last executing test programs: 30.512888328s ago: executing program 3 (id=8771): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x9, &(0x7f00000001c0), 0x4) socket$kcm(0x10, 0x2, 0x0) socketpair(0x2, 0x800, 0x6, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='&\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x3, 0x0, 0x0, 0xc}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) r3 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000080)=r6, 0x4) 6.159843561s ago: executing program 0 (id=8852): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000400018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005e000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.871144684s ago: executing program 0 (id=8857): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0xa3ee, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000300)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x3, 0x0, 0xa, 0xa, 0xffffffffffffffff, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x6, 0x61, &(0x7f0000000400)=""/97, 0x40f00, 0x18, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, 0x0, 0x2, 0x0, &(0x7f0000000880)=[{0x1, 0x2, 0x10, 0x6}, {0x4, 0x3, 0x8, 0x5}], 0x10, 0x3}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r9, &(0x7f0000001000), 0x0}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 5.54411223s ago: executing program 0 (id=8861): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x17, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x39, 0x0, &(0x7f0000000c80)="8aa10c90ad3463b211a10d34b4f81a986a63bf9f08f0aeda02c1f3ec237530cc6976def2e2b50dfd95721369f602292d84f0ca99be9fa5ce05", 0x0, 0x8cfd, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)}, 0xff0f000004048800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x12}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900"], 0x18, 0x6000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) 5.141452379s ago: executing program 0 (id=8865): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x1c) close(0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x4, 0x6, 0x61, 0x9, 0x0, 0x3, 0x4, 0x10, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x2000, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x8, 0x0, 0x100, 0x10282, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000000000006110640000000000c3000000a100000095000b0000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x141, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.871356462s ago: executing program 4 (id=8869): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae890000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c082, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000f900850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 4.639811313s ago: executing program 1 (id=8871): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 4.389610514s ago: executing program 1 (id=8872): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) 4.366683915s ago: executing program 1 (id=8873): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="09000000060000000900000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pI4 \x00'}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x46878b22, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0x11, &(0x7f0000000240), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x1e, &(0x7f0000000600)=ANY=[@ANYBLOB="18190000", @ANYRES32=r2, @ANYBLOB="000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000186a00000d000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000646c3765247aeaeae76a20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000800000008500000006000000"], &(0x7f0000000700)='GPL\x00', 0x3, 0xc5, &(0x7f0000000740)=""/197, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[r5, 0x1, r6, r7, r0], &(0x7f0000000a80)=[{0x0, 0x3, 0xe, 0x7}], 0x10, 0xc52d}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000850000002500000095f1ff0000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r9) 1.601700305s ago: executing program 0 (id=8875): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x7, 0x8, 0x0, 0x0, 0xe7d, 0xa04, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x8}, 0x8000, 0x1, 0x60c42711, 0x0, 0x400004, 0xeeb1, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x1, r1, 0x8) write$cgroup_int(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000a000000000000000300000018110000582464b6f08c6d7c29", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000635540000400000018230000", @ANYRES32=0x1, @ANYBLOB="00000000fcffffff95000000000000008520000001000000183300000500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x8000, 0x3b, &(0x7f0000000200)=""/59, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xb, 0x2, 0xcbb}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x1, 0x3, 0x9}, {0x0, 0x5, 0xd, 0xb}, {0x4, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x9, 0x2}], 0x10, 0x901a}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x19, 0x4, 0x4, 0xc}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804) 1.600992565s ago: executing program 1 (id=8876): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x20, &(0x7f0000000340)={&(0x7f0000000280), 0x0, 0x0, &(0x7f00000002c0)=""/104, 0x68}}, 0x10) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0xf, 0x1c}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x9ac, 0x1, 0x1, 0x8009, 0x1, 0xfffffffd, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0xe, @value=r1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000100000000000000000000850000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) close(r3) socket$kcm(0x10, 0x7, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000010007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x17, &(0x7f0000000100)=r8, 0x4) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x4, 0x8, 0xfffffffe, 0x0, 0x0, 0x0, '\x00', 0x0, r10, 0x2, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d00000004000000080000000000000001"], 0x40) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="bd30bc791f4860246406f853f8f0eadad664503b45fdb7b5c366689c837fdcf97beeb608f932e7f6b1064bf8eb2988e5258f75bbfc67db851fd69e822e11ddbc831f38ec6042f83c6b19e118b1008b9773f855e5fbe4992597", 0x59}, {&(0x7f0000002740)="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", 0x554}], 0x2}, 0x80) 1.600603985s ago: executing program 3 (id=8776): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d31, 0x81223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x80, 0x0, 0xf, 0x0, 0x40fb, 0x0, 0x0, 0x0, 0x10000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106400000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b6500ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x141800, 0x0) (async) r0 = socket$kcm(0xa, 0x1, 0x106) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10c102, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) (async) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$kcm(r4, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/182, 0xb6}], 0x1}, 0x100b6) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000000)=r6, 0x4a) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1.585265876s ago: executing program 2 (id=8877): perf_event_open(&(0x7f0000000380)={0x0, 0xfffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000200000000000000001"], 0xfdef) 1.451584892s ago: executing program 4 (id=8878): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000060000040005000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 1.28208706s ago: executing program 2 (id=8879): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 1.28159953s ago: executing program 4 (id=8880): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0xd, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="720ac4ff000000007110a9000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r0, 0x400454de, 0xffffffffffffffff) 1.156690016s ago: executing program 3 (id=8881): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x40000000) 1.096154289s ago: executing program 2 (id=8882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) 937.977976ms ago: executing program 4 (id=8883): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0b621f2aee0c8fb"], 0x0}, 0x94) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)) close(0x3) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x40010080) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000563106000000000000000000000008004e88b0fb22f145ebc34998ef111c1e08190553108d93e3dd006486670b6f7aaa46ad267d6a0d15d5d66968e2629c92de2be6c2c3a495188a17311baff9510ae83dee4494faffffffffffffff8226ce9a3db1944040b9a5b7a94f8f035a51b0bfa2136172063af96be50cf1db0e941e90f1000a513ac8915be9ae2a41045772b110b0d5153b34a3add2e0eefd6f0a13299f7881e018f36a94e57199587295f9c0aacb614de00a65265435012501337cc5a608f65e19273919d0444c696ca6248c66a21a5cbcbe682785"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0a000000040000000200000002"], 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae890000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\']{/K\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x4, 0x3, 0x0, 0x10, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8983, &(0x7f0000000080)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x8a, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 927.478047ms ago: executing program 3 (id=8884): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x40000000}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0xffffffb0}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 927.266287ms ago: executing program 2 (id=8885): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x1010000, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x44}, 0x80) 869.66653ms ago: executing program 0 (id=8886): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c5", @ANYRES32=0x0], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c5", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) (async) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) (async) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 718.044727ms ago: executing program 3 (id=8887): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x3170fdf7a924cfe9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xb9, &(0x7f0000000080)=""/185}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x0, 0xa}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000200)="5a1f2520ba9c5c7314b7f7b8a78a515a1a46520e8dbddbb84aaa902cb8dbaef842db", 0x22}], 0x2, &(0x7f0000001100)=[{0x68, 0x10d, 0xd39, "581f5cb94403e4708765c44238ec9562f8f5f999a8dc53f5f660305c170bcc55219563516d809c2dbb97c74ba07cd98d9d6aa52f7835add69201e095838ffdf1981952c59c9c8067a7a1dd599cb85b288fd862e0"}, {0x80, 0x0, 0x9, "350bdee63b3d6972b103637f45427a8bc79e50341ac1502f2a82798a43e782595c4661543d24606b775baf85702315bdbf2fea71ebf4d18778adc4824fa99062ea218755e563a17e136b1e4b06bdf84c43414324b531290f809522c973fa43b29fba087133d2b43b462a"}, {0x70, 0x113, 0x9, "d6ecef5e49b4ea1745ac507a9a62ae0faa4a29d4d15655efc074991f92a915578dfbb15ae48675bd2e760d364c01c2785c785cbafbffdcab283b1e2ba791c37cb1a9b63f106f709bf6ded945df0d453de228a7b3fa8edcfcdfa871bf00bd84"}, {0x68, 0x10e, 0x9, "078b174ca6bca6c99298bbb820fc4e38bf00e78b060e3cdc0214d34e777f6b1984aef6112eb4e516cdda48d5a682e981d015e82b5d0bfc1d15a617bba559cb6e131b98ea3664b42ca329356ffbd3e7c4d59a3593"}, {0x1010, 0x10f, 0x8, "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"}], 0x11d0}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) 715.801907ms ago: executing program 2 (id=8888): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000b0000000095100000113652dcfada5b34c7bd2f90aa50c3cb61853138010000009f538e0a5d30756004aee8b8b8815f1ef3984d65fec94e8dfe9bf6288717d1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x700}, 0x21) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), 0x0}, 0x20) r3 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000008"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000004) recvmsg$kcm(r3, &(0x7f0000003200)={0x0, 0x0, 0x0}, 0x10000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="006cd3d0e15bfaacd53524f11a000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24864, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 404.002411ms ago: executing program 3 (id=8889): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae890000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c082, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000f900850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 403.109741ms ago: executing program 1 (id=8899): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10e0c2, 0x0, 0x40000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 390.714702ms ago: executing program 2 (id=8890): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1, &(0x7f0000000000)=@raw=[@generic={0xfc, 0x0, 0x0, 0x0, 0x9}], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x3f00000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r1}) ioctl$TUNSETVNETHDRSZ(r5, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="110000004e0033"], 0xfe33) recvmsg$unix(r3, 0x0, 0x2040) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000), 0x8) 182.434062ms ago: executing program 1 (id=8891): perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xe, 0xb6, 0x6, 0x5, 0x0, 0xd, 0x140, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd, 0x4, @perf_config_ext={0x1000, 0x3}, 0x2000, 0x9, 0x9, 0x5, 0xb22b, 0x5, 0x1, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x40000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x5, 0xfffffffe, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9cac4a2d1dc8d199) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) socket$kcm(0x29, 0x7, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x33, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010fc000001000000dc00000000000000"], 0x18}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c850000000000001001000001000000dc00000000000000"], 0x18}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000001001000001000000dc000000000000009e8a4bcd8c13dd8af02a34995c5ef3fac141eb50809866beab4df47061a0a08ed7369804cb9ade0cc3834cc46fdf21149780de3d5264140101000000000000ab7425aa3dcc8807f3667f76de5b28d9984bea2deed85f5dfdbff7fb05630df54d356b6d52fdcfffb997e1f0a03b07225c956674d7"], 0x18}, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001708550f400000000cd8d22000000"], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, &(0x7f0000000140)}, 0xd0a0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 166.710492ms ago: executing program 4 (id=8892): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 0s ago: executing program 4 (id=8893): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001f00)=ANY=[@ANYBLOB="0a00000016000000b30000007f000000000000", @ANYRES32, @ANYBLOB="00000000000000000019000000000000000000008c2644258af42df720b6eb4da4bd8337ca3326fc5173c23f9a524ea8a3c2b15eeb3932a718e74906aeb38c672bb5ab6be982666087d987e748deb2946435cc913c905ca5dace653629cad363050f085459f376efeff4ddba23671ea98649ae71f1c341cc00"/132, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1c, &(0x7f0000000500)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x4, 0xe2, &(0x7f00000001c0)=""/226, 0x40f00}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c004000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$kcm(0x2, 0xa, 0x2) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) r8 = syz_clone(0x20000000, &(0x7f0000001e00)="00d81aa98261e175d86e670b96e25a040564803048ecb6a91a0f8ae41896d54747c47291359f263c21fd4f1a6c60d37642366da93d72bb7bce097199c07d00ccadf88852fc4fa527771621638e86", 0x4e, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000000580)="3f92520cf13c2b039e6c2c849f0d2570efa8cc56ee7fe830d19b143dc3c8dec9872e8f549912ffd092725143cd744e1b311e7b6a23a13d1efec8a93195b826b72e57802992") r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r10 = syz_clone(0xa000600, &(0x7f0000000040)="a7c35e3d3ac6", 0x6, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="d259c64c6d7ae45dfc4487680290e15660b6529648f69df9caebae42e566c7402f7c1099014cb0291071232b549694bb47c1b0ee1f776b6ab81bdaff4da90bfa057790f95eeb47b613e45c7ead0e53a6456006052f05fbf845acef14784bd32a76168a5803e3caec1987edf69e53614ff1fe75a515b3afe7c6") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r10, r9, 0x0, 0x4, &(0x7f0000000240)='GPL\x00'}, 0x30) sendmsg$unix(r4, &(0x7f0000002080)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d80)=[{&(0x7f00000003c0)="da0082e27e029227a7a5f9e05e069cb7461b48dfde1faf50235894ee4c92dd1aa1d76f8d0bcbc9b5e75287f13b5a5714903f658e6e4e777ddced70aee15bae0259abadce295607f5a2f89f59f2ca3c0b3e4408264c0f9869e4002499ada8cf8107121f1a24fbe77dad7ba338", 0x6c}, {&(0x7f0000000640)="ad6ecffc5e27c65d3e031a35c14012ce298c9f1d6325", 0x16}, {&(0x7f0000000940)="6f54e9d3c8d01bec4c9fbc23fd25aa55b0873840f86808bfdca8094c8a25adc394b15529a63cb4f9dba238c53e867eca3afd0208bf4910deef3005d015197afe764f285ecafe1d6c13eac47aba1dbb4e0c6b53cb03b07a7d66da028581e4b388b9de06a3fb494de386334b9bb17e776d3e9c67422005907f", 0x78}, {&(0x7f0000000a40)="1edcbb7671d74419503ac9ec9d849f2e61a2b929fca9f1132a1692fed6b1b5125226664308ec7269c52afc8729924ccaa8c7162da00ad008ee23c087dd1fd2c1aca10ff54d2d", 0x46}, {&(0x7f0000000ac0)="8742744b742529cea18696feb9887d4874f6c271aad64f2e4b84555cc8c990b571c517d0b4bef9bd40eef8ac4fb3f3e491048aefd051ea6f260e23343ba70542e83aafef887a951ad38493bd115fcf63ce7244dfbe1fa5ad358e87130028f61ccfd2a306399e9f602dc7877d68871412e37295033accdb66572f8ae53a3dafb5603a6f61a67edf0821204f2ed1cf62eb50c3418204d6db9ffe148567c5bd33cb80bebcb49243654a275e7649ce04803d9d933a6a60a661aa78b658f80c18f6905b9d65d2c91cf5817834d006b13dd2889eb246c98bf44e0fbd50bc83a756bf3d", 