last executing test programs: 5.733378722s ago: executing program 4 (id=1570): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100fea0020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xc, 0x7f, 0x2, 0x7, 0x4008, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x79, &(0x7f0000000000)=r6, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001680), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{0x1, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9c83d5f40f72ab587497cc0872c73260d0a12cb6127da9203656dbae73405c71927ff9b42c4c3e227e1ce6c331e5b88ba97c994f941d38c65d0a5de3b42dd28a2b7c018333a7ba93bf2434dd949260eb6f798c49d50c80bfd7e6cdd9d54a88e3b51d02649a9495c38d4da94b3f314ab4956ad36af7fa1b6ac2d5f0dd7479536", &(0x7f0000000ec0)="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", 0x402, r11}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/229, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r11}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001780)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000017c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x7ff, 0x1, 0x1}, 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000018c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001980)=@generic={&(0x7f0000001940)='./file0\x00', 0x0, 0x8}, 0x18) r17 = bpf$ITER_CREATE(0x21, &(0x7f00000019c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x13, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xdc9}, [@tail_call, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r2}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}]}, &(0x7f0000001500)='GPL\x00', 0x2, 0xb7, &(0x7f0000001540)=""/183, 0x40f00, 0x40, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001600)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x4, 0x6, 0xff, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[r8, r9, r10, r11, r12, r13, r14, r15, r16, r17], 0x0, 0x10, 0x9067}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) r18 = gettid() r19 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r19, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r1, &(0x7f0000001340)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="c9e8da1e6c482ae71e2f37b381eed3d80ae8c6d73354c5af243e212c0fe25f2664e5fb0e7fa6733dd1013330410e24ee830d2eec1168eb845ea23f454543cf44daaad0354b8c33f83be04c695369a9715e5d1c317a10b01574105b46ba83f7", 0x5f}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="d6526953438fffc2c05c593c5c038557b982b64e8bfc7ee644a9ec56035e895fb923e471df1309c1ab4bf4c7ef5e5d40219da97ad4e5d2db7da8d1afe203165db3905ff6d2dc4dbc55e05b98fe9e56e785c67c611a948ae2", 0x58}], 0x4, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {r18, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}], 0x60, 0x40}, 0x0) 4.712226959s ago: executing program 3 (id=1573): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92624fc60", 0x14}], 0x1}, 0x60000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x1, 0x47}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)="513b5a9c0c0000fb4c4241fc055d4341c33b9824823abc54e587fe002bdaa55aaa1db6d56f8680a51fb35301306c13871d164a2f2e39aa8582dade0e3d838d0b5727fd6ba5b5c7006e9e92d89a98189bb7566883e135fea16e00bdc49aafd60d6615175b01daee95b919299668fd5e5c6f8e9ad25294bfab2b000289aa95a80039332e4f475c138123f65c1aa5aa94d4e47715a77b9efe0055a930ffe075803a7a55357955523daa27bc6aa377904f9a2094cdc6fe7dd3208bd71ca12d", 0xbd}], 0x1}, 0x40080) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.68733902s ago: executing program 4 (id=1574): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="02090000000000000001"]) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xcc, &(0x7f0000000340)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d803000000000000", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 4.49282176s ago: executing program 2 (id=1575): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000100000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x6, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4.321062128s ago: executing program 4 (id=1577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c022, 0xac5d}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x27, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000240)) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x0) close(r4) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$inet(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000040)="5743a2", 0x3}], 0x1}, 0x400c812) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x58}, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x75, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x80}}]}, {0x0, [0x61, 0x1e, 0x0, 0x5f, 0x61, 0x0]}}, &(0x7f0000000ac0)=""/27, 0x44, 0x1b, 0x1, 0x1, 0x10000}, 0x28) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x8cc, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x5}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x4010, r3}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x1, 0x6, 0x3, 0x50, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0xfcec, 0xeb, &(0x7f0000000640)=""/235, 0x41000, 0x2, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000b40)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x1, 0x11b9, 0xf80a0000}, 0x10, 0x1d75c, r2, 0x3, &(0x7f0000000cc0)=[r11, r12, r1, r3, r1, r3, r3, 0x1], &(0x7f0000000d00)=[{0x3, 0x4, 0xe, 0xc}, {0x1, 0x4, 0x1, 0x3}, {0x4, 0x5, 0x6, 0x7}], 0x10, 0x3}, 0x94) 3.966647764s ago: executing program 2 (id=1578): socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000db0745000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) socket$kcm(0x10, 0x2, 0x10) socketpair(0x1e, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0x1, &(0x7f0000001700)=ANY=[@ANYBLOB="99000000001c"], &(0x7f00000015c0)='GPL\x00', 0x4, 0xc7, &(0x7f0000001600)=""/199, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001900), 0x0, 0x10, 0x7fffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 3.089941286s ago: executing program 2 (id=1581): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc7020000080000001826"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, 0x0, 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000008f00000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 3.062176767s ago: executing program 0 (id=1582): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 2.78063324s ago: executing program 0 (id=1583): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.712323973s ago: executing program 4 (id=1585): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4, 0xe000}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0x800000, 0x378e}, 0x1400, 0xfffffffffffffffc, 0x2, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7fffffffb, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x12, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, [@alu={0x4, 0x1, 0x8, 0x4, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffc}, @generic={0x73, 0x9, 0xb, 0x5, 0xd}, @jmp={0x5, 0x1, 0x4, 0x9, 0x1, 0xfffffffffffffffc, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0x1, 0x9, 0xa, 0xffffffffffffffff, 0xc}, @exit]}, &(0x7f00000003c0)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x1, 0x9, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e00), 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0xfffffffc}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) write$cgroup_devices(r5, &(0x7f0000000280)={'a', ' *:* ', 'wm\x00'}, 0x9) 2.664342345s ago: executing program 3 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x8004, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.3448617s ago: executing program 1 (id=1587): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="02090000000000000001"]) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xcc, &(0x7f0000000340)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d803000000000000", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.34453663s ago: executing program 2 (id=1588): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000100000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x100080, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x6, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.207127427s ago: executing program 4 (id=1589): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0xb, 0x0, 0x0, 0x0, 0x0, 0x801ac, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x8}, 0x1000, 0x14, 0x0, 0x8, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x400}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0xfffffffffffffff7, 0x0, 0x0, &(0x7f0000000180)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000001840), 0x6, 0x0, 0x5}, 0x80d1) recvmsg(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000440)=""/134, 0x86}], 0x2}, 0x40010040) 2.12698066s ago: executing program 2 (id=1590): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a", 0x11}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2010, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id, 0x80, 0x0, 0xfff5}, 0x0) recvmsg$kcm(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 2.111314141s ago: executing program 1 (id=1591): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200000c33a53184392e5e1ff07000000da33640df3de730ed400000000000000"], 0x20}, 0x41) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000069006bcd8e3fe3dc6e000000008c000000007280", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001400)="c81b4eec9207723f7d2ef28cd5627dadb22cf94b879306895ebeb350e2d8ae5725c73b29f94d383564e5750a93f282276d7cf3acc297a8451394a0fd54691b1344a41e092176801fe5991c255e85fabe94d236f9e164af81399f8b371df1ea4c808a971a920d9add7457fae097d0807f56e08fea5429af9a3ff3f6218d2eea0e8bf5da1a3249a1f5c276a81eec89f941a3cdbe3a91b4dc979fdc8361c82da4241b2cb6b806812e2eb7e9e3c71bf59900501e2388000548274948a169154de29865a465d6375eb46c7d244d31dfc9778298ee7e11b656a226493e21b5aeb67ce78fe344b119ec95dc2f6cabe901be542006c9a708fe8e0f5b236f44f575284bd3e6fd167f91776b403cdc992b1b0bbefada34a487078a41fc066ad27d40a1c764a065a5f86c662126fdae787cb9dd5ca05b9aeac31c4d93eb8b31b9b610cbfff5902b218e82963025f278b01de3d861f69294c226457dcf3f2d850af62a00fa4739509a9c5e3666826af82a452c128bb207b0b5c0db79779f4f25bd6d4892b22c3b05a5ed079cfb101883b591b1668d46ebafe5556388ce9b9e5b510b30675cc4a506c6f47449b777de5768d60688d117ab56407a6eaa606da3f8753ac96a4f5efdbb94c6511dca45c1b44ea85e8c83f726f174b1289f73c364cd775206f99303f9c5fbbefde5533d11b5a45ebb75ae7ae5bc36b566ee6e372cb95739fadef2a7bc1ad56963ce54fbc6562cf0762b7fe2bd6e07fd52da4afa8daf083576af6b6563057f7b1e3d8b0a4a62083b641057480cfe0513aff4ba4fdbf6aedebe55fd7359df7e66abe2129628225e5801b850b389c734649aaf5d9103989cdd1b87d22a11e181542db8bd4d6d2012df59a7aead73329b213065c0c5401e480c1ddb69b07a43d9af0d13aedb85c42f505fcaba20a82eb16884afe10ea4b98009facd7ad2eb09b806cce4a8b435bb81b0902a26f197dc00a75924cbf0176a8e85c7f1d452a14270d2880987d5c49dd90c0a49eaa53e8ca6e9f000b80a39b7d6dcd7489b0fed000ba6fac994353a0ceb63dcff3b37d0b7ff8c72d97df31994176c8b5f99c9a69b753c37941c25210f80722f93df43c5e0a3d66fabf69e4468bf413d59c3e48723443f5c0646c81edae1e8ffed310353e11735d2c064d5486b18b7f1e1f8e62c51b01e0044d1e9bc86e0af9d1376043c00e77cf4bb3e36066c18d4804c8b37b0a047c5db06f09a6d9dc3b8e9da82ac5eb66988df6fb4c3b7409e5280200c4e12182b0887518bbd74b99b01ea7a7cc54a6406f5fca0ff3a0d3e7b3f1b5fbf4a4cc9bc34ffb4d5d38654d664e25cc30d67ae30fe849c23d63940b1abb18a715f4131785fdec0a736e841afbb9752a3dc0257024c4cffa9d6fa810a219fbd7625abe47aad85eb10d08dee498742648f86bed3566f2fc96533918c171ccb39c3e13e97ac74d62a515c4a816b1df55d764520e615e3e69801bf1e964a49dd7ef1dcfe5aa6f4f439f1b75293111dcec150e9d6fbd46cdfd0caab96962de7e293f02bc84fa0141b25fd758aeccad32ca05bdda36207160d6f7cfda313bfda8e90bb321f126a4a4b49b6058d325d8fffff2f49a5b89e999f25007d4976d23968553fe5b2de3287c56b79ff26c07b0263d868184d172cdafc41a167b422985a57e8edd5a4c8cab1d80f37275d6c977df86c124912802d57e35c46d96c2332f1ebb486d4eee8035db641e990f74b200b535f38e492dd53a9c59e86e854314ecd9601031e20db060f60fadb2e9b2ad16aec59dd1f535c4cfe5c66fab5890df84355bd377b8f77d92353d77d9bee133ca746f12a5bbd3f3e0599a11a68c6d907320ecab0188891b99eec6e6dc65df8a35493c7243069a44397f5ac432a6f286fe86669d13deae2a2ce36730504b782f909e61dcac1e2c8dc13ee9818170aa2595632c66a0278189f3eab29959d0d2486ee6e6ed38013c2e8d9f641e7fb6d4c749ae8c2e4b76ce9f7faa0e6ee1f582b5ed1279a5892c6c91304482940c16a3e776de45bbe956afd362c1fce2b5ded94d2366dceec2ad68b45bf6c17463d94754018ca83a4c2ea5945095dd4f6b47630db1bcc6e61e48b5771e3cc6b04a1d0959ea12b5fae4afdbde5dafb515cfaa1ef33384712c64e8226d103b05f35e96d176aecc9aca329e810914bb3323a800a5f71da9f18ca9e2abf755ebf77adb7dba0bfee32b8516c8d369e1dc640d703a976949e85b2a6b26f8add059e96456847681a42110aedcf14e452c983067dd119b8b0b24df6ef8f104151d2989ba79790ce9ec442aaff08588e3db23d3ff5639876bf4fb3a90b8ae98efb86d6ade9b333576d646d604bd2dbb9b7dc13e8f9398e7e6a425c39acbbb24056d6ca6a9184b58512406418c521e267dd2f2a469fcbae3512a30d3f3862f77113439b9bcbce71ad6f61c628010b3c41d69109231cd370f1054018f9cc497b88f2e52f5e513f2b496a44700b5313c2bddf364e466a2a614c9801799478fb622997e21c9cb8101d3a4a8b2035e86b174dd8aa12e787925505946259dcf6b6aa166775a7fa0ba6a33c515d8f25edb8862d1d2ca0a908a503fbab124e6a9de349e0e063bb4c282c35f7432a9f89d0c68e769a3e0079c5e09318d2069cef29402c61e3af307dbb06df12fc056f84727f07ea64a5a9163696aacd76e5b66d06bd479794d75458a8bb3c9fa9ce1963c1931ca22ce8f4447346acd6ab012b9190b5761f50ac8957126862fd67d1ac2d76969d550f8c4ad06e4906af8ef95e2fd9a7eabe7accc8435daa6e088b456a7842b17a97b0be6d3038d8f2f79cddcf9aa914ce251acdd3f01f8a20e48cee03fdb03933728392cc1d7ea96b891a91dec99e19dcd6c227608f07d569d8b97c5c3829e2f99955b7b047faa6a4f070b7590d5fbff65c0c45c158251c07961d5ee6fd9fe00ff020c5499dae82d67f581ecbf00a7910f710ea97a44bd93aa19cd772fcb59ba12ebbdbb41747ca1c68308b3d66d752ed60794b9d366333f8fd059cb340191151bdac96e16afec56651ed9b1e39229c3f7d48241d57cd12376abba99e08d993f4e6b45a172c5c5131d13e2f81c016311efaa8ca7f39adbaaec619bd0b1960a599c9e8d4b206282c2012afb5c79cbd87d7ef27a828f268fe17a474d0a35e3731362871b80cbda6f5212d573fee75032b3f761d876c56e46b30605c093d1b6c84ce85022eb5cc2aae098a27e927afb8637989494efc5ea1342e7eca7fa9a4eb8181ba05ec6d005bb50a7b7cc7bc959a21540cddf1527c166c53145137e05b199c00cdee1569dd2b950e0dd63558b2471a6902d64f249adddacb41c3c92a1e03cd36ef2e5f3002cfad25d2a3156beaf817c43911d7786d28640466f351c025d1eea0c60a8b3225c8b9388d605f78a9f6c328b8325491ec11a102b8ae7cc10bf2a9c95da9e9cd25fcd10de27c09143bec2273d44a70a74058914975fbdeb85187a4a7b938a944441a40d381ccb5ac34598d067c7818516e0c083e1d181f39391cc4713c95d1be5f8813cb8e8a2b3daa1b7fc8cbffc511b478e395cafc71a3af091fcd6c5e12cbdf9d9042dc62889bced0e3a31f318b86c8358cab705cd3179e4656b88916931f6ba7a8e4bd7729ae834cd63ffc86cd2fcbabc9bd96c0e63ffe4714b804cb4a218b550964f0f221d18a6fe7c21b9ac10689684b799bfbd93209eb7a8cec95a26da2444964e6d2a293c838e0a3f9178fee38d73986df4e004d95cdf1b11af0c21f7313cd55751e4d5e1fe4c84bad0ccbe45741d04f55eb465d178906b3487e7bf23f6fe8215bd67a6dcc8402a1d948418e19fe3773aabaee06c9d68d512eb0fe88ee0b74f97900394490a475042104d6dfa877123dd91d7ff5c546aa4ab31359824f3473592cb936585cd65c42ba60b2298b71bf7d87372833173d0f657d2517f26d06aab4d3f97d31b9e028197637de4b789a4c565b996da1fb7369ac8cf3e491aff4569f5b25236fd4251d45e0323e858769bf4d588d1b87e6b482feb0b4938bd6c0ccf715d5af5c4329878ad68b37a105f6856ac0fa2f3c3e0e3d6dc449508d313771d6a0842389eb6d6504d53a92010ed773c72e657c467e4aba9aa9e5858f4aede2b502a60b96e7b621fe8e0b423e36e067e1a6acfea878bce49639c276a910ed4fdd268b44f9a432f2088a98a216d01a3a29e52400997199bbf2d03979435dc6230916c025d9fee19bc66206296cb0520fdbedcbc05e157f443b0fad36fba761af9f9e399629ec896f637d07a44694f1362c08a87a424a059fb9eca32ed7265d7fa2f9914c631f39b1e4b0edcc574afe4f20b0b1b2cfb95e88e152207c2266b86ece231046a1fb8979e525a444529eb73373b87b5f5d8b999759dab1f09d0e9a354ed784cbc5a2667d4dfd76c54704b95696f386785e6662f7f3e9e856173f953961cc4895fe0c22b25c9f4fd018c2bee3e132749bc1cf4125ef1a695afda8b7bb303e5714ff925489b6217715503b13ab7876e9e609ddfc6f25c9d82dcd933f4457d3c87e88185f7eff30fac9ff115c66ead900be4ee51fbfdf9e2c05445b197e20fb88b7c9d2513db40a5f28b11b974c0358160ebaa6ef92b5b625259c7f7da785f93a2ae042decaf148da918e3d78b0058be596aeb2f23cb8e1f8f9e3b57c139102821647c74da779022d3147d55dd02a5ce897153aad8bdf95af76ba62bff8c920e9f642742e63a9e52800249979f647eba2060ce8a6d32cf87e27948612105f2ceed3bb33e7db51ba8dda7c0fce18bd86ffb7e203b2ccfb731468334dae6d299071b8323f8e7c6e2ac734cfb18cec94fb39e9917176cf3f4f83e07f0d185d3e0756e36fe6ed87062159efe167680413be5adefbb415533a6bb402eb11070bc14d25462932648645b1017a32c418a905510304bd9755cd42498088fa368232076ffc89a9bb4b24951a302e141bcee0ac8678ce36138cece69a8fef729efd4c4ea963acf671c7ed20c1f9635b7ce65f4e31f8e3a29d277404b4be84a17b8c55d791d0df3ae0a5fbc650830fcafeefa5f8b6031c87e1823f77b27b718f0df967e6ea82c196f6d573eee6be1b270d729be594e1470bc2b86a72561c23a8854919958182cbf295570950349cc4bb85bd3e1808a7301dc1d3a1c7f5e86400d98e71114ed262d71cb4967ce9406cb3319dcf1edb42417290c86fce8ea6e99a881f5a0fa541dbe51aeb5bf4e394d67f36408c16ba66b46f097d4762b712f6fd7c9db6db988a208161326350b130fc06a5679dff48c684ac8c2a586f2d0819bac8fd7a764de60111df4ab26c9219994bb81964657b0abd59ebe13b3efe742dd6cbd6fe1f049b77618b9d430d5eafdf2a864a76c338906d8af2e0edb7f9eec7f69bc13e3216b081fb021c27a5ff7ebe96fde2772ed74f1ec55a9f8599f355c86ae37c10a1806ecdefd91e374ad7da2c8c2659fcbffdf83d6785888b2a130b5a9aa4b5f79520bfc28aea8daab24de8ab6120364fa57a17307ee5d20feb492e807a37984f409b1feef86b684ca3f5272f3a5da9b8cefae5e79d84a7942c2b5ffbce732a66ef07d185b5a0f47155f68ecb83147e6746b2ab4dc48bed1854730b285d9147a0b8048d21e856e4cf01ef928e05cb945a3cda4f6c23342e2dd66419644ab512912d7000f9c33b0898823761d7ca46b59275b037777287af8902ef7399a66416586bbc5f7aa34672e75d97ed56953fcfeabc7ae3962c76ded8aec2609af131910bc3e87eb9a0ef79259eb973218c0f44c68f361b6d1850cf5e", 0x1000}, {&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}, {&(0x7f0000000500)="107e349fc9216ae438c32896194fa5e17bc505d1d9c64dcb8a73a8a623aaeeae2f73a84c247666d7800403298d036160b15e915f71d18a26ed750de07559521024e099606f58f87e6adc910544b8a6cf7aabe0ff1e66b63d34c58fa350bc7bde72f7957aea468608410e0ffbd14fdd476e0b66c8711a3750cd2d14e8c87e9ee31b953e4cf138c6ae1bcf60a95f35abe3bcf7acc4ea549267943ca6a80e3d2789d7cbaa1617d1cd95e784316c70b273898baad6262921fc5feaa1c437b78b1c925ee3a36d96c6f2d0e6f02c12d271ce83218ed49e6f8eead232", 0xd9}], 0x3, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504fa5340000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10001001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000004c0)={r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c100100000d38e4c000000030000008500000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0x8, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2402c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e6cf0422c68e60075d16a9"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000073f59cf90538a6c2b45ca47e852"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200f8ffffff85000000010000009500"/40], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_int(r3, &(0x7f0000000180)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000002c0)=0x46c3df91, 0x12) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2.008973626s ago: executing program 3 (id=1592): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200200000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) 1.698640461s ago: executing program 0 (id=1593): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x1d, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd80c2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(r1, 0x0, 0xffdd) recvmsg(r0, 