: 1 PID: 25300 Comm: syz.6.6853 Not tainted syzkaller #0 [ 1168.844045][T25300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1168.854113][T25300] Call Trace: [ 1168.857407][T25300] [ 1168.860355][T25300] dump_stack_lvl+0x188/0x24e [ 1168.865069][T25300] ? show_regs_print_info+0x12/0x12 [ 1168.870310][T25300] ? load_image+0x400/0x400 [ 1168.874848][T25300] ? __lock_acquire+0x7d10/0x7d10 [ 1168.879898][T25300] ? snprintf+0xe5/0x140 [ 1168.884163][T25300] should_fail_ex+0x399/0x4d0 [ 1168.888863][T25300] _copy_to_user+0x2c/0x130 [ 1168.893376][T25300] simple_read_from_buffer+0xe3/0x150 [ 1168.898752][T25300] proc_fail_nth_read+0x1a6/0x220 [ 1168.903777][T25300] ? proc_fault_inject_write+0x310/0x310 [ 1168.909414][T25300] ? fsnotify_perm+0x248/0x550 [ 1168.914182][T25300] ? proc_fault_inject_write+0x310/0x310 [ 1168.919817][T25300] vfs_read+0x2de/0xa00 [ 1168.923980][T25300] ? kernel_read+0x1e0/0x1e0 [ 1168.928577][T25300] ? __fget_files+0x28/0x4b0 [ 1168.933175][T25300] ? __fget_files+0x28/0x4b0 [ 1168.937765][T25300] ? __fget_files+0x43d/0x4b0 [ 1168.942449][T25300] ? __fdget_pos+0x2ae/0x360 [ 1168.947035][T25300] ? ksys_read+0x71/0x250 [ 1168.951365][T25300] ksys_read+0x14c/0x250 [ 1168.955608][T25300] ? vfs_write+0xa30/0xa30 [ 1168.960028][T25300] ? lockdep_hardirqs_on+0x94/0x140 [ 1168.965230][T25300] do_syscall_64+0x4c/0xa0 [ 1168.969647][T25300] ? clear_bhb_loop+0x60/0xb0 [ 1168.974335][T25300] ? clear_bhb_loop+0x60/0xb0 [ 1168.979054][T25300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1168.985058][T25300] RIP: 0033:0x7fe94335b58e [ 1168.989467][T25300] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1169.009068][T25300] RSP: 002b:00007fe9441befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1169.017478][T25300] RAX: ffffffffffffffda RBX: 00007fe9441bf6c0 RCX: 00007fe94335b58e [ 1169.025447][T25300] RDX: 000000000000000f RSI: 00007fe9441bf0a0 RDI: 0000000000000006 [ 1169.033413][T25300] RBP: 00007fe9441bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.041384][T25300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.049350][T25300] R13: 00007fe943616038 R14: 00007fe943615fa0 R15: 00007fff882e4438 [ 1169.057338][T25300] [ 1169.269409][T25311] __nla_validate_parse: 4 callbacks suppressed [ 1169.269449][T25311] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6858'. [ 1169.377128][T25318] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1169.487288][T25323] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6863'. [ 1169.501195][T14805] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1169.509231][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1169.520433][T14805] CPU: 0 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1169.528099][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1169.538159][T14805] Workqueue: hci0 hci_rx_work [ 1169.542842][T14805] Call Trace: [ 1169.546114][T14805] [ 1169.549059][T14805] dump_stack_lvl+0x188/0x24e [ 1169.553742][T14805] ? show_regs_print_info+0x12/0x12 [ 1169.558945][T14805] ? load_image+0x400/0x400 [ 1169.563454][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1169.568568][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1169.573281][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1169.578494][T14805] kobject_add_internal+0x61c/0xcc0 [ 1169.583702][T14805] kobject_add+0x160/0x230 [ 1169.588122][T14805] ? kobject_init+0x1d0/0x1d0 [ 1169.592801][T14805] ? klist_children_get+0x50/0x50 [ 1169.597830][T14805] ? get_device_parent+0x121/0x3f0 [ 1169.602937][T14805] device_add+0x483/0xfb0 [ 1169.607260][T14805] ? kmem_cache_free+0xf7/0x290 [ 1169.612112][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1169.617062][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1169.622440][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1169.627819][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1169.634067][T14805] ? bt_info+0x180/0x180 [ 1169.638316][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1169.643955][T14805] ? skb_pull_data+0xf7/0x200 [ 1169.648638][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1169.654197][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1169.660261][T14805] hci_event_packet+0x7b6/0x1280 [ 1169.665214][T14805] ? bis_list+0x280/0x280 [ 1169.669545][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1169.675493][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1169.680604][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1169.685984][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1169.691185][T14805] hci_rx_work+0x3eb/0xd40 [ 1169.695600][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1169.700452][T14805] ? process_one_work+0x7b0/0x1160 [ 1169.705733][T14805] process_one_work+0x8a2/0x1160 [ 1169.710678][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1169.716303][T14805] ? _raw_spin_lock_irq+0x86/0xf0 [ 1169.721329][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1169.726348][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1169.731898][T14805] ? kthread_data+0x4b/0xc0 [ 1169.736409][T14805] worker_thread+0xaa2/0x1270 [ 1169.741099][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1169.746127][T14805] kthread+0x29d/0x330 [ 1169.750207][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1169.755231][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1169.759844][T14805] ret_from_fork+0x1f/0x30 [ 1169.764287][T14805] [ 1169.772667][T14805] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1169.785852][T14805] Bluetooth: hci0: failed to register connection device [ 1169.857248][T25332] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1169.964825][T14805] Bluetooth: hci2: command 0x2016 tx timeout [ 1170.004661][T25333] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6864'. [ 1170.015232][T25335] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6868'. [ 1170.709704][T25356] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6877'. [ 1171.520976][T25365] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1171.544053][T25369] validate_nla: 12 callbacks suppressed [ 1171.544090][T25369] netlink: 'syz.7.6880': attribute type 21 has an invalid length. [ 1171.600979][T25370] netlink: 'syz.5.6879': attribute type 10 has an invalid length. [ 1171.668564][T25371] netlink: 'syz.7.6880': attribute type 10 has an invalid length. [ 1171.684582][T25372] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6881'. [ 1171.799920][T14805] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1171.807806][ T4291] Bluetooth: hci0: command 0x2016 tx timeout [ 1171.815118][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1171.825384][T14805] CPU: 0 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1171.833043][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1171.843117][T14805] Workqueue: hci2 hci_rx_work [ 1171.847847][T14805] Call Trace: [ 1171.851144][T14805] [ 