0xe0}, {&(0x7f0000000c40)="a0cf510e051d6372824df498b5d5c2666b2ab6e67750979834b329ea2dea0a3d3559c30a6ba4b7bc641c2acd9ea7e5807765aae66ae06fb0239ed6eba37523e631c693a918fe6771a2fc85ec8eda1c1bc758edfff12548aed45558ff7e0a3ec81ea1267a90abdb08fed7746c43c86705e9ed8a835563e46283ed162fe57d4970bb2ee67d70ab52fb9bfdc5a2b03a8a21af718c6aa210a745ee576a0c96f697fa4ee14070d6b0a412111886d96034d7a7aefd0ec1ff0eb29f669c8f8e65887d9c82483dadbfcf16440a65235c40d8c5dc4b429faa2766fe4ca3f50cd11475c86873a50b18eaae87e7c570099d1a7707e07b6f955022751882d41ceb640a47a8a66f0bc7b507274915f8d4f4d4ebd38d0ad225bb72d0c420162d22ac717c9f1bca77dd879dbfb5a7cd419d38b9bedcd582d2389fe2e7271b2994a8367a086793820517930c89230a6c5914b201013574fa98e7d9e6d07e416f5d14664b178a6146ad142295c70852e8b8a45e47233e921be8f062d21c9fa128356e4d55f4863db27a0e175825dbf9e31b0b6a5fa4db3fba1a917e14c9f401afc4648d7a1475515bd66e6a49aa90095494a14b4f9e9b8187caa0ccaf96e4d3d94eb81dc8c19ae3c72f2993289583a170b0c56cf35cd7cc5c5aa1eeeae34e562945335b3f2c137bcb15e9e100d7eeed7bb42b091fb4860acba23f80716f19396c22031fbefd54e66887fa4e9d7142c44754a37ed7b5ce882bab45e766b31cadb0dbb507bf54aa90419d158b059a2f3a69e531a3ea0f10da862a1d3e3116750da0da5a93c9155b41a74bef2d215b1bf721dbd17bbf18bbae5c0efa65a2c9dae08d14b0d3f0821fbe15c9e9f6de0434f1c3bc51ac1b20d9f0cd7064fa99e55fa0879ce28f8b322d7bc774acfbce77d45c0645603becfcda06b41824f58139948c1d81f2f70dd4c7c27180ae3b96123165a4ac4a511c54319119b4c36d5c6ef23eddaaeca0c959dc649f28f01a5c5b71edd2b0c325619128a0cdb4baace88b79e5255dc7f55170a648878b401f5e96364af1270ad50c7ab6352b3da25384117f33dbd31f38a0164b8159ade3af5621142c4b85a8dc80f3d5fb956595bb4dac24e22ae3e431e35f326a0a74e9f3a736ca60b816fe1248971986db843cbfb26b987bde5ef103b85fd7784d2b353629e09e5dd311e3f7ad411c3cbd16e13f4f96749ecb3ec6368606c1621d68d5af6cca12f0d8610884bfc3102a903b845bc7a3244a1fe669c329bb3ca368aaf701ba4f8d2ce224d49b4d6807af4e00138ee2f692fdf0ae7bda44548f5c0cccab307ea54401e63134f4f94349c15a595a950c1554a0c2b8129568a6b6773e2dd6583464c1dbf7810833c408ecf84c908bc337fcfd9a2240fe181ae7cedb1adbcb13d1c4855c0131c826992db06163190a54e95398e60f56b584ea81cb120b99a7ebfd151ad4c87d1f6ed63b97d34bf97993463bf5ed7b04a2709d1ad79d2bbef8be51d04d9493f04fd88ebb2b8fc5ac62d4d7f68df4a5eb713e3e5b13e59cc5663d97a1591430096811b73f6aa21a8daba6a543190b7fd630a2f4022884c3b7647fb1925bbbf36fbd9deb548eec0d634f3c628878c3cb8e69c8d9695352c7a6c68af5f6dd8d2f518953d23995c2ce86e929182f5c2e063cb79eb1a8aaaffb3d2d34eafeedb4d8c22a3af2ff02ec6b06324ef95985d1159605247718025e8b435038994007175d14652eb6429783e7a328703e93054877d9119365f183b36cf98c5a3b0b5803df837cea15f4ee83f33ed14d4c6651a2def428d5fb61ef22e21155a0671ab83c9359a8d1d91b12e4c6ce07045af054f77eb41de8c7b39f37fb3c14d6eeb828c89d3e290402c6baa451e56ae149cab672f25ae5a1493403b31b05ccc16b0d407f1bb0c17db8f5903e223e19ea4e16d535e84f41082703c0c350fe3d02c8b96f659027b3b095cafebdea5973b22bd574869fd7a0a0fc1ebf9961f757f6732de930d9caa0b160f3f02fd6036579f58e72bbeb215441b2aab1e3ed03bc130ab68d303fe93365dfcde567c5dd7d7dcb5e9db9f39ef8b040b361205440b59f190c495e331e1ac5e7874292990f9f18dcbd8a26fec6d78eeaf3e6ff2edfa4e2bfcbc0e86c4c755efb6da1d2b380886f50ce0849b25b5dc03fa451fa4f9f6e50f2916737d412e8211944234a7c3ca661b6bbba7bf5a5ef10788f9351129d273c691bcb4b7986e8e1f0b3abecc787004bd2ec524b099c5744ecd0a1d5801df93ba5cf27b8a3ba817fcff99566cc255ab51403f350d5d135abff84079cd8ca2a170068ea9db207bd1843bed60cbdc991843dbea7eb69339850cb6c67297be317c483786a0876efb02e5b28ad8445c3cc2eec00218f1b4b08df0d73d88df53c41fd1b4fa2a2c554330c811d4dcc7199aa625623c10c07708b28670752a91f2a5c2e1026199028b03ce405cfa06f84a47d182791d014ec9ce7f32f3ad909386099950eb94bba778719aac780b5b4861809bd121cfac62424ea2607a51c9d10e1b5726e3e82e10cdc964fc04291bc0082ed68a978637dcdda365f391ba3ae8ecc743fa1bdd2178f5ad4a6530f137af43a0d65d06e6443258a194ed3746718e554e13c572bf032ce85866c39db539513516b46a1f67106adcc907ce1be1c777721c6c1cfcd4086aa7da20ec71269ce6ae0cf850854606852d0f085cbe2f6d249d1a0803c6687442993379a178611b90fe6c4618f3aeb5c625c90f9635fdbc88a1185373c2d7f3d3fdcc9c1d49eb2fbcb0e278f13f0848af2075c5a1041e09dcbaf9b731bc6885134ba2021f366c53d0393dc870485adb968c9503802c4680167dc9bf04511c1aadf8d4e47e61f69b00d9ed98f23817536dcccc9cc547963a3b7432b13739f4d39b05889caf4ed0de27a8d5f80d00bf87580058dd7032263e5fdb6210775f2d6969ce89f1ee77cae3cbd2de451fd2ce3d1de67e8be99390f415a991dcd319056d18f9be915bc75471b986dc3310a6075a28e2b46c5118ad5a33482a25ed7092e461996edaac1040898b31e827c7c8a49352c998e1a9e5a637b6b911c38a0d3a0d9ef3bb2e13977cebe5a491d736c8fb190e081d7246bb95b92d708226a30b7f28f17e4db5ff2f8c5a8ede4c7993b2f7d550e7488c945dc3a8ac6f62627f7fe8e3791b01f9f19e74d9d675c33d931c3b1f284cd0bec8e5b8f41201a5860ff6f8d23a818f7ac61b049aec5330a87f066a0ddf6e76c5cbbbfac5fed4e9bf5dec5243b8a0fd84ae9a146d53d61a5823734ab54a93c80f1d247962c0dd7bc6fa7ea9b2026bce992a6a391e7897ace49994507c33384dbce58c185e79d57c3f30b48e65b59f712b03f4eee955a63562fe92b577bf57ac2f1bbd91357fc4ee031708d41817f247b0707a247d62522ea4bd63a87fb2050f627c564b29765285e24394fa2d98f013fe12ab2d558b679f7eda60517c66409898655a08fb4123b86749e5dc2801567ee10ffbf4e6fe4424ec461a2bea05ba760bd1e0f703dcab3a596677bb627d2b08350dbaeaaa56a957b2e7c5767e1088135ea820fb9966f07dc6f40b807db85bc6823739f149f27e47ce89aebccf08039115a0b3c78d3bf4a6a46b56fa4e0babfa940fa6dba786d14ddafe563501642e769e88cc93f1184d9d4c148bf85e00fca5d7458978499bfea5ec0f454a304e976f4ec570fa5f9c4246a145a5befe65082cbc2eec271938676e6e774817fc32722c36629a2f2a5d98576c9ce376508d37f45b6dec8bb8ee45cceb03d6803c2860dfc7e296b88448d47295f3eadd123e3c06edda474a170c449795b501d20804078c0d91b39f32ff1d446287efdd6a6614e1e46fc9dbc2822d66d90d514ff50ac5c2dff9bd46282f186a025cd8fe8d736495121c127a7235b4c2f2221b0b0e3c161cb22aa3f2a163787cd1c021c31561cbb626e6251cd13e08c7b49fff248e85c5ce0d3dcce32eca7494ead9f8d7ae3d45c990453d1e566b786e3a57633c4b2544288ef1c35f8816f943cd5ae749be1c6618683cfd967a66db7b20684f9b20aae1bb6ebcfe7d8a4b4174a5e2f81784b1ce123559ca0bd6a2cceac5b7bfa38e6cebcde87819b215ee1226bc5ac99bc0ad2006dac0870782f077e07adfe7a8c0e44547117fd74f5c965a1cb769bd989297e70a0a222bb5211be5c90c2a5457004a8bf8fc79e295b3ec8883d84a3377879785329ff2709cf4d9248033053d578cc21233fd91f0ff4b9760208dd1d16957f75286335a1e2ab88a4dcd27760558a09272c70178674be0c4cb9716972c38940e40143f5d48097e18f2e74742119e39660a641b80ff105e04f660119a6c1725e504a6ddf922b3e162ef60eaf4f5e2dd68b3419b713c30eaf195d1d4b212d5b9763d893649dc7db6316eac2b82d1555a363fc4c09938970d6ae4a27f3bf8cd537c6163f298be38700893000e449fb72f8842e3c2f9214747db4971562ca1fdaf2a578fcd9f53c148f73bfd15129fcaffef13ce9f9764781fc09dc3f506d845b9bd9a2c8c9af810db4b3c361c0ca3edd73a0735cf7b2c7b416362970ea1e952cc08774827d8a0fbde1b5af6fb20523faa09c3bb953a21aaea8d30911d267b9dd4c4b66da1da2db9ed91544b3454620d91c8d71a68da02a2638cfce3b102431796ec9960a148b28e58356c515c2869344cab9a4da5e2fc8af89b5d556f371f8c044e47fec3d55cb1927b7bcf7d62ea6121fbb7d4a08b4f5ad2f9ccf1cdc3f3835631fdc56dadfbbe669fb49803ffbd2101cf92efb3da4c8de12eae307c5d55f6c715ec56aae5a619d5162299426e508743194a7ea1bf8bdd02f4ad7dd9f71c4df46541e328f00777a2b04983d8c958fd22f352e67190fedbe8324af9580c6c4de766078bfb8d3ddeeefb4bce2c44a1f8e09b7908d97b18826c2ccfd2191424289fa55c3c9f8986f32e0e5e384ece5567bfb7d65fb0418ac6e9e0421751c4bc22dcda00ae8c2c31a4ab627dbb60f4cf3c822a0bd7dd79297a4037ae0bb4e1ed04a578c2d14c948f33ce5955f91e1559536212e595da83ee766ad0c944ab9fafe0dbc1de2a40267fe1642d1b806aac8eac4e16823580b4d4a848f29bf9a15edc32687471fb2eceb607e520b6f467c31c9415d9090f4dd4f9ec833236db3f2038513f51e3c24cfbd3baa6d415f5729dfb8f5cd18a07e7aa05f41edb864433be85766c47c01877d4636d4fe2558872dfe9e9a6a7b6dd646520f26948921e35eb9f0273508c89305e1ea50d46ee668c2951b684172ad81534244b49c39dbafa2501f56551ff6ba197b3888aff2cce16b8db43b0e2991f35b0d0cede677fb464f0cc04920737a3ff0412d3ce15ed5739e19fbc11e0989045e0944165392662b2393a78fa1c469862d59a04c57c7dca1858cfc43eacae924c691fc0a720f054aaf768256bd95b0d6e7b8fbc91c5d7b4650dcf49ea9f8d735461c16a7e94be38b6d64a63710474241fbe6ec239ad4dd05e135c6e0b3f8eeac531612984d20477f6baeaa380bf39aa5800534221ef8392f3985474fcc99f89a53986dc55f439852c9219ffdd94c04ded346b987f9a9af3a71e1fa762242c60a3b73f46670ce4234c6653302b947d248b501397922de0960df30ca0d2064030637cdbffd3bb875ac3d21028dc707dd5cdbb4e09517c6ce0294aac450ebfd0a12b2d64b67d387d06c532f6cfa8f2d5b21f4d38838f17fb488dcdfdeef7f4fda944eddffb06091f3553963f7712196c942d83cf833ca0f", 0xff0}, {&(0x7f0000001c40)}, {&(0x7f0000001c80)="98ae93e1bd36c3ddf05693f22f06f17dd32290b4ef94269acd3dd297911209c23fb4e099f96067cccec401f3d7602cc9d7cdc51ad3928aef9d7b8f2b24b1801d6ce10db7f44652f82dadb128d501e4cb66645143e4676ce22eb343f2293892046daf3efb0152aeaf971849431bb3e68166fda5102c1dcb49b0b844c427350882bd41f5b2f69bf14672df14bf6590a791934a3baf9754c96c9c8f91fc646444bf2b5d88d3c473772d3f9a0f9e8bf617cfa5688558fc3af6cd4d7b0a09eaeb1189cded848759e9ab4a8d2b0efd6af1c9d775fd03a27403fa1cc113631342cd0613f848e2df76392ed31f47f9b6eb55cc39e4cf171c841cf1", 0xf7}], 0x8, &(0x7f0000001fc0)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}], 0x80}, 0x20004000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r12 = socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_int(r13, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f0000000500)=r11, 0x4) sendmsg$inet(r12, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) kernel console output (not intermixed with test programs): z.3.6629': attribute type 29 has an invalid length. [ 1185.361016][T25365] netlink: 'syz.0.6631': attribute type 3 has an invalid length. [ 1185.379956][T25365] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6631'. [ 1185.655082][T25388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6639'. [ 1186.824811][T25406] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6646'. [ 1186.873939][T25406] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6646'. [ 1186.893860][T25415] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6646'. [ 1187.320278][T25427] netlink: 'syz.3.6654': attribute type 9 has an invalid length. [ 1187.369671][T25427] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6654'. [ 1187.661030][T25439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1188.027888][T25442] delete_channel: no stack [ 1189.094696][T25474] netlink: 'syz.4.6669': attribute type 1 has an invalid length. [ 1189.117993][T25474] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6669'. [ 1189.408114][T25482] netlink: 'syz.0.6673': attribute type 3 has an invalid length. [ 1189.484012][T25482] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6673'. [ 1190.743632][T25525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6688'. [ 1190.835246][T25531] netlink: 'syz.4.6690': attribute type 1 has an invalid length. [ 1190.870537][T25531] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.6690'. [ 1190.925462][T25532] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6689'. [ 1190.945493][T25532] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6689'. [ 1191.003099][T25532] bond0: (slave bond_slave_0): Releasing backup interface [ 1191.042865][T25532] device bond_slave_0 left promiscuous mode [ 1191.107400][T25532] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1192.049324][T25564] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6702'. [ 1192.137448][T25564] netlink: zone id is out of range [ 1192.162523][T25564] netlink: zone id is out of range [ 1192.178575][T25564] netlink: zone id is out of range [ 1192.183771][T25564] netlink: zone id is out of range [ 1192.238547][T25564] netlink: zone id is out of range [ 1192.243916][T25564] netlink: zone id is out of range [ 1192.267875][T25564] netlink: zone id is out of range [ 1192.273500][T25564] netlink: zone id is out of range [ 1192.676394][T25580] netlink: 'syz.4.6708': attribute type 10 has an invalid length. [ 1192.738051][T25580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.838677][T25580] device bridge_slave_1 left promiscuous mode [ 1192.888199][T25580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.095474][T25580] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1193.216949][T25581] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 1193.523061][T25597] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6713'. [ 1194.082544][T25601] netlink: 'syz.0.6712': attribute type 1 has an invalid length. [ 1194.172051][T25601] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.6712'. [ 1194.423290][T25610] sctp: [Deprecated]: syz.4.6715 (pid 25610) Use of int in max_burst socket option deprecated. [ 1194.423290][T25610] Use struct sctp_assoc_value instead [ 1194.597843][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 1195.945173][T25628] netlink: 'syz.1.6722': attribute type 10 has an invalid length. [ 1196.006936][T25628] team0: Device wg1 is up. Set it down before adding it as a team port [ 1196.043949][T25638] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6723'. [ 1196.079335][T25639] netlink: 'syz.2.6720': attribute type 10 has an invalid length. [ 1196.145319][T25639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6720'. [ 1196.202317][T25639] bridge0: port 3(dummy0) entered blocking state [ 1196.288781][T25639] bridge0: port 3(dummy0) entered disabled state [ 1196.429549][T25639] device dummy0 entered promiscuous mode [ 1196.487655][T25639] bridge0: port 3(dummy0) entered blocking state [ 1196.494221][T25639] bridge0: port 3(dummy0) entered forwarding state [ 1198.200315][T25677] netlink: 'syz.3.6738': attribute type 9 has an invalid length. [ 1198.247875][T25677] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1200.498778][T25722] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6752'. [ 1201.314087][T25745] netlink: 'syz.4.6760': attribute type 3 has an invalid length. [ 1201.478492][T25745] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6760'. [ 1202.560940][T25772] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6769'. [ 1202.616256][T25775] netlink: 'syz.3.6768': attribute type 10 has an invalid length. [ 1202.804904][T25778] netlink: 'syz.3.6768': attribute type 1 has an invalid length. [ 1202.863948][T25778] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6768'. [ 1204.224102][T25815] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6783'. [ 1204.263431][T25815] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1204.336753][T25815] net_ratelimit: 139 callbacks suppressed [ 1204.336771][T25815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1204.391931][T25816] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6783'. [ 1204.401544][T25816] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1204.457998][T25816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1204.638670][T25831] netlink: 'syz.1.6788': attribute type 10 has an invalid length. [ 1205.210323][T25845] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.6793'. [ 1205.399299][T25842] netlink: 'syz.2.6792': attribute type 10 has an invalid length. [ 1205.512061][T25842] team0: Device vxcan1 is of different type [ 1205.610612][T25845] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.6793'. [ 1206.086324][T25853] netlink: 'syz.1.6796': attribute type 29 has an invalid length. [ 1206.147048][T25853] netlink: 'syz.1.6796': attribute type 29 has an invalid length. [ 1206.171485][T25853] netlink: 'syz.1.6796': attribute type 29 has an invalid length. [ 1206.214059][T25853] netlink: 'syz.1.6796': attribute type 29 has an invalid length. [ 1206.749174][T25856] netlink: 'syz.0.6797': attribute type 2 has an invalid length. [ 1206.769212][T25856] netlink: 'syz.0.6797': attribute type 8 has an invalid length. [ 1206.777215][T25856] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6797'. [ 1206.827814][T25862] device bond0 entered promiscuous mode [ 1206.886947][T25862] device bond_slave_0 entered promiscuous mode [ 1206.913149][T25862] device bond_slave_1 entered promiscuous mode [ 1207.066936][T25856] netlink: 'syz.0.6797': attribute type 2 has an invalid length. [ 1207.079975][T25856] netlink: 'syz.0.6797': attribute type 8 has an invalid length. [ 1207.107931][T25856] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6797'. [ 1207.287907][T25872] netlink: 'syz.4.6801': attribute type 4 has an invalid length. [ 1207.295734][T25872] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6801'. [ 1211.228901][T25912] netlink: 'syz.4.6815': attribute type 2 has an invalid length. [ 1211.237092][T25912] netlink: 'syz.4.6815': attribute type 8 has an invalid length. [ 1211.271987][T25912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6815'. [ 1211.305622][T25912] netlink: 'syz.4.6815': attribute type 2 has an invalid length. [ 1211.328828][T25912] netlink: 'syz.4.6815': attribute type 8 has an invalid length. [ 1211.337071][T25912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6815'. [ 1212.134997][T25935] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6822'. [ 1212.160197][T25935] : renamed from caif0 [ 1212.645335][T25935] device  entered promiscuous mode [ 1212.658175][T25935] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1212.995361][T25956] netlink: 'syz.4.6830': attribute type 10 has an invalid length. [ 1213.199829][T25964] netlink: 'syz.0.6829': attribute type 4 has an invalid length. [ 1213.244542][T25964] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6829'. [ 1213.448517][T25972] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6836'. [ 1213.932763][T25980] netlink: 'syz.0.6838': attribute type 3 has an invalid length. [ 1213.970007][T25981] device syzkaller0 entered promiscuous mode [ 1213.983632][T25980] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6838'. [ 1214.754912][T25999] netlink: 'syz.2.6845': attribute type 3 has an invalid length. [ 1214.796938][T25999] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6845'. [ 1215.575901][ T6415] device team0 left promiscuous mode [ 1215.595693][ T6415] device team_slave_1 left promiscuous mode [ 1215.619514][ T6415] ¥: port 1(team0) entered disabled state [ 1215.642148][ T6415] device hsr_slave_0 left promiscuous mode [ 1215.659698][ T6415] device hsr_slave_1 left promiscuous mode [ 1215.727481][ T6415] device veth1_macvtap left promiscuous mode [ 1215.914836][T26020] netlink: 'syz.2.6849': attribute type 4 has an invalid length. [ 1215.970849][T26023] netlink: 'syz.3.6852': attribute type 9 has an invalid length. [ 1215.979550][T26020] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1216.035145][T26023] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.6852'. [ 1216.394627][T26033] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1217.005485][ T6415] team0 (unregistering): Port device team_slave_1 removed [ 1217.529946][T26016] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1217.562195][T26016] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1217.582425][T26016] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1217.826490][T26046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6858'. [ 1217.868205][T26046] : renamed from caif0 [ 1218.168874][T26046] device  entered promiscuous mode [ 1218.209436][T26046] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1218.292649][T26051] netlink: 'syz.2.6862': attribute type 13 has an invalid length. [ 1218.310876][T26051] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6862'. [ 1218.339550][T26051] syz_tun: refused to change device tx_queue_len [ 1218.366601][T26051] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1219.296954][T26079] netlink: 'syz.0.6871': attribute type 39 has an invalid length. [ 1219.309678][T26079] FAULT_INJECTION: forcing a failure. [ 1219.309678][T26079] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.358405][T26079] CPU: 0 PID: 26079 Comm: syz.0.6871 Not tainted syzkaller #0 [ 1219.365933][T26079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1219.376030][T26079] Call Trace: [ 1219.379350][T26079] [ 1219.382308][T26079] dump_stack_lvl+0x188/0x24e [ 1219.387010][T26079] ? show_regs_print_info+0x12/0x12 [ 1219.392228][T26079] ? load_image+0x410/0x410 [ 1219.396764][T26079] ? __lock_acquire+0x7c40/0x7c40 [ 1219.401828][T26079] should_fail_ex+0x390/0x4c0 [ 1219.406543][T26079] should_failslab+0x5/0x20 [ 1219.411064][T26079] slab_pre_alloc_hook+0x59/0x300 [ 1219.416106][T26079] ? br_netlink_fini+0x30/0x30 [ 1219.420902][T26079] kmem_cache_alloc_node+0x5a/0x310 [ 1219.426126][T26079] ? if_nlmsg_size+0x659/0x960 [ 1219.430906][T26079] ? __alloc_skb+0xf9/0x7d0 [ 1219.435435][T26079] __alloc_skb+0xf9/0x7d0 [ 1219.439794][T26079] rtmsg_ifinfo_build_skb+0x80/0x190 [ 1219.445102][T26079] rtmsg_ifinfo+0xc4/0x200 [ 1219.449549][T26079] dev_close_many+0x278/0x400 [ 1219.454255][T26079] ? __dev_open+0x430/0x430 [ 1219.458786][T26079] unregister_netdevice_many_notify+0x497/0x1990 [ 1219.465131][T26079] ? __nla_validate+0x50/0x50 [ 1219.469837][T26079] ? unregister_netdevice_many+0x20/0x20 [ 1219.475499][T26079] ? unregister_netdevice_queue+0x17c/0x330 [ 1219.481413][T26079] ? list_netdevice+0x640/0x640 [ 1219.486281][T26079] ? __nla_parse+0x3c/0x50 [ 1219.490737][T26079] ? list_netdevice+0x640/0x640 [ 1219.495600][T26079] rtnl_dellink+0x55d/0x830 [ 1219.500123][T26079] ? lockdep_hardirqs_on+0x94/0x140 [ 1219.505352][T26079] ? rtnl_newlink+0x1f90/0x1f90 [ 1219.510227][T26079] ? __schedule+0x1087/0x4030 [ 1219.514969][T26079] ? rtnl_newlink+0x1f90/0x1f90 [ 1219.519839][T26079] rtnetlink_rcv_msg+0x863/0xfb0 [ 1219.524800][T26079] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1219.529939][T26079] ? rtnetlink_bind+0x80/0x80 [ 1219.534635][T26079] ? __local_bh_enable_ip+0x136/0x1c0 [ 1219.540043][T26079] ? lockdep_hardirqs_on+0x94/0x140 [ 1219.545264][T26079] ? __local_bh_enable_ip+0x136/0x1c0 [ 1219.550678][T26079] ? _local_bh_enable+0xa0/0xa0 [ 1219.555551][T26079] ? __dev_queue_xmit+0x281/0x3810 [ 1219.560732][T26079] ? __dev_queue_xmit+0x281/0x3810 [ 1219.565878][T26079] ? __dev_queue_xmit+0x1d84/0x3810 [ 1219.571132][T26079] ? __dev_queue_xmit+0x281/0x3810 [ 1219.576289][T26079] ? ref_tracker_free+0x682/0x830 [ 1219.581349][T26079] ? refcount_inc+0x70/0x70 [ 1219.585888][T26079] ? memcpy+0x3c/0x60 [ 1219.589890][T26079] ? __copy_skb_header+0x3ba/0x4f0 [ 1219.595029][T26079] ? __skb_clone+0x446/0x6c0 [ 1219.599659][T26079] netlink_rcv_skb+0x1ef/0x440 [ 1219.604455][T26079] ? rtnetlink_bind+0x80/0x80 [ 1219.609206][T26079] ? netlink_ack+0x1160/0x1160 [ 1219.614035][T26079] ? netlink_deliver_tap+0x2e/0x1b0 [ 1219.619255][T26079] netlink_unicast+0x7ad/0x920 [ 1219.624091][T26079] netlink_sendmsg+0x8ad/0xbd0 [ 1219.628890][T26079] ? netlink_getsockopt+0x550/0x550 [ 1219.634207][T26079] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1219.639801][T26079] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1219.645216][T26079] ? security_socket_sendmsg+0x7c/0xa0 [ 1219.650730][T26079] ? netlink_getsockopt+0x550/0x550 [ 1219.655958][T26079] ____sys_sendmsg+0x5ed/0x9a0 [ 1219.660751][T26079] ? __sys_sendmsg_sock+0x30/0x30 [ 1219.665814][T26079] ? __import_iovec+0x306/0x510 [ 1219.670693][T26079] ? import_iovec+0x6f/0xa0 [ 1219.675229][T26079] ___sys_sendmsg+0x2a2/0x360 [ 1219.679939][T26079] ? __sys_sendmsg+0x2a0/0x2a0 [ 1219.684759][T26079] ? trace_call_bpf+0xbf/0x6b0 [ 1219.689580][T26079] __se_sys_sendmsg+0x1c3/0x2b0 [ 1219.694457][T26079] ? ct_nmi_exit+0x145/0x1c0 [ 1219.699086][T26079] ? __x64_sys_sendmsg+0x80/0x80 [ 1219.704080][T26079] ? lockdep_hardirqs_on+0x94/0x140 [ 1219.709307][T26079] do_syscall_64+0x4c/0xa0 [ 1219.713781][T26079] ? clear_bhb_loop+0x60/0xb0 [ 1219.718477][T26079] ? clear_bhb_loop+0x60/0xb0 [ 1219.723181][T26079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1219.729111][T26079] RIP: 0033:0x7f786d99e159 [ 1219.733557][T26079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.753205][T26079] RSP: 002b:00007f786e912028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.761686][T26079] RAX: ffffffffffffffda RBX: 00007f786dc26090 RCX: 00007f786d99e159 [ 1219.769714][T26079] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1219.777715][T26079] RBP: 00007f786e912090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.785705][T26079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.793691][T26079] R13: 00007f786dc26128 R14: 00007f786dc26090 R15: 00007ffe38075778 [ 1219.801779][T26079] [ 1219.859503][T26085] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6873'. [ 1219.943612][ T4278] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1219.951620][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1219.962157][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1219.969766][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1219.979870][ T4278] Workqueue: hci0 hci_rx_work [ 1219.984614][ T4278] Call Trace: [ 1219.987938][ T4278] [ 1219.990896][ T4278] dump_stack_lvl+0x188/0x24e [ 1219.995617][ T4278] ? show_regs_print_info+0x12/0x12 [ 1220.000902][ T4278] ? load_image+0x410/0x410 [ 1220.005482][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 1220.010652][ T4278] ? __lock_acquire+0x7c40/0x7c40 [ 1220.015731][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 1220.020481][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 1220.025731][ T4278] kobject_add_internal+0x617/0xca0 [ 1220.030996][ T4278] kobject_add+0x160/0x230 [ 1220.035470][ T4278] ? kobject_init+0x1c0/0x1c0 [ 1220.040200][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 1220.045544][ T4278] ? klist_children_get+0x50/0x50 [ 1220.050615][ T4278] ? get_device_parent+0x121/0x3e0 [ 1220.055788][ T4278] device_add+0x470/0x1050 [ 1220.060264][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 1220.065255][ T4278] le_conn_complete_evt+0xf93/0x15c0 [ 1220.070612][ T4278] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1220.076934][ T4278] ? bt_info+0x180/0x180 [ 1220.081226][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1220.086911][ T4278] ? mutex_unlock+0x10/0x10 [ 1220.091452][ T4278] ? skb_pull_data+0xec/0x1f0 [ 1220.096164][ T4278] hci_le_conn_complete_evt+0x183/0x440 [ 1220.101840][ T4278] ? hci_remote_host_features_evt+0x230/0x230 [ 1220.107942][ T4278] hci_event_packet+0x7b3/0x1290 [ 1220.112930][ T4278] ? lock_chain_count+0x20/0x20 [ 1220.117822][ T4278] ? bis_list+0x280/0x280 [ 1220.122189][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1220.128114][ T4278] ? kcov_remote_start+0x50f/0x810 [ 1220.133256][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 1220.138494][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 1220.143748][ T4278] hci_rx_work+0x3eb/0xd40 [ 1220.148304][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 1220.153190][ T4278] ? process_one_work+0x7b4/0x1160 [ 1220.158334][ T4278] process_one_work+0x8ab/0x1160 [ 1220.163331][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1220.168999][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1220.174065][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1220.179144][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1220.184724][ T4278] ? wq_worker_running+0x97/0x190 [ 1220.189771][ T4278] worker_thread+0xaf5/0x12a0 [ 1220.194497][ T4278] kthread+0x29d/0x330 [ 1220.198588][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1220.203650][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1220.208276][ T4278] ret_from_fork+0x1f/0x30 [ 1220.212752][ T4278] [ 1220.222382][ T4278] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1220.237139][ T4278] Bluetooth: hci0: failed to register connection device [ 1220.585121][T26088] device bond0 entered promiscuous mode [ 1220.601352][T26088] device bond_slave_0 entered promiscuous mode [ 1220.628556][T26088] device bond_slave_1 entered promiscuous mode [ 1220.909745][T26099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6877'. [ 1220.953806][T26099] : renamed from caif0 [ 1221.069555][T26099] device  entered promiscuous mode [ 1221.075081][T26099] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1222.278007][ T4278] Bluetooth: hci0: command 0x2016 tx timeout [ 1222.648271][ T4278] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1222.656137][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1222.666048][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1222.673648][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1222.683758][ T4278] Workqueue: hci4 hci_rx_work [ 1222.688517][ T4278] Call Trace: [ 1222.691864][ T4278] [ 1222.694825][ T4278] dump_stack_lvl+0x188/0x24e [ 1222.699573][ T4278] ? show_regs_print_info+0x12/0x12 [ 1222.704841][ T4278] ? load_image+0x410/0x410 [ 1222.709437][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 1222.714601][ T4278] ? __lock_acquire+0x7c40/0x7c40 [ 1222.719683][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 1222.724422][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 1222.729666][ T4278] kobject_add_internal+0x617/0xca0 [ 1222.734916][ T4278] kobject_add+0x160/0x230 [ 1222.739393][ T4278] ? kobject_init+0x1c0/0x1c0 [ 1222.744197][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 1222.749531][ T4278] ? klist_children_get+0x50/0x50 [ 1222.754582][ T4278] ? get_device_parent+0x121/0x3e0 [ 1222.759730][ T4278] device_add+0x470/0x1050 [ 1222.764194][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 1222.769167][ T4278] le_conn_complete_evt+0xf93/0x15c0 [ 1222.774504][ T4278] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1222.780781][ T4278] ? bt_info+0x180/0x180 [ 1222.785051][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1222.790716][ T4278] ? mutex_unlock+0x10/0x10 [ 1222.795247][ T4278] ? skb_pull_data+0xec/0x1f0 [ 1222.799957][ T4278] hci_le_conn_complete_evt+0x183/0x440 [ 1222.805546][ T4278] ? hci_remote_host_features_evt+0x230/0x230 [ 1222.811636][ T4278] hci_event_packet+0x7b3/0x1290 [ 1222.816613][ T4278] ? lock_chain_count+0x20/0x20 [ 1222.821514][ T4278] ? bis_list+0x280/0x280 [ 1222.825961][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1222.831888][ T4278] ? kcov_remote_start+0x50f/0x810 [ 1222.837022][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 1222.842255][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 1222.847496][ T4278] hci_rx_work+0x3eb/0xd40 [ 1222.851944][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 1222.856834][ T4278] ? process_one_work+0x7b4/0x1160 [ 1222.861972][ T4278] process_one_work+0x8ab/0x1160 [ 1222.866950][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1222.872611][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1222.877687][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1222.882738][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1222.888313][ T4278] ? wq_worker_running+0x97/0x190 [ 1222.893370][ T4278] worker_thread+0xaf5/0x12a0 [ 1222.898109][ T4278] kthread+0x29d/0x330 [ 1222.902188][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1222.907230][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1222.911840][ T4278] ret_from_fork+0x1f/0x30 [ 1222.916299][ T4278] [ 1222.921166][ T4278] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1222.934357][ T4278] Bluetooth: hci4: failed to register connection device [ 1223.152247][T26137] netlink: 'syz.3.6888': attribute type 39 has an invalid length. [ 1224.998466][ T4278] Bluetooth: hci4: command 0x2016 tx timeout [ 1225.260073][T26155] netlink: 'syz.2.6893': attribute type 9 has an invalid length. [ 1225.291456][T26155] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6893'. [ 1225.403326][T26162] netlink: 'syz.1.6894': attribute type 3 has an invalid length. [ 1225.419278][T26162] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6894'. [ 1225.863777][T26175] netlink: 'syz.3.6898': attribute type 10 has an invalid length. [ 1226.001703][T26179] netlink: 'syz.1.6900': attribute type 10 has an invalid length. [ 1226.045139][T26179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.053984][T26179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.117555][T26179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.125201][T26179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.134395][T26179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.141880][T26179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.319091][T26179] team0: Port device bridge0 added [ 1226.475084][ T4278] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1226.476824][T26193] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6905'. [ 1226.485170][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1226.485223][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1226.485246][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1226.485261][ T4278] Workqueue: hci0 hci_rx_work [ 1226.485298][ T4278] Call Trace: [ 1226.485306][ T4278] [ 1226.485316][ T4278] dump_stack_lvl+0x188/0x24e [ 1226.485346][ T4278] ? show_regs_print_info+0x12/0x12 [ 1226.485371][ T4278] ? load_image+0x410/0x410 [ 1226.485418][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 1226.485448][ T4278] ? __lock_acquire+0x7c40/0x7c40 [ 1226.485480][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 1226.485513][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 1226.485541][ T4278] kobject_add_internal+0x617/0xca0 [ 1226.485578][ T4278] kobject_add+0x160/0x230 [ 1226.485612][ T4278] ? kobject_init+0x1c0/0x1c0 [ 1226.485643][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 1226.485664][ T4278] ? klist_children_get+0x50/0x50 [ 1226.485687][ T4278] ? get_device_parent+0x121/0x3e0 [ 1226.485791][ T4278] device_add+0x470/0x1050 [ 1226.485833][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 1226.485863][ T4278] le_conn_complete_evt+0xf93/0x15c0 [ 1226.485911][ T4278] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1226.485951][ T4278] ? bt_info+0x180/0x180 [ 1226.485974][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1226.486009][ T4278] ? mutex_unlock+0x10/0x10 [ 1226.486034][ T4278] ? skb_pull_data+0xec/0x1f0 [ 1226.486068][ T4278] hci_le_conn_complete_evt+0x183/0x440 [ 1226.486111][ T4278] ? hci_remote_host_features_evt+0x230/0x230 [ 1226.486141][ T4278] hci_event_packet+0x7b3/0x1290 [ 1226.486176][ T4278] ? lock_chain_count+0x20/0x20 [ 1226.486215][ T4278] ? bis_list+0x280/0x280 [ 1226.486239][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1226.486278][ T4278] ? kcov_remote_start+0x50f/0x810 [ 1226.486305][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 1226.486341][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 1226.486382][ T4278] hci_rx_work+0x3eb/0xd40 [ 1226.486417][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 1226.486459][ T4278] ? process_one_work+0x7b4/0x1160 [ 1226.486490][ T4278] process_one_work+0x8ab/0x1160 [ 1226.486537][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1226.486564][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1226.486602][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1226.486634][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1226.486670][ T4278] ? wq_worker_running+0x97/0x190 [ 1226.486697][ T4278] worker_thread+0xaf5/0x12a0 [ 1226.486761][ T4278] kthread+0x29d/0x330 [ 1226.486782][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1226.486808][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1226.486834][ T4278] ret_from_fork+0x1f/0x30 [ 1226.486883][ T4278] [ 1226.486909][ T4278] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1226.486940][ T4278] Bluetooth: hci0: failed to register connection device [ 1227.224632][T26205] netlink: 'syz.4.6909': attribute type 3 has an invalid length. [ 1227.253618][T26205] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6909'. [ 1227.935668][T26221] netlink: 'syz.3.6925': attribute type 3 has an invalid length. [ 1227.957916][T26221] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6925'. [ 1227.986811][T26221] netlink: 'syz.3.6925': attribute type 10 has an invalid length. [ 1228.272218][T26223] netlink: 'syz.4.6915': attribute type 10 has an invalid length. [ 1228.517678][ T4278] Bluetooth: hci0: command 0x2016 tx timeout [ 1228.641541][ T4278] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1228.649555][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1228.659481][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1228.667126][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1228.677234][ T4278] Workqueue: hci1 hci_rx_work [ 1228.681973][ T4278] Call Trace: [ 1228.685286][ T4278] [ 1228.688255][ T4278] dump_stack_lvl+0x188/0x24e [ 1228.692980][ T4278] ? show_regs_print_info+0x12/0x12 [ 1228.698225][ T4278] ? load_image+0x410/0x410 [ 1228.702799][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 1228.707964][ T4278] ? __lock_acquire+0x7c40/0x7c40 [ 1228.713042][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 1228.717780][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 1228.723022][ T4278] kobject_add_internal+0x617/0xca0 [ 1228.728273][ T4278] kobject_add+0x160/0x230 [ 1228.732734][ T4278] ? kobject_init+0x1c0/0x1c0 [ 1228.737451][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 1228.742771][ T4278] ? klist_children_get+0x50/0x50 [ 1228.747819][ T4278] ? get_device_parent+0x121/0x3e0 [ 1228.752962][ T4278] device_add+0x470/0x1050 [ 1228.757411][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 1228.762388][ T4278] le_conn_complete_evt+0xf93/0x15c0 [ 1228.767716][ T4278] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1228.773993][ T4278] ? bt_info+0x180/0x180 [ 1228.778291][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1228.783960][ T4278] ? mutex_unlock+0x10/0x10 [ 1228.788486][ T4278] ? skb_pull_data+0xec/0x1f0 [ 1228.793190][ T4278] hci_le_conn_complete_evt+0x183/0x440 [ 1228.798789][ T4278] ? hci_remote_host_features_evt+0x230/0x230 [ 1228.804901][ T4278] hci_event_packet+0x7b3/0x1290 [ 1228.809873][ T4278] ? lock_chain_count+0x20/0x20 [ 1228.814752][ T4278] ? bis_list+0x280/0x280 [ 1228.819118][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1228.825041][ T4278] ? kcov_remote_start+0x50f/0x810 [ 1228.830207][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 1228.835435][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 1228.840695][ T4278] hci_rx_work+0x3eb/0xd40 [ 1228.845313][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 1228.850201][ T4278] ? process_one_work+0x7b4/0x1160 [ 1228.855345][ T4278] process_one_work+0x8ab/0x1160 [ 1228.860332][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1228.865989][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1228.871049][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1228.876105][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1228.881689][ T4278] ? wq_worker_running+0x97/0x190 [ 1228.886753][ T4278] worker_thread+0xaf5/0x12a0 [ 1228.891477][ T4278] kthread+0x29d/0x330 [ 1228.895568][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1228.900618][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1228.905230][ T4278] ret_from_fork+0x1f/0x30 [ 1228.909684][ T4278] [ 1228.919608][ T4278] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1228.935628][ T4278] Bluetooth: hci1: failed to register connection device [ 1229.016546][T26223] team0 (unregistering): Port device team_slave_0 removed [ 1229.051016][T26223] team0 (unregistering): Port device team_slave_1 removed [ 1229.082313][T26248] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6921'. [ 1229.503483][T26251] netlink: 'syz.3.6923': attribute type 3 has an invalid length. [ 1229.518071][T26251] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6923'. [ 1230.849657][T26291] netlink: 'syz.4.6937': attribute type 2 has an invalid length. [ 1230.928008][T26291] netlink: 'syz.4.6937': attribute type 4 has an invalid length. [ 1230.969121][T26291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6937'. [ 1230.998858][ T4278] Bluetooth: hci1: command 0x2016 tx timeout [ 