0x0, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000080)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}, {&(0x7f0000000100)="201b6d1725e62c69552ccfd9a1c2967c58c3582ffbf1580a451d595c878e21297d074f3b3d23640dc580b40cb8d12e752f8d395462c4db24f191944a94987b092a502b23c3a64e9e41e40649a6848b08c7c5946dcca890", 0x57}, {&(0x7f0000000180)="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", 0xff8}, {&(0x7f0000001180)}, {&(0x7f00000011c0)}], 0x5, 0x0, 0x0, 0x1f000801}, 0x40) 1.550883147s ago: executing program 3 (id=1594): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, 0x0, 0x24040004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000050000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5350a0e2ad0fd2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f00000000c0)={'tunl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0xff00) 1.252766191s ago: executing program 1 (id=1595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0x800000, 0x378e}, 0x1400, 0xfffffffffffffffc, 0x2, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7fffffffb, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x12, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, [@alu={0x4, 0x1, 0x8, 0x4, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffc}, @generic={0x73, 0x9, 0xb, 0x5, 0xd}, @jmp={0x5, 0x1, 0x4, 0x9, 0x1, 0xfffffffffffffffc, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0x1, 0x9, 0xa, 0xffffffffffffffff, 0xc}, @exit]}, &(0x7f00000003c0)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x1, 0x9, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e00), 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0xfffffffc}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0xffff0f00}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) write$cgroup_devices(r5, &(0x7f0000000280)={'a', ' *:* ', 'wm\x00'}, 0x9) 1.002130344s ago: executing program 2 (id=1596): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c022, 0xac5d}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x27, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000240)) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x0) close(r4) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$inet(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000040)="5743a2", 0x3}], 0x1}, 0x400c812) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x58}, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x75, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x80}}]}, {0x0, [0x61, 0x1e, 0x0, 0x5f, 0x61, 0x0]}}, &(0x7f0000000ac0)=""/27, 0x44, 0x1b, 0x1, 0x1, 0x10000}, 0x28) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x8cc, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x5}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x4010, r3}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x1, 0x6, 0x3, 0x50, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0xfcec, 0xeb, &(0x7f0000000640)=""/235, 0x41000, 0x2, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000b40)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x1, 0x11b9, 0xf80a0000}, 0x10, 0x1d75c, r2, 0x3, &(0x7f0000000cc0)=[r11, r12, r1, r3, r1, r3, r3, 0x1], &(0x7f0000000d00)=[{0x3, 0x4, 0xe, 0xc}, {0x1, 0x4, 0x1, 0x3}, {0x4, 0x5, 0x6, 0x7}], 0x10, 0x3}, 0x94) 854.36481ms ago: executing program 1 (id=1597): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 759.842204ms ago: executing program 0 (id=1598): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000004007020000fcffffff620200000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005e000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 655.961079ms ago: executing program 4 (id=1599): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc7020000080000001826"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000008f00000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 420.535011ms ago: executing program 0 (id=1600): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000100000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x100080, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x6, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 397.038192ms ago: executing program 3 (id=1601): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="02090000000000000001"]) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xcc, &(0x7f0000000340)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d803000000000000", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 328.112145ms ago: executing program 1 (id=1602): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000010000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 72.656277ms ago: executing program 1 (id=1603): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000039d50100000006"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000039d50100000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000000080)=""/68}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000000080)=""/68}, 0x20) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x500, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x500, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) write$cgroup_netprio_ifpriomap(r9, 0x0, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x7, 0xe80, 0x0, &(0x7f0000000040)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11.83139ms ago: executing program 3 (id=1604): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) 0s ago: executing program 0 (id=1605): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_clone(0x22000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800700}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x4000, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): [ T4273] device_add+0x470/0x1050 [ 108.484110][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 108.489164][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 108.494497][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 108.500801][ T4273] ? bt_info+0x180/0x180 [ 108.505162][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 108.510937][ T4273] ? mutex_unlock+0x10/0x10 [ 108.515470][ T4273] ? skb_pull_data+0xec/0x1f0 [ 108.520175][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 108.525763][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 108.531855][ T4273] hci_event_packet+0x7b3/0x1290 [ 108.536826][ T4273] ? lock_chain_count+0x20/0x20 [ 108.541707][ T4273] ? bis_list+0x280/0x280 [ 108.546064][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 108.551989][ T4273] ? kcov_remote_start+0x50f/0x810 [ 108.557128][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 108.562368][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 108.567609][ T4273] hci_rx_work+0x3eb/0xd40 [ 108.572056][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 108.576949][ T4273] ? process_one_work+0x7b4/0x1160 [ 108.582089][ T4273] process_one_work+0x8ab/0x1160 [ 108.587088][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 108.592764][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 108.597816][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 108.603396][ T4273] ? wq_worker_running+0x97/0x190 [ 108.608451][ T4273] worker_thread+0xaf5/0x12a0 [ 108.613183][ T4273] kthread+0x29d/0x330 [ 108.617273][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 108.622317][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 108.627023][ T4273] ret_from_fork+0x1f/0x30 [ 108.631489][ T4273] [ 108.636526][ T4273] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 108.649687][ T4273] Bluetooth: hci0: failed to register connection device [ 108.712644][ T4722] team0: Port device dummy0 added [ 108.736352][ T4721] netlink: 'syz.0.129': attribute type 10 has an invalid length. [ 108.760683][ T4726] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.132'. [ 109.020945][ T4732] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.133'. [ 109.276077][ T4273] Bluetooth: hci3: command 0x2016 tx timeout [ 109.626630][ T4754] netlink: 'syz.2.144': attribute type 10 has an invalid length. [ 109.666431][ T4756] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.142'. [ 109.723872][ T4273] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 109.731792][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 109.742460][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 109.750062][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.760157][ T4273] Workqueue: hci4 hci_rx_work [ 109.764901][ T4273] Call Trace: [ 109.768227][ T4273] [ 109.771193][ T4273] dump_stack_lvl+0x188/0x24e [ 109.775917][ T4273] ? show_regs_print_info+0x12/0x12 [ 109.781162][ T4273] ? load_image+0x410/0x410 [ 109.785741][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 109.790914][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 109.796001][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 109.800746][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 109.806001][ T4273] kobject_add_internal+0x617/0xca0 [ 109.811296][ T4273] kobject_add+0x160/0x230 [ 109.815777][ T4273] ? kobject_init+0x1c0/0x1c0 [ 109.820537][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 109.825896][ T4273] ? klist_children_get+0x50/0x50 [ 109.831067][ T4273] ? get_device_parent+0x121/0x3e0 [ 109.836249][ T4273] device_add+0x470/0x1050 [ 109.840734][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 109.845729][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 109.851089][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 109.857374][ T4273] ? bt_info+0x180/0x180 [ 109.861643][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 109.867310][ T4273] ? mutex_unlock+0x10/0x10 [ 109.871841][ T4273] ? skb_pull_data+0xec/0x1f0 [ 109.876559][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 109.882150][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 109.888246][ T4273] hci_event_packet+0x7b3/0x1290 [ 109.893220][ T4273] ? lock_chain_count+0x20/0x20 [ 109.898106][ T4273] ? bis_list+0x280/0x280 [ 109.902460][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.908388][ T4273] ? kcov_remote_start+0x50f/0x810 [ 109.913541][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 109.918773][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 109.924092][ T4273] hci_rx_work+0x3eb/0xd40 [ 109.928626][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 109.933515][ T4273] ? process_one_work+0x7b4/0x1160 [ 109.938650][ T4273] process_one_work+0x8ab/0x1160 [ 109.943626][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 109.949289][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 109.954353][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 109.959934][ T4273] ? wq_worker_running+0x97/0x190 [ 109.964983][ T4273] worker_thread+0xaf5/0x12a0 [ 109.969717][ T4273] kthread+0x29d/0x330 [ 109.973822][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 109.978892][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 109.983506][ T4273] ret_from_fork+0x1f/0x30 [ 109.987962][ T4273] [ 109.996061][ T4273] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 110.009282][ T4273] Bluetooth: hci4: failed to register connection device [ 110.205259][ T4761] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.156'. [ 110.298923][ T4273] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 110.306884][ T4273] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 110.491495][ T4273] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 110.499174][ T4273] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 110.716312][ T4273] Bluetooth: hci0: command 0x2016 tx timeout [ 111.030791][ T4273] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 111.038443][ T4273] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 111.549907][ T4799] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 111.573562][ T4799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.160'. [ 111.626563][ T4799] device dummy0 entered promiscuous mode [ 111.676135][ T4273] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 111.684749][ T4273] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 111.850851][ T4799] team0: Port device dummy0 removed [ 111.862653][ T4799] bridge0: port 3(dummy0) entered blocking state [ 111.870948][ T4799] bridge0: port 3(dummy0) entered disabled state [ 111.904226][ T4806] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.162'. [ 111.923890][ T4808] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.164'. [ 112.537183][ T4827] Zero length message leads to an empty skb [ 112.632294][ T4827] syz.4.171[4827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.633576][ T4827] syz.4.171[4827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.083291][ T4843] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 113.103581][ T4843] device dummy0 left promiscuous mode [ 113.120065][ T4843] bridge0: port 3(dummy0) entered disabled state [ 113.137941][ T4843] team0: Port device dummy0 added [ 113.143763][ T4844] netlink: 'syz.1.177': attribute type 10 has an invalid length. [ 113.291029][ T4273] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 113.298637][ T4273] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 113.571477][ T4286] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 113.579340][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 113.589084][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 113.596697][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.606798][ T4286] Workqueue: hci3 hci_rx_work [ 113.611538][ T4286] Call Trace: [ 113.614858][ T4286] [ 113.617833][ T4286] dump_stack_lvl+0x188/0x24e [ 113.622567][ T4286] ? show_regs_print_info+0x12/0x12 [ 113.627820][ T4286] ? load_image+0x410/0x410 [ 113.632400][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 113.637570][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 113.642660][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 113.647446][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 113.652707][ T4286] kobject_add_internal+0x617/0xca0 [ 113.657969][ T4286] kobject_add+0x160/0x230 [ 113.662447][ T4286] ? kobject_init+0x1c0/0x1c0 [ 113.667219][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 113.672555][ T4286] ? klist_children_get+0x50/0x50 [ 113.677626][ T4286] ? get_device_parent+0x121/0x3e0 [ 113.682833][ T4286] device_add+0x470/0x1050 [ 113.687320][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 113.692330][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 113.697690][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 113.703969][ T4286] ? bt_info+0x180/0x180 [ 113.708237][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 113.713903][ T4286] ? mutex_unlock+0x10/0x10 [ 113.718432][ T4286] ? skb_pull_data+0xec/0x1f0 [ 113.723134][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 113.728718][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 113.734808][ T4286] hci_event_packet+0x7b3/0x1290 [ 113.739782][ T4286] ? lock_chain_count+0x20/0x20 [ 113.744675][ T4286] ? bis_list+0x280/0x280 [ 113.749044][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 113.754975][ T4286] ? kcov_remote_start+0x50f/0x810 [ 113.760114][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 113.765341][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 113.770583][ T4286] hci_rx_work+0x3eb/0xd40 [ 113.775028][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 113.779917][ T4286] ? process_one_work+0x7b4/0x1160 [ 113.785062][ T4286] process_one_work+0x8ab/0x1160 [ 113.790040][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 113.795705][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 113.800766][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 113.806349][ T4286] ? wq_worker_running+0x97/0x190 [ 113.811406][ T4286] worker_thread+0xaf5/0x12a0 [ 113.816119][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 113.822052][ T4286] kthread+0x29d/0x330 [ 113.826141][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 113.831190][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 113.835803][ T4286] ret_from_fork+0x1f/0x30 [ 113.840288][ T4286] [ 113.844779][ T4286] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 113.858420][ T4286] Bluetooth: hci3: failed to register connection device [ 114.310468][ T4844] team0: Port device geneve1 added [ 114.349905][ T4846] netlink: 'syz.1.177': attribute type 27 has an invalid length. [ 114.365727][ T4846] netlink: 152 bytes leftover after parsing attributes in process `syz.1.177'. [ 114.376272][ T4846] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 114.732698][ T4873] netlink: 132 bytes leftover after parsing attributes in process `syz.0.186'. [ 114.988999][ T4883] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.191'. [ 115.268129][ T4887] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.193'. [ 115.880013][ T4900] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.199'. [ 117.041285][ T4286] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 117.048930][ T4286] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 117.585347][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 117.860546][ T4956] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.216'. [ 118.169314][ T4970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.221'. [ 118.937330][ T4273] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 118.944847][ T4273] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 119.080346][ T4992] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.231'. [ 119.724643][ T5015] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 119.834301][ T5015] team0: Port device dummy0 added [ 120.333496][ T5028] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 120.456817][ T5030] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 120.490810][ T5030] team0: Port device dummy0 removed [ 120.524205][ T5030] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.754655][ T4273] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 121.762574][ T4273] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 122.433218][ T5075] netlink: 'syz.2.257': attribute type 10 has an invalid length. [ 122.470056][ T5075] team0: Port device dummy0 added [ 124.052830][ T5114] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.272'. [ 124.407993][ T5124] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.276'. [ 124.532061][ T5131] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 124.576558][ T5131] netlink: 156 bytes leftover after parsing attributes in process `syz.0.276'. [ 124.684529][ T5137] netlink: 'syz.1.281': attribute type 10 has an invalid length. [ 124.733483][ T5137] team0: Port device dummy0 added [ 125.578095][ T4273] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 125.585632][ T4273] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 125.868839][ T5175] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 126.869203][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 126.879874][ T4286] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 126.929467][ T5206] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 127.431996][ T5211] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 127.447220][ T4273] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 127.454690][ T4273] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 127.474482][ T5211] team0: Port device dummy0 removed [ 127.484612][ T5211] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.647868][ T5226] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.317'. [ 127.719499][ T5229] netlink: 'syz.2.316': attribute type 4 has an invalid length. [ 127.731676][ T5229] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.316'. [ 130.120580][ T5266] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.333'. [ 