1171.854092][T14805] dump_stack_lvl+0x188/0x24e [ 1171.858805][T14805] ? show_regs_print_info+0x12/0x12 [ 1171.864042][T14805] ? load_image+0x400/0x400 [ 1171.868578][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1171.873716][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1171.878416][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1171.883651][T14805] kobject_add_internal+0x61c/0xcc0 [ 1171.888878][T14805] kobject_add+0x160/0x230 [ 1171.893315][T14805] ? kobject_init+0x1d0/0x1d0 [ 1171.898013][T14805] ? klist_children_get+0x50/0x50 [ 1171.903060][T14805] ? get_device_parent+0x121/0x3f0 [ 1171.908188][T14805] device_add+0x483/0xfb0 [ 1171.912531][T14805] ? kmem_cache_free+0xf7/0x290 [ 1171.917403][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1171.922363][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1171.927798][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1171.933282][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1171.939557][T14805] ? bt_info+0x180/0x180 [ 1171.943831][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1171.949580][T14805] ? skb_pull_data+0xf7/0x200 [ 1171.954281][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1171.959867][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1171.965948][T14805] hci_event_packet+0x7b6/0x1280 [ 1171.970914][T14805] ? bis_list+0x280/0x280 [ 1171.975257][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1171.981188][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1171.986324][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1171.991732][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1171.996951][T14805] hci_rx_work+0x3eb/0xd40 [ 1172.001386][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1172.006265][T14805] ? process_one_work+0x7b0/0x1160 [ 1172.011392][T14805] process_one_work+0x8a2/0x1160 [ 1172.016360][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1172.022014][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1172.027049][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1172.032613][T14805] ? kthread_data+0x4b/0xc0 [ 1172.037141][T14805] worker_thread+0xaa2/0x1270 [ 1172.041852][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1172.046898][T14805] kthread+0x29d/0x330 [ 1172.050981][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1172.056014][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1172.060623][T14805] ret_from_fork+0x1f/0x30 [ 1172.065065][T14805] [ 1172.069266][T14805] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1172.082911][T14805] Bluetooth: hci2: failed to register connection device [ 1172.256263][T25392] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6889'. [ 1172.382728][T25394] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6891'. [ 1172.415976][T25394] netlink: 'syz.7.6891': attribute type 39 has an invalid length. [ 1173.141561][T25408] netlink: 'syz.6.6896': attribute type 10 has an invalid length. [ 1173.503826][T25420] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1173.568193][T25420] netlink: 'syz.8.6902': attribute type 21 has an invalid length. [ 1173.618599][ T4291] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1173.627316][ T4291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 1173.639162][ T4291] CPU: 0 PID: 4291 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1173.646746][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1173.656814][ T4291] Workqueue: hci5 hci_rx_work [ 1173.661518][ T4291] Call Trace: [ 1173.664803][ T4291] [ 1173.667741][ T4291] dump_stack_lvl+0x188/0x24e [ 1173.672453][ T4291] ? show_regs_print_info+0x12/0x12 [ 1173.677673][ T4291] ? load_image+0x400/0x400 [ 1173.682214][ T4291] sysfs_create_dir_ns+0x26a/0x290 [ 1173.687352][ T4291] ? sysfs_warn_dup+0xa0/0xa0 [ 1173.692061][ T4291] ? do_raw_spin_unlock+0x11d/0x230 [ 1173.697288][ T4291] kobject_add_internal+0x61c/0xcc0 [ 1173.702499][ T4291] kobject_add+0x160/0x230 [ 1173.706921][ T4291] ? kobject_init+0x1d0/0x1d0 [ 1173.711603][ T4291] ? klist_children_get+0x50/0x50 [ 1173.716631][ T4291] ? get_device_parent+0x121/0x3f0 [ 1173.721755][ T4291] device_add+0x483/0xfb0 [ 1173.726086][ T4291] ? kmem_cache_free+0xf7/0x290 [ 1173.730945][ T4291] hci_conn_add_sysfs+0xd1/0x1e0 [ 1173.735891][ T4291] le_conn_complete_evt+0x105f/0x1670 [ 1173.741271][ T4291] ? le_conn_complete_evt+0xe6/0x1670 [ 1173.746660][ T4291] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1173.752905][ T4291] ? bt_info+0x180/0x180 [ 1173.757153][ T4291] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1173.762794][ T4291] ? skb_pull_data+0xf7/0x200 [ 1173.767471][ T4291] hci_le_conn_complete_evt+0x183/0x440 [ 1173.773030][ T4291] ? hci_remote_host_features_evt+0x270/0x270 [ 1173.779098][ T4291] hci_event_packet+0x7b6/0x1280 [ 1173.784053][ T4291] ? bis_list+0x280/0x280 [ 1173.788389][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1173.794312][ T4291] ? kcov_remote_start+0x4c7/0x7e0 [ 1173.799428][ T4291] ? sync_thread_backup+0x1710/0x2090 [ 1173.804833][ T4291] ? hci_send_to_monitor+0x9c/0x4a0 [ 1173.810038][ T4291] hci_rx_work+0x3eb/0xd40 [ 1173.814459][ T4291] ? _raw_spin_unlock+0x40/0x40 [ 1173.819314][ T4291] ? process_one_work+0x7b0/0x1160 [ 1173.824422][ T4291] process_one_work+0x8a2/0x1160 [ 1173.829375][ T4291] ? worker_detach_from_pool+0x240/0x240 [ 1173.835009][ T4291] ? _raw_spin_lock_irq+0x86/0xf0 [ 1173.840035][ T4291] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1173.845054][ T4291] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1173.850608][ T4291] ? kthread_data+0x4b/0xc0 [ 1173.855117][ T4291] worker_thread+0xaa2/0x1270 [ 1173.859892][ T4291] kthread+0x29d/0x330 [ 1173.863960][ T4291] ? worker_clr_flags+0x1a0/0x1a0 [ 1173.868985][ T4291] ? kthread_blkcg+0xd0/0xd0 [ 1173.873578][ T4291] ret_from_fork+0x1f/0x30 [ 1173.878007][ T4291] [ 1173.884627][ T4291] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1173.893902][T25421] netlink: 'syz.8.6902': attribute type 10 has an invalid length. [ 1173.898532][ T4291] Bluetooth: hci5: failed to register connection device [ 1174.134298][ T4291] Bluetooth: hci2: command 0x2016 tx timeout [ 1174.357947][T25439] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6910'. [ 1174.563723][T25444] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1174.625734][T25444] netlink: 'syz.7.6911': attribute type 21 has an invalid length. [ 1174.644854][T25444] netlink: 'syz.7.6911': attribute type 10 has an invalid length. [ 1174.699765][T25448] netlink: 'syz.5.6913': attribute type 21 has an invalid length. [ 1175.046184][T25458] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6917'. [ 1175.215505][T25467] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6922'. [ 1175.304637][ T4291] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1175.312336][ T4291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 