last executing test programs: 3.019791551s ago: executing program 2 (id=1226): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) 2.856754192s ago: executing program 1 (id=1228): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="074cfd0000000000000000020823"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100), 0x120) 2.168762937s ago: executing program 1 (id=1230): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000006000000045000000700000001000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000740)="80034db72fac4597c4e74e63a9d11574a8675c7173ffe62cbf5a19f18afb0dec6fc3ff812df37fb35f27634607156b218071c9bebb0815d4efa76c65723e72ebd6023cbb0f425a399aebe1df853d68d86aa744c74cabf660fa7b9d71a1b866c55a789fc6c3fe1947459705c1ec1b18f448e3197e404ae7acd625a7b33e31f4cba80f3c555ca901f3cdb7e3e5ae164369acaa8a2d3a87f0b31e8bd7259fae3dae6c5ff468fafa440a7841b00447df071220f8a80e29657c2eca10e61c40c08b2e893f14b3b06ea58bd9b040695b1ba27f02b58bf791f09ae38c0a55062749e30595da79", 0xe3}, {&(0x7f0000000500)="681080a32f69b9df5d9bc15a4c51463a6b222b6333070360e3a4219e655bb6a78429c7f35513693e53d1e4950d9b81f7814b21629f1b16c6bd45c4362ee1a5447d54e80257fc553ea80d5f6a009244701ff3ca24de077e5b8253bdabf8524cb3f5ef6e43e43b682b5344475b2fcf50dc3e14f6ace66039fe0c8aa72bf98d28752651a888fadbc979efd5a648c5a1f7c5a2471cc45ab4f6fbac941666fede9a947520bf44468a15c29c2e787090d11825fcd42a76e5c9915daed99073", 0xbc}, {&(0x7f0000000640)="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", 0xfe}], 0x3, &(0x7f0000000740)}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8, 0xc8, 0x9, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1200000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b"], 0xfdef) 2.168263087s ago: executing program 2 (id=1231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffefff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0x2, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, 0x0, 0x26, 0x0, 0x2}, 0x28) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) socketpair(0x0, 0x80000, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x16, 0x5, &(0x7f0000000980)=ANY=[@ANYRES64=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}]}) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@ifindex, 0x11, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000940)={0x80000000, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r8, r0, 0x11, 0x28, 0x0, @void, @void, @void, @value=r9, r7}, 0x20) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x600000000000000}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.155173717s ago: executing program 0 (id=1238): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/mnt\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x2, 0x35b, 0xc, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2.072960597s ago: executing program 1 (id=1233): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x80000000, 0x0, 0x80, 0x400, 0x0, 0x0, 0x0, 0x1000000, 0x80000000000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800c10804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6008000) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r2 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0xb, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000400)={0x3, 0x80, 0x9e, 0x3, 0x9, 0xb, 0x0, 0xb0e2, 0x62020, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000240), 0x9}, 0x4100, 0x3ff, 0x4, 0x4, 0x7fffffff, 0xae, 0x101, 0x0, 0x40, 0x0, 0x3}) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.kill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r8 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$sock_attach_bpf(r8, 0x1, 0x12, &(0x7f0000000000), 0x4) 1.713938249s ago: executing program 0 (id=1236): perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x20000054) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0xda89}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3}, 0x80, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0), 0x12) 1.56410321s ago: executing program 2 (id=1237): r0 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r5 = getpid() r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x5, 0xff, 0x28, 0x0, 0x6, 0x1000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x34, 0x1, @perf_config_ext={0xe}, 0x406, 0xfffffffffffffff8, 0x7c, 0x3, 0x80000000003, 0x7, 0x0, 0x0, 0x3bd, 0x0, 0x2}, r5, 0x10, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0xfc00) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffd, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) 1.396090481s ago: executing program 2 (id=1239): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="074cfd0000000000000000020823"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100), 0x120) 1.395767931s ago: executing program 3 (id=1240): r0 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r5 = getpid() r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x5, 0xff, 0x28, 0x0, 0x6, 0x1000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x34, 0x1, @perf_config_ext={0xe}, 0x406, 0xfffffffffffffff8, 0x7c, 0x3, 0x80000000003, 0x7, 0x0, 0x0, 0x3bd, 0x0, 0x2}, r5, 0x10, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0xfc00) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffd, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) 1.384985321s ago: executing program 0 (id=1247): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x5, 0x3}, 0x80, 0x0}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xc, 0x1cc, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x8, @local}, 0x10, 0x0}, 0x20004891) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2422, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x80000005}, 0x200, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x40) 1.384834391s ago: executing program 1 (id=1241): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) 1.222460972s ago: executing program 3 (id=1242): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000002f000000180100002020702500000000002020207b70f8ff00000000bf9000000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500"/96], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x3a) (async) r3 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r3, 0x29, 0x7, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x8, 0x8, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x8, 0x8, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 1.187941262s ago: executing program 1 (id=1243): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="074cfd0000000000000000020823"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100), 0x120) 769.851935ms ago: executing program 0 (id=1244): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x2a, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="074cfd0000000000000000020823"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000002600)=@l2tp6={0xa, 0x0, 0x8, @empty, 0x2, 0x1}, 0x80, 0x0}, 0x4008040) 696.877336ms ago: executing program 3 (id=1245): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000006000000045000000700000001000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0xa, 0xa, 0x7, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x11, &(0x7f0000000040)=""/17, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x7c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000740)="80034db72fac4597c4e74e63a9d11574a8675c7173ffe62cbf5a19f18afb0dec6fc3ff812df37fb35f27634607156b218071c9bebb0815d4efa76c65723e72ebd6023cbb0f425a399aebe1df853d68d86aa744c74cabf660fa7b9d71a1b866c55a789fc6c3fe1947459705c1ec1b18f448e3197e404ae7acd625a7b33e31f4cba80f3c555ca901f3cdb7e3e5ae164369acaa8a2d3a87f0b31e8bd7259fae3dae6c5ff468fafa440a7841b00447df071220f8a80e29657c2eca10e61c40c08b2e893f14b3b06ea58bd9b040695b1ba27f02b58bf791f09ae38c0a55062749e30595da79", 0xe3}, {&(0x7f0000000500)="681080a32f69b9df5d9bc15a4c51463a6b222b6333070360e3a4219e655bb6a78429c7f35513693e53d1e4950d9b81f7814b21629f1b16c6bd45c4362ee1a5447d54e80257fc553ea80d5f6a009244701ff3ca24de077e5b8253bdabf8524cb3f5ef6e43e43b682b5344475b2fcf50dc3e14f6ace66039fe0c8aa72bf98d28752651a888fadbc979efd5a648c5a1f7c5a2471cc45ab4f6fbac941666fede9a947520bf44468a15c29c2e787090d11825fcd42a76e5c9915daed99073", 0xbc}, {&(0x7f0000000640)="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", 0xfe}], 0x3, &(0x7f0000000740)}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8, 0xc8, 0x9, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1200000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b"], 0xfdef) 392.418777ms ago: executing program 3 (id=1246): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/mnt\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x2, 0x35b, 0xc, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 355.696658ms ago: executing program 0 (id=1248): perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x20000054) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0xda89}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3}, 0x80, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0), 0x12) 269.554098ms ago: executing program 2 (id=1249): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) 163.004409ms ago: executing program 3 (id=1250): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 74.448589ms ago: executing program 0 (id=1251): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x2828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xc}, 0x50) close(0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff7ffbfffffeffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xb80b) close(r3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}, 0x41) close(r0) (fail_nth: 1) 27.53641ms ago: executing program 2 (id=1252): r0 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r5 = getpid() r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x5, 0xff, 0x28, 0x0, 0x6, 0x1000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x34, 0x1, @perf_config_ext={0xe}, 0x406, 0xfffffffffffffff8, 0x7c, 0x3, 0x80000000003, 0x7, 0x0, 0x0, 0x3bd, 0x0, 0x2}, r5, 0x10, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0xfc00) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffd, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) 26.936079ms ago: executing program 1 (id=1253): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x5, 0x3}, 0x80, 0x0}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xc, 0x1cc, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x8, @local}, 0x10, 0x0}, 0x20004891) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2422, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x80000005}, 0x200, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x40) 0s ago: executing program 3 (id=1254): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) kernel console output (not intermixed with test programs): arsing attributes in process `syz.0.569'. [ 169.773171][ T5798] Bluetooth: hci3: failed to register connection device [ 169.906808][ T7413] netlink: 14 bytes leftover after parsing attributes in process `syz.2.570'. [ 170.195047][ T7425] netlink: 'syz.0.575': attribute type 29 has an invalid length. [ 170.204137][ T7422] FAULT_INJECTION: forcing a failure. [ 170.204137][ T7422] name failslab, interval 1, probability 0, space 0, times 0 [ 170.208259][ T7425] netlink: 'syz.0.575': attribute type 29 has an invalid length. [ 170.242849][ T7425] netlink: 'syz.0.575': attribute type 29 has an invalid length. [ 170.251507][ T5162] udevd[5162]: worker [5806] terminated by signal 33 (Unknown signal 33) [ 170.258401][ T7425] netlink: 'syz.0.575': attribute type 29 has an invalid length. [ 170.275967][ T7422] CPU: 1 PID: 7422 Comm: syz.1.573 Not tainted syzkaller #0 [ 170.283303][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.293387][ T7422] Call Trace: [ 170.296715][ T7422] [ 170.299678][ T7422] dump_stack_lvl+0x16c/0x230 [ 170.304404][ T7422] ? show_regs_print_info+0x20/0x20 [ 170.309636][ T7422] ? load_image+0x3b0/0x3b0 [ 170.314174][ T7422] ? __might_sleep+0xe0/0xe0 [ 170.318788][ T7422] ? __lock_acquire+0x7c80/0x7c80 [ 170.323848][ T7422] should_fail_ex+0x39d/0x4d0 [ 170.328567][ T7422] should_failslab+0x9/0x20 [ 170.333094][ T7422] slab_pre_alloc_hook+0x59/0x310 [ 170.338151][ T7422] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 170.343797][ T7422] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 170.349443][ T7422] __kmem_cache_alloc_node+0x53/0x260 [ 170.354847][ T7422] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 170.360495][ T7422] __kmalloc_node+0xa4/0x230 [ 170.365121][ T7422] memcg_alloc_slab_cgroups+0x87/0x130 [ 170.370606][ T7422] slab_post_alloc_hook+0xfc/0x4d0 [ 170.375759][ T7422] kmem_cache_alloc_node+0x150/0x330 [ 170.381074][ T7422] ? __alloc_skb+0x108/0x2c0 [ 170.385692][ T7422] __alloc_skb+0x108/0x2c0 [ 170.390158][ T7422] alloc_skb_with_frags+0xca/0x7c0 [ 170.395295][ T7422] ? _raw_spin_unlock+0x40/0x40 [ 170.400178][ T7422] ? finish_wait+0xc7/0x1d0 [ 170.404712][ T7422] sock_alloc_send_pskb+0x857/0x990 [ 170.409969][ T7422] ? sock_kzfree_s+0x50/0x50 [ 170.414582][ T7422] ? do_raw_spin_lock+0x121/0x2c0 [ 170.419634][ T7422] ? wake_bit_function+0x200/0x200 [ 170.424768][ T7422] ? __rwlock_init+0x150/0x150 [ 170.429563][ T7422] ? do_raw_spin_unlock+0x121/0x230 [ 170.434782][ T7422] unix_dgram_sendmsg+0x5a1/0x1720 [ 170.439909][ T7422] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 170.445634][ T7422] ? aa_sk_perm+0x7fc/0x930 [ 170.450147][ T7422] ? unix_dgram_poll+0x670/0x670 [ 170.455079][ T7422] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 170.461502][ T7422] ? aa_sock_msg_perm+0x94/0x150 [ 170.466437][ T7422] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 170.471719][ T7422] ? security_socket_sendmsg+0x80/0xa0 [ 170.477175][ T7422] ? unix_dgram_poll+0x670/0x670 [ 170.482114][ T7422] ____sys_sendmsg+0x5bf/0x950 [ 170.486891][ T7422] ? __asan_memset+0x22/0x40 [ 170.491479][ T7422] ? __sys_sendmsg_sock+0x30/0x30 [ 170.496500][ T7422] ? __import_iovec+0x3fa/0x860 [ 170.501370][ T7422] ? import_iovec+0x73/0xa0 [ 170.505879][ T7422] ___sys_sendmsg+0x220/0x290 [ 170.510559][ T7422] ? __sys_sendmsg+0x270/0x270 [ 170.515372][ T7422] ? __lock_acquire+0x7c80/0x7c80 [ 170.520431][ T7422] __se_sys_sendmsg+0x1a5/0x270 [ 170.525388][ T7422] ? __x64_sys_sendmsg+0x80/0x80 [ 170.530374][ T7422] ? lockdep_hardirqs_on+0x98/0x150 [ 170.535583][ T7422] do_syscall_64+0x55/0xb0 [ 170.540003][ T7422] ? clear_bhb_loop+0x40/0x90 [ 170.544676][ T7422] ? clear_bhb_loop+0x40/0x90 [ 170.549358][ T7422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.555255][ T7422] RIP: 0033:0x7f713f38efc9 [ 170.559666][ T7422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.579269][ T7422] RSP: 002b:00007f71401df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.587680][ T7422] RAX: ffffffffffffffda RBX: 00007f713f5e5fa0 RCX: 00007f713f38efc9 [ 170.595647][ T7422] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 170.603870][ T7422] RBP: 00007f71401df090 R08: 0000000000000000 R09: 0000000000000000 [ 170.611835][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.619799][ T7422] R13: 00007f713f5e6038 R14: 00007f713f5e5fa0 R15: 00007ffca0a7d418 [ 170.627790][ T7422] [ 170.661444][ T5798] Bluetooth: hci2: command tx timeout [ 170.825550][ T5798] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 170.833862][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 170.843576][ T5798] CPU: 0 PID: 5798 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 170.847432][ T5793] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 170.851132][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.859256][ T5793] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 170.868623][ T5798] Workqueue: hci0 hci_rx_work [ 170.868654][ T5798] Call Trace: [ 170.868662][ T5798] [ 170.868672][ T5798] dump_stack_lvl+0x16c/0x230 [ 170.868703][ T5798] ? show_regs_print_info+0x20/0x20 [ 170.868725][ T5798] ? load_image+0x3b0/0x3b0 [ 170.868760][ T5798] sysfs_create_dir_ns+0x256/0x280 [ 170.868789][ T5798] ? hci_rx_work+0x43a/0xd80 [ 170.868815][ T5798] ? sysfs_warn_dup+0xa0/0xa0 [ 170.868841][ T5798] ? do_raw_spin_unlock+0x121/0x230 [ 170.868867][ T5798] kobject_add_internal+0x6b8/0xc70 [ 170.868895][ T5798] kobject_add+0x156/0x220 [ 170.868909][ T5798] ? __rwlock_init+0x150/0x150 [ 170.937462][ T5798] ? kobject_init+0x1e0/0x1e0 [ 170.942149][ T5798] ? _raw_spin_unlock+0x28/0x40 [ 170.947006][ T5798] ? get_device_parent+0x366/0x390 [ 170.952134][ T5798] device_add+0x408/0xc20 [ 170.956477][ T5798] hci_conn_add_sysfs+0xd5/0x1e0 [ 170.961419][ T5798] le_conn_complete_evt+0xf36/0x1500 [ 170.966716][ T5798] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 170.972958][ T5798] ? bt_info+0x160/0x160 [ 170.977196][ T5798] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 170.982831][ T5798] ? skb_pull_data+0xfb/0x200 [ 170.987510][ T5798] hci_le_conn_complete_evt+0x187/0x440 [ 170.993069][ T5798] ? hci_remote_host_features_evt+0x160/0x160 [ 170.999131][ T5798] hci_event_packet+0x795/0x1210 [ 171.004070][ T5798] ? bis_list+0x290/0x290 [ 171.008395][ T5798] ? lockdep_hardirqs_on+0x98/0x150 [ 171.013591][ T5798] ? hci_send_to_monitor+0xd7/0x4f0 [ 171.018795][ T5798] hci_rx_work+0x43a/0xd80 [ 171.023218][ T5798] ? process_scheduled_works+0x957/0x15b0 [ 171.028933][ T5798] process_scheduled_works+0xa45/0x15b0 [ 171.034591][ T5798] ? assign_work+0x400/0x400 [ 171.039187][ T5798] ? assign_work+0x39e/0x400 [ 171.043774][ T5798] worker_thread+0xa55/0xfc0 [ 171.048382][ T5798] kthread+0x2fa/0x390 [ 171.052442][ T5798] ? pr_cont_work+0x560/0x560 [ 171.057114][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 171.061697][ T5798] ret_from_fork+0x48/0x80 [ 171.066109][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 171.070690][ T5798] ret_from_fork_asm+0x11/0x20 [ 171.075467][ T5798] [ 171.078829][ T5793] CPU: 1 PID: 5793 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 171.080742][ T5798] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 171.086562][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.086576][ T5793] Workqueue: hci1 hci_rx_work [ 171.086604][ T5793] Call Trace: [ 171.086612][ T5793] [ 171.086621][ T5793] dump_stack_lvl+0x16c/0x230 [ 171.086651][ T5793] ? show_regs_print_info+0x20/0x20 [ 171.086676][ T5793] ? load_image+0x3b0/0x3b0 [ 171.086711][ T5793] sysfs_create_dir_ns+0x256/0x280 [ 171.086740][ T5793] ? hci_rx_work+0x43a/0xd80 [ 171.086764][ T5793] ? sysfs_warn_dup+0xa0/0xa0 [ 171.086792][ T5793] ? do_raw_spin_unlock+0x121/0x230 [ 171.086821][ T5793] kobject_add_internal+0x6b8/0xc70 [ 171.086850][ T5793] kobject_add+0x156/0x220 [ 171.086868][ T5793] ? __rwlock_init+0x150/0x150 [ 171.086892][ T5793] ? kobject_init+0x1e0/0x1e0 [ 171.100937][ T5798] Bluetooth: hci0: failed to register connection device [ 171.110694][ T5793] ? _raw_spin_unlock+0x28/0x40 [ 171.110721][ T5793] ? get_device_parent+0x366/0x390 [ 171.191398][ T5793] device_add+0x408/0xc20 [ 171.195738][ T5793] hci_conn_add_sysfs+0xd5/0x1e0 [ 171.200679][ T5793] le_conn_complete_evt+0xf36/0x1500 [ 171.205973][ T5793] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 171.212213][ T5793] ? bt_info+0x160/0x160 [ 171.216454][ T5793] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 171.222090][ T5793] ? skb_pull_data+0xfb/0x200 [ 171.226765][ T5793] hci_le_conn_complete_evt+0x187/0x440 [ 171.232313][ T5793] ? hci_remote_host_features_evt+0x160/0x160 [ 171.238373][ T5793] hci_event_packet+0x795/0x1210 [ 171.243314][ T5793] ? bis_list+0x290/0x290 [ 171.247636][ T5793] ? lockdep_hardirqs_on+0x98/0x150 [ 171.252830][ T5793] ? hci_send_to_monitor+0xd7/0x4f0 [ 171.258032][ T5793] hci_rx_work+0x43a/0xd80 [ 171.262455][ T5793] ? process_scheduled_works+0x957/0x15b0 [ 171.268170][ T5793] process_scheduled_works+0xa45/0x15b0 [ 171.273734][ T5793] ? assign_work+0x400/0x400 [ 171.278323][ T5793] ? assign_work+0x39e/0x400 [ 171.282911][ T5793] worker_thread+0xa55/0xfc0 [ 171.287522][ T5793] kthread+0x2fa/0x390 [ 171.291582][ T5793] ? pr_cont_work+0x560/0x560 [ 171.296253][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 171.300840][ T5793] ret_from_fork+0x48/0x80 [ 171.305254][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 171.309839][ T5793] ret_from_fork_asm+0x11/0x20 [ 171.314616][ T5793] [ 171.318570][ T5793] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 171.332553][ T5793] Bluetooth: hci1: failed to register connection device [ 171.345929][ T5793] Bluetooth: hci0: command tx timeout [ 171.827676][ T5793] Bluetooth: hci3: command tx timeout [ 172.464273][ T7463] can: request_module (can-proto-0) failed. [ 173.085496][ T5793] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 173.093813][ T5793] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 173.103976][ T5793] CPU: 1 PID: 5793 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 173.111574][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.121648][ T5793] Workqueue: hci1 hci_rx_work [ 173.126362][ T5793] Call Trace: [ 173.129652][ T5793] [ 173.132594][ T5793] dump_stack_lvl+0x16c/0x230 [ 173.137302][ T5793] ? show_regs_print_info+0x20/0x20 [ 173.142527][ T5793] ? load_image+0x3b0/0x3b0 [ 173.147074][ T5793] sysfs_create_dir_ns+0x256/0x280 [ 173.152202][ T5793] ? hci_rx_work+0x43a/0xd80 [ 173.156815][ T5793] ? sysfs_warn_dup+0xa0/0xa0 [ 173.161519][ T5793] ? do_raw_spin_unlock+0x121/0x230 [ 173.166745][ T5793] kobject_add_internal+0x6b8/0xc70 [ 173.171992][ T5793] kobject_add+0x156/0x220 [ 173.176419][ T5793] ? __rwlock_init+0x150/0x150 [ 173.181209][ T5793] ? kobject_init+0x1e0/0x1e0 [ 173.185905][ T5793] ? _raw_spin_unlock+0x28/0x40 [ 173.190779][ T5793] ? get_device_parent+0x366/0x390 [ 173.195918][ T5793] device_add+0x408/0xc20 [ 173.200293][ T5793] hci_conn_add_sysfs+0xd5/0x1e0 [ 173.205268][ T5793] le_conn_complete_evt+0xf36/0x1500 [ 173.210613][ T5793] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 173.216886][ T5793] ? bt_info+0x160/0x160 [ 173.221149][ T5793] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 173.226807][ T5793] ? skb_pull_data+0xfb/0x200 [ 173.231508][ T5793] hci_le_conn_complete_evt+0x187/0x440 [ 173.237088][ T5793] ? hci_remote_host_features_evt+0x160/0x160 [ 173.243185][ T5793] hci_event_packet+0x795/0x1210 [ 173.248187][ T5793] ? bis_list+0x290/0x290 [ 173.252543][ T5793] ? lockdep_hardirqs_on+0x98/0x150 [ 173.257760][ T5793] ? hci_send_to_monitor+0xd7/0x4f0 [ 173.262989][ T5793] hci_rx_work+0x43a/0xd80 [ 173.267451][ T5793] ? process_scheduled_works+0x957/0x15b0 [ 173.273188][ T5793] process_scheduled_works+0xa45/0x15b0 [ 173.278817][ T5793] ? assign_work+0x400/0x400 [ 173.283438][ T5793] ? assign_work+0x39e/0x400 [ 173.288095][ T5793] worker_thread+0xa55/0xfc0 [ 173.292768][ T5793] kthread+0x2fa/0x390 [ 173.296848][ T5793] ? pr_cont_work+0x560/0x560 [ 173.301542][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 173.306150][ T5793] ret_from_fork+0x48/0x80 [ 173.310579][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 173.315181][ T5793] ret_from_fork_asm+0x11/0x20 [ 173.319996][ T5793] [ 173.323632][ T5793] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.337724][ T5793] Bluetooth: hci1: failed to register connection device [ 173.346320][ T5793] Bluetooth: hci1: command tx timeout [ 173.426286][ T5798] Bluetooth: hci0: command tx timeout [ 173.443968][ T7477] validate_nla: 4 callbacks suppressed [ 173.443985][ T7477] netlink: 'syz.1.594': attribute type 21 has an invalid length. [ 173.460150][ T7477] __nla_validate_parse: 4 callbacks suppressed [ 173.460167][ T7477] netlink: 128 bytes leftover after parsing attributes in process `syz.1.594'. [ 173.495784][ T7478] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 173.530806][ T7477] netlink: 14 bytes leftover after parsing attributes in process `syz.1.594'. [ 173.633769][ T7485] netlink: 'syz.2.597': attribute type 10 has an invalid length. [ 175.157920][ T5798] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 175.167431][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 175.176967][ T5798] CPU: 1 PID: 5798 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 175.184544][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.194623][ T5798] Workqueue: hci3 hci_rx_work [ 175.199339][ T5798] Call Trace: [ 175.202631][ T5798] [ 175.205574][ T5798] dump_stack_lvl+0x16c/0x230 [ 175.210286][ T5798] ? show_regs_print_info+0x20/0x20 [ 175.215511][ T5798] ? load_image+0x3b0/0x3b0 [ 175.220080][ T5798] sysfs_create_dir_ns+0x256/0x280 [ 175.225225][ T5798] ? hci_rx_work+0x43a/0xd80 [ 175.229846][ T5798] ? sysfs_warn_dup+0xa0/0xa0 [ 175.234563][ T5798] ? do_raw_spin_unlock+0x121/0x230 [ 175.239795][ T5798] kobject_add_internal+0x6b8/0xc70 [ 175.245014][ T5798] kobject_add+0x156/0x220 [ 175.249442][ T5798] ? __rwlock_init+0x150/0x150 [ 175.254224][ T5798] ? kobject_init+0x1e0/0x1e0 [ 175.258916][ T5798] ? _raw_spin_unlock+0x28/0x40 [ 175.263770][ T5798] ? get_device_parent+0x366/0x390 [ 175.268887][ T5798] device_add+0x408/0xc20 [ 175.273226][ T5798] hci_conn_add_sysfs+0xd5/0x1e0 [ 175.278170][ T5798] le_conn_complete_evt+0xf36/0x1500 [ 175.283476][ T5798] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 175.289730][ T5798] ? bt_info+0x160/0x160 [ 175.293981][ T5798] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 175.299621][ T5798] ? skb_pull_data+0xfb/0x200 [ 175.304299][ T5798] hci_le_conn_complete_evt+0x187/0x440 [ 175.309855][ T5798] ? hci_remote_host_features_evt+0x160/0x160 [ 175.315928][ T5798] hci_event_packet+0x795/0x1210 [ 175.320872][ T5798] ? bis_list+0x290/0x290 [ 175.325206][ T5798] ? lockdep_hardirqs_on+0x98/0x150 [ 175.330404][ T5798] ? hci_send_to_monitor+0xd7/0x4f0 [ 175.335610][ T5798] hci_rx_work+0x43a/0xd80 [ 175.340041][ T5798] ? process_scheduled_works+0x957/0x15b0 [ 175.345761][ T5798] process_scheduled_works+0xa45/0x15b0 [ 175.351329][ T5798] ? assign_work+0x400/0x400 [ 175.355934][ T5798] ? assign_work+0x39e/0x400 [ 175.360534][ T5798] worker_thread+0xa55/0xfc0 [ 175.365146][ T5798] kthread+0x2fa/0x390 [ 175.369223][ T5798] ? pr_cont_work+0x560/0x560 [ 175.374424][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 175.379031][ T5798] ret_from_fork+0x48/0x80 [ 175.383445][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 175.388033][ T5798] ret_from_fork_asm+0x11/0x20 [ 175.392833][ T5798] [ 175.396579][ T5798] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 175.410633][ T5798] Bluetooth: hci3: failed to register connection device [ 175.427047][ T5793] Bluetooth: hci1: command tx timeout [ 175.443489][ T7517] netlink: 'syz.2.610': attribute type 21 has an invalid length. [ 175.455270][ T7517] netlink: 128 bytes leftover after parsing attributes in process `syz.2.610'. [ 175.470207][ T7517] netlink: 14 bytes leftover after parsing attributes in process `syz.2.610'. [ 176.099357][ T7531] netlink: 'syz.1.616': attribute type 10 has an invalid length. [ 177.426414][ T5793] Bluetooth: hci3: command tx timeout [ 177.639115][ T5793] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 177.647138][ T5793] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 177.656796][ T5793] CPU: 0 PID: 5793 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 177.664373][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.674455][ T5793] Workqueue: hci3 hci_rx_work [ 177.679171][ T5793] Call Trace: [ 177.682462][ T5793] [ 177.685399][ T5793] dump_stack_lvl+0x16c/0x230 [ 177.690094][ T5793] ? show_regs_print_info+0x20/0x20 [ 177.695302][ T5793] ? load_image+0x3b0/0x3b0 [ 177.699814][ T5793] sysfs_create_dir_ns+0x256/0x280 [ 177.704932][ T5793] ? hci_rx_work+0x43a/0xd80 [ 177.709524][ T5793] ? sysfs_warn_dup+0xa0/0xa0 [ 177.714210][ T5793] ? do_raw_spin_unlock+0x121/0x230 [ 177.719413][ T5793] kobject_add_internal+0x6b8/0xc70 [ 177.724620][ T5793] kobject_add+0x156/0x220 [ 177.729034][ T5793] ? __rwlock_init+0x150/0x150 [ 177.733802][ T5793] ? kobject_init+0x1e0/0x1e0 [ 177.738486][ T5793] ? _raw_spin_unlock+0x28/0x40 [ 177.743335][ T5793] ? get_device_parent+0x366/0x390 [ 177.748454][ T5793] device_add+0x408/0xc20 [ 177.752812][ T5793] hci_conn_add_sysfs+0xd5/0x1e0 [ 177.757769][ T5793] le_conn_complete_evt+0xf36/0x1500 [ 177.763081][ T5793] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 177.769338][ T5793] ? bt_info+0x160/0x160 [ 177.773595][ T5793] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 177.779238][ T5793] ? skb_pull_data+0xfb/0x200 [ 177.783924][ T5793] hci_le_conn_complete_evt+0x187/0x440 [ 177.789479][ T5793] ? hci_remote_host_features_evt+0x160/0x160 [ 177.795545][ T5793] hci_event_packet+0x795/0x1210 [ 177.800500][ T5793] ? bis_list+0x290/0x290 [ 177.804890][ T5793] ? lockdep_hardirqs_on+0x98/0x150 [ 177.810130][ T5793] ? hci_send_to_monitor+0xd7/0x4f0 [ 177.815350][ T5793] hci_rx_work+0x43a/0xd80 [ 177.819930][ T5793] ? process_scheduled_works+0x957/0x15b0 [ 177.825743][ T5793] process_scheduled_works+0xa45/0x15b0 [ 177.831318][ T5793] ? assign_work+0x400/0x400 [ 177.835919][ T5793] ? assign_work+0x39e/0x400 [ 177.840520][ T5793] worker_thread+0xa55/0xfc0 [ 177.845137][ T5793] kthread+0x2fa/0x390 [ 177.849202][ T5793] ? pr_cont_work+0x560/0x560 [ 177.853880][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 177.858469][ T5793] ret_from_fork+0x48/0x80 [ 177.862883][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 177.867491][ T5793] ret_from_fork_asm+0x11/0x20 [ 177.872285][ T5793] [ 177.877059][ T5793] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.890995][ T5793] Bluetooth: hci3: failed to register connection device [ 177.982507][ T5798] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 177.991448][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 178.000963][ T5798] CPU: 1 PID: 5798 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 178.008535][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.018658][ T5798] Workqueue: hci0 hci_rx_work [ 178.023385][ T5798] Call Trace: [ 178.023628][ T7563] netlink: 'syz.0.628': attribute type 21 has an invalid length. [ 178.026667][ T5798] [ 178.026679][ T5798] dump_stack_lvl+0x16c/0x230 [ 178.026711][ T5798] ? show_regs_print_info+0x20/0x20 [ 178.026736][ T5798] ? load_image+0x3b0/0x3b0 [ 178.026767][ T5798] sysfs_create_dir_ns+0x256/0x280 [ 178.056909][ T5798] ? hci_rx_work+0x43a/0xd80 [ 178.061521][ T5798] ? sysfs_warn_dup+0xa0/0xa0 [ 178.066221][ T5798] ? do_raw_spin_unlock+0x121/0x230 [ 178.071526][ T5798] kobject_add_internal+0x6b8/0xc70 [ 178.076751][ T5798] kobject_add+0x156/0x220 [ 178.081180][ T5798] ? __rwlock_init+0x150/0x150 [ 178.085964][ T5798] ? kobject_init+0x1e0/0x1e0 [ 178.090651][ T5798] ? _raw_spin_unlock+0x28/0x40 [ 178.095517][ T5798] ? get_device_parent+0x366/0x390 [ 178.100675][ T5798] device_add+0x408/0xc20 [ 178.105032][ T5798] hci_conn_add_sysfs+0xd5/0x1e0 [ 178.110001][ T5798] le_conn_complete_evt+0xf36/0x1500 [ 178.115321][ T5798] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 178.121590][ T5798] ? bt_info+0x160/0x160 [ 178.125846][ T5798] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 178.131497][ T5798] ? skb_pull_data+0xfb/0x200 [ 178.136191][ T5798] hci_le_conn_complete_evt+0x187/0x440 [ 178.141760][ T5798] ? hci_remote_host_features_evt+0x160/0x160 [ 178.147837][ T5798] hci_event_packet+0x795/0x1210 [ 178.152797][ T5798] ? bis_list+0x290/0x290 [ 178.157136][ T5798] ? lockdep_hardirqs_on+0x98/0x150 [ 178.162346][ T5798] ? hci_send_to_monitor+0xd7/0x4f0 [ 178.167560][ T5798] hci_rx_work+0x43a/0xd80 [ 178.172009][ T5798] ? process_scheduled_works+0x957/0x15b0 [ 178.177742][ T5798] process_scheduled_works+0xa45/0x15b0 [ 178.183328][ T5798] ? assign_work+0x400/0x400 [ 178.187935][ T5798] ? assign_work+0x39e/0x400 [ 178.192558][ T5798] worker_thread+0xa55/0xfc0 [ 178.197198][ T5798] kthread+0x2fa/0x390 [ 178.201270][ T5798] ? pr_cont_work+0x560/0x560 [ 178.205958][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 178.210556][ T5798] ret_from_fork+0x48/0x80 [ 178.214986][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 178.219586][ T5798] ret_from_fork_asm+0x11/0x20 [ 178.224384][ T5798] [ 178.228265][ T5798] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 178.242179][ T5798] Bluetooth: hci0: failed to register connection device [ 178.251362][ T7563] netlink: 128 bytes leftover after parsing attributes in process `syz.0.628'. [ 178.263728][ T7557] netlink: 'syz.2.626': attribute type 21 has an invalid length. [ 178.271939][ T7557] netlink: 128 bytes leftover after parsing attributes in process `syz.2.626'. [ 178.300843][ T7564] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 178.338454][ T7557] netlink: 14 bytes leftover after parsing attributes in process `syz.2.626'. [ 178.349773][ T7563] netlink: 14 bytes leftover after parsing attributes in process `syz.0.628'. [ 178.818503][ T5793] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 178.827207][ T5793] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 178.837078][ T5793] CPU: 0 PID: 5793 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 178.844910][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.854988][ T5793] Workqueue: hci0 hci_rx_work [ 178.859708][ T5793] Call Trace: [ 178.863018][ T5793] [ 178.865963][ T5793] dump_stack_lvl+0x16c/0x230 [ 178.870675][ T5793] ? show_regs_print_info+0x20/0x20 [ 178.875899][ T5793] ? load_image+0x3b0/0x3b0 [ 178.880432][ T5793] sysfs_create_dir_ns+0x256/0x280 [ 178.885555][ T5793] ? hci_rx_work+0x43a/0xd80 [ 178.890157][ T5793] ? sysfs_warn_dup+0xa0/0xa0 [ 178.894856][ T5793] ? do_raw_spin_unlock+0x121/0x230 [ 178.900068][ T5793] kobject_add_internal+0x6b8/0xc70 [ 178.905273][ T5793] kobject_add+0x156/0x220 [ 178.909690][ T5793] ? __rwlock_init+0x150/0x150 [ 178.914455][ T5793] ? kobject_init+0x1e0/0x1e0 [ 178.919130][ T5793] ? _raw_spin_unlock+0x28/0x40 [ 178.923985][ T5793] ? get_device_parent+0x366/0x390 [ 178.929105][ T5793] device_add+0x408/0xc20 [ 178.933443][ T5793] hci_conn_add_sysfs+0xd5/0x1e0 [ 178.938391][ T5793] le_conn_complete_evt+0xf36/0x1500 [ 178.943685][ T5793] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 178.949924][ T5793] ? bt_info+0x160/0x160 [ 178.954170][ T5793] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 178.959807][ T5793] ? skb_pull_data+0xfb/0x200 [ 178.964483][ T5793] hci_le_conn_complete_evt+0x187/0x440 [ 178.970034][ T5793] ? hci_remote_host_features_evt+0x160/0x160 [ 178.976100][ T5793] hci_event_packet+0x795/0x1210 [ 178.981042][ T5793] ? bis_list+0x290/0x290 [ 178.985369][ T5793] ? lockdep_hardirqs_on+0x98/0x150 [ 178.990566][ T5793] ? hci_send_to_monitor+0xd7/0x4f0 [ 178.995770][ T5793] hci_rx_work+0x43a/0xd80 [ 179.000198][ T5793] ? process_scheduled_works+0x957/0x15b0 [ 179.005915][ T5793] process_scheduled_works+0xa45/0x15b0 [ 179.011479][ T5793] ? assign_work+0x400/0x400 [ 179.016079][ T5793] ? assign_work+0x39e/0x400 [ 179.020702][ T5793] worker_thread+0xa55/0xfc0 [ 179.025331][ T5793] kthread+0x2fa/0x390 [ 179.029407][ T5793] ? pr_cont_work+0x560/0x560 [ 179.034095][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 179.038685][ T5793] ret_from_fork+0x48/0x80 [ 179.043108][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 179.047699][ T5793] ret_from_fork_asm+0x11/0x20 [ 179.052496][ T5793] [ 179.057698][ T5793] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 179.071635][ T5793] Bluetooth: hci0: failed to register connection device [ 179.523592][ T7582] netlink: 'syz.0.634': attribute type 21 has an invalid length. [ 179.531683][ T7582] netlink: 128 bytes leftover after parsing attributes in process `syz.0.634'. [ 179.570720][ T7577] netlink: 14 bytes leftover after parsing attributes in process `syz.0.634'. [ 179.805400][ T7587] netlink: 'syz.0.637': attribute type 29 has an invalid length. [ 179.826450][ T7587] netlink: 'syz.0.637': attribute type 29 has an invalid length. [ 179.843207][ T7587] netlink: 