131.130147][ T4273] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 131.137908][ T4273] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 131.357193][ T5297] tun0: tun_chr_ioctl cmd 1074025675 [ 131.415876][ T5297] tun0: persist enabled [ 131.925972][ T5300] tun0: tun_chr_ioctl cmd 1074025675 [ 131.931357][ T5300] tun0: persist enabled [ 131.955799][ T5302] netlink: 'syz.3.346': attribute type 10 has an invalid length. [ 132.002688][ T5302] bond0: (slave dummy0): Releasing backup interface [ 132.032970][ T5302] team0: Port device dummy0 added [ 132.052526][ T5307] netlink: 'syz.3.346': attribute type 10 has an invalid length. [ 132.121479][ T5307] team0: Port device dummy0 removed [ 132.161881][ T5307] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 132.172753][ T5297] netlink: 'syz.0.344': attribute type 21 has an invalid length. [ 132.181527][ T5297] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 132.189723][ T5297] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.344'. [ 132.639091][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.646205][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.754322][ T4273] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 132.762440][ T4273] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 133.162672][ T5358] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 133.374239][ T5358] bond0: (slave dummy0): Releasing backup interface [ 133.388689][ T5358] team0: Port device dummy0 added [ 133.420142][ T5361] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 133.450087][ T5361] team0: Port device dummy0 removed [ 133.485206][ T5361] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 133.637075][ T5366] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.370'. [ 134.417836][ T4273] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 134.425355][ T4273] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 134.551130][ T4273] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 134.558706][ T4273] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 138.731606][ T5446] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 138.923236][ T5446] bond0: (slave dummy0): Releasing backup interface [ 138.979140][ T5446] team0: Port device dummy0 added [ 138.997812][ T5447] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 139.043710][ T5447] team0: Port device dummy0 removed [ 139.086648][ T5447] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 139.311243][ T4273] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 139.320055][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 139.329599][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 139.337202][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.347403][ T4273] Workqueue: hci2 hci_rx_work [ 139.352184][ T4273] Call Trace: [ 139.355494][ T4273] [ 139.358470][ T4273] dump_stack_lvl+0x188/0x24e [ 139.363483][ T4273] ? show_regs_print_info+0x12/0x12 [ 139.368747][ T4273] ? load_image+0x410/0x410 [ 139.373307][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 139.378457][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 139.383527][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 139.388249][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 139.393478][ T4273] kobject_add_internal+0x617/0xca0 [ 139.398710][ T4273] kobject_add+0x160/0x230 [ 139.403163][ T4273] ? kobject_init+0x1c0/0x1c0 [ 139.407881][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 139.413201][ T4273] ? klist_children_get+0x50/0x50 [ 139.418263][ T4273] ? get_device_parent+0x121/0x3e0 [ 139.423419][ T4273] device_add+0x470/0x1050 [ 139.427875][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 139.432968][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 139.438320][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 139.444608][ T4273] ? bt_info+0x180/0x180 [ 139.448883][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 139.454552][ T4273] ? mutex_unlock+0x10/0x10 [ 139.459089][ T4273] ? skb_pull_data+0xec/0x1f0 [ 139.463795][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 139.469376][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 139.475478][ T4273] hci_event_packet+0x7b3/0x1290 [ 139.480539][ T4273] ? lock_chain_count+0x20/0x20 [ 139.485513][ T4273] ? bis_list+0x280/0x280 [ 139.489872][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 139.495798][ T4273] ? kcov_remote_start+0x50f/0x810 [ 139.500936][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 139.506167][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 139.511404][ T4273] hci_rx_work+0x3eb/0xd40 [ 139.515858][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 139.520755][ T4273] ? process_one_work+0x7b4/0x1160 [ 139.525897][ T4273] process_one_work+0x8ab/0x1160 [ 139.530873][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 139.536534][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 139.541592][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 139.547169][ T4273] ? wq_worker_running+0x97/0x190 [ 139.552221][ T4273] worker_thread+0xaf5/0x12a0 [ 139.556953][ T4273] kthread+0x29d/0x330 [ 139.561046][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 139.566099][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 139.570712][ T4273] ret_from_fork+0x1f/0x30 [ 139.575172][ T4273] [ 139.579769][ T4273] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 139.592894][ T4273] Bluetooth: hci2: failed to register connection device [ 139.865287][ T5465] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.402'. [ 140.142722][ T5477] netlink: 'syz.3.407': attribute type 10 has an invalid length. [ 140.192775][ T5477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.407'. [ 140.224490][ T5477] bond0: (slave dummy0): Releasing backup interface [ 140.424488][ T5488] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 140.432844][ T5488] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.410'. [ 140.787286][ T5477] bridge0: port 3(dummy0) entered blocking state [ 140.793873][ T5477] bridge0: port 3(dummy0) entered disabled state [ 140.827290][ T5477] device dummy0 entered promiscuous mode [ 140.838607][ T5490] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 140.853338][ T5491] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 140.892543][ T5491] team0: Port device dummy0 removed [ 140.941838][ T5491] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 141.265487][ T5501] Dead loop on virtual device ip6_vti0, fix it urgently! [ 141.319091][ T5505] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.418'. [ 141.561738][ T4273] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 141.569982][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 141.597381][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 141.605005][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.615205][ T4273] Workqueue: hci0 hci_rx_work [ 141.619963][ T4273] Call Trace: [ 141.623281][ T4273] [ 141.626245][ T4273] dump_stack_lvl+0x188/0x24e [ 141.630974][ T4273] ? show_regs_print_info+0x12/0x12 [ 141.636219][ T4273] ? load_image+0x410/0x410 [ 141.640786][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 141.645947][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 141.651032][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 141.655771][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 141.661020][ T4273] kobject_add_internal+0x617/0xca0 [ 141.666311][ T4273] kobject_add+0x160/0x230 [ 141.670795][ T4273] ? kobject_init+0x1c0/0x1c0 [ 141.675530][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 141.680858][ T4273] ? klist_children_get+0x50/0x50 [ 141.685925][ T4273] ? get_device_parent+0x121/0x3e0 [ 141.691090][ T4273] device_add+0x470/0x1050 [ 141.695544][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 141.700528][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 141.705871][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 141.712163][ T4273] ? bt_info+0x180/0x180 [ 141.716439][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 141.722108][ T4273] ? mutex_unlock+0x10/0x10 [ 141.726680][ T4273] ? skb_pull_data+0xec/0x1f0 [ 141.731392][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 141.737004][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 141.743106][ T4273] hci_event_packet+0x7b3/0x1290 [ 141.748080][ T4273] ? lock_chain_count+0x20/0x20 [ 141.752966][ T4273] ? bis_list+0x280/0x280 [ 141.757326][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 141.763252][ T4273] ? kcov_remote_start+0x50f/0x810 [ 141.768390][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 141.773620][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 141.778859][ T4273] hci_rx_work+0x3eb/0xd40 [ 141.783314][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 141.788214][ T4273] ? process_one_work+0x7b4/0x1160 [ 141.793353][ T4273] process_one_work+0x8ab/0x1160 [ 141.798337][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 141.804004][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 141.809069][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 141.814648][ T4273] ? wq_worker_running+0x97/0x190 [ 141.819698][ T4273] worker_thread+0xaf5/0x12a0 [ 141.824430][ T4273] kthread+0x29d/0x330 [ 141.828516][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 141.833574][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 141.838199][ T4273] ret_from_fork+0x1f/0x30 [ 141.842658][ T4273] [ 141.847803][ T4273] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.860945][ T4273] Bluetooth: hci0: failed to register connection device [ 142.287353][ T5531] sctp: [Deprecated]: syz.3.426 (pid 5531) Use of int in max_burst socket option deprecated. [ 142.287353][ T5531] Use struct sctp_assoc_value instead [ 142.305714][ T4273] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 142.314077][ T4273] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 142.528872][ T5525] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 142.548789][ T5525] netlink: 152 bytes leftover after parsing attributes in process `syz.0.425'. [ 142.763345][ T5538] netlink: 'syz.1.428': attribute type 10 has an invalid length. [ 142.824976][ T5538] bond0: (slave dummy0): Releasing backup interface [ 142.882962][ T5538] team0: Port device dummy0 added [ 142.942934][ T5541] netlink: 'syz.1.428': attribute type 10 has an invalid length. [ 143.006517][ T5541] team0: Port device dummy0 removed [ 143.021226][ T5541] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 143.076453][ T5547] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.432'. [ 143.675768][ T4273] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 143.683524][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 143.693144][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 143.700766][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.711245][ T4273] Workqueue: hci3 hci_rx_work [ 143.716004][ T4273] Call Trace: [ 143.719340][ T4273] [ 143.722318][ T4273] dump_stack_lvl+0x188/0x24e [ 143.727065][ T4273] ? show_regs_print_info+0x12/0x12 [ 143.732331][ T4273] ? load_image+0x410/0x410 [ 143.736925][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 143.742103][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 143.747190][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 143.751931][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 143.757185][ T4273] kobject_add_internal+0x617/0xca0 [ 143.762452][ T4273] kobject_add+0x160/0x230 [ 143.766930][ T4273] ? kobject_init+0x1c0/0x1c0 [ 143.771668][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 143.777017][ T4273] ? klist_children_get+0x50/0x50 [ 143.782093][ T4273] ? get_device_parent+0x121/0x3e0 [ 143.787281][ T4273] device_add+0x470/0x1050 [ 143.791776][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 143.796773][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 143.802476][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 143.808782][ T4273] ? bt_info+0x180/0x180 [ 143.813081][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 143.818773][ T4273] ? mutex_unlock+0x10/0x10 [ 143.823340][ T4273] ? skb_pull_data+0xec/0x1f0 [ 143.828076][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 143.833695][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 143.839822][ T4273] hci_event_packet+0x7b3/0x1290 [ 143.844830][ T4273] ? lock_chain_count+0x20/0x20 [ 143.849746][ T4273] ? bis_list+0x280/0x280 [ 143.854126][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 143.860080][ T4273] ? kcov_remote_start+0x50f/0x810 [ 143.865244][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 143.870503][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 143.875763][ T4273] hci_rx_work+0x3eb/0xd40 [ 143.880259][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 143.885184][ T4273] ? process_one_work+0x7b4/0x1160 [ 143.890374][ T4273] process_one_work+0x8ab/0x1160 [ 143.895394][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 143.901488][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 143.906589][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 143.912309][ T4273] ? wq_worker_running+0x97/0x190 [ 143.917404][ T4273] worker_thread+0xaf5/0x12a0 [ 143.922190][ T4273] kthread+0x29d/0x330 [ 143.926326][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 143.931404][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 143.936049][ T4273] ret_from_fork+0x1f/0x30 [ 143.940535][ T4273] [ 143.946773][ T4273] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 143.960989][ T4273] Bluetooth: hci3: failed to register connection device [ 143.968678][ T4273] Bluetooth: hci3: link tx timeout [ 143.974311][ T4273] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.448346][ T5579] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 144.504453][ T5579] bond0: (slave dummy0): Releasing backup interface [ 144.584120][ T5579] team0: Port device dummy0 added [ 144.652881][ T5582] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 144.694808][ T5582] team0: Port device dummy0 removed [ 144.752641][ T5582] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.774568][ T5585] netlink: 'syz.2.447': attribute type 10 has an invalid length. [ 144.884147][ T5588] netlink: 'syz.2.447': attribute type 10 has an invalid length. [ 144.912154][ T5588] team0: Port device dummy0 removed [ 144.939500][ T5588] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.986888][ T5595] netlink: 'syz.4.451': attribute type 33 has an invalid length. [ 145.001076][ T5595] netlink: 152 bytes leftover after parsing attributes in process `syz.4.451'. [ 145.058296][ T5595] netlink: 63531 bytes leftover after parsing attributes in process `syz.4.451'. [ 145.696790][ T4273] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 145.704280][ T4273] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 145.745461][ T5625] netlink: 148 bytes leftover after parsing attributes in process `syz.4.463'. [ 145.900192][ T5634] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.462'. [ 145.941692][ T4273] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 145.949395][ T4273] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 145.995814][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 146.260172][ T5647] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 146.283519][ T5647] device dummy0 left promiscuous mode [ 146.291952][ T5647] bridge0: port 3(dummy0) entered disabled state [ 146.356982][ T5647] team0: Port device dummy0 added [ 146.395858][ T5648] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 146.466962][ T5648] team0: Port device dummy0 removed [ 146.496507][ T5648] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.420980][ T5679] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.476'. [ 148.648758][ T4273] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 148.656822][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 148.667662][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 148.675272][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.685378][ T4273] Workqueue: hci4 hci_rx_work [ 148.690119][ T4273] Call Trace: [ 148.693442][ T4273] [ 148.696420][ T4273] dump_stack_lvl+0x188/0x24e [ 148.701156][ T4273] ? show_regs_print_info+0x12/0x12 [ 148.706418][ T4273] ? load_image+0x410/0x410 [ 148.710988][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 148.716154][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 148.721238][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 148.725982][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 148.731236][ T4273] kobject_add_internal+0x617/0xca0 [ 148.736502][ T4273] kobject_add+0x160/0x230 [ 148.740987][ T4273] ? kobject_init+0x1c0/0x1c0 [ 148.745737][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 148.751078][ T4273] ? klist_children_get+0x50/0x50 [ 148.756158][ T4273] ? get_device_parent+0x121/0x3e0 [ 148.761368][ T4273] device_add+0x470/0x1050 [ 148.765867][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 148.770861][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 148.776204][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 148.782490][ T4273] ? bt_info+0x180/0x180 [ 148.786770][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 148.792439][ T4273] ? mutex_unlock+0x10/0x10 [ 148.796969][ T4273] ? skb_pull_data+0xec/0x1f0 [ 148.801703][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 148.807314][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 148.813419][ T4273] hci_event_packet+0x7b3/0x1290 [ 148.818391][ T4273] ? lock_chain_count+0x20/0x20 [ 148.823283][ T4273] ? bis_list+0x280/0x280 [ 148.827637][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 148.833567][ T4273] ? kcov_remote_start+0x50f/0x810 [ 148.838707][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 148.843939][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 148.849176][ T4273] hci_rx_work+0x3eb/0xd40 [ 148.853653][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 148.858545][ T4273] ? process_one_work+0x7b4/0x1160 [ 148.863687][ T4273] process_one_work+0x8ab/0x1160 [ 148.868663][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 148.874330][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 148.879436][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 148.885018][ T4273] ? wq_worker_running+0x97/0x190 [ 148.890071][ T4273] worker_thread+0xaf5/0x12a0 [ 148.894799][ T4273] kthread+0x29d/0x330 [ 148.898892][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 148.903974][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 148.908762][ T4273] ret_from_fork+0x1f/0x30 [ 148.913274][ T4273] [ 148.917955][ T4273] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 148.931304][ T4273] Bluetooth: hci4: failed to register connection device [ 148.939014][ T4273] Bluetooth: hci4: link tx timeout [ 148.944516][ T4273] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 149.723132][ T5725] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.493'. [ 150.737520][ T5741] device syzkaller0 entered promiscuous mode [ 150.965936][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 153.442609][ T5763] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.508'. [ 153.462456][ T5779] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 153.541803][ T5779] bond0: (slave dummy0): Releasing backup interface [ 153.602510][ T5779] team0: Port device dummy0 added [ 153.626288][ T5780] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 153.703032][ T5780] team0: Port device dummy0 removed [ 153.737120][ T5791] netlink: 15515 bytes leftover after parsing