1175.322759][ T4291] CPU: 0 PID: 4291 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1175.330354][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1175.340956][ T4291] Workqueue: hci5 hci_rx_work [ 1175.345688][ T4291] Call Trace: [ 1175.348974][ T4291] [ 1175.351917][ T4291] dump_stack_lvl+0x188/0x24e [ 1175.356626][ T4291] ? show_regs_print_info+0x12/0x12 [ 1175.361852][ T4291] ? load_image+0x400/0x400 [ 1175.366391][ T4291] sysfs_create_dir_ns+0x26a/0x290 [ 1175.371531][ T4291] ? sysfs_warn_dup+0xa0/0xa0 [ 1175.376235][ T4291] ? do_raw_spin_unlock+0x11d/0x230 [ 1175.381476][ T4291] kobject_add_internal+0x61c/0xcc0 [ 1175.386702][ T4291] kobject_add+0x160/0x230 [ 1175.391138][ T4291] ? kobject_init+0x1d0/0x1d0 [ 1175.395838][ T4291] ? klist_children_get+0x50/0x50 [ 1175.400877][ T4291] ? get_device_parent+0x121/0x3f0 [ 1175.406000][ T4291] device_add+0x483/0xfb0 [ 1175.410341][ T4291] ? kmem_cache_free+0xf7/0x290 [ 1175.415206][ T4291] hci_conn_add_sysfs+0xd1/0x1e0 [ 1175.420180][ T4291] le_conn_complete_evt+0x105f/0x1670 [ 1175.425570][ T4291] ? le_conn_complete_evt+0xe6/0x1670 [ 1175.430965][ T4291] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1175.437221][ T4291] ? bt_info+0x180/0x180 [ 1175.441483][ T4291] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1175.447145][ T4291] ? skb_pull_data+0xf7/0x200 [ 1175.451839][ T4291] hci_le_conn_complete_evt+0x183/0x440 [ 1175.457405][ T4291] ? hci_remote_host_features_evt+0x270/0x270 [ 1175.463481][ T4291] hci_event_packet+0x7b6/0x1280 [ 1175.468448][ T4291] ? bis_list+0x280/0x280 [ 1175.472796][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1175.478703][ T4291] ? kcov_remote_start+0x4c7/0x7e0 [ 1175.483825][ T4291] ? sync_thread_backup+0x1710/0x2090 [ 1175.489221][ T4291] ? hci_send_to_monitor+0x9c/0x4a0 [ 1175.494449][ T4291] hci_rx_work+0x3eb/0xd40 [ 1175.498883][ T4291] ? _raw_spin_unlock+0x40/0x40 [ 1175.503755][ T4291] ? process_one_work+0x7b0/0x1160 [ 1175.508877][ T4291] process_one_work+0x8a2/0x1160 [ 1175.513840][ T4291] ? worker_detach_from_pool+0x240/0x240 [ 1175.519484][ T4291] ? _raw_spin_lock_irq+0x86/0xf0 [ 1175.524525][ T4291] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1175.529563][ T4291] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1175.535116][ T4291] ? kthread_data+0x4b/0xc0 [ 1175.539647][ T4291] worker_thread+0xaa2/0x1270 [ 1175.544369][ T4291] kthread+0x29d/0x330 [ 1175.548448][ T4291] ? worker_clr_flags+0x1a0/0x1a0 [ 1175.553481][ T4291] ? kthread_blkcg+0xd0/0xd0 [ 1175.558089][ T4291] ret_from_fork+0x1f/0x30 [ 1175.562533][ T4291] [ 1175.574263][ T4291] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1175.587634][ T4291] Bluetooth: hci5: failed to register connection device [ 1175.964554][ T4291] Bluetooth: hci5: command 0x2016 tx timeout [ 1176.204673][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 1176.453035][T25501] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6935'. [ 1176.490869][T25503] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6934'. [ 1176.569407][T25508] validate_nla: 8 callbacks suppressed [ 1176.569424][T25508] netlink: 'syz.9.6938': attribute type 10 has an invalid length. [ 1176.623478][T25508] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1177.038830][T25519] FAULT_INJECTION: forcing a failure. [ 1177.038830][T25519] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.084801][T25519] CPU: 0 PID: 25519 Comm: syz.5.6943 Not tainted syzkaller #0 [ 1177.092323][T25519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1177.102397][T25519] Call Trace: [ 1177.105688][T25519] [ 1177.108629][T25519] dump_stack_lvl+0x188/0x24e [ 1177.113337][T25519] ? show_regs_print_info+0x12/0x12 [ 1177.118562][T25519] ? load_image+0x400/0x400 [ 1177.123090][T25519] ? __might_sleep+0xd0/0xd0 [ 1177.127710][T25519] ? __lock_acquire+0x7d10/0x7d10 [ 1177.132753][T25519] should_fail_ex+0x399/0x4d0 [ 1177.137455][T25519] should_failslab+0x5/0x20 [ 1177.141971][T25519] slab_pre_alloc_hook+0x59/0x310 [ 1177.147010][T25519] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1177.153439][T25519] __kmem_cache_alloc_node+0x4f/0x260 [ 1177.158835][T25519] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1177.165286][T25519] __kmalloc+0xa0/0x240 [ 1177.169476][T25519] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1177.176011][T25519] ? xdp_convert_buff_to_md+0x200/0x200 [ 1177.181583][T25519] ? __fget_files+0x28/0x4b0 [ 1177.186188][T25519] ? __fget_files+0x28/0x4b0 [ 1177.190794][T25519] ? __fget_files+0x43d/0x4b0 [ 1177.195496][T25519] ? xdp_convert_buff_to_md+0x200/0x200 [ 1177.201056][T25519] bpf_prog_test_run+0x31e/0x390 [ 1177.206017][T25519] __sys_bpf+0x62b/0x780 [ 1177.210273][T25519] ? bpf_link_show_fdinfo+0x380/0x380 [ 1177.215676][T25519] ? lock_chain_count+0x20/0x20 [ 1177.220546][T25519] __x64_sys_bpf+0x78/0x90 [ 1177.224978][T25519] do_syscall_64+0x4c/0xa0 [ 1177.229410][T25519] ? clear_bhb_loop+0x60/0xb0 [ 1177.234102][T25519] ? clear_bhb_loop+0x60/0xb0 [ 1177.238796][T25519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1177.244707][T25519] RIP: 0033:0x7f334279acb9 [ 1177.249137][T25519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.268753][T25519] RSP: 002b:00007f33435a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1177.277183][T25519] RAX: ffffffffffffffda RBX: 00007f3342a15fa0 RCX: 00007f334279acb9 [ 1177.285171][T25519] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1177.293146][T25519] RBP: 00007f33435a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.301123][T25519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.309104][T25519] R13: 00007f3342a16038 R14: 00007f3342a15fa0 R15: 00007ffedde7c478 [ 1177.317109][T25519] [ 1177.324359][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.330724][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.426888][T25523] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1177.468964][T25524] FAULT_INJECTION: forcing a failure. [ 1177.468964][T25524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.489459][T25524] CPU: 1 PID: 25524 Comm: syz.5.6945 Not tainted syzkaller #0 [ 1177.496981][T25524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1177.497935][T25523] netlink: 'syz.8.6954': attribute type 21 has an invalid length. [ 1177.507047][T25524] Call Trace: [ 1177.507063][T25524] [ 1177.507072][T25524] dump_stack_lvl+0x188/0x24e [ 1177.507105][T25524] ? show_regs_print_info+0x12/0x12 [ 1177.507128][T25524] ? load_image+0x400/0x400 [ 1177.507156][T25524] ? __lock_acquire+0x7d10/0x7d10 [ 1177.507186][T25524] should_fail_ex+0x399/0x4d0 [ 1177.507217][T25524] _copy_from_user+0x2c/0x170 [ 1177.507241][T25524] iovec_from_user+0x143/0x360 [ 1177.550699][T25523] netlink: 'syz.8.6954': attribute type 10 has an invalid length. [ 1177.554778][T25524] __import_iovec+0x6d/0x500 [ 