'syz.0.637': attribute type 29 has an invalid length. [ 179.861441][ T7587] netlink: 'syz.0.637': attribute type 29 has an invalid length. [ 179.870151][ T7587] netlink: 'syz.0.637': attribute type 29 has an invalid length. [ 179.881603][ T7589] netlink: 'syz.3.639': attribute type 10 has an invalid length. [ 179.906323][ T5798] Bluetooth: hci3: command tx timeout [ 179.959190][ T5798] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 179.968137][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 179.977619][ T5798] CPU: 0 PID: 5798 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 179.985191][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.995270][ T5798] Workqueue: hci0 hci_rx_work [ 179.999985][ T5798] Call Trace: [ 180.003273][ T5798] [ 180.006216][ T5798] dump_stack_lvl+0x16c/0x230 [ 180.010929][ T5798] ? show_regs_print_info+0x20/0x20 [ 180.016151][ T5798] ? load_image+0x3b0/0x3b0 [ 180.020690][ T5798] sysfs_create_dir_ns+0x256/0x280 [ 180.025832][ T5798] ? hci_rx_work+0x43a/0xd80 [ 180.030447][ T5798] ? sysfs_warn_dup+0xa0/0xa0 [ 180.035166][ T5798] ? do_raw_spin_unlock+0x121/0x230 [ 180.040411][ T5798] kobject_add_internal+0x6b8/0xc70 [ 180.045652][ T5798] kobject_add+0x156/0x220 [ 180.050102][ T5798] ? __rwlock_init+0x150/0x150 [ 180.054903][ T5798] ? kobject_init+0x1e0/0x1e0 [ 180.059611][ T5798] ? _raw_spin_unlock+0x28/0x40 [ 180.064500][ T5798] ? get_device_parent+0x366/0x390 [ 180.069668][ T5798] device_add+0x408/0xc20 [ 180.074027][ T5798] hci_conn_add_sysfs+0xd5/0x1e0 [ 180.078992][ T5798] le_conn_complete_evt+0xf36/0x1500 [ 180.084325][ T5798] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 180.090600][ T5798] ? bt_info+0x160/0x160 [ 180.094876][ T5798] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 180.100540][ T5798] ? skb_pull_data+0xfb/0x200 [ 180.105242][ T5798] hci_le_conn_complete_evt+0x187/0x440 [ 180.110822][ T5798] ? hci_remote_host_features_evt+0x160/0x160 [ 180.116915][ T5798] hci_event_packet+0x795/0x1210 [ 180.121886][ T5798] ? bis_list+0x290/0x290 [ 180.126236][ T5798] ? lockdep_hardirqs_on+0x98/0x150 [ 180.131457][ T5798] ? hci_send_to_monitor+0xd7/0x4f0 [ 180.136695][ T5798] hci_rx_work+0x43a/0xd80 [ 180.141156][ T5798] ? process_scheduled_works+0x957/0x15b0 [ 180.146900][ T5798] process_scheduled_works+0xa45/0x15b0 [ 180.152497][ T5798] ? assign_work+0x400/0x400 [ 180.157118][ T5798] ? assign_work+0x39e/0x400 [ 180.161741][ T5798] worker_thread+0xa55/0xfc0 [ 180.166382][ T5798] kthread+0x2fa/0x390 [ 180.170472][ T5798] ? pr_cont_work+0x560/0x560 [ 180.175167][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 180.179778][ T5798] ret_from_fork+0x48/0x80 [ 180.184219][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 180.188829][ T5798] ret_from_fork_asm+0x11/0x20 [ 180.193642][ T5798] [ 180.202524][ T5798] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 180.216633][ T5798] Bluetooth: hci0: failed to register connection device [ 180.284713][ T7594] netlink: 'syz.0.642': attribute type 21 has an invalid length. [ 180.293577][ T7594] netlink: 128 bytes leftover after parsing attributes in process `syz.0.642'. [ 180.314152][ T5798] Bluetooth: hci0: command tx timeout [ 180.327312][ T7594] netlink: 14 bytes leftover after parsing attributes in process `syz.0.642'. [ 180.483841][ T5798] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 180.492635][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 180.502618][ T5798] CPU: 0 PID: 5798 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 180.510204][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.520282][ T5798] Workqueue: hci1 hci_rx_work [ 180.524981][ T5798] Call Trace: [ 180.528269][ T5798] [ 180.531206][ T5798] dump_stack_lvl+0x16c/0x230 [ 180.535906][ T5798] ? show_regs_print_info+0x20/0x20 [ 180.541116][ T5798] ? load_image+0x3b0/0x3b0 [ 180.545634][ T5798] sysfs_create_dir_ns+0x256/0x280 [ 180.550753][ T5798] ? hci_rx_work+0x43a/0xd80 [ 180.555348][ T5798] ? sysfs_warn_dup+0xa0/0xa0 [ 180.560038][ T5798] ? do_raw_spin_unlock+0x121/0x230 [ 180.565244][ T5798] kobject_add_internal+0x6b8/0xc70 [ 180.570451][ T5798] kobject_add+0x156/0x220 [ 180.574867][ T5798] ? __rwlock_init+0x150/0x150 [ 180.579637][ T5798] ? kobject_init+0x1e0/0x1e0 [ 180.584310][ T5798] ? _raw_spin_unlock+0x28/0x40 [ 180.589164][ T5798] ? get_device_parent+0x366/0x390 [ 180.594391][ T5798] device_add+0x408/0xc20 [ 180.598753][ T5798] hci_conn_add_sysfs+0xd5/0x1e0 [ 180.603711][ T5798] le_conn_complete_evt+0xf36/0x1500 [ 180.609018][ T5798] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 180.615275][ T5798] ? bt_info+0x160/0x160 [ 180.619521][ T5798] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 180.625160][ T5798] ? skb_pull_data+0xfb/0x200 [ 180.629841][ T5798] hci_le_conn_complete_evt+0x187/0x440 [ 180.635423][ T5798] ? hci_remote_host_features_evt+0x160/0x160 [ 180.641513][ T5798] hci_event_packet+0x795/0x1210 [ 180.646475][ T5798] ? bis_list+0x290/0x290 [ 180.650832][ T5798] ? lockdep_hardirqs_on+0x98/0x150 [ 180.656052][ T5798] ? hci_send_to_monitor+0xd7/0x4f0 [ 180.661295][ T5798] hci_rx_work+0x43a/0xd80 [ 180.665731][ T5798] ? process_scheduled_works+0x957/0x15b0 [ 180.671454][ T5798] process_scheduled_works+0xa45/0x15b0 [ 180.677036][ T5798] ? assign_work+0x400/0x400 [ 180.681635][ T5798] ? assign_work+0x39e/0x400 [ 180.686229][ T5798] worker_thread+0xa55/0xfc0 [ 180.690841][ T5798] kthread+0x2fa/0x390 [ 180.694905][ T5798] ? pr_cont_work+0x560/0x560 [ 180.699582][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 180.704170][ T5798] ret_from_fork+0x48/0x80 [ 180.708586][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 180.713173][ T5798] ret_from_fork_asm+0x11/0x20 [ 180.717953][ T5798] [ 180.736321][ T5798] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 180.750323][ T5798] Bluetooth: hci1: failed to register connection device [ 180.891770][ T7614] netlink: 'syz.1.646': attribute type 21 has an invalid length. [ 180.899801][ T7614] netlink: 128 bytes leftover after parsing attributes in process `syz.1.646'. [ 180.913482][ T7614] netlink: 14 bytes leftover after parsing attributes in process `syz.1.646'. [ 181.017455][ T7615] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.649'. [ 181.050196][ T7612] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.649'. [ 181.146092][ T7617] netlink: 'syz.1.650': attribute type 29 has an invalid length. [ 181.750870][ T7628] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.759538][ T7628] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.790630][ T7628] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.798631][ T7628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.806785][ T7628] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.813974][ T7628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.832834][ T7628] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.975134][ T5793] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 181.983057][ T5793] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 181.992762][ T5793] CPU: 1 PID: 5793 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 182.000335][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.010423][ T5793] Workqueue: hci0 hci_rx_work [ 182.015142][ T5793] Call Trace: [ 182.018442][ T5793] [ 182.021383][ T5793] dump_stack_lvl+0x16c/0x230 [ 182.026084][ T5793] ? show_regs_print_info+0x20/0x20 [ 182.031294][ T5793] ? load_image+0x3b0/0x3b0 [ 182.035816][ T5793] sysfs_create_dir_ns+0x256/0x280 [ 182.040940][ T5793] ? hci_rx_work+0x43a/0xd80 [ 182.045533][ T5793] ? sysfs_warn_dup+0xa0/0xa0 [ 182.050224][ T5793] ? do_raw_spin_unlock+0x121/0x230 [ 182.055445][ T5793] kobject_add_internal+0x6b8/0xc70 [ 182.060650][ T5793] kobject_add+0x156/0x220 [ 182.065061][ T5793] ? __rwlock_init+0x150/0x150 [ 182.069829][ T5793] ? kobject_init+0x1e0/0x1e0 [ 182.074499][ T5793] ? _raw_spin_unlock+0x28/0x40 [ 182.079344][ T5793] ? get_device_parent+0x366/0x390 [ 182.084462][ T5793] device_add+0x408/0xc20 [ 182.088793][ T5793] hci_conn_add_sysfs+0xd5/0x1e0 [ 182.093733][ T5793] le_conn_complete_evt+0xf36/0x1500 [ 182.099037][ T5793] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 182.105290][ T5793] ? bt_info+0x160/0x160 [ 182.109531][ T5793] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 182.115167][ T5793] ? skb_pull_data+0xfb/0x200 [ 182.119842][ T5793] hci_le_conn_complete_evt+0x187/0x440 [ 182.125391][ T5793] ? hci_remote_host_features_evt+0x160/0x160 [ 182.131457][ T5793] hci_event_packet+0x795/0x1210 [ 182.136394][ T5793] ? bis_list+0x290/0x290 [ 182.140714][ T5793] ? lockdep_hardirqs_on+0x98/0x150 [ 182.145907][ T5793] ? hci_send_to_monitor+0xd7/0x4f0 [ 182.151108][ T5793] hci_rx_work+0x43a/0xd80 [ 182.155534][ T5793] ? process_scheduled_works+0x957/0x15b0 [ 182.161250][ T5793] process_scheduled_works+0xa45/0x15b0 [ 182.166813][ T5793] ? assign_work+0x400/0x400 [ 182.171403][ T5793] ? assign_work+0x39e/0x400 [ 182.175999][ T5793] worker_thread+0xa55/0xfc0 [ 182.180880][ T5793] kthread+0x2fa/0x390 [ 182.184937][ T5793] ? pr_cont_work+0x560/0x560 [ 182.189609][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 182.194189][ T5793] ret_from_fork+0x48/0x80 [ 182.198604][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 182.203186][ T5793] ret_from_fork_asm+0x11/0x20 [ 182.207965][ T5793] [ 182.211498][ T5793] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 182.226251][ T5793] Bluetooth: hci0: failed to register connection device [ 182.262525][ T7634] netlink: 128 bytes leftover after parsing attributes in process `syz.0.658'. [ 182.301680][ T7634] netlink: 14 bytes leftover after parsing attributes in process `syz.0.658'. [ 182.388302][ T5798] Bluetooth: hci0: command tx timeout [ 182.786529][ T5798] Bluetooth: hci1: command tx timeout [ 183.576869][ T5798] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 183.584742][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 183.594766][ T5798] CPU: 1 PID: 5798 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 183.602350][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.612428][ T5798] Workqueue: hci2 hci_rx_work [ 183.617146][ T5798] Call Trace: [ 183.620440][ T5798] [ 183.623383][ T5798] dump_stack_lvl+0x16c/0x230 [ 183.628092][ T5798] ? show_regs_print_info+0x20/0x20 [ 183.633322][ T5798] ? load_image+0x3b0/0x3b0 [ 183.637868][ T5798] sysfs_create_dir_ns+0x256/0x280 [ 183.643013][ T5798] ? hci_rx_work+0x43a/0xd80 [ 183.647630][ T5798] ? sysfs_warn_dup+0xa0/0xa0 [ 183.652341][ T5798] ? do_raw_spin_unlock+0x121/0x230 [ 183.657569][ T5798] kobject_add_internal+0x6b8/0xc70 [ 183.662785][ T5798] kobject_add+0x156/0x220 [ 183.667201][ T5798] ? __rwlock_init+0x150/0x150 [ 183.671969][ T5798] ? kobject_init+0x1e0/0x1e0 [ 183.676824][ T5798] ? _raw_spin_unlock+0x28/0x40 [ 183.681673][ T5798] ? get_device_parent+0x366/0x390 [ 183.686784][ T5798] device_add+0x408/0xc20 [ 183.691118][ T5798] hci_conn_add_sysfs+0xd5/0x1e0 [ 183.696063][ T5798] le_conn_complete_evt+0xf36/0x1500 [ 183.701357][ T5798] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 183.707597][ T5798] ? bt_info+0x160/0x160 [ 183.711839][ T5798] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 183.717477][ T5798] ? skb_pull_data+0xfb/0x200 [ 183.722159][ T5798] hci_le_conn_complete_evt+0x187/0x440 [ 183.727708][ T5798] ? hci_remote_host_features_evt+0x160/0x160 [ 183.733767][ T5798] hci_event_packet+0x795/0x1210 [ 183.738709][ T5798] ? bis_list+0x290/0x290 [ 183.743034][ T5798] ? lockdep_hardirqs_on+0x98/0x150 [ 183.748231][ T5798] ? hci_send_to_monitor+0xd7/0x4f0 [ 183.753433][ T5798] hci_rx_work+0x43a/0xd80 [ 183.757865][ T5798] ? process_scheduled_works+0x957/0x15b0 [ 183.763583][ T5798] process_scheduled_works+0xa45/0x15b0 [ 183.769150][ T5798] ? assign_work+0x400/0x400 [ 183.773738][ T5798] ? assign_work+0x39e/0x400 [ 183.778331][ T5798] worker_thread+0xa55/0xfc0 [ 183.782945][ T5798] kthread+0x2fa/0x390 [ 183.787004][ T5798] ? pr_cont_work+0x560/0x560 [ 183.791679][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 183.796260][ T5798] ret_from_fork+0x48/0x80 [ 183.800682][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 183.805265][ T5798] ret_from_fork_asm+0x11/0x20 [ 183.810045][ T5798] [ 183.813610][ T5798] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.827726][ T5798] Bluetooth: hci2: failed to register connection device [ 184.466113][ T51] Bluetooth: hci0: command tx timeout [ 184.898599][ T7695] validate_nla: 19 callbacks suppressed [ 184.898616][ T7695] netlink: 'syz.0.683': attribute type 29 has an invalid length. [ 184.959210][ T7695] netlink: 'syz.0.683': attribute type 29 has an invalid length. [ 184.969207][ T7695] netlink: 'syz.0.683': attribute type 29 has an invalid length. [ 184.998609][ T7695] netlink: 'syz.0.683': attribute type 29 has an invalid length. [ 185.016595][ T7695] netlink: 'syz.0.683': attribute type 29 has an invalid length. [ 185.403785][ T7702] __nla_validate_parse: 4 callbacks suppressed [ 185.403802][ T7702] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.686'. [ 185.463492][ T7701] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.686'. [ 185.906601][ T51] Bluetooth: hci2: command tx timeout [ 186.466297][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 186.472630][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 186.549082][ T5798] Bluetooth: hci0: command 0x2016 tx timeout [ 186.718357][ T5798] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 186.727910][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 186.737376][ T5798] CPU: 1 PID: 5798 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 186.744934][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.755005][ T5798] Workqueue: hci2 hci_rx_work [ 186.759719][ T5798] Call Trace: [ 186.763003][ T5798] [ 186.765949][ T5798] dump_stack_lvl+0x16c/0x230 [ 186.770665][ T5798] ? show_regs_print_info+0x20/0x20 [ 186.775886][ T5798] ? load_image+0x3b0/0x3b0 [ 186.780415][ T5798] sysfs_create_dir_ns+0x256/0x280 [ 186.785550][ T5798] ? hci_rx_work+0x43a/0xd80 [ 186.790168][ T5798] ? sysfs_warn_dup+0xa0/0xa0 [ 186.794872][ T5798] ? do_raw_spin_unlock+0x121/0x230 [ 186.800096][ T5798] kobject_add_internal+0x6b8/0xc70 [ 186.805317][ T5798] kobject_add+0x156/0x220 [ 186.809753][ T5798] ? __rwlock_init+0x150/0x150 [ 186.814562][ T5798] ? kobject_init+0x1e0/0x1e0 [ 186.819262][ T5798] ? _raw_spin_unlock+0x28/0x40 [ 186.824144][ T5798] ? get_device_parent+0x366/0x390 [ 186.829288][ T5798] device_add+0x408/0xc20 [ 186.833643][ T5798] hci_conn_add_sysfs+0xd5/0x1e0 [ 186.838604][ T5798] le_conn_complete_evt+0xf36/0x1500 [ 186.843913][ T5798] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 186.850163][ T5798] ? bt_info+0x160/0x160 [ 186.854408][ T5798] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 186.860054][ T5798] ? skb_pull_data+0xfb/0x200 [ 186.864732][ T5798] hci_le_conn_complete_evt+0x187/0x440 [ 186.870292][ T5798] ? hci_remote_host_features_evt+0x160/0x160 [ 186.876363][ T5798] hci_event_packet+0x795/0x1210 [ 186.881308][ T5798] ? bis_list+0x290/0x290 [ 186.885635][ T5798] ? lockdep_hardirqs_on+0x98/0x150 [ 186.890832][ T5798] ? hci_send_to_monitor+0xd7/0x4f0 [ 186.896037][ T5798] hci_rx_work+0x43a/0xd80 [ 186.900468][ T5798] ? process_scheduled_works+0x957/0x15b0 [ 186.906188][ T5798] process_scheduled_works+0xa45/0x15b0 [ 186.911761][ T5798] ? assign_work+0x400/0x400 [ 186.916356][ T5798] ? assign_work+0x39e/0x400 [ 186.920950][ T5798] worker_thread+0xa55/0xfc0 [ 186.925562][ T5798] kthread+0x2fa/0x390 [ 186.929625][ T5798] ? pr_cont_work+0x560/0x560 [ 186.934299][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 186.938886][ T5798] ret_from_fork+0x48/0x80 [ 186.943300][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 186.947887][ T5798] ret_from_fork_asm+0x11/0x20 [ 186.952663][ T5798] [ 186.959592][ T5798] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 186.973590][ T5798] Bluetooth: hci2: failed to register connection device [ 187.028046][ T7740] netlink: 'syz.3.702': attribute type 21 has an invalid length. [ 187.035965][ T7740] netlink: 128 bytes leftover after parsing attributes in process `syz.3.702'. [ 187.054618][ T7740] netlink: 14 bytes leftover after parsing attributes in process `syz.3.702'. [ 187.535494][ T7754] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.708'. [ 187.576317][ T7752] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.708'. [ 187.766637][ T7757] FAULT_INJECTION: forcing a failure. [ 187.766637][ T7757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.802912][ T7757] CPU: 0 PID: 7757 Comm: syz.1.709 Not tainted syzkaller #0 [ 187.810256][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.820332][ T7757] Call Trace: [ 187.823627][ T7757] [ 187.826568][ T7757] dump_stack_lvl+0x16c/0x230 [ 187.831274][ T7757] ? show_regs_print_info+0x20/0x20 [ 187.836507][ T7757] ? load_image+0x3b0/0x3b0 [ 187.841036][ T7757] ? __might_fault+0xaa/0x120 [ 187.845726][ T7757] ? __lock_acquire+0x7c80/0x7c80 [ 187.850777][ T7757] should_fail_ex+0x39d/0x4d0 [ 187.855470][ T7757] _copy_to_user+0x2f/0xa0 [ 187.859911][ T7757] bpf_verifier_vlog+0x45c/0x870 [ 187.864877][ T7757] __btf_verifier_log+0xd5/0x120 [ 187.869833][ T7757] ? btf_check_sec_info+0x330/0x330 [ 187.875044][ T7757] ? __lock_acquire+0x7c80/0x7c80 [ 187.880091][ T7757] ? btf_parse_hdr+0x1da/0x6d0 [ 187.884866][ T7757] btf_parse_hdr+0x2e8/0x6d0 [ 187.889464][ T7757] btf_new_fd+0x37b/0x980 [ 187.893798][ T7757] ? bpf_btf_show_fdinfo+0x80/0x80 [ 187.898931][ T7757] ? capable+0x88/0xe0 [ 187.903026][ T7757] __sys_bpf+0x60e/0x800 [ 187.907282][ T7757] ? bpf_link_show_fdinfo+0x350/0x350 [ 187.912666][ T7757] ? lock_chain_count+0x20/0x20 [ 187.917527][ T7757] __x64_sys_bpf+0x7c/0x90 [ 187.921947][ T7757] do_syscall_64+0x55/0xb0 [ 187.926366][ T7757] ? clear_bhb_loop+0x40/0x90 [ 187.931049][ T7757] ? clear_bhb_loop+0x40/0x90 [ 