attributes in process `syz.3.517'. [ 153.773278][ T5780] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 154.518113][ T5815] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.530'. [ 155.625017][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 155.633398][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 155.643250][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 155.650859][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.660967][ T4286] Workqueue: hci4 hci_rx_work [ 155.665717][ T4286] Call Trace: [ 155.669033][ T4286] [ 155.672002][ T4286] dump_stack_lvl+0x188/0x24e [ 155.676746][ T4286] ? show_regs_print_info+0x12/0x12 [ 155.682007][ T4286] ? load_image+0x410/0x410 [ 155.686588][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 155.691767][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 155.696865][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 155.701618][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 155.706884][ T4286] kobject_add_internal+0x617/0xca0 [ 155.712118][ T4286] kobject_add+0x160/0x230 [ 155.716565][ T4286] ? kobject_init+0x1c0/0x1c0 [ 155.721299][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 155.726647][ T4286] ? klist_children_get+0x50/0x50 [ 155.731715][ T4286] ? get_device_parent+0x121/0x3e0 [ 155.737013][ T4286] device_add+0x470/0x1050 [ 155.741530][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 155.746508][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 155.751934][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 155.758214][ T4286] ? bt_info+0x180/0x180 [ 155.762480][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 155.768163][ T4286] ? mutex_unlock+0x10/0x10 [ 155.772706][ T4286] ? skb_pull_data+0xec/0x1f0 [ 155.777423][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 155.783014][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 155.789117][ T4286] hci_event_packet+0x7b3/0x1290 [ 155.794091][ T4286] ? lock_chain_count+0x20/0x20 [ 155.798975][ T4286] ? bis_list+0x280/0x280 [ 155.803328][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 155.809254][ T4286] ? kcov_remote_start+0x50f/0x810 [ 155.814387][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 155.819625][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 155.824857][ T4286] hci_rx_work+0x3eb/0xd40 [ 155.829307][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 155.834193][ T4286] ? process_one_work+0x7b4/0x1160 [ 155.839330][ T4286] process_one_work+0x8ab/0x1160 [ 155.844306][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 155.849961][ T4286] ? _raw_spin_lock_irq+0x86/0xf0 [ 155.855019][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 155.860075][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 155.865653][ T4286] ? wq_worker_running+0x97/0x190 [ 155.870700][ T4286] worker_thread+0xaf5/0x12a0 [ 155.875416][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 155.881349][ T4286] kthread+0x29d/0x330 [ 155.885436][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 155.890486][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 155.895270][ T4286] ret_from_fork+0x1f/0x30 [ 155.899742][ T4286] [ 155.906335][ T4286] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 155.920783][ T4286] Bluetooth: hci4: failed to register connection device [ 155.928646][ T4286] Bluetooth: hci4: link tx timeout [ 155.934267][ T4286] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 155.942028][ T4286] Bluetooth: hci4: link tx timeout [ 155.947321][ T4286] Bluetooth: hci4: killing stalled connection 00:00:00:26:18:00 [ 155.955174][ T4286] Bluetooth: hci4: killing stalled connection 00:00:00:00:00:00 [ 155.962985][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.294562][ T5855] syz.3.545 uses obsolete (PF_INET,SOCK_PACKET) [ 157.313443][ T5857] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.544'. [ 157.996648][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 158.206447][ T5885] netlink: 'syz.0.551': attribute type 10 has an invalid length. [ 158.242180][ T5885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.551'. [ 158.282483][ T5885] device dummy0 entered promiscuous mode [ 158.377043][ T5885] bond0: (slave dummy0): Releasing backup interface [ 158.514262][ T5885] bridge0: port 3(dummy0) entered blocking state [ 158.543327][ T5885] bridge0: port 3(dummy0) entered disabled state [ 158.900636][ T4286] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 158.909731][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 158.920792][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 158.928410][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.938521][ T4286] Workqueue: hci3 hci_rx_work [ 158.943266][ T4286] Call Trace: [ 158.946586][ T4286] [ 158.949564][ T4286] dump_stack_lvl+0x188/0x24e [ 158.954306][ T4286] ? show_regs_print_info+0x12/0x12 [ 158.959556][ T4286] ? load_image+0x410/0x410 [ 158.964139][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 158.969316][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 158.974407][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 158.979148][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 158.984423][ T4286] kobject_add_internal+0x617/0xca0 [ 158.989779][ T4286] kobject_add+0x160/0x230 [ 158.994405][ T4286] ? kobject_init+0x1c0/0x1c0 [ 158.999113][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 159.004535][ T4286] ? klist_children_get+0x50/0x50 [ 159.009601][ T4286] ? get_device_parent+0x121/0x3e0 [ 159.014758][ T4286] device_add+0x470/0x1050 [ 159.019236][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 159.024221][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 159.029553][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 159.035833][ T4286] ? bt_info+0x180/0x180 [ 159.040101][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 159.045764][ T4286] ? mutex_unlock+0x10/0x10 [ 159.050328][ T4286] ? skb_pull_data+0xec/0x1f0 [ 159.055037][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 159.060621][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 159.066731][ T4286] hci_event_packet+0x7b3/0x1290 [ 159.071703][ T4286] ? lock_chain_count+0x20/0x20 [ 159.076595][ T4286] ? bis_list+0x280/0x280 [ 159.080944][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 159.086870][ T4286] ? kcov_remote_start+0x50f/0x810 [ 159.092008][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 159.097241][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 159.102476][ T4286] hci_rx_work+0x3eb/0xd40 [ 159.106921][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 159.111809][ T4286] ? process_one_work+0x7b4/0x1160 [ 159.116946][ T4286] process_one_work+0x8ab/0x1160 [ 159.121922][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 159.127585][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 159.132642][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 159.138248][ T4286] ? wq_worker_running+0x97/0x190 [ 159.143297][ T4286] worker_thread+0xaf5/0x12a0 [ 159.148016][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 159.153994][ T4286] kthread+0x29d/0x330 [ 159.158115][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 159.164792][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 159.171461][ T4286] ret_from_fork+0x1f/0x30 [ 159.175940][ T4286] [ 159.180414][ T4286] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 159.196063][ T4286] Bluetooth: hci3: failed to register connection device [ 159.205722][ T4286] Bluetooth: hci3: link tx timeout [ 159.212785][ T4286] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 159.224247][ T4286] Bluetooth: hci3: link tx timeout [ 159.229532][ T4286] Bluetooth: hci3: killing stalled connection 00:00:00:26:18:00 [ 159.237352][ T4286] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 159.245082][ T4286] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.301050][ T5912] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.561'. [ 160.075699][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 160.414700][ T5938] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 160.977947][ T5938] bond0: (slave dummy0): Releasing backup interface [ 161.011340][ T5938] team0: Port device dummy0 added [ 161.031465][ T5943] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 161.097905][ T5943] team0: Port device dummy0 removed [ 161.163176][ T5943] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.172083][ T5944] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.575'. [ 161.276652][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 161.347986][ T4286] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 161.355535][ T4286] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 161.626345][ T5974] netlink: 132 bytes leftover after parsing attributes in process `syz.4.582'. [ 162.155666][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 162.734512][ T5995] netlink: 'syz.2.592': attribute type 10 has an invalid length. [ 162.792409][ T5995] bond0: (slave dummy0): Releasing backup interface [ 162.823573][ T5995] team0: Port device dummy0 added [ 162.889358][ T5998] netlink: 'syz.2.592': attribute type 10 has an invalid length. [ 162.993942][ T5998] team0: Port device dummy0 removed [ 163.056938][ T5998] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 163.328853][ T6010] netlink: 132 bytes leftover after parsing attributes in process `syz.4.597'. [ 163.357110][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 163.666162][ T6021] netlink: 'syz.4.603': attribute type 1 has an invalid length. [ 163.840658][ T6024] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.601'. [ 165.437858][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 165.544555][ T6051] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 166.987296][ T6051] team0: Device vxcan1 is of different type [ 167.217828][ T6061] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 167.245943][ T6061] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.616'. [ 167.858237][ T6081] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.623'. [ 167.895486][ T6084] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 167.965095][ T6079] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.622'. [ 167.975285][ T6084] bond0: (slave dummy0): Releasing backup interface [ 167.993819][ T6084] team0: Port device dummy0 added [ 168.094057][ T6086] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 168.154204][ T6086] team0: Port device dummy0 removed [ 168.189763][ T6086] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.230074][ T6079] netlink: 'syz.4.622': attribute type 21 has an invalid length. [ 168.267385][ T6079] netlink: 156 bytes leftover after parsing attributes in process `syz.4.622'. [ 169.004822][ T6116] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.636'. [ 169.189394][ T6120] netlink: 'syz.3.635': attribute type 3 has an invalid length. [ 169.265545][ T6120] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.635'. [ 169.669466][ T6119] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 169.692052][ T6119] device dummy0 left promiscuous mode [ 169.711318][ T6119] bridge0: port 3(dummy0) entered disabled state [ 169.741663][ T6119] team0: Port device dummy0 added [ 169.759915][ T6122] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 169.810796][ T6122] team0: Port device dummy0 removed [ 169.834243][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 169.839392][ T6122] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.844866][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 169.860866][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 169.868477][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.878596][ T4286] Workqueue: hci4 hci_rx_work [ 169.883354][ T4286] Call Trace: [ 169.886785][ T4286] [ 169.889765][ T4286] dump_stack_lvl+0x188/0x24e [ 169.895028][ T4286] ? show_regs_print_info+0x12/0x12 [ 169.900285][ T4286] ? load_image+0x410/0x410 [ 169.904866][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 169.910036][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 169.915136][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 169.919877][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 169.925131][ T4286] kobject_add_internal+0x617/0xca0 [ 169.930430][ T4286] kobject_add+0x160/0x230 [ 169.934923][ T4286] ? kobject_init+0x1c0/0x1c0 [ 169.939646][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 169.945493][ T4286] ? klist_children_get+0x50/0x50 [ 169.950548][ T4286] ? get_device_parent+0x121/0x3e0 [ 169.955710][ T4286] device_add+0x470/0x1050 [ 169.960185][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 169.965192][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 169.970538][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 169.976822][ T4286] ? bt_info+0x180/0x180 [ 169.981104][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 169.986776][ T4286] ? mutex_unlock+0x10/0x10 [ 169.991308][ T4286] ? skb_pull_data+0xec/0x1f0 [ 169.996023][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 170.001607][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 170.007705][ T4286] hci_event_packet+0x7b3/0x1290 [ 170.012692][ T4286] ? lock_chain_count+0x20/0x20 [ 170.017579][ T4286] ? bis_list+0x280/0x280 [ 170.021934][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 170.027866][ T4286] ? kcov_remote_start+0x50f/0x810 [ 170.033003][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 170.038238][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 170.043472][ T4286] hci_rx_work+0x3eb/0xd40 [ 170.047917][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 170.052823][ T4286] ? process_one_work+0x7b4/0x1160 [ 170.057975][ T4286] process_one_work+0x8ab/0x1160 [ 170.062949][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 170.068604][ T4286] ? _raw_spin_lock_irq+0x86/0xf0 [ 170.073662][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 170.078713][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 170.084289][ T4286] ? wq_worker_running+0x97/0x190 [ 170.089344][ T4286] worker_thread+0xaf5/0x12a0 [ 170.094058][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 170.099991][ T4286] kthread+0x29d/0x330 [ 170.104080][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 170.109129][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 170.113745][ T4286] ret_from_fork+0x1f/0x30 [ 170.118206][ T4286] [ 170.125717][ T4286] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 170.138945][ T4286] Bluetooth: hci4: failed to register connection device [ 170.711672][ T6149] netlink: 152 bytes leftover after parsing attributes in process `syz.1.648'. [ 171.051279][ T6152] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.649'. [ 171.522832][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 171.530496][ T4286] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 171.681762][ T4286] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 171.689672][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 171.699097][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 171.706710][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.716823][ T4286] Workqueue: hci2 hci_rx_work [ 171.721561][ T4286] Call Trace: [ 171.724877][ T4286] [ 171.727844][ T4286] dump_stack_lvl+0x188/0x24e [ 171.732650][ T4286] ? show_regs_print_info+0x12/0x12 [ 171.737884][ T4286] ? load_image+0x410/0x410 [ 171.742445][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 171.747598][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 171.752663][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 171.757395][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 171.762732][ T4286] kobject_add_internal+0x617/0xca0 [ 171.767983][ T4286] kobject_add+0x160/0x230 [ 171.772446][ T4286] ? kobject_init+0x1c0/0x1c0 [ 171.777160][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 171.782470][ T4286] ? klist_children_get+0x50/0x50 [ 171.787550][ T4286] ? get_device_parent+0x121/0x3e0 [ 171.792699][ T4286] device_add+0x470/0x1050 [ 171.797152][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 171.802117][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 171.807453][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 171.813731][ T4286] ? bt_info+0x180/0x180 [ 171.818003][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 171.823673][ T4286] ? mutex_unlock+0x10/0x10 [ 171.828201][ T4286] ? skb_pull_data+0xec/0x1f0 [ 171.832915][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 171.838498][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 171.844587][ T4286] hci_event_packet+0x7b3/0x1290 [ 171.849554][ T4286] ? lock_chain_count+0x20/0x20 [ 171.854435][ T4286] ? bis_list+0x280/0x280 [ 171.858794][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 171.864725][ T4286] ? kcov_remote_start+0x50f/0x810 [ 171.869869][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 171.875103][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 171.880339][ T4286] hci_rx_work+0x3eb/0xd40 [ 171.884793][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 171.889678][ T4286] ? process_one_work+0x7b4/0x1160 [ 171.894832][ T4286] process_one_work+0x8ab/0x1160 [ 171.899814][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 171.905470][ T4286] ? _raw_spin_lock_irq+0x86/0xf0 [ 171.910548][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 171.915610][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 171.921192][ T4286] ? wq_worker_running+0x97/0x190 [ 171.926246][ T4286] worker_thread+0xaf5/0x12a0 [ 171.930964][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 171.936905][ T4286] kthread+0x29d/0x330 [ 171.940995][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 171.946047][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 171.950678][ T4286] ret_from_fork+0x1f/0x30 [ 171.955151][ T4286] [ 171.971178][ T4286] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 171.984477][ T4286] Bluetooth: hci2: failed to register connection device [ 173.007500][ T6195] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.664'. [ 173.301306][ T6206] netlink: 'syz.4.670': attribute type 10 has an invalid length. [ 173.400169][ T6212] netlink: 'syz.4.670': attribute type 10 has an invalid length. [ 173.437231][ T6212] team0: Port device dummy0 removed [ 173.449005][ T6212] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 173.719171][ T4286] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 173.727016][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 173.737303][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 173.744921][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.755072][ T4286] Workqueue: hci0 hci_rx_work [ 173.759826][ T4286] Call Trace: [ 173.763151][ T4286] [ 173.766125][ T4286] dump_stack_lvl+0x188/0x24e [ 173.770862][ T4286] ? show_regs_print_info+0x12/0x12 [ 173.776117][ T4286] ? load_image+0x410/0x410 [ 173.780708][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 173.785892][ T4286] ? __lock_acquire+0x7c40/0x7c40 [ 173.790980][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 173.796076][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 173.802804][ T4286] kobject_add_internal+0x617/0xca0 [ 173.808882][ T4286] kobject_add+0x160/0x230 [ 173.813720][ T4286] ? kobject_init+0x1c0/0x1c0 [ 173.818481][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 173.823829][ T4286] ? klist_children_get+0x50/0x50 [ 173.828924][ T4286] ? get_device_parent+0x121/0x3e0 [ 173.834120][ T4286] device_add+0x470/0x1050 [ 173.840710][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 