1231.449411][T26303] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6942'. [ 1231.681892][T26310] netlink: 'syz.3.6944': attribute type 3 has an invalid length. [ 1231.739810][T26310] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6944'. [ 1232.005257][ T4278] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1232.013851][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1232.023539][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1232.031137][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1232.041217][ T4278] Workqueue: hci1 hci_rx_work [ 1232.045971][ T4278] Call Trace: [ 1232.049281][ T4278] [ 1232.052267][ T4278] dump_stack_lvl+0x188/0x24e [ 1232.057014][ T4278] ? show_regs_print_info+0x12/0x12 [ 1232.062269][ T4278] ? load_image+0x410/0x410 [ 1232.066836][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 1232.072048][ T4278] ? __lock_acquire+0x7c40/0x7c40 [ 1232.077122][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 1232.081872][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 1232.087122][ T4278] kobject_add_internal+0x617/0xca0 [ 1232.092386][ T4278] kobject_add+0x160/0x230 [ 1232.096854][ T4278] ? kobject_init+0x1c0/0x1c0 [ 1232.101674][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 1232.106995][ T4278] ? klist_children_get+0x50/0x50 [ 1232.112082][ T4278] ? get_device_parent+0x121/0x3e0 [ 1232.117243][ T4278] device_add+0x470/0x1050 [ 1232.121731][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 1232.126730][ T4278] le_conn_complete_evt+0xf93/0x15c0 [ 1232.132103][ T4278] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1232.138418][ T4278] ? bt_info+0x180/0x180 [ 1232.142724][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1232.148420][ T4278] ? mutex_unlock+0x10/0x10 [ 1232.152975][ T4278] ? skb_pull_data+0xec/0x1f0 [ 1232.157708][ T4278] hci_le_conn_complete_evt+0x183/0x440 [ 1232.163313][ T4278] ? hci_remote_host_features_evt+0x230/0x230 [ 1232.169443][ T4278] hci_event_packet+0x7b3/0x1290 [ 1232.174516][ T4278] ? lock_chain_count+0x20/0x20 [ 1232.179421][ T4278] ? bis_list+0x280/0x280 [ 1232.183804][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1232.189753][ T4278] ? kcov_remote_start+0x50f/0x810 [ 1232.194911][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 1232.200182][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 1232.205470][ T4278] hci_rx_work+0x3eb/0xd40 [ 1232.209954][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 1232.214871][ T4278] ? process_one_work+0x7b4/0x1160 [ 1232.220207][ T4278] process_one_work+0x8ab/0x1160 [ 1232.225238][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1232.230926][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1232.236010][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1232.241097][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1232.246704][ T4278] ? wq_worker_running+0x97/0x190 [ 1232.251781][ T4278] worker_thread+0xaf5/0x12a0 [ 1232.256534][ T4278] kthread+0x29d/0x330 [ 1232.260649][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1232.265723][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1232.270393][ T4278] ret_from_fork+0x1f/0x30 [ 1232.274886][ T4278] [ 1232.280798][ T4278] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1232.294068][ T4278] Bluetooth: hci1: failed to register connection device [ 1232.837351][T26331] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1232.861299][T26331] bridge_slave_1: default FDB implementation only supports local addresses [ 1233.602901][T26352] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6959'. [ 1234.200250][T26368] device pim6reg1 entered promiscuous mode [ 1234.361004][ T4278] Bluetooth: hci1: command 0x2016 tx timeout [ 1235.135469][ T4278] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1235.144445][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1235.154014][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1235.161619][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1235.171728][ T4278] Workqueue: hci2 hci_rx_work [ 1235.176484][ T4278] Call Trace: [ 1235.179807][ T4278] [ 1235.182780][ T4278] dump_stack_lvl+0x188/0x24e [ 1235.187533][ T4278] ? show_regs_print_info+0x12/0x12 [ 1235.192784][ T4278] ? load_image+0x410/0x410 [ 1235.197385][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 1235.202541][ T4278] ? __lock_acquire+0x7c40/0x7c40 [ 1235.207611][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 1235.212357][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 1235.217702][ T4278] kobject_add_internal+0x617/0xca0 [ 1235.222944][ T4278] kobject_add+0x160/0x230 [ 1235.227395][ T4278] ? kobject_init+0x1c0/0x1c0 [ 1235.232124][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 1235.237462][ T4278] ? klist_children_get+0x50/0x50 [ 1235.242520][ T4278] ? get_device_parent+0x121/0x3e0 [ 1235.247692][ T4278] device_add+0x470/0x1050 [ 1235.252183][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 1235.257163][ T4278] le_conn_complete_evt+0xf93/0x15c0 [ 1235.262504][ T4278] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1235.268787][ T4278] ? bt_info+0x180/0x180 [ 1235.273060][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1235.278728][ T4278] ? mutex_unlock+0x10/0x10 [ 1235.283264][ T4278] ? skb_pull_data+0xec/0x1f0 [ 1235.287991][ T4278] hci_le_conn_complete_evt+0x183/0x440 [ 1235.293589][ T4278] ? hci_remote_host_features_evt+0x230/0x230 [ 1235.299702][ T4278] hci_event_packet+0x7b3/0x1290 [ 1235.304679][ T4278] ? lock_chain_count+0x20/0x20 [ 1235.309568][ T4278] ? bis_list+0x280/0x280 [ 1235.313922][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1235.319854][ T4278] ? kcov_remote_start+0x50f/0x810 [ 1235.325001][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 1235.330231][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 1235.335467][ T4278] hci_rx_work+0x3eb/0xd40 [ 1235.339927][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 1235.344830][ T4278] ? process_one_work+0x7b4/0x1160 [ 1235.349979][ T4278] process_one_work+0x8ab/0x1160 [ 1235.354964][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1235.360633][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1235.365704][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1235.370763][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1235.376347][ T4278] ? wq_worker_running+0x97/0x190 [ 1235.381409][ T4278] worker_thread+0xaf5/0x12a0 [ 1235.386159][ T4278] kthread+0x29d/0x330 [ 1235.390254][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1235.395750][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1235.400371][ T4278] ret_from_fork+0x1f/0x30 [ 1235.404833][ T4278] [ 1235.410236][ T4278] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1235.423402][ T4278] Bluetooth: hci2: failed to register connection device [ 1235.648858][T26388] netlink: 'syz.2.6972': attribute type 10 has an invalid length. [ 1235.656768][T26388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6972'. [ 1237.478311][ T4278] Bluetooth: hci2: command 0x2016 tx timeout [ 1237.911023][T26426] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6982'. [ 1237.976151][T26426] bridge_slave_1: default FDB implementation only supports local addresses [ 1238.101146][T26432] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6983'. [ 1238.753675][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.760667][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.654975][T26438] syz.4.6988[26438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1240.655195][T26438] syz.4.6988[26438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1241.291593][T26460] netlink: 'syz.4.6994': attribute type 1 has an invalid length. [ 1241.380503][T26460] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.6994'. [ 1241.844392][T26473] netlink: 'syz.4.6997': attribute type 3 has an invalid length. [ 1241.914364][T26473] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6997'. [ 1241.961679][T26476] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6999'. [ 1242.007947][T26476] bridge_slave_1: default FDB implementation only supports local addresses [ 1243.723334][T26499] netlink: 'syz.2.7007': attribute type 3 has an invalid length. [ 1243.754776][T26499] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7007'. [ 1243.841559][T26512] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.7011'. [ 1243.899000][T26512] netlink: zone id is out of range [ 1243.906226][T26512] netlink: zone id is out of range [ 1243.929488][T26512] netlink: zone id is out of range [ 1243.958627][T26512] netlink: zone id is out of range [ 1244.286483][T26521] netlink: 'syz.4.7014': attribute type 29 has an invalid length. [ 1244.330474][T26521] netlink: 'syz.4.7014': attribute type 29 has an invalid length. [ 1244.342237][T26526] netlink: 'syz.4.7014': attribute type 29 has an invalid length. [ 1244.369224][T26521] netlink: 'syz.4.7014': attribute type 29 has an invalid length. [ 1244.382749][T26521] netlink: 'syz.4.7014': attribute type 29 has an invalid length. [ 1244.484022][T26526] netlink: 'syz.4.7014': attribute type 29 has an invalid length. [ 1244.544756][T26531] netlink: 'syz.4.7014': attribute type 29 has an invalid length. [ 1244.803863][T26545] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7020'. [ 1244.836538][T26539] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7019'. [ 1244.855890][T26543] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7017'. [ 1244.898108][T26543] bridge_slave_1: default FDB implementation only supports local addresses [ 1245.547511][T26563] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.7025'. [ 1246.624054][T26593] validate_nla: 5 callbacks suppressed [ 1246.624092][T26593] netlink: 'syz.2.7038': attribute type 3 has an invalid length. [ 1246.647943][T26593] netlink: 'syz.2.7038': attribute type 181 has an invalid length. [ 1246.840784][T26604] netlink: 'syz.0.7039': attribute type 3 has an invalid length. [ 1246.852260][T26605] netlink: 'syz.4.7042': attribute type 29 has an invalid length. [ 1246.872369][T26604] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7039'. [ 1246.890044][T26605] netlink: 'syz.4.7042': attribute type 29 has an invalid length. [ 1246.917375][T26603] netlink: 'syz.4.7042': attribute type 29 has an invalid length. [ 1247.179519][T26613] netlink: 'syz.3.7045': attribute type 1 has an invalid length. [ 1247.187349][T26613] netlink: 'syz.3.7045': attribute type 4 has an invalid length. [ 1247.311647][T26613] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7045'. [ 1247.826531][T26624] netlink: 'syz.4.7048': attribute type 10 has an invalid length. [ 1248.062946][T26629] netlink: 'syz.0.7050': attribute type 10 has an invalid length. [ 1248.122418][T26629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7050'. [ 1248.178160][T26629] bridge0: port 2(dummy0) entered blocking state [ 1248.217391][T26629] bridge0: port 2(dummy0) entered disabled state [ 1248.255288][T26629] device dummy0 entered promiscuous mode [ 1248.290454][T26629] bridge0: port 2(dummy0) entered blocking state [ 1248.297090][T26629] bridge0: port 2(dummy0) entered forwarding state [ 1248.535182][T26644] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7057'. [ 1248.592479][T26647] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1248.764180][T26652] __nla_validate_parse: 1 callbacks suppressed [ 1248.764200][T26652] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7061'. [ 1250.221771][T26683] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.7074'. [ 1250.272926][T26688] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7074'. [ 1250.302823][T26686] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1250.917880][T13328] Bluetooth: hci5: command 0x0406 tx timeout [ 1251.226017][T26711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7084'. [ 1251.764313][T26731] validate_nla: 10 callbacks suppressed [ 1251.764331][T26731] netlink: 'syz.0.7092': attribute type 29 has an invalid length. [ 1251.810384][T26733] netlink: 'syz.4.7089': attribute type 12 has an invalid length. [ 1251.872922][T26733] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7089'. [ 1251.970662][T26731] netlink: 'syz.0.7092': attribute type 29 has an invalid length. [ 1252.001451][T26730] netlink: 'syz.0.7092': attribute type 29 has an invalid length. [ 1252.305122][T26745] netlink: 'syz.0.7098': attribute type 3 has an invalid length. [ 1252.369520][T26745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7098'. [ 1253.016403][T26781] netlink: 'syz.3.7106': attribute type 3 has an invalid length. [ 1253.075516][T26781] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7106'. [ 1253.249018][T26776] netlink: 'syz.2.7108': attribute type 10 has an invalid length. [ 1253.257054][T26776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1253.607096][T26794] netlink: 'syz.1.7112': attribute type 13 has an invalid length. [ 1253.636567][T26792] netlink: 'syz.3.7113': attribute type 3 has an invalid length. [ 1253.703347][T26792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7113'. [ 1254.893315][T26816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7119'. [ 1254.936455][T26816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7119'. [ 1254.974035][T26821] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7119'. [ 1255.004603][T26820] netlink: 'syz.4.7122': attribute type 1 has an invalid length. [ 1255.012942][T26820] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7122'. [ 1256.116989][T26856] team0: Device vxcan1 is of different type [ 1256.504160][T26870] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7134'. [ 1256.828170][T26882] sctp: [Deprecated]: syz.0.7137 (pid 26882) Use of int in max_burst socket option deprecated. [ 1256.828170][T26882] Use struct sctp_assoc_value instead [ 1257.213515][T26893] validate_nla: 3 callbacks suppressed [ 1257.213553][T26893] netlink: 'syz.0.7145': attribute type 10 has an invalid length. [ 1257.288222][T26893] team0: Device wg1 is up. Set it down before adding it as a team port [ 1257.334631][T26899] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7147'. [ 1257.629644][T26908] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7150'. [ 1257.756654][T26912] netlink: 'syz.3.7152': attribute type 9 has an invalid length. [ 1257.787641][T26912] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7152'. [ 1257.984515][T26917] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.7153'. [ 1257.997775][T26917] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1258.611398][T26923] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1258.987355][T26938] netlink: 'syz.3.7163': attribute type 13 has an invalid length. [ 1259.676695][T26960] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7168'. [ 1259.721990][T26960] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1259.785586][T26960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1260.303783][T26955] delete_channel: no stack [ 1260.544205][T26975] netlink: 'syz.0.7173': attribute type 3 has an invalid length. [ 1260.571311][T26975] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7173'. [ 1262.052898][T26984] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7178'. [ 1262.265906][T26991] IPv6: Can't replace route, no match found [ 1262.680322][T27010] netlink: 'syz.2.7187': attribute type 3 has an invalid length. [ 1262.697864][T27010] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7187'. [ 1263.054184][T27021] netlink: 'syz.4.7191': attribute type 3 has an invalid length. [ 1263.087749][T27021] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7191'. [ 1263.473879][T27037] netlink: 'syz.4.7197': attribute type 29 has an invalid length. [ 1263.614743][T27037] netlink: 'syz.4.7197': attribute type 29 has an invalid length. [ 1263.688468][T27039] netlink: 'syz.4.7197': attribute type 29 has an invalid length. [ 1263.953255][T27049] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7200'. [ 1264.763353][T27066] netlink: 'syz.4.7207': attribute type 3 has an invalid length. [ 1264.808136][T27066] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7207'. [ 1266.145006][T27114] netlink: 'syz.2.7223': attribute type 3 has an invalid length. [ 1266.165142][T27114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7223'. [ 1266.277739][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 1267.500488][T27139] sctp: [Deprecated]: syz.4.7230 (pid 27139) Use of int in max_burst socket option deprecated. [ 1267.500488][T27139] Use struct sctp_assoc_value instead [ 1268.017019][T27159] netlink: 'syz.4.7238': attribute type 10 has an invalid length. [ 1268.069599][T27162] netlink: 'syz.2.7239': attribute type 25 has an invalid length. [ 1268.087831][T27162] netlink: 'syz.2.7239': attribute type 28 has an invalid length. [ 1268.216460][T27166] netlink: 'syz.3.7242': attribute type 3 has an invalid length. [ 1268.234852][T27168] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7241'. [ 1268.248333][T27166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7242'. [ 1268.375201][T27173] netlink: 'syz.1.7244': attribute type 21 has an invalid length. [ 1268.458870][T27173] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7244'. [ 1268.493279][T27173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7244'. [ 1268.581250][T27180] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7246'. [ 1268.621390][T27180] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1268.876795][T27181] netlink: 'syz.2.7245': attribute type 10 has an invalid length. [ 1268.931376][T27181] team0: Device nlmon0 is of different type [ 1269.116874][T27190] netlink: 'syz.3.7251': attribute type 2 has an invalid length. [ 1269.658733][T27219] IPv6: NLM_F_CREATE should be specified when creating new route [ 1269.684619][T27219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1269.691940][T27219] IPv6: NLM_F_CREATE should be set when creating new route [ 1269.699311][T27219] IPv6: NLM_F_CREATE should be set when creating new route [ 1269.706561][T27219] IPv6: NLM_F_CREATE should be set when creating new route [ 1269.810762][T27224] netlink: 'syz.1.7257': attribute type 21 has an invalid length. [ 1269.856683][T27219] netlink: 'syz.2.7256': attribute type 1 has an invalid length. [ 1269.897967][T27225] netlink: 'syz.2.7256': attribute type 21 has an invalid length. [ 1269.926834][T27219] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.7256'. [ 1269.967845][T27225] IPv6: NLM_F_CREATE should be specified when creating new route [ 1270.032269][T27225] IPv6: Can't replace route, no match found [ 1270.104822][T27229] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7260'. [ 1270.623714][T27247] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.7265'. [ 1270.914831][T27257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7279'. [ 1271.027221][T27255] : port 1(ip6gretap0) entered blocking state [ 1271.071829][T27255] : port 1(ip6gretap0) entered disabled state [ 1271.121066][T27255] device ip6gretap0 entered promiscuous mode [ 1271.186561][T27268] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.7273'. [ 