last executing test programs: 8.651105031s ago: executing program 0 (id=575): recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 7.603893221s ago: executing program 0 (id=586): perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unlink(&(0x7f0000000040)='./file0\x00') r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x3b, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x4000}) 5.513014532s ago: executing program 0 (id=592): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000011"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x66) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r5 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xd, 0xbb, 0xe, 0x1, 0x0, 0xa5, 0x890, 0x8a4b624957e86f1d, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040)}, 0x40, 0x1, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x1, r1, 0x9) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.488017453s ago: executing program 1 (id=593): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10102, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000030, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 5.258521967s ago: executing program 1 (id=596): recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 4.900845947s ago: executing program 4 (id=598): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000400000008000000a400000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x2, 0x0, 0x16}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="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", 0xfda}], 0x3}, 0x0) r3 = socket$kcm(0x28, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100c, 0x7, 0x0, 0x7, 0x0, 0x7, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', r6, r7, 0x5, 0x2, 0x3}, 0x50) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000001c0)=r6) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) close(r3) 4.358822058s ago: executing program 1 (id=600): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="14000000140081026681f782db44b904021d0800", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004489c) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9) 4.257167145s ago: executing program 3 (id=601): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRESDEC=r1], 0x128}, 0x8080) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 3.98756205s ago: executing program 3 (id=603): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x17, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000180)=""/5, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x1008, 0x78, 0x9}, 0x10, 0x22eb9, 0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0, 0x10, 0x8}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$kcm(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a00)={r1, &(0x7f0000000900)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000001e00000000000000000000000000000000c64bd1a1adc0912c8bed1dd7367fe8dbf05a9869a4c1423e52e6b4c82b8eff2654b627bec40351d1bc1d24da6950"], 0x48) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x11, &(0x7f0000000a40)=ANY=[@ANYBLOB="18330000030000000000000000000000850000007a00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018290000", @ANYRES32, @ANYBLOB="010000001822000000000000000000577c37db53d879532f390800002029643359a64f3589d13b4880cb564c73bdeadd06f4b58f3a", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\r\x00\x00\x00'], &(0x7f0000000680)='syzkaller\x00', 0x9d2, 0x14, &(0x7f00000006c0)=""/20, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x3, 0xf, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)=[{0x0, 0x3, 0x4, 0x6}, {0x3, 0x2, 0x8, 0x8}, {0x1, 0x5, 0xc, 0x6}, {0x3, 0x4, 0xa, 0x9}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x6, &(0x7f0000000a40)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xf, 0x0, 0x951}, 0x10, 0x2d314, r5, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x9, 0x0, 0x0, 0xfc, 0x0, 0x80040001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x6}, 0x3002, 0x0, 0x0, 0x5, 0x0, 0x6, 0x1002, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x40000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)='.\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 2.645112707s ago: executing program 2 (id=604): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab070004000523"], 0xfe33) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1}, 0x2100) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)='J', 0x1}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40001) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x7, 0x4, 0x401, 0x10000, 0x1, 0xff, '\x00', 0x0, r5, 0x3, 0x3, 0x3, 0xe, @void, @value, @value=r6}, 0x50) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0/file0\x00', r6}, 0x18) 2.642236848s ago: executing program 3 (id=605): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7f3360dcb17a86fd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) 2.629146798s ago: executing program 4 (id=606): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x10a040, 0xc8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x81, 0x40, 0x0, 0x0, 0x0, 0x8480, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000140), 0x4}, 0x5123, 0x1, 0xa, 0x4, 0x5987, 0xfffffffa, 0x6, 0x0, 0x81, 0x0, 0xfffffffffffffff7}, r3, 0xa, 0xffffffffffffffff, 0x5) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0xffffffffffffff80, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0002000200002037153e378c0401a3060410004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES64=r0, @ANYRES16=r1, @ANYRES32=r5, @ANYRES8=r2], 0xfdef) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 2.578945431s ago: executing program 1 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000058e02ddb3b8985ee7e27c7987a98b14c369103ea22dbbefc82e4f78a7393d32fb39c44a4f521551cee0fc50ab0eec8ef8b99440040896c25296fe482497eaae303df221cfa4e2dd4d6769f68e3040940ef7656a1031fbed4b32eb7b37db70de3bb951c94eea60198865800c6d6b68d523eb011d75c1d510ce37a52156168a4893197cf3d28ad1f044fab82ef90390b6260160b0926fb2642409d376c2115dcf0392a3a3ac7d3c96831d68b12889c0e867c78bb8cfd7fdf347facfde54e9ff08f8889558da739b63b55bbdf8611ecd35f658051ebb600ff2a73640baaf3f33c9c008642383283"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="2e00000039000511d25280698c63940d0224fc602f6e35400c00153e370a000180256400d1bd7400000000000000fac286501d5b017a03e91ce27bd49efd6996f6d45dc3736ad2d5ce714004394287a61502940a01dd93344811ba6dea8d9fc98d705cedd8ecd7ef04204093875263dce68e547c72f39e60570d8ac87cfa59631595acc18daa954b0d69e627af365dcc1da07d4674d665cb08a9e8ae9014335731f9adeecde460a2b6afc619752fdc7307c6ab8b68be9d067be65271f5ca8cb3745d600ea7e41a1252c84f2037c67f68066e69ac0d9b0abc7fa6e13524ec046ac78bc39e86083841c2e51de2280f62f4fbbb815eb9c7062dff3ac86f7947d5b54bc2a3687d50f1866e33d645dfc5876eedf5f360152127be57c187501e5a0d7df4eec925a258abd5740818aa1c7427d754c0848ecb1bdf1bb79496fba3481357258b4471b3daa4341db7d7b062caead73a03b72945f8324960a80a19cf3be8f9651588dc22c21e4de3cfc7165892896b76fa2f3f054d794ad6d5100f9f7f9661a7d9bd2366890ad7bcb4a74bb901f3dca3c1a5f796c44b4d6cbb61e5f4aebc1b0664acfb6601a5ab316747328cfdb0000000000000000800", 0x1b8}], 0x1, 0x0, 0x0, 0x39c}, 0x800) 2.504902085s ago: executing program 0 (id=608): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x1, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd6, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246d", 0x0, 0x6b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a07"], 0xfe33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b702000000100000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000c80)=@o_path={&(0x7f0000000ac0)='./file0\x00', r6, 0x4000, r1}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r0, 0x3, 0x1, 0x3}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x66db, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0xc, 0x1, 0x6, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x44, &(0x7f0000000280)=""/68, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000300)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xe, 0x7, 0x6}, 0x10, 0xffffffffffffffff, r3, 0xa, &(0x7f0000000580)=[r5, r6, r7, 0x1, r8, r9], &(0x7f00000005c0)=[{0x3, 0x4}, {0x10001, 0x1, 0xb, 0xc}, {0x5, 0x3, 0x3, 0x9}, {0x5, 0x4, 0x8, 0x8}, {0x2, 0x1, 0xf, 0xb}, {0x4, 0x2, 0x8, 0x5}, {0x4, 0x2}, {0x1, 0x3, 0x10, 0xc}, {0x0, 0x2, 0x8}, {0x1, 0x2, 0xe, 0xa}], 0x10, 0x100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x23, 0x5, 0x0) 2.384840082s ago: executing program 3 (id=609): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000480)=r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c6}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xac, &(0x7f0000000100)=""/172, 0x41100, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000340)=[{0x3, 0x1, 0xe, 0xb}, {0x5, 0x5, 0x80000001, 0x5}, {0x0, 0x3, 0x3}, {0x0, 0x5, 0xe, 0x3}, {0x5, 0x2, 0xa}, {0x0, 0x3, 0x3, 0x6}, {0x0, 0x5, 0x10, 0x3}], 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000340)=""/129, 0x81, 0x0, &(0x7f0000000400)=""/167, 0xa7}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000540)=@raw=[@ldst={0x1, 0x1, 0x0, 0x6, 0x9, 0x20, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x93c8, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x8, 0xfff, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[r1, r1, r2, 0xffffffffffffffff], &(0x7f0000000740)=[{0x1, 0x1, 0x9, 0x8}, {0x4, 0x3, 0x4, 0x4}, {0x1, 0x2, 0x1, 0xa}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0xdd, 0x4, 0x3, 0x2, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x5c, &(0x7f0000000280)=""/92, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x8, 0x9, 0x7}, 0x10, r6, r7, 0x2, &(0x7f0000000840)=[r0], &(0x7f0000000880)=[{0x5, 0x2, 0xb}, {0x0, 0x4, 0x10}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000001280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000480)=r5, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c6}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xac, &(0x7f0000000100)=""/172, 0x41100, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000340)=[{0x3, 0x1, 0xe, 0xb}, {0x5, 0x5, 0x80000001, 0x5}, {0x0, 0x3, 0x3}, {0x0, 0x5, 0xe, 0x3}, {0x5, 0x2, 0xa}, {0x0, 0x3, 0x3, 0x6}, {0x0, 0x5, 0x10, 0x3}], 0x10, 0xfffffffd}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000340)=""/129, 0x81, 0x0, &(0x7f0000000400)=""/167, 0xa7}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000540)=@raw=[@ldst={0x1, 0x1, 0x0, 0x6, 0x9, 0x20, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x93c8, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x8, 0xfff, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[r1, r1, r2, 0xffffffffffffffff], &(0x7f0000000740)=[{0x1, 0x1, 0x9, 0x8}, {0x4, 0x3, 0x4, 0x4}, {0x1, 0x2, 0x1, 0xa}], 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0xdd, 0x4, 0x3, 0x2, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x5c, &(0x7f0000000280)=""/92, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x8, 0x9, 0x7}, 0x10, r6, r7, 0x2, &(0x7f0000000840)=[r0], &(0x7f0000000880)=[{0x5, 0x2, 0xb}, {0x0, 0x4, 0x10}], 0x10, 0x4}, 0x94) (async) 1.608502797s ago: executing program 1 (id=610): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095000000000000003faa00000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0xec, &(0x7f00000004c0)=""/236}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0035b69fdb90d984"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0xffffffffffffffc2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x5, 0xdc}, 0x0, 0x2000000000000c8, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'net_cls'}, {0x2d, 'perf_event'}]}, 0x15) 1.345089172s ago: executing program 3 (id=611): recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 1.343313862s ago: executing program 2 (id=612): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r3}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000940), &(0x7f00000009c0)=r0}, 0x20) close(0x3) r5 = socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000180)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x0, 0x0, 'r'}], 0x18}, 0x41) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.319008664s ago: executing program 4 (id=613): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000c4448aad37b805592e60c0a07300e7ffffff1bf6b500000085000000580e439a0518c0e1759f98877fa4a45ba3af49c2"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1b}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0xff03) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffd0f, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x20, 0x0, 0xc2b8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x2}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x1008, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e23, @empty}, 0x10, &(0x7f0000000040), 0x0, &(0x7f00000002c0)}, 0x0) (async) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x83, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002400000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000080000000000000000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xfca804a0, 0x90, 0x0, &(0x7f0000000240)="b820080002000000000000d1786da8d6f208d949d18590426a76b128f82794766157992e3ea29175f8ccc5a8e3c72939734d0e362d4fca8a5764a06ba147b3aa3fb551494dfa4fdf1aa56cdd5c0f1bc48d066db12e1183cc63f94f95b85ae3d65ef615186ee2344450f9487eb26a21205ca62a767002442f888ae80edeb804fc43892f8b13e250ff44fabef7ae78dfa8", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000200000000263619685cd6cdc01000000000000000000000000000100000d00000059c3ea0000001c422b"], 0x0, 0x3a}, 0x28) 1.19664483s ago: executing program 4 (id=614): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x49, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x13, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000880)='GPL\x00', 0xdd2a, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x5, 0x1, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000940)=[{0x1, 0x5, 0x0, 0x2}, {0x1, 0x2, 0xf, 0xb}], 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0x2d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x80000000, 0x23, &(0x7f0000000400)=""/35, 0x40f00, 0x48, '\x00', r2, @fallback=0xf, r3, 0x8, &(0x7f0000000740)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xe, 0x4}, 0x10, r4, r5, 0x0, &(0x7f0000000a40), 0x0, 0x10, 0x100}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 840.653301ms ago: executing program 2 (id=615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) close(r0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) close(r2) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) (async) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x3, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0004000055000000"], 0x48) (async, rerun: 32) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r8) (async) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6361}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) close(r10) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) (async) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511ff070002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0xc000) (async, rerun: 64) close(r9) (rerun: 64) r12 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r12, 0x29, 0x1a, &(0x7f0000000140), 0x4) (async) sendmsg$kcm(r12, &(0x7f0000000100)={&(0x7f0000000040)=@l2={0x1f, 0xd9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x1}, 0x80, &(0x7f0000000340)}, 0x40080c0) 815.595163ms ago: executing program 0 (id=616): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf94, 0x0, @perf_config_ext={0x9c2, 0x5}, 0x10040, 0x4, 0xc2ba, 0x0, 0x100, 0x7}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], &(0x7f00000004c0)=""/147, 0x2b, 0x93, 0x1}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x3}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xcda4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x2}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) 728.704088ms ago: executing program 2 (id=617): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="14000000140081026681f782db44b904021d0800", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004489c) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9) 