173.846361][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 173.853423][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 173.862232][ T4286] ? bt_info+0x180/0x180 [ 173.867898][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 173.874229][ T4286] ? mutex_unlock+0x10/0x10 [ 173.878843][ T4286] ? skb_pull_data+0xec/0x1f0 [ 173.883590][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 173.889222][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 173.895355][ T4286] hci_event_packet+0x7b3/0x1290 [ 173.900401][ T4286] ? lock_chain_count+0x20/0x20 [ 173.905313][ T4286] ? bis_list+0x280/0x280 [ 173.909697][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 173.915665][ T4286] ? kcov_remote_start+0x50f/0x810 [ 173.920868][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 173.926150][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 173.931423][ T4286] hci_rx_work+0x3eb/0xd40 [ 173.935908][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 173.940830][ T4286] ? process_one_work+0x7b4/0x1160 [ 173.946006][ T4286] process_one_work+0x8ab/0x1160 [ 173.951039][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 173.956727][ T4286] ? _raw_spin_lock_irq+0x86/0xf0 [ 173.961824][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 173.966917][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 173.972550][ T4286] ? wq_worker_running+0x97/0x190 [ 173.977643][ T4286] worker_thread+0xaf5/0x12a0 [ 173.982400][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 173.988371][ T4286] kthread+0x29d/0x330 [ 173.992492][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 173.997591][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 174.002237][ T4286] ret_from_fork+0x1f/0x30 [ 174.006737][ T4286] [ 174.011434][ T4286] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 174.024673][ T4286] Bluetooth: hci0: failed to register connection device [ 174.085955][ T6224] Dead loop on virtual device ip6_vti0, fix it urgently! [ 174.532052][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 174.539750][ T4286] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 174.651169][ T6238] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.681'. [ 174.971382][ T6245] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'. [ 175.033710][ T6245] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'. [ 175.122875][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'. [ 175.204968][ T6250] sctp: [Deprecated]: syz.1.685 (pid 6250) Use of int in max_burst socket option deprecated. [ 175.204968][ T6250] Use struct sctp_assoc_value instead [ 175.478311][ T6265] netlink: 'syz.1.689': attribute type 10 has an invalid length. [ 175.612536][ T6270] netlink: 60 bytes leftover after parsing attributes in process `syz.0.691'. [ 175.830731][ T6265] bond0: (slave dummy0): Releasing backup interface [ 175.886129][ T6265] team0: Port device dummy0 added [ 175.914274][ T6267] netlink: 'syz.1.689': attribute type 10 has an invalid length. [ 175.979579][ T6267] team0: Port device dummy0 removed [ 176.036179][ T6267] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 176.330170][ T4273] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 176.337790][ T4273] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 176.499357][ T6281] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.694'. [ 176.765071][ T6279] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.693'. [ 177.079180][ T4273] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 177.087243][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 177.096709][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 177.104306][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.114414][ T4273] Workqueue: hci3 hci_rx_work [ 177.119141][ T4273] Call Trace: [ 177.122450][ T4273] [ 177.125408][ T4273] dump_stack_lvl+0x188/0x24e [ 177.130131][ T4273] ? show_regs_print_info+0x12/0x12 [ 177.135377][ T4273] ? load_image+0x410/0x410 [ 177.139933][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 177.145081][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 177.150421][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 177.155150][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 177.160390][ T4273] kobject_add_internal+0x617/0xca0 [ 177.165645][ T4273] kobject_add+0x160/0x230 [ 177.170102][ T4273] ? kobject_init+0x1c0/0x1c0 [ 177.174819][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 177.180126][ T4273] ? klist_children_get+0x50/0x50 [ 177.185181][ T4273] ? get_device_parent+0x121/0x3e0 [ 177.190329][ T4273] device_add+0x470/0x1050 [ 177.194898][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 177.199870][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 177.205202][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 177.211480][ T4273] ? bt_info+0x180/0x180 [ 177.215755][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 177.221429][ T4273] ? mutex_unlock+0x10/0x10 [ 177.225959][ T4273] ? skb_pull_data+0xec/0x1f0 [ 177.230672][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 177.236261][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 177.242363][ T4273] hci_event_packet+0x7b3/0x1290 [ 177.247346][ T4273] ? lock_chain_count+0x20/0x20 [ 177.252232][ T4273] ? bis_list+0x280/0x280 [ 177.256586][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 177.262516][ T4273] ? kcov_remote_start+0x50f/0x810 [ 177.267656][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 177.272891][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 177.278131][ T4273] hci_rx_work+0x3eb/0xd40 [ 177.282584][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 177.287473][ T4273] ? process_one_work+0x7b4/0x1160 [ 177.292615][ T4273] process_one_work+0x8ab/0x1160 [ 177.297610][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 177.303272][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 177.308336][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 177.313922][ T4273] ? wq_worker_running+0x97/0x190 [ 177.318980][ T4273] worker_thread+0xaf5/0x12a0 [ 177.323716][ T4273] kthread+0x29d/0x330 [ 177.327836][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 177.332888][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 177.337507][ T4273] ret_from_fork+0x1f/0x30 [ 177.341966][ T4273] [ 177.346640][ T4273] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.361186][ T4273] Bluetooth: hci3: failed to register connection device [ 177.461337][ T6301] netlink: 'syz.0.700': attribute type 2 has an invalid length. [ 177.489844][ T6301] netlink: 185076 bytes leftover after parsing attributes in process `syz.0.700'. [ 178.306271][ T6332] netlink: 'syz.0.707': attribute type 10 has an invalid length. [ 178.396712][ T6332] bond0: (slave dummy0): Releasing backup interface [ 178.414806][ T6332] team0: Port device dummy0 added [ 178.552982][ T6336] netlink: 'syz.0.707': attribute type 10 has an invalid length. [ 178.649867][ T6336] team0: Port device dummy0 removed [ 178.673578][ T6336] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 178.683277][ T6339] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.709'. [ 179.187042][ T6354] netlink: 'syz.3.715': attribute type 11 has an invalid length. [ 179.215502][ T6354] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.715'. [ 180.041491][ T6390] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 180.116750][ T6390] bond0: (slave dummy0): Releasing backup interface [ 180.146428][ T6390] team0: Port device dummy0 added [ 180.166442][ T6391] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.727'. [ 180.216323][ T6395] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 180.276360][ T6395] team0: Port device dummy0 removed [ 180.299648][ T6395] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 181.100314][ T6426] netlink: 'syz.0.738': attribute type 2 has an invalid length. [ 181.319953][ T6440] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.740'. [ 181.620107][ T6447] netlink: 'syz.4.743': attribute type 10 has an invalid length. [ 181.720019][ T6447] bond0: (slave dummy0): Releasing backup interface [ 181.805950][ T6447] team0: Port device dummy0 added [ 181.835874][ T6451] netlink: 'syz.4.743': attribute type 10 has an invalid length. [ 181.921360][ T6451] team0: Port device dummy0 removed [ 181.969157][ T6451] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.365512][ T6476] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.755'. [ 183.800622][ T6496] netlink: 'syz.4.761': attribute type 3 has an invalid length. [ 183.808559][ T6496] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.761'. [ 184.479678][ T6516] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.767'. [ 184.678946][ T6518] FAULT_INJECTION: forcing a failure. [ 184.678946][ T6518] name failslab, interval 1, probability 0, space 0, times 1 [ 184.735831][ T6518] CPU: 1 PID: 6518 Comm: syz.0.768 Not tainted syzkaller #0 [ 184.743229][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.753359][ T6518] Call Trace: [ 184.757907][ T6518] [ 184.761386][ T6518] dump_stack_lvl+0x188/0x24e [ 184.767825][ T6518] ? show_regs_print_info+0x12/0x12 [ 184.773171][ T6518] ? load_image+0x410/0x410 [ 184.777754][ T6518] ? __might_sleep+0xd0/0xd0 [ 184.782399][ T6518] ? __lock_acquire+0x7c40/0x7c40 [ 184.787626][ T6518] should_fail_ex+0x390/0x4c0 [ 184.792823][ T6518] should_failslab+0x5/0x20 [ 184.798198][ T6518] slab_pre_alloc_hook+0x59/0x300 [ 184.804170][ T6518] ? alloc_trial_cpuset+0x23/0x140 [ 184.811185][ T6518] __kmem_cache_alloc_node+0x4f/0x270 [ 184.817793][ T6518] ? alloc_trial_cpuset+0x23/0x140 [ 184.823695][ T6518] __kmalloc_node_track_caller+0xa0/0x240 [ 184.830543][ T6518] kmemdup+0x27/0x60 [ 184.835552][ T6518] alloc_trial_cpuset+0x23/0x140 [ 184.840909][ T6518] cpuset_write_resmask+0x1fa/0x1cf0 [ 184.846884][ T6518] ? mark_lock+0x94/0x320 [ 184.851306][ T6518] ? cpuset_common_seq_show+0x230/0x230 [ 184.858040][ T6518] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 184.864881][ T6518] ? cpuset_common_seq_show+0x230/0x230 [ 184.870478][ T6518] cgroup_file_write+0x2c9/0x6a0 [ 184.875463][ T6518] ? lockdep_hardirqs_on+0x94/0x140 [ 184.880715][ T6518] ? cgroup_seqfile_stop+0xd0/0xd0 [ 184.885891][ T6518] ? cgroup_seqfile_stop+0xd0/0xd0 [ 184.891044][ T6518] kernfs_fop_write_iter+0x3a0/0x520 [ 184.896387][ T6518] vfs_write+0x482/0x9a0 [ 184.900685][ T6518] ? file_end_write+0x250/0x250 [ 184.905619][ T6518] ? __fget_files+0x3fc/0x460 [ 184.910361][ T6518] ? __fdget_pos+0x2ae/0x360 [ 184.915004][ T6518] ? ksys_write+0x70/0x260 [ 184.919478][ T6518] ksys_write+0x14d/0x260 [ 184.923856][ T6518] ? __ia32_sys_read+0x80/0x80 [ 184.928679][ T6518] ? lockdep_hardirqs_on+0x94/0x140 [ 184.933923][ T6518] do_syscall_64+0x4c/0xa0 [ 184.938388][ T6518] ? clear_bhb_loop+0x60/0xb0 [ 184.943151][ T6518] ? clear_bhb_loop+0x60/0xb0 [ 184.947910][ T6518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.953864][ T6518] RIP: 0033:0x7fb68859e159 [ 184.958327][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.977974][ T6518] RSP: 002b:00007fb68954f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.986447][ T6518] RAX: ffffffffffffffda RBX: 00007fb688825fa0 RCX: 00007fb68859e159 [ 184.994467][ T6518] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000c [ 185.002586][ T6518] RBP: 00007fb68954f090 R08: 0000000000000000 R09: 0000000000000000 [ 185.010596][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.018602][ T6518] R13: 00007fb688826038 R14: 00007fb688825fa0 R15: 00007ffd9fb97a68 [ 185.026646][ T6518] [ 186.055421][ T4273] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 186.062967][ T4273] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 186.707918][ T6557] netlink: 'syz.1.781': attribute type 10 has an invalid length. [ 186.749031][ T6557] bond0: (slave dummy0): Releasing backup interface [ 186.795318][ T6557] team0: Port device dummy0 added [ 186.855008][ T6558] netlink: 'syz.1.781': attribute type 10 has an invalid length. [ 186.947522][ T6558] team0: Port device dummy0 removed [ 186.977699][ T6558] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.206796][ T6590] netlink: 'syz.3.790': attribute type 10 has an invalid length. [ 188.246030][ T6590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.790'. [ 188.336096][ T6590] device dummy0 entered promiscuous mode [ 188.501208][ T6590] bond0: (slave dummy0): Releasing backup interface [ 188.675408][ T4273] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 188.683136][ T4273] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 188.935919][ T6590] bridge0: port 3(dummy0) entered blocking state [ 188.959817][ T6590] bridge0: port 3(dummy0) entered disabled state [ 189.011752][ T6597] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.796'. [ 189.041290][ T6601] bond0: (slave dummy0): Error: Slave device does not support XDP [ 189.283452][ T6603] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 190.214296][ T6610] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.799'. [ 191.099706][ T6637] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.806'. [ 191.181666][ T6643] netlink: 'syz.4.809': attribute type 10 has an invalid length. [ 191.368535][ T6640] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.808'. [ 191.482515][ T6647] bond0: (slave dummy0): Error: Slave device does not support XDP [ 191.528811][ T6647] netlink: 'syz.1.810': attribute type 10 has an invalid length. [ 194.027454][ T6688] bond0: (slave dummy0): Error: Slave device does not support XDP [ 194.079862][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.087572][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.192256][ T6692] netlink: 'syz.1.823': attribute type 10 has an invalid length. [ 194.229796][ T6693] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.824'. [ 195.129102][ T4273] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 195.136876][ T4273] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 198.871789][ T6740] bond0: (slave dummy0): Error: Slave device does not support XDP [ 198.911118][ T6741] netlink: 'syz.1.837': attribute type 10 has an invalid length. [ 198.928417][ T6737] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.836'. [ 198.986772][ T6743] netlink: 'syz.4.836': attribute type 10 has an invalid length. [ 198.994776][ T6743] netlink: 156 bytes leftover after parsing attributes in process `syz.4.836'. [ 199.646789][ T6755] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.840'. [ 199.809029][ T6761] netlink: 'syz.4.841': attribute type 10 has an invalid length. [ 199.825868][ T6746] delete_channel: no stack [ 199.885127][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.841'. [ 199.920905][ T6761] device dummy0 entered promiscuous mode [ 199.972193][ T6761] bond0: (slave dummy0): Releasing backup interface [ 200.047386][ T6761] bridge0: port 3(dummy0) entered blocking state [ 200.071484][ T6761] bridge0: port 3(dummy0) entered disabled state [ 200.727122][ T6769] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 200.740980][ T6769] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.847'. [ 201.082666][ T6784] bond0: (slave dummy0): Error: Slave device does not support XDP [ 201.113468][ T6782] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 201.149257][ T6782] team0: Device vxcan1 is of different type [ 201.223547][ T6784] netlink: 'syz.2.850': attribute type 10 has an invalid length. [ 201.518616][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 201.604417][ T6799] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.856'. [ 202.800225][ T6820] bond0: (slave dummy0): Error: Slave device does not support XDP [ 204.660463][ T6821] netlink: 'syz.0.865': attribute type 10 has an invalid length. [ 204.683016][ T6825] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 204.716766][ T6825] team0: Device vxcan1 is of different type [ 204.934377][ T6833] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.869'. [ 205.244245][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 205.251909][ T4286] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 206.283827][ T6870] sctp: [Deprecated]: syz.0.881 (pid 6870) Use of int in max_burst socket option deprecated. [ 206.283827][ T6870] Use struct sctp_assoc_value instead [ 206.395826][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 206.401965][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 206.409229][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 206.645377][ T6883] delete_channel: no stack [ 206.676036][ T6883] delete_channel: no stack [ 207.437208][ T6894] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.887'. [ 207.458405][ T4286] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 207.466046][ T4286] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 207.484355][ T6894] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.887'. [ 207.529263][ T6894] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.887'. [ 208.292589][ T6914] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.895'. [ 209.071280][ T6939] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.905'. [ 209.427131][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 209.434648][ T4286] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 210.892164][ T6970] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.916'. [ 213.811424][ T7033] device bond0 entered promiscuous mode [ 213.831599][ T7033] device bond_slave_0 entered promiscuous mode [ 213.905882][ T7033] device bond_slave_1 entered promiscuous mode [ 213.912247][ T7033] device dummy0 entered promiscuous mode [ 214.032294][ T7037] netlink: 'syz.4.940': attribute type 10 has an invalid length. [ 216.010120][ T7116] FAULT_INJECTION: forcing a failure. [ 216.010120][ T7116] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 216.045893][ T7116] CPU: 0 PID: 7116 Comm: syz.3.968 Not tainted syzkaller #0 [ 216.053274][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.063382][ T7116] Call Trace: [ 216.066703][ T7116] [ 216.069686][ T7116] dump_stack_lvl+0x188/0x24e [ 216.074441][ T7116] ? show_regs_print_info+0x12/0x12 [ 216.079699][ T7116] ? load_image+0x410/0x410 [ 216.084271][ T7116] ? __lock_acquire+0x7c40/0x7c40 [ 216.089365][ T7116] ? snprintf+0xe5/0x140 [ 216.093705][ T7116] should_fail_ex+0x390/0x4c0 [ 216.098461][ T7116] _copy_to_user+0x2c/0x130 [ 216.103017][ T7116] simple_read_from_buffer+0xe3/0x150 [ 216.108443][ T7116] proc_fail_nth_read+0x1a6/0x220 [ 216.113507][ T7116] ? proc_fault_inject_write+0x310/0x310 [ 216.119178][ T7116] ? fsnotify_perm+0x248/0x550 [ 216.123990][ T7116] ? proc_fault_inject_write+0x310/0x310 [ 216.129672][ T7116] vfs_read+0x2db/0x960 [ 216.133883][ T7116] ? kernel_read+0x1e0/0x1e0 [ 216.138512][ T7116] ? __fget_files+0x28/0x460 [ 216.143141][ T7116] ? __fget_files+0x3fc/0x460 [ 216.147876][ T7116] ? __fdget_pos+0x2ae/0x360 [ 216.152504][ T7116] ? ksys_read+0x70/0x260 [ 216.156883][ T7116] ksys_read+0x14d/0x260 [ 216.161170][ T7116] ? vfs_write+0x9a0/0x9a0 [ 216.165638][ T7116] ? lockdep_hardirqs_on+0x94/0x140 [ 216.170876][ T7116] do_syscall_64+0x4c/0xa0 [ 216.175341][ T7116] ? clear_bhb_loop+0x60/0xb0 [ 216.180046][ T7116] ? clear_bhb_loop+0x60/0xb0 [ 216.184755][ T7116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.190700][ T7116] RIP: 0033:0x7f581af5e98e [ 216.195153][ T7116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.214787][ T7116] RSP: 002b:00007f581bf11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.223235][ T7116] RAX: ffffffffffffffda RBX: 00007f581bf126c0 RCX: 00007f581af5e98e [ 216.231237][ T7116] RDX: 