1177.554805][T25524] ? __might_fault+0xc2/0x120 [ 1177.554830][T25524] import_iovec+0x6f/0xa0 [ 1177.554851][T25524] ___sys_sendmsg+0x252/0x360 [ 1177.554878][T25524] ? __sys_sendmsg+0x290/0x290 [ 1177.554914][T25524] ? __lock_acquire+0x7d10/0x7d10 [ 1177.590710][T25524] __se_sys_sendmsg+0x1bb/0x2a0 [ 1177.595575][T25524] ? __x64_sys_sendmsg+0x80/0x80 [ 1177.600517][T25524] ? lockdep_hardirqs_on+0x94/0x140 [ 1177.605712][T25524] do_syscall_64+0x4c/0xa0 [ 1177.610127][T25524] ? clear_bhb_loop+0x60/0xb0 [ 1177.614794][T25524] ? clear_bhb_loop+0x60/0xb0 [ 1177.619466][T25524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1177.625356][T25524] RIP: 0033:0x7f334279acb9 [ 1177.629762][T25524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.649359][T25524] RSP: 002b:00007f33435a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1177.657770][T25524] RAX: ffffffffffffffda RBX: 00007f3342a15fa0 RCX: 00007f334279acb9 [ 1177.665733][T25524] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1177.673696][T25524] RBP: 00007f33435a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.681655][T25524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.689616][T25524] R13: 00007f3342a16038 R14: 00007f3342a15fa0 R15: 00007ffedde7c478 [ 1177.697590][T25524] [ 1178.044306][ T4291] Bluetooth: hci5: command 0x2016 tx timeout [ 1178.113900][T25550] netlink: 'syz.5.6951': attribute type 11 has an invalid length. [ 1178.146231][T25550] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6951'. [ 1178.239521][T25540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1178.834086][T25568] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1178.883583][T25563] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6957'. [ 1178.944985][T25573] netlink: 'syz.7.6960': attribute type 21 has an invalid length. [ 1179.044055][T25573] netlink: 'syz.7.6960': attribute type 10 has an invalid length. [ 1179.133107][T25576] device syzkaller0 entered promiscuous mode [ 1179.891666][T25588] device veth1_macvtap left promiscuous mode [ 1180.398915][T25611] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6971'. [ 1181.487277][T25649] netlink: 'syz.7.6985': attribute type 11 has an invalid length. [ 1181.537415][T25649] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6985'. [ 1181.769595][T25648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1182.014664][T25672] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6994'. [ 1183.038434][T25693] netlink: 'syz.5.7001': attribute type 39 has an invalid length. [ 1183.130008][T25697] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7000'. [ 1183.434781][T25702] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1183.486258][T25702] netlink: 'syz.9.7003': attribute type 10 has an invalid length. [ 1183.893194][T25710] netlink: 'syz.6.7007': attribute type 11 has an invalid length. [ 1183.911332][T25710] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7007'. [ 1184.056635][T25716] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7009'. [ 1184.428958][T25729] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1184.456946][T25729] netlink: 'syz.8.7013': attribute type 21 has an invalid length. [ 1184.468145][T25729] netlink: 'syz.8.7013': attribute type 10 has an invalid length. [ 1184.523067][T25709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1184.817244][T25737] netlink: 'syz.9.7016': attribute type 11 has an invalid length. [ 1184.844808][T25737] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.7016'. [ 1185.017028][T25744] netlink: 'syz.5.7018': attribute type 10 has an invalid length. [ 1185.149727][T25736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1185.311514][T25760] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1185.468303][T25764] device veth1_macvtap left promiscuous mode [ 1185.589743][T25766] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7028'. [ 1186.168622][T25788] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7035'. [ 1186.191624][T25790] netlink: 'syz.7.7034': attribute type 10 has an invalid length. [ 1186.210424][T25788] netlink: 'syz.8.7035': attribute type 39 has an invalid length. [ 1186.376020][T25796] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1186.448706][T25796] netlink: 'syz.7.7038': attribute type 21 has an invalid length. [ 1186.483547][T25796] netlink: 'syz.7.7038': attribute type 10 has an invalid length. [ 1187.023172][T25811] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1187.306565][T25827] netlink: 'syz.7.7048': attribute type 10 has an invalid length. [ 1187.431744][T25829] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7049'. [ 1187.555875][T25836] syz.9.7050[25836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1187.556007][T25836] syz.9.7050[25836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1187.627348][T25837] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1188.351331][T25850] netlink: 'syz.5.7059': attribute type 11 has an invalid length. [ 1188.372161][T25850] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7059'. [ 1188.468409][T25856] validate_nla: 5 callbacks suppressed [ 1188.468427][T25856] netlink: 'syz.9.7061': attribute type 10 has an invalid length. [ 1188.802773][T25867] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7063'. [ 1188.866974][T25867] netlink: 'syz.9.7063': attribute type 39 has an invalid length. [ 1189.172042][T25849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.203025][T25874] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1189.305778][T25876] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1189.343913][T25876] netlink: 'syz.7.7066': attribute type 21 has an invalid length. [ 1189.374921][T25878] netlink: 'syz.6.7067': attribute type 21 has an invalid length. [ 1189.396815][T25876] netlink: 'syz.7.7066': attribute type 10 has an invalid length. [ 1189.416059][T25878] netlink: 'syz.6.7067': attribute type 10 has an invalid length. [ 1189.525644][T25882] netlink: 'syz.5.7069': attribute type 21 has an invalid length. [ 1189.564403][T14805] Bluetooth: hci3: command 0x0406 tx timeout [ 1189.602473][T25885] netlink: 'syz.5.7069': attribute type 10 has an invalid length. [ 1189.973592][T25892] netlink: 'syz.9.7073': attribute type 10 has an invalid length. [ 1190.053309][T25894] FAULT_INJECTION: forcing a failure. [ 1190.053309][T25894] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.094238][T25894] CPU: 0 PID: 25894 Comm: syz.5.7074 Not tainted syzkaller #0 [ 1190.101773][T25894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1190.111877][T25894] Call Trace: [ 1190.115199][T25894] [ 1190.118165][T25894] dump_stack_lvl+0x188/0x24e [ 1190.122903][T25894] ? show_regs_print_info+0x12/0x12 [ 1190.128153][T25894] ? load_image+0x400/0x400 [ 1190.132711][T25894] ? verify_lock_unused+0x140/0x140 [ 1190.137979][T25894] should_fail_ex+0x399/0x4d0 [ 1190.142722][T25894] should_failslab+0x5/0x20 [ 1190.147265][T25894] slab_pre_alloc_hook+0x59/0x310 [ 1190.152375][T25894] kmem_cache_alloc+0x56/0x2f0 [ 1190.157170][T25894] ? skb_clone+0x1e7/0x370 [ 1190.161813][T25894] skb_clone+0x1e7/0x370 [ 1190.166099][T25894] __netlink_deliver_tap+0x3ed/0x800 [ 1190.171455][T25894] ? netlink_deliver_tap+0x2e/0x1b0 [ 1190.176703][T25894] netlink_deliver_tap+0x19c/0x1b0 [ 1190.181853][T25894] netlink_sendskb+0x64/0x130 [ 1190.186569][T25894] netlink_ack+0xcdd/0x1170 [ 1190.191109][T25894] ? __inet_diag_dump+0x380/0x380 [ 1190.196227][T25894] ? netlink_dump+0xd00/0xd00 [ 1190.200949][T25894] ? __inet_diag_dump+0x380/0x380 [ 1190.206012][T25894] ? sock_diag_rcv_msg+0x3f6/0x5f0 [ 1190.211171][T25894] netlink_rcv_skb+0x280/0x450 [ 1190.215978][T25894] ? sock_diag_bind+0xa0/0xa0 [ 1190.220717][T25894] ? netlink_ack+0x1170/0x1170 [ 1190.225565][T25894] ? netlink_deliver_tap+0x2e/0x1b0 [ 1190.230811][T25894] sock_diag_rcv+0x26/0x40 [ 1190.235261][T25894] netlink_unicast+0x74d/0x8d0 [ 1190.240089][T25894] netlink_sendmsg+0x8ad/0xbd0 [ 1190.244908][T25894] ? netlink_getsockopt+0x550/0x550 [ 1190.250153][T25894] ? aa_sock_msg_perm+0x94/0x150 [ 1190.255131][T25894] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1190.260445][T25894] ? security_socket_sendmsg+0x7c/0xa0 [ 1190.265946][T25894] ? netlink_getsockopt+0x550/0x550 [ 1190.271179][T25894] ____sys_sendmsg+0x5be/0x970 [ 1190.276012][T25894] ? __sys_sendmsg_sock+0x30/0x30 [ 1190.281055][T25894] ? __import_iovec+0x315/0x500 [ 1190.285957][T25894] ? import_iovec+0x6f/0xa0 [ 1190.290508][T25894] ___sys_sendmsg+0x2a2/0x360 [ 1190.295253][T25894] ? __sys_sendmsg+0x290/0x290 [ 1190.300107][T25894] ? __lock_acquire+0x7d10/0x7d10 [ 1190.305241][T25894] __se_sys_sendmsg+0x1bb/0x2a0 [ 1190.310130][T25894] ? __x64_sys_sendmsg+0x80/0x80 [ 1190.315146][T25894] ? lockdep_hardirqs_on+0x94/0x140 [ 1190.320388][T25894] do_syscall_64+0x4c/0xa0 [ 1190.324841][T25894] ? clear_bhb_loop+0x60/0xb0 [ 1190.329544][T25894] ? clear_bhb_loop+0x60/0xb0 [ 1190.334256][T25894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1190.340176][T25894] RIP: 0033:0x7f334279acb9 [ 1190.345521][T25894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.365595][T25894] RSP: 002b:00007f33435a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.374039][T25894] RAX: ffffffffffffffda RBX: 00007f3342a15fa0 RCX: 00007f334279acb9 [ 1190.382059][T25894] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1190.390141][T25894] RBP: 00007f33435a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.398139][T25894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.406142][T25894] R13: 00007f3342a16038 R14: 00007f3342a15fa0 R15: 00007ffedde7c478 [ 1190.414184][T25894] [ 1190.941816][T25915] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1190.957856][T25915] netlink: 'syz.9.7083': attribute type 21 has an invalid length. [ 1190.971014][T14805] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1190.978916][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1190.992114][T14805] CPU: 0 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1190.999790][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1191.009887][T14805] Workqueue: hci2 hci_rx_work [ 1191.014604][T14805] Call Trace: [ 1191.017882][T14805] [ 1191.020811][T14805] dump_stack_lvl+0x188/0x24e [ 1191.025501][T14805] ? show_regs_print_info+0x12/0x12 [ 1191.030704][T14805] ? load_image+0x400/0x400 [ 1191.035219][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1191.040334][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1191.045012][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1191.050220][T14805] kobject_add_internal+0x61c/0xcc0 [ 1191.055423][T14805] kobject_add+0x160/0x230 [ 1191.059932][T14805] ? kobject_init+0x1d0/0x1d0 [ 1191.064608][T14805] ? klist_children_get+0x50/0x50 [ 1191.069635][T14805] ? get_device_parent+0x121/0x3f0 [ 1191.074747][T14805] device_add+0x483/0xfb0 [ 1191.079073][T14805] ? kmem_cache_free+0xf7/0x290 [ 1191.083926][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1191.088872][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1191.094265][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1191.099658][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1191.105906][T14805] ? bt_info+0x180/0x180 [ 1191.110151][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1191.115785][T14805] ? skb_pull_data+0xf7/0x200 [ 1191.120464][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1191.126013][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1191.132073][T14805] hci_event_packet+0x7b6/0x1280 [ 1191.137108][T14805] ? bis_list+0x280/0x280 [ 1191.141439][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1191.147331][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1191.152443][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1191.157821][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1191.163023][T14805] hci_rx_work+0x3eb/0xd40 [ 1191.167447][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1191.172300][T14805] ? process_one_work+0x7b0/0x1160 [ 1191.177405][T14805] process_one_work+0x8a2/0x1160 [ 1191.182372][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1191.188023][T14805] ? _raw_spin_lock_irq+0x86/0xf0 [ 1191.193057][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1191.198078][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1191.203618][T14805] ? kthread_data+0x4b/0xc0 [ 1191.208129][T14805] worker_thread+0xaa2/0x1270 [ 1191.212816][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1191.217856][T14805] kthread+0x29d/0x330 [ 1191.221925][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1191.226945][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1191.231534][T14805] ret_from_fork+0x1f/0x30 [ 1191.235962][T14805] [ 1191.240612][T14805] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1191.253901][T14805] Bluetooth: hci2: failed to register connection device [ 1192.399969][T25949] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1192.661074][T25953] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1192.808703][T14805] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1192.817186][T14805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1192.826931][T14805] CPU: 0 PID: 14805 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1192.834591][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1192.844674][T14805] Workqueue: hci1 hci_rx_work [ 1192.849390][T14805] Call Trace: [ 1192.852692][T14805] [ 1192.855667][T14805] dump_stack_lvl+0x188/0x24e [ 1192.860410][T14805] ? show_regs_print_info+0x12/0x12 [ 1192.865642][T14805] ? load_image+0x400/0x400 [ 1192.870164][T14805] sysfs_create_dir_ns+0x26a/0x290 [ 1192.875282][T14805] ? sysfs_warn_dup+0xa0/0xa0 [ 1192.879959][T14805] ? do_raw_spin_unlock+0x11d/0x230 [ 1192.885165][T14805] kobject_add_internal+0x61c/0xcc0 [ 1192.890404][T14805] kobject_add+0x160/0x230 [ 1192.894830][T14805] ? kobject_init+0x1d0/0x1d0 [ 1192.899510][T14805] ? klist_children_get+0x50/0x50 [ 1192.904535][T14805] ? get_device_parent+0x121/0x3f0 [ 1192.909643][T14805] device_add+0x483/0xfb0 [ 1192.913972][T14805] ? kmem_cache_free+0xf7/0x290 [ 1192.918825][T14805] hci_conn_add_sysfs+0xd1/0x1e0 [ 1192.923771][T14805] le_conn_complete_evt+0x105f/0x1670 [ 1192.929203][T14805] ? le_conn_complete_evt+0xe6/0x1670 [ 1192.934586][T14805] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1192.940835][T14805] ? bt_info+0x180/0x180 [ 1192.945083][T14805] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1192.950723][T14805] ? skb_pull_data+0xf7/0x200 [ 1192.955404][T14805] hci_le_conn_complete_evt+0x183/0x440 [ 1192.960966][T14805] ? hci_remote_host_features_evt+0x270/0x270 [ 1192.967041][T14805] hci_event_packet+0x7b6/0x1280 [ 1192.971991][T14805] ? bis_list+0x280/0x280 [ 1192.976349][T14805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1192.982256][T14805] ? kcov_remote_start+0x4c7/0x7e0 [ 1192.987375][T14805] ? sync_thread_backup+0x1710/0x2090 [ 1192.992752][T14805] ? hci_send_to_monitor+0x9c/0x4a0 [ 1192.997954][T14805] hci_rx_work+0x3eb/0xd40 [ 1193.002374][T14805] ? _raw_spin_unlock+0x40/0x40 [ 1193.007226][T14805] ? process_one_work+0x7b0/0x1160 [ 1193.012337][T14805] process_one_work+0x8a2/0x1160 [ 1193.017283][T14805] ? worker_detach_from_pool+0x240/0x240 [ 1193.022914][T14805] ? _raw_spin_lock_irq+0x86/0xf0 [ 1193.027939][T14805] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1193.032962][T14805] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1193.038510][T14805] ? kthread_data+0x4b/0xc0 [ 1193.043019][T14805] worker_thread+0xaa2/0x1270 [ 1193.047711][T14805] ? __kthread_parkme+0x162/0x1c0 [ 1193.052757][T14805] kthread+0x29d/0x330 [ 1193.056831][T14805] ? worker_clr_flags+0x1a0/0x1a0 [ 1193.061856][T14805] ? kthread_blkcg+0xd0/0xd0 [ 1193.066456][T14805] ret_from_fork+0x1f/0x30 [ 1193.070888][T14805] [ 1193.075347][T14805] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1193.088474][T14805] Bluetooth: hci1: failed to register connection device [ 1193.197696][T25969] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7108'. [ 1193.334317][T14805] Bluetooth: hci2: command 0x2016 tx timeout [ 1193.439964][T25980] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1193.679962][T25987] validate_nla: 8 callbacks suppressed [ 1193.680000][T25987] netlink: 'syz.6.7113': attribute type 21 has an invalid length. [ 1193.802298][T25987] netlink: 'syz.6.7113': attribute type 10 has an invalid length. [ 1193.976971][T25997] FAULT_INJECTION: forcing a failure. [ 1193.976971][T25997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.977702][T25997] [ 1193.977708][T25997] ====================================================== [ 1193.977714][T25997] WARNING: possible circular locking dependency detected [ 1193.977735][T25997] syzkaller #0 Not tainted [ 1193.977743][T25997] ------------------------------------------------------ [ 1193.977748][T25997] syz.8.7117/25997 is trying to acquire lock: [ 1193.977756][T25997] ffffffff8cb1f460 (console_owner){-...}-{0:0}, at: console_emit_next_record+0x683/0xba0 [ 1193.977817][T25997] [ 1193.977817][T25997] but task is already holding lock: [ 1193.977822][T25997] ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 1193.977857][T25997] [ 1193.977857][T25997] which lock already depends on the new lock. [ 1193.977857][T25997] [ 1193.977862][T25997] [ 1193.977862][T25997] the existing dependency chain (in reverse order) is: [ 1193.977867][T25997] [ 1193.977867][T25997] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1193.977888][T25997] _raw_spin_lock_nested+0x2e/0x40 [ 1193.977906][T25997] raw_spin_rq_lock_nested+0x26/0x140 [ 1193.977923][T25997] task_fork_fair+0x5c/0x350 [ 1193.977941][T25997] sched_cgroup_fork+0x32c/0x3c0 [ 1193.977959][T25997] copy_process+0x24de/0x4030 [ 1193.977974][T25997] kernel_clone+0x24b/0x900 [ 1193.977987][T25997] user_mode_thread+0x10d/0x180 [ 1193.978002][T25997] rest_init+0x23/0x300 [ 1193.978020][T25997] start_kernel+0x0/0x53c [ 1193.978068][T25997] start_kernel+0x493/0x53c [ 1193.978085][T25997] secondary_startup_64_no_verify+0xcf/0xdb [ 1193.978104][T25997] [ 1193.978104][T25997] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1193.978124][T25997] _raw_spin_lock_irqsave+0xb0/0x100 [ 1193.978140][T25997] try_to_wake_up+0x5c/0x1080 [ 1193.978157][T25997] __wake_up_common+0x2a4/0x4e0 [ 1193.978177][T25997] __wake_up+0x121/0x1a0 [ 1193.978194][T25997] tty_port_default_wakeup+0x9e/0xf0 [ 1193.978209][T25997] serial8250_tx_chars+0x629/0x830 [ 1193.978225][T25997] serial8250_handle_irq+0x516/0x6d0 [ 1193.978241][T25997] serial8250_default_handle_irq+0xb4/0x1a0 [ 1193.978259][T25997] serial8250_interrupt+0x9b/0x1c0 [ 1193.978273][T25997] __handle_irq_event_percpu+0x293/0xa50 [ 1193.978289][T25997] handle_irq_event+0x87/0x1e0 [ 1193.978302][T25997] handle_edge_irq+0x243/0xb20 [ 1193.978320][T25997] __common_interrupt+0xd7/0x1e0 [ 1193.978340][T25997] common_interrupt+0xb0/0xd0 [ 1193.978354][T25997] asm_common_interrupt+0x22/0x40 [ 1193.978372][T25997] default_idle+0xb/0x10 [ 1193.978386][T25997] default_idle_call+0x84/0xc0 [ 1193.978401][T25997] do_idle+0x20d/0x5a0 [ 1193.978420][T25997] cpu_startup_entry+0x3f/0x60 [ 1193.978439][T25997] rest_init+0x2dc/0x300 [ 1193.978456][T25997] start_kernel+0x0/0x53c [ 1193.978472][T25997] start_kernel+0x493/0x53c [ 1193.978489][T25997] secondary_startup_64_no_verify+0xcf/0xdb [ 1193.978507][T25997] [ 1193.978507][T25997] -> #2 (&tty->write_wait){-...}-{2:2}: [ 1193.978527][T25997] _raw_spin_lock_irqsave+0xb0/0x100 [ 1193.978543][T25997] __wake_up+0x107/0x1a0 [ 1193.978560][T25997] tty_port_default_wakeup+0x9e/0xf0 [ 1193.978574][T25997] serial8250_tx_chars+0x629/0x830 [ 1193.978590][T25997] serial8250_handle_irq+0x516/0x6d0 [ 1193.978606][T25997] serial8250_default_handle_irq+0xb4/0x1a0 [ 1193.978623][T25997] serial8250_interrupt+0x9b/0x1c0 [ 1193.978638][T25997] __handle_irq_event_percpu+0x293/0xa50 [ 1193.978653][T25997] handle_irq_event+0x87/0x1e0 [ 1193.978667][T25997] handle_edge_irq+0x243/0xb20 [ 1193.978684][T25997] __common_interrupt+0xd7/0x1e0 [ 1193.978704][T25997] common_interrupt+0xb0/0xd0 [ 1193.978718][T25997] asm_common_interrupt+0x22/0x40 [ 1193.978735][T25997] default_idle+0xb/0x10 [ 1193.978750][T25997] default_idle_call+0x84/0xc0 [ 1193.978764][T25997] do_idle+0x20d/0x5a0 [ 1193.978783][T25997] cpu_startup_entry+0x3f/0x60 [ 1193.978806][T25997] rest_init+0x2dc/0x300 [ 1193.978822][T25997] start_kernel+0x0/0x53c [ 1193.978837][T25997] start_kernel+0x493/0x53c [ 1193.978854][T25997] secondary_startup_64_no_verify+0xcf/0xdb [ 1193.978873][T25997] [ 1193.978873][T25997] -> #1 (&port_lock_key){-...