1271.203155][T27260] device ip6gretap0 left promiscuous mode [ 1271.215077][T27260] : port 1(ip6gretap0) entered disabled state [ 1271.384622][T27278] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7274'. [ 1271.632829][T27287] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7277'. [ 1272.065454][T27302] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1272.138752][T27305] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1272.199773][T27303] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1272.340678][T27309] device sit0 entered promiscuous mode [ 1272.429159][T27305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1272.954801][T27319] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7287'. [ 1273.177523][T27311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7286'. [ 1273.272484][T27321] validate_nla: 11 callbacks suppressed [ 1273.272503][T27321] netlink: 'syz.1.7289': attribute type 3 has an invalid length. [ 1273.378074][T27321] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7289'. [ 1275.356774][T27383] netlink: 'syz.1.7308': attribute type 3 has an invalid length. [ 1275.919415][T27400] netlink: 'syz.2.7312': attribute type 10 has an invalid length. [ 1275.954736][T27400] team0: Device vxcan1 is of different type [ 1276.517708][T13328] Bluetooth: hci4: command 0x0406 tx timeout [ 1276.673470][T27414] sctp: [Deprecated]: syz.3.7315 (pid 27414) Use of int in max_burst socket option deprecated. [ 1276.673470][T27414] Use struct sctp_assoc_value instead [ 1276.995793][T27425] netlink: 'syz.1.7319': attribute type 9 has an invalid length. [ 1277.013562][T27427] __nla_validate_parse: 1 callbacks suppressed [ 1277.013591][T27427] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7320'. [ 1277.074049][T27425] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7319'. [ 1277.370483][T27440] netlink: 'syz.4.7326': attribute type 3 has an invalid length. [ 1277.388755][T27440] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7326'. [ 1277.729805][T27451] netlink: 'syz.1.7331': attribute type 2 has an invalid length. [ 1277.751772][T27451] netlink: 'syz.1.7331': attribute type 1 has an invalid length. [ 1277.773639][T27451] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.7331'. [ 1278.665963][T27478] netlink: 'syz.1.7339': attribute type 10 has an invalid length. [ 1278.674193][T27478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7339'. [ 1278.687286][T27478] bridge0: port 3(dummy0) entered blocking state [ 1278.694309][T27478] bridge0: port 3(dummy0) entered disabled state [ 1278.713503][T27478] device dummy0 entered promiscuous mode [ 1278.723319][T27478] bridge0: port 3(dummy0) entered blocking state [ 1278.729896][T27478] bridge0: port 3(dummy0) entered forwarding state [ 1279.023952][T27494] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1279.090084][T27492] netlink: 'syz.3.7343': attribute type 10 has an invalid length. [ 1279.285435][T27504] netlink: 'syz.0.7344': attribute type 3 has an invalid length. [ 1279.308697][T27504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7344'. [ 1279.680143][T27510] netlink: 22 bytes leftover after parsing attributes in process `syz.4.7347'. [ 1280.273629][T27534] netlink: 'syz.4.7356': attribute type 10 has an invalid length. [ 1283.419588][T27534] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1283.848707][T27562] netlink: 'syz.4.7364': attribute type 3 has an invalid length. [ 1283.856649][T27562] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7364'. [ 1283.872189][T27564] netlink: 'syz.0.7365': attribute type 21 has an invalid length. [ 1283.975444][T27564] netlink: 'syz.0.7365': attribute type 1 has an invalid length. [ 1285.595399][T27613] netlink: 'syz.3.7379': attribute type 27 has an invalid length. [ 1285.663233][T27613] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7379'. [ 1285.700356][T27618] netlink: 'syz.0.7378': attribute type 3 has an invalid length. [ 1285.817140][T27618] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7378'. [ 1286.535493][T27645] netlink: 'syz.1.7388': attribute type 10 has an invalid length. [ 1286.746097][T27649] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7389'. [ 1286.802964][T27661] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7389'. [ 1286.823704][T27660] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1286.960114][T27662] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1287.867266][T27681] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 1287.903932][T27682] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1288.141059][T27698] netlink: 'syz.4.7408': attribute type 21 has an invalid length. [ 1288.156848][T27698] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7408'. [ 1288.181278][T27699] netlink: 'syz.4.7408': attribute type 21 has an invalid length. [ 1288.199346][T27699] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7408'. [ 1288.239887][T27701] netlink: 'syz.3.7409': attribute type 10 has an invalid length. [ 1288.448367][T27716] sctp: [Deprecated]: syz.3.7412 (pid 27716) Use of int in max_burst socket option deprecated. [ 1288.448367][T27716] Use struct sctp_assoc_value instead [ 1288.600588][T27720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1288.618826][T27720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.650021][T27720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1288.668928][T27720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.869571][T27729] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1289.261869][T27719] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7413'. [ 1289.534489][T27724] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7413'. [ 1289.889834][T27739] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7418'. [ 1290.161315][T27749] delete_channel: no stack [ 1290.165930][T27749] delete_channel: no stack [ 1290.345798][T13328] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 1290.414587][T27765] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7427'. [ 1290.818293][T27776] netlink: 'syz.3.7432': attribute type 10 has an invalid length. [ 1290.966993][T27777] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7431'. [ 1291.040552][T27783] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7431'. [ 1291.061172][T27777] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1291.112662][T27785] netlink: 'syz.1.7435': attribute type 10 has an invalid length. [ 1291.131954][T27785] team0: Device wg1 is up. Set it down before adding it as a team port [ 1291.369071][T27796] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7437'. [ 1292.674849][T27818] netlink: 'syz.4.7446': attribute type 9 has an invalid length. [ 1292.688856][T27818] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.7446'. [ 1292.701245][T27813] netlink: 'syz.3.7444': attribute type 21 has an invalid length. [ 1292.729538][T27813] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.7444'. [ 1292.758534][T13328] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 1292.914232][T27824] netlink: 'syz.0.7447': attribute type 3 has an invalid length. [ 1293.014745][T27826] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7449'. [ 1293.923974][T27826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1293.945364][T27826] device bond_slave_0 left promiscuous mode [ 1293.983800][T27826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1294.018796][T27826] device bond_slave_1 left promiscuous mode [ 1294.059120][T27826] bond0 (unregistering): Released all slaves [ 1294.148769][T27855] netlink: 'syz.1.7457': attribute type 3 has an invalid length. [ 1294.338846][T27864] netlink: 'syz.0.7460': attribute type 2 has an invalid length. [ 1294.366077][T27864] __nla_validate_parse: 2 callbacks suppressed [ 1294.366093][T27864] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7460'. [ 1294.565634][T27877] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7464'. [ 1295.206435][T27886] netlink: 'syz.2.7466': attribute type 3 has an invalid length. [ 1295.214757][T27886] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7466'. [ 1296.716322][T27919] netlink: 'syz.3.7479': attribute type 3 has an invalid length. [ 1296.735628][T27919] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7479'. [ 1296.811184][T27924] netlink: 'syz.1.7482': attribute type 3 has an invalid length. [ 1296.831004][T27924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7482'. [ 1297.013771][T27929] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.7484'. [ 1297.544786][T27947] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.7490'. [ 1297.769303][T27953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7492'. [ 1300.046286][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.052799][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.022422][T27965] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7496'. [ 1301.114570][T27967] netlink: 'syz.1.7495': attribute type 3 has an invalid length. [ 1301.199661][T27965] netlink: 'syz.3.7496': attribute type 3 has an invalid length. [ 1301.247831][T27965] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.7496'. [ 1301.306625][T27967] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7495'. [ 1301.669080][T27983] netlink: 'syz.4.7500': attribute type 3 has an invalid length. [ 1301.677379][T27983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7500'. [ 1302.244781][T13328] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 1302.763600][T28011] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7511'. [ 1302.886037][T28020] netlink: 'syz.4.7514': attribute type 3 has an invalid length. [ 1302.894521][T28020] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7514'. [ 1303.780903][T28052] netlink: 'syz.4.7524': attribute type 10 has an invalid length. [ 1305.581632][T28090] netlink: 'syz.3.7535': attribute type 3 has an invalid length. [ 1305.672381][T28090] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7535'. [ 1306.015987][T28095] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7536'. [ 1306.647938][T28104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7537'. [ 1306.665833][T28104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7537'. [ 1307.022383][T28110] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7537'. [ 1307.611078][T28121] netlink: 'syz.1.7541': attribute type 10 has an invalid length. [ 1307.642815][T28121] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7541'. [ 1307.695355][T28121] device hsr0 entered promiscuous mode [ 1307.725703][T13328] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1307.733692][T28121] bridge0: port 4(hsr0) entered blocking state [ 1307.740371][T13328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1307.749881][T13328] CPU: 0 PID: 13328 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1307.757657][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1307.767753][T13328] Workqueue: hci1 hci_rx_work [ 1307.772498][T13328] Call Trace: [ 1307.775813][T13328] [ 1307.778782][T13328] dump_stack_lvl+0x188/0x24e [ 1307.783514][T13328] ? show_regs_print_info+0x12/0x12 [ 1307.788782][T13328] ? load_image+0x410/0x410 [ 1307.793366][T13328] sysfs_create_dir_ns+0x26a/0x290 [ 1307.798537][T13328] ? __lock_acquire+0x7c40/0x7c40 [ 1307.803619][T13328] ? sysfs_warn_dup+0xa0/0xa0 [ 1307.808351][T13328] ? do_raw_spin_unlock+0x11d/0x230 [ 1307.813606][T13328] kobject_add_internal+0x617/0xca0 [ 1307.818900][T13328] kobject_add+0x160/0x230 [ 1307.823381][T13328] ? kobject_init+0x1c0/0x1c0 [ 1307.828146][T13328] ? __raw_spin_lock_init+0x41/0x100 [ 1307.833482][T13328] ? klist_children_get+0x50/0x50 [ 1307.838580][T13328] ? get_device_parent+0x121/0x3e0 [ 1307.843717][T28121] bridge0: port 4(hsr0) entered disabled state [ 1307.849923][T13328] device_add+0x470/0x1050 [ 1307.854411][T13328] hci_conn_add_sysfs+0xd1/0x1e0 [ 1307.859424][T13328] le_conn_complete_evt+0xf93/0x15c0 [ 1307.864807][T13328] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1307.871110][T13328] ? bt_info+0x180/0x180 [ 1307.875396][T13328] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1307.881104][T13328] ? mutex_unlock+0x10/0x10 [ 1307.885663][T13328] ? skb_pull_data+0xec/0x1f0 [ 1307.890397][T13328] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1307.896358][T13328] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1307.902838][T13328] ? hci_remote_host_features_evt+0x230/0x230 [ 1307.908956][T13328] hci_event_packet+0x7b3/0x1290 [ 1307.913950][T13328] ? lock_chain_count+0x20/0x20 [ 1307.918857][T13328] ? bis_list+0x280/0x280 [ 1307.923254][T13328] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1307.929208][T13328] ? kcov_remote_start+0x50f/0x810 [ 1307.934387][T13328] ? lockdep_hardirqs_on+0x94/0x140 [ 1307.939655][T13328] ? hci_send_to_monitor+0x9c/0x4a0 [ 1307.944947][T13328] hci_rx_work+0x3eb/0xd40 [ 1307.949457][T13328] ? _raw_spin_unlock+0x40/0x40 [ 1307.954383][T13328] ? process_one_work+0x7b4/0x1160 [ 1307.959563][T13328] process_one_work+0x8ab/0x1160 [ 1307.964574][T13328] ? worker_detach_from_pool+0x240/0x240 [ 1307.970252][T13328] ? _raw_spin_lock_irq+0x86/0xf0 [ 1307.975373][T13328] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1307.980450][T13328] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1307.986065][T13328] ? wq_worker_running+0x97/0x190 [ 1307.991139][T13328] worker_thread+0xaf5/0x12a0 [ 1307.995906][T13328] kthread+0x29d/0x330 [ 1308.000018][T13328] ? worker_clr_flags+0x1a0/0x1a0 [ 1308.005100][T13328] ? kthread_blkcg+0xd0/0xd0 [ 1308.009745][T13328] ret_from_fork+0x1f/0x30 [ 1308.014235][T13328] [ 1308.018334][T13328] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1308.031500][T13328] Bluetooth: hci1: failed to register connection device [ 1308.078068][T28121] bridge0: port 4(hsr0) entered blocking state [ 1308.084517][T28121] bridge0: port 4(hsr0) entered forwarding state [ 1308.388498][T28124] netlink: 'syz.2.7543': attribute type 3 has an invalid length. [ 1308.417129][T28124] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7543'. [ 1309.965084][T28171] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7556'. [ 1310.015895][T28171] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1312.866051][T28193] netlink: 'syz.2.7564': attribute type 3 has an invalid length. [ 1313.019455][T28193] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7564'. [ 1313.452718][T28198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7565'. [ 1313.482646][T28198] device  left promiscuous mode [ 1314.831333][T28231] netlink: 'syz.4.7574': attribute type 3 has an invalid length. [ 1314.857979][T28231] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7574'. [ 1314.965771][T28236] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7575'. [ 1317.131451][T28285] netlink: 'syz.0.7586': attribute type 3 has an invalid length. [ 1317.157399][T28285] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7586'. [ 1317.353215][T28289] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7588'. [ 1317.445626][T28291] netlink: 'syz.4.7589': attribute type 3 has an invalid length. [ 1317.497780][T28291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7589'. [ 1318.363381][T28307] sctp: [Deprecated]: syz.2.7593 (pid 28307) Use of int in max_burst socket option deprecated. [ 1318.363381][T28307] Use struct sctp_assoc_value instead [ 1319.173645][T28323] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1319.432989][T28332] netlink: 'syz.2.7606': attribute type 3 has an invalid length. [ 1319.464950][T28332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7606'. [ 1319.643595][T28335] netlink: 'syz.1.7603': attribute type 10 has an invalid length. [ 1319.710003][T28335] team0: Device wg1 is up. Set it down before adding it as a team port [ 1319.885354][T28354] netlink: 3291 bytes leftover after parsing attributes in process `syz.4.7610'. [ 1319.981010][T28340] device syzkaller0 entered promiscuous mode [ 1320.008403][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1320.602012][T28363] netlink: 'syz.2.7615': attribute type 3 has an invalid length. [ 1320.644264][T28363] netlink: 'syz.2.7615': attribute type 1 has an invalid length. [ 1320.961138][T28377] netlink: 'syz.2.7620': attribute type 9 has an invalid length. [ 1320.987873][T28377] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7620'. [ 1321.411908][T28373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7617'. [ 1321.825462][T28373] device  left promiscuous mode [ 1321.964762][T28380] delete_channel: no stack [ 1322.412170][T28398] netlink: 'syz.2.7626': attribute type 3 has an invalid length. [ 1322.429707][T28398] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7626'. [ 1323.479640][T28434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7636'. [ 1324.156351][T28447] netlink: 'syz.3.7641': attribute type 10 has an invalid length. [ 1324.555579][T28453] netlink: 'syz.4.7644': attribute type 3 has an invalid length. [ 1324.574554][T28453] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7644'. [ 1325.668488][T28483] netlink: 'syz.2.7655': attribute type 3 has an invalid length. [ 1325.676294][T28483] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7655'. [ 1325.910930][T28494] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1326.037191][T28502] netlink: 'syz.3.7664': attribute type 3 has an invalid length. [ 1326.057343][T28496] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7663'. [ 1326.066715][T28502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7664'. [ 1326.846637][T28527] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1327.569401][T28551] netlink: 'syz.1.7681': attribute type 3 has an invalid length. [ 1327.583627][T28551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7681'. [ 1327.596862][T28549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1327.604218][T28549] IPv6: NLM_F_CREATE should be set when creating new route [ 1327.611601][T28549] IPv6: NLM_F_CREATE should be set when creating new route [ 1327.618993][T28549] IPv6: NLM_F_CREATE should be set when creating new route [ 1328.221754][T28561] netlink: 'syz.1.7685': attribute type 10 has an invalid length. [ 1328.783659][T28577] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1328.918513][T28579] netlink: 'syz.2.7700': attribute type 9 has an invalid length. [ 1328.926313][T28579] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7700'. [ 1328.990101][T28583] netlink: 'syz.4.7690': attribute type 29 has an invalid length. [ 1329.008733][T28583] netlink: 'syz.4.7690': attribute type 29 has an invalid length. [ 1329.042226][T28583] netlink: 'syz.4.7690': attribute type 29 has an invalid length. [ 1329.069091][T28583] netlink: 'syz.4.7690': attribute type 29 has an invalid length. [ 1329.298977][T28592] netlink: 'syz.2.7695': attribute type 3 has an invalid length. [ 1329.333972][T28595] team0: Device wg1 is up. Set it down before adding it as a team port [ 1329.347793][T28592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7695'. [ 