644.815402ms ago: executing program 1 (id=618): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x18, 0x0, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100c, 0x7, 0x0, 0x7, 0x0, 0x7, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 610.204654ms ago: executing program 3 (id=619): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7f3360dcb17a86fd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) 591.807526ms ago: executing program 4 (id=620): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x18}, 0x404f444) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000000000000000000000100000000000000010010000"], 0x28}, 0xfc40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000880)={&(0x7f0000000200)=@nl, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000680)=""/75, 0x4b}, {&(0x7f0000000700)=""/204, 0xcc}], 0x7}, 0x12060) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000007fa284273f391d2f217573b629e029760925f71f0baf4db2776a8c06410fa94fe35d088eb8edd9ce30215412263663255ab892362db48a89e999fdd44b0d635a1903b6fe41c31c00d4dcbfbb98e8bbcbd24a8be3d9f3413f84b13c302d86637a66e75a84210d4e3451505df3b84fd176173ab03ea14298f9804a0a5db07001c8bfe2fdb2bd308af1c9587aedcc637683237dfa28d3b0ea9f5c6eeae58233ec68603be9944e0752d1fb426105e"], 0x18}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x114, 0xfffffffd}, {0x18, 0xff, 0xa, "c2c767"}], 0x28}, 0xc0) 351.274359ms ago: executing program 0 (id=621): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0xaf35cc28a6233791}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc3, 0xc3, 0xc, [@struct={0xd, 0x2, 0x0, 0x4, 0x1, 0x4, [{0xa, 0x4, 0xffff}, {0xb, 0x5, 0x5}]}, @enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0x5, 0x7}, {0x7, 0x8001}, {0x6, 0x4}, {0x7, 0x8}, {0x10, 0x80000001}, {0xe, 0x28}, {0x6}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x57, 0x2}, @datasec={0xf, 0x5, 0x0, 0xf, 0x3, [{0x2, 0xfffffffc, 0x3ff}, {0x4, 0x1, 0x101}, {0x3, 0x7, 0x6}, {0x3, 0xe3b1, 0x3}, {0x2, 0x269, 0x6}], "581c37"}]}, {0x0, [0x30, 0x30, 0x30, 0x2e, 0x5f, 0x2e, 0x61, 0x61, 0x0, 0x2e]}}, &(0x7f0000000300)=""/146, 0xe8, 0x92}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x4, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, @map_fd={0x18, 0xc, 0x1, 0x0, r0}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x40, &(0x7f0000000100)=""/64, 0x0, 0x1, '\x00', r2, @fallback=0x2, r3, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xa, 0xb3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000480)=[{0x0, 0x3, 0x2, 0x5}, {0x4, 0x4, 0xb, 0x8}, {0x0, 0x1, 0x8, 0xc}, {0x0, 0x5, 0x1, 0x3}, {0x2, 0x3, 0x5, 0x4}, {0x0, 0x5, 0x7, 0xa}, {0x4, 0x1, 0x4, 0x4}, {0x0, 0x1, 0x6, 0x7}, {0x4, 0x1, 0x5, 0x9}], 0x10, 0x20000}, 0x94) r5 = syz_clone(0x40000, &(0x7f0000000600)="569c0c72c2dfdc640a8d3f6e52f76cd5354efbcfd39b794c0650bad47a0353d49e5a7b7225a19271983571986623e3ba4d06235c931b525a95f477fff0977b96de42da4e", 0x44, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d3fef449c6e485b1471610da0d11acaf32c29cc4862b686cdfb5753f959d76c76a3fcd1f84acb00845c995d088a3886782b0a0949fb0744620b049557acf4a0f3cb905612a7bc0a1af8e921ac49355c84e4b60ab41a68ebc5a1da85260e55c08bcf0cc37a89ecd213fbcd694b90d27084fbb0c4b8f0818a0d451ce0c9d55319eb038121addb3961ca907e23674b15a6231f0558793df7d4a8bd947c0404ed3319fd6e5ab6337301bd734d92b9cc7ee9e2bf3dd444ab9c465d59de8fb37caf42f0c17d61346cbbc2633cef67f581d188f6f") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000840)={r5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000800)='+.\x00'}, 0x30) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x80000000, '\x00', r2, r3, 0x2, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x401, '\x00', r2, r3, 0x3, 0x0, 0x3}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r1, 0xe9, 0x18}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000b80)={r7, &(0x7f00000009c0)="226532636b0c294decdb37d9c362bfb111c3302f7d4ad2b74d7ca15ea91573908730dbead9cccbc3f1a72cf1c8ee913a02111634713402361ddbe1330b94b1ca2b5814165bc4bf8b06fbc41add7136a574bae43e9cabf3b0a7ad088001562a1451f99ee018fe9aaf821d219339a6490b98b9a879f077e60bcbdc18a6edf942d891d9c28b237b4e025990dec8ed7cb9eaeb7dabc32a3a1f3c51994c7359dec0301e114718f2c24303d62496cd3b01e7f4dbbd3f3b00f0c18de1489792c4ce93cff22f80727463f47e87dde8946f63c522cdd7ca0025a8ff90b707d40ad280497b58a2523f564c884c218cbccf75dda06c0ac6", &(0x7f0000000ac0)=""/147}, 0x20) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001400)={&(0x7f0000000bc0)=@rc={0x1f, @any, 0x7f}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c40)="e56feb54df8bc57584f019b6610399a0d0af3ba7d969192346dd29da086eed982ec03b546a76e7783d1224601b44aaa8a2a0efa385ffd9da2c63f0c21d99dca4d6bb7375d69078964b3474de9a74cd165e737e00f9d17a774c2daa0fb98fd755e0dc48e7f73e28e36c886d30c387dedd88caabff8b09a989ba3ee755f02767082a67518d5e5c98ee3cbdb83331cfe76c55bbc88dd6e3df1a1ab5f953a74b68b36960850049dcc5acd186475ef11a9a117dc6727bedb2c1d57f5efd9f7ac8ca3c2d66c6e687733b99ef1a969206f4a08cd9c87c36c619c79d6d29c3f2b96e", 0xde}, {&(0x7f0000000d40)="b4b9461b0314d3806d953a9c18ef14d3afe6b5306cf4934689cb352f2b57ba21554e7c2eef97d2dc971ec13c8bb3496a9b", 0x31}, {&(0x7f0000000d80)="e3e0133bc2fde710b35fb3830e6d0fec49ed289ad0ea1f49bd290a4d56e032f2ae7064c56b24dc533daadd0c0ead18f172da11b3f0c6b0742e5d0cd45306452c240d19f4f449e86f22a4a90038404ac3ea79a668151b3c4abba1ed8952104a1e141a0917771c1efbefdff3f4e48f6a8a92056da397b01efa64e24c47c612453e0609a06e3d14e34882c8864d6db9623d590000ad545c425e3f05112c5ad86c0b15b9de52bf7f8a3683f45c9ca141c07d4643a09e6ddab78a6546760057a0e522d90c880c49f957c22405e8a4cb8abf399d3d", 0xd2}, {&(0x7f0000000e80)="2babe7942b530632a57bd4fd4bab66443c290a8e4870864713da34b74adc27b5ec9157fd0222bb46fe4d0de6f76cddae17673d942d0588c0e8affbf46f9de3b19f9e541a7902ee17977f5d01038173cb5f583f333385d691111bee2448332f5ff9e1d6ebeecd6b8c230ca224bbbe067d805f18c40c427bc0a7e6d0f19a920a0eababec08c374593ce019b3dd0ec08492f023ab3854cfadc5a67bc0068d571c3cd83763a5978293e387", 0xa9}, {&(0x7f0000000f40)="6d32d1945acdb7d609b908ba3be9d6b69c54d5e31caf57169827facb6eb234b7d04d2e586415d23595e6ed7442cfab33f92566c0ef431114607c2747a0ccca27d0fdde86c2cadff16e70dd52e5ff42bbc84946c57d2b26aa915ba36d5961a318b7581364", 0x64}, {&(0x7f0000000fc0)="504795b48c32ee5899a91d31aea32d43a4a0c636f9c2008df68dc93b25546659213a2f88812d86c1487fe68773401d5bdd2107ce04f7aec9c291ddc6a6a3580c68e5aab6a85eb28372d584ef0906fb712e480635bd474287e2b88ebdfb94290c2da60f23b90952fc3af69756243ebceacb0d77dea36f7ac9b104d55408f6bb5e4bbc4783c64bcd63a105a8906eb139e1d443a2268ef79829316a53c340192b750e83a39141fc7887457621229844cefc15e2dd0c0fff670de4d091491fcc8bd2fcbf995f3a15319dad5e39624995aed173231f38febe60e4c53d119d82dfea32f1075460b6b12a5fcf9574958fa4bc2fc13eb536f09824", 0xf7}, {&(0x7f00000010c0)="36865aa8c5aeef31dec95dd096bba31965ac6fa75b12fc6273f08df83d041178fcddb138d9b038013c6777b94047d0962b3615dcdecc9f983a8729674f60ced18c3080ca034261c6c5d359c4304b0620fc86f1518bed37bcebdd5b", 0x5b}], 0x7, &(0x7f00000011c0)=[{0x60, 0x110, 0x8f6, "987bf9d1bfdf43a98ceb260f50615521071639f4a6d4466d8b7b5118d19638c6536b6f394ee786f4a64ad5d74daa5f1b46a9ce66237974efc7f06d145a1a3338a9e6bd726599b2bc21"}, {0x18, 0x10a, 0x1000, "7c9ea3f7"}, {0x88, 0x8, 0xfffffff9, "19d53f54c90fab6de2cb526d40e72643d1e4de797f67711d594e76ba4290ca749b38e7cb1c8fcc016708ef5d5c93387a467071da6edba29f311aa30900dc47162ca93710054d8bf147bd11857990a7e350e7325ca371fe37debdccf54aee11b428830744846818cd74b2f8e0bbd03b0f75"}, {0xc0, 0x6, 0x2, "abf1aed3bc6a332cba6749035f336083c448db34cd71770f4a7ccc59ec4fea6c5976b42a7fd5c811492571869afa059810e50d603fd8e283a8c85eb9da2e47878be7597220a09b2f751c2d0016158e2a4db2b2ba820452bdcdc91ba3ea12827aeb381fb61b90d77b7a30c87500229446e52e1ebd72fea739074bda93db5aa1dd60e229a08035020d2ebf815e7dcbe395af28034fddf5e0200cb86b1454fe517c8c4f142ac86a5fdc77a3b0d1c4"}, {0x70, 0x103, 0x8000, "526105ed24ff4cbe5971761587556fd9e853ac33e850e62edbfc9be07667bf69adb2acc4549152bf57edb4c71b4ea6934069ae0fd5619cb6273cf66514de3532a353fd8c630456b5107d0ef0466625912ef4675f9e71fb735ae0e0b286c704c3"}], 0x230}, 0x40000) write$cgroup_pid(r0, &(0x7f0000001440)=r5, 0x12) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001480), 0x28480, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x10) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) mkdir(&(0x7f0000001540)='./file0\x00', 0x4) r11 = perf_event_open$cgroup(&(0x7f0000001580)={0x7c37fc6da973d96b, 0x80, 0x8, 0x3e, 0xd, 0x0, 0x0, 0x7, 0xa00a0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6f4a, 0x0, @perf_config_ext={0xf, 0xd1d9}, 0x100400, 0xffffffff, 0x0, 0x6, 0x15e, 0x80000001, 0x40, 0x0, 0x73df, 0x0, 0x8}, r10, 0xf, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000001600)='+.\x00') ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001640)={r8, r4}) r12 = openat$cgroup_procs(r10, &(0x7f0000001680)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000016c0)=r5, 0x12) write$cgroup_pid(r12, &(0x7f0000001700)=r5, 0x12) perf_event_open(&(0x7f0000001780)={0x0, 0x80, 0x2, 0x2, 0x10, 0x9, 0x0, 0x800, 0x80, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000001740), 0xf}, 0x10, 0x7, 0x2, 0x8, 0x40, 0x0, 0x7, 0x0, 0x101, 0x0, 0x40}, r5, 0x2, 0xffffffffffffffff, 0xa) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_ext={0x1c, 0x16, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, @generic={0x2, 0x8, 0x5, 0x81, 0x1ff}, @cb_func={0x18, 0x6fba3a8d4bb1dedf, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000018c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x0, r8, 0x8, &(0x7f0000001900)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001940)={0x4, 0xf, 0x7, 0x8}, 0x10, 0x25ea7, r4, 0x6, &(0x7f0000001980)=[r6, r0, r7, r3], &(0x7f00000019c0)=[{0x2, 0x3, 0x3, 0x1}, {0x3, 0x3, 0x0, 0x6}, {0x2, 0x1, 0x0, 0x6}, {0x5, 0x5, 0x5, 0x8}, {0x5, 0x3, 0x4, 0xb}, {0x5, 0x4, 0x4, 0x2}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c00)={@fallback=r6, 0x20, 0x1, 0x0, &(0x7f0000001b00)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001b40)=[0x0], &(0x7f0000001b80)=[0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c40)={@ifindex=r2, r13, 0x33, 0x0, 0x0, @void, @value=r4, @void, @void, r14}, 0x20) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c80), 0x101200, 0x0) ioctl$TUNSETPERSIST(r15, 0x400454cb, 0x0) 349.117219ms ago: executing program 2 (id=622): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000640)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x84812, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x81, 0x3, 0x0, 0x0, 0x1, 0xbb6a, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90724fc60", 0x14}], 0x1}, 0x0) (async) close(r2) (async) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r10, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0500000004000000160000050000000000000000406eaeceba7ebc947027c09e597b5e0153fe72053a81e68d82278ef187fd72670066c0345261cd659310adc96117aa98bf736db63c6aa20b4a117b2c8001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x800, r12}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x2, '\x00', r11, r10, 0x4, 0x5, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0xfffff62d, 0xa3, &(0x7f0000000440)=""/163, 0xc1000, 0x19, '\x00', r11, @xdp, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x2, 0x1, 0x3}, 0x10, 0xffffffffffffffff, r10, 0x0, &(0x7f0000000540)=[r10, r10], 0x0, 0x10, 0xfffffff7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000080000000030000000501000020000000", @ANYRES32=r10, @ANYBLOB='\b\x00'/20, @ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="03000000070000000300"/28], 0x50) (async) openat$cgroup_pressure(r10, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) 240.142516ms ago: executing program 4 (id=623): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f4, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x10b44b, 0x0, 0x5, 0x0, 0x40000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='#-\x00') setsockopt$sock_attach_bpf(r3, 0x29, 0x8, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r1, 0x88, 0x64, &(0x7f00000002c0), 0x4) 0s ago: executing program 2 (id=624): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC=r1], 0x48) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000001000018", @ANYRES32=r6, @ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x48}, 0x4008004) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003a000b12d25a80648c2594f90324fc60100c0340", 0x18}], 0x1}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r11, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) kernel console output (not intermixed with test programs): set [1, 0] type 2 family 0 port 6081 - 0 [ 62.697931][ T4270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.706671][ T4270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.715693][ T4270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.740326][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.748767][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.778466][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.804233][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.812087][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.848635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.944600][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.952501][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.996851][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.044327][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.052188][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.080182][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.115312][ C0] hrtimer: interrupt took 58808 ns [ 63.138640][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.159004][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.178261][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.216072][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.242213][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.259644][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.291270][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.340194][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.354010][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.814333][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 63.901697][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 63.902004][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 63.907769][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 63.974179][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 64.734915][ T4418] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.11'. [ 64.859306][ T4418] openvswitch: netlink: Flow actions attr not present in new flow. [ 66.116122][ T4432] netlink: 'syz.1.14': attribute type 39 has an invalid length. [ 67.110764][ T4438] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15'. [ 68.283130][ T7] cfg80211: failed to load regulatory.db [ 68.294128][ T4464] netlink: 'syz.3.25': attribute type 21 has an invalid length. [ 68.402281][ T4464] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 68.457455][ T4464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.25'. [ 69.040444][ T4473] IPv6: pim6reg1: Disabled Multicast RS [ 69.353202][ T4481] netlink: 463 bytes leftover after parsing attributes in process `syz.2.31'. [ 69.918444][ T4485] netlink: 463 bytes leftover after parsing attributes in process `syz.1.33'. [ 70.044640][ T4280] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 70.269814][ T4496] netlink: 'syz.3.34': attribute type 29 has an invalid length. [ 70.484422][ T4494] tipc: Started in network mode [ 70.489546][ T4494] tipc: Node identity 9215a268, cluster identity 4711 [ 70.500671][ T4494] tipc: Node number set to 2450891368 [ 70.511337][ T4496] netlink: 'syz.3.34': attribute type 29 has an invalid length. [ 70.826147][ T4499] IPv6: Can't replace route, no match found [ 70.995909][ T4499] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 71.092411][ T4507] netlink: 'syz.0.40': attribute type 11 has an invalid length. [ 71.104065][ T4507] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.40'. [ 