}-{2:2}: [ 1193.978894][T25997] _raw_spin_lock_irqsave+0xb0/0x100 [ 1193.978911][T25997] serial8250_console_write+0x171/0x17f0 [ 1193.978928][T25997] console_emit_next_record+0x79e/0xba0 [ 1193.978950][T25997] console_unlock+0x223/0x630 [ 1193.978969][T25997] vprintk_emit+0x4b3/0x6a0 [ 1193.978988][T25997] _printk+0xda/0x130 [ 1193.979006][T25997] register_console+0x6cf/0x9c0 [ 1193.979026][T25997] univ8250_console_init+0x41/0x43 [ 1193.979060][T25997] console_init+0x1bc/0x78e [ 1193.979081][T25997] start_kernel+0x306/0x53c [ 1193.979098][T25997] secondary_startup_64_no_verify+0xcf/0xdb [ 1193.979117][T25997] [ 1193.979117][T25997] -> #0 (console_owner){-...}-{0:0}: [ 1193.979137][T25997] __lock_acquire+0x2d07/0x7d10 [ 1193.979156][T25997] lock_acquire+0x1bb/0x4a0 [ 1193.979175][T25997] console_emit_next_record+0x6a4/0xba0 [ 1193.979196][T25997] console_unlock+0x223/0x630 [ 1193.979215][T25997] vprintk_emit+0x4b3/0x6a0 [ 1193.979234][T25997] _printk+0xda/0x130 [ 1193.979251][T25997] should_fail_ex+0x37a/0x4d0 [ 1193.979272][T25997] strncpy_from_user+0x32/0x350 [ 1193.979291][T25997] strncpy_from_user_nofault+0x6d/0x140 [ 1193.979307][T25997] bpf_probe_read_user_str+0x26/0x70 [ 1193.979326][T25997] bpf_prog_7acee76fef7300d9+0x5b/0x5f [ 1193.979343][T25997] bpf_trace_run2+0x1d5/0x3e0 [ 1193.979364][T25997] trace_tlb_flush+0x143/0x190 [ 1193.979383][T25997] switch_mm_irqs_off+0x779/0xb40 [ 1193.979402][T25997] __schedule+0xf3c/0x40e0 [ 1193.979421][T25997] preempt_schedule_common+0x82/0xd0 [ 1193.979441][T25997] preempt_schedule+0xbc/0xd0 [ 1193.979460][T25997] preempt_schedule_thunk+0x16/0x18 [ 1193.979480][T25997] on_each_cpu_cond_mask+0x71/0x80 [ 1193.979495][T25997] text_poke_bp_batch+0x2b7/0x850 [ 1193.979514][T25997] text_poke_finish+0x16/0x30 [ 1193.979531][T25997] arch_jump_label_transform_apply+0x13/0x20 [ 1193.979548][T25997] static_key_enable_cpuslocked+0x11f/0x240 [ 1193.979563][T25997] static_key_enable+0x16/0x20 [ 1193.979576][T25997] tracepoint_add_func+0x907/0x990 [ 1193.979597][T25997] tracepoint_probe_register_prio_may_exist+0x5c/0x90 [ 1193.979619][T25997] bpf_raw_tp_link_attach+0x3e9/0x570 [ 1193.979640][T25997] bpf_raw_tracepoint_open+0x194/0x200 [ 1193.979659][T25997] __sys_bpf+0x581/0x780 [ 1193.979677][T25997] __x64_sys_bpf+0x78/0x90 [ 1193.979694][T25997] do_syscall_64+0x4c/0xa0 [ 1193.979715][T25997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.979733][T25997] [ 1193.979733][T25997] other info that might help us debug this: [ 1193.979733][T25997] [ 1193.979738][T25997] Chain exists of: [ 1193.979738][T25997] console_owner --> &p->pi_lock --> &rq->__lock [ 1193.979738][T25997] [ 1193.979761][T25997] Possible unsafe locking scenario: [ 1193.979761][T25997] [ 1193.979765][T25997] CPU0 CPU1 [ 1193.979769][T25997] ---- ---- [ 1193.979773][T25997] lock(&rq->__lock); [ 1193.979783][T25997] lock(&p->pi_lock); [ 1193.979798][T25997] lock(&rq->__lock); [ 1193.979808][T25997] lock(console_owner); [ 1193.979818][T25997] [ 1193.979818][T25997] *** DEADLOCK *** [ 1193.979818][T25997] [ 1193.979821][T25997] 7 locks held by syz.8.7117/25997: [ 1193.979831][T25997] #0: ffffffff8cb724c8 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_register_prio_may_exist+0x40/0x90 [ 1193.979875][T25997] #1: ffffffff8c9c7b70 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0xe/0x20 [ 1193.979911][T25997] #2: ffffffff8cbc7348 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xc2/0x240 [ 1193.979948][T25997] #3: ffffffff8c9dcf08 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0xe/0x20 [ 1193.979986][T25997] #4: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 1193.980024][T25997] #5: ffffffff8cb2b2a0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xe2/0x3e0 [ 1193.980066][T25997] #6: ffffffff8cb1f540 (console_lock){+.+.}-{0:0}, at: _printk+0xda/0x130 [ 1193.980104][T25997] [ 1193.980104][T25997] stack backtrace: [ 1193.980109][T25997] CPU: 0 PID: 25997 Comm: syz.8.7117 Not tainted syzkaller #0 [ 1193.980125][T25997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1193.980136][T25997] Call Trace: [ 1193.980142][T25997] [ 1193.980149][T25997] dump_stack_lvl+0x188/0x24e [ 1193.980172][T25997] ? load_image+0x400/0x400 [ 1193.980190][T25997] ? show_regs_print_info+0x12/0x12 [ 1193.980214][T25997] ? print_circular_bug+0x12b/0x1a0 [ 1193.980238][T25997] check_noncircular+0x296/0x330 [ 1193.980263][T25997] ? add_chain_block+0x940/0x940 [ 1193.980282][T25997] ? lockdep_lock+0xf1/0x1f0 [ 1193.980308][T25997] __lock_acquire+0x2d07/0x7d10 [ 1193.980343][T25997] ? verify_lock_unused+0x140/0x140 [ 1193.980376][T25997] lock_acquire+0x1bb/0x4a0 [ 1193.980395][T25997] ? console_emit_next_record+0x683/0xba0 [ 1193.980421][T25997] ? __lock_acquire+0x7d10/0x7d10 [ 1193.980440][T25997] ? do_raw_spin_lock+0x128/0x2f0 [ 1193.980463][T25997] ? read_lock_is_recursive+0x10/0x10 [ 1193.980483][T25997] ? __rwlock_init+0x140/0x140 [ 1193.980507][T25997] ? do_raw_spin_unlock+0x11d/0x230 [ 1193.980531][T25997] console_emit_next_record+0x6a4/0xba0 [ 1193.980554][T25997] ? console_emit_next_record+0x683/0xba0 [ 1193.980576][T25997] ? console_emit_next_record+0x683/0xba0 [ 1193.980603][T25997] ? info_print_prefix+0x360/0x360 [ 1193.980626][T25997] ? do_raw_spin_unlock+0x11d/0x230 [ 1193.980651][T25997] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1193.980669][T25997] ? _raw_spin_unlock+0x40/0x40 [ 1193.980694][T25997] ? __down_trylock_console_sem+0x19f/0x1f0 [ 1193.980720][T25997] ? _printk+0xda/0x130 [ 1193.980738][T25997] ? _printk+0xda/0x130 [ 1193.980753][T25997] ? console_trylock+0x160/0x160 [ 1193.980771][T25997] console_unlock+0x223/0x630 [ 1193.980792][T25997] ? _printk+0xda/0x130 [ 1193.980817][T25997] vprintk_emit+0x4b3/0x6a0 [ 1193.980838][T25997] ? printk_sprint+0x460/0x460 [ 1193.980857][T25997] ? do_raw_spin_lock+0x128/0x2f0 [ 1193.980887][T25997] _printk+0xda/0x130 [ 1193.980908][T25997] ? load_image+0x400/0x400 [ 1193.980927][T25997] ? perf_trace_lock+0xf8/0x390 [ 1193.980945][T25997] ? do_raw_spin_unlock+0x11d/0x230 [ 1193.980971][T25997] should_fail_ex+0x37a/0x4d0 [ 1193.980996][T25997] strncpy_from_user+0x32/0x350 [ 1193.981019][T25997] strncpy_from_user_nofault+0x6d/0x140 [ 1193.981038][T25997] bpf_probe_read_user_str+0x26/0x70 [ 1193.981061][T25997] bpf_prog_7acee76fef7300d9+0x5b/0x5f [ 1193.981077][T25997] bpf_trace_run2+0x1d5/0x3e0 [ 1193.981099][T25997] ? bpf_trace_run2+0xe2/0x3e0 [ 1193.981120][T25997] ? bpf_trace_run1+0x3d0/0x3d0 [ 1193.981145][T25997] ? trace_tlb_flush+0x92/0x190 [ 1193.981167][T25997] trace_tlb_flush+0x143/0x190 [ 1193.981189][T25997] switch_mm_irqs_off+0x779/0xb40 [ 1193.981212][T25997] ? switch_mm+0x140/0x140 [ 1193.981231][T25997] ? psi_task_switch+0x312/0x6d0 [ 1193.981258][T25997] __schedule+0xf3c/0x40e0 [ 1193.981289][T25997] ? __sched_text_start+0x8/0x8 [ 1193.981312][T25997] ? smp_call_function_many_cond+0xf34/0x1290 [ 