000000000000000f RSI: 00007f581bf120a0 RDI: 000000000000000e [ 216.239235][ T7116] RBP: 00007f581bf12090 R08: 0000000000000000 R09: 0000000000000000 [ 216.247257][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.255249][ T7116] R13: 00007f581b226038 R14: 00007f581b225fa0 R15: 00007ffd95fb5c68 [ 216.263279][ T7116] [ 218.521516][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 218.599683][ T7168] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.986'. [ 219.150152][ T7181] bond0: (slave dummy0): Error: Slave device does not support XDP [ 219.226763][ T7182] bond0: (slave dummy0): Error: Slave device does not support XDP [ 219.736749][ T7194] netlink: 'syz.3.997': attribute type 10 has an invalid length. [ 219.766251][ T7194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.997'. [ 219.812340][ T7194] bridge0: port 3(dummy0) entered blocking state [ 219.819815][ T7194] bridge0: port 3(dummy0) entered forwarding state [ 219.886657][ T7201] FAULT_INJECTION: forcing a failure. [ 219.886657][ T7201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.915213][ T7201] CPU: 0 PID: 7201 Comm: syz.2.1000 Not tainted syzkaller #0 [ 219.922724][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.932821][ T7201] Call Trace: [ 219.936136][ T7201] [ 219.939101][ T7201] dump_stack_lvl+0x188/0x24e [ 219.943827][ T7201] ? show_regs_print_info+0x12/0x12 [ 219.949073][ T7201] ? load_image+0x410/0x410 [ 219.953637][ T7201] ? __lock_acquire+0x7c40/0x7c40 [ 219.958716][ T7201] should_fail_ex+0x390/0x4c0 [ 219.963449][ T7201] _copy_from_user+0x2c/0x170 [ 219.968168][ T7201] iovec_from_user+0x143/0x360 [ 219.972970][ T7201] __import_iovec+0x6c/0x510 [ 219.977608][ T7201] import_iovec+0x6f/0xa0 [ 219.981970][ T7201] ___sys_sendmsg+0x252/0x360 [ 219.986676][ T7201] ? __sys_sendmsg+0x2a0/0x2a0 [ 219.991474][ T7201] ? __lock_acquire+0x7c40/0x7c40 [ 219.996544][ T7201] __se_sys_sendmsg+0x1c3/0x2b0 [ 220.001506][ T7201] ? ct_nmi_exit+0x145/0x1c0 [ 220.006128][ T7201] ? __x64_sys_sendmsg+0x80/0x80 [ 220.011099][ T7201] ? lockdep_hardirqs_on+0x94/0x140 [ 220.016357][ T7201] do_syscall_64+0x4c/0xa0 [ 220.020798][ T7201] ? clear_bhb_loop+0x60/0xb0 [ 220.025502][ T7201] ? clear_bhb_loop+0x60/0xb0 [ 220.030201][ T7201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.036132][ T7201] RIP: 0033:0x7f22d919e159 [ 220.040663][ T7201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.060297][ T7201] RSP: 002b:00007f22da10a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.068737][ T7201] RAX: ffffffffffffffda RBX: 00007f22d9425fa0 RCX: 00007f22d919e159 [ 220.076732][ T7201] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 220.084722][ T7201] RBP: 00007f22da10a090 R08: 0000000000000000 R09: 0000000000000000 [ 220.092711][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.100705][ T7201] R13: 00007f22d9426038 R14: 00007f22d9425fa0 R15: 00007ffffd092ff8 [ 220.108713][ T7201] [ 220.126460][ T7199] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.999'. [ 220.401368][ T7207] bond0: (slave dummy0): Error: Slave device does not support XDP [ 221.706724][ T7231] netlink: 'syz.0.1011': attribute type 10 has an invalid length. [ 221.796024][ T7233] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.1013'. [ 222.889782][ T4286] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 223.397210][ T7267] netlink: 'syz.3.1026': attribute type 5 has an invalid length. [ 223.476721][ T7267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'. [ 223.889355][ T7269] netlink: 'syz.1.1029': attribute type 29 has an invalid length. [ 224.073536][ T7269] netlink: 'syz.1.1029': attribute type 29 has an invalid length. [ 224.263905][ T7275] netlink: 'syz.1.1029': attribute type 29 has an invalid length. [ 224.456219][ T7293] syz.4.1034[7293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.427322][ T4286] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 225.616359][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1042'. [ 225.635932][ T7318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1042'. [ 225.856160][ T7323] bond0: (slave dummy0): Error: Slave device does not support XDP [ 226.171648][ T7334] netlink: 'syz.4.1049': attribute type 4 has an invalid length. [ 226.223976][ T7334] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1049'. [ 226.374849][ T7348] netlink: 'syz.2.1053': attribute type 10 has an invalid length. [ 226.727869][ T7348] team0: Device wg1 is of different type [ 226.878948][ T7360] netlink: 'syz.1.1057': attribute type 10 has an invalid length. [ 226.916834][ T7360] team0: Device vxcan1 is of different type [ 226.985142][ T7367] bond0: (slave dummy0): Error: Slave device does not support XDP [ 227.103719][ T4286] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 227.288032][ T7379] netlink: 'syz.2.1065': attribute type 39 has an invalid length. [ 227.599122][ T7389] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1067'. [ 228.028900][ T7410] netlink: 'syz.2.1071': attribute type 7 has an invalid length. [ 228.045693][ T7410] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1071'. [ 228.347492][ T7401] netlink: 'syz.1.1067': attribute type 10 has an invalid length. [ 228.360837][ T7401] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1067'. [ 228.624191][ T7418] bond0: (slave dummy0): Error: Slave device does not support XDP [ 229.047053][ T4286] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 229.243968][ T7445] FAULT_INJECTION: forcing a failure. [ 229.243968][ T7445] name failslab, interval 1, probability 0, space 0, times 0 [ 229.264510][ T7445] CPU: 1 PID: 7445 Comm: syz.2.1084 Not tainted syzkaller #0 [ 229.271964][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.282082][ T7445] Call Trace: [ 229.285399][ T7445] [ 229.288371][ T7445] dump_stack_lvl+0x188/0x24e [ 229.293097][ T7445] ? show_regs_print_info+0x12/0x12 [ 229.298339][ T7445] ? load_image+0x410/0x410 [ 229.302894][ T7445] ? __might_sleep+0xd0/0xd0 [ 229.307529][ T7445] ? __lock_acquire+0x7c40/0x7c40 [ 229.312615][ T7445] should_fail_ex+0x390/0x4c0 [ 229.317360][ T7445] should_failslab+0x5/0x20 [ 229.321909][ T7445] slab_pre_alloc_hook+0x59/0x300 [ 229.327072][ T7445] ? __get_vm_area_node+0x122/0x330 [ 229.332322][ T7445] __kmem_cache_alloc_node+0x4f/0x270 [ 229.337750][ T7445] ? __get_vm_area_node+0x122/0x330 [ 229.342996][ T7445] kmalloc_node_trace+0x22/0xe0 [ 229.347996][ T7445] __get_vm_area_node+0x122/0x330 [ 229.353088][ T7445] __vmalloc_node_range+0x357/0x1380 [ 229.358424][ T7445] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 229.364078][ T7445] ? aa_get_newest_label+0xf9/0x5b0 [ 229.369330][ T7445] ? free_vm_area+0x50/0x50 [ 229.373887][ T7445] ? end_current_label_crit_section+0x170/0x170 [ 229.380186][ T7445] ? __lock_acquire+0x7c40/0x7c40 [ 229.385280][ T7445] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 229.390884][ T7445] __vmalloc+0x76/0x80 [ 229.395002][ T7445] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 229.400602][ T7445] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 229.406205][ T7445] ? bpf_prog_alloc+0x13/0x1b0 [ 229.411029][ T7445] bpf_prog_alloc+0x1c/0x1b0 [ 229.415681][ T7445] bpf_prog_load+0x7d4/0x1530 [ 229.420422][ T7445] ? map_freeze+0x390/0x390 [ 229.425032][ T7445] ? __might_fault+0xa6/0x120 [ 229.429730][ T7445] ? __might_fault+0xa6/0x120 [ 229.434433][ T7445] ? __might_fault+0xc2/0x120 [ 229.439242][ T7445] ? __might_fault+0xa6/0x120 [ 229.443951][ T7445] ? bpf_lsm_bpf+0x5/0x10 [ 229.448310][ T7445] ? security_bpf+0x7a/0xa0 [ 229.452854][ T7445] __sys_bpf+0x5b8/0x780 [ 229.457145][ T7445] ? bpf_link_show_fdinfo+0x380/0x380 [ 229.462591][ T7445] ? lock_chain_count+0x20/0x20 [ 229.467482][ T7445] __x64_sys_bpf+0x78/0x90 [ 229.471938][ T7445] do_syscall_64+0x4c/0xa0 [ 229.476379][ T7445] ? clear_bhb_loop+0x60/0xb0 [ 229.481077][ T7445] ? clear_bhb_loop+0x60/0xb0 [ 229.485804][ T7445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.491741][ T7445] RIP: 0033:0x7f22d919e159 [ 229.496179][ T7445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.515895][ T7445] RSP: 002b:00007f22da10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.524333][ T7445] RAX: ffffffffffffffda RBX: 00007f22d9425fa0 RCX: 00007f22d919e159 [ 229.532338][ T7445] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 229.540331][ T7445] RBP: 00007f22da10a090 R08: 0000000000000000 R09: 0000000000000000 [ 229.548344][ T7445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.556347][ T7445] R13: 00007f22d9426038 R14: 00007f22d9425fa0 R15: 00007ffffd092ff8 [ 229.564351][ T7445] [ 229.584528][ T7445] syz.2.1084: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 229.612840][ T7445] CPU: 1 PID: 7445 Comm: syz.2.1084 Not tainted syzkaller #0 [ 229.620288][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.630366][ T7445] Call Trace: [ 229.633667][ T7445] [ 229.636629][ T7445] dump_stack_lvl+0x188/0x24e [ 229.641337][ T7445] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 229.647777][ T7445] ? show_regs_print_info+0x12/0x12 [ 229.653001][ T7445] ? load_image+0x410/0x410 [ 229.657541][ T7445] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 229.663989][ T7445] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 229.670528][ T7445] warn_alloc+0x242/0x330 [ 229.674892][ T7445] ? __get_vm_area_node+0x122/0x330 [ 229.680119][ T7445] ? zone_watermark_ok_safe+0x270/0x270 [ 229.685696][ T7445] ? rcu_is_watching+0x11/0xa0 [ 229.690498][ T7445] ? __get_vm_area_node+0x318/0x330 [ 229.695731][ T7445] __vmalloc_node_range+0x37c/0x1380 [ 229.701086][ T7445] ? aa_get_newest_label+0xf9/0x5b0 [ 229.706332][ T7445] ? free_vm_area+0x50/0x50 [ 229.710980][ T7445] ? end_current_label_crit_section+0x170/0x170 [ 229.717268][ T7445] ? __lock_acquire+0x7c40/0x7c40 [ 229.722337][ T7445] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 229.728368][ T7445] __vmalloc+0x76/0x80 [ 229.732555][ T7445] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 229.738158][ T7445] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 229.743590][ T7445] ? bpf_prog_alloc+0x13/0x1b0 [ 229.748420][ T7445] bpf_prog_alloc+0x1c/0x1b0 [ 229.753067][ T7445] bpf_prog_load+0x7d4/0x1530 [ 229.757891][ T7445] ? map_freeze+0x390/0x390 [ 229.762444][ T7445] ? __might_fault+0xa6/0x120 [ 229.767164][ T7445] ? __might_fault+0xa6/0x120 [ 229.772016][ T7445] ? __might_fault+0xc2/0x120 [ 229.776741][ T7445] ? __might_fault+0xa6/0x120 [ 229.781464][ T7445] ? bpf_lsm_bpf+0x5/0x10 [ 229.785836][ T7445] ? security_bpf+0x7a/0xa0 [ 229.790420][ T7445] __sys_bpf+0x5b8/0x780 [ 229.794703][ T7445] ? bpf_link_show_fdinfo+0x380/0x380 [ 229.800123][ T7445] ? lock_chain_count+0x20/0x20 [ 229.805100][ T7445] __x64_sys_bpf+0x78/0x90 [ 229.809569][ T7445] do_syscall_64+0x4c/0xa0 [ 229.814015][ T7445] ? clear_bhb_loop+0x60/0xb0 [ 229.818740][ T7445] ? clear_bhb_loop+0x60/0xb0 [ 229.823539][ T7445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.829473][ T7445] RIP: 0033:0x7f22d919e159 [ 229.833912][ T7445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.853543][ T7445] RSP: 002b:00007f22da10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.861983][ T7445] RAX: ffffffffffffffda RBX: 00007f22d9425fa0 RCX: 00007f22d919e159 [ 229.869982][ T7445] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 229.877972][ T7445] RBP: 00007f22da10a090 R08: 0000000000000000 R09: 0000000000000000 [ 229.885965][ T7445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.893980][ T7445] R13: 00007f22d9426038 R14: 00007f22d9425fa0 R15: 00007ffffd092ff8 [ 229.901987][ T7445] [ 230.026085][ T7445] Mem-Info: [ 230.029290][ T7445] active_anon:5799 inactive_anon:0 isolated_anon:0 [ 230.029290][ T7445] active_file:16214 inactive_file:40013 isolated_file:0 [ 230.029290][ T7445] unevictable:768 dirty:162 writeback:0 [ 230.029290][ T7445] slab_reclaimable:21171 slab_unreclaimable:95388 [ 230.029290][ T7445] mapped:29499 shmem:1361 pagetables:575 [ 230.029290][ T7445] sec_pagetables:0 bounce:0 [ 230.029290][ T7445] kernel_misc_reclaimable:0 [ 230.029290][ T7445] free:1326713 free_pcp:11394 free_cma:0 [ 230.235878][ T7445] Node 0 active_anon:23396kB inactive_anon:0kB active_file:64856kB inactive_file:159852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118096kB dirty:648kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10340kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no [ 230.393674][ T7445] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 230.512720][ T7445] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.635504][ T7445] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 230.706538][ T7445] Node 0 DMA32 free:1400716kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23496kB inactive_anon:0kB active_file:64856kB inactive_file:159852kB unevictable:1536kB writepending:648kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:21636kB local_pcp:6096kB free_cma:0kB [ 230.855733][ T7445] lowmem_reserve[]: 0 0 1 1 1 [ 230.860597][ T7445] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 231.002562][ T7445] lowmem_reserve[]: 0 0 0 0 0 [ 231.015651][ T7445] Node 1 Normal free:3890776kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22820kB local_pcp:10944kB free_cma:0kB [ 231.165976][ T7445] lowmem_reserve[]: 0 0 0 0 0 [ 231.171032][ T7445] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 231.255070][ T7445] Node 0 DMA32: 2035*4kB (UME) 1256*8kB (UME) 1394*16kB (UME) 1007*32kB (UME) 786*64kB (UME) 237*128kB (UME) 115*256kB (UME) 46*512kB (UME) 24*1024kB (UM) 11*2048kB (UM) 280*4096kB (UM) = 1400332kB [ 231.335744][ T7445] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 231.375851][ T7445] Node 1 Normal: 228*4kB (U) 45*8kB (UE) 34*16kB (UME) 44*32kB (UME) 21*64kB (UME) 5*128kB (UM) 6*256kB (UME) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3890776kB [ 231.423973][ T7445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 231.454678][ T7445] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 231.484428][ T7445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 231.525853][ T7445] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 231.585057][ T4286] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 231.592777][ T7445] 57588 total pagecache pages [ 231.615132][ T7445] 0 pages in swap cache [ 231.634174][ T7445] Free swap = 124996kB [ 231.663611][ T7445] Total swap = 124996kB [ 231.707012][ T7445] 2097051 pages RAM [ 231.711593][ T7445] 0 pages HighMem/MovableOnly [ 231.745818][ T7445] 415226 pages reserved [ 231.756317][ T7445] 0 pages cma reserved [ 232.186794][ T7498] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 232.404222][ T7498] team0: Device wg1 is of different type [ 233.137015][ T7518] netlink: 'syz.2.1110': attribute type 10 has an invalid length. [ 233.199232][ T7524] sctp: [Deprecated]: syz.0.1112 (pid 7524) Use of int in max_burst socket option deprecated. [ 233.199232][ T7524] Use struct sctp_assoc_value instead [ 233.883046][ T4286] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 233.946050][ T7518] team0: Port device wlan1 added [ 235.418505][ T7566] bond0: (slave dummy0): Error: Slave device does not support XDP [ 235.438898][ T7567] netlink: 'syz.3.1125': attribute type 10 has an invalid length. [ 235.448584][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1125'. [ 235.476192][ T7555] bridge0: port 3(batadv0) entered blocking state [ 235.529758][ T7555] bridge0: port 3(batadv0) entered disabled state [ 235.548281][ T7555] device batadv0 entered promiscuous mode [ 235.560927][ T7555] bridge0: port 3(batadv0) entered blocking state [ 235.567907][ T7555] bridge0: port 3(batadv0) entered forwarding state [ 235.839420][ T4331] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 235.849296][ T4331] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 236.240340][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 237.675637][ T7607] FAULT_INJECTION: forcing a failure. [ 237.675637][ T7607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.707598][ T7607] CPU: 0 PID: 7607 Comm: syz.3.1136 Not tainted syzkaller #0 [ 237.715146][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.725248][ T7607] Call Trace: [ 237.728305][ T7609] bond0: (slave dummy0): Error: Slave device does not support XDP [ 237.728558][ T7607] [ 237.728569][ T7607] dump_stack_lvl+0x188/0x24e [ 237.744147][ T7607] ? show_regs_print_info+0x12/0x12 [ 237.749391][ T7607] ? load_image+0x410/0x410 [ 237.753933][ T7607] ? __lock_acquire+0x7c40/0x7c40 [ 237.758993][ T7607] ? mutex_unlock+0x10/0x10 [ 237.763542][ T7607] should_fail_ex+0x390/0x4c0 [ 237.768260][ T7607] _copy_from_user+0x2c/0x170 [ 237.772971][ T7607] smc_setsockopt+0x3eb/0xb80 [ 237.777716][ T7607] ? smc_shutdown+0x9a0/0x9a0 [ 237.782415][ T7607] ? aa_sock_opt_perm+0x74/0x100 [ 237.787397][ T7607] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 237.793340][ T7607] ? security_socket_setsockopt+0x7a/0xa0 [ 237.799305][ T7607] ? smc_shutdown+0x9a0/0x9a0 [ 237.804322][ T7607] __sys_setsockopt+0x2bf/0x3d0 [ 237.809405][ T7607] __x64_sys_setsockopt+0xb1/0xc0 [ 237.814575][ T7607] do_syscall_64+0x4c/0xa0 [ 237.819027][ T7607] ? clear_bhb_loop+0x60/0xb0 [ 237.823731][ T7607] ? clear_bhb_loop+0x60/0xb0 [ 237.828616][ T7607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.834552][ T7607] RIP: 0033:0x7f581af9e159 [ 237.839008][ T7607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.858653][ T7607] RSP: 002b:00007f581bef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.867142][ T7607] RAX: ffffffffffffffda RBX: 00007f581b226090 RCX: 00007f581af9e159 [ 237.875142][ T7607] RDX: 0000000000000017 RSI: 0000000000000006 RDI: 0000000000000007 [ 237.883146][ T7607] RBP: 00007f581bef1090 R08: 0000000000000004 R09: 0000000000000000 [ 237.891495][ T7607] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 237.899493][ T7607] R13: 00007f581b226128 R14: 00007f581b226090 R15: 00007ffd95fb5c68 [ 237.907522][ T7607] [ 238.049815][ T7613] FAULT_INJECTION: forcing a failure. [ 238.049815][ T7613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.093400][ T7613] CPU: 1 PID: 7613 Comm: syz.4.1138 Not tainted syzkaller #0 [ 238.100943][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.111041][ T7613] Call Trace: [ 238.114354][ T7613] [ 238.117326][ T7613] dump_stack_lvl+0x188/0x24e [ 238.122145][ T7613] ? show_regs_print_info+0x12/0x12 [ 238.127390][ T7613] ? load_image+0x410/0x410 [ 238.131949][ T7613] ? __might_fault+0xa6/0x120 [ 238.136688][ T7613] should_fail_ex+0x390/0x4c0 [ 238.141424][ T7613] copyout+0x1b/0x120 [ 238.145462][ T7613] _copy_to_iter+0x482/0x1050 [ 238.150236][ T7613] ? iov_iter_init+0x1f0/0x1f0 [ 238.155059][ T7613] ? __virt_addr_valid+0x188/0x540 [ 238.160226][ T7613] ? __virt_addr_valid+0x467/0x540 [ 238.165476][ T7613] ? __phys_addr_symbol+0x2b/0x70 [ 238.170547][ T7613] ? __check_object_size+0x4f6/0xa70 [ 238.175868][ T7613] __skb_datagram_iter+0xde/0x740 [ 238.180928][ T7613] ? skb_copy_datagram_iter+0x290/0x290 [ 238.186533][ T7613] ? __local_bh_enable_ip+0x136/0x1c0 [ 238.191929][ T7613] skb_copy_datagram_iter+0xd7/0x290 [ 238.197247][ T7613] sctp_recvmsg+0x249/0xda0 [ 238.201782][ T7613] inet_recvmsg+0x13c/0x1f0 [ 238.206313][ T7613] ? inet_sendpage+0x2e0/0x2e0 [ 238.211104][ T7613] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 238.216502][ T7613] ? security_socket_recvmsg+0x85/0xb0 [ 238.221990][ T7613] ? inet_sendpage+0x2e0/0x2e0 [ 238.226801][ T7613] ____sys_recvmsg+0x2c8/0x5b0 [ 238.231628][ T7613] ? __sys_recvmsg_sock+0x40/0x40 [ 238.236711][ T7613] ? import_iovec+0x6f/0xa0 [ 238.241248][ T7613] ___sys_recvmsg+0x210/0x590 [ 238.245951][ T7613] ? __sys_recvmsg+0x2a0/0x2a0 [ 238.250761][ T7613] ? common_file_perm+0x171/0x1c0 [ 238.255829][ T7613] ? __fget_files+0x3fc/0x460 [ 238.260552][ T7613] __x64_sys_recvmsg+0x20d/0x2e0 [ 238.265546][ T7613] ? ___sys_recvmsg+0x590/0x590 [ 238.270448][ T7613] ? lockdep_hardirqs_on+0x94/0x140 [ 238.275676][ T7613] do_syscall_64+0x4c/0xa0 [ 238.280115][ T7613] ? clear_bhb_loop+0x60/0xb0 [ 238.284812][ T7613] ? clear_bhb_loop+0x60/0xb0 [ 238.289516][ T7613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.295443][ T7613] RIP: 0033:0x7f6461b9e159 [ 238.299879][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.319510][ T7613] RSP: 002b:00007f645fdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 238.327946][ T7613] RAX: ffffffffffffffda RBX: 00007f6461e26090 RCX: 00007f6461b9e159 [ 238.335940][ T7613] RDX: 0000000040010040 RSI: 0000200000001c80 RDI: 0000000000000003 [ 238.343937][ T7613] RBP: 00007f645fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 238.351932][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.359945][ T7613] R13: 00007f6461e26128 R14: 00007f6461e26090 R15: 00007ffc94032e98 [ 238.367951][ T7613] [ 238.716071][ T7633] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1141'. [ 238.757770][ T4286] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 239.296646][ T7641] netlink: 'syz.4.1145': attribute type 2 has an invalid length. [ 239.315800][ T7641] netlink: 'syz.4.1145': attribute type 9 has an invalid length. [ 239.892845][ T7641] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1145'. [ 239.911810][ T7645] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 240.088079][ T7645] team0: Port device wlan1 added [ 240.275361][ T4286] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 240.480904][ T7657] bond0: (slave dummy0): Error: Slave device does not support XDP [ 241.550440][ T7691] bond0: (slave dummy0): Error: Slave device does not support XDP [ 241.693134][ T7693] device syzkaller0 entered promiscuous mode [ 242.254220][ T4286] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 244.138514][ T7768] bond0: (slave dummy0): Error: Slave device does not support XDP [ 245.083841][ T4286] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 245.251217][ T7799] bond0: (slave dummy0): Error: Slave device does not support XDP [ 245.677472][ T7808] netlink: 'syz.1.1200': attribute type 13 has an invalid length. [ 245.698602][ T7808] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1200'. [ 245.776560][ T7808] syz_tun: refused to change device tx_queue_len [ 245.786417][ T7808] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 246.821123][ T7840] bond0: (slave dummy0): Error: Slave device does not support XDP [ 246.940036][ T7846] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1211'. [ 247.017727][ T7846] netlink: 'syz.3.1211': attribute type 9 has an invalid length. [ 247.045840][ T7846] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1211'. [ 247.420143][ T7856] netlink: 'syz.3.1214': attribute type 21 has an invalid length. [ 247.453918][ T7856] netlink: 'syz.3.1214': attribute type 1 has an invalid length. [ 247.486641][ T7856] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1214'. [ 247.524846][ T7857] netlink: 'syz.3.1214': attribute type 21 has an invalid length. [ 247.555794][ T7857] netlink: 'syz.3.1214': attribute type 1 has an invalid length. [ 247.563724][ T7857] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1214'. [ 247.570343][ T4286] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 248.348687][ T7878] bond0: (slave dummy0): Error: Slave device does not support XDP [ 248.746286][ T7887] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1224'. [ 248.884104][ T7885] netlink: 'syz.1.1224': attribute type 9 has an invalid length. [ 248.917809][ T7885] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1224'. [ 249.640681][ T7898] device syzkaller0 entered promiscuous mode [ 251.692995][ T7936] device wlan1 entered promiscuous mode [ 251.721035][ T7938] netlink: 'syz.1.1240': attribute type 3 has an invalid length. [ 251.733599][ T7938] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.1240'. [ 252.402238][ T7958] bond0: (slave dummy0): Error: Slave device does not support XDP [ 252.502896][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 254.783260][ T7966] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 254.823562][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1248'. [ 254.878001][ T7966] bond0: (slave dummy0): Releasing backup interface [ 254.935698][ T7966] bridge0: port 3(dummy0) entered blocking state [ 254.952617][ T7966] bridge0: port 3(dummy0) entered disabled state [ 255.075819][ T7972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1250'. [ 255.290759][ T7978] netlink: 'syz.1.1253': attribute type 10 has an invalid length. [ 255.364041][ T7978] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1253'. [ 255.518663][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.525125][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.733366][ T7983] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.1254'. [ 255.956517][ T7995] bond0: (slave dummy0): Error: Slave device does not support XDP [ 256.778724][ T4286] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 257.671880][ T8026] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 257.910081][ T8038] netlink: 'syz.1.1272': attribute type 9 has an invalid length. [ 257.919566][ T8030] bond0: (slave dummy0): Error: Slave device does not support XDP [ 257.926446][ T8038] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1272'. [ 258.167089][ T8033] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 258.506336][ T8046] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 258.575949][ T8046] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1275'. [ 259.520368][ T8058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1280'. [ 259.743707][ T8064] netlink: 'syz.1.1281': attribute type 10 has an invalid length. [ 260.968028][ T8064] team0: Device wg1 is of different type [ 261.013086][ T8065] netlink: 'syz.0.1283': attribute type 10 has an invalid length. [ 261.033321][ T8065] team0: Device vxcan1 is of different type [ 261.135154][ T8082] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.1284'. [ 261.556460][ T8099] sctp: [Deprecated]: syz.3.1291 (pid 8099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.556460][ T8099] Use struct sctp_sack_info instead [ 262.312465][ T8103] netlink: 'syz.1.1294': attribute type 10 has an invalid length. [ 262.509103][ T8103] team0: Device wg1 is of different type [ 262.541158][ T8099] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1291'. [ 262.644892][ T8109] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1296'. [ 262.716206][ T8111] netlink: 'syz.0.1296': attribute type 10 has an invalid length. [ 262.746469][ T8111] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1296'. [ 262.767052][ T8120] netlink: 'syz.2.1298': attribute type 7 has an invalid length. [ 262.796934][ T8120] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1298'. [ 263.601668][ T8132] netlink: 'syz.0.1303': attribute type 1 has an invalid length. [ 263.655905][ T8132] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1303'. [ 266.621346][ T8202] netlink: 'syz.2.1328': attribute type 10 has an invalid length. [ 267.782022][ T8202] team0: Device wg1 is of different type [ 268.054344][ T8205] sctp: [Deprecated]: syz.1.1329 (pid 8205) Use of int in max_burst socket option deprecated. [ 268.054344][ T8205] Use struct sctp_assoc_value instead [ 268.126426][ T8209] Dead loop on virtual device ip6_vti0, fix it urgently! [ 268.174861][ T8215] sctp: [Deprecated]: syz.2.1333 (pid 8215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.174861][ T8215] Use struct sctp_sack_info instead [ 268.192994][ T8210] netlink: 'syz.4.1331': attribute type 10 has an invalid length. [ 268.798572][ T8228] FAULT_INJECTION: forcing a failure. [ 268.798572][ T8228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.821473][ T8228] CPU: 1 PID: 8228 Comm: syz.0.1336 Not tainted syzkaller #0 [ 268.828929][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.839145][ T8228] Call Trace: [ 268.842473][ T8228] [ 268.845439][ T8228] dump_stack_lvl+0x188/0x24e [ 268.850154][ T8228] ? show_regs_print_info+0x12/0x12 [ 268.855383][ T8228] ? load_image+0x410/0x410 [ 268.859923][ T8228] ? __lock_acquire+0x7c40/0x7c40 [ 268.864992][ T8228] should_fail_ex+0x390/0x4c0 [ 268.869719][ T8228] _copy_from_user+0x2c/0x170 [ 268.874436][ T8228] ___sys_recvmsg+0x170/0x590 [ 268.879149][ T8228] ? __sys_recvmsg+0x2a0/0x2a0 [ 268.883957][ T8228] ? common_file_perm+0x171/0x1c0 [ 268.889025][ T8228] ? __fget_files+0x3fc/0x460 [ 268.893752][ T8228] __x64_sys_recvmsg+0x20d/0x2e0 [ 268.898719][ T8228] ? ___sys_recvmsg+0x590/0x590 [ 268.903616][ T8228] ? lockdep_hardirqs_on+0x94/0x140 [ 268.908844][ T8228] do_syscall_64+0x4c/0xa0 [ 268.913289][ T8228] ? clear_bhb_loop+0x60/0xb0 [ 268.917987][ T8228] ? clear_bhb_loop+0x60/0xb0 [ 268.922774][ T8228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.928705][ T8228] RIP: 0033:0x7fb68859e159 [ 268.933150][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.952782][ T8228] RSP: 002b:00007fb68954f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 268.961295][ T8228] RAX: ffffffffffffffda RBX: 00007fb688825fa0 RCX: 00007fb68859e159 [ 268.969357][ T8228] RDX: 0000000040010040 RSI: 0000200000001c80 RDI: 0000000000000003 [ 268.977364][ T8228] RBP: 00007fb68954f090 R08: 0000000000000000 R09: 0000000000000000 [ 268.985364][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.993359][ T8228] R13: 00007fb688826038 R14: 00007fb688825fa0 R15: 00007ffd9fb97a68 [ 269.001385][ T8228] [ 269.032936][ T8210] team0: Device wg1 is of different type [ 269.061942][ T8220] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1333'. [ 269.282594][ T8234] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1337'. [ 269.454170][ T8241] veth1_macvtap: mtu greater than device maximum [ 269.524234][ T8244] netlink: 'syz.4.1339': attribute type 10 has an invalid length. [ 269.738661][ T8244] team0: Device wg1 is of different type [ 271.703260][ T8288] sctp: [Deprecated]: syz.4.1349 (pid 8288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.703260][ T8288] Use struct sctp_sack_info instead [ 271.934977][ T8286] netlink: 'syz.1.1350': attribute type 10 has an invalid length. [ 272.526131][ T8292] FAULT_INJECTION: forcing a failure. [ 272.526131][ T8292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.527012][ T8286] team0: Device wg1 is of different type [ 272.566428][ T8292] CPU: 1 PID: 8292 Comm: syz.2.1351 Not tainted syzkaller #0 [ 272.573899][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.583997][ T8292] Call Trace: [ 272.587312][ T8292] [ 272.590284][ T8292] dump_stack_lvl+0x188/0x24e [ 272.595011][ T8292] ? show_regs_print_info+0x12/0x12 [ 272.600246][ T8292] ? load_image+0x410/0x410 [ 272.604797][ T8292] ? __might_fault+0xa6/0x120 [ 272.609525][ T8292] should_fail_ex+0x390/0x4c0 [ 272.614260][ T8292] copyout+0x1b/0x120 [ 272.618287][ T8292] _copy_to_iter+0x482/0x1050 [ 272.623033][ T8292] ? iov_iter_init+0x1f0/0x1f0 [ 272.627850][ T8292] ? __virt_addr_valid+0x188/0x540 [ 272.633016][ T8292] ? __virt_addr_valid+0x467/0x540 [ 272.638176][ T8292] ? __phys_addr_symbol+0x2b/0x70 [ 272.643249][ T8292] ? __check_object_size+0x4f6/0xa70 [ 272.648590][ T8292] __skb_datagram_iter+0xde/0x740 [ 272.653657][ T8292] ? skb_copy_datagram_iter+0x290/0x290 [ 272.659233][ T8292] ? __local_bh_enable_ip+0x136/0x1c0 [ 272.664634][ T8292] skb_copy_datagram_iter+0xd7/0x290 [ 272.669951][ T8292] sctp_recvmsg+0x249/0xda0 [ 272.674577][ T8292] inet_recvmsg+0x13c/0x1f0 [ 272.679115][ T8292] ? inet_sendpage+0x2e0/0x2e0 [ 272.683912][ T8292] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 272.689249][ T8292] ? security_socket_recvmsg+0x85/0xb0 [ 272.694783][ T8292] ? inet_sendpage+0x2e0/0x2e0 [ 272.699686][ T8292] ____sys_recvmsg+0x2c8/0x5b0 [ 272.704488][ T8292] ? __sys_recvmsg_sock+0x40/0x40 [ 272.709548][ T8292] ? import_iovec+0x6f/0xa0 [ 272.714085][ T8292] ___sys_recvmsg+0x210/0x590 [ 272.718792][ T8292] ? __sys_recvmsg+0x2a0/0x2a0 [ 272.723584][ T8292] ? trace_call_bpf+0xbf/0x6b0 [ 272.728381][ T8292] ? trace_call_bpf+0x5d6/0x6b0 [ 272.733271][ T8292] ? __fget_files+0x3fc/0x460 [ 272.737990][ T8292] __x64_sys_recvmsg+0x20d/0x2e0 [ 272.742949][ T8292] ? perf_trace_preemptirq_template+0x268/0x320 [ 272.749220][ T8292] ? ___sys_recvmsg+0x590/0x590 [ 272.754104][ T8292] ? lockdep_hardirqs_on+0x94/0x140 [ 272.759331][ T8292] do_syscall_64+0x4c/0xa0 [ 272.763778][ T8292] ? clear_bhb_loop+0x60/0xb0 [ 272.768478][ T8292] ? clear_bhb_loop+0x60/0xb0 [ 272.773198][ T8292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.779123][ T8292] RIP: 0033:0x7f22d919e159 [ 272.783559][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.803188][ T8292] RSP: 002b:00007f22da0e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 272.811625][ T8292] RAX: ffffffffffffffda RBX: 00007f22d9426090 RCX: 00007f22d919e159 [ 272.819617][ T8292] RDX: 0000000040010040 RSI: 0000200000001c80 RDI: 0000000000000003 [ 272.827605][ T8292] RBP: 00007f22da0e9090 R08: 0000000000000000 R09: 0000000000000000 [ 272.835601][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.843618][ T8292] R13: 00007f22d9426128 R14: 00007f22d9426090 R15: 00007ffffd092ff8 [ 272.851626][ T8292] [ 273.338305][ T8309] netlink: 'syz.2.1355': attribute type 10 has an invalid length. [ 273.399079][ T8309] team0: Device wg1 is of different type [ 273.989450][ T8320] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1361'. [ 275.095715][ T8341] sctp: [Deprecated]: syz.1.1365 (pid 8341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.095715][ T8341] Use struct sctp_sack_info instead [ 275.161369][ T8337] netlink: 'syz.4.1368': attribute type 10 has an invalid length. [ 275.688947][ T8337] team0: Device wg1 is of different type [ 275.844001][ T8341] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1365'. [ 277.260217][ T8388] netlink: 'syz.2.1384': attribute type 10 has an invalid length. [ 277.374803][ T8388] team0: Device wg1 is of different type [ 277.661426][ T8403] FAULT_INJECTION: forcing a failure. [ 277.661426][ T8403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.716843][ T8401] netlink: 'syz.4.1388': attribute type 10 has an invalid length. [ 277.728022][ T8403] CPU: 1 PID: 8403 Comm: syz.3.1389 Not tainted syzkaller #0 [ 277.735473][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.745578][ T8403] Call Trace: [ 277.748898][ T8403] [ 277.751866][ T8403] dump_stack_lvl+0x188/0x24e [ 277.756613][ T8403] ? show_regs_print_info+0x12/0x12 [ 277.761876][ T8403] ? load_image+0x410/0x410 [ 277.766450][ T8403] ? __lock_acquire+0x7c40/0x7c40 [ 277.771551][ T8403] ? __lock_acquire+0x7c40/0x7c40 [ 277.776646][ T8403] should_fail_ex+0x390/0x4c0 [ 277.781392][ T8403] _copy_from_user+0x2c/0x170 [ 277.786148][ T8403] perf_copy_attr+0x177/0x840 [ 277.790880][ T8403] __se_sys_perf_event_open+0xf5/0x1ec0 [ 277.796481][ T8403] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 277.802183][ T8403] ? syscall_enter_from_user_mode+0x2a/0x80 [ 277.808131][ T8403] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 277.813817][ T8403] do_syscall_64+0x4c/0xa0 [ 277.818293][ T8403] ? clear_bhb_loop+0x60/0xb0 [ 277.823069][ T8403] ? clear_bhb_loop+0x60/0xb0 [ 277.827804][ T8403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.833756][ T8403] RIP: 0033:0x7f581af9e159 [ 277.838261][ T8403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.857922][ T8403] RSP: 002b:00007f581bf12028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 277.866371][ T8403] RAX: ffffffffffffffda RBX: 00007f581b225fa0 RCX: 00007f581af9e159 [ 277.874367][ T8403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 277.882359][ T8403] RBP: 00007f581bf12090 R08: 0000000000000000 R09: 0000000000000000 [ 277.890451][ T8403] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 277.898455][ T8403] R13: 00007f581b226038 R14: 00007f581b225fa0 R15: 00007ffd95fb5c68 [ 277.906496][ T8403] [ 278.221554][ T8401] team0: Device wg1 is of different type [ 278.372861][ T8416] netlink: 'syz.0.1393': attribute type 10 has an invalid length. [ 278.415878][ T8416] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1393'. [ 278.452878][ T8411] netlink: 'syz.0.1393': attribute type 10 has an invalid length. [ 278.529677][ T8411] team0: Port device wlan1 added [ 282.258476][ T8531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1425'. [ 284.014586][ T8569] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 284.054025][ T8569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1438'. [ 284.207256][ T8569] bridge0: port 3(dummy0) entered blocking state [ 284.214822][ T8569] bridge0: port 3(dummy0) entered forwarding state [ 284.398820][ T8578] netlink: 'syz.4.1441': attribute type 10 has an invalid length. [ 285.039028][ T8588] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1443'. [ 285.638136][ T8602] netlink: 'syz.0.1455': attribute type 10 has an invalid length. [ 285.798580][ T8602] team0: Device wg1 is of different type [ 286.078034][ T8601] netlink: 'syz.3.1447': attribute type 10 has an invalid length. [ 286.533000][ T8601] team0: Device wg1 is of different type [ 286.672524][ T8615] netlink: 'syz.1.1451': attribute type 9 has an invalid length. [ 286.732352][ T8615] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1451'. [ 287.024686][ T8624] netlink: 'syz.2.1452': attribute type 4 has an invalid length. [ 287.132072][ T8624] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1452'. [ 287.361614][ T4286] Bluetooth: hci0: Malformed LE Event: 0x1b [ 288.830686][ T8657] netlink: 'syz.0.1465': attribute type 10 has an invalid length. [ 288.873824][ T8657] team0: Device vxcan1 is of different type [ 290.426893][ T8700] netlink: 'syz.0.1478': attribute type 10 has an invalid length. [ 290.489610][ T8700] team0: Device wg1 is of different type [ 290.573335][ T8699] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1479'. [ 290.664175][ T8705] netlink: 'syz.4.1479': attribute type 10 has an invalid length. [ 290.685816][ T8705] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1479'. [ 290.778758][ T8704] : port 1(ip6gretap0) entered blocking state [ 290.794318][ T8704] : port 1(ip6gretap0) entered disabled state [ 290.861114][ T8704] device ip6gretap0 entered promiscuous mode [ 290.874740][ T8716] netlink: 'syz.1.1482': attribute type 7 has an invalid length. [ 290.898936][ T8704] : port 1(ip6gretap0) entered blocking state [ 290.906210][ T8704] : port 1(ip6gretap0) entered forwarding state [ 290.946403][ T8717] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 290.954456][ T8717] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1484'. [ 290.987003][ T8716] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1482'. [ 290.997727][ T8706] device ip6gretap0 left promiscuous mode [ 291.007287][ T8706] : port 1(ip6gretap0) entered disabled state [ 292.118301][ T8741] netlink: 'syz.0.1491': attribute type 10 has an invalid length. [ 292.375465][ T8741] team0: Device wg1 is of different type [ 292.918341][ T8760] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1497'. [ 293.758786][ T8783] netlink: 'syz.4.1508': attribute type 21 has an invalid length. [ 293.984837][ T8786] netlink: 'syz.3.1509': attribute type 3 has an invalid length. [ 294.027261][ T8786] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1509'. [ 294.241908][ T8791] netlink: 'syz.1.1507': attribute type 10 has an invalid length. [ 294.542306][ T8791] team0: Device wg1 is of different type [ 294.846920][ T8803] netlink: 'syz.4.1513': attribute type 25 has an invalid length. [ 294.895784][ T8803] netlink: 'syz.4.1513': attribute type 6 has an invalid length. [ 295.027439][ T8803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1513'. [ 295.103283][ T8816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1514'. [ 295.335680][ T8813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1513'. [ 295.512427][ T8833] validate_nla: 3 callbacks suppressed [ 295.512447][ T8833] netlink: 'syz.2.1520': attribute type 10 has an invalid length. [ 295.561608][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1520'. [ 298.419736][ T8851] netlink: 'syz.0.1523': attribute type 4 has an invalid length. [ 298.478144][ T8851] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1523'. [ 298.542151][ T8852] netlink: 'syz.1.1525': attribute type 10 has an invalid length. [ 298.742328][ T8852] team0: Device wg1 is of different type [ 300.063357][ T8876] netlink: 'syz.4.1529': attribute type 10 has an invalid length. [ 300.094316][ T8876] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1529'. [ 300.150643][ T8876] bridge0: port 3(dummy0) entered blocking state [ 300.157346][ T8876] bridge0: port 3(dummy0) entered forwarding state [ 301.126766][ T8897] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1537'. [ 304.056074][ T8911] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 304.135440][ T8911] team0: Device wg1 is of different type [ 305.668367][ T8960] FAULT_INJECTION: forcing a failure. [ 305.668367][ T8960] name failslab, interval 1, probability 0, space 0, times 0 [ 305.739679][ T8960] CPU: 1 PID: 8960 Comm: syz.4.1559 Not tainted syzkaller #0 [ 305.747150][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.757261][ T8960] Call Trace: [ 305.760613][ T8960] [ 305.763593][ T8960] dump_stack_lvl+0x188/0x24e [ 305.768348][ T8960] ? show_regs_print_info+0x12/0x12 [ 305.773699][ T8960] ? load_image+0x410/0x410 [ 305.778268][ T8960] ? __might_sleep+0xd0/0xd0 [ 305.782909][ T8960] ? __lock_acquire+0x7c40/0x7c40 [ 305.786008][ T8957] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 305.788005][ T8960] should_fail_ex+0x390/0x4c0 [ 305.788057][ T8960] should_failslab+0x5/0x20 [ 305.788080][ T8960] slab_pre_alloc_hook+0x59/0x300 [ 305.788111][ T8960] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 305.788146][ T8960] __kmem_cache_alloc_node+0x4f/0x270 [ 305.788178][ T8960] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 305.788208][ T8960] __kmalloc_node+0xa2/0x240 [ 305.788249][ T8960] memcg_alloc_slab_cgroups+0x81/0x120 [ 305.788283][ T8960] slab_post_alloc_hook+0xba/0x490 [ 305.788318][ T8960] kmem_cache_alloc_node+0x1ad/0x310 [ 305.788344][ T8960] ? __alloc_skb+0xf9/0x7d0 [ 305.788373][ T8960] __alloc_skb+0xf9/0x7d0 [ 305.788401][ T8960] alloc_skb_with_frags+0xa7/0x710 [ 305.788438][ T8960] ? verify_lock_unused+0x140/0x140 [ 305.788476][ T8960] sock_alloc_send_pskb+0x87f/0x9a0 [ 305.788529][ T8960] ? sock_kzfree_s+0x50/0x50 [ 305.788580][ T8960] ? do_raw_spin_lock+0x128/0x2f0 [ 305.788608][ T8960] ? __rwlock_init+0x140/0x140 [ 305.788636][ T8960] ? do_raw_spin_unlock+0x11d/0x230 [ 305.892089][ T8960] unix_dgram_sendmsg+0x5c1/0x16f0 [ 305.897254][ T8960] ? aa_sk_perm+0x81f/0x950 [ 305.901799][ T8960] ? mark_lock+0x94/0x320 [ 305.906170][ T8960] ? aa_af_perm+0x340/0x340 [ 305.910703][ T8960] ? __lock_acquire+0x138a/0x7c40 [ 305.915780][ T8960] ? unix_dgram_poll+0x680/0x680 [ 305.920752][ T8960] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 305.927203][ T8960] ? apparmor_socket_sendmsg+0x8a/0x330 [ 305.932791][ T8960] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 305.938098][ T8960] ? security_socket_sendmsg+0x7c/0xa0 [ 305.943590][ T8960] ? unix_dgram_poll+0x680/0x680 [ 305.948649][ T8960] ____sys_sendmsg+0x5ed/0x9a0 [ 305.953479][ T8960] ? __might_fault+0xa6/0x120 [ 305.958192][ T8960] ? __sys_sendmsg_sock+0x30/0x30 [ 305.963234][ T8960] ? __import_iovec+0x306/0x510 [ 305.968125][ T8960] ? import_iovec+0x6f/0xa0 [ 305.972667][ T8960] ___sys_sendmsg+0x2a2/0x360 [ 305.977400][ T8960] ? __sys_sendmsg+0x2a0/0x2a0 [ 305.982210][ T8960] ? trace_call_bpf+0xbf/0x6b0 [ 305.987021][ T8960] __se_sys_sendmsg+0x1c3/0x2b0 [ 305.991889][ T8960] ? ct_nmi_exit+0x145/0x1c0 [ 305.996533][ T8960] ? __x64_sys_sendmsg+0x80/0x80 [ 306.001528][ T8960] ? lockdep_hardirqs_on+0x94/0x140 [ 306.006761][ T8960] do_syscall_64+0x4c/0xa0 [ 306.011197][ T8960] ? clear_bhb_loop+0x60/0xb0 [ 306.015896][ T8960] ? clear_bhb_loop+0x60/0xb0 [ 306.020615][ T8960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.026532][ T8960] RIP: 0033:0x7f6461b9e159 [ 306.030985][ T8960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.050614][ T8960] RSP: 002b:00007f646298d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.059048][ T8960] RAX: ffffffffffffffda RBX: 00007f6461e25fa0 RCX: 00007f6461b9e159 [ 306.067047][ T8960] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 306.075043][ T8960] RBP: 00007f646298d090 R08: 0000000000000000 R09: 0000000000000000 [ 306.083029][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.091014][ T8960] R13: 00007f6461e26038 R14: 00007f6461e25fa0 R15: 00007ffc94032e98 [ 306.099118][ T8960] [ 306.341453][ T8957] team0: Device wg1 is of different type [ 306.494819][ T8954] netlink: 'syz.1.1557': attribute type 10 has an invalid length. [ 307.149849][ T8964] device wlan1 entered promiscuous mode [ 307.921789][ T8993] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1570'. [ 307.941635][ T8993] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 308.601323][ T9006] netlink: 'syz.0.1571': attribute type 10 has an invalid length. [ 309.177398][ T9006] team0: Device wg1 is of different type [ 309.763476][ T9024] netlink: 'syz.4.1577': attribute type 10 has an invalid length. [ 311.575691][ T4286] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 311.717234][ T9064] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1591'. [ 311.746938][ T9062] netlink: 'syz.2.1590': attribute type 10 has an invalid length. [ 312.341745][ T9062] team0: Device wg1 is of different type [ 312.386313][ T9073] netlink: 'syz.0.1593': attribute type 10 has an invalid length. [ 312.401207][ T9073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1593'. [ 312.415174][ T9073] device dummy0 entered promiscuous mode [ 312.524916][ T9073] bond0: (slave dummy0): Releasing backup interface [ 312.566237][ T9073] bridge0: port 4(dummy0) entered blocking state [ 312.598171][ T9073] bridge0: port 4(dummy0) entered disabled state [ 313.010590][ T9082] netlink: 'syz.2.1596': attribute type 10 has an invalid length. [ 313.150398][ T4286] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 313.300940][ T4286] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 313.673604][ T9103] ================================================================== [ 313.681736][ T9103] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 313.689586][ T9103] Write of size 48 at addr ffff888057a4d890 by task syz.1.1603/9103 [ 313.697599][ T9103] [ 313.699950][ T9103] CPU: 1 PID: 9103 Comm: syz.1.1603 Not tainted syzkaller #0 [ 313.707350][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.717434][ T9103] Call Trace: [ 313.720743][ T9103] [ 313.723701][ T9103] dump_stack_lvl+0x188/0x24e [ 313.728423][ T9103] ? __lock_acquire+0x7c40/0x7c40 [ 313.733493][ T9103] ? show_regs_print_info+0x12/0x12 [ 313.738714][ T9103] ? load_image+0x410/0x410 [ 313.743245][ T9103] ? __virt_addr_valid+0x467/0x540 [ 313.748390][ T9103] ? __bpf_get_stackid+0x6c9/0x920 [ 313.753514][ T9103] print_report+0xa8/0x210 [ 313.757960][ T9103] kasan_report+0x10b/0x140 [ 313.762498][ T9103] ? __bpf_get_stackid+0x6c9/0x920 [ 313.767644][ T9103] kasan_check_range+0x235/0x290 [ 313.772617][ T9103] ? __bpf_get_stackid+0x6c9/0x920 [ 313.777747][ T9103] memcpy+0x3c/0x60 [ 313.781583][ T9103] __bpf_get_stackid+0x6c9/0x920 [ 313.786544][ T9103] bpf_get_stackid_pe+0x33f/0x400 [ 313.791603][ T9103] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 313.797096][ T9103] bpf_overflow_handler+0x6d1/0x790 [ 313.802325][ T9103] ? bpf_overflow_handler+0xd9/0x790 [ 313.807640][ T9103] ? perf_swevent_overflow+0x230/0x230 [ 313.813129][ T9103] ? __kernel_text_address+0x9/0x30 [ 313.818358][ T9103] ? __perf_event_account_interrupt+0x187/0x280 [ 313.824634][ T9103] __perf_event_overflow+0x457/0x630 [ 313.829955][ T9103] ? perf_swevent_event+0x1d5/0x570 [ 313.835174][ T9103] perf_swevent_event+0x315/0x570 [ 313.840301][ T9103] ? perf_tp_event+0xc10/0xc10 [ 313.845096][ T9103] ? __lock_acquire+0x1465/0x7c40 [ 313.850157][ T9103] ___perf_sw_event+0x498/0x6d0 [ 313.855034][ T9103] ? ___perf_sw_event+0x184/0x6d0 [ 313.860113][ T9103] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 313.866550][ T9103] ? mark_lock+0x94/0x320 [ 313.870918][ T9103] ? mark_lock+0x94/0x320 [ 313.875269][ T9103] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 313.881286][ T9103] ? lock_chain_count+0x20/0x20 [ 313.886209][ T9103] __perf_sw_event+0x135/0x260 [ 313.891000][ T9103] do_user_addr_fault+0x497/0xb20 [ 313.896052][ T9103] ? trace_hardirqs_off_finish+0x86/0x180 [ 313.901794][ T9103] exc_page_fault+0x60/0x100 [ 313.906402][ T9103] ? __might_fault+0xa6/0x120 [ 313.911097][ T9103] asm_exc_page_fault+0x22/0x30 [ 313.915980][ T9103] RIP: 0010:__get_user_4+0x1c/0x30 [ 313.921116][ T9103] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 313.940739][ T9103] RSP: 0018:ffffc9001b24fd98 EFLAGS: 00050206 [ 313.946820][ T9103] RAX: 000000110e22fff6 RBX: ffff88807a3c8000 RCX: 1235d506c602c400 [ 313.954820][ T9103] RDX: ffffffffffffffff RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 313.962823][ T9103] RBP: ffffc9001b24fed8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 313.970818][ T9103] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 00000000c004743e [ 313.978801][ T9103] R13: ffff88807a3c80d8 R14: ffff888056de6500 R15: 1ffff1100adbccd5 [ 313.986806][ T9103] ppp_ioctl+0x559/0x1b20 [ 313.991163][ T9103] ? ppp_poll+0x250/0x250 [ 313.995519][ T9103] ? __fget_files+0x28/0x460 [ 314.000140][ T9103] ? bpf_lsm_file_ioctl+0x5/0x10 [ 314.005107][ T9103] ? security_file_ioctl+0x7c/0xa0 [ 314.010242][ T9103] ? ppp_poll+0x250/0x250 [ 314.014667][ T9103] __se_sys_ioctl+0xfa/0x170 [ 314.019277][ T9103] do_syscall_64+0x4c/0xa0 [ 314.023711][ T9103] ? clear_bhb_loop+0x60/0xb0 [ 314.028402][ T9103] ? clear_bhb_loop+0x60/0xb0 [ 314.033186][ T9103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.039099][ T9103] RIP: 0033:0x7f12fd19e159 [ 314.043547][ T9103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.063160][ T9103] RSP: 002b:00007f12fe11e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.071590][ T9103] RAX: ffffffffffffffda RBX: 00007f12fd426090 RCX: 00007f12fd19e159 [ 314.079669][ T9103] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000005 [ 314.087657][ T9103] RBP: 00007f12fd23506b R08: 0000000000000000 R09: 0000000000000000 [ 314.095642][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.103623][ T9103] R13: 00007f12fd426128 R14: 00007f12fd426090 R15: 00007ffe5fc49778 [ 314.111615][ T9103] [ 314.114649][ T9103] [ 314.117008][ T9103] Allocated by task 9102: [ 314.121345][ T9103] kasan_set_track+0x4b/0x70 [ 314.125962][ T9103] __kasan_kmalloc+0x8e/0xa0 [ 314.130568][ T9103] __kmalloc_node+0xb2/0x240 [ 314.135188][ T9103] bpf_map_area_alloc+0x47/0xe0 [ 314.140054][ T9103] prealloc_elems_and_freelist+0x86/0x1c0 [ 314.145803][ T9103] stack_map_alloc+0x386/0x510 [ 314.150597][ T9103] map_create+0x524/0xff0 [ 314.154950][ T9103] __sys_bpf+0x38b/0x780 [ 314.159215][ T9103] __x64_sys_bpf+0x78/0x90 [ 314.163653][ T9103] do_syscall_64+0x4c/0xa0 [ 314.168135][ T9103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.174062][ T9103] [ 314.176408][ T9103] The buggy address belongs to the object at ffff888057a4d880 [ 314.176408][ T9103] which belongs to the cache kmalloc-cg-64 of size 64 [ 314.190559][ T9103] The buggy address is located 16 bytes inside of [ 314.190559][ T9103] 64-byte region [ffff888057a4d880, ffff888057a4d8c0) [ 314.203672][ T9103] [ 314.206011][ T9103] The buggy address belongs to the physical page: [ 314.212443][ T9103] page:ffffea00015e9340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57a4d [ 314.222624][ T9103] memcg:ffff88807fbdfe01 [ 314.226872][ T9103] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 314.234443][ T9103] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888017442780 [ 314.243038][ T9103] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807fbdfe01 [ 314.251655][ T9103] page dumped because: kasan: bad access detected [ 314.258094][ T9103] page_owner tracks the page as allocated [ 314.263900][ T9103] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4284, tgid 4284 (syz-executor), ts 277097809957, free_ts 277097392246 [ 314.282331][ T9103] post_alloc_hook+0x173/0x1a0 [ 314.287120][ T9103] get_page_from_freelist+0x206b/0x2180 [ 314.292676][ T9103] __alloc_pages+0x1ec/0x4f0 [ 314.297284][ T9103] alloc_slab_page+0x5d/0x180 [ 314.301980][ T9103] new_slab+0x87/0x2d0 [ 314.306073][ T9103] ___slab_alloc+0xbc5/0x1240 [ 314.310759][ T9103] __kmem_cache_alloc_node+0x126/0x270 [ 314.316223][ T9103] kmalloc_trace+0x26/0xe0 [ 314.320647][ T9103] alloc_fdtable+0xca/0x2c0 [ 314.325180][ T9103] dup_fd+0x743/0xa20 [ 314.329182][ T9103] copy_files+0x72/0xe0 [ 314.333346][ T9103] copy_process+0x180e/0x4070 [ 314.338031][ T9103] kernel_clone+0x24b/0x900 [ 314.342542][ T9103] __x64_sys_clone+0x1a7/0x220 [ 314.347316][ T9103] do_syscall_64+0x4c/0xa0 [ 314.351751][ T9103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.357658][ T9103] page last free stack trace: [ 314.362336][ T9103] free_unref_page_prepare+0x8e5/0x9e0 [ 314.367807][ T9103] free_unref_page+0x2e/0x3f0 [ 314.372492][ T9103] __vunmap+0x874/0xa40 [ 314.376662][ T9103] __do_replace+0x86d/0x980 [ 314.381182][ T9103] do_ip6t_set_ctl+0xb3d/0xe10 [ 314.385973][ T9103] nf_setsockopt+0x25f/0x280 [ 314.390580][ T9103] __sys_setsockopt+0x2bf/0x3d0 [ 314.395445][ T9103] __x64_sys_setsockopt+0xb1/0xc0 [ 314.400482][ T9103] do_syscall_64+0x4c/0xa0 [ 314.404913][ T9103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.410826][ T9103] [ 314.413158][ T9103] Memory state around the buggy address: [ 314.418794][ T9103] ffff888057a4d780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 314.426868][ T9103] ffff888057a4d800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 314.434936][ T9103] >ffff888057a4d880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 314.443001][ T9103] ^ [ 314.448385][ T9103] ffff888057a4d900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 314.456460][ T9103] ffff888057a4d980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 314.464526][ T9103] ================================================================== [ 314.472604][ T9103] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.479801][ T9103] CPU: 1 PID: 9103 Comm: syz.1.1603 Not tainted syzkaller #0 [ 314.487174][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.497235][ T9103] Call Trace: [ 314.500548][ T9103] [ 314.503491][ T9103] dump_stack_lvl+0x188/0x24e [ 314.508187][ T9103] ? memcpy+0x3c/0x60 [ 314.512173][ T9103] ? show_regs_print_info+0x12/0x12 [ 314.517378][ T9103] ? load_image+0x410/0x410 [ 314.521904][ T9103] panic+0x2d3/0x710 [ 314.525817][ T9103] ? bpf_jit_dump+0xd0/0xd0 [ 314.530349][ T9103] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.536259][ T9103] ? _raw_spin_unlock+0x40/0x40 [ 314.541121][ T9103] ? print_memory_metadata+0x314/0x400 [ 314.546598][ T9103] check_panic_on_warn+0x80/0xa0 [ 314.551546][ T9103] ? __bpf_get_stackid+0x6c9/0x920 [ 314.556670][ T9103] end_report+0x66/0x110 [ 314.560934][ T9103] kasan_report+0x118/0x140 [ 314.565450][ T9103] ? __bpf_get_stackid+0x6c9/0x920 [ 314.570599][ T9103] kasan_check_range+0x235/0x290 [ 314.575552][ T9103] ? __bpf_get_stackid+0x6c9/0x920 [ 314.580689][ T9103] memcpy+0x3c/0x60 [ 314.584502][ T9103] __bpf_get_stackid+0x6c9/0x920 [ 314.589452][ T9103] bpf_get_stackid_pe+0x33f/0x400 [ 314.594491][ T9103] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 314.599962][ T9103] bpf_overflow_handler+0x6d1/0x790 [ 314.605176][ T9103] ? bpf_overflow_handler+0xd9/0x790 [ 314.610480][ T9103] ? perf_swevent_overflow+0x230/0x230 [ 314.615953][ T9103] ? __kernel_text_address+0x9/0x30 [ 314.621184][ T9103] ? __perf_event_account_interrupt+0x187/0x280 [ 314.627445][ T9103] __perf_event_overflow+0x457/0x630 [ 314.632741][ T9103] ? perf_swevent_event+0x1d5/0x570 [ 314.637965][ T9103] perf_swevent_event+0x315/0x570 [ 314.643010][ T9103] ? perf_tp_event+0xc10/0xc10 [ 314.647800][ T9103] ? __lock_acquire+0x1465/0x7c40 [ 314.652843][ T9103] ___perf_sw_event+0x498/0x6d0 [ 314.657712][ T9103] ? ___perf_sw_event+0x184/0x6d0 [ 314.662756][ T9103] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 314.669369][ T9103] ? mark_lock+0x94/0x320 [ 314.673740][ T9103] ? mark_lock+0x94/0x320 [ 314.678087][ T9103] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 314.684095][ T9103] ? lock_chain_count+0x20/0x20 [ 314.688962][ T9103] __perf_sw_event+0x135/0x260 [ 314.693751][ T9103] do_user_addr_fault+0x497/0xb20 [ 314.698817][ T9103] ? trace_hardirqs_off_finish+0x86/0x180 [ 314.704569][ T9103] exc_page_fault+0x60/0x100 [ 314.709177][ T9103] ? __might_fault+0xa6/0x120 [ 314.713867][ T9103] asm_exc_page_fault+0x22/0x30 [ 314.718723][ T9103] RIP: 0010:__get_user_4+0x1c/0x30 [ 314.723853][ T9103] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 314.743468][ T9103] RSP: 0018:ffffc9001b24fd98 EFLAGS: 00050206 [ 314.749543][ T9103] RAX: 000000110e22fff6 RBX: ffff88807a3c8000 RCX: 1235d506c602c400 [ 314.757521][ T9103] RDX: ffffffffffffffff RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 314.765527][ T9103] RBP: ffffc9001b24fed8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 314.773513][ T9103] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 00000000c004743e [ 314.781540][ T9103] R13: ffff88807a3c80d8 R14: ffff888056de6500 R15: 1ffff1100adbccd5 [ 314.789544][ T9103] ppp_ioctl+0x559/0x1b20 [ 314.793891][ T9103] ? ppp_poll+0x250/0x250 [ 314.798235][ T9103] ? __fget_files+0x28/0x460 [ 314.802864][ T9103] ? bpf_lsm_file_ioctl+0x5/0x10 [ 314.807822][ T9103] ? security_file_ioctl+0x7c/0xa0 [ 314.812944][ T9103] ? ppp_poll+0x250/0x250 [ 314.817308][ T9103] __se_sys_ioctl+0xfa/0x170 [ 314.821917][ T9103] do_syscall_64+0x4c/0xa0 [ 314.826354][ T9103] ? clear_bhb_loop+0x60/0xb0 [ 314.831057][ T9103] ? clear_bhb_loop+0x60/0xb0 [ 314.835747][ T9103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.841664][ T9103] RIP: 0033:0x7f12fd19e159 [ 314.846085][ T9103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.865703][ T9103] RSP: 002b:00007f12fe11e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.874130][ T9103] RAX: ffffffffffffffda RBX: 00007f12fd426090 RCX: 00007f12fd19e159 [ 314.882115][ T9103] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000005 [ 314.890094][ T9103] RBP: 00007f12fd23506b R08: 0000000000000000 R09: 0000000000000000 [ 314.898067][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.906048][ T9103] R13: 00007f12fd426128 R14: 00007f12fd426090 R15: 00007ffe5fc49778 [ 314.914050][ T9103] [ 314.917696][ T9103] Kernel Offset: disabled [ 314.922031][ T9103] Rebooting in 86400 seconds..