71.121232][ T4505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.257734][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.264540][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.958740][ T4526] netlink: 463 bytes leftover after parsing attributes in process `syz.4.46'. [ 72.129565][ T4530] IPv6: pim6reg1: Disabled Multicast RS [ 72.133854][ T4280] Bluetooth: hci1: command 0x2016 tx timeout [ 72.222968][ T4531] netlink: 463 bytes leftover after parsing attributes in process `syz.2.48'. [ 72.513796][ T4280] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 73.488329][ T4548] tipc: Started in network mode [ 73.545069][ T4548] tipc: Node identity 9215a268, cluster identity 4711 [ 73.547234][ T4552] netlink: 'syz.0.53': attribute type 29 has an invalid length. [ 73.585125][ T4548] tipc: Node number set to 2450891368 [ 73.741447][ T46] wlan1: Trigger new scan to find an IBSS to join [ 73.744008][ T4552] netlink: 'syz.0.53': attribute type 29 has an invalid length. [ 73.802673][ T4555] netlink: 'syz.0.53': attribute type 29 has an invalid length. [ 74.177956][ T4558] netlink: 'syz.4.58': attribute type 11 has an invalid length. [ 74.219567][ T4558] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.58'. [ 74.277373][ T4557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.533836][ T4280] Bluetooth: hci2: command 0x2016 tx timeout [ 74.582603][ T4567] IPv6: pim6reg1: Disabled Multicast RS [ 74.731394][ T4573] netlink: 463 bytes leftover after parsing attributes in process `syz.3.62'. [ 74.737810][ T4566] IPv6: Can't replace route, no match found [ 74.918314][ T4579] tipc: Started in network mode [ 74.923272][ T4579] tipc: Node identity 9215a268, cluster identity 4711 [ 74.923402][ T4577] netlink: 463 bytes leftover after parsing attributes in process `syz.4.63'. [ 74.973062][ T4579] tipc: Node number set to 2450891368 [ 74.980225][ T4566] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 75.013003][ T4574] netlink: 'syz.2.72': attribute type 29 has an invalid length. [ 75.082513][ T4574] netlink: 'syz.2.72': attribute type 29 has an invalid length. [ 75.144837][ T4579] netlink: 'syz.2.72': attribute type 29 has an invalid length. [ 75.316780][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 76.134308][ T4600] netlink: 'syz.2.70': attribute type 11 has an invalid length. [ 76.153853][ T4600] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.70'. [ 76.181867][ T4596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.424092][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 77.734331][ T33] wlan1: Trigger new scan to find an IBSS to join [ 77.740900][ T9] wlan1: Trigger new scan to find an IBSS to join [ 78.709751][ T4626] netlink: 463 bytes leftover after parsing attributes in process `syz.3.78'. [ 78.775571][ T4625] netlink: 'syz.1.88': attribute type 11 has an invalid length. [ 78.803997][ T4625] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.88'. [ 78.857544][ T4621] IPv6: Can't replace route, no match found [ 78.864984][ T4623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.904924][ T4633] netlink: 'syz.2.82': attribute type 21 has an invalid length. [ 78.923172][ T4633] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 78.933109][ T4633] netlink: 132 bytes leftover after parsing attributes in process `syz.2.82'. [ 78.966250][ T4621] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 79.405267][ T4280] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 79.413053][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 79.423122][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 79.430700][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.440774][ T4280] Workqueue: hci2 hci_rx_work [ 79.445571][ T4280] Call Trace: [ 79.448853][ T4280] [ 79.451775][ T4280] dump_stack_lvl+0x188/0x24e [ 79.456468][ T4280] ? show_regs_print_info+0x12/0x12 [ 79.461676][ T4280] ? load_image+0x400/0x400 [ 79.466187][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 79.471297][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 79.475978][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 79.481171][ T4280] kobject_add_internal+0x61c/0xcc0 [ 79.486372][ T4280] kobject_add+0x160/0x230 [ 79.490785][ T4280] ? kobject_init+0x1d0/0x1d0 [ 79.495477][ T4280] ? klist_children_get+0x50/0x50 [ 79.500507][ T4280] ? get_device_parent+0x121/0x3f0 [ 79.505819][ T4280] device_add+0x483/0xfb0 [ 79.510154][ T4280] ? kmem_cache_free+0xf7/0x290 [ 79.515010][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 79.519949][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 79.525319][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 79.530691][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 79.536926][ T4280] ? bt_info+0x180/0x180 [ 79.541164][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 79.546801][ T4280] ? skb_pull_data+0xf7/0x200 [ 79.551491][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 79.557036][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 79.563110][ T4280] hci_event_packet+0x7b6/0x1280 [ 79.568053][ T4280] ? bis_list+0x280/0x280 [ 79.572375][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 79.578262][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 79.583370][ T4280] ? bt_warn+0x30/0x180 [ 79.587523][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 79.592715][ T4280] hci_rx_work+0x3eb/0xd40 [ 79.597135][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 79.601999][ T4280] ? process_one_work+0x7b0/0x1160 [ 79.607113][ T4280] process_one_work+0x8a2/0x1160 [ 79.612064][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 79.617691][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 79.622728][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.627744][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 79.633281][ T4280] ? kthread_data+0x4b/0xc0 [ 79.637787][ T4280] worker_thread+0xaa2/0x1270 [ 79.642485][ T4280] kthread+0x29d/0x330 [ 79.646555][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 79.651580][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 79.656163][ T4280] ret_from_fork+0x1f/0x30 [ 79.660593][ T4280] [ 79.665712][ T4280] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 79.679003][ T4280] Bluetooth: hci2: failed to register connection device [ 80.732320][ T9] wlan1: Trigger new scan to find an IBSS to join [ 80.895809][ T4654] syz.4.99 (4654) used greatest stack depth: 18096 bytes left [ 81.360305][ T4677] netlink: 'syz.0.98': attribute type 21 has an invalid length. [ 81.369034][ T4677] netlink: 'syz.0.98': attribute type 1 has an invalid length. [ 81.408125][ T4677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.98'. [ 81.741680][ T4280] Bluetooth: hci2: command 0x2016 tx timeout [ 81.750515][ T4298] wlan1: Trigger new scan to find an IBSS to join [ 82.694120][ T4298] wlan1: Creating new IBSS network, BSSID 66:dc:2d:a3:0c:63 [ 82.866212][ T4280] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 82.874313][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:128' [ 82.884179][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 82.891753][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.901831][ T4280] Workqueue: hci1 hci_rx_work [ 82.906524][ T4280] Call Trace: [ 82.909807][ T4280] [ 82.912737][ T4280] dump_stack_lvl+0x188/0x24e [ 82.917428][ T4280] ? show_regs_print_info+0x12/0x12 [ 82.922659][ T4280] ? load_image+0x400/0x400 [ 82.927171][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 82.932290][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 82.936968][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 82.942167][ T4280] kobject_add_internal+0x61c/0xcc0 [ 82.947372][ T4280] kobject_add+0x160/0x230 [ 82.951786][ T4280] ? kobject_init+0x1d0/0x1d0 [ 82.956471][ T4280] ? klist_children_get+0x50/0x50 [ 82.961495][ T4280] ? get_device_parent+0x121/0x3f0 [ 82.966613][ T4280] device_add+0x483/0xfb0 [ 82.970942][ T4280] ? kmem_cache_free+0xf7/0x290 [ 82.975795][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 82.980739][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 82.986108][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 82.991485][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 82.997724][ T4280] ? bt_info+0x180/0x180 [ 83.001962][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 83.007597][ T4280] ? skb_pull_data+0xf7/0x200 [ 83.012280][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 83.017829][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 83.023899][ T4280] hci_event_packet+0x7b6/0x1280 [ 83.028846][ T4280] ? bis_list+0x280/0x280 [ 83.033168][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 83.039059][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 83.044168][ T4280] ? bt_warn+0x30/0x180 [ 83.048325][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 83.053519][ T4280] hci_rx_work+0x3eb/0xd40 [ 83.057942][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 83.062794][ T4280] ? process_one_work+0x7b0/0x1160 [ 83.067903][ T4280] process_one_work+0x8a2/0x1160 [ 83.072849][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 83.078479][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 83.083496][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 83.089038][ T4280] ? kthread_data+0x4b/0xc0 [ 83.093562][ T4280] worker_thread+0xaa2/0x1270 [ 83.098267][ T4280] kthread+0x29d/0x330 [ 83.102330][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 83.107352][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 83.111935][ T4280] ret_from_fork+0x1f/0x30 [ 83.116363][ T4280] [ 83.120915][ T4280] kobject_add_internal failed for hci1:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 83.135312][ T4280] Bluetooth: hci1: failed to register connection device [ 83.447547][ T4697] netlink: 52 bytes leftover after parsing attributes in process `syz.0.107'. [ 84.233487][ T4709] netlink: 'syz.4.110': attribute type 39 has an invalid length. [ 84.607897][ T4720] netlink: 52 bytes leftover after parsing attributes in process `syz.3.125'. [ 84.629838][ T4721] netlink: 'syz.1.114': attribute type 21 has an invalid length. [ 84.655400][ T4721] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 84.698821][ T4721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.114'. [ 84.773871][ T46] wlan1: Trigger new scan to find an IBSS to join [ 85.184054][ T4280] Bluetooth: hci1: command 0x2016 tx timeout [ 86.111637][ T4730] netlink: 'syz.3.128': attribute type 39 has an invalid length. [ 86.219982][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 86.948300][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 86.989159][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 86.999062][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 87.006664][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.016757][ T4280] Workqueue: hci0 hci_rx_work [ 87.021486][ T4280] Call Trace: [ 87.024797][ T4280] [ 87.027754][ T4280] dump_stack_lvl+0x188/0x24e [ 87.032486][ T4280] ? show_regs_print_info+0x12/0x12 [ 87.037815][ T4280] ? load_image+0x400/0x400 [ 87.042414][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 87.047582][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 87.052303][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 87.057561][ T4280] kobject_add_internal+0x61c/0xcc0 [ 87.062824][ T4280] kobject_add+0x160/0x230 [ 87.067302][ T4280] ? kobject_init+0x1d0/0x1d0 [ 87.072049][ T4280] ? klist_children_get+0x50/0x50 [ 87.077111][ T4280] ? get_device_parent+0x121/0x3f0 [ 87.082279][ T4280] device_add+0x483/0xfb0 [ 87.086659][ T4280] ? kmem_cache_free+0xf7/0x290 [ 87.091580][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 87.096569][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 87.101992][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 87.107421][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 87.113701][ T4280] ? bt_info+0x180/0x180 [ 87.117982][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 87.123671][ T4280] ? skb_pull_data+0xf7/0x200 [ 87.128417][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 87.134038][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 87.140142][ T4280] hci_event_packet+0x7b6/0x1280 [ 87.145191][ T4280] ? bis_list+0x280/0x280 [ 87.149558][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 87.155509][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 87.160659][ T4280] ? bt_warn+0x30/0x180 [ 87.164869][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 87.170134][ T4280] hci_rx_work+0x3eb/0xd40 [ 87.174604][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 87.179530][ T4280] ? process_one_work+0x7b0/0x1160 [ 87.185108][ T4280] process_one_work+0x8a2/0x1160 [ 87.190146][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 87.195816][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 87.200893][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 87.205949][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 87.211524][ T4280] ? kthread_data+0x4b/0xc0 [ 87.216124][ T4280] worker_thread+0xaa2/0x1270 [ 87.220967][ T4280] kthread+0x29d/0x330 [ 87.225072][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 87.230140][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 87.234778][ T4280] ret_from_fork+0x1f/0x30 [ 87.239297][ T4280] [ 87.245409][ T4280] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.262360][ T4280] Bluetooth: hci0: failed to register connection device [ 87.803756][ T4371] wlan1: Creating new IBSS network, BSSID 82:10:d4:55:f5:6d [ 88.016072][ T4280] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 88.024780][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 88.034760][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 88.042348][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.052443][ T4280] Workqueue: hci2 hci_rx_work [ 88.057180][ T4280] Call Trace: [ 88.060487][ T4280] [ 88.063454][ T4280] dump_stack_lvl+0x188/0x24e [ 88.068201][ T4280] ? show_regs_print_info+0x12/0x12 [ 88.073447][ T4280] ? load_image+0x400/0x400 [ 88.078039][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 88.083220][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 88.088018][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 88.093290][ T4280] kobject_add_internal+0x61c/0xcc0 [ 88.098526][ T4280] kobject_add+0x160/0x230 [ 88.102972][ T4280] ? kobject_init+0x1d0/0x1d0 [ 88.107693][ T4280] ? klist_children_get+0x50/0x50 [ 88.112747][ T4280] ? get_device_parent+0x121/0x3f0 [ 88.117892][ T4280] device_add+0x483/0xfb0 [ 88.122232][ T4280] ? kmem_cache_free+0xf7/0x290 [ 88.127099][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 88.132048][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 88.137430][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 88.142807][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 88.149053][ T4280] ? bt_info+0x180/0x180 [ 88.153296][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 88.158932][ T4280] ? skb_pull_data+0xf7/0x200 [ 88.163624][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 88.169173][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 88.175266][ T4280] hci_event_packet+0x7b6/0x1280 [ 88.180215][ T4280] ? bis_list+0x280/0x280 [ 88.184540][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 88.190527][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 88.195636][ T4280] ? bt_warn+0x30/0x180 [ 88.199796][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 88.204996][ T4280] hci_rx_work+0x3eb/0xd40 [ 88.209418][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 88.214273][ T4280] ? process_one_work+0x7b0/0x1160 [ 88.219388][ T4280] process_one_work+0x8a2/0x1160 [ 88.224342][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 88.229972][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 88.235003][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 88.240022][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 88.245568][ T4280] ? kthread_data+0x4b/0xc0 [ 88.250086][ T4280] worker_thread+0xaa2/0x1270 [ 88.254792][ T4280] kthread+0x29d/0x330 [ 