1193.981331][T25997] ? preempt_schedule+0xbc/0xd0 [ 1193.981353][T25997] preempt_schedule_common+0x82/0xd0 [ 1193.981373][T25997] ? text_poke_sync+0x20/0x20 [ 1193.981387][T25997] preempt_schedule+0xbc/0xd0 [ 1193.981404][T25997] ? schedule_preempt_disabled+0x20/0x20 [ 1193.981423][T25997] ? smp_call_function_many+0x30/0x30 [ 1193.981436][T25997] ? trace_tlb_flush+0x12/0x190 [ 1193.981452][T25997] ? text_poke+0x90/0x90 [ 1193.981468][T25997] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1193.981486][T25997] preempt_schedule_thunk+0x16/0x18 [ 1193.981508][T25997] ? on_each_cpu_cond_mask+0x6c/0x80 [ 1193.981526][T25997] on_each_cpu_cond_mask+0x71/0x80 [ 1193.981543][T25997] ? trace_tlb_flush+0x12/0x190 [ 1193.981562][T25997] text_poke_bp_batch+0x2b7/0x850 [ 1193.981585][T25997] ? arch_jump_label_transform_apply+0xe/0x20 [ 1193.981604][T25997] ? text_poke_loc_init+0x5b0/0x5b0 [ 1193.981625][T25997] ? arch_jump_label_transform_queue+0x76/0xd0 [ 1193.981648][T25997] text_poke_finish+0x16/0x30 [ 1193.981666][T25997] arch_jump_label_transform_apply+0x13/0x20 [ 1193.981683][T25997] static_key_enable_cpuslocked+0x11f/0x240 [ 1193.981700][T25997] ? perf_trace_tlb_flush+0x330/0x330 [ 1193.981722][T25997] static_key_enable+0x16/0x20 [ 1193.981738][T25997] tracepoint_add_func+0x907/0x990 [ 1193.981764][T25997] ? perf_trace_tlb_flush+0x330/0x330 [ 1193.981785][T25997] tracepoint_probe_register_prio_may_exist+0x5c/0x90 [ 1193.981815][T25997] ? perf_trace_tlb_flush+0x330/0x330 [ 1193.981840][T25997] bpf_raw_tp_link_attach+0x3e9/0x570 [ 1193.981866][T25997] ? bpf_insn_prepare_dump+0x840/0x840 [ 1193.981900][T25997] bpf_raw_tracepoint_open+0x194/0x200 [ 1193.981923][T25997] __sys_bpf+0x581/0x780 [ 1193.981944][T25997] ? bpf_link_show_fdinfo+0x380/0x380 [ 1193.981973][T25997] ? lock_chain_count+0x20/0x20 [ 1193.981998][T25997] __x64_sys_bpf+0x78/0x90 [ 1193.982018][T25997] do_syscall_64+0x4c/0xa0 [ 1193.982041][T25997] ? clear_bhb_loop+0x60/0xb0 [ 1193.982061][T25997] ? clear_bhb_loop+0x60/0xb0 [ 1193.982081][T25997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.982100][T25997] RIP: 0033:0x7f154c19acb9 [ 1193.982114][T25997] Code: Unable to access opcode bytes at 0x7f154c19ac8f. [ 1193.982122][T25997] RSP: 002b:00007f154d005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1193.982137][T25997] RAX: ffffffffffffffda RBX: 00007f154c415fa0 RCX: 00007f154c19acb9 [ 1193.982149][T25997] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 1193.982160][T25997] RBP: 00007f154d005090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.982171][T25997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.982181][T25997] R13: 00007f154c416038 R14: 00007f154c415fa0 R15: 00007ffc65fbb058 [ 1193.982200][T25997] [ 1195.330223][T25997] CPU: 0 PID: 25997 Comm: syz.8.7117 Not tainted syzkaller #0 [ 1195.337661][T25997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1195.347695][T25997] Call Trace: [ 1195.350957][T25997] [ 1195.353874][T25997] dump_stack_lvl+0x188/0x24e [ 1195.358553][T25997] ? show_regs_print_info+0x12/0x12 [ 1195.363733][T25997] ? load_image+0x400/0x400 [ 1195.368219][T25997] ? perf_trace_lock+0xf8/0x390 [ 1195.373051][T25997] ? do_raw_spin_unlock+0x11d/0x230 [ 1195.378233][T25997] should_fail_ex+0x399/0x4d0 [ 1195.382895][T25997] strncpy_from_user+0x32/0x350 [ 1195.387736][T25997] strncpy_from_user_nofault+0x6d/0x140 [ 1195.393262][T25997] bpf_probe_read_user_str+0x26/0x70 [ 1195.398532][T25997] bpf_prog_7acee76fef7300d9+0x5b/0x5f [ 1195.403975][T25997] bpf_trace_run2+0x1d5/0x3e0 [ 1195.408636][T25997] ? bpf_trace_run2+0xe2/0x3e0 [ 1195.413473][T25997] ? bpf_trace_run1+0x3d0/0x3d0 [ 1195.418306][T25997] ? trace_tlb_flush+0x92/0x190 [ 1195.423140][T25997] trace_tlb_flush+0x143/0x190 [ 1195.427894][T25997] switch_mm_irqs_off+0x779/0xb40 [ 1195.432906][T25997] ? switch_mm+0x140/0x140 [ 1195.437309][T25997] ? psi_task_switch+0x312/0x6d0 [ 1195.442233][T25997] __schedule+0xf3c/0x40e0 [ 1195.446640][T25997] ? __sched_text_start+0x8/0x8 [ 1195.451474][T25997] ? smp_call_function_many_cond+0xf34/0x1290 [ 1195.457519][T25997] ? preempt_schedule+0xbc/0xd0 [ 1195.462353][T25997] preempt_schedule_common+0x82/0xd0 [ 1195.467622][T25997] ? text_poke_sync+0x20/0x20 [ 1195.472279][T25997] preempt_schedule+0xbc/0xd0 [ 1195.476939][T25997] ? schedule_preempt_disabled+0x20/0x20 [ 1195.482554][T25997] ? smp_call_function_many+0x30/0x30 [ 1195.487906][T25997] ? trace_tlb_flush+0x12/0x190 [ 1195.492737][T25997] ? text_poke+0x90/0x90 [ 1195.496959][T25997] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1195.503092][T25997] preempt_schedule_thunk+0x16/0x18 [ 1195.508273][T25997] ? on_each_cpu_cond_mask+0x6c/0x80 [ 1195.513540][T25997] on_each_cpu_cond_mask+0x71/0x80 [ 1195.518632][T25997] ? trace_tlb_flush+0x12/0x190 [ 1195.523467][T25997] text_poke_bp_batch+0x2b7/0x850 [ 1195.528473][T25997] ? arch_jump_label_transform_apply+0xe/0x20 [ 1195.534546][T25997] ? text_poke_loc_init+0x5b0/0x5b0 [ 1195.539731][T25997] ? arch_jump_label_transform_queue+0x76/0xd0 [ 1195.545866][T25997] text_poke_finish+0x16/0x30 [ 1195.550523][T25997] arch_jump_label_transform_apply+0x13/0x20 [ 1195.556488][T25997] static_key_enable_cpuslocked+0x11f/0x240 [ 1195.562375][T25997] ? perf_trace_tlb_flush+0x330/0x330 [ 1195.567740][T25997] static_key_enable+0x16/0x20 [ 1195.572490][T25997] tracepoint_add_func+0x907/0x990 [ 1195.577591][T25997] ? perf_trace_tlb_flush+0x330/0x330 [ 1195.582946][T25997] tracepoint_probe_register_prio_may_exist+0x5c/0x90 [ 1195.589706][T25997] ? perf_trace_tlb_flush+0x330/0x330 [ 1195.595066][T25997] bpf_raw_tp_link_attach+0x3e9/0x570 [ 1195.600423][T25997] ? bpf_insn_prepare_dump+0x840/0x840 [ 1195.605876][T25997] bpf_raw_tracepoint_open+0x194/0x200 [ 1195.611319][T25997] __sys_bpf+0x581/0x780 [ 1195.615545][T25997] ? bpf_link_show_fdinfo+0x380/0x380 [ 1195.620904][T25997] ? lock_chain_count+0x20/0x20 [ 1195.625742][T25997] __x64_sys_bpf+0x78/0x90 [ 1195.630139][T25997] do_syscall_64+0x4c/0xa0 [ 1195.634541][T25997] ? clear_bhb_loop+0x60/0xb0 [ 1195.639199][T25997] ? clear_bhb_loop+0x60/0xb0 [ 1195.643863][T25997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1195.649742][T25997] RIP: 0033:0x7f154c19acb9 [ 1195.654138][T25997] Code: Unable to access opcode bytes at 0x7f154c19ac8f. [ 1195.661139][T25997] RSP: 002b:00007f154d005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1195.669543][T25997] RAX: ffffffffffffffda RBX: 00007f154c415fa0 RCX: 00007f154c19acb9 [ 1195.677501][T25997] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 1195.685456][T25997] RBP: 00007f154d005090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.693409][T25997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.701362][T25997] R13: 00007f154c416038 R14: 00007f154c415fa0 R15: 00007ffc65fbb058 [ 1195.709319][T25997] [ 1195.717905][T14805] Bluetooth: hci1: command 0x2016 tx timeout