1329.888769][T28611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7703'. [ 1330.295840][T28627] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7711'. [ 1331.694988][T28665] validate_nla: 2 callbacks suppressed [ 1331.695006][T28665] netlink: 'syz.0.7731': attribute type 1 has an invalid length. [ 1331.781971][T28665] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.7731'. [ 1332.299567][T28674] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7725'. [ 1332.585651][T28676] netlink: 'syz.1.7726': attribute type 3 has an invalid length. [ 1332.609804][T28676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7726'. [ 1332.841810][T28680] netlink: 'syz.4.7728': attribute type 3 has an invalid length. [ 1332.872819][T28680] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7728'. [ 1333.320147][T28689] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7729'. [ 1333.335819][T28709] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7736'. [ 1333.354834][T28703] bridge0: port 3(dummy0) entered disabled state [ 1333.361421][T28703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.369094][T28703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.446557][T28703] bridge0: port 3(dummy0) entered blocking state [ 1333.453126][T28703] bridge0: port 3(dummy0) entered forwarding state [ 1333.460012][T28703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.467201][T28703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.474775][T28703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.482002][T28703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.524586][T28703] device bridge0 entered promiscuous mode [ 1333.769953][T28717] netlink: 'syz.1.7739': attribute type 29 has an invalid length. [ 1333.818018][T28717] netlink: 'syz.1.7739': attribute type 29 has an invalid length. [ 1333.846458][T28717] netlink: 'syz.1.7739': attribute type 29 has an invalid length. [ 1333.900891][T28719] netlink: 'syz.1.7739': attribute type 29 has an invalid length. [ 1334.186451][T28725] netlink: 'syz.4.7743': attribute type 3 has an invalid length. [ 1334.208772][T28725] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7743'. [ 1334.781993][T28743] netlink: 'syz.1.7747': attribute type 3 has an invalid length. [ 1334.845676][T28743] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7747'. [ 1335.158397][T28756] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7754'. [ 1335.519915][T28770] netlink: 'syz.3.7759': attribute type 3 has an invalid length. [ 1335.537343][T28770] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7759'. [ 1335.551959][T28771] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7760'. [ 1336.636050][T28792] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.7764'. [ 1337.248723][T28810] validate_nla: 1 callbacks suppressed [ 1337.248743][T28810] netlink: 'syz.4.7770': attribute type 10 has an invalid length. [ 1337.338410][T28811] netlink: 'syz.4.7770': attribute type 10 has an invalid length. [ 1338.398017][T28840] netlink: 'syz.4.7778': attribute type 10 has an invalid length. [ 1338.434222][T28840] netlink: 172 bytes leftover after parsing attributes in process `syz.4.7778'. [ 1338.736559][T28850] sctp: [Deprecated]: syz.0.7782 (pid 28850) Use of int in max_burst socket option deprecated. [ 1338.736559][T28850] Use struct sctp_assoc_value instead [ 1338.764278][T28856] netlink: 'syz.2.7785': attribute type 9 has an invalid length. [ 1338.772620][T28856] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7785'. [ 1339.054530][T28863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1339.062031][T28863] IPv6: NLM_F_CREATE should be set when creating new route [ 1339.069595][T28863] IPv6: NLM_F_CREATE should be set when creating new route [ 1339.077205][T28863] IPv6: NLM_F_CREATE should be set when creating new route [ 1339.122931][T28870] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7792'. [ 1339.165993][T28863] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7788'. [ 1339.523414][T28884] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7795'. [ 1339.624194][T28889] netlink: 'syz.4.7797': attribute type 21 has an invalid length. [ 1339.642267][T28889] netlink: 'syz.4.7797': attribute type 7 has an invalid length. [ 1339.690993][T28885] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7794'. [ 1340.676526][T28924] netlink: 'syz.4.7810': attribute type 1 has an invalid length. [ 1340.716689][T28924] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.7810'. [ 1344.407220][T28948] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1344.489950][T28948] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1344.609251][T28948] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1344.718326][T28961] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7820'. [ 1344.863148][T28968] netlink: 'syz.1.7822': attribute type 2 has an invalid length. [ 1345.005415][T28974] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.7824'. [ 1345.143950][T28968] device 0 entered promiscuous mode [ 1345.940895][T28994] netlink: 'syz.3.7832': attribute type 7 has an invalid length. [ 1345.972225][T28994] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1345.994380][T28996] netlink: 'syz.3.7832': attribute type 7 has an invalid length. [ 1346.006834][T28996] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1346.493610][T29008] netlink: 'syz.4.7835': attribute type 3 has an invalid length. [ 1346.520874][T29008] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7835'. [ 1346.575448][T29017] netlink: 'syz.0.7837': attribute type 3 has an invalid length. [ 1346.617918][T29017] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7837'. [ 1347.089138][T29030] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7841'. [ 1347.793589][T29040] netlink: 'syz.1.7846': attribute type 4 has an invalid length. [ 1347.806773][T29040] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7846'. [ 1347.833489][T29043] netlink: 'syz.1.7846': attribute type 39 has an invalid length. [ 1348.412402][T29058] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1348.505928][T29062] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.7854'. [ 1348.744851][T29069] netlink: 'syz.1.7856': attribute type 3 has an invalid length. [ 1348.754730][T29069] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7856'. [ 1349.287180][T29090] netlink: 'syz.3.7866': attribute type 9 has an invalid length. [ 1349.296335][T29088] device syzkaller0 entered promiscuous mode [ 1349.308776][T29090] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7866'. [ 1349.311633][T29088] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1349.449589][T29094] sctp: [Deprecated]: syz.0.7867 (pid 29094) Use of int in max_burst socket option deprecated. [ 1349.449589][T29094] Use struct sctp_assoc_value instead [ 1349.614888][T29098] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.7869'. [ 1349.690478][T29108] netlink: 'syz.2.7871': attribute type 17 has an invalid length. [ 1349.956973][T29122] netlink: 'syz.4.7877': attribute type 10 has an invalid length. [ 1350.140162][T29134] netlink: 'syz.1.7879': attribute type 6 has an invalid length. [ 1353.371196][T29162] netlink: 'syz.0.7890': attribute type 10 has an invalid length. [ 1353.389266][T29162] device veth1_macvtap left promiscuous mode [ 1353.503013][T29169] netlink: 'syz.1.7893': attribute type 3 has an invalid length. [ 1353.547768][T29169] __nla_validate_parse: 2 callbacks suppressed [ 1353.547784][T29169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7893'. [ 1353.708208][T29178] netlink: 'syz.2.7894': attribute type 3 has an invalid length. [ 1353.716331][T29178] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7894'. [ 1354.511416][T29185] netlink: 'syz.3.7897': attribute type 3 has an invalid length. [ 1354.520205][T29185] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7897'. [ 1354.836184][T29191] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7899'. [ 1355.395682][T29214] netlink: 'syz.0.7909': attribute type 3 has an invalid length. [ 1355.437291][T29210] netlink: 'syz.4.7907': attribute type 16 has an invalid length. [ 1355.448736][T29214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7909'. [ 1355.477382][T29210] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7907'. [ 1355.798125][T29226] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7911'. [ 1359.558601][T29267] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1360.566380][T29278] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.7927'. [ 1360.592410][T29278] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1360.682661][T29280] sctp: [Deprecated]: syz.1.7928 (pid 29280) Use of int in max_burst socket option deprecated. [ 1360.682661][T29280] Use struct sctp_assoc_value instead [ 1361.504742][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.511194][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.646693][T29291] netlink: 'syz.2.7930': attribute type 6 has an invalid length. [ 1362.110388][T29294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7933'. [ 1363.057576][T29304] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7937'. [ 1363.952862][T29320] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7942'. [ 1364.112364][T29323] netlink: 'syz.4.7943': attribute type 21 has an invalid length. [ 1364.137862][T29323] netlink: 'syz.4.7943': attribute type 1 has an invalid length. [ 1364.193256][T29324] netlink: 'syz.4.7943': attribute type 3 has an invalid length. [ 1364.232486][T29324] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.7943'. [ 1364.267000][T29323] netlink: 'syz.4.7943': attribute type 7 has an invalid length. [ 1364.305716][T29323] netlink: 'syz.4.7943': attribute type 7 has an invalid length. [ 1364.317015][T29323] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.7943'. [ 1365.001516][T29350] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7950'. [ 1365.536516][T29373] netlink: 'syz.4.7959': attribute type 21 has an invalid length. [ 1365.569411][T29373] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7959'. [ 1366.093043][T29398] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7967'. [ 1368.274180][T29461] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1368.684592][T29471] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1368.771061][T29474] netlink: 'syz.0.7989': attribute type 3 has an invalid length. [ 1368.783919][T29474] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7989'. [ 1371.094705][T29506] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8004'. [ 1371.320117][T29508] netlink: 'syz.4.8005': attribute type 2 has an invalid length. [ 1371.398755][T29508] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.8005'. [ 1371.878155][T29520] netlink: 'syz.2.8007': attribute type 9 has an invalid length. [ 1371.896922][T29521] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1371.917796][T29520] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.8007'. [ 1372.134316][T29528] sctp: [Deprecated]: syz.1.8011 (pid 29528) Use of int in max_burst socket option deprecated. [ 1372.134316][T29528] Use struct sctp_assoc_value instead [ 1372.971203][T29548] netlink: 'syz.0.8018': attribute type 10 has an invalid length. [ 1372.998478][T29548] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8018'. [ 1374.125510][T29584] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8030'. [ 1374.237388][T29592] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8035'. [ 1375.148215][T29617] netlink: 'syz.3.8042': attribute type 3 has an invalid length. [ 1375.175693][T29617] netlink: 'syz.3.8042': attribute type 1 has an invalid length. [ 1375.204797][T29617] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.8042'. [ 1375.221703][T29618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8042'. [ 1375.277710][T29618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8042'. [ 1375.292956][T29617] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8042'. [ 1375.815120][T29637] netlink: 'syz.1.8050': attribute type 13 has an invalid length. [ 1375.857481][T29637] syz_tun: refused to change device tx_queue_len [ 1375.876923][T29637] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1376.578139][T29662] __nla_validate_parse: 1 callbacks suppressed [ 1376.578158][T29662] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8059'. [ 1376.599151][T29663] netlink: 'syz.0.8060': attribute type 10 has an invalid length. [ 1376.641731][T29663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.690268][T29663] device team0 entered promiscuous mode [ 1376.750569][T29663] device team_slave_0 entered promiscuous mode [ 1376.774296][T29663] device team_slave_1 entered promiscuous mode [ 1376.819556][T29663] device geneve1 entered promiscuous mode [ 1376.868225][T29663] bond0: (slave team0): Enslaving as an active interface with an up link [ 1378.066339][T29706] netlink: 'syz.4.8065': attribute type 3 has an invalid length. [ 1378.099105][T29706] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8065'. [ 1379.860910][T29712] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.8069'. [ 1380.633043][T29749] netlink: 'syz.2.8084': attribute type 3 has an invalid length. [ 1380.643334][T29749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8084'. [ 1381.743861][T29771] netlink: 'syz.1.8088': attribute type 10 has an invalid length. [ 1382.032806][T29778] netlink: 'syz.3.8090': attribute type 3 has an invalid length. [ 1382.088565][T29778] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8090'. [ 1382.758960][T29793] netlink: 'syz.0.8093': attribute type 2 has an invalid length. [ 1382.847591][T29793] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.8093'. [ 1383.249892][T29803] netlink: 'syz.1.8096': attribute type 3 has an invalid length. [ 1383.304681][T29803] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8096'. [ 1383.380938][T29805] netlink: 'syz.0.8099': attribute type 3 has an invalid length. [ 1383.424238][T29805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8099'. [ 1384.685596][T29835] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1384.771414][T29825] netlink: 'syz.3.8104': attribute type 21 has an invalid length. [ 1384.789506][T29825] netlink: 'syz.3.8104': attribute type 7 has an invalid length. [ 1385.196728][T29840] netlink: 'syz.1.8108': attribute type 9 has an invalid length. [ 1385.245802][T29840] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1385.456652][T29838] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8107'. [ 1385.541584][T29842] netlink: 'syz.1.8109': attribute type 1 has an invalid length. [ 1385.577652][T29842] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.8109'. [ 1385.898826][T29851] netlink: 'syz.2.8111': attribute type 10 has an invalid length. [ 1386.394557][T29851] team0: Device gre0 is of different type [ 1386.645578][T29864] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1387.733743][T13328] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 1389.670773][T29870] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1389.702060][T29870] dvmrp1: linktype set to 768 [ 1390.136957][T29887] netlink: 'syz.0.8122': attribute type 29 has an invalid length. [ 1390.166580][T29887] netlink: 'syz.0.8122': attribute type 29 has an invalid length. [ 1390.187006][T29887] netlink: 'syz.0.8122': attribute type 29 has an invalid length. [ 1390.202441][T29887] netlink: 'syz.0.8122': attribute type 29 has an invalid length. [ 1390.276361][T29889] netlink: 'syz.2.8123': attribute type 12 has an invalid length. [ 1390.289003][T29889] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1390.594704][T29891] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.8124'. [ 1390.983758][T29907] netlink: 'syz.2.8129': attribute type 3 has an invalid length. [ 1391.020721][T29907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8129'. [ 1391.031844][T29909] netlink: 'syz.3.8131': attribute type 10 has an invalid length. [ 1391.531031][T29914] netlink: 192852 bytes leftover after parsing attributes in process `syz.4.8130'. [ 1391.654260][T29914] netlink: get zone limit has 4 unknown bytes [ 1392.599771][T29937] netlink: 'syz.3.8139': attribute type 1 has an invalid length. [ 1392.623129][T29937] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.8139'. [ 1393.506834][T29958] netlink: 'syz.1.8143': attribute type 1 has an invalid length. [ 1393.575166][T29958] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.8143'. [ 1394.059620][T29965] netlink: 'syz.3.8146': attribute type 3 has an invalid length. [ 1394.087779][T29965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8146'. [ 1395.050927][T29989] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.8155'. [ 1395.165500][T29990] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.8155'. [ 1395.751614][T30003] sctp: [Deprecated]: syz.0.8156 (pid 30003) Use of int in max_burst socket option deprecated. [ 1395.751614][T30003] Use struct sctp_assoc_value instead [ 1396.049409][T30009] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8158'. [ 1396.302034][T30022] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1396.423293][T30026] netlink: 'syz.1.8164': attribute type 9 has an invalid length. [ 1396.451446][T30026] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.8164'. [ 1397.662632][T30050] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8177'. [ 1397.696451][T30051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8176'. [ 1398.229445][T30056] : port 1(team0) entered blocking state [ 1398.249704][T30056] : port 1(team0) entered disabled state [ 1398.281970][T30056] device team0 entered promiscuous mode [ 1398.288183][T30056] device team_slave_0 entered promiscuous mode [ 1398.307961][T30056] device team_slave_1 entered promiscuous mode [ 1398.328931][T30056] device bridge0 entered promiscuous mode [ 1399.133540][T30073] netlink: 'syz.0.8183': attribute type 10 has an invalid length. [ 1399.155856][T30073] team0: Device wg1 is up. Set it down before adding it as a team port [ 1399.810085][T30094] netlink: 'syz.0.8189': attribute type 3 has an invalid length. [ 1399.881079][T30094] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8189'. [ 1400.514164][T30123] device dummy0 left promiscuous mode [ 1400.548846][T30123] bridge0: port 2(dummy0) entered disabled state [ 1400.574127][T30123] device bridge_slave_0 left promiscuous mode [ 1400.592024][T30123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.851034][T30130] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8203'. [ 1401.063291][T30136] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8206'. [ 1401.114772][T30139] netlink: 'syz.3.8207': attribute type 2 has an invalid length. [ 1401.936808][T30151] netlink: 'syz.1.8211': attribute type 3 has an invalid length. [ 1401.953514][T30151] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8211'. [ 1402.605147][T30169] netlink: 'syz.1.8217': attribute type 6 has an invalid length. [ 1402.628941][T30169] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8217'. [ 