88.258853][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 88.263871][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 88.268454][ T4280] ret_from_fork+0x1f/0x30 [ 88.272882][ T4280] [ 88.277208][ T4280] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.290521][ T4280] Bluetooth: hci2: failed to register connection device [ 88.298111][ T4272] Bluetooth: hci0: command 0x2016 tx timeout [ 88.808255][ T4768] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.127'. [ 88.878806][ T4768] openvswitch: netlink: Flow actions attr not present in new flow. [ 90.376277][ T4280] Bluetooth: hci0: command 0x2016 tx timeout [ 90.376285][ T4272] Bluetooth: hci2: command 0x2016 tx timeout [ 92.316609][ T4276] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 92.324933][ T4276] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 92.335873][ T4276] CPU: 1 PID: 4276 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 92.343470][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.353584][ T4276] Workqueue: hci3 hci_rx_work [ 92.358315][ T4276] Call Trace: [ 92.361626][ T4276] [ 92.364596][ T4276] dump_stack_lvl+0x188/0x24e [ 92.369308][ T4276] ? show_regs_print_info+0x12/0x12 [ 92.374532][ T4276] ? load_image+0x400/0x400 [ 92.379072][ T4276] sysfs_create_dir_ns+0x26a/0x290 [ 92.384227][ T4276] ? sysfs_warn_dup+0xa0/0xa0 [ 92.388942][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 92.394172][ T4276] kobject_add_internal+0x61c/0xcc0 [ 92.399414][ T4276] kobject_add+0x160/0x230 [ 92.404032][ T4276] ? kobject_init+0x1d0/0x1d0 [ 92.408747][ T4276] ? klist_children_get+0x50/0x50 [ 92.413795][ T4276] ? get_device_parent+0x121/0x3f0 [ 92.418944][ T4276] device_add+0x483/0xfb0 [ 92.423309][ T4276] ? kmem_cache_free+0xf7/0x290 [ 92.428192][ T4276] hci_conn_add_sysfs+0xd1/0x1e0 [ 92.433162][ T4276] le_conn_complete_evt+0x105f/0x1670 [ 92.438693][ T4276] ? le_conn_complete_evt+0xe6/0x1670 [ 92.444096][ T4276] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 92.450363][ T4276] ? bt_info+0x180/0x180 [ 92.454637][ T4276] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 92.460334][ T4276] ? skb_pull_data+0xf7/0x200 [ 92.465048][ T4276] hci_le_conn_complete_evt+0x183/0x440 [ 92.470619][ T4276] ? hci_remote_host_features_evt+0x270/0x270 [ 92.476719][ T4276] hci_event_packet+0x7b6/0x1280 [ 92.481694][ T4276] ? bis_list+0x280/0x280 [ 92.486046][ T4276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 92.491965][ T4276] ? kcov_remote_start+0x4c7/0x7e0 [ 92.497106][ T4276] ? bt_warn+0x30/0x180 [ 92.501280][ T4276] ? hci_send_to_monitor+0x9c/0x4a0 [ 92.506472][ T4276] hci_rx_work+0x3eb/0xd40 [ 92.510882][ T4276] ? _raw_spin_unlock+0x40/0x40 [ 92.515747][ T4276] ? process_one_work+0x7b0/0x1160 [ 92.520875][ T4276] process_one_work+0x8a2/0x1160 [ 92.525838][ T4276] ? worker_detach_from_pool+0x240/0x240 [ 92.531479][ T4276] ? _raw_spin_lock_irq+0x86/0xf0 [ 92.536527][ T4276] ? _raw_spin_lock_irq+0xb7/0xf0 [ 92.541572][ T4276] ? _raw_spin_lock_irqsave+0x100/0x100 [ 92.547119][ T4276] ? kthread_data+0x4b/0xc0 [ 92.551664][ T4276] worker_thread+0xaa2/0x1270 [ 92.556402][ T4276] kthread+0x29d/0x330 [ 92.560674][ T4276] ? worker_clr_flags+0x1a0/0x1a0 [ 92.565886][ T4276] ? kthread_blkcg+0xd0/0xd0 [ 92.570487][ T4276] ret_from_fork+0x1f/0x30 [ 92.574932][ T4276] [ 92.586639][ T4276] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 92.600315][ T4276] Bluetooth: hci3: failed to register connection device [ 92.972806][ T4824] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.151'. [ 93.369029][ T4824] openvswitch: netlink: Flow actions attr not present in new flow. [ 94.249135][ T4276] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 94.257229][ T4276] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 94.266983][ T4276] CPU: 0 PID: 4276 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 94.274571][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.284669][ T4276] Workqueue: hci3 hci_rx_work [ 94.289409][ T4276] Call Trace: [ 94.292725][ T4276] [ 94.295698][ T4276] dump_stack_lvl+0x188/0x24e [ 94.300441][ T4276] ? show_regs_print_info+0x12/0x12 [ 94.305695][ T4276] ? load_image+0x400/0x400 [ 94.310296][ T4276] sysfs_create_dir_ns+0x26a/0x290 [ 94.315475][ T4276] ? sysfs_warn_dup+0xa0/0xa0 [ 94.320217][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 94.325481][ T4276] kobject_add_internal+0x61c/0xcc0 [ 94.330736][ T4276] kobject_add+0x160/0x230 [ 94.335184][ T4276] ? kobject_init+0x1d0/0x1d0 [ 94.339899][ T4276] ? klist_children_get+0x50/0x50 [ 94.344940][ T4276] ? get_device_parent+0x121/0x3f0 [ 94.350081][ T4276] device_add+0x483/0xfb0 [ 94.354432][ T4276] ? kmem_cache_free+0xf7/0x290 [ 94.359317][ T4276] hci_conn_add_sysfs+0xd1/0x1e0 [ 94.364291][ T4276] le_conn_complete_evt+0x105f/0x1670 [ 94.369685][ T4276] ? le_conn_complete_evt+0xe6/0x1670 [ 94.375086][ T4276] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 94.381340][ T4276] ? bt_info+0x180/0x180 [ 94.385601][ T4276] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 94.391266][ T4276] ? skb_pull_data+0xf7/0x200 [ 94.395984][ T4276] hci_le_conn_complete_evt+0x183/0x440 [ 94.401567][ T4276] ? hci_remote_host_features_evt+0x270/0x270 [ 94.407661][ T4276] hci_event_packet+0x7b6/0x1280 [ 94.412641][ T4276] ? bis_list+0x280/0x280 [ 94.416988][ T4276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 94.422906][ T4276] ? kcov_remote_start+0x4c7/0x7e0 [ 94.428040][ T4276] ? bt_warn+0x30/0x180 [ 94.432224][ T4276] ? hci_send_to_monitor+0x9c/0x4a0 [ 94.437448][ T4276] hci_rx_work+0x3eb/0xd40 [ 94.441881][ T4276] ? _raw_spin_unlock+0x40/0x40 [ 94.446783][ T4276] ? process_one_work+0x7b0/0x1160 [ 94.451921][ T4276] process_one_work+0x8a2/0x1160 [ 94.456915][ T4276] ? worker_detach_from_pool+0x240/0x240 [ 94.462558][ T4276] ? _raw_spin_lock_irq+0x86/0xf0 [ 94.467608][ T4276] ? _raw_spin_lock_irq+0xb7/0xf0 [ 94.472642][ T4276] ? _raw_spin_lock_irqsave+0x100/0x100 [ 94.478198][ T4276] ? kthread_data+0x4b/0xc0 [ 94.482736][ T4276] worker_thread+0xaa2/0x1270 [ 94.487515][ T4276] kthread+0x29d/0x330 [ 94.491594][ T4276] ? worker_clr_flags+0x1a0/0x1a0 [ 94.496630][ T4276] ? kthread_blkcg+0xd0/0xd0 [ 94.501236][ T4276] ret_from_fork+0x1f/0x30 [ 94.505711][ T4276] [ 94.515660][ T4276] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.529253][ T4276] Bluetooth: hci3: failed to register connection device [ 94.613851][ T4276] Bluetooth: hci3: command 0x2016 tx timeout [ 96.694283][ T4276] Bluetooth: hci3: command 0x2016 tx timeout [ 97.794422][ T4879] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.168'. [ 97.854148][ T4879] openvswitch: netlink: Flow actions attr not present in new flow. [ 98.258954][ T4276] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 98.268715][ T4276] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:128' [ 98.279103][ T4276] CPU: 0 PID: 4276 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 98.286714][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.296807][ T4276] Workqueue: hci1 hci_rx_work [ 98.301541][ T4276] Call Trace: [ 98.304850][ T4276] [ 98.307812][ T4276] dump_stack_lvl+0x188/0x24e [ 98.312547][ T4276] ? show_regs_print_info+0x12/0x12 [ 98.317796][ T4276] ? load_image+0x400/0x400 [ 98.322385][ T4276] sysfs_create_dir_ns+0x26a/0x290 [ 98.327555][ T4276] ? sysfs_warn_dup+0xa0/0xa0 [ 98.332296][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 98.337561][ T4276] kobject_add_internal+0x61c/0xcc0 [ 98.342813][ T4276] kobject_add+0x160/0x230 [ 98.347262][ T4276] ? kobject_init+0x1d0/0x1d0 [ 98.351972][ T4276] ? klist_children_get+0x50/0x50 [ 98.357005][ T4276] ? get_device_parent+0x121/0x3f0 [ 98.362143][ T4276] device_add+0x483/0xfb0 [ 98.366493][ T4276] ? kmem_cache_free+0xf7/0x290 [ 98.371400][ T4276] hci_conn_add_sysfs+0xd1/0x1e0 [ 98.376358][ T4276] le_conn_complete_evt+0x105f/0x1670 [ 98.381750][ T4276] ? le_conn_complete_evt+0xe6/0x1670 [ 98.387159][ T4276] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 98.393421][ T4276] ? bt_info+0x180/0x180 [ 98.397681][ T4276] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 98.403338][ T4276] ? skb_pull_data+0xf7/0x200 [ 98.408043][ T4276] hci_le_conn_complete_evt+0x183/0x440 [ 98.413620][ T4276] ? hci_remote_host_features_evt+0x270/0x270 [ 98.419700][ T4276] hci_event_packet+0x7b6/0x1280 [ 98.424673][ T4276] ? bis_list+0x280/0x280 [ 98.429006][ T4276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 98.434923][ T4276] ? kcov_remote_start+0x4c7/0x7e0 [ 98.440050][ T4276] ? bt_warn+0x30/0x180 [ 98.444222][ T4276] ? hci_send_to_monitor+0x9c/0x4a0 [ 98.449437][ T4276] hci_rx_work+0x3eb/0xd40 [ 98.453867][ T4276] ? _raw_spin_unlock+0x40/0x40 [ 98.458742][ T4276] ? process_one_work+0x7b0/0x1160 [ 98.463863][ T4276] process_one_work+0x8a2/0x1160 [ 98.468845][ T4276] ? worker_detach_from_pool+0x240/0x240 [ 98.474484][ T4276] ? _raw_spin_lock_irq+0x86/0xf0 [ 98.479525][ T4276] ? _raw_spin_lock_irq+0xb7/0xf0 [ 98.484556][ T4276] ? _raw_spin_lock_irqsave+0x100/0x100 [ 98.490113][ T4276] ? kthread_data+0x4b/0xc0 [ 98.494657][ T4276] worker_thread+0xaa2/0x1270 [ 98.499412][ T4276] kthread+0x29d/0x330 [ 98.503484][ T4276] ? worker_clr_flags+0x1a0/0x1a0 [ 98.508517][ T4276] ? kthread_blkcg+0xd0/0xd0 [ 98.513121][ T4276] ret_from_fork+0x1f/0x30 [ 98.517590][ T4276] [ 98.528375][ T4276] kobject_add_internal failed for hci1:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 98.542048][ T4276] Bluetooth: hci1: failed to register connection device [ 98.945964][ T4904] netlink: 'syz.0.177': attribute type 21 has an invalid length. [ 98.958913][ T4896] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.175'. [ 98.975809][ T4904] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 98.989008][ T4904] netlink: 132 bytes leftover after parsing attributes in process `syz.0.177'. [ 99.110551][ T4909] FAULT_INJECTION: forcing a failure. [ 99.110551][ T4909] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.152823][ T4909] CPU: 0 PID: 4909 Comm: syz.3.182 Not tainted syzkaller #0 [ 99.160167][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.170237][ T4909] Call Trace: [ 99.173526][ T4909] [ 99.176471][ T4909] dump_stack_lvl+0x188/0x24e [ 99.181177][ T4909] ? show_regs_print_info+0x12/0x12 [ 99.186400][ T4909] ? load_image+0x400/0x400 [ 99.191007][ T4909] ? __lock_acquire+0x7d10/0x7d10 [ 99.196048][ T4909] ? snprintf+0xe5/0x140 [ 99.200306][ T4909] should_fail_ex+0x399/0x4d0 [ 99.205019][ T4909] _copy_to_user+0x2c/0x130 [ 99.209543][ T4909] simple_read_from_buffer+0xe3/0x150 [ 99.214941][ T4909] proc_fail_nth_read+0x1a6/0x220 [ 99.219981][ T4909] ? proc_fault_inject_write+0x310/0x310 [ 99.225632][ T4909] ? fsnotify_perm+0x248/0x550 [ 99.230411][ T4909] ? proc_fault_inject_write+0x310/0x310 [ 99.236059][ T4909] vfs_read+0x2de/0xa00 [ 99.240240][ T4909] ? kernel_read+0x1e0/0x1e0 [ 99.244848][ T4909] ? __fget_files+0x28/0x4b0 [ 99.249537][ T4909] ? __fget_files+0x28/0x4b0 [ 99.254148][ T4909] ? __fget_files+0x43d/0x4b0 [ 99.258846][ T4909] ? __fdget_pos+0x2ae/0x360 [ 99.263449][ T4909] ? ksys_read+0x71/0x250 [ 99.267796][ T4909] ksys_read+0x14c/0x250 [ 99.272055][ T4909] ? vfs_write+0xa30/0xa30 [ 99.276492][ T4909] ? lockdep_hardirqs_on+0x94/0x140 [ 99.281703][ T4909] do_syscall_64+0x4c/0xa0 [ 99.286134][ T4909] ? clear_bhb_loop+0x60/0xb0 [ 99.290824][ T4909] ? clear_bhb_loop+0x60/0xb0 [ 99.295512][ T4909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.301412][ T4909] RIP: 0033:0x7f7b8af5c84e [ 99.305848][ T4909] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.325482][ T4909] RSP: 002b:00007f7b8beebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.333923][ T4909] RAX: ffffffffffffffda RBX: 00007f7b8beec6c0 RCX: 00007f7b8af5c84e [ 99.341910][ T4909] RDX: 000000000000000f RSI: 00007f7b8beec0a0 RDI: 0000000000000004 [ 99.349892][ T4909] RBP: 00007f7b8beec090 R08: 0000000000000000 R09: 0000000000000000 [ 99.357880][ T4909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.365881][ T4909] R13: 00007f7b8b216038 R14: 00007f7b8b215fa0 R15: 00007ffc59e5d658 [ 99.373886][ T4909] [ 100.623699][ T4276] Bluetooth: hci1: command 0x2016 tx timeout [ 101.059001][ T4952] Driver unsupported XDP return value 0 on prog (id 195) dev N/A, expect packet loss! [ 101.378133][ T4962] netlink: 'syz.2.198': attribute type 21 has an invalid length. [ 101.409718][ T4962] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 101.431218][ T4962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.198'. [ 104.074260][ T4983] netlink: 132 bytes leftover after parsing attributes in process `syz.3.204'. [ 104.294177][ T4994] netlink: 'syz.2.209': attribute type 10 has an invalid length. [ 104.360514][ T4994] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 104.545040][ T5006] netlink: 160 bytes leftover after parsing attributes in process `syz.2.213'. [ 104.892173][ T5014] netlink: 'syz.4.216': attribute type 21 has an invalid length. [ 104.909736][ T5014] netlink: 'syz.4.216': attribute type 1 has an invalid length. [ 104.922889][ T5014] netlink: 132 bytes leftover after parsing attributes in process `syz.4.216'. [ 106.993179][ T5034] netlink: 'syz.2.224': attribute type 10 has an invalid length. [ 107.522635][ T5052] syz.4.229 uses obsolete (PF_INET,SOCK_PACKET) [ 107.793055][ T5060] netlink: 'syz.1.232': attribute type 8 has an invalid length. [ 107.813030][ T5060] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 107.825614][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 107.905945][ T5060] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.232'. [ 107.924040][ T5065] netlink: 'syz.3.234': attribute type 21 has an invalid length. [ 107.942513][ T5065] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 107.976755][ T5065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.234'. [ 110.162934][ T5098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.241'. [ 110.230933][ T5102] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.241'. [ 110.328848][ T4280] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 110.793403][ T5118] netlink: 152 bytes leftover after parsing attributes in process `syz.0.249'. [ 111.332054][ T5136] netlink: 'syz.1.254': attribute type 21 has an invalid length. [ 111.401270][ T5136] netlink: 'syz.1.254': attribute type 1 has an invalid length. [ 111.430576][ T5136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.254'. [ 113.081371][ T4276] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 113.232092][ T5156] Zero length message leads to an empty skb [ 114.358012][ T5182] netlink: 'syz.0.267': attribute type 3 has an invalid length. [ 114.549689][ T5182] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.267'. [ 114.661386][ T5179] netlink: 'syz.0.267': attribute type 17 has an invalid length. [ 114.671181][ T5179] netlink: 'syz.0.267': attribute type 41 has an invalid length. [ 114.727878][ T5186] netlink: 8146 bytes leftover after parsing attributes in process `syz.0.267'. [ 114.800292][ T5169] netlink: 152 bytes leftover after parsing attributes in process `syz.0.267'. [ 114.963866][ T5188] netlink: 'syz.4.272': attribute type 21 has an invalid length. [ 114.983400][ T5188] netlink: 'syz.4.272': attribute type 1 has an invalid length. [ 115.002893][ T5188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.272'. [ 115.647516][ T4276] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 115.655416][ T4276] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:128' [ 115.665453][ T4276] CPU: 1 PID: 4276 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 115.673118][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.683191][ T4276] Workqueue: hci1 hci_rx_work [ 115.687899][ T4276] Call Trace: [ 115.691184][ T4276] [ 115.694122][ T4276] dump_stack_lvl+0x188/0x24e [ 115.698828][ T4276] ? show_regs_print_info+0x12/0x12 [ 115.704052][ T4276] ? load_image+0x400/0x400 [ 115.708587][ T4276] sysfs_create_dir_ns+0x26a/0x290 [ 115.713725][ T4276] ? sysfs_warn_dup+0xa0/0xa0 [ 115.718431][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 115.723682][ T4276] kobject_add_internal+0x61c/0xcc0 [ 115.728910][ T4276] kobject_add+0x160/0x230 [ 115.733354][ T4276] ? kobject_init+0x1d0/0x1d0 [ 115.738075][ T4276] ? klist_children_get+0x50/0x50 [ 115.743122][ T4276] ? get_device_parent+0x121/0x3f0 [ 115.748266][ T4276] device_add+0x483/0xfb0 [ 115.752622][ T4276] ? kmem_cache_free+0xf7/0x290 [ 115.757500][ T4276] hci_conn_add_sysfs+0xd1/0x1e0 [ 115.762463][ T4276] le_conn_complete_evt+0x105f/0x1670 [ 115.767862][ T4276] ? le_conn_complete_evt+0xe6/0x1670 [ 115.773241][ T4276] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 115.779486][ T4276] ? bt_info+0x180/0x180 [ 115.783731][ T4276] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 115.789365][ T4276] ? skb_pull_data+0xf7/0x200 [ 115.794051][ T4276] hci_le_conn_complete_evt+0x183/0x440 [ 115.799609][ T4276] ? hci_remote_host_features_evt+0x270/0x270 [ 115.805685][ T4276] hci_event_packet+0x7b6/0x1280 [ 115.810643][ T4276] ? bis_list+0x280/0x280 [ 115.814972][ T4276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 115.820861][ T4276] ? kcov_remote_start+0x4c7/0x7e0 [ 115.825968][ T4276] ? bt_warn+0x30/0x180 [ 115.830126][ T4276] ? hci_send_to_monitor+0x9c/0x4a0 [ 115.835322][ T4276] hci_rx_work+0x3eb/0xd40 [ 115.839733][ T4276] ? _raw_spin_unlock+0x40/0x40 [ 115.844579][ T4276] ? process_one_work+0x7b0/0x1160 [ 115.849685][ T4276] process_one_work+0x8a2/0x1160 [ 115.854628][ T4276] ? worker_detach_from_pool+0x240/0x240 [ 115.860255][ T4276] ? _raw_spin_lock_irq+0x86/0xf0 [ 115.865277][ T4276] ? _raw_spin_lock_irq+0xb7/0xf0 [ 115.870292][ T4276] ? _raw_spin_lock_irqsave+0x100/0x100 [ 115.875832][ T4276] ? kthread_data+0x4b/0xc0 [ 115.880337][ T4276] worker_thread+0xaa2/0x1270 [ 115.885041][ T4276] kthread+0x29d/0x330 [ 115.889098][ T4276] ? worker_clr_flags+0x1a0/0x1a0 [ 115.894117][ T4276] ? kthread_blkcg+0xd0/0xd0 [ 115.898700][ T4276] ret_from_fork+0x1f/0x30 [ 115.903121][ T4276] [ 115.907269][ T4276] kobject_add_internal failed for hci1:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 115.920985][ T4276] Bluetooth: hci1: failed to register connection device [ 117.198293][ T5245] netlink: 'syz.2.290': attribute type 21 has an invalid length. [ 117.233886][ T5245] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 117.241669][ T5245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.290'. [ 117.299291][ T4276] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 117.775195][ T11] tipc: Subscription rejected, illegal request [ 117.787007][ T5258] device syzkaller0 entered promiscuous mode [ 117.992268][ T4280] Bluetooth: hci1: command 0x2016 tx timeout [ 118.250589][ T5260] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.295'. [ 118.391529][ T5271] netlink: 'syz.3.298': attribute type 10 has an invalid length. [ 118.422665][ T5271] netlink: 'syz.3.298': attribute type 19 has an invalid length. [ 118.464611][ T5271] netlink: 156 bytes leftover after parsing attributes in process `syz.3.298'. [ 118.578851][ T5282] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 118.766664][ T5283] netlink: 132 bytes leftover after parsing attributes in process `syz.4.300'. [ 118.849256][ T5284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.299'. [ 119.333664][ T4276] Bluetooth: hci4: command 0x2016 tx timeout [ 119.645862][ T5304] netlink: 'syz.4.308': attribute type 21 has an invalid length. [ 119.664256][ T5304] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 119.690088][ T5304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.308'. [ 119.719513][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 119.727948][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 119.740442][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 119.748046][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.758127][ T4280] Workqueue: hci0 hci_rx_work [ 119.762852][ T4280] Call Trace: [ 119.766149][ T4280] [ 119.769090][ T4280] dump_stack_lvl+0x188/0x24e [ 119.773820][ T4280] ? show_regs_print_info+0x12/0x12 [ 119.779040][ T4280] ? load_image+0x400/0x400 [ 119.783598][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 119.788741][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 119.793441][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 119.798709][ T4280] kobject_add_internal+0x61c/0xcc0 [ 119.803941][ T4280] kobject_add+0x160/0x230 [ 119.808386][ T4280] ? kobject_init+0x1d0/0x1d0 [ 119.813102][ T4280] ? klist_children_get+0x50/0x50 [ 119.818201][ T4280] ? get_device_parent+0x121/0x3f0 [ 119.823348][ T4280] device_add+0x483/0xfb0 [ 119.827702][ T4280] ? kmem_cache_free+0xf7/0x290 [ 119.832585][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 119.837550][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 119.842945][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 119.848343][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 119.854603][ T4280] ? bt_info+0x180/0x180 [ 119.858869][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 119.864526][ T4280] ? skb_pull_data+0xf7/0x200 [ 119.869236][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 119.874961][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 119.881072][ T4280] hci_event_packet+0x7b6/0x1280 [ 119.886069][ T4280] ? bis_list+0x280/0x280 [ 119.890424][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.896348][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 119.901481][ T4280] ? bt_warn+0x30/0x180 [ 119.905662][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 119.910889][ T4280] hci_rx_work+0x3eb/0xd40 [ 119.915323][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 119.920207][ T4280] ? process_one_work+0x7b0/0x1160 [ 119.925333][ T4280] process_one_work+0x8a2/0x1160 [ 119.930325][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 119.935985][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 119.941023][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 119.946582][ T4280] ? kthread_data+0x4b/0xc0 [ 119.951122][ T4280] worker_thread+0xaa2/0x1270 [ 119.955886][ T4280] kthread+0x29d/0x330 [ 119.960048][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 119.965089][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 119.969696][ T4280] ret_from_fork+0x1f/0x30 [ 119.974166][ T4280] [ 119.985076][ T4280] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 120.003662][ T4280] Bluetooth: hci0: failed to register connection device [ 121.071892][ T5321] netlink: 'syz.2.314': attribute type 4 has an invalid length. [ 121.198680][ T5328] netlink: 'syz.0.315': attribute type 3 has an invalid length. [ 121.217256][ T5328] netlink: 132 bytes leftover after parsing attributes in process `syz.0.315'. [ 121.378730][ T5334] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.773681][ T5350] netlink: 'syz.0.322': attribute type 21 has an invalid length. [ 121.782113][ T5350] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 121.800155][ T5350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.322'. [ 122.053649][ T4280] Bluetooth: hci0: command 0x2016 tx timeout [ 122.300986][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 122.308817][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 122.318780][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 122.326346][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.336401][ T4280] Workqueue: hci3 hci_rx_work [ 122.341083][ T4280] Call Trace: [ 122.344354][ T4280] [ 122.347277][ T4280] dump_stack_lvl+0x188/0x24e [ 122.351961][ T4280] ? show_regs_print_info+0x12/0x12 [ 122.357163][ T4280] ? load_image+0x400/0x400 [ 122.361669][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 122.366785][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 122.371461][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 122.376656][ T4280] kobject_add_internal+0x61c/0xcc0 [ 122.381855][ T4280] kobject_add+0x160/0x230 [ 122.386265][ T4280] ? kobject_init+0x1d0/0x1d0 [ 122.390949][ T4280] ? klist_children_get+0x50/0x50 [ 122.395971][ T4280] ? get_device_parent+0x121/0x3f0 [ 122.401089][ T4280] device_add+0x483/0xfb0 [ 122.405416][ T4280] ? kmem_cache_free+0xf7/0x290 [ 122.410266][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 122.415206][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 122.420579][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 122.425964][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 122.432219][ T4280] ? bt_info+0x180/0x180 [ 122.436461][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 122.442111][ T4280] ? skb_pull_data+0xf7/0x200 [ 122.446801][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 122.452353][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 122.458429][ T4280] hci_event_packet+0x7b6/0x1280 [ 122.463376][ T4280] ? bis_list+0x280/0x280 [ 122.467700][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 122.473592][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 122.478703][ T4280] ? bt_warn+0x30/0x180 [ 122.482892][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 122.488093][ T4280] hci_rx_work+0x3eb/0xd40 [ 122.492504][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 122.497353][ T4280] ? process_one_work+0x7b0/0x1160 [ 122.502459][ T4280] process_one_work+0x8a2/0x1160 [ 122.507404][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 122.513046][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 122.518077][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 122.523096][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 122.528655][ T4280] ? kthread_data+0x4b/0xc0 [ 122.533170][ T4280] worker_thread+0xaa2/0x1270 [ 122.537921][ T4280] kthread+0x29d/0x330 [ 122.541987][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 122.547023][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 122.551611][ T4280] ret_from_fork+0x1f/0x30 [ 122.556051][ T4280] [ 122.565984][ T4280] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 122.579986][ T4280] Bluetooth: hci3: failed to register connection device [ 124.124890][ T5390] netlink: 'syz.3.328': attribute type 27 has an invalid length. [ 124.163450][ T5390] netlink: 164 bytes leftover after parsing attributes in process `syz.3.328'. [ 124.380127][ T5398] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.337'. [ 124.417665][ T5398] netlink: zone id is out of range [ 124.446321][ T5398] netlink: zone id is out of range [ 124.463243][ T5398] netlink: zone id is out of range [ 124.478311][ T5398] netlink: zone id is out of range [ 124.518551][ T5398] netlink: zone id is out of range [ 124.538071][ T5398] netlink: zone id is out of range [ 124.554252][ T5398] netlink: zone id is out of range [ 124.573278][ T5398] netlink: zone id is out of range [ 124.613898][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 124.625680][ T5398] netlink: zone id is out of range [ 124.631119][ T5398] netlink: zone id is out of range [ 124.701722][ T5404] netlink: 'syz.4.339': attribute type 21 has an invalid length. [ 124.709733][ T5404] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 124.718645][ T5404] netlink: 132 bytes leftover after parsing attributes in process `syz.4.339'. [ 124.774797][ T5402] netlink: 'syz.0.338': attribute type 21 has an invalid length. [ 124.797728][ T5402] netlink: 156 bytes leftover after parsing attributes in process `syz.0.338'. [ 124.881758][ T5402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.338'. [ 125.350566][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 125.359133][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 125.368963][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 125.376542][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.386624][ T4280] Workqueue: hci0 hci_rx_work [ 125.391343][ T4280] Call Trace: [ 125.394660][ T4280] [ 125.397618][ T4280] dump_stack_lvl+0x188/0x24e [ 125.402334][ T4280] ? show_regs_print_info+0x12/0x12 [ 125.407576][ T4280] ? load_image+0x400/0x400 [ 125.412127][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 125.417288][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 125.422020][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 125.427265][ T4280] kobject_add_internal+0x61c/0xcc0 [ 125.432518][ T4280] kobject_add+0x160/0x230 [ 125.436982][ T4280] ? kobject_init+0x1d0/0x1d0 [ 125.441719][ T4280] ? klist_children_get+0x50/0x50 [ 125.446782][ T4280] ? get_device_parent+0x121/0x3f0 [ 125.451949][ T4280] device_add+0x483/0xfb0 [ 125.456331][ T4280] ? kmem_cache_free+0xf7/0x290 [ 125.461224][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 125.466199][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 125.471605][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 125.477014][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 125.483287][ T4280] ? bt_info+0x180/0x180 [ 125.487560][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 125.493229][ T4280] ? skb_pull_data+0xf7/0x200 [ 125.497945][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 125.503527][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 125.509627][ T4280] hci_event_packet+0x7b6/0x1280 [ 125.514606][ T4280] ? bis_list+0x280/0x280 [ 125.518963][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 125.524888][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 125.530026][ T4280] ? bt_warn+0x30/0x180 [ 125.534216][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 125.539440][ T4280] hci_rx_work+0x3eb/0xd40 [ 125.543888][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 125.548781][ T4280] ? process_one_work+0x7b0/0x1160 [ 125.553935][ T4280] process_one_work+0x8a2/0x1160 [ 125.558925][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 125.564590][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 125.569661][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 125.574714][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 125.580743][ T4280] ? kthread_data+0x4b/0xc0 [ 125.585291][ T4280] worker_thread+0xaa2/0x1270 [ 125.590024][ T4280] kthread+0x29d/0x330 [ 125.594119][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 125.599171][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 125.603787][ T4280] ret_from_fork+0x1f/0x30 [ 125.608335][ T4280] [ 125.612388][ T4280] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 125.625749][ T4280] Bluetooth: hci0: failed to register connection device [ 126.380312][ T5434] netlink: 830 bytes leftover after parsing attributes in process `syz.1.348'. [ 126.588873][ T5439] netlink: 'syz.0.351': attribute type 13 has an invalid length. [ 126.691892][ T5446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.353'. [ 127.117572][ T5453] netlink: 'syz.1.356': attribute type 21 has an invalid length. [ 127.156521][ T5453] netlink: 'syz.1.356': attribute type 1 has an invalid length. [ 127.195996][ T5453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.356'. [ 127.400911][ T4280] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 127.408752][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 127.419582][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 127.427168][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.437247][ T4280] Workqueue: hci2 hci_rx_work [ 127.441950][ T4280] Call Trace: [ 127.445239][ T4280] [ 127.448184][ T4280] dump_stack_lvl+0x188/0x24e [ 127.452905][ T4280] ? show_regs_print_info+0x12/0x12 [ 127.458146][ T4280] ? load_image+0x400/0x400 [ 127.462736][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 127.467890][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 127.472616][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 127.477854][ T4280] kobject_add_internal+0x61c/0xcc0 [ 127.483086][ T4280] kobject_add+0x160/0x230 [ 127.487551][ T4280] ? kobject_init+0x1d0/0x1d0 [ 127.492279][ T4280] ? klist_children_get+0x50/0x50 [ 127.497433][ T4280] ? get_device_parent+0x121/0x3f0 [ 127.502613][ T4280] device_add+0x483/0xfb0 [ 127.506992][ T4280] ? kmem_cache_free+0xf7/0x290 [ 127.511887][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 127.516863][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 127.522284][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 127.527704][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 