187.935724][ T7757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.941635][ T7757] RIP: 0033:0x7f713f38efc9 [ 187.946054][ T7757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.965689][ T7757] RSP: 002b:00007f71401df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.974102][ T7757] RAX: ffffffffffffffda RBX: 00007f713f5e5fa0 RCX: 00007f713f38efc9 [ 187.982069][ T7757] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 187.990038][ T7757] RBP: 00007f71401df090 R08: 0000000000000000 R09: 0000000000000000 [ 187.998111][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.006110][ T7757] R13: 00007f713f5e6038 R14: 00007f713f5e5fa0 R15: 00007ffca0a7d418 [ 188.014108][ T7757] [ 188.019460][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 188.628895][ T5801] Bluetooth: hci0: command 0x2016 tx timeout [ 189.808552][ T7808] FAULT_INJECTION: forcing a failure. [ 189.808552][ T7808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.859156][ T7808] CPU: 1 PID: 7808 Comm: syz.3.729 Not tainted syzkaller #0 [ 189.866502][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.876579][ T7808] Call Trace: [ 189.879876][ T7808] [ 189.882821][ T7808] dump_stack_lvl+0x16c/0x230 [ 189.887515][ T7808] ? show_regs_print_info+0x20/0x20 [ 189.892725][ T7808] ? load_image+0x3b0/0x3b0 [ 189.897243][ T7808] ? __lock_acquire+0x7c80/0x7c80 [ 189.902277][ T7808] ? snprintf+0xdb/0x120 [ 189.906528][ T7808] should_fail_ex+0x39d/0x4d0 [ 189.911223][ T7808] _copy_to_user+0x2f/0xa0 [ 189.915647][ T7808] simple_read_from_buffer+0xe7/0x150 [ 189.921040][ T7808] proc_fail_nth_read+0x1e3/0x250 [ 189.926080][ T7808] ? proc_fault_inject_write+0x340/0x340 [ 189.931823][ T7808] ? fsnotify_perm+0x271/0x5e0 [ 189.936610][ T7808] ? proc_fault_inject_write+0x340/0x340 [ 189.942262][ T7808] vfs_read+0x27e/0x920 [ 189.946440][ T7808] ? kernel_read+0x1e0/0x1e0 [ 189.951042][ T7808] ? __fget_files+0x28/0x4d0 [ 189.955647][ T7808] ? __fget_files+0x44a/0x4d0 [ 189.960349][ T7808] ? __fdget_pos+0x2a3/0x330 [ 189.964960][ T7808] ? ksys_read+0x75/0x250 [ 189.969305][ T7808] ksys_read+0x147/0x250 [ 189.973565][ T7808] ? vfs_write+0x940/0x940 [ 189.978002][ T7808] ? lockdep_hardirqs_on+0x98/0x150 [ 189.983217][ T7808] do_syscall_64+0x55/0xb0 [ 189.987640][ T7808] ? clear_bhb_loop+0x40/0x90 [ 189.992322][ T7808] ? clear_bhb_loop+0x40/0x90 [ 189.997014][ T7808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.002916][ T7808] RIP: 0033:0x7fb0ccb8d9dc [ 190.007333][ T7808] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.026965][ T7808] RSP: 002b:00007fb0cadf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.035382][ T7808] RAX: ffffffffffffffda RBX: 00007fb0ccde5fa0 RCX: 00007fb0ccb8d9dc [ 190.043366][ T7808] RDX: 000000000000000f RSI: 00007fb0cadf60a0 RDI: 0000000000000004 [ 190.051343][ T7808] RBP: 00007fb0cadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.059325][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.067298][ T7808] R13: 00007fb0ccde6038 R14: 00007fb0ccde5fa0 R15: 00007ffe62a0b3c8 [ 190.075293][ T7808] [ 190.140231][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 190.208356][ T5801] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 190.217467][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 190.229294][ T5801] CPU: 1 PID: 5801 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 190.236890][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.246960][ T5801] Workqueue: hci2 hci_rx_work [ 190.251653][ T5801] Call Trace: [ 190.254931][ T5801] [ 190.257870][ T5801] dump_stack_lvl+0x16c/0x230 [ 190.262560][ T5801] ? show_regs_print_info+0x20/0x20 [ 190.267760][ T5801] ? load_image+0x3b0/0x3b0 [ 190.272272][ T5801] sysfs_create_dir_ns+0x256/0x280 [ 190.277388][ T5801] ? hci_rx_work+0x43a/0xd80 [ 190.281978][ T5801] ? sysfs_warn_dup+0xa0/0xa0 [ 190.286654][ T5801] ? do_raw_spin_unlock+0x121/0x230 [ 190.291853][ T5801] kobject_add_internal+0x6b8/0xc70 [ 190.297051][ T5801] kobject_add+0x156/0x220 [ 190.301460][ T5801] ? __rwlock_init+0x150/0x150 [ 190.306228][ T5801] ? kobject_init+0x1e0/0x1e0 [ 190.310900][ T5801] ? _raw_spin_unlock+0x28/0x40 [ 190.315748][ T5801] ? get_device_parent+0x366/0x390 [ 190.320886][ T5801] device_add+0x408/0xc20 [ 190.325235][ T5801] hci_conn_add_sysfs+0xd5/0x1e0 [ 190.330192][ T5801] le_conn_complete_evt+0xf36/0x1500 [ 190.335501][ T5801] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 190.341747][ T5801] ? bt_info+0x160/0x160 [ 190.345990][ T5801] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 190.351632][ T5801] ? skb_pull_data+0xfb/0x200 [ 190.356310][ T5801] hci_le_conn_complete_evt+0x187/0x440 [ 190.361858][ T5801] ? hci_remote_host_features_evt+0x160/0x160 [ 190.367921][ T5801] hci_event_packet+0x795/0x1210 [ 190.372857][ T5801] ? bis_list+0x290/0x290 [ 190.377178][ T5801] ? lockdep_hardirqs_on+0x98/0x150 [ 190.382374][ T5801] ? hci_send_to_monitor+0xd7/0x4f0 [ 190.387572][ T5801] hci_rx_work+0x43a/0xd80 [ 190.391999][ T5801] ? process_scheduled_works+0x957/0x15b0 [ 190.397717][ T5801] process_scheduled_works+0xa45/0x15b0 [ 190.403285][ T5801] ? assign_work+0x400/0x400 [ 190.407880][ T5801] ? assign_work+0x39e/0x400 [ 190.412481][ T5801] worker_thread+0xa55/0xfc0 [ 190.417088][ T5801] kthread+0x2fa/0x390 [ 190.421147][ T5801] ? pr_cont_work+0x560/0x560 [ 190.425822][ T5801] ? kthread_blkcg+0xd0/0xd0 [ 190.430405][ T5801] ret_from_fork+0x48/0x80 [ 190.434850][ T5801] ? kthread_blkcg+0xd0/0xd0 [ 190.439432][ T5801] ret_from_fork_asm+0x11/0x20 [ 190.444203][ T5801] [ 190.447682][ T5801] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 190.461710][ T5801] Bluetooth: hci2: failed to register connection device [ 190.502813][ T7815] netlink: 14 bytes leftover after parsing attributes in process `syz.3.732'. [ 190.522590][ T7811] netlink: 'syz.1.730': attribute type 17 has an invalid length. [ 190.530908][ T7811] netlink: 152 bytes leftover after parsing attributes in process `syz.1.730'. [ 190.553166][ T7811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.294838][ T7828] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.737'. [ 191.334571][ T7828] openvswitch: netlink: Duplicate key (type 0). [ 191.741193][ T5801] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 191.755132][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 191.765182][ T5801] CPU: 1 PID: 5801 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 191.772771][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.782844][ T5801] Workqueue: hci2 hci_rx_work [ 191.787562][ T5801] Call Trace: [ 191.790856][ T5801] [ 191.793810][ T5801] dump_stack_lvl+0x16c/0x230 [ 191.798516][ T5801] ? show_regs_print_info+0x20/0x20 [ 191.803717][ T5801] ? load_image+0x3b0/0x3b0 [ 191.808222][ T5801] sysfs_create_dir_ns+0x256/0x280 [ 191.813337][ T5801] ? hci_rx_work+0x43a/0xd80 [ 191.817920][ T5801] ? sysfs_warn_dup+0xa0/0xa0 [ 191.822593][ T5801] ? do_raw_spin_unlock+0x121/0x230 [ 191.827789][ T5801] kobject_add_internal+0x6b8/0xc70 [ 191.832981][ T5801] kobject_add+0x156/0x220 [ 191.837384][ T5801] ? __rwlock_init+0x150/0x150 [ 191.842159][ T5801] ? kobject_init+0x1e0/0x1e0 [ 191.846860][ T5801] ? _raw_spin_unlock+0x28/0x40 [ 191.851726][ T5801] ? get_device_parent+0x366/0x390 [ 191.856835][ T5801] device_add+0x408/0xc20 [ 191.861161][ T5801] hci_conn_add_sysfs+0xd5/0x1e0 [ 191.866114][ T5801] le_conn_complete_evt+0xf36/0x1500 [ 191.871439][ T5801] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 191.877678][ T5801] ? bt_info+0x160/0x160 [ 191.881911][ T5801] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 191.887543][ T5801] ? skb_pull_data+0xfb/0x200 [ 191.892215][ T5801] hci_le_conn_complete_evt+0x187/0x440 [ 191.897764][ T5801] ? hci_remote_host_features_evt+0x160/0x160 [ 191.903843][ T5801] hci_event_packet+0x795/0x1210 [ 191.908820][ T5801] ? bis_list+0x290/0x290 [ 191.909021][ T7848] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 191.913154][ T5801] ? lockdep_hardirqs_on+0x98/0x150 [ 191.913209][ T5801] ? hci_send_to_monitor+0xd7/0x4f0 [ 191.931320][ T5801] hci_rx_work+0x43a/0xd80 [ 191.935744][ T5801] ? process_scheduled_works+0x957/0x15b0 [ 191.941476][ T5801] process_scheduled_works+0xa45/0x15b0 [ 191.947061][ T5801] ? assign_work+0x400/0x400 [ 191.951649][ T5801] ? assign_work+0x39e/0x400 [ 191.956235][ T5801] worker_thread+0xa55/0xfc0 [ 191.960835][ T5801] kthread+0x2fa/0x390 [ 191.964893][ T5801] ? pr_cont_work+0x560/0x560 [ 191.969562][ T5801] ? kthread_blkcg+0xd0/0xd0 [ 191.974139][ T5801] ret_from_fork+0x48/0x80 [ 191.978560][ T5801] ? kthread_blkcg+0xd0/0xd0 [ 191.983174][ T5801] ret_from_fork_asm+0x11/0x20 [ 191.987991][ T5801] [ 191.992429][ T5801] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 192.006671][ T5801] Bluetooth: hci2: failed to register connection device [ 192.010428][ T7849] netlink: 14 bytes leftover after parsing attributes in process `syz.3.743'. [ 192.188539][ T7856] netlink: 'syz.1.746': attribute type 10 has an invalid length. [ 192.422953][ T7870] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.758'. [ 192.446893][ T7865] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.758'. [ 192.546615][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 193.596672][ T7889] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 193.621324][ T5801] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 193.633635][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 193.643329][ T5801] CPU: 1 PID: 5801 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 193.650901][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.660958][ T5801] Workqueue: hci0 hci_rx_work [ 193.665644][ T5801] Call Trace: [ 193.668937][ T5801] [ 193.671872][ T5801] dump_stack_lvl+0x16c/0x230 [ 193.676555][ T5801] ? show_regs_print_info+0x20/0x20 [ 193.681748][ T5801] ? load_image+0x3b0/0x3b0 [ 193.686259][ T5801] sysfs_create_dir_ns+0x256/0x280 [ 193.691372][ T5801] ? hci_rx_work+0x43a/0xd80 [ 193.695964][ T5801] ? sysfs_warn_dup+0xa0/0xa0 [ 193.700646][ T5801] ? do_raw_spin_unlock+0x121/0x230 [ 193.705850][ T5801] kobject_add_internal+0x6b8/0xc70 [ 193.711070][ T5801] kobject_add+0x156/0x220 [ 193.715477][ T5801] ? __rwlock_init+0x150/0x150 [ 193.720273][ T5801] ? kobject_init+0x1e0/0x1e0 [ 193.724943][ T5801] ? _raw_spin_unlock+0x28/0x40 [ 193.729825][ T5801] ? get_device_parent+0x366/0x390 [ 193.734941][ T5801] device_add+0x408/0xc20 [ 193.739278][ T5801] hci_conn_add_sysfs+0xd5/0x1e0 [ 193.744256][ T5801] le_conn_complete_evt+0xf36/0x1500 [ 193.749549][ T5801] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 193.755789][ T5801] ? bt_info+0x160/0x160 [ 193.760034][ T5801] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 193.765675][ T5801] ? skb_pull_data+0xfb/0x200 [ 193.770353][ T5801] hci_le_conn_complete_evt+0x187/0x440 [ 193.775907][ T5801] ? hci_remote_host_features_evt+0x160/0x160 [ 193.781970][ T5801] hci_event_packet+0x795/0x1210 [ 193.786908][ T5801] ? bis_list+0x290/0x290 [ 193.791235][ T5801] ? lockdep_hardirqs_on+0x98/0x150 [ 193.796429][ T5801] ? hci_send_to_monitor+0xd7/0x4f0 [ 193.801632][ T5801] hci_rx_work+0x43a/0xd80 [ 193.806059][ T5801] ? process_scheduled_works+0x957/0x15b0 [ 193.811779][ T5801] process_scheduled_works+0xa45/0x15b0 [ 193.817347][ T5801] ? assign_work+0x400/0x400 [ 193.821939][ T5801] ? assign_work+0x39e/0x400 [ 193.826557][ T5801] worker_thread+0xa55/0xfc0 [ 193.831339][ T5801] kthread+0x2fa/0x390 [ 193.835399][ T5801] ? pr_cont_work+0x560/0x560 [ 193.840079][ T5801] ? kthread_blkcg+0xd0/0xd0 [ 193.844661][ T5801] ret_from_fork+0x48/0x80 [ 193.849076][ T5801] ? kthread_blkcg+0xd0/0xd0 [ 193.853661][ T5801] ret_from_fork_asm+0x11/0x20 [ 193.858432][ T5801] [ 193.862652][ T5801] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 193.876744][ T5801] Bluetooth: hci0: failed to register connection device [ 193.918988][ T7890] netlink: 14 bytes leftover after parsing attributes in process `syz.0.757'. [ 193.979690][ T7892] netlink: 'syz.3.759': attribute type 10 has an invalid length. [ 194.059265][ T5801] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 194.067700][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 194.078065][ T5801] CPU: 1 PID: 5801 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 194.085651][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.095734][ T5801] Workqueue: hci1 hci_rx_work [ 194.100455][ T5801] Call Trace: [ 194.103751][ T5801] [ 194.106697][ T5801] dump_stack_lvl+0x16c/0x230 [ 194.111409][ T5801] ? show_regs_print_info+0x20/0x20 [ 194.116642][ T5801] ? load_image+0x3b0/0x3b0 [ 194.121180][ T5801] sysfs_create_dir_ns+0x256/0x280 [ 194.126322][ T5801] ? hci_rx_work+0x43a/0xd80 [ 194.130937][ T5801] ? sysfs_warn_dup+0xa0/0xa0 [ 194.135654][ T5801] ? do_raw_spin_unlock+0x121/0x230 [ 194.140861][ T5801] kobject_add_internal+0x6b8/0xc70 [ 194.146067][ T5801] kobject_add+0x156/0x220 [ 194.150478][ T5801] ? __rwlock_init+0x150/0x150 [ 194.155244][ T5801] ? kobject_init+0x1e0/0x1e0 [ 194.159921][ T5801] ? _raw_spin_unlock+0x28/0x40 [ 194.164767][ T5801] ? get_device_parent+0x366/0x390 [ 194.169915][ T5801] device_add+0x408/0xc20 [ 194.174248][ T5801] hci_conn_add_sysfs+0xd5/0x1e0 [ 194.179195][ T5801] le_conn_complete_evt+0xf36/0x1500 [ 194.184490][ T5801] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 194.190730][ T5801] ? bt_info+0x160/0x160 [ 194.194969][ T5801] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 194.200605][ T5801] ? skb_pull_data+0xfb/0x200 [ 194.205279][ T5801] hci_le_conn_complete_evt+0x187/0x440 [ 194.210829][ T5801] ? hci_remote_host_features_evt+0x160/0x160 [ 194.216891][ T5801] hci_event_packet+0x795/0x1210 [ 194.221830][ T5801] ? bis_list+0x290/0x290 [ 194.226154][ T5801] ? lockdep_hardirqs_on+0x98/0x150 [ 194.231355][ T5801] ? hci_send_to_monitor+0xd7/0x4f0 [ 194.236556][ T5801] hci_rx_work+0x43a/0xd80 [ 194.240984][ T5801] ? process_scheduled_works+0x957/0x15b0 [ 194.246702][ T5801] process_scheduled_works+0xa45/0x15b0 [ 194.252268][ T5801] ? assign_work+0x400/0x400 [ 194.256860][ T5801] ? assign_work+0x39e/0x400 [ 194.261446][ T5801] worker_thread+0xa55/0xfc0 [ 194.266062][ T5801] kthread+0x2fa/0x390 [ 194.270124][ T5801] ? pr_cont_work+0x560/0x560 [ 194.274795][ T5801] ? kthread_blkcg+0xd0/0xd0 [ 194.279377][ T5801] ret_from_fork+0x48/0x80 [ 194.283791][ T5801] ? kthread_blkcg+0xd0/0xd0 [ 194.288376][ T5801] ret_from_fork_asm+0x11/0x20 [ 194.293151][ T5801] [ 194.297831][ T5801] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 194.312097][ T5801] Bluetooth: hci1: failed to register connection device [ 194.374082][ T7903] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.765'. [ 194.374936][ T7898] netlink: 14 bytes leftover after parsing attributes in process `syz.1.763'. [ 194.383748][ T7903] openvswitch: netlink: Duplicate key (type 0). [ 194.479611][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.487386][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.626695][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 194.961459][ T7911] FAULT_INJECTION: forcing a failure. [ 194.961459][ T7911] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 195.020249][ T7911] CPU: 0 PID: 7911 Comm: syz.1.768 Not tainted syzkaller #0 [ 195.027591][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.037656][ T7911] Call Trace: [ 195.040940][ T7911] [ 195.043884][ T7911] dump_stack_lvl+0x16c/0x230 [ 195.048582][ T7911] ? show_regs_print_info+0x20/0x20 [ 195.053796][ T7911] ? load_image+0x3b0/0x3b0 [ 195.058314][ T7911] ? __lock_acquire+0x7c80/0x7c80 [ 195.063362][ T7911] should_fail_ex+0x39d/0x4d0 [ 195.068064][ T7911] prepare_alloc_pages+0x1e2/0x5f0 [ 195.073202][ T7911] __alloc_pages+0x127/0x460 [ 195.077809][ T7911] ? zone_statistics+0x170/0x170 [ 195.082778][ T7911] pipe_write+0x63b/0x1af0 [ 195.087234][ T7911] ? pipe_read+0x12a0/0x12a0 [ 195.091840][ T7911] ? end_current_label_crit_section+0x149/0x170 [ 195.098118][ T7911] ? common_file_perm+0x198/0x1f0 [ 195.103159][ T7911] vfs_write+0x43b/0x940 [ 195.107418][ T7911] ? file_end_write+0x250/0x250 [ 195.112283][ T7911] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 195.118458][ T7911] ? ksys_write+0x128/0x250 [ 195.122984][ T7911] ksys_write+0x147/0x250 [ 195.127330][ T7911] ? __ia32_sys_read+0x90/0x90 [ 195.132108][ T7911] ? lockdep_hardirqs_on+0x98/0x150 [ 195.137323][ T7911] do_syscall_64+0x55/0xb0 [ 195.141749][ T7911] ? clear_bhb_loop+0x40/0x90 [ 195.146430][ T7911] ? clear_bhb_loop+0x40/0x90 [ 195.151114][ T7911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.157017][ T7911] RIP: 0033:0x7f713f38efc9 [ 195.161437][ T7911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.181064][ T7911] RSP: 002b:00007f71401df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.189492][ T7911] RAX: ffffffffffffffda RBX: 00007f713f5e5fa0 RCX: 00007f713f38efc9 [ 195.197471][ T7911] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 0000000000000000 [ 195.205465][ T7911] RBP: 00007f71401df090 R08: 0000000000000000 R09: 0000000000000000 [ 195.213461][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.221538][ T7911] R13: 00007f713f5e6038 R14: 00007f713f5e5fa0 R15: 00007ffca0a7d418 [ 195.229534][ T7911] [ 195.446747][ T7915] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 195.623422][ T7922] tap0: tun_chr_ioctl cmd 1074025677 [ 195.640738][ T7922] tap0: linktype set to 774 [ 195.806890][ T7927] netlink: 'syz.2.774': attribute type 10 has an invalid length. [ 195.907297][ T5801] Bluetooth: hci0: command 0x2016 tx timeout [ 196.387252][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 197.018969][ T7945] netlink: 'syz.2.782': attribute type 10 has an invalid length. [ 197.347922][ T11] tipc: Subscription rejected, illegal request [ 197.580129][ T7957] netlink: 'syz.3.787': attribute type 16 has an invalid length. [ 197.596187][ T7957] netlink: 'syz.3.787': attribute type 3 has an invalid length. [ 197.607257][ T7959] netlink: 'syz.2.788': attribute type 10 has an invalid length. [ 197.613439][ T7957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.787'. [ 197.641039][ T7959] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 197.663460][ T7957] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 197.889625][ T7969] netlink: 'syz.2.792': attribute type 10 has an invalid length. [ 198.421372][ T7982] FAULT_INJECTION: forcing a failure. [ 198.421372][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 198.440314][ T7982] CPU: 0 PID: 7982 Comm: syz.0.797 Not tainted syzkaller #0 [ 198.447651][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.457719][ T7982] Call Trace: [ 198.461025][ T7982] [ 198.463947][ T7982] dump_stack_lvl+0x16c/0x230 [ 198.468620][ T7982] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.474767][ T7982] ? show_regs_print_info+0x20/0x20 [ 198.479958][ T7982] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.486112][ T7982] should_fail_ex+0x39d/0x4d0 [ 198.490787][ T7982] should_failslab+0x9/0x20 [ 198.495281][ T7982] slab_pre_alloc_hook+0x59/0x310 [ 198.500305][ T7982] kmem_cache_alloc+0x5a/0x2e0 [ 198.505062][ T7982] ? alloc_empty_file+0x9e/0x1d0 [ 198.509996][ T7982] alloc_empty_file+0x9e/0x1d0 [ 198.514763][ T7982] alloc_file+0x5c/0x600 [ 198.519002][ T7982] alloc_file_pseudo+0x17e/0x200 [ 198.523935][ T7982] ? alloc_empty_backing_file+0xe0/0xe0 [ 198.529478][ T7982] ? alloc_fd+0x58f/0x630 [ 198.533891][ T7982] anon_inode_getfd+0xca/0x1c0 [ 198.538665][ T7982] map_create+0xf14/0x12f0 [ 198.543079][ T7982] __sys_bpf+0x5f0/0x800 [ 198.547319][ T7982] ? bpf_link_show_fdinfo+0x350/0x350 [ 198.552691][ T7982] ? lock_chain_count+0x20/0x20 [ 198.557540][ T7982] __x64_sys_bpf+0x7c/0x90 [ 198.561952][ T7982] do_syscall_64+0x55/0xb0 [ 198.566368][ T7982] ? clear_bhb_loop+0x40/0x90 [ 198.571037][ T7982] ? clear_bhb_loop+0x40/0x90 [ 198.575738][ T7982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.581622][ T7982] RIP: 0033:0x7ffb0e58efc9 [ 198.586027][ T7982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.605643][ T7982] RSP: 002b:00007ffb0f3f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.614052][ T7982] RAX: ffffffffffffffda RBX: 00007ffb0e7e5fa0 RCX: 00007ffb0e58efc9 [ 198.622015][ T7982] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 198.629977][ T7982] RBP: 00007ffb0f3f2090 R08: 0000000000000000 R09: 0000000000000000 [ 198.637936][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.645931][ T7982] R13: 00007ffb0e7e6038 R14: 00007ffb0e7e5fa0 R15: 00007fff339d5c48 [ 198.653913][ T7982] [ 199.368849][ T7993] netlink: 'syz.0.802': attribute type 10 has an invalid length. [ 199.865668][ T8004] netlink: 'syz.2.805': attribute type 16 has an invalid length. [ 199.885083][ T8004] netlink: 'syz.2.805': attribute type 3 has an invalid length. [ 199.894254][ T8004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.805'. [ 199.894906][ T8007] FAULT_INJECTION: forcing a failure. [ 199.894906][ T8007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.937457][ T8007] CPU: 0 PID: 8007 Comm: syz.3.806 Not tainted syzkaller #0 [ 199.944839][ T8007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.954902][ T8007] Call Trace: [ 199.958178][ T8007] [ 199.961100][ T8007] dump_stack_lvl+0x16c/0x230 [ 199.965779][ T8007] ? show_regs_print_info+0x20/0x20 [ 199.970972][ T8007] ? load_image+0x3b0/0x3b0 [ 199.975469][ T8007] ? __might_fault+0xaa/0x120 [ 199.980138][ T8007] ? __lock_acquire+0x7c80/0x7c80 [ 199.985161][ T8007] should_fail_ex+0x39d/0x4d0 [ 199.989840][ T8007] _copy_from_iter+0x1d3/0x1290 [ 199.994688][ T8007] ? __might_fault+0xaa/0x120 [ 199.999358][ T8007] ? _copy_from_iter+0x248/0x1290 [ 200.004374][ T8007] ? __virt_addr_valid+0x18c/0x540 [ 200.009500][ T8007] ? __lock_acquire+0x7c80/0x7c80 [ 200.014527][ T8007] ? copyout_mc+0x70/0x70 [ 200.018859][ T8007] ? copyout_mc+0x70/0x70 [ 200.023192][ T8007] ? __virt_addr_valid+0x18c/0x540 [ 200.028310][ T8007] ? page_copy_sane+0x16a/0x270 [ 200.033162][ T8007] copy_page_from_iter+0x7b/0x100 [ 200.038189][ T8007] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 200.044002][ T8007] unix_stream_sendmsg+0x549/0xba0 [ 200.049123][ T8007] ? unix_show_fdinfo+0x270/0x270 [ 200.054141][ T8007] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 200.060557][ T8007] ? aa_sock_msg_perm+0x94/0x150 [ 200.065488][ T8007] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 200.070771][ T8007] ? security_socket_sendmsg+0x80/0xa0 [ 200.076225][ T8007] ? unix_show_fdinfo+0x270/0x270 [ 200.081244][ T8007] ____sys_sendmsg+0x5bf/0x950 [ 200.086010][ T8007] ? __asan_memset+0x22/0x40 [ 200.090594][ T8007] ? __sys_sendmsg_sock+0x30/0x30 [ 200.095614][ T8007] ? __import_iovec+0x5f2/0x860 [ 200.100497][ T8007] ? import_iovec+0x73/0xa0 [ 200.105006][ T8007] ___sys_sendmsg+0x220/0x290 [ 200.109690][ T8007] ? __sys_sendmsg+0x270/0x270 [ 200.114466][ T8007] ? __lock_acquire+0x7c80/0x7c80 [ 200.119503][ T8007] __se_sys_sendmsg+0x1a5/0x270 [ 200.124356][ T8007] ? __x64_sys_sendmsg+0x80/0x80 [ 200.129300][ T8007] ? lockdep_hardirqs_on+0x98/0x150 [ 200.134495][ T8007] do_syscall_64+0x55/0xb0 [ 200.138905][ T8007] ? clear_bhb_loop+0x40/0x90 [ 200.143570][ T8007] ? clear_bhb_loop+0x40/0x90 [ 200.148240][ T8007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.154125][ T8007] RIP: 0033:0x7fb0ccb8efc9 [ 200.158533][ T8007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.178133][ T8007] RSP: 002b:00007fb0cadd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.186541][ T8007] RAX: ffffffffffffffda RBX: 00007fb0ccde6090 RCX: 00007fb0ccb8efc9 [ 200.194509][ T8007] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 200.202479][ T8007] RBP: 00007fb0cadd5090 R08: 0000000000000000 R09: 0000000000000000 [ 200.210444][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.218406][ T8007] R13: 00007fb0ccde6128 R14: 00007fb0ccde6090 R15: 00007ffe62a0b3c8 [ 200.226389][ T8007] [ 200.727898][ T8022] FAULT_INJECTION: forcing a failure. [ 200.727898][ T8022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.759040][ T8022] CPU: 0 PID: 8022 Comm: syz.1.812 Not tainted syzkaller #0 [ 200.766376][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.776471][ T8022] Call Trace: [ 200.779764][ T8022] [ 200.782709][ T8022] dump_stack_lvl+0x16c/0x230 [ 200.787411][ T8022] ? show_regs_print_info+0x20/0x20 [ 200.792634][ T8022] ? load_image+0x3b0/0x3b0 [ 200.797153][ T8022] ? __might_fault+0xaa/0x120 [ 200.801847][ T8022] ? __lock_acquire+0x7c80/0x7c80 [ 200.806894][ T8022] should_fail_ex+0x39d/0x4d0 [ 200.811771][ T8022] _copy_from_user+0x2f/0xe0 [ 200.816375][ T8022] ___sys_sendmsg+0x159/0x290 [ 200.821082][ T8022] ? __sys_sendmsg+0x270/0x270 [ 200.825883][ T8022] ? __lock_acquire+0x7c80/0x7c80 [ 200.830945][ T8022] __se_sys_sendmsg+0x1a5/0x270 [ 200.835815][ T8022] ? __x64_sys_sendmsg+0x80/0x80 [ 200.840782][ T8022] ? lockdep_hardirqs_on+0x98/0x150 [ 200.845992][ T8022] do_syscall_64+0x55/0xb0 [ 200.850420][ T8022] ? clear_bhb_loop+0x40/0x90 [ 200.855111][ T8022] ? clear_bhb_loop+0x40/0x90 [ 200.859808][ T8022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.865713][ T8022] RIP: 0033:0x7f713f38efc9 [ 200.870140][ T8022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.889766][ T8022] RSP: 002b:00007f71401df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.898197][ T8022] RAX: ffffffffffffffda RBX: 00007f713f5e5fa0 RCX: 00007f713f38efc9 [ 200.906181][ T8022] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 200.914162][ T8022] RBP: 00007f71401df090 R08: 0000000000000000 R09: 0000000000000000 [ 200.922146][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.930127][ T8022] R13: 00007f713f5e6038 R14: 00007f713f5e5fa0 R15: 00007ffca0a7d418 [ 200.938125][ T8022] [ 201.195237][ T8029] validate_nla: 1 callbacks suppressed [ 201.195271][ T8029] netlink: 'syz.1.815': attribute type 10 has an invalid length. [ 202.214604][ T8044] FAULT_INJECTION: forcing a failure. [ 202.214604][ T8044] name failslab, interval 1, probability 0, space 0, times 0 [ 202.236008][ T8044] CPU: 1 PID: 8044 Comm: syz.1.821 Not tainted syzkaller #0 [ 202.243351][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.253428][ T8044] Call Trace: [ 202.256720][ T8044] [ 202.259654][ T8044] dump_stack_lvl+0x16c/0x230 [ 202.264345][ T8044] ? show_regs_print_info+0x20/0x20 [ 202.269542][ T8044] ? load_image+0x3b0/0x3b0 [ 202.274038][ T8044] ? __might_sleep+0xe0/0xe0 [ 202.278626][ T8044] ? __lock_acquire+0x7c80/0x7c80 [ 202.283659][ T8044] should_fail_ex+0x39d/0x4d0 [ 202.288345][ T8044] should_failslab+0x9/0x20 [ 202.292844][ T8044] slab_pre_alloc_hook+0x59/0x310 [ 202.297871][ T8044] kmem_cache_alloc_node+0x60/0x330 [ 202.303068][ T8044] ? __alloc_skb+0x108/0x2c0 [ 202.307684][ T8044] __alloc_skb+0x108/0x2c0 [ 202.312109][ T8044] alloc_skb_with_frags+0xca/0x7c0 [ 202.317222][ T8044] ? mark_lock+0x94/0x320 [ 202.321552][ T8044] sock_alloc_send_pskb+0x857/0x990 [ 202.326760][ T8044] ? sock_kzfree_s+0x50/0x50 [ 202.331355][ T8044] tun_get_user+0x9dc/0x3bf0 [ 202.335946][ T8044] ? aa_file_perm+0x120/0xec0 [ 202.340616][ T8044] ? aa_file_perm+0x3e8/0xec0 [ 202.345293][ T8044] ? rcu_read_unlock+0xa0/0xa0 [ 202.350055][ T8044] ? tun_get+0x1c/0x2e0 [ 202.354203][ T8044] ? __lock_acquire+0x7c80/0x7c80 [ 202.359223][ T8044] ? tun_get+0x1c/0x2e0 [ 202.363375][ T8044] tun_chr_write_iter+0x119/0x200 [ 202.368392][ T8044] vfs_write+0x43b/0x940 [ 202.372631][ T8044] ? file_end_write+0x250/0x250 [ 202.377476][ T8044] ? __fget_files+0x44a/0x4d0 [ 202.382152][ T8044] ? __fdget_pos+0x1d8/0x330 [ 202.386732][ T8044] ? ksys_write+0x75/0x250 [ 202.391142][ T8044] ksys_write+0x147/0x250 [ 202.395505][ T8044] ? __ia32_sys_read+0x90/0x90 [ 202.400268][ T8044] ? lockdep_hardirqs_on+0x98/0x150 [ 202.405465][ T8044] do_syscall_64+0x55/0xb0 [ 202.409877][ T8044] ? clear_bhb_loop+0x40/0x90 [ 202.414544][ T8044] ? clear_bhb_loop+0x40/0x90 [ 202.419211][ T8044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.425094][ T8044] RIP: 0033:0x7f713f38efc9 [ 202.429503][ T8044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.449105][ T8044] RSP: 002b:00007f71401df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.457512][ T8044] RAX: ffffffffffffffda RBX: 00007f713f5e5fa0 RCX: 00007f713f38efc9 [ 202.465475][ T8044] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 202.473438][ T8044] RBP: 00007f71401df090 R08: 0000000000000000 R09: 0000000000000000 [ 202.481401][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.489367][ T8044] R13: 00007f713f5e6038 R14: 00007f713f5e5fa0 R15: 00007ffca0a7d418 [ 202.497371][ T8044] [ 202.680724][ T8045] delete_channel: no stack [ 202.780472][ T8055] netlink: 'syz.1.825': attribute type 10 has an invalid length. [ 203.246865][ T8067] netlink: 'syz.0.830': attribute type 16 has an invalid length. [ 203.291320][ T8067] netlink: 'syz.0.830': attribute type 3 has an invalid length. [ 203.331318][ T8067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.830'. [ 203.367810][ T8067] netlink: 'syz.0.830': attribute type 10 has an invalid length. [ 203.610388][ T8072] FAULT_INJECTION: forcing a failure. [ 203.610388][ T8072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.623980][ T8072] CPU: 1 PID: 8072 Comm: syz.0.831 Not tainted syzkaller #0 [ 203.631294][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.641371][ T8072] Call Trace: [ 203.644662][ T8072] [ 203.647609][ T8072] dump_stack_lvl+0x16c/0x230 [ 203.652312][ T8072] ? show_regs_print_info+0x20/0x20 [ 203.657530][ T8072] ? load_image+0x3b0/0x3b0 [ 203.662055][ T8072] ? __lock_acquire+0x7c80/0x7c80 [ 203.667100][ T8072] should_fail_ex+0x39d/0x4d0 [ 203.671813][ T8072] _copy_from_user+0x2f/0xe0 [ 203.676421][ T8072] __copy_msghdr+0x3bb/0x580 [ 203.681034][ T8072] ___sys_sendmsg+0x1a6/0x290 [ 203.685736][ T8072] ? __sys_sendmsg+0x270/0x270 [ 203.690539][ T8072] ? __lock_acquire+0x7c80/0x7c80 [ 203.695617][ T8072] __se_sys_sendmsg+0x1a5/0x270 [ 203.700493][ T8072] ? perf_trace_preemptirq_template+0x281/0x340 [ 203.706754][ T8072] ? __x64_sys_sendmsg+0x80/0x80 [ 203.711733][ T8072] ? lockdep_hardirqs_on+0x98/0x150 [ 203.716948][ T8072] do_syscall_64+0x55/0xb0 [ 203.721380][ T8072] ? clear_bhb_loop+0x40/0x90 [ 203.726052][ T8072] ? clear_bhb_loop+0x40/0x90 [ 203.730722][ T8072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.736609][ T8072] RIP: 0033:0x7ffb0e58efc9 [ 203.741015][ T8072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.760616][ T8072] RSP: 002b:00007ffb0f3f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.769127][ T8072] RAX: ffffffffffffffda RBX: 00007ffb0e7e5fa0 RCX: 00007ffb0e58efc9 [ 203.777091][ T8072] RDX: 000000003406c012 RSI: 0000200000000680 RDI: 0000000000000004 [ 203.785059][ T8072] RBP: 00007ffb0f3f2090 R08: 0000000000000000 R09: 0000000000000000 [ 203.793021][ T8072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.800986][ T8072] R13: 00007ffb0e7e6038 R14: 00007ffb0e7e5fa0 R15: 00007fff339d5c48 [ 203.808965][ T8072] [ 204.602832][ T8088] netlink: 'syz.2.837': attribute type 10 has an invalid length. [ 205.280844][ T8099] netlink: 'syz.3.839': attribute type 3 has an invalid length. [ 205.311641][ T8099] netlink: 50139 bytes leftover after parsing attributes in process `syz.3.839'. [ 205.843463][ T8109] FAULT_INJECTION: forcing a failure. [ 205.843463][ T8109] name failslab, interval 1, probability 0, space 0, times 0 [ 205.862213][ T8109] CPU: 0 PID: 8109 Comm: syz.1.844 Not tainted syzkaller #0 [ 205.869555][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.879629][ T8109] Call Trace: [ 205.882937][ T8109] [ 205.885884][ T8109] dump_stack_lvl+0x16c/0x230 [ 205.890604][ T8109] ? show_regs_print_info+0x20/0x20 [ 205.895825][ T8109] ? load_image+0x3b0/0x3b0 [ 205.900352][ T8109] ? __might_sleep+0xe0/0xe0 [ 205.904966][ T8109] ? __lock_acquire+0x7c80/0x7c80 [ 205.910008][ T8109] ? rcu_is_watching+0x15/0xb0 [ 205.914801][ T8109] should_fail_ex+0x39d/0x4d0 [ 205.919514][ T8109] should_failslab+0x9/0x20 [ 205.924045][ T8109] slab_pre_alloc_hook+0x59/0x310 [ 205.929106][ T8109] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 205.935028][ T8109] __kmem_cache_alloc_node+0x53/0x260 [ 205.940431][ T8109] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 205.946358][ T8109] kmalloc_trace+0x2a/0xe0 [ 205.950808][ T8109] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 205.956573][ T8109] sctp_association_new+0x15d3/0x25c0 [ 205.962001][ T8109] sctp_connect_new_asoc+0x2bf/0x690 [ 205.967319][ T8109] ? __sctp_connect+0xd20/0xd20 [ 205.972199][ T8109] ? __local_bh_enable_ip+0x12e/0x1c0 [ 205.977608][ T8109] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 205.983174][ T8109] ? security_sctp_bind_connect+0x89/0xb0 [ 205.988926][ T8109] sctp_sendmsg+0x155c/0x27e0 [ 205.993655][ T8109] ? sctp_getsockopt+0xb60/0xb60 [ 205.998633][ T8109] ? aa_sk_perm+0x7fc/0x930 [ 206.003171][ T8109] ? aa_af_perm+0x2b0/0x2b0 [ 206.007690][ T8109] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 206.014143][ T8109] ? sock_rps_record_flow+0x19/0x400 [ 206.019453][ T8109] ? inet_send_prepare+0x260/0x260 [ 206.024588][ T8109] ? inet_sendmsg+0xe9/0x2f0 [ 206.029200][ T8109] ? inet_send_prepare+0x260/0x260 [ 206.034332][ T8109] ____sys_sendmsg+0x5bf/0x950 [ 206.039137][ T8109] ? __asan_memset+0x22/0x40 [ 206.043749][ T8109] ? __sys_sendmsg_sock+0x30/0x30 [ 206.048793][ T8109] ? __import_iovec+0x5f2/0x860 [ 206.053683][ T8109] ? import_iovec+0x73/0xa0 [ 206.058218][ T8109] ___sys_sendmsg+0x220/0x290 [ 206.062929][ T8109] ? __sys_sendmsg+0x270/0x270 [ 206.067767][ T8109] ? __lock_acquire+0x7c80/0x7c80 [ 206.072867][ T8109] __se_sys_sendmsg+0x1a5/0x270 [ 206.077757][ T8109] ? __x64_sys_sendmsg+0x80/0x80 [ 206.082761][ T8109] ? lockdep_hardirqs_on+0x98/0x150 [ 206.087987][ T8109] do_syscall_64+0x55/0xb0 [ 206.092421][ T8109] ? clear_bhb_loop+0x40/0x90 [ 206.097117][ T8109] ? clear_bhb_loop+0x40/0x90 [ 206.101907][ T8109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.107831][ T8109] RIP: 0033:0x7f713f38efc9 [ 206.112270][ T8109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.131915][ T8109] RSP: 002b:00007f71401df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.140353][ T8109] RAX: ffffffffffffffda RBX: 00007f713f5e5fa0 RCX: 00007f713f38efc9 [ 206.148346][ T8109] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 206.156339][ T8109] RBP: 00007f71401df090 R08: 0000000000000000 R09: 0000000000000000 [ 206.164327][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.172323][ T8109] R13: 00007f713f5e6038 R14: 00007f713f5e5fa0 R15: 00007ffca0a7d418 [ 206.180345][ T8109] [ 206.352579][ T8112] syz.0.845 uses obsolete (PF_INET,SOCK_PACKET) [ 208.145106][ T8114] netlink: 'syz.1.846': attribute type 10 has an invalid length. [ 209.813412][ T8152] netlink: 'syz.3.859': attribute type 10 has an invalid length. [ 209.852572][ T8158] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 209.932102][ T8158] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 209.940469][ T8159] netlink: 'syz.1.858': attribute type 10 has an invalid length. [ 209.949043][ T8159] FAULT_INJECTION: forcing a failure. [ 209.949043][ T8159] name failslab, interval 1, probability 0, space 0, times 0 [ 209.962515][ T8159] CPU: 0 PID: 8159 Comm: syz.1.858 Not tainted syzkaller #0 [ 209.969834][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.979904][ T8159] Call Trace: [ 209.983182][ T8159] [ 209.986108][ T8159] dump_stack_lvl+0x16c/0x230 [ 209.990789][ T8159] ? show_regs_print_info+0x20/0x20 [ 209.995989][ T8159] ? load_image+0x3b0/0x3b0 [ 210.000585][ T8159] should_fail_ex+0x39d/0x4d0 [ 210.005261][ T8159] should_failslab+0x9/0x20 [ 210.009760][ T8159] slab_pre_alloc_hook+0x59/0x310 [ 210.014783][ T8159] kmem_cache_alloc_node+0x60/0x330 [ 210.019987][ T8159] ? __alloc_skb+0x108/0x2c0 [ 210.024585][ T8159] __alloc_skb+0x108/0x2c0 [ 210.029002][ T8159] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 210.034289][ T8159] rtmsg_ifinfo+0x8c/0x1a0 [ 210.038738][ T8159] __dev_notify_flags+0xf5/0x2e0 [ 210.043699][ T8159] ? __dev_change_flags+0x6a0/0x6a0 [ 210.048903][ T8159] ? __dev_change_flags+0x4bf/0x6a0 [ 210.054106][ T8159] ? dev_get_flags+0x1c0/0x1c0 [ 210.058866][ T8159] ? printk_sprint+0x460/0x460 [ 210.063624][ T8159] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 210.069563][ T8159] ? _raw_spin_unlock+0x40/0x40 [ 210.074409][ T8159] dev_change_flags+0xe8/0x1a0 [ 210.079173][ T8159] do_setlink+0xc74/0x3fb0 [ 210.083581][ T8159] ? get_alloc_stack_hash+0x39f/0x770 [ 210.088957][ T8159] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 210.095098][ T8159] ? rtnl_newlink+0xeb/0x2020 [ 210.099778][ T8159] ? __nla_validate_parse+0x25d1/0x2fa0 [ 210.105377][ T8159] ? __nla_validate+0x50/0x50 [ 210.110057][ T8159] ? __kasan_slab_alloc+0x22/0x80 [ 210.115078][ T8159] ? slab_post_alloc_hook+0x6e/0x4d0 [ 210.120364][ T8159] ? rtnl_newlink+0xeb/0x2020 [ 210.125045][ T8159] ? perf_trace_kmalloc+0x40/0x140 [ 210.130155][ T8159] ? validate_linkmsg+0x719/0x910 [ 210.135211][ T8159] rtnl_newlink+0x175b/0x2020 [ 210.139898][ T8159] ? rtnl_newlink+0x4b1/0x2020 [ 210.144665][ T8159] ? rtnl_setlink+0x4b0/0x4b0 [ 210.149341][ T8159] ? __rwlock_init+0x150/0x150 [ 210.154100][ T8159] ? do_raw_spin_unlock+0x121/0x230 [ 210.159292][ T8159] ? __mutex_lock+0x95d/0xcc0 [ 210.163965][ T8159] ? __mutex_lock+0x4e8/0xcc0 [ 210.168664][ T8159] ? rtnl_setlink+0x4b0/0x4b0 [ 210.173335][ T8159] rtnetlink_rcv_msg+0x7c7/0xf10 [ 210.178279][ T8159] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 210.183381][ T8159] ? lockdep_hardirqs_on+0x98/0x150 [ 210.188579][ T8159] ? rtnetlink_bind+0x80/0x80 [ 210.193248][ T8159] ? perf_trace_preemptirq_template+0xa4/0x340 [ 210.199495][ T8159] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 210.205495][ T8159] ? lock_chain_count+0x20/0x20 [ 210.210338][ T8159] ? __local_bh_enable_ip+0x12e/0x1c0 [ 210.215700][ T8159] ? lockdep_hardirqs_on+0x98/0x150 [ 210.220891][ T8159] ? __local_bh_enable_ip+0x12e/0x1c0 [ 210.226257][ T8159] ? _local_bh_enable+0xa0/0xa0 [ 210.231107][ T8159] ? __dev_queue_xmit+0x245/0x35a0 [ 210.236213][ T8159] ? __dev_queue_xmit+0x1449/0x35a0 [ 210.241414][ T8159] ? __dev_queue_xmit+0x245/0x35a0 [ 210.246523][ T8159] ? ref_tracker_free+0x634/0x7d0 [ 210.251538][ T8159] ? __copy_skb_header+0xa7/0x550 [ 210.256564][ T8159] netlink_rcv_skb+0x216/0x480 [ 210.261340][ T8159] ? rtnetlink_bind+0x80/0x80 [ 210.266012][ T8159] ? netlink_ack+0x1110/0x1110 [ 210.270799][ T8159] ? __lock_acquire+0x7c80/0x7c80 [ 210.275839][ T8159] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.281051][ T8159] netlink_unicast+0x751/0x8d0 [ 210.285825][ T8159] netlink_sendmsg+0x8c1/0xbe0 [ 210.290598][ T8159] ? netlink_getsockopt+0x580/0x580 [ 210.295793][ T8159] ? aa_sock_msg_perm+0x94/0x150 [ 210.300731][ T8159] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 210.306012][ T8159] ? security_socket_sendmsg+0x80/0xa0 [ 210.311473][ T8159] ? netlink_getsockopt+0x580/0x580 [ 210.316682][ T8159] ____sys_sendmsg+0x5bf/0x950 [ 210.321494][ T8159] ? __asan_memset+0x22/0x40 [ 210.326088][ T8159] ? __sys_sendmsg_sock+0x30/0x30 [ 210.331114][ T8159] ? __import_iovec+0x5f2/0x860 [ 210.335969][ T8159] ? import_iovec+0x73/0xa0 [ 210.340472][ T8159] ___sys_sendmsg+0x220/0x290 [ 210.345159][ T8159] ? __sys_sendmsg+0x270/0x270 [ 210.349950][ T8159] ? __lock_acquire+0x7c80/0x7c80 [ 210.354999][ T8159] __se_sys_sendmsg+0x1a5/0x270 [ 210.359867][ T8159] ? __x64_sys_sendmsg+0x80/0x80 [ 210.364835][ T8159] ? lockdep_hardirqs_on+0x98/0x150 [ 210.370034][ T8159] do_syscall_64+0x55/0xb0 [ 210.374463][ T8159] ? clear_bhb_loop+0x40/0x90 [ 210.379140][ T8159] ? clear_bhb_loop+0x40/0x90 [ 210.383815][ T8159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.389704][ T8159] RIP: 0033:0x7f713f38efc9 [ 210.394114][ T8159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.413712][ T8159] RSP: 002b:00007f71401be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.422132][ T8159] RAX: ffffffffffffffda RBX: 00007f713f5e6090 RCX: 00007f713f38efc9 [ 210.430108][ T8159] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 210.438077][ T8159] RBP: 00007f71401be090 R08: 0000000000000000 R09: 0000000000000000 [ 210.446039][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.454001][ T8159] R13: 00007f713f5e6128 R14: 00007f713f5e6090 R15: 00007ffca0a7d418 [ 210.461976][ T8159] [ 210.496242][ T8160] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 210.507245][ T8158] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 212.955573][ T8191] netlink: 'syz.3.873': attribute type 10 has an invalid length. [ 212.999917][ T8194] FAULT_INJECTION: forcing a failure. [ 212.999917][ T8194] name failslab, interval 1, probability 0, space 0, times 0 [ 213.022415][ T8194] CPU: 0 PID: 8194 Comm: syz.2.874 Not tainted syzkaller #0 [ 213.030112][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.040173][ T8194] Call Trace: [ 213.043456][ T8194] [ 213.046384][ T8194] dump_stack_lvl+0x16c/0x230 [ 213.051072][ T8194] ? show_regs_print_info+0x20/0x20 [ 213.056264][ T8194] ? load_image+0x3b0/0x3b0 [ 213.060762][ T8194] ? __might_sleep+0xe0/0xe0 [ 213.065347][ T8194] ? __lock_acquire+0x7c80/0x7c80 [ 213.070362][ T8194] ? mark_lock+0x94/0x320 [ 213.074689][ T8194] should_fail_ex+0x39d/0x4d0 [ 213.079370][ T8194] should_failslab+0x9/0x20 [ 213.083868][ T8194] slab_pre_alloc_hook+0x59/0x310 [ 213.088895][ T8194] kmem_cache_alloc_node+0x60/0x330 [ 213.094089][ T8194] ? __alloc_skb+0x108/0x2c0 [ 213.098681][ T8194] __alloc_skb+0x108/0x2c0 [ 213.103100][ T8194] rtmsg_fib+0xeb/0x4c0 [ 213.107263][ T8194] fib_table_delete+0xca6/0xf80 [ 213.112128][ T8194] ? nexthop_get_nhc_lookup+0x400/0x400 [ 213.117673][ T8194] ? fib_new_table+0x105/0x2d0 [ 213.122435][ T8194] ? fib_new_table+0x10a/0x2d0 [ 213.127204][ T8194] fib_magic+0x2e5/0x390 [ 213.131442][ T8194] ? lockdep_hardirqs_on+0x98/0x150 [ 213.136649][ T8194] ? fib_add_ifaddr+0x5e0/0x5e0 [ 213.141511][ T8194] ? wq_worker_last_func+0x40/0x40 [ 213.146620][ T8194] fib_del_ifaddr+0x28b/0x1480 [ 213.151389][ T8194] ? inetaddr_event+0xe4/0x140 [ 213.156151][ T8194] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 213.162747][ T8194] fib_inetaddr_event+0xbb/0x1d0 [ 213.167688][ T8194] notifier_call_chain+0x197/0x390 [ 213.172804][ T8194] blocking_notifier_call_chain+0x6a/0x90 [ 213.178532][ T8194] __inet_del_ifa+0x876/0x1020 [ 213.183304][ T8194] devinet_ioctl+0xe06/0x1c60 [ 213.187985][ T8194] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 213.193094][ T8194] ? _copy_from_user+0xa5/0xe0 [ 213.197857][ T8194] ? get_user_ifreq+0x12b/0x180 [ 213.202709][ T8194] inet_ioctl+0x3c1/0x4c0 [ 213.207031][ T8194] ? tomoyo_path_number_perm+0x1ba/0x590 [ 213.212660][ T8194] ? inet_shutdown+0x370/0x370 [ 213.217414][ T8194] ? slab_free_freelist_hook+0x130/0x1b0 [ 213.223047][ T8194] ? tomoyo_path_number_perm+0x477/0x590 [ 213.228706][ T8194] ? __kmem_cache_free+0xba/0x1f0 [ 213.233739][ T8194] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 213.239717][ T8194] ? lock_chain_count+0x20/0x20 [ 213.244568][ T8194] sock_do_ioctl+0xd7/0x2f0 [ 213.249071][ T8194] ? sock_show_fdinfo+0xb0/0xb0 [ 213.253920][ T8194] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.260076][ T8194] ? sock_ioctl+0x1cd/0x7a0 [ 213.264581][ T8194] sock_ioctl+0x623/0x7a0 [ 213.268920][ T8194] ? sock_poll+0x3d0/0x3d0 [ 213.273331][ T8194] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.279490][ T8194] ? bpf_lsm_file_ioctl+0x9/0x10 [ 213.284420][ T8194] ? security_file_ioctl+0x80/0xa0 [ 213.289531][ T8194] ? sock_poll+0x3d0/0x3d0 [ 213.293945][ T8194] __se_sys_ioctl+0xfd/0x170 [ 213.298538][ T8194] do_syscall_64+0x55/0xb0 [ 213.302951][ T8194] ? clear_bhb_loop+0x40/0x90 [ 213.307620][ T8194] ? clear_bhb_loop+0x40/0x90 [ 213.312328][ T8194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.318215][ T8194] RIP: 0033:0x7fdd6f58efc9 [ 213.322626][ T8194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.342231][ T8194] RSP: 002b:00007fdd704ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.350645][ T8194] RAX: ffffffffffffffda RBX: 00007fdd6f7e5fa0 RCX: 00007fdd6f58efc9 [ 213.358613][ T8194] RDX: 0000200000000040 RSI: 0000000000008918 RDI: 0000000000000005 [ 213.366578][ T8194] RBP: 00007fdd704ae090 R08: 0000000000000000 R09: 0000000000000000 [ 213.374543][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.382686][ T8194] R13: 00007fdd6f7e6038 R14: 00007fdd6f7e5fa0 R15: 00007ffdfc90c368 [ 213.390670][ T8194] [ 215.092419][ T8225] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 215.141483][ T8228] netlink: 'syz.0.885': attribute type 16 has an invalid length. [ 215.161731][ T8228] netlink: 'syz.0.885': attribute type 3 has an invalid length. [ 215.183772][ T8228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.885'. [ 215.291903][ T8231] netlink: 'syz.2.886': attribute type 6 has an invalid length. [ 215.320805][ T8231] netlink: 168 bytes leftover after parsing attributes in process `syz.2.886'. [ 215.581747][ T8236] FAULT_INJECTION: forcing a failure. [ 215.581747][ T8236] name failslab, interval 1, probability 0, space 0, times 0 [ 215.616622][ T8236] CPU: 1 PID: 8236 Comm: syz.0.888 Not tainted syzkaller #0 [ 215.624069][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.634154][ T8236] Call Trace: [ 215.637466][ T8236] [ 215.640422][ T8236] dump_stack_lvl+0x16c/0x230 [ 215.645135][ T8236] ? show_regs_print_info+0x20/0x20 [ 215.650368][ T8236] ? load_image+0x3b0/0x3b0 [ 215.654913][ T8236] ? __lock_acquire+0x7c80/0x7c80 [ 215.659978][ T8236] should_fail_ex+0x39d/0x4d0 [ 215.664697][ T8236] should_failslab+0x9/0x20 [ 215.669227][ T8236] slab_pre_alloc_hook+0x59/0x310 [ 215.674296][ T8236] kmem_cache_alloc_lru+0x4d/0x2e0 [ 215.679439][ T8236] ? iget_locked+0x20a/0x840 [ 215.684062][ T8236] iget_locked+0x20a/0x840 [ 215.688512][ T8236] kernfs_get_inode+0x4f/0x700 [ 215.693318][ T8236] cgroup_attach_permissions+0x26a/0x9d0 [ 215.699010][ T8236] __cgroup_procs_write+0x1e5/0x350 [ 215.704265][ T8236] cgroup_procs_write+0x27/0x50 [ 215.709146][ T8236] ? cgroup_procs_next+0xa0/0xa0 [ 215.714114][ T8236] cgroup_file_write+0x2fc/0x660 [ 215.719085][ T8236] ? read_lock_is_recursive+0x20/0x20 [ 215.724506][ T8236] ? cgroup_seqfile_stop+0xd0/0xd0 [ 215.729658][ T8236] ? cgroup_seqfile_stop+0xd0/0xd0 [ 215.734774][ T8236] kernfs_fop_write_iter+0x3b6/0x520 [ 215.740082][ T8236] vfs_write+0x43b/0x940 [ 215.744339][ T8236] ? file_end_write+0x250/0x250 [ 215.749202][ T8236] ? __fget_files+0x44a/0x4d0 [ 215.753903][ T8236] ? __fdget_pos+0x2a3/0x330 [ 215.758503][ T8236] ? ksys_write+0x75/0x250 [ 215.762929][ T8236] ksys_write+0x147/0x250 [ 215.767267][ T8236] ? __ia32_sys_read+0x90/0x90 [ 215.772041][ T8236] ? lockdep_hardirqs_on+0x98/0x150 [ 215.777244][ T8236] do_syscall_64+0x55/0xb0 [ 215.781661][ T8236] ? clear_bhb_loop+0x40/0x90 [ 215.786338][ T8236] ? clear_bhb_loop+0x40/0x90 [ 215.791019][ T8236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.796915][ T8236] RIP: 0033:0x7ffb0e58efc9 [ 215.801332][ T8236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.820943][ T8236] RSP: 002b:00007ffb0f3f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.829363][ T8236] RAX: ffffffffffffffda RBX: 00007ffb0e7e5fa0 RCX: 00007ffb0e58efc9 [ 215.837336][ T8236] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 000000000000000d [ 215.845307][ T8236] RBP: 00007ffb0f3f2090 R08: 0000000000000000 R09: 0000000000000000 [ 215.853277][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.861247][ T8236] R13: 00007ffb0e7e6038 R14: 00007ffb0e7e5fa0 R15: 00007fff339d5c48 [ 215.869243][ T8236] [ 217.295643][ T8255] netlink: 'syz.0.895': attribute type 10 has an invalid length. [ 217.306721][ T8257] netlink: 14 bytes leftover after parsing attributes in process `syz.2.896'. [ 218.916615][ T8289] netlink: 'syz.2.907': attribute type 10 has an invalid length. [ 219.099567][ T8291] netlink: 14 bytes leftover after parsing attributes in process `syz.2.908'. [ 219.559170][ T8298] FAULT_INJECTION: forcing a failure. [ 219.559170][ T8298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.595911][ T8298] CPU: 0 PID: 8298 Comm: syz.3.911 Not tainted syzkaller #0 [ 219.603261][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.613342][ T8298] Call Trace: [ 219.616633][ T8298] [ 219.619569][ T8298] dump_stack_lvl+0x16c/0x230 [ 219.624272][ T8298] ? show_regs_print_info+0x20/0x20 [ 219.629491][ T8298] ? load_image+0x3b0/0x3b0 [ 219.634010][ T8298] ? __might_fault+0xaa/0x120 [ 219.638732][ T8298] ? __lock_acquire+0x7c80/0x7c80 [ 219.643770][ T8298] should_fail_ex+0x39d/0x4d0 [ 219.648474][ T8298] _copy_from_user+0x2f/0xe0 [ 219.653099][ T8298] ___sys_sendmsg+0x159/0x290 [ 219.657801][ T8298] ? __sys_sendmsg+0x270/0x270 [ 219.662618][ T8298] ? __lock_acquire+0x7c80/0x7c80 [ 219.667687][ T8298] __se_sys_sendmsg+0x1a5/0x270 [ 219.672560][ T8298] ? __x64_sys_sendmsg+0x80/0x80 [ 219.677534][ T8298] ? lockdep_hardirqs_on+0x98/0x150 [ 219.682746][ T8298] do_syscall_64+0x55/0xb0 [ 219.687178][ T8298] ? clear_bhb_loop+0x40/0x90 [ 219.691866][ T8298] ? clear_bhb_loop+0x40/0x90 [ 219.696558][ T8298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.702484][ T8298] RIP: 0033:0x7fb0ccb8efc9 [ 219.706917][ T8298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.726801][ T8298] RSP: 002b:00007fb0cadf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.735330][ T8298] RAX: ffffffffffffffda RBX: 00007fb0ccde5fa0 RCX: 00007fb0ccb8efc9 [ 219.743316][ T8298] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 219.751305][ T8298] RBP: 00007fb0cadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.759293][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.767283][ T8298] R13: 00007fb0ccde6038 R14: 00007fb0ccde5fa0 R15: 00007ffe62a0b3c8 [ 219.775290][ T8298] [ 220.397320][ T8305] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 220.454373][ T8310] netlink: 'syz.0.912': attribute type 30 has an invalid length. [ 221.134447][ T8305] team0 (unregistering): Port device team_slave_0 removed [ 221.171565][ T8305] team0 (unregistering): Port device team_slave_1 removed [ 221.190582][ T8305] team0 (unregistering): Port device geneve1 removed [ 221.236991][ T8306] netlink: 128 bytes leftover after parsing attributes in process `syz.2.914'. [ 221.247294][ T8306] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 221.407827][ T8320] netlink: 14 bytes leftover after parsing attributes in process `syz.1.918'. [ 221.493964][ T8322] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 221.572858][ T8327] netlink: 'syz.1.920': attribute type 16 has an invalid length. [ 221.581022][ T8327] netlink: 'syz.1.920': attribute type 3 has an invalid length. [ 221.589562][ T8327] netlink: 132 bytes leftover after parsing attributes in process `syz.1.920'. [ 223.476435][ T8353] netlink: 'syz.0.930': attribute type 16 has an invalid length. [ 223.484357][ T8353] netlink: 'syz.0.930': attribute type 3 has an invalid length. [ 223.505717][ T8351] netlink: 14 bytes leftover after parsing attributes in process `syz.2.928'. [ 223.505957][ T8353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.930'. [ 223.741341][ T8360] netlink: 'syz.2.933': attribute type 10 has an invalid length. [ 223.766663][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.800917][ T8360] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 225.672903][ T8384] netlink: 14 bytes leftover after parsing attributes in process `syz.2.941'. [ 225.729022][ T8386] netlink: 'syz.3.944': attribute type 16 has an invalid length. [ 225.742910][ T8386] netlink: 'syz.3.944': attribute type 3 has an invalid length. [ 225.752379][ T8386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.944'. [ 226.726490][ T8408] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 226.812385][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.840183][ T8408] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 227.721794][ T8422] netlink: 14 bytes leftover after parsing attributes in process `syz.3.954'. [ 227.858158][ T8424] netlink: 'syz.0.955': attribute type 2 has an invalid length. [ 227.972215][ T8424] netlink: 'syz.0.955': attribute type 11 has an invalid length. [ 228.176622][ T8424] netlink: 132 bytes leftover after parsing attributes in process `syz.0.955'. [ 228.266399][ T8424] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 228.306240][ T8424] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.955'. [ 228.784682][ T8432] netlink: 'syz.3.956': attribute type 10 has an invalid length. [ 228.824190][ T8432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.881169][ T8432] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 228.975430][ T8437] bond0: entered promiscuous mode [ 229.103317][ T8437] bond_slave_1: entered promiscuous mode [ 229.213471][ T8437] batadv0: entered promiscuous mode [ 230.562173][ T8456] netlink: 'syz.1.964': attribute type 16 has an invalid length. [ 230.600729][ T8456] netlink: 'syz.1.964': attribute type 3 has an invalid length. [ 230.625312][ T8456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.964'. [ 232.738962][ T8484] Zero length message leads to an empty skb [ 233.026730][ T8488] netlink: 14 bytes leftover after parsing attributes in process `syz.0.974'. [ 233.700778][ T8503] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.981'. [ 233.752096][ T8502] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.981'. [ 234.728490][ T8514] netlink: 14 bytes leftover after parsing attributes in process `syz.3.986'. [ 236.671035][ T8543] netlink: 14 bytes leftover after parsing attributes in process `syz.0.996'. [ 237.680087][ T8547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.768693][ T8578] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1007'. [ 