1402.653500][T30172] netlink: 'syz.2.8215': attribute type 3 has an invalid length. [ 1402.679221][T30175] netlink: 'syz.0.8216': attribute type 5 has an invalid length. [ 1402.703631][T30172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8215'. [ 1404.083702][T30202] netlink: 'syz.1.8228': attribute type 10 has an invalid length. [ 1404.402064][T30209] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8230'. [ 1404.423285][T30209] device hsr_slave_0 left promiscuous mode [ 1404.496936][T30209] device hsr_slave_1 left promiscuous mode [ 1404.833604][T30209] bridge0: port 4(hsr0) entered disabled state [ 1405.131516][T30226] netlink: 'syz.0.8234': attribute type 3 has an invalid length. [ 1405.170725][T30226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8234'. [ 1408.133544][T30209] bridge0: port 4(hsr0) entered disabled state [ 1408.163208][T30217] netlink: 'syz.2.8232': attribute type 41 has an invalid length. [ 1408.184561][T30224] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.8232'. [ 1411.833551][T30268] netlink: 'syz.3.8246': attribute type 3 has an invalid length. [ 1411.900728][T30268] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8246'. [ 1411.949207][T30275] netlink: 'syz.4.8249': attribute type 10 has an invalid length. [ 1412.173024][T30282] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1412.581809][T30288] netlink: 'syz.4.8253': attribute type 9 has an invalid length. [ 1412.625759][T30288] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.8253'. [ 1412.722188][T30294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8258'. [ 1412.782718][T30296] netlink: 198388 bytes leftover after parsing attributes in process `syz.0.8259'. [ 1412.974738][T30302] netlink: 'syz.3.8263': attribute type 10 has an invalid length. [ 1415.656602][T30350] netlink: 'syz.0.8280': attribute type 10 has an invalid length. [ 1415.765477][T30350] device nlmon0 entered promiscuous mode [ 1415.779959][T30365] netlink: 'syz.4.8283': attribute type 6 has an invalid length. [ 1415.798204][T30350] team0: Device nlmon0 is of different type [ 1415.856790][T30367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8285'. [ 1415.878445][T30367] netlink: 'syz.1.8285': attribute type 8 has an invalid length. [ 1416.176835][T30376] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8288'. [ 1416.812891][T30406] netlink: 'syz.4.8297': attribute type 12 has an invalid length. [ 1416.822111][T30406] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8297'. [ 1417.735972][T30425] delete_channel: no stack [ 1418.009896][T13328] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1418.017462][T13328] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1418.562310][T30467] sctp: [Deprecated]: syz.3.8316 (pid 30467) Use of int in max_burst socket option deprecated. [ 1418.562310][T30467] Use struct sctp_assoc_value instead [ 1418.854777][T30474] netlink: 'syz.0.8319': attribute type 10 has an invalid length. [ 1418.909132][T30474] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8319'. [ 1418.956591][T30474] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1419.104157][T30491] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.8326'. [ 1419.198797][T30491] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.8326'. [ 1419.681376][T30510] device dummy0 left promiscuous mode [ 1419.699761][T30510] bridge0: port 3(dummy0) entered disabled state [ 1419.754877][T30510] device bridge_slave_1 left promiscuous mode [ 1419.776430][T30510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.850443][T30510] device bridge_slave_0 left promiscuous mode [ 1419.877520][T30510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.104065][T30510] device bridge0 left promiscuous mode [ 1420.174495][T30510] team0: Port device bridge0 removed [ 1420.481992][T30523] netlink: 'syz.0.8337': attribute type 10 has an invalid length. [ 1420.572179][T30523] team0: Device wg1 is up. Set it down before adding it as a team port [ 1420.615858][T30525] netlink: 'syz.4.8336': attribute type 21 has an invalid length. [ 1420.655451][T30528] netlink: 'syz.3.8338': attribute type 3 has an invalid length. [ 1420.704062][T30528] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8338'. [ 1421.283389][T30549] netlink: 'syz.4.8344': attribute type 25 has an invalid length. [ 1421.360087][T30549] netlink: 'syz.4.8344': attribute type 28 has an invalid length. [ 1421.637102][T30572] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8352'. [ 1422.927108][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.933521][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.277333][T30598] netlink: 'syz.2.8360': attribute type 4 has an invalid length. [ 1423.297743][T30598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8360'. [ 1423.352556][T30594] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.8360'. [ 1423.379371][T30594] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.8360'. [ 1424.219023][T30639] netlink: 'syz.1.8371': attribute type 3 has an invalid length. [ 1424.248495][T30639] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8371'. [ 1424.337261][T30642] netlink: 'syz.0.8373': attribute type 21 has an invalid length. [ 1424.349638][T30642] netlink: 'syz.0.8373': attribute type 1 has an invalid length. [ 1424.359663][T30642] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8373'. [ 1424.765778][T30652] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1425.055578][T30660] netlink: 'syz.3.8380': attribute type 2 has an invalid length. [ 1425.088321][T30660] device 0 entered promiscuous mode [ 1425.176328][T30668] netlink: 'syz.0.8384': attribute type 22 has an invalid length. [ 1425.199555][T30668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8384'. [ 1425.242068][T30669] netlink: 'syz.0.8384': attribute type 22 has an invalid length. [ 1425.283261][T30669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8384'. [ 1425.347099][T30672] netlink: 'syz.2.8383': attribute type 39 has an invalid length. [ 1425.464459][ T4278] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1425.472236][ T4278] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1425.966969][T30697] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8390'. [ 1426.348762][T30706] validate_nla: 1 callbacks suppressed [ 1426.348823][T30706] netlink: 'syz.3.8393': attribute type 3 has an invalid length. [ 1426.377732][T30706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8393'. [ 1426.650812][T30712] sctp: [Deprecated]: syz.0.8396 (pid 30712) Use of int in max_burst socket option deprecated. [ 1426.650812][T30712] Use struct sctp_assoc_value instead [ 1426.993162][T30717] bridge0: port 3(dummy0) entered disabled state [ 1428.887009][T30717] device bridge_slave_1 left promiscuous mode [ 1428.902170][T30717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.988069][T30717] device bridge_slave_0 left promiscuous mode [ 1429.009894][T30717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.227658][T30733] __nla_validate_parse: 1 callbacks suppressed [ 1429.227677][T30733] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.8403'. [ 1429.278594][T30751] netlink: 'syz.3.8408': attribute type 9 has an invalid length. [ 1429.306932][T30751] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.8408'. [ 1429.990720][T30773] netlink: 'syz.2.8414': attribute type 10 has an invalid length. [ 1430.064718][T30773] team0: Device wg1 is up. Set it down before adding it as a team port [ 1430.390999][T30781] netlink: 'syz.0.8418': attribute type 3 has an invalid length. [ 1430.429515][T30781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8418'. [ 1433.964987][T30809] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1434.086507][T30814] sctp: [Deprecated]: syz.2.8426 (pid 30814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1434.086507][T30814] Use struct sctp_sack_info instead [ 1434.157962][T30827] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.8428'. [ 1434.440301][T30834] netlink: 'syz.4.8431': attribute type 3 has an invalid length. [ 1434.458820][T30834] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8431'. [ 1434.912644][T30858] netlink: 'syz.0.8438': attribute type 19 has an invalid length. [ 1435.686095][T30876] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.8442'. [ 1435.782988][T30892] netlink: 'syz.4.8445': attribute type 10 has an invalid length. [ 1435.972006][ T4278] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1435.979533][ T4278] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1436.640671][T30920] netlink: 'syz.1.8453': attribute type 39 has an invalid length. [ 1436.819109][T30923] netlink: 279 bytes leftover after parsing attributes in process `syz.2.8456'. [ 1436.867081][T30923] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.8456'. [ 1436.958288][T30923] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8456'. [ 1437.742133][T30943] sctp: [Deprecated]: syz.4.8463 (pid 30943) Use of int in max_burst socket option deprecated. [ 1437.742133][T30943] Use struct sctp_assoc_value instead [ 1439.151315][ T4278] Bluetooth: hci1: unknown advertising packet type: 0xaa [ 1439.674097][T30997] netlink: 'syz.0.8482': attribute type 3 has an invalid length. [ 1439.992615][T30997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8482'. [ 1442.818509][T31038] netlink: 'syz.1.8496': attribute type 10 has an invalid length. [ 1442.826623][T31038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8496'. [ 1442.873349][T31038] device dummy0 entered promiscuous mode [ 1442.914148][T31038] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1443.528983][T31051] netlink: 'syz.1.8500': attribute type 3 has an invalid length. [ 1443.567708][T31051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8500'. [ 1444.803057][T31079] netlink: 'syz.2.8511': attribute type 10 has an invalid length. [ 1444.824000][T31079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8511'. [ 1444.874076][T31079] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1444.954080][T31084] netlink: 'syz.4.8509': attribute type 39 has an invalid length. [ 1445.274144][T31092] netlink: 'syz.0.8525': attribute type 4 has an invalid length. [ 1445.309294][T31093] netlink: 'syz.0.8525': attribute type 4 has an invalid length. [ 1445.469336][T31092] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.8525'. [ 1446.184427][T31100] netlink: 'syz.1.8514': attribute type 3 has an invalid length. [ 1446.193626][T31100] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8514'. [ 1446.575156][T31103] netlink: 'syz.0.8518': attribute type 3 has an invalid length. [ 1446.604249][T31103] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8518'. [ 1447.844705][T31120] device sit0 entered promiscuous mode [ 1448.317170][T31136] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8528'. [ 1448.359323][T31132] netlink: 'syz.3.8526': attribute type 10 has an invalid length. [ 1448.367431][T31132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8526'. [ 1448.484638][T31144] netlink: 'syz.0.8531': attribute type 3 has an invalid length. [ 1448.497807][T31144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1448.997020][T31153] netlink: 'syz.3.8533': attribute type 1 has an invalid length. [ 1449.013294][T31153] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.8533'. [ 1449.615816][T31171] netlink: 'syz.2.8539': attribute type 10 has an invalid length. [ 1449.655449][T31171] device netdevsim0 entered promiscuous mode [ 1449.680977][T31171] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1449.973027][T31187] netlink: 'syz.3.8545': attribute type 3 has an invalid length. [ 1450.001018][T31187] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.8545'. [ 1450.256034][T31195] netlink: 'syz.2.8548': attribute type 2 has an invalid length. [ 1450.302159][T31195] device 0 entered promiscuous mode [ 1450.353541][T31200] netlink: 'syz.2.8548': attribute type 29 has an invalid length. [ 1450.406640][T31200] netlink: 'syz.2.8548': attribute type 29 has an invalid length. [ 1450.464608][T31195] netlink: 'syz.2.8548': attribute type 29 has an invalid length. [ 1450.544289][T31209] netlink: 'syz.4.8554': attribute type 9 has an invalid length. [ 1450.595198][T31209] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.8554'. [ 1450.822327][T31217] nr0: port 1(hsr0) entered blocking state [ 1450.858078][T31217] nr0: port 1(hsr0) entered disabled state [ 1450.896313][T31217] device hsr0 entered promiscuous mode [ 1450.987996][T31224] nr0: port 1(hsr0) entered blocking state [ 1450.993950][T31224] nr0: port 1(hsr0) entered forwarding state [ 1451.074725][T31230] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8563'. [ 1451.938386][T31250] netlink: 'syz.2.8571': attribute type 3 has an invalid length. [ 1451.990087][T31250] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8571'. [ 1452.471809][T31270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8579'. [ 1452.520165][T31270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8579'. [ 1452.544808][T31277] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8579'. [ 1452.587782][T31270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8579'. [ 1452.597084][T31270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8579'. [ 1452.610527][T31266] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.8576'. [ 1452.692615][T31270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8579'. [ 1455.783938][T31351] netlink: 'syz.1.8605': attribute type 10 has an invalid length. [ 1457.004565][T31392] netlink: 'syz.0.8621': attribute type 29 has an invalid length. [ 1457.017083][T31392] netlink: 'syz.0.8621': attribute type 29 has an invalid length. [ 1457.040653][T31392] netlink: 'syz.0.8621': attribute type 29 has an invalid length. [ 1457.096693][T31397] netlink: 'syz.0.8621': attribute type 29 has an invalid length. [ 1457.129338][T31392] netlink: 'syz.0.8621': attribute type 29 has an invalid length. [ 1457.357388][T31407] netlink: 'syz.0.8628': attribute type 3 has an invalid length. [ 1457.377445][T31407] __nla_validate_parse: 66 callbacks suppressed [ 1457.377459][T31407] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.8628'. [ 1457.479305][T31411] netlink: 'syz.2.8625': attribute type 21 has an invalid length. [ 1457.487282][T31411] netlink: 'syz.2.8625': attribute type 3 has an invalid length. [ 1457.577288][T31411] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8625'. [ 1457.885457][T31434] netlink: 'syz.3.8636': attribute type 15 has an invalid length. [ 1458.404849][T31456] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.8644'. [ 1458.840789][T31470] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1459.930877][T31511] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8661'. [ 1460.073427][T31518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8666'. [ 1460.352811][T31515] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8665'. [ 1460.398032][T31523] netlink: 763 bytes leftover after parsing attributes in process `syz.3.8665'. [ 1460.562132][T31534] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8673'. [ 1461.650858][T31567] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8684'. [ 1463.244008][T31602] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.8696'. [ 1464.735331][T31651] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.8715'. [ 1464.803860][T31652] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8712'. [ 1464.821177][T31651] netlink: zone id is out of range [ 1464.837118][T31651] netlink: zone id is out of range [ 1464.860790][T31651] netlink: get zone limit has 8 unknown bytes [ 1467.316633][T31720] validate_nla: 5 callbacks suppressed [ 1467.316652][T31720] netlink: 'syz.2.8736': attribute type 1 has an invalid length. [ 1467.432359][T31720] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.8736'. [ 1467.795031][T31730] netlink: 'syz.2.8740': attribute type 10 has an invalid length. [ 1468.014239][T31740] sctp: [Deprecated]: syz.3.8742 (pid 31740) Use of int in max_burst socket option deprecated. [ 1468.014239][T31740] Use struct sctp_assoc_value instead [ 1469.598363][T31730] team0: Port device netdevsim3 added [ 1469.634211][T31745] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1469.708685][T31746] netlink: 'syz.2.8740': attribute type 10 has an invalid length. [ 1469.771375][T31746] device bridge_slave_1 entered promiscuous mode [ 1469.787867][T31746] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1469.842435][T31754] netlink: 'syz.1.8746': attribute type 10 has an invalid length. [ 1469.884107][T31754] team0: Device wg1 is up. Set it down before adding it as a team port [ 1470.672387][T31767] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8748'. [ 1470.751465][T31767] netlink: 763 bytes leftover after parsing attributes in process `syz.0.8748'. [ 1471.363496][T31808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8762'. [ 1473.457674][T31849] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8772'. [ 1473.498011][T31855] netlink: 763 bytes leftover after parsing attributes in process `syz.2.8772'. [ 1473.944098][T31866] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8779'. [ 1474.512816][T13328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1474.527758][T13328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1474.535693][T13328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1474.544780][T13328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1474.553619][T13328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1474.562056][T13328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1475.241613][T31878] chnl_net:caif_netlink_parms(): no params data found [ 1475.819715][T31878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.837436][T31878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.846091][T31878] device bridge_slave_0 entered promiscuous mode [ 1475.936752][T31878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.970795][T31878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.019948][T31878] device bridge_slave_1 entered promiscuous mode [ 1476.111078][T31878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.153863][T31878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.291963][T31878] team0: Port device team_slave_0 added [ 1476.441364][ T9646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.512217][T31878] team0: Port device team_slave_1 added [ 1476.553184][T31907] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8791'. [ 1476.597708][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 1476.761436][ T9646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.115312][ T9646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.181396][T31902] netlink: 763 bytes leftover after parsing attributes in process `syz.4.8791'. [ 1477.235625][T31878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.253682][T31878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.337354][T31878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.457126][ T9646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.531518][T31878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.557230][T31878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.651050][T31878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.677586][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 1480.603735][T31878] device hsr_slave_0 entered promiscuous mode [ 1480.737788][T31878] device hsr_slave_1 entered promiscuous mode [ 1480.758057][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 1481.136839][ T9646] device 0 left promiscuous mode [ 1481.908426][T31967] netlink: 'syz.1.8808': attribute type 1 has an invalid length. [ 1481.916327][T31967] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.8808'. [ 1482.837629][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 1482.931761][ T4278] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1482.939377][ T4278] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1484.234410][T32017] netlink: 'syz.0.8816': attribute type 3 has an invalid length. [ 1484.371660][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.378171][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.545064][T32017] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8816'. [ 1487.796608][T32047] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1487.870563][T31878] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1488.264874][T31878] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1488.461105][T31878] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1488.495214][T31878] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1489.302957][T32085] netlink: 'syz.0.8837': attribute type 2 has an invalid length. [ 1489.507928][T31878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1489.632380][ T4278] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1489.640652][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1489.651146][ T4278] CPU: 0 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1489.658781][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1489.668924][ T4278] Workqueue: hci4 hci_rx_work [ 1489.673700][ T4278] Call Trace: [ 1489.677045][ T4278] [ 1489.680043][ T4278] dump_stack_lvl+0x188/0x24e [ 1489.684817][ T4278] ? show_regs_print_info+0x12/0x12 [ 1489.690096][ T4278] ? load_image+0x410/0x410 [ 1489.694753][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 1489.699944][ T4278] ? __lock_acquire+0x7c40/0x7c40 [ 1489.705044][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 1489.709839][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 1489.715146][ T4278] kobject_add_internal+0x617/0xca0 [ 1489.720443][ T4278] kobject_add+0x160/0x230 [ 1489.724964][ T4278] ? kobject_init+0x1c0/0x1c0 [ 1489.729735][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 1489.735082][ T4278] ? klist_children_get+0x50/0x50 [ 1489.740176][ T4278] ? get_device_parent+0x121/0x3e0 [ 1489.745393][ T4278] device_add+0x470/0x1050 [ 1489.749920][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 1489.754956][ T4278] le_conn_complete_evt+0xf93/0x15c0 [ 1489.760382][ T4278] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1489.766709][ T4278] ? bt_info+0x180/0x180 [ 1489.771022][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1489.776738][ T4278] ? mutex_unlock+0x10/0x10 [ 1489.781378][ T4278] ? skb_pull_data+0xec/0x1f0 [ 1489.786165][ T4278] hci_le_conn_complete_evt+0x183/0x440 [ 1489.791813][ T4278] ? hci_remote_host_features_evt+0x230/0x230 [ 1489.797958][ T4278] hci_event_packet+0x7b3/0x1290 [ 1489.803009][ T4278] ? lock_chain_count+0x20/0x20 [ 1489.807943][ T4278] ? bis_list+0x280/0x280 [ 1489.812348][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1489.818347][ T4278] ? kcov_remote_start+0x50f/0x810 [ 1489.823531][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 1489.828810][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 1489.834097][ T4278] hci_rx_work+0x3eb/0xd40 [ 1489.838606][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 1489.843562][ T4278] ? process_one_work+0x7b4/0x1160 [ 1489.848757][ T4278] process_one_work+0x8ab/0x1160 [ 1489.853837][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1489.859559][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1489.864685][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1489.869814][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1489.875473][ T4278] ? wq_worker_running+0x97/0x190 [ 1489.880601][ T4278] worker_thread+0xaf5/0x12a0 [ 1489.885461][ T4278] kthread+0x29d/0x330 [ 1489.889590][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1489.894705][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1489.899378][ T4278] ret_from_fork+0x1f/0x30 [ 1489.903955][ T4278] [ 1489.909487][ T4278] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1489.924347][ T4278] Bluetooth: hci4: failed to register connection device [ 1492.327944][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1492.348258][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1492.428358][T31878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.539618][ T9646] bridge0: port 3(dummy0) entered disabled state [ 1492.591972][ T9646] device bridge_slave_1 left promiscuous mode [ 1492.610754][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.632620][ T9646] device bridge_slave_0 left promiscuous mode [ 1492.677825][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.762033][ T9646] device veth1_macvtap left promiscuous mode [ 1492.771575][ T9646] device veth0_macvtap left promiscuous mode [ 1492.781889][ T9646] device veth1_vlan left promiscuous mode [ 1492.795867][T32111] netlink: 'syz.4.8842': attribute type 2 has an invalid length. [ 1492.804237][ T9646] device veth0_vlan left promiscuous mode [ 1492.813799][T32111] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.8842'. [ 1493.265248][T32119] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.8846'. [ 1495.588706][T32119] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1495.612254][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1495.621977][T32119] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1495.635629][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1495.653932][T32119] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1495.666390][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.673564][ T9030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.697898][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1495.718407][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1495.728431][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.735580][ T9030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.743856][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1495.769652][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1495.794530][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1495.921117][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1495.984988][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1496.043042][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1496.052271][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1496.064602][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1496.073451][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1496.086202][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1496.109957][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1496.123945][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1497.028775][T32143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8853'. [ 1497.293829][T32151] device syzkaller0 entered promiscuous mode [ 1497.325759][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1497.337934][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1497.377348][T31878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.511635][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1497.568393][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1497.635809][T31878] device veth0_vlan entered promiscuous mode [ 1497.648778][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1497.669630][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1497.686061][T31878] device veth1_vlan entered promiscuous mode [ 1497.707346][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1497.716559][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1497.730845][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1497.798758][T32162] delete_channel: no stack [ 1497.819777][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1497.843919][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1497.854264][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1497.866098][T31878] device veth0_macvtap entered promiscuous mode [ 1497.876280][T31878] device veth1_macvtap entered promiscuous mode [ 1497.904072][T31878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.924264][T31878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.989255][T31878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1498.025571][T31878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.048878][T31878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1498.061708][T31878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1498.073371][T31878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.085543][T31878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1498.097214][T31878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.126905][T31878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1498.150155][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1498.164369][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1498.198997][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1498.217920][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1498.255972][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1498.277434][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1498.298848][T31878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.311734][T31878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.321674][T31878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.334445][T31878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.456836][ T9067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.469596][T32186] netlink: 'syz.2.8870': attribute type 27 has an invalid length. [ 1498.477681][ T9067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.493011][ T4278] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1498.501700][ T4278] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1498.511637][T32186] netlink: 'syz.2.8870': attribute type 4 has an invalid length. [ 1498.527885][T32186] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8870'. [ 1501.244254][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1501.307114][ T9071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.321470][ T9071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.334809][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1501.713923][T32211] netlink: 'syz.4.8878': attribute type 5 has an invalid length. [ 1502.040775][T32218] netlink: 'syz.3.8881': attribute type 1 has an invalid length. [ 1502.066239][T32218] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.8881'. [ 1503.178734][T13328] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1505.276378][T32230] ------------[ cut here ]------------ [ 1505.282053][T32230] WARNING: CPU: 0 PID: 32230 at kernel/events/core.c:6602 perf_pending_task+0x353/0x480 [ 1505.291964][T32230] Modules linked in: [ 1505.295896][T32230] CPU: 0 PID: 32230 Comm: syz.0.8886 Not tainted syzkaller #0 [ 1505.303559][T32230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1505.313799][T32230] RIP: 0010:perf_pending_task+0x353/0x480 [ 1505.319943][T32230] Code: e8 a2 72 da ff 84 db 75 10 e8 39 70 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 70 da ff e8 bc c0 58 ff eb e9 e8 1d 70 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1505.339836][T32230] RSP: 0018:ffffc900035978e8 EFLAGS: 00010293 [ 1505.346000][T32230] RAX: ffffffff81a7c2c3 RBX: ffff888049a97658 RCX: ffff88804b63bc00 [ 1505.354100][T32230] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1505.362163][T32230] RBP: ffff888049a97420 R08: ffff88804b63c603 R09: 1ffff110096c78c0 [ 1505.370230][T32230] R10: dffffc0000000000 R11: ffffed10096c78c1 R12: ffff88804b63bc00 [ 1505.378315][T32230] R13: ffff888059700960 R14: 0000000000000000 R15: 1ffff11009352e84 [ 1505.386354][T32230] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1505.395382][T32230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1505.402073][T32230] CR2: 0000000100000001 CR3: 000000005d515000 CR4: 00000000003506f0 [ 1505.410145][T32230] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1505.418210][T32230] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1505.426268][T32230] Call Trace: [ 1505.429644][T32230] [ 1505.432627][T32230] task_work_run+0x1d0/0x260 [ 1505.437290][T32230] ? task_work_cancel+0x220/0x220 [ 1505.442420][T32230] ? do_raw_spin_unlock+0x11d/0x230 [ 1505.447717][T32230] do_exit+0x9d5/0x2570 [ 1505.452056][T32230] ? put_task_struct+0x80/0x80 [ 1505.456888][T32230] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1505.462973][T32230] ? _raw_spin_lock_irq+0x86/0xf0 [ 1505.468090][T32230] ? lock_chain_count+0x20/0x20 [ 1505.473005][T32230] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1505.478129][T32230] do_group_exit+0x229/0x2e0 [ 1505.482813][T32230] ? lockdep_hardirqs_on+0x94/0x140 [ 1505.488110][T32230] get_signal+0x1259/0x1340 [ 1505.492781][T32230] arch_do_signal_or_restart+0xc4/0x1310 [ 1505.498560][T32230] ? __lock_acquire+0x7c40/0x7c40 [ 1505.503657][T32230] ? do_futex+0x310/0x320 [ 1505.508129][T32230] ? get_sigframe_size+0x10/0x10 [ 1505.513111][T32230] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1505.519080][T32230] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 1505.525281][T32230] ? exit_to_user_mode_loop+0x3b/0x110 [ 1505.530845][T32230] exit_to_user_mode_loop+0x70/0x110 [ 1505.536182][T32230] exit_to_user_mode_prepare+0xee/0x180 [ 1505.541825][T32230] syscall_exit_to_user_mode+0x16/0x40 [ 1505.547332][T32230] do_syscall_64+0x58/0xa0 [ 1505.551854][T32230] ? clear_bhb_loop+0x60/0xb0 [ 1505.556588][T32230] ? clear_bhb_loop+0x60/0xb0 [ 1505.561351][T32230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1505.567320][T32230] RIP: 0033:0x7f786d99e159 [ 1505.571838][T32230] Code: Unable to access opcode bytes at 0x7f786d99e12f. [ 1505.578940][T32230] RSP: 002b:00007f786e9120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1505.587398][T32230] RAX: fffffffffffffe00 RBX: 00007f786dc26098 RCX: 00007f786d99e159 [ 1505.595464][T32230] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f786dc26098 [ 1505.603537][T32230] RBP: 00007f786dc26090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.611590][T32230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.619652][T32230] R13: 00007f786dc26128 R14: 00007ffe38075690 R15: 00007ffe38075778 [ 1505.627735][T32230] [ 1505.630827][T32230] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1505.638154][T32230] CPU: 0 PID: 32230 Comm: syz.0.8886 Not tainted syzkaller #0 [ 1505.645641][T32230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1505.655735][T32230] Call Trace: [ 1505.659066][T32230] [ 1505.662045][T32230] dump_stack_lvl+0x188/0x24e [ 1505.666853][T32230] ? memcpy+0x3c/0x60 [ 1505.670869][T32230] ? show_regs_print_info+0x12/0x12 [ 1505.676099][T32230] ? load_image+0x410/0x410 [ 1505.680681][T32230] panic+0x2d3/0x710 [ 1505.684647][T32230] ? bpf_jit_dump+0xd0/0xd0 [ 1505.689200][T32230] __warn+0x2f8/0x4f0 [ 1505.693211][T32230] ? perf_pending_task+0x353/0x480 [ 1505.698371][T32230] ? perf_pending_task+0x353/0x480 [ 1505.703542][T32230] report_bug+0x2ba/0x4f0 [ 1505.707888][T32230] ? perf_pending_task+0x353/0x480 [ 1505.713015][T32230] handle_bug+0x3a/0x70 [ 1505.717191][T32230] exc_invalid_op+0x16/0x40 [ 1505.721710][T32230] asm_exc_invalid_op+0x16/0x20 [ 1505.726601][T32230] RIP: 0010:perf_pending_task+0x353/0x480 [ 1505.732349][T32230] Code: e8 a2 72 da ff 84 db 75 10 e8 39 70 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 70 da ff e8 bc c0 58 ff eb e9 e8 1d 70 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1505.751980][T32230] RSP: 0018:ffffc900035978e8 EFLAGS: 00010293 [ 1505.758064][T32230] RAX: ffffffff81a7c2c3 RBX: ffff888049a97658 RCX: ffff88804b63bc00 [ 1505.766061][T32230] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1505.774055][T32230] RBP: ffff888049a97420 R08: ffff88804b63c603 R09: 1ffff110096c78c0 [ 1505.782044][T32230] R10: dffffc0000000000 R11: ffffed10096c78c1 R12: ffff88804b63bc00 [ 1505.790052][T32230] R13: ffff888059700960 R14: 0000000000000000 R15: 1ffff11009352e84 [ 1505.798136][T32230] ? perf_pending_task+0x353/0x480 [ 1505.803275][T32230] ? perf_pending_task+0x353/0x480 [ 1505.808406][T32230] task_work_run+0x1d0/0x260 [ 1505.813024][T32230] ? task_work_cancel+0x220/0x220 [ 1505.818068][T32230] ? do_raw_spin_unlock+0x11d/0x230 [ 1505.823290][T32230] do_exit+0x9d5/0x2570 [ 1505.827499][T32230] ? put_task_struct+0x80/0x80 [ 1505.832292][T32230] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1505.838310][T32230] ? _raw_spin_lock_irq+0x86/0xf0 [ 1505.843401][T32230] ? lock_chain_count+0x20/0x20 [ 1505.848288][T32230] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1505.853359][T32230] do_group_exit+0x229/0x2e0 [ 1505.858071][T32230] ? lockdep_hardirqs_on+0x94/0x140 [ 1505.863308][T32230] get_signal+0x1259/0x1340 [ 1505.867861][T32230] arch_do_signal_or_restart+0xc4/0x1310 [ 1505.873532][T32230] ? __lock_acquire+0x7c40/0x7c40 [ 1505.878590][T32230] ? do_futex+0x310/0x320 [ 1505.882938][T32230] ? get_sigframe_size+0x10/0x10 [ 1505.887907][T32230] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1505.893827][T32230] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 1505.899941][T32230] ? exit_to_user_mode_loop+0x3b/0x110 [ 1505.905438][T32230] exit_to_user_mode_loop+0x70/0x110 [ 1505.910759][T32230] exit_to_user_mode_prepare+0xee/0x180 [ 1505.916336][T32230] syscall_exit_to_user_mode+0x16/0x40 [ 1505.921832][T32230] do_syscall_64+0x58/0xa0 [ 1505.926271][T32230] ? clear_bhb_loop+0x60/0xb0 [ 1505.930965][T32230] ? clear_bhb_loop+0x60/0xb0 [ 1505.935670][T32230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1505.941589][T32230] RIP: 0033:0x7f786d99e159 [ 1505.946019][T32230] Code: Unable to access opcode bytes at 0x7f786d99e12f. [ 1505.953068][T32230] RSP: 002b:00007f786e9120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1505.961500][T32230] RAX: fffffffffffffe00 RBX: 00007f786dc26098 RCX: 00007f786d99e159 [ 1505.969495][T32230] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f786dc26098 [ 1505.977493][T32230] RBP: 00007f786dc26090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.985487][T32230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.993490][T32230] R13: 00007f786dc26128 R14: 00007ffe38075690 R15: 00007ffe38075778 [ 1506.001499][T32230] [ 1506.005124][T32230] Kernel Offset: disabled [ 1506.009485][T32230] Rebooting in 86400 seconds..