127.533981][ T4280] ? bt_info+0x180/0x180 [ 127.538253][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 127.543926][ T4280] ? skb_pull_data+0xf7/0x200 [ 127.548650][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 127.554233][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 127.560334][ T4280] hci_event_packet+0x7b6/0x1280 [ 127.565327][ T4280] ? bis_list+0x280/0x280 [ 127.569687][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 127.575609][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 127.580739][ T4280] ? bt_warn+0x30/0x180 [ 127.584921][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 127.590142][ T4280] hci_rx_work+0x3eb/0xd40 [ 127.594591][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 127.599484][ T4280] ? process_one_work+0x7b0/0x1160 [ 127.604622][ T4280] process_one_work+0x8a2/0x1160 [ 127.609607][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 127.615264][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 127.620320][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 127.625369][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 127.630940][ T4280] ? kthread_data+0x4b/0xc0 [ 127.635482][ T4280] worker_thread+0xaa2/0x1270 [ 127.640217][ T4280] kthread+0x29d/0x330 [ 127.644310][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 127.649358][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 127.653978][ T4280] ret_from_fork+0x1f/0x30 [ 127.658465][ T4280] [ 127.663122][ T4276] Bluetooth: hci0: command 0x2016 tx timeout [ 127.664595][ T4280] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 127.682762][ T4280] Bluetooth: hci2: failed to register connection device [ 129.733881][ T4280] Bluetooth: hci2: command 0x2016 tx timeout [ 129.835887][ T5470] FAULT_INJECTION: forcing a failure. [ 129.835887][ T5470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.871968][ T5482] device pim6reg1 entered promiscuous mode [ 129.906403][ T5470] CPU: 0 PID: 5470 Comm: syz.3.362 Not tainted syzkaller #0 [ 129.913754][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.923833][ T5470] Call Trace: [ 129.927129][ T5470] [ 129.930082][ T5470] dump_stack_lvl+0x188/0x24e [ 129.934795][ T5470] ? show_regs_print_info+0x12/0x12 [ 129.940026][ T5470] ? load_image+0x400/0x400 [ 129.944558][ T5470] ? __lock_acquire+0x7d10/0x7d10 [ 129.949599][ T5470] should_fail_ex+0x399/0x4d0 [ 129.954291][ T5470] _copy_to_user+0x2c/0x130 [ 129.958796][ T5470] simple_read_from_buffer+0xe3/0x150 [ 129.964182][ T5470] proc_fail_nth_read+0x1a6/0x220 [ 129.969207][ T5470] ? proc_fault_inject_write+0x310/0x310 [ 129.974843][ T5470] ? fsnotify_perm+0x1aa/0x550 [ 129.979624][ T5470] ? fsnotify_perm+0x248/0x550 [ 129.984434][ T5470] ? proc_fault_inject_write+0x310/0x310 [ 129.990075][ T5470] vfs_read+0x2de/0xa00 [ 129.994250][ T5470] ? kernel_read+0x1e0/0x1e0 [ 129.998852][ T5470] ? __fget_files+0x28/0x4b0 [ 130.003451][ T5470] ? __fget_files+0x28/0x4b0 [ 130.008047][ T5470] ? __fget_files+0x43d/0x4b0 [ 130.012742][ T5470] ? __fdget_pos+0x2ae/0x360 [ 130.017332][ T5470] ? ksys_read+0x71/0x250 [ 130.021672][ T5470] ksys_read+0x14c/0x250 [ 130.025923][ T5470] ? vfs_write+0xa30/0xa30 [ 130.030347][ T5470] ? lockdep_hardirqs_on+0x94/0x140 [ 130.035554][ T5470] do_syscall_64+0x4c/0xa0 [ 130.039972][ T5470] ? clear_bhb_loop+0x60/0xb0 [ 130.044647][ T5470] ? clear_bhb_loop+0x60/0xb0 [ 130.049331][ T5470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.055235][ T5470] RIP: 0033:0x7f7b8af5c84e [ 130.059672][ T5470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.079275][ T5470] RSP: 002b:00007f7b8beebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.087696][ T5470] RAX: ffffffffffffffda RBX: 00007f7b8beec6c0 RCX: 00007f7b8af5c84e [ 130.095671][ T5470] RDX: 000000000000000f RSI: 00007f7b8beec0a0 RDI: 0000000000000006 [ 130.103645][ T5470] RBP: 00007f7b8beec090 R08: 0000000000000000 R09: 0000000000000000 [ 130.111618][ T5470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.119585][ T5470] R13: 00007f7b8b216038 R14: 00007f7b8b215fa0 R15: 00007ffc59e5d658 [ 130.127578][ T5470] [ 130.844646][ T5489] delete_channel: no stack [ 131.532500][ T5513] netlink: 'syz.2.377': attribute type 21 has an invalid length. [ 131.541120][ T5513] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 131.555738][ T5513] netlink: 132 bytes leftover after parsing attributes in process `syz.2.377'. [ 131.586047][ T4280] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 131.595381][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:128' [ 131.605607][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 131.613191][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.623264][ T4280] Workqueue: hci4 hci_rx_work [ 131.627971][ T4280] Call Trace: [ 131.631258][ T4280] [ 131.634195][ T4280] dump_stack_lvl+0x188/0x24e [ 131.638896][ T4280] ? show_regs_print_info+0x12/0x12 [ 131.644113][ T4280] ? load_image+0x400/0x400 [ 131.648635][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 131.653776][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 131.658481][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 131.663709][ T4280] kobject_add_internal+0x61c/0xcc0 [ 131.668936][ T4280] kobject_add+0x160/0x230 [ 131.673367][ T4280] ? kobject_init+0x1d0/0x1d0 [ 131.678065][ T4280] ? klist_children_get+0x50/0x50 [ 131.683099][ T4280] ? get_device_parent+0x121/0x3f0 [ 131.688252][ T4280] device_add+0x483/0xfb0 [ 131.692598][ T4280] ? kmem_cache_free+0xf7/0x290 [ 131.697465][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 131.702415][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 131.707801][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 131.713186][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 131.719441][ T4280] ? bt_info+0x180/0x180 [ 131.723694][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 131.729354][ T4280] ? skb_pull_data+0xf7/0x200 [ 131.734049][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 131.739610][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 131.745689][ T4280] hci_event_packet+0x7b6/0x1280 [ 131.750653][ T4280] ? bis_list+0x280/0x280 [ 131.754989][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 131.760897][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 131.766013][ T4280] ? bt_warn+0x30/0x180 [ 131.770177][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 131.775394][ T4280] hci_rx_work+0x3eb/0xd40 [ 131.779820][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 131.784690][ T4280] ? process_one_work+0x7b0/0x1160 [ 131.789812][ T4280] process_one_work+0x8a2/0x1160 [ 131.794771][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 131.800407][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 131.805439][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 131.810468][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 131.816030][ T4280] ? kthread_data+0x4b/0xc0 [ 131.820551][ T4280] worker_thread+0xaa2/0x1270 [ 131.825263][ T4280] kthread+0x29d/0x330 [ 131.829334][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 131.834382][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 131.839089][ T4280] ret_from_fork+0x1f/0x30 [ 131.843577][ T4280] [ 131.849398][ T4280] kobject_add_internal failed for hci4:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 131.863715][ T4280] Bluetooth: hci4: failed to register connection device [ 132.709289][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.715774][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.338544][ T5539] netlink: 'syz.2.385': attribute type 3 has an invalid length. [ 133.430808][ T5543] netlink: 'syz.0.387': attribute type 21 has an invalid length. [ 133.438824][ T5543] netlink: 128 bytes leftover after parsing attributes in process `syz.0.387'. [ 133.448534][ T5539] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.385'. [ 133.452423][ T5543] netlink: 'syz.0.387': attribute type 4 has an invalid length. [ 133.476822][ T5543] netlink: 3 bytes leftover after parsing attributes in process `syz.0.387'. [ 133.879070][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 133.886994][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 133.896882][ T4272] Bluetooth: hci4: command 0x2016 tx timeout [ 133.903902][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 133.911479][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.921621][ T4280] Workqueue: hci3 hci_rx_work [ 133.926328][ T4280] Call Trace: [ 133.929605][ T4280] [ 133.932529][ T4280] dump_stack_lvl+0x188/0x24e [ 133.937215][ T4280] ? show_regs_print_info+0x12/0x12 [ 133.942420][ T4280] ? load_image+0x400/0x400 [ 133.946936][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 133.952129][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 133.956823][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 133.962029][ T4280] kobject_add_internal+0x61c/0xcc0 [ 133.967241][ T4280] kobject_add+0x160/0x230 [ 133.971660][ T4280] ? kobject_init+0x1d0/0x1d0 [ 133.976345][ T4280] ? klist_children_get+0x50/0x50 [ 133.981366][ T4280] ? get_device_parent+0x121/0x3f0 [ 133.986490][ T4280] device_add+0x483/0xfb0 [ 133.990823][ T4280] ? kmem_cache_free+0xf7/0x290 [ 133.995695][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 134.000632][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 134.006031][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 134.011516][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 134.017776][ T4280] ? bt_info+0x180/0x180 [ 134.022030][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 134.027672][ T4280] ? skb_pull_data+0xf7/0x200 [ 134.032447][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 134.037998][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 134.044073][ T4280] hci_event_packet+0x7b6/0x1280 [ 134.049025][ T4280] ? bis_list+0x280/0x280 [ 134.053351][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 134.059275][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 134.064387][ T4280] ? bt_warn+0x30/0x180 [ 134.068550][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 134.073750][ T4280] hci_rx_work+0x3eb/0xd40 [ 134.078170][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 134.083054][ T4280] ? process_one_work+0x7b0/0x1160 [ 134.088195][ T4280] process_one_work+0x8a2/0x1160 [ 134.093175][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 134.098830][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 134.103858][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 134.109406][ T4280] ? kthread_data+0x4b/0xc0 [ 134.113933][ T4280] worker_thread+0xaa2/0x1270 [ 134.118636][ T4280] kthread+0x29d/0x330 [ 134.122711][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 134.127735][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 134.132324][ T4280] ret_from_fork+0x1f/0x30 [ 134.136753][ T4280] [ 134.140676][ T4280] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 134.154028][ T4280] Bluetooth: hci3: failed to register connection device [ 134.618630][ T5559] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.393'. [ 134.821386][ T5564] netlink: 'syz.4.395': attribute type 21 has an invalid length. [ 134.869026][ T5564] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 134.924863][ T5564] netlink: 132 bytes leftover after parsing attributes in process `syz.4.395'. [ 134.989503][ T5568] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 135.001857][ T5568] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.396'. [ 135.765662][ T5581] netlink: 'syz.4.400': attribute type 29 has an invalid length. [ 135.804289][ T5581] netlink: 'syz.4.400': attribute type 29 has an invalid length. [ 135.952961][ T5588] netlink: 184 bytes leftover after parsing attributes in process `syz.2.403'. [ 135.974701][ T5588] sctp: [Deprecated]: syz.2.403 (pid 5588) Use of int in max_burst socket option deprecated. [ 135.974701][ T5588] Use struct sctp_assoc_value instead [ 136.137560][ T4280] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 136.146023][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:128' [ 136.156259][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 136.163837][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.173926][ T4280] Workqueue: hci4 hci_rx_work [ 136.178620][ T4280] Call Trace: [ 136.181899][ T4280] [ 136.184830][ T4280] dump_stack_lvl+0x188/0x24e [ 136.189523][ T4280] ? show_regs_print_info+0x12/0x12 [ 136.194729][ T4280] ? load_image+0x400/0x400 [ 136.199257][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 136.204376][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 136.209062][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 136.214265][ T4280] kobject_add_internal+0x61c/0xcc0 [ 136.219475][ T4280] kobject_add+0x160/0x230 [ 136.223901][ T4280] ? kobject_init+0x1d0/0x1d0 [ 136.228593][ T4280] ? klist_children_get+0x50/0x50 [ 136.233623][ T4280] ? get_device_parent+0x121/0x3f0 [ 136.238742][ T4280] device_add+0x483/0xfb0 [ 136.243090][ T4280] ? kmem_cache_free+0xf7/0x290 [ 136.247953][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 136.252895][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 136.258274][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 136.263658][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 136.269902][ T4280] ? bt_info+0x180/0x180 [ 136.274233][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 136.279874][ T4280] ? skb_pull_data+0xf7/0x200 [ 136.284565][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 136.290117][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 136.296187][ T4280] hci_event_packet+0x7b6/0x1280 [ 136.301135][ T4280] ? bis_list+0x280/0x280 [ 136.305464][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 136.311356][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 136.316468][ T4280] ? bt_warn+0x30/0x180 [ 136.320642][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 136.325844][ T4280] hci_rx_work+0x3eb/0xd40 [ 136.330267][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 136.335126][ T4280] ? process_one_work+0x7b0/0x1160 [ 136.340236][ T4280] process_one_work+0x8a2/0x1160 [ 136.345187][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 136.350824][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 136.355847][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 136.361389][ T4280] ? kthread_data+0x4b/0xc0 [ 136.365900][ T4280] worker_thread+0xaa2/0x1270 [ 136.370616][ T4280] kthread+0x29d/0x330 [ 136.374684][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 136.379706][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 136.384300][ T4280] ret_from_fork+0x1f/0x30 [ 136.388734][ T4280] [ 136.392028][ T4272] Bluetooth: hci3: command 0x2016 tx timeout [ 136.393407][ T4280] kobject_add_internal failed for hci4:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 136.411405][ T4280] Bluetooth: hci4: failed to register connection device [ 136.431853][ T5585] device syzkaller0 entered promiscuous mode [ 136.516752][ T5585] device wlan1 entered promiscuous mode [ 136.795991][ T5609] validate_nla: 1 callbacks suppressed [ 136.796009][ T5609] netlink: 'syz.3.409': attribute type 2 has an invalid length. [ 138.462743][ T4280] Bluetooth: hci4: command 0x2016 tx timeout [ 139.319997][ T5612] netlink: 'syz.0.410': attribute type 21 has an invalid length. [ 139.331470][ T5612] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 139.361902][ T5612] netlink: 132 bytes leftover after parsing attributes in process `syz.0.410'. [ 139.576078][ T5633] netlink: 'syz.4.415': attribute type 21 has an invalid length. [ 139.614577][ T5633] netlink: 156 bytes leftover after parsing attributes in process `syz.4.415'. [ 139.665435][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 139.869204][ T4272] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 139.877788][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:128' [ 139.887400][ T4272] CPU: 0 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 139.894991][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.905098][ T4272] Workqueue: hci1 hci_rx_work [ 139.909825][ T4272] Call Trace: [ 139.913128][ T4272] [ 139.916078][ T4272] dump_stack_lvl+0x188/0x24e [ 139.920792][ T4272] ? show_regs_print_info+0x12/0x12 [ 139.926020][ T4272] ? load_image+0x400/0x400 [ 139.930563][ T4272] sysfs_create_dir_ns+0x26a/0x290 [ 139.935703][ T4272] ? sysfs_warn_dup+0xa0/0xa0 [ 139.940406][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 139.945640][ T4272] kobject_add_internal+0x61c/0xcc0 [ 139.950872][ T4272] kobject_add+0x160/0x230 [ 139.955408][ T4272] ? kobject_init+0x1d0/0x1d0 [ 139.960135][ T4272] ? klist_children_get+0x50/0x50 [ 139.965181][ T4272] ? get_device_parent+0x121/0x3f0 [ 139.970326][ T4272] device_add+0x483/0xfb0 [ 139.974685][ T4272] ? kmem_cache_free+0xf7/0x290 [ 139.979568][ T4272] hci_conn_add_sysfs+0xd1/0x1e0 [ 139.984533][ T4272] le_conn_complete_evt+0x105f/0x1670 [ 139.989936][ T4272] ? le_conn_complete_evt+0xe6/0x1670 [ 139.995340][ T4272] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 140.001608][ T4272] ? bt_info+0x180/0x180 [ 140.005880][ T4272] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 140.011546][ T4272] ? skb_pull_data+0xf7/0x200 [ 140.016262][ T4272] hci_le_conn_complete_evt+0x183/0x440 [ 140.021840][ T4272] ? hci_remote_host_features_evt+0x270/0x270 [ 140.027936][ T4272] hci_event_packet+0x7b6/0x1280 [ 140.032909][ T4272] ? bis_list+0x280/0x280 [ 140.037266][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.043187][ T4272] ? kcov_remote_start+0x4c7/0x7e0 [ 140.048328][ T4272] ? bt_warn+0x30/0x180 [ 140.052514][ T4272] ? hci_send_to_monitor+0x9c/0x4a0 [ 140.057746][ T4272] hci_rx_work+0x3eb/0xd40 [ 140.062184][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 140.067073][ T4272] ? process_one_work+0x7b0/0x1160 [ 140.072209][ T4272] process_one_work+0x8a2/0x1160 [ 140.077277][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 140.082940][ T4272] ? _raw_spin_lock_irq+0x86/0xf0 [ 140.088000][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 140.093047][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 140.098618][ T4272] ? kthread_data+0x4b/0xc0 [ 140.103159][ T4272] worker_thread+0xaa2/0x1270 [ 140.107893][ T4272] kthread+0x29d/0x330 [ 140.111980][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 140.117025][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 140.121640][ T4272] ret_from_fork+0x1f/0x30 [ 140.126099][ T4272] [ 140.132230][ T4272] kobject_add_internal failed for hci1:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 140.147055][ T4272] Bluetooth: hci1: failed to register connection device [ 140.592238][ T5665] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.426'. [ 140.812666][ T5674] netlink: 'syz.4.428': attribute type 21 has an invalid length. [ 140.873930][ T5674] netlink: 'syz.4.428': attribute type 1 has an invalid length. [ 140.907744][ T5674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.428'. [ 142.208757][ T5700] netlink: 188 bytes leftover after parsing attributes in process `syz.0.436'. [ 142.220851][ T5700] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 142.223972][ T4272] Bluetooth: hci1: command 0x2016 tx timeout [ 142.259720][ T4272] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 142.267665][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:128' [ 142.277501][ T4272] CPU: 0 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 142.285079][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.295161][ T4272] Workqueue: hci4 hci_rx_work [ 142.299879][ T4272] Call Trace: [ 142.303175][ T4272] [ 142.306135][ T4272] dump_stack_lvl+0x188/0x24e [ 142.310850][ T4272] ? show_regs_print_info+0x12/0x12 [ 142.316084][ T4272] ? load_image+0x400/0x400 [ 142.320653][ T4272] sysfs_create_dir_ns+0x26a/0x290 [ 142.325805][ T4272] ? sysfs_warn_dup+0xa0/0xa0 [ 142.330498][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 142.335708][ T4272] kobject_add_internal+0x61c/0xcc0 [ 142.340921][ T4272] kobject_add+0x160/0x230 [ 142.345342][ T4272] ? kobject_init+0x1d0/0x1d0 [ 142.350032][ T4272] ? klist_children_get+0x50/0x50 [ 142.355055][ T4272] ? get_device_parent+0x121/0x3f0 [ 142.360176][ T4272] device_add+0x483/0xfb0 [ 142.364516][ T4272] ? kmem_cache_free+0xf7/0x290 [ 142.369381][ T4272] hci_conn_add_sysfs+0xd1/0x1e0 [ 142.374325][ T4272] le_conn_complete_evt+0x105f/0x1670 [ 142.379702][ T4272] ? le_conn_complete_evt+0xe6/0x1670 [ 142.385082][ T4272] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 142.391326][ T4272] ? bt_info+0x180/0x180 [ 142.395573][ T4272] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 142.401217][ T4272] ? skb_pull_data+0xf7/0x200 [ 142.405913][ T4272] hci_le_conn_complete_evt+0x183/0x440 [ 142.411468][ T4272] ? hci_remote_host_features_evt+0x270/0x270 [ 142.417542][ T4272] hci_event_packet+0x7b6/0x1280 [ 142.422495][ T4272] ? bis_list+0x280/0x280 [ 142.426826][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 142.432724][ T4272] ? kcov_remote_start+0x4c7/0x7e0 [ 142.437924][ T4272] ? bt_warn+0x30/0x180 [ 142.442093][ T4272] ? hci_send_to_monitor+0x9c/0x4a0 [ 142.447310][ T4272] hci_rx_work+0x3eb/0xd40 [ 142.451729][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 142.456590][ T4272] ? process_one_work+0x7b0/0x1160 [ 142.461701][ T4272] process_one_work+0x8a2/0x1160 [ 142.466661][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 142.472303][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 142.477337][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 142.482967][ T4272] ? kthread_data+0x4b/0xc0 [ 142.487489][ T4272] worker_thread+0xaa2/0x1270 [ 142.492205][ T4272] kthread+0x29d/0x330 [ 142.496270][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 142.501291][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 142.505882][ T4272] ret_from_fork+0x1f/0x30 [ 142.510322][ T4272] [ 142.519390][ T4272] kobject_add_internal failed for hci4:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 142.533350][ T4272] Bluetooth: hci4: failed to register connection device [ 142.899757][ T5730] netlink: 'syz.3.444': attribute type 21 has an invalid length. [ 142.926567][ T5730] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 142.943781][ T5730] netlink: 132 bytes leftover after parsing attributes in process `syz.3.444'. [ 144.613633][ T4272] Bluetooth: hci4: command 0x2016 tx timeout [ 144.989505][ T5767] netlink: 'syz.3.454': attribute type 10 has an invalid length. [ 145.224601][ T5767] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.398316][ T4272] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 145.406268][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 145.415856][ T4272] CPU: 1 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 145.423429][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.433506][ T4272] Workqueue: hci3 hci_rx_work [ 145.438310][ T4272] Call Trace: [ 145.441609][ T4272] [ 145.444559][ T4272] dump_stack_lvl+0x188/0x24e [ 145.449278][ T4272] ? show_regs_print_info+0x12/0x12 [ 145.454512][ T4272] ? load_image+0x400/0x400 [ 145.459060][ T4272] sysfs_create_dir_ns+0x26a/0x290 [ 145.464208][ T4272] ? sysfs_warn_dup+0xa0/0xa0 [ 145.468919][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 145.474161][ T4272] kobject_add_internal+0x61c/0xcc0 [ 145.479393][ T4272] kobject_add+0x160/0x230 [ 145.483838][ T4272] ? kobject_init+0x1d0/0x1d0 [ 145.488646][ T4272] ? klist_children_get+0x50/0x50 [ 145.493701][ T4272] ? get_device_parent+0x121/0x3f0 [ 145.498853][ T4272] device_add+0x483/0xfb0 [ 145.503216][ T4272] ? kmem_cache_free+0xf7/0x290 [ 145.508107][ T4272] hci_conn_add_sysfs+0xd1/0x1e0 [ 145.513078][ T4272] le_conn_complete_evt+0x105f/0x1670 [ 145.518495][ T4272] ? le_conn_complete_evt+0xe6/0x1670 [ 145.523901][ T4272] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 145.530158][ T4272] ? bt_info+0x180/0x180 [ 145.534402][ T4272] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 145.540038][ T4272] ? skb_pull_data+0xf7/0x200 [ 145.544723][ T4272] hci_le_conn_complete_evt+0x183/0x440 [ 145.550272][ T4272] ? hci_remote_host_features_evt+0x270/0x270 [ 145.556338][ T4272] hci_event_packet+0x7b6/0x1280 [ 145.561282][ T4272] ? bis_list+0x280/0x280 [ 145.565611][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 145.571503][ T4272] ? kcov_remote_start+0x4c7/0x7e0 [ 145.576614][ T4272] ? bt_warn+0x30/0x180 [ 145.580770][ T4272] ? hci_send_to_monitor+0x9c/0x4a0 [ 145.585974][ T4272] hci_rx_work+0x3eb/0xd40 [ 145.590390][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 145.595246][ T4272] ? process_one_work+0x7b0/0x1160 [ 145.600356][ T4272] process_one_work+0x8a2/0x1160 [ 145.605303][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 145.610939][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 145.615972][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 145.621514][ T4272] ? kthread_data+0x4b/0xc0 [ 145.626024][ T4272] worker_thread+0xaa2/0x1270 [ 145.630730][ T4272] kthread+0x29d/0x330 [ 145.634789][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 145.639810][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 145.644394][ T4272] ret_from_fork+0x1f/0x30 [ 145.648824][ T4272] [ 145.652606][ T4272] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.665929][ T4272] Bluetooth: hci3: failed to register connection device [ 146.233439][ T5788] netlink: 'syz.2.461': attribute type 21 has an invalid length. [ 146.272263][ T5788] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 146.293252][ T5788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.461'. [ 146.913420][ T5801] netlink: 'syz.1.464': attribute type 10 has an invalid length. [ 147.188812][ T5805] netlink: 'syz.3.466': attribute type 3 has an invalid length. [ 147.207763][ T5805] netlink: 132 bytes leftover after parsing attributes in process `syz.3.466'. [ 147.672341][ T5801] team0: Port device vlan0 added [ 147.734492][ T4272] Bluetooth: hci3: command 0x2016 tx timeout [ 147.792136][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 147.799935][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 147.810235][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 147.817811][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.827884][ T4280] Workqueue: hci0 hci_rx_work [ 147.832593][ T4280] Call Trace: [ 147.835880][ T4280] [ 147.838819][ T4280] dump_stack_lvl+0x188/0x24e [ 147.843534][ T4280] ? show_regs_print_info+0x12/0x12 [ 147.848760][ T4280] ? load_image+0x400/0x400 [ 147.853298][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 147.858434][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 147.863139][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 147.868362][ T4280] kobject_add_internal+0x61c/0xcc0 [ 147.873592][ T4280] kobject_add+0x160/0x230 [ 147.878044][ T4280] ? kobject_init+0x1d0/0x1d0 [ 147.882769][ T4280] ? klist_children_get+0x50/0x50 [ 147.887823][ T4280] ? get_device_parent+0x121/0x3f0 [ 147.892973][ T4280] device_add+0x483/0xfb0 [ 147.897335][ T4280] ? kmem_cache_free+0xf7/0x290 [ 147.902309][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 147.907276][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 147.912685][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 147.918083][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 147.924348][ T4280] ? bt_info+0x180/0x180 [ 147.928611][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 147.934259][ T4280] ? skb_pull_data+0xf7/0x200 [ 147.938952][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 147.944506][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 147.950576][ T4280] hci_event_packet+0x7b6/0x1280 [ 147.955524][ T4280] ? bis_list+0x280/0x280 [ 147.959852][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 147.965749][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 147.970885][ T4280] ? bt_warn+0x30/0x180 [ 147.975052][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 147.980256][ T4280] hci_rx_work+0x3eb/0xd40 [ 147.984681][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 147.989554][ T4280] ? process_one_work+0x7b0/0x1160 [ 147.994682][ T4280] process_one_work+0x8a2/0x1160 [ 147.999640][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 148.005277][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 148.010312][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 148.015860][ T4280] ? kthread_data+0x4b/0xc0 [ 148.020379][ T4280] worker_thread+0xaa2/0x1270 [ 148.025081][ T4280] kthread+0x29d/0x330 [ 148.029145][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 148.034166][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 148.038752][ T4280] ret_from_fork+0x1f/0x30 [ 148.043267][ T4280] [ 148.054268][ T4280] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 148.068010][ T4280] Bluetooth: hci0: failed to register connection device [ 149.994611][ T5831] netlink: 160 bytes leftover after parsing attributes in process `syz.3.474'. [ 150.049773][ T5831] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 150.118469][ T5834] netlink: 'syz.3.474': attribute type 11 has an invalid length. [ 150.133994][ T4280] Bluetooth: hci0: command 0x2016 tx timeout [ 150.147072][ T5834] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.474'. [ 150.198779][ T5834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.427620][ T5845] netlink: 'syz.3.479': attribute type 21 has an invalid length. [ 150.442636][ T5845] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 150.450993][ T5845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.479'. [ 151.559615][ T4272] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 151.568485][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:128' [ 151.578125][ T4272] CPU: 0 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 151.585692][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.595774][ T4272] Workqueue: hci3 hci_rx_work [ 151.600489][ T4272] Call Trace: [ 151.603786][ T4272] [ 151.606730][ T4272] dump_stack_lvl+0x188/0x24e [ 151.611528][ T4272] ? show_regs_print_info+0x12/0x12 [ 151.616758][ T4272] ? load_image+0x400/0x400 [ 151.621320][ T4272] sysfs_create_dir_ns+0x26a/0x290 [ 151.626476][ T4272] ? sysfs_warn_dup+0xa0/0xa0 [ 151.631175][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 151.636379][ T4272] kobject_add_internal+0x61c/0xcc0 [ 151.641597][ T4272] kobject_add+0x160/0x230 [ 151.646029][ T4272] ? kobject_init+0x1d0/0x1d0 [ 151.650722][ T4272] ? klist_children_get+0x50/0x50 [ 151.655744][ T4272] ? get_device_parent+0x121/0x3f0 [ 151.660861][ T4272] device_add+0x483/0xfb0 [ 151.665193][ T4272] ? kmem_cache_free+0xf7/0x290 [ 151.670045][ T4272] hci_conn_add_sysfs+0xd1/0x1e0 [ 151.675039][ T4272] le_conn_complete_evt+0x105f/0x1670 [ 151.680418][ T4272] ? le_conn_complete_evt+0xe6/0x1670 [ 151.685794][ T4272] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 151.692036][ T4272] ? bt_info+0x180/0x180 [ 151.696280][ T4272] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 151.701920][ T4272] ? skb_pull_data+0xf7/0x200 [ 151.706607][ T4272] hci_le_conn_complete_evt+0x183/0x440 [ 151.712155][ T4272] ? hci_remote_host_features_evt+0x270/0x270 [ 151.718226][ T4272] hci_event_packet+0x7b6/0x1280 [ 151.723171][ T4272] ? bis_list+0x280/0x280 [ 151.727498][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 151.733389][ T4272] ? kcov_remote_start+0x4c7/0x7e0 [ 151.738506][ T4272] ? bt_warn+0x30/0x180 [ 151.742666][ T4272] ? hci_send_to_monitor+0x9c/0x4a0 [ 151.747867][ T4272] hci_rx_work+0x3eb/0xd40 [ 151.752285][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 151.757140][ T4272] ? process_one_work+0x7b0/0x1160 [ 151.762248][ T4272] process_one_work+0x8a2/0x1160 [ 151.767201][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 151.772834][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 151.777852][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 151.783390][ T4272] ? kthread_data+0x4b/0xc0 [ 151.787939][ T4272] worker_thread+0xaa2/0x1270 [ 151.792644][ T4272] kthread+0x29d/0x330 [ 151.796710][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 151.801730][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 151.806313][ T4272] ret_from_fork+0x1f/0x30 [ 151.810744][ T4272] [ 151.823623][ T4272] kobject_add_internal failed for hci3:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 151.837366][ T4272] Bluetooth: hci3: failed to register connection device [ 152.322160][ T5889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.490'. [ 152.409072][ T5895] sctp: [Deprecated]: syz.0.490 (pid 5895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.409072][ T5895] Use struct sctp_sack_info instead [ 152.813092][ T5909] cgroup: fork rejected by pids controller in /syz4 [ 153.370098][ T5912] netlink: 'syz.1.495': attribute type 21 has an invalid length. [ 153.390892][ T5912] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 153.499783][ T5912] netlink: 132 bytes leftover after parsing attributes in process `syz.1.495'. [ 153.653866][ T4272] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 153.662498][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:128' [ 153.674319][ T4272] CPU: 1 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 153.681914][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.692002][ T4272] Workqueue: hci4 hci_rx_work [ 153.696715][ T4272] Call Trace: [ 153.700009][ T4272] [ 153.702953][ T4272] dump_stack_lvl+0x188/0x24e [ 153.707661][ T4272] ? show_regs_print_info+0x12/0x12 [ 153.712888][ T4272] ? load_image+0x400/0x400 [ 153.717431][ T4272] sysfs_create_dir_ns+0x26a/0x290 [ 153.722584][ T4272] ? sysfs_warn_dup+0xa0/0xa0 [ 153.727298][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 153.732534][ T4272] kobject_add_internal+0x61c/0xcc0 [ 153.737762][ T4272] kobject_add+0x160/0x230 [ 153.742210][ T4272] ? kobject_init+0x1d0/0x1d0 [ 153.746917][ T4272] ? klist_children_get+0x50/0x50 [ 153.751946][ T4272] ? get_device_parent+0x121/0x3f0 [ 153.757065][ T4272] device_add+0x483/0xfb0 [ 153.761399][ T4272] ? kmem_cache_free+0xf7/0x290 [ 153.766252][ T4272] hci_conn_add_sysfs+0xd1/0x1e0 [ 153.771199][ T4272] le_conn_complete_evt+0x105f/0x1670 [ 153.776566][ T4272] ? le_conn_complete_evt+0xe6/0x1670 [ 153.781938][ T4272] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 153.788178][ T4272] ? bt_info+0x180/0x180 [ 153.792419][ T4272] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 153.798056][ T4272] ? skb_pull_data+0xf7/0x200 [ 153.802743][ T4272] hci_le_conn_complete_evt+0x183/0x440 [ 153.808290][ T4272] ? hci_remote_host_features_evt+0x270/0x270 [ 153.814362][ T4272] hci_event_packet+0x7b6/0x1280 [ 153.819309][ T4272] ? bis_list+0x280/0x280 [ 153.823634][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 153.829533][ T4272] ? kcov_remote_start+0x4c7/0x7e0 [ 153.834641][ T4272] ? bt_warn+0x30/0x180 [ 153.838795][ T4272] ? hci_send_to_monitor+0x9c/0x4a0 [ 153.843993][ T4272] hci_rx_work+0x3eb/0xd40 [ 153.848410][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 153.853349][ T4272] ? process_one_work+0x7b0/0x1160 [ 153.858459][ T4272] process_one_work+0x8a2/0x1160 [ 153.863409][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 153.869035][ T4272] ? _raw_spin_lock_irq+0x86/0xf0 [ 153.874060][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 153.879076][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 153.884616][ T4272] ? kthread_data+0x4b/0xc0 [ 153.889125][ T4272] worker_thread+0xaa2/0x1270 [ 153.893819][ T4272] kthread+0x29d/0x330 [ 153.897879][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 153.902893][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 153.907477][ T4272] ret_from_fork+0x1f/0x30 [ 153.911909][ T4272] [ 153.920232][ T4272] kobject_add_internal failed for hci4:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 153.924639][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 153.933732][ T4272] Bluetooth: hci4: failed to register connection device [ 155.341148][ T4272] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 155.448808][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.496537][ T4272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.505117][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.520139][ T4272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.528532][ T4272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.536022][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.973848][ T4272] Bluetooth: hci4: command 0x2016 tx timeout [ 156.092930][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 156.179018][ T5981] netlink: 'syz.0.512': attribute type 21 has an invalid length. [ 156.190843][ T5981] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 156.215826][ T5981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.512'. [ 156.317970][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.325249][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.333396][ T5967] device bridge_slave_0 entered promiscuous mode [ 156.363868][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.371354][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.410942][ T5967] device bridge_slave_1 entered promiscuous mode [ 156.501209][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.528161][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.536192][ T4280] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 156.544973][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:128' [ 156.554771][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 156.563125][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.573193][ T4280] Workqueue: hci1 hci_rx_work [ 156.577891][ T4280] Call Trace: [ 156.581182][ T4280] [ 156.584126][ T4280] dump_stack_lvl+0x188/0x24e [ 156.588839][ T4280] ? show_regs_print_info+0x12/0x12 [ 156.594069][ T4280] ? load_image+0x400/0x400 [ 156.598606][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 156.603739][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 156.608444][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 156.613662][ T4280] kobject_add_internal+0x61c/0xcc0 [ 156.618882][ T4280] kobject_add+0x160/0x230 [ 156.623321][ T4280] ? kobject_init+0x1d0/0x1d0 [ 156.628026][ T4280] ? klist_children_get+0x50/0x50 [ 156.633073][ T4280] ? get_device_parent+0x121/0x3f0 [ 156.638213][ T4280] device_add+0x483/0xfb0 [ 156.642552][ T4280] ? kmem_cache_free+0xf7/0x290 [ 156.647404][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 156.652346][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 156.657716][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 156.663087][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 156.669324][ T4280] ? bt_info+0x180/0x180 [ 156.673569][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 156.679209][ T4280] ? skb_pull_data+0xf7/0x200 [ 156.683896][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 156.689439][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 156.695510][ T4280] hci_event_packet+0x7b6/0x1280 [ 156.700500][ T4280] ? bis_list+0x280/0x280 [ 156.704830][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 156.710721][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 156.715831][ T4280] ? bt_warn+0x30/0x180 [ 156.719986][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 156.725793][ T4280] hci_rx_work+0x3eb/0xd40 [ 156.730209][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 156.735065][ T4280] ? process_one_work+0x7b0/0x1160 [ 156.740173][ T4280] process_one_work+0x8a2/0x1160 [ 156.745117][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 156.750741][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 156.755759][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 156.760777][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 156.766350][ T4280] ? kthread_data+0x4b/0xc0 [ 156.770879][ T4280] worker_thread+0xaa2/0x1270 [ 156.775599][ T4280] kthread+0x29d/0x330 [ 156.779674][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 156.784703][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 156.789294][ T4280] ret_from_fork+0x1f/0x30 [ 156.793726][ T4280] [ 156.797874][ T4280] kobject_add_internal failed for hci1:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 156.811173][ T4280] Bluetooth: hci1: failed to register connection device [ 156.825627][ T5967] team0: Port device team_slave_0 added [ 156.845310][ T5967] team0: Port device team_slave_1 added [ 156.915167][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.929875][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.028012][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.427188][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 157.585016][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 157.999687][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.008144][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.075413][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.196273][ T5967] device hsr_slave_0 entered promiscuous mode [ 158.225408][ T5967] device hsr_slave_1 entered promiscuous mode [ 158.250828][ T5967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.284164][ T5967] Cannot create hsr debugfs directory [ 158.853806][ T4272] Bluetooth: hci1: command 0x2016 tx timeout [ 158.974785][ T5967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.174200][ T6034] ref_ctr_offset mismatch. inode: 0x25b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 159.257010][ T5967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.466740][ T5967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.542946][ T6040] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.566783][ T6040] netlink: 1 bytes leftover after parsing attributes in process `syz.2.526'. [ 159.653773][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 159.683177][ T5967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.436182][ T6055] netlink: 'syz.3.531': attribute type 21 has an invalid length. [ 160.446345][ T6055] netlink: 'syz.3.531': attribute type 1 has an invalid length. [ 160.474366][ T6055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.531'. [ 160.496850][ T4280] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 160.504698][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 160.515581][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 160.523182][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.533275][ T4280] Workqueue: hci2 hci_rx_work [ 160.538016][ T4280] Call Trace: [ 160.541331][ T4280] [ 160.544282][ T4280] dump_stack_lvl+0x188/0x24e [ 160.549002][ T4280] ? show_regs_print_info+0x12/0x12 [ 160.554234][ T4280] ? load_image+0x400/0x400 [ 160.558798][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 160.563944][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 160.568649][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 160.573876][ T4280] kobject_add_internal+0x61c/0xcc0 [ 160.579121][ T4280] kobject_add+0x160/0x230 [ 160.583575][ T4280] ? kobject_init+0x1d0/0x1d0 [ 160.588289][ T4280] ? klist_children_get+0x50/0x50 [ 160.593328][ T4280] ? get_device_parent+0x121/0x3f0 [ 160.598468][ T4280] device_add+0x483/0xfb0 [ 160.602816][ T4280] ? kmem_cache_free+0xf7/0x290 [ 160.607703][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 160.612669][ T4280] le_conn_complete_evt+0x105f/0x1670 [ 160.618069][ T4280] ? le_conn_complete_evt+0xe6/0x1670 [ 160.623471][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 160.629733][ T4280] ? bt_info+0x180/0x180 [ 160.633995][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 160.639678][ T4280] ? skb_pull_data+0xf7/0x200 [ 160.644416][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 160.650012][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 160.656124][ T4280] hci_event_packet+0x7b6/0x1280 [ 160.661122][ T4280] ? bis_list+0x280/0x280 [ 160.665470][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 160.671394][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 160.676536][ T4280] ? bt_warn+0x30/0x180 [ 160.680714][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 160.685935][ T4280] hci_rx_work+0x3eb/0xd40 [ 160.690372][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 160.695258][ T4280] ? process_one_work+0x7b0/0x1160 [ 160.700382][ T4280] process_one_work+0x8a2/0x1160 [ 160.705372][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 160.711031][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 160.716067][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 160.721624][ T4280] ? kthread_data+0x4b/0xc0 [ 160.726162][ T4280] worker_thread+0xaa2/0x1270 [ 160.730929][ T4280] kthread+0x29d/0x330 [ 160.735009][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 160.740047][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 160.744653][ T4280] ret_from_fork+0x1f/0x30 [ 160.749122][ T4280] [ 160.755303][ T4280] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 160.768992][ T4280] Bluetooth: hci2: failed to register connection device [ 160.907093][ T5967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.746649][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 161.833892][ T5967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.854423][ T5967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.876417][ T5967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.996658][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.039705][ T6074] netlink: 64019 bytes leftover after parsing attributes in process `syz.0.534'. [ 162.098842][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.121146][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.145139][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.178775][ T6078] netlink: 60 bytes leftover after parsing attributes in process `syz.1.536'. [ 162.191266][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.205597][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.217001][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.224176][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.253189][ T6078] netlink: 60 bytes leftover after parsing attributes in process `syz.1.536'. [ 162.270335][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.280815][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.303136][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.316943][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.324210][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.338748][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.356870][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.366465][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.397099][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.433334][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.454920][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.491568][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.521463][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.561221][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.597541][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.628996][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.659955][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.855465][ T4280] Bluetooth: hci2: command 0x2016 tx timeout [ 163.219403][ T4272] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 163.227846][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 163.237515][ T4272] CPU: 0 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 163.245100][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.255195][ T4272] Workqueue: hci0 hci_rx_work [ 163.259924][ T4272] Call Trace: [ 163.263228][ T4272] [ 163.266191][ T4272] dump_stack_lvl+0x188/0x24e [ 163.270931][ T4272] ? show_regs_print_info+0x12/0x12 [ 163.276154][ T4272] ? load_image+0x400/0x400 [ 163.280670][ T4272] sysfs_create_dir_ns+0x26a/0x290 [ 163.285791][ T4272] ? sysfs_warn_dup+0xa0/0xa0 [ 163.290472][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 163.295687][ T4272] kobject_add_internal+0x61c/0xcc0 [ 163.300893][ T4272] kobject_add+0x160/0x230 [ 163.305311][ T4272] ? kobject_init+0x1d0/0x1d0 [ 163.309997][ T4272] ? klist_children_get+0x50/0x50 [ 163.315016][ T4272] ? get_device_parent+0x121/0x3f0 [ 163.320133][ T4272] device_add+0x483/0xfb0 [ 163.324468][ T4272] ? kmem_cache_free+0xf7/0x290 [ 163.