240.024890][ T8599] FAULT_INJECTION: forcing a failure. [ 240.024890][ T8599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.042106][ T8599] CPU: 0 PID: 8599 Comm: syz.0.1017 Not tainted syzkaller #0 [ 240.049523][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.059602][ T8599] Call Trace: [ 240.062893][ T8599] [ 240.065840][ T8599] dump_stack_lvl+0x16c/0x230 [ 240.070549][ T8599] ? show_regs_print_info+0x20/0x20 [ 240.075781][ T8599] ? load_image+0x3b0/0x3b0 [ 240.080305][ T8599] ? __might_fault+0xaa/0x120 [ 240.085000][ T8599] ? __lock_acquire+0x7c80/0x7c80 [ 240.090050][ T8599] should_fail_ex+0x39d/0x4d0 [ 240.094758][ T8599] _copy_to_user+0x2f/0xa0 [ 240.099200][ T8599] bpf_test_finish+0x24b/0x620 [ 240.103989][ T8599] ? convert___skb_to_skb+0x590/0x590 [ 240.109385][ T8599] ? convert_skb_to___skb+0x420/0x420 [ 240.114774][ T8599] ? typec_register_partner+0x2be/0x4c0 [ 240.120349][ T8599] ? slab_build_skb+0x25f/0x3f0 [ 240.125223][ T8599] bpf_prog_test_run_skb+0xc28/0x11c0 [ 240.130630][ T8599] ? cpu_online+0x60/0x60 [ 240.134979][ T8599] bpf_prog_test_run+0x321/0x390 [ 240.139936][ T8599] __sys_bpf+0x440/0x800 [ 240.144194][ T8599] ? bpf_link_show_fdinfo+0x350/0x350 [ 240.149592][ T8599] ? lock_chain_count+0x20/0x20 [ 240.154466][ T8599] __x64_sys_bpf+0x7c/0x90 [ 240.158901][ T8599] do_syscall_64+0x55/0xb0 [ 240.163336][ T8599] ? clear_bhb_loop+0x40/0x90 [ 240.168032][ T8599] ? clear_bhb_loop+0x40/0x90 [ 240.172760][ T8599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.178668][ T8599] RIP: 0033:0x7ffb0e58efc9 [ 240.183101][ T8599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.202728][ T8599] RSP: 002b:00007ffb0f3f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.211176][ T8599] RAX: ffffffffffffffda RBX: 00007ffb0e7e5fa0 RCX: 00007ffb0e58efc9 [ 240.219165][ T8599] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 240.227151][ T8599] RBP: 00007ffb0f3f2090 R08: 0000000000000000 R09: 0000000000000000 [ 240.235139][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.243124][ T8599] R13: 00007ffb0e7e6038 R14: 00007ffb0e7e5fa0 R15: 00007fff339d5c48 [ 240.251139][ T8599] [ 240.286678][ T8612] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1020'. [ 241.536888][ T8632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.676987][ T8645] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1034'. [ 242.845705][ T8656] FAULT_INJECTION: forcing a failure. [ 242.845705][ T8656] name failslab, interval 1, probability 0, space 0, times 0 [ 242.862922][ T8656] CPU: 1 PID: 8656 Comm: syz.1.1038 Not tainted syzkaller #0 [ 242.870321][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 242.880383][ T8656] Call Trace: [ 242.883670][ T8656] [ 242.886605][ T8656] dump_stack_lvl+0x16c/0x230 [ 242.891310][ T8656] ? show_regs_print_info+0x20/0x20 [ 242.896527][ T8656] ? load_image+0x3b0/0x3b0 [ 242.901057][ T8656] ? __lock_acquire+0x7c80/0x7c80 [ 242.906103][ T8656] should_fail_ex+0x39d/0x4d0 [ 242.910805][ T8656] should_failslab+0x9/0x20 [ 242.915323][ T8656] slab_pre_alloc_hook+0x59/0x310 [ 242.920368][ T8656] ? sk_prot_alloc+0xe7/0x210 [ 242.925058][ T8656] ? sk_prot_alloc+0xe7/0x210 [ 242.929742][ T8656] __kmem_cache_alloc_node+0x53/0x260 [ 242.935126][ T8656] ? sk_prot_alloc+0xe7/0x210 [ 242.939813][ T8656] __kmalloc+0xa4/0x240 [ 242.943981][ T8656] sk_prot_alloc+0xe7/0x210 [ 242.948490][ T8656] ? sk_alloc+0x24/0x360 [ 242.952742][ T8656] sk_alloc+0x3a/0x360 [ 242.956818][ T8656] ? bpf_ctx_init+0x163/0x1a0 [ 242.961493][ T8656] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 242.967047][ T8656] bpf_prog_test_run_skb+0x39a/0x11c0 [ 242.972423][ T8656] ? __fget_files+0x28/0x4d0 [ 242.977032][ T8656] ? cpu_online+0x60/0x60 [ 242.981365][ T8656] bpf_prog_test_run+0x321/0x390 [ 242.986315][ T8656] __sys_bpf+0x440/0x800 [ 242.990569][ T8656] ? bpf_link_show_fdinfo+0x350/0x350 [ 242.995959][ T8656] ? lock_chain_count+0x20/0x20 [ 243.000818][ T8656] __x64_sys_bpf+0x7c/0x90 [ 243.005238][ T8656] do_syscall_64+0x55/0xb0 [ 243.009680][ T8656] ? clear_bhb_loop+0x40/0x90 [ 243.014383][ T8656] ? clear_bhb_loop+0x40/0x90 [ 243.019080][ T8656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.024988][ T8656] RIP: 0033:0x7f713f38efc9 [ 243.029415][ T8656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.049039][ T8656] RSP: 002b:00007f71401df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.057466][ T8656] RAX: ffffffffffffffda RBX: 00007f713f5e5fa0 RCX: 00007f713f38efc9 [ 243.065445][ T8656] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 243.073428][ T8656] RBP: 00007f71401df090 R08: 0000000000000000 R09: 0000000000000000 [ 243.081404][ T8656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.089380][ T8656] R13: 00007f713f5e6038 R14: 00007f713f5e5fa0 R15: 00007ffca0a7d418 [ 243.097372][ T8656] [ 243.103368][ T8655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.880570][ T8666] netlink: 'syz.1.1041': attribute type 16 has an invalid length. [ 243.920186][ T8666] netlink: 'syz.1.1041': attribute type 3 has an invalid length. [ 243.941089][ T8666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1041'. [ 243.988256][ T8669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.733254][ T8679] netlink: 'syz.1.1056': attribute type 16 has an invalid length. [ 244.741355][ T8679] netlink: 'syz.1.1056': attribute type 3 has an invalid length. [ 244.749170][ T8679] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1056'. [ 244.812615][ T8680] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1046'. [ 244.882873][ T8685] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1058'. [ 245.966542][ T8701] netlink: 'syz.2.1051': attribute type 10 has an invalid length. [ 246.148385][ T8714] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1061'. [ 246.163956][ T8712] netlink: 'syz.1.1059': attribute type 16 has an invalid length. [ 246.176053][ T8712] netlink: 'syz.1.1059': attribute type 3 has an invalid length. [ 246.199232][ T8712] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1059'. [ 247.423445][ T8733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.451525][ T8740] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1071'. [ 247.653491][ T8743] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 247.728557][ T8750] netlink: 'syz.3.1074': attribute type 16 has an invalid length. [ 247.738917][ T8750] netlink: 'syz.3.1074': attribute type 3 has an invalid length. [ 247.750809][ T8750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1074'. [ 248.829173][ T8762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1082'. [ 249.237134][ T8779] validate_nla: 2 callbacks suppressed [ 249.237151][ T8779] netlink: 'syz.1.1087': attribute type 16 has an invalid length. [ 249.250641][ T8779] netlink: 'syz.1.1087': attribute type 3 has an invalid length. [ 249.258463][ T8779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1087'. [ 249.492232][ T8786] FAULT_INJECTION: forcing a failure. [ 249.492232][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 249.506261][ T8786] CPU: 0 PID: 8786 Comm: syz.0.1090 Not tainted syzkaller #0 [ 249.513665][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.523713][ T8786] Call Trace: [ 249.526985][ T8786] [ 249.529910][ T8786] dump_stack_lvl+0x16c/0x230 [ 249.534584][ T8786] ? show_regs_print_info+0x20/0x20 [ 249.539777][ T8786] ? load_image+0x3b0/0x3b0 [ 249.544270][ T8786] ? verify_lock_unused+0x140/0x140 [ 249.549462][ T8786] should_fail_ex+0x39d/0x4d0 [ 249.554135][ T8786] should_failslab+0x9/0x20 [ 249.558637][ T8786] slab_pre_alloc_hook+0x59/0x310 [ 249.563659][ T8786] kmem_cache_alloc+0x5a/0x2e0 [ 249.568416][ T8786] ? skb_clone+0x1eb/0x370 [ 249.572831][ T8786] skb_clone+0x1eb/0x370 [ 249.577159][ T8786] __netlink_deliver_tap+0x41c/0x830 [ 249.582444][ T8786] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.587638][ T8786] netlink_deliver_tap+0x19c/0x1b0 [ 249.592744][ T8786] netlink_unicast+0x72c/0x8d0 [ 249.597511][ T8786] netlink_sendmsg+0x8c1/0xbe0 [ 249.602284][ T8786] ? netlink_getsockopt+0x580/0x580 [ 249.607477][ T8786] ? aa_sock_msg_perm+0x94/0x150 [ 249.612410][ T8786] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.617688][ T8786] ? security_socket_sendmsg+0x80/0xa0 [ 249.623138][ T8786] ? netlink_getsockopt+0x580/0x580 [ 249.628363][ T8786] ____sys_sendmsg+0x5bf/0x950 [ 249.633130][ T8786] ? __asan_memset+0x22/0x40 [ 249.637711][ T8786] ? __sys_sendmsg_sock+0x30/0x30 [ 249.642725][ T8786] ? __import_iovec+0x3fa/0x860 [ 249.647583][ T8786] ? import_iovec+0x73/0xa0 [ 249.652086][ T8786] ___sys_sendmsg+0x220/0x290 [ 249.656757][ T8786] ? __sys_sendmsg+0x270/0x270 [ 249.661530][ T8786] ? __lock_acquire+0x7c80/0x7c80 [ 249.666563][ T8786] __se_sys_sendmsg+0x1a5/0x270 [ 249.671500][ T8786] ? __x64_sys_sendmsg+0x80/0x80 [ 249.676442][ T8786] ? lockdep_hardirqs_on+0x98/0x150 [ 249.681631][ T8786] do_syscall_64+0x55/0xb0 [ 249.686042][ T8786] ? clear_bhb_loop+0x40/0x90 [ 249.690710][ T8786] ? clear_bhb_loop+0x40/0x90 [ 249.695377][ T8786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.701262][ T8786] RIP: 0033:0x7ffb0e58efc9 [ 249.705669][ T8786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.725285][ T8786] RSP: 002b:00007ffb0f3f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.733785][ T8786] RAX: ffffffffffffffda RBX: 00007ffb0e7e5fa0 RCX: 00007ffb0e58efc9 [ 249.741760][ T8786] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 249.749729][ T8786] RBP: 00007ffb0f3f2090 R08: 0000000000000000 R09: 0000000000000000 [ 249.757697][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.765662][ T8786] R13: 00007ffb0e7e6038 R14: 00007ffb0e7e5fa0 R15: 00007fff339d5c48 [ 249.773640][ T8786] [ 249.967586][ T8786] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1090'. [ 250.482099][ T8793] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 250.501912][ T8798] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1094'. [ 251.127045][ T8819] FAULT_INJECTION: forcing a failure. [ 251.127045][ T8819] name failslab, interval 1, probability 0, space 0, times 0 [ 251.186206][ T8819] CPU: 0 PID: 8819 Comm: syz.2.1103 Not tainted syzkaller #0 [ 251.193639][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 251.203717][ T8819] Call Trace: [ 251.207003][ T8819] [ 251.209942][ T8819] dump_stack_lvl+0x16c/0x230 [ 251.214643][ T8819] ? show_regs_print_info+0x20/0x20 [ 251.219857][ T8819] ? load_image+0x3b0/0x3b0 [ 251.224379][ T8819] ? __might_sleep+0xe0/0xe0 [ 251.228982][ T8819] ? __lock_acquire+0x7c80/0x7c80 [ 251.234037][ T8819] should_fail_ex+0x39d/0x4d0 [ 251.238743][ T8819] should_failslab+0x9/0x20 [ 251.243259][ T8819] slab_pre_alloc_hook+0x59/0x310 [ 251.248303][ T8819] ? tomoyo_encode+0x28b/0x540 [ 251.253085][ T8819] ? tomoyo_encode+0x28b/0x540 [ 251.257868][ T8819] __kmem_cache_alloc_node+0x53/0x260 [ 251.263262][ T8819] ? tomoyo_encode+0x28b/0x540 [ 251.268046][ T8819] __kmalloc+0xa4/0x240 [ 251.272201][ T8819] tomoyo_encode+0x28b/0x540 [ 251.276793][ T8819] tomoyo_realpath_from_path+0x592/0x5d0 [ 251.282432][ T8819] tomoyo_path_number_perm+0x1ea/0x590 [ 251.287888][ T8819] ? tomoyo_path_number_perm+0x1ba/0x590 [ 251.293515][ T8819] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 251.298975][ T8819] ? ksys_write+0x1c1/0x250 [ 251.303495][ T8819] ? __fget_files+0x28/0x4d0 [ 251.308084][ T8819] security_file_ioctl+0x70/0xa0 [ 251.313020][ T8819] __se_sys_ioctl+0x48/0x170 [ 251.317625][ T8819] do_syscall_64+0x55/0xb0 [ 251.322039][ T8819] ? clear_bhb_loop+0x40/0x90 [ 251.326737][ T8819] ? clear_bhb_loop+0x40/0x90 [ 251.331403][ T8819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.337287][ T8819] RIP: 0033:0x7fdd6f58efc9 [ 251.341697][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.361294][ T8819] RSP: 002b:00007fdd704ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.369705][ T8819] RAX: ffffffffffffffda RBX: 00007fdd6f7e5fa0 RCX: 00007fdd6f58efc9 [ 251.377671][ T8819] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 251.385646][ T8819] RBP: 00007fdd704ae090 R08: 0000000000000000 R09: 0000000000000000 [ 251.393607][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.401568][ T8819] R13: 00007fdd6f7e6038 R14: 00007fdd6f7e5fa0 R15: 00007ffdfc90c368 [ 251.409541][ T8819] [ 251.486060][ T8819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.990136][ T8827] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1106'. [ 252.087930][ T8831] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 252.727482][ T8857] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1119'. [ 253.412308][ T8859] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1123'. [ 253.491123][ T8862] netlink: 'syz.1.1121': attribute type 16 has an invalid length. [ 253.515236][ T8862] netlink: 'syz.1.1121': attribute type 3 has an invalid length. [ 253.518486][ T8867] FAULT_INJECTION: forcing a failure. [ 253.518486][ T8867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.527067][ T8862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1121'. [ 253.537518][ T8867] CPU: 0 PID: 8867 Comm: syz.2.1125 Not tainted syzkaller #0 [ 253.552615][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.562662][ T8867] Call Trace: [ 253.565937][ T8867] [ 253.568864][ T8867] dump_stack_lvl+0x16c/0x230 [ 253.573543][ T8867] ? show_regs_print_info+0x20/0x20 [ 253.578731][ T8867] ? load_image+0x3b0/0x3b0 [ 253.583230][ T8867] ? __might_fault+0xaa/0x120 [ 253.587900][ T8867] ? __lock_acquire+0x7c80/0x7c80 [ 253.592916][ T8867] ? __might_fault+0xaa/0x120 [ 253.597585][ T8867] should_fail_ex+0x39d/0x4d0 [ 253.602261][ T8867] _copy_from_iter+0x1d3/0x1290 [ 253.607104][ T8867] ? __might_fault+0xaa/0x120 [ 253.611777][ T8867] ? _copy_from_iter+0x248/0x1290 [ 253.616795][ T8867] ? __virt_addr_valid+0x18c/0x540 [ 253.621899][ T8867] ? __lock_acquire+0x7c80/0x7c80 [ 253.626913][ T8867] ? copyout_mc+0x70/0x70 [ 253.631240][ T8867] ? copyout_mc+0x70/0x70 [ 253.635560][ T8867] ? __virt_addr_valid+0x18c/0x540 [ 253.640663][ T8867] ? page_copy_sane+0x16a/0x270 [ 253.645510][ T8867] copy_page_from_iter+0x7b/0x100 [ 253.650532][ T8867] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 253.656339][ T8867] tun_get_user+0x1583/0x3bf0 [ 253.661039][ T8867] ? aa_file_perm+0x120/0xec0 [ 253.665718][ T8867] ? aa_file_perm+0x3e8/0xec0 [ 253.670398][ T8867] ? rcu_read_unlock+0xa0/0xa0 [ 253.675171][ T8867] ? tun_get+0x1c/0x2e0 [ 253.679332][ T8867] ? __lock_acquire+0x7c80/0x7c80 [ 253.684359][ T8867] ? tun_get+0x1c/0x2e0 [ 253.688539][ T8867] tun_chr_write_iter+0x119/0x200 [ 253.693563][ T8867] vfs_write+0x43b/0x940 [ 253.697803][ T8867] ? file_end_write+0x250/0x250 [ 253.702697][ T8867] ? __fget_files+0x44a/0x4d0 [ 253.707371][ T8867] ? __fdget_pos+0x1d8/0x330 [ 253.711951][ T8867] ? ksys_write+0x75/0x250 [ 253.716362][ T8867] ksys_write+0x147/0x250 [ 253.720690][ T8867] ? __ia32_sys_read+0x90/0x90 [ 253.725446][ T8867] ? lockdep_hardirqs_on+0x98/0x150 [ 253.730636][ T8867] do_syscall_64+0x55/0xb0 [ 253.735047][ T8867] ? clear_bhb_loop+0x40/0x90 [ 253.739715][ T8867] ? clear_bhb_loop+0x40/0x90 [ 253.744425][ T8867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.750346][ T8867] RIP: 0033:0x7fdd6f58efc9 [ 253.754764][ T8867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.774368][ T8867] RSP: 002b:00007fdd704ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.782798][ T8867] RAX: ffffffffffffffda RBX: 00007fdd6f7e5fa0 RCX: 00007fdd6f58efc9 [ 253.790779][ T8867] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 253.798779][ T8867] RBP: 00007fdd704ae090 R08: 0000000000000000 R09: 0000000000000000 [ 253.807010][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.814972][ T8867] R13: 00007fdd6f7e6038 R14: 00007fdd6f7e5fa0 R15: 00007ffdfc90c368 [ 253.822949][ T8867] [ 254.226316][ T8881] FAULT_INJECTION: forcing a failure. [ 254.226316][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 254.244541][ T8881] CPU: 0 PID: 8881 Comm: syz.3.1129 Not tainted syzkaller #0 [ 254.251967][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.262040][ T8881] Call Trace: [ 254.265325][ T8881] [ 254.268256][ T8881] dump_stack_lvl+0x16c/0x230 [ 254.272934][ T8881] ? show_regs_print_info+0x20/0x20 [ 254.278137][ T8881] ? load_image+0x3b0/0x3b0 [ 254.282628][ T8881] ? __lock_acquire+0x1260/0x7c80 [ 254.287665][ T8881] should_fail_ex+0x39d/0x4d0 [ 254.292347][ T8881] should_failslab+0x9/0x20 [ 254.296845][ T8881] slab_pre_alloc_hook+0x59/0x310 [ 254.301866][ T8881] kmem_cache_alloc+0x5a/0x2e0 [ 254.306624][ T8881] ? dst_alloc+0x105/0x170 [ 254.311037][ T8881] dst_alloc+0x105/0x170 [ 254.315273][ T8881] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 254.321355][ T8881] ? ip_route_output_key_hash+0x12f/0x340 [ 254.327068][ T8881] ip_route_output_key_hash+0x20b/0x340 [ 254.332605][ T8881] ? __lock_acquire+0x7c80/0x7c80 [ 254.337625][ T8881] ? ip_route_input_rcu+0x3010/0x3010 [ 254.342990][ T8881] ? read_lock_is_recursive+0x20/0x20 [ 254.348354][ T8881] ? __virt_addr_valid+0x18c/0x540 [ 254.353461][ T8881] ? __virt_addr_valid+0x18c/0x540 [ 254.358581][ T8881] ip_route_output_flow+0x2a/0x150 [ 254.363692][ T8881] ? security_sk_classify_flow+0x7b/0x90 [ 254.369344][ T8881] l2tp_ip_sendmsg+0xe37/0x15e0 [ 254.374194][ T8881] ? l2tp_ip_sendmsg+0x3ae/0x15e0 [ 254.379208][ T8881] ? inet_send_prepare+0x260/0x260 [ 254.384350][ T8881] ____sys_sendmsg+0x5bf/0x950 [ 254.389118][ T8881] ? __asan_memset+0x22/0x40 [ 254.393710][ T8881] ? __sys_sendmsg_sock+0x30/0x30 [ 254.398750][ T8881] ? __import_iovec+0x5f2/0x860 [ 254.403606][ T8881] ? import_iovec+0x73/0xa0 [ 254.408109][ T8881] ___sys_sendmsg+0x220/0x290 [ 254.412790][ T8881] ? __sys_sendmsg+0x270/0x270 [ 254.417571][ T8881] ? __lock_acquire+0x7c80/0x7c80 [ 254.422608][ T8881] __se_sys_sendmsg+0x1a5/0x270 [ 254.427457][ T8881] ? __x64_sys_sendmsg+0x80/0x80 [ 254.432401][ T8881] ? lockdep_hardirqs_on+0x98/0x150 [ 254.437595][ T8881] do_syscall_64+0x55/0xb0 [ 254.442004][ T8881] ? clear_bhb_loop+0x40/0x90 [ 254.446672][ T8881] ? clear_bhb_loop+0x40/0x90 [ 254.451339][ T8881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.457222][ T8881] RIP: 0033:0x7fb0ccb8efc9 [ 254.461627][ T8881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.481229][ T8881] RSP: 002b:00007fb0cadf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.489646][ T8881] RAX: ffffffffffffffda RBX: 00007fb0ccde5fa0 RCX: 00007fb0ccb8efc9 [ 254.497620][ T8881] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 254.505582][ T8881] RBP: 00007fb0cadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.513545][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.521512][ T8881] R13: 00007fb0ccde6038 R14: 00007fb0ccde5fa0 R15: 00007ffe62a0b3c8 [ 254.529486][ T8881] [ 255.676495][ T8903] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1139'. [ 255.916359][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.922857][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.831195][ T8931] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1149'. [ 257.968091][ T8944] netlink: 'syz.3.1154': attribute type 10 has an invalid length. [ 258.918393][ T8960] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1159'. [ 260.292452][ T8975] netlink: 'syz.2.1167': attribute type 10 has an invalid length. [ 260.370170][ T8975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1167'. [ 260.519004][ T8975] bond0: (slave batadv0): Releasing backup interface [ 260.764722][ T8975] bridge0: port 3(batadv0) entered blocking state [ 260.850257][ T8975] bridge0: port 3(batadv0) entered disabled state [ 260.930344][ T8975] batadv0: entered allmulticast mode [ 261.057801][ T8975] batadv0: entered promiscuous mode [ 261.437896][ T2905] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 261.447564][ T2905] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 261.755040][ T8993] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1172'. [ 261.801025][ T8996] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1171'. [ 263.826592][ T9024] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1182'. [ 263.956419][ T9026] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1183'. [ 265.108133][ T9054] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1194'. [ 266.910125][ T9068] syzkaller0: entered promiscuous mode [ 266.915655][ T9068] syzkaller0: entered allmulticast mode [ 268.800295][ T9078] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1204'. [ 268.994954][ T9096] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 269.013299][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1206'. [ 269.044438][ T9096] bond0: (slave batadv0): Releasing backup interface [ 269.052724][ T9096] batadv0: left promiscuous mode [ 269.082204][ T9096] bridge0: port 3(batadv0) entered blocking state [ 269.089236][ T9096] bridge0: port 3(batadv0) entered disabled state [ 269.098174][ T9096] batadv0: entered allmulticast mode [ 269.105330][ T9096] batadv0: entered promiscuous mode [ 269.230927][ T2962] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 269.240291][ T2962] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 269.770704][ T9119] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1214'. [ 270.986675][ T9147] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1226'. [ 272.123405][ T9168] netlink: 'syz.1.1233': attribute type 10 has an invalid length. [ 272.330906][ T9168] team0: Port device dummy0 added [ 272.340698][ T9172] netlink: 'syz.1.1233': attribute type 10 has an invalid length. [ 272.370999][ T9172] team0: Port device dummy0 removed [ 272.380256][ T9172] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 272.572214][ T9184] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1241'. [ 272.849440][ T9194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1242'. [ 273.970211][ T9223] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1254'. [ 274.008212][ T9218] FAULT_INJECTION: forcing a failure. [ 274.008212][ T9218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.008500][ T9218] [ 274.008512][ T9218] ====================================================== [ 274.008518][ T9218] WARNING: possible circular locking dependency detected [ 274.008532][ T9218] syzkaller #0 Not tainted [ 274.008539][ T9218] ------------------------------------------------------ [ 274.008543][ T9218] syz.0.1251/9218 is trying to acquire lock: [ 274.008551][ T9218] ffffffff8cd24160 (console_owner){-...}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 274.008593][ T9218] [ 274.008593][ T9218] but task is already holding lock: [ 274.008597][ T9218] ffff8880b8e3b9d8 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x767/0x1020 [ 274.008628][ T9218] [ 274.008628][ T9218] which lock already depends on the new lock. [ 274.008628][ T9218] [ 274.008632][ T9218] [ 274.008632][ T9218] the existing dependency chain (in reverse order) is: [ 274.008637][ T9218] [ 274.008637][ T9218] -> #3 (&pool->lock){-.-.}-{2:2}: [ 274.008655][ T9218] _raw_spin_lock+0x2e/0x40 [ 274.008670][ T9218] __queue_work+0x69f/0x1020 [ 274.008683][ T9218] queue_work_on+0x121/0x1e0 [ 274.008695][ T9218] rpm_suspend+0x10bc/0x1a90 [ 274.008708][ T9218] __pm_runtime_idle+0x12f/0x1a0 [ 274.008721][ T9218] __device_attach+0x33f/0x400 [ 274.008736][ T9218] bus_probe_device+0x180/0x260 [ 274.008749][ T9218] device_add+0x85b/0xc20 [ 274.008775][ T9218] serial_base_port_add+0x2f2/0x420 [ 274.008789][ T9218] serial_core_register_port+0x36d/0x2320 [ 274.008809][ T9218] serial8250_register_8250_port+0x15ec/0x1f10 [ 274.008825][ T9218] serial_pnp_probe+0x549/0x730 [ 274.008839][ T9218] pnp_device_probe+0x305/0x4b0 [ 274.008855][ T9218] really_probe+0x25b/0xb40 [ 274.008869][ T9218] __driver_probe_device+0x18c/0x330 [ 274.008884][ T9218] driver_probe_device+0x4f/0x420 [ 274.008899][ T9218] __driver_attach+0x44e/0x6f0 [ 274.008913][ T9218] bus_for_each_dev+0x22d/0x2a0 [ 274.008926][ T9218] bus_add_driver+0x340/0x640 [ 274.008938][ T9218] driver_register+0x23a/0x310 [ 274.008953][ T9218] serial8250_init+0x9a/0x170 [ 274.008969][ T9218] do_one_initcall+0x1fd/0x750 [ 274.008985][ T9218] do_initcall_level+0x137/0x1f0 [ 274.009001][ T9218] do_initcalls+0x69/0xd0 [ 274.009015][ T9218] kernel_init_freeable+0x3d2/0x570 [ 274.009032][ T9218] kernel_init+0x1d/0x1c0 [ 274.009046][ T9218] ret_from_fork+0x48/0x80 [ 274.009062][ T9218] ret_from_fork_asm+0x11/0x20 [ 274.009078][ T9218] [ 274.009078][ T9218] -> #2 (&dev->power.lock){-...}-{2:2}: [ 274.009097][ T9218] _raw_spin_lock_irqsave+0xa8/0xf0 [ 274.009111][ T9218] __pm_runtime_resume+0x10f/0x170 [ 274.009124][ T9218] __uart_start+0x171/0x3e0 [ 274.009143][ T9218] uart_write+0x449/0x5d0 [ 274.009154][ T9218] n_tty_write+0xd27/0x11d0 [ 274.009172][ T9218] file_tty_write+0x54b/0x980 [ 274.009186][ T9218] vfs_write+0x43b/0x940 [ 274.009202][ T9218] ksys_write+0x147/0x250 [ 274.009217][ T9218] do_syscall_64+0x55/0xb0 [ 274.009234][ T9218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.009248][ T9218] [ 274.009248][ T9218] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 274.009266][ T9218] _raw_spin_lock_irqsave+0xa8/0xf0 [ 274.009280][ T9218] serial8250_console_write+0x16d/0x17a0 [ 274.009297][ T9218] console_flush_all+0x6cd/0xd00 [ 274.009311][ T9218] console_unlock+0xae/0x340 [ 274.009326][ T9218] vprintk_emit+0x477/0x600 [ 274.009340][ T9218] _printk+0xd0/0x110 [ 274.009354][ T9218] register_console+0x91b/0xe60 [ 274.009369][ T9218] univ8250_console_init+0x45/0x50 [ 274.009384][ T9218] console_init+0x17b/0x5e0 [ 274.009400][ T9218] start_kernel+0x2c0/0x4e0 [ 274.009415][ T9218] x86_64_start_reservations+0x2a/0x30 [ 274.009430][ T9218] copy_bootdata+0x0/0xe0 [ 274.009442][ T9218] secondary_startup_64_no_verify+0x179/0x17b [ 274.009460][ T9218] [ 274.009460][ T9218] -> #0 (console_owner){-...}-{0:0}: [ 274.009479][ T9218] __lock_acquire+0x2ddb/0x7c80 [ 274.009493][ T9218] lock_acquire+0x197/0x410 [ 274.009512][ T9218] console_flush_all+0x693/0xd00 [ 274.009528][ T9218] console_unlock+0xae/0x340 [ 274.009542][ T9218] vprintk_emit+0x477/0x600 [ 274.009556][ T9218] _printk+0xd0/0x110 [ 274.009568][ T9218] should_fail_ex+0x37e/0x4d0 [ 274.009585][ T9218] strncpy_from_user+0x36/0x2e0 [ 274.009597][ T9218] strncpy_from_user_nofault+0x71/0x140 [ 274.009615][ T9218] bpf_probe_read_user_str+0x2a/0x70 [ 274.009635][ T9218] bpf_prog_b1bc9f7c1f89903c+0x40/0x42 [ 274.009649][ T9218] bpf_trace_run1+0x30a/0x3b0 [ 274.009662][ T9218] __bpf_trace_workqueue_activate_work+0xaf/0x100 [ 274.009676][ T9218] trace_workqueue_activate_work+0x142/0x1a0 [ 274.009692][ T9218] __queue_work+0xc0e/0x1020 [ 274.009704][ T9218] queue_work_on+0x121/0x1e0 [ 274.009716][ T9218] mptcp_subflow_shutdown+0x246/0x430 [ 274.009733][ T9218] __mptcp_wr_shutdown+0x1af/0x430 [ 274.009749][ T9218] __mptcp_close+0x24e/0xab0 [ 274.009764][ T9218] mptcp_close+0x28/0x120 [ 274.009782][ T9218] inet_release+0x13d/0x180 [ 274.009796][ T9218] sock_close+0xbd/0x230 [ 274.009808][ T9218] __fput+0x234/0x970 [ 274.009825][ T9218] __se_sys_close+0x15f/0x220 [ 274.009840][ T9218] do_syscall_64+0x55/0xb0 [ 274.009856][ T9218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.009892][ T9218] [ 274.009892][ T9218] other info that might help us debug this: [ 274.009892][ T9218] [ 274.009897][ T9218] Chain exists of: [ 274.009897][ T9218] console_owner --> &dev->power.lock --> &pool->lock [ 274.009897][ T9218] [ 274.009916][ T9218] Possible unsafe locking scenario: [ 274.009916][ T9218] [ 274.009920][ T9218] CPU0 CPU1 [ 274.009924][ T9218] ---- ---- [ 274.009928][ T9218] lock(&pool->lock); [ 274.009936][ T9218] lock(&dev->power.lock); [ 274.009946][ T9218] lock(&pool->lock); [ 274.009955][ T9218] lock(console_owner); [ 274.009964][ T9218] [ 274.009964][ T9218] *** DEADLOCK *** [ 274.009964][ T9218] [ 274.009967][ T9218] 8 locks held by syz.0.1251/9218: [ 274.009975][ T9218] #0: ffff8880585c3220 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 274.010013][ T9218] #1: ffff888024ea1930 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_close+0x1d/0x120 [ 274.010052][ T9218] #2: ffff8880216ebe70 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_subflow_shutdown+0x30/0x430 [ 274.010090][ T9218] #3: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: __queue_work+0x1af/0x1020 [ 274.010121][ T9218] #4: ffff8880b8e3b9d8 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x767/0x1020 [ 274.010154][ T9218] #5: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run1+0xd6/0x3b0 [ 274.010187][ T9218] #6: ffffffff8cd24240 (console_lock){+.+.}-{0:0}, at: _printk+0xd0/0x110 [ 274.010220][ T9218] #7: ffffffff8cc0ba50 (console_srcu){....}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 274.010256][ T9218] [ 274.010256][ T9218] stack backtrace: [ 274.010261][ T9218] CPU: 0 PID: 9218 Comm: syz.0.1251 Not tainted syzkaller #0 [ 274.010276][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.010284][ T9218] Call Trace: [ 274.010290][ T9218] [ 274.010296][ T9218] dump_stack_lvl+0x16c/0x230 [ 274.010315][ T9218] ? load_image+0x3b0/0x3b0 [ 274.010331][ T9218] ? show_regs_print_info+0x20/0x20 [ 274.010353][ T9218] ? print_circular_bug+0x12b/0x1a0 [ 274.010371][ T9218] check_noncircular+0x2bd/0x3c0 [ 274.010391][ T9218] ? print_deadlock_bug+0x5d0/0x5d0 [ 274.010407][ T9218] ? lockdep_lock+0xe0/0x220 [ 274.010428][ T9218] __lock_acquire+0x2ddb/0x7c80 [ 274.010455][ T9218] ? verify_lock_unused+0x140/0x140 [ 274.010481][ T9218] lock_acquire+0x197/0x410 [ 274.010497][ T9218] ? console_flush_all+0x10f/0xd00 [ 274.010523][ T9218] ? __lock_acquire+0x7c80/0x7c80 [ 274.010538][ T9218] ? do_raw_spin_lock+0x121/0x2c0 [ 274.010555][ T9218] ? read_lock_is_recursive+0x20/0x20 [ 274.010572][ T9218] ? __rwlock_init+0x150/0x150 [ 274.010590][ T9218] ? do_raw_spin_unlock+0x121/0x230 [ 274.010609][ T9218] console_flush_all+0x693/0xd00 [ 274.010626][ T9218] ? console_flush_all+0x10f/0xd00 [ 274.010643][ T9218] ? console_flush_all+0x10f/0xd00 [ 274.010665][ T9218] ? is_console_locked+0x20/0x20 [ 274.010688][ T9218] console_unlock+0xae/0x340 [ 274.010705][ T9218] ? other_cpu_in_panic+0xf0/0xf0 [ 274.010723][ T9218] ? __lock_acquire+0x1260/0x7c80 [ 274.010742][ T9218] vprintk_emit+0x477/0x600 [ 274.010760][ T9218] ? printk_sprint+0x460/0x460 [ 274.010776][ T9218] ? print_deadlock_bug+0x5d0/0x5d0 [ 274.010792][ T9218] ? lockdep_lock+0xe0/0x220 [ 274.010808][ T9218] ? lockdep_unlock+0x137/0x2d0 [ 274.010826][ T9218] _printk+0xd0/0x110 [ 274.010843][ T9218] ? load_image+0x3b0/0x3b0 [ 274.010864][ T9218] should_fail_ex+0x37e/0x4d0 [ 274.010885][ T9218] strncpy_from_user+0x36/0x2e0 [ 274.010901][ T9218] strncpy_from_user_nofault+0x71/0x140 [ 274.010922][ T9218] bpf_probe_read_user_str+0x2a/0x70 [ 274.010944][ T9218] bpf_prog_b1bc9f7c1f89903c+0x40/0x42 [ 274.010960][ T9218] bpf_trace_run1+0x30a/0x3b0 [ 274.010975][ T9218] ? bpf_trace_run1+0xd6/0x3b0 [ 274.010989][ T9218] ? bpf_put_raw_tracepoint+0x60/0x60 [ 274.011005][ T9218] ? __bpf_trace_workqueue_activate_work+0xa2/0x100 [ 274.011023][ T9218] __bpf_trace_workqueue_activate_work+0xaf/0x100 [ 274.011036][ T9218] ? __bpf_trace_workqueue_queue_work+0x1a0/0x1a0 [ 274.011048][ T9218] ? do_raw_spin_lock+0x121/0x2c0 [ 274.011064][ T9218] ? __rwlock_init+0x150/0x150 [ 274.011082][ T9218] trace_workqueue_activate_work+0x142/0x1a0 [ 274.011099][ T9218] __queue_work+0xc0e/0x1020 [ 274.011113][ T9218] ? __queue_work+0x1af/0x1020 [ 274.011126][ T9218] ? rcu_is_watching+0x15/0xb0 [ 274.011144][ T9218] queue_work_on+0x121/0x1e0 [ 274.011158][ T9218] ? wq_worker_last_func+0x40/0x40 [ 274.011174][ T9218] ? __tcp_push_pending_frames+0xd2/0x340 [ 274.011191][ T9218] mptcp_subflow_shutdown+0x246/0x430 [ 274.011210][ T9218] __mptcp_wr_shutdown+0x1af/0x430 [ 274.011240][ T9218] ? mptcp_close_state+0x1bb/0x250 [ 274.011258][ T9218] __mptcp_close+0x24e/0xab0 [ 274.011275][ T9218] ? do_raw_spin_unlock+0x121/0x230 [ 274.011294][ T9218] mptcp_close+0x28/0x120 [ 274.011313][ T9218] inet_release+0x13d/0x180 [ 274.011328][ T9218] sock_close+0xbd/0x230 [ 274.011341][ T9218] ? sock_mmap+0xa0/0xa0 [ 274.011353][ T9218] __fput+0x234/0x970 [ 274.011375][ T9218] __se_sys_close+0x15f/0x220 [ 274.011392][ T9218] do_syscall_64+0x55/0xb0 [ 274.011408][ T9218] ? clear_bhb_loop+0x40/0x90 [ 274.011422][ T9218] ? clear_bhb_loop+0x40/0x90 [ 274.011437][ T9218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.011451][ T9218] RIP: 0033:0x7ffb0e58efc9 [ 274.011464][ T9218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.011477][ T9218] RSP: 002b:00007ffb0f3f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 274.011490][ T9218] RAX: ffffffffffffffda RBX: 00007ffb0e7e5fa0 RCX: 00007ffb0e58efc9 [ 274.011513][ T9218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 274.011522][ T9218] RBP: 00007ffb0f3f2090 R08: 0000000000000000 R09: 0000000000000000 [ 274.011531][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.011538][ T9218] R13: 00007ffb0e7e6038 R14: 00007ffb0e7e5fa0 R15: 00007fff339d5c48 [ 274.011555][ T9218] [ 275.119782][ T9218] CPU: 0 PID: 9218 Comm: syz.0.1251 Not tainted syzkaller #0 [ 275.127132][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.137167][ T9218] Call Trace: [ 275.140428][ T9218] [ 275.143352][ T9218] dump_stack_lvl+0x16c/0x230 [ 275.148015][ T9218] ? show_regs_print_info+0x20/0x20 [ 275.153194][ T9218] ? load_image+0x3b0/0x3b0 [ 275.157682][ T9218] should_fail_ex+0x39d/0x4d0 [ 275.162368][ T9218] strncpy_from_user+0x36/0x2e0 [ 275.167195][ T9218] strncpy_from_user_nofault+0x71/0x140 [ 275.172726][ T9218] bpf_probe_read_user_str+0x2a/0x70 [ 275.177993][ T9218] bpf_prog_b1bc9f7c1f89903c+0x40/0x42 [ 275.183438][ T9218] bpf_trace_run1+0x30a/0x3b0 [ 275.188097][ T9218] ? bpf_trace_run1+0xd6/0x3b0 [ 275.192839][ T9218] ? bpf_put_raw_tracepoint+0x60/0x60 [ 275.198187][ T9218] ? __bpf_trace_workqueue_activate_work+0xa2/0x100 [ 275.204755][ T9218] __bpf_trace_workqueue_activate_work+0xaf/0x100 [ 275.211343][ T9218] ? __bpf_trace_workqueue_queue_work+0x1a0/0x1a0 [ 275.217733][ T9218] ? do_raw_spin_lock+0x121/0x2c0 [ 275.222734][ T9218] ? __rwlock_init+0x150/0x150 [ 275.227481][ T9218] trace_workqueue_activate_work+0x142/0x1a0 [ 275.233441][ T9218] __queue_work+0xc0e/0x1020 [ 275.238006][ T9218] ? __queue_work+0x1af/0x1020 [ 275.242744][ T9218] ? rcu_is_watching+0x15/0xb0 [ 275.247489][ T9218] queue_work_on+0x121/0x1e0 [ 275.252058][ T9218] ? wq_worker_last_func+0x40/0x40 [ 275.257147][ T9218] ? __tcp_push_pending_frames+0xd2/0x340 [ 275.262842][ T9218] mptcp_subflow_shutdown+0x246/0x430 [ 275.268196][ T9218] __mptcp_wr_shutdown+0x1af/0x430 [ 275.273376][ T9218] ? mptcp_close_state+0x1bb/0x250 [ 275.278466][ T9218] __mptcp_close+0x24e/0xab0 [ 275.283037][ T9218] ? do_raw_spin_unlock+0x121/0x230 [ 275.288219][ T9218] mptcp_close+0x28/0x120 [ 275.292528][ T9218] inet_release+0x13d/0x180 [ 275.297026][ T9218] sock_close+0xbd/0x230 [ 275.301244][ T9218] ? sock_mmap+0xa0/0xa0 [ 275.305463][ T9218] __fput+0x234/0x970 [ 275.309431][ T9218] __se_sys_close+0x15f/0x220 [ 275.314106][ T9218] do_syscall_64+0x55/0xb0 [ 275.318502][ T9218] ? clear_bhb_loop+0x40/0x90 [ 275.323158][ T9218] ? clear_bhb_loop+0x40/0x90 [ 275.327810][ T9218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.333708][ T9218] RIP: 0033:0x7ffb0e58efc9 [ 275.338119][ T9218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.357710][ T9218] RSP: 002b:00007ffb0f3f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 275.366101][ T9218] RAX: ffffffffffffffda RBX: 00007ffb0e7e5fa0 RCX: 00007ffb0e58efc9 [ 275.374048][ T9218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 275.381996][ T9218] RBP: 00007ffb0f3f2090 R08: 0000000000000000 R09: 0000000000000000 [ 275.389942][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.397895][ T9218] R13: 00007ffb0e7e6038 R14: 00007ffb0e7e5fa0 R15: 00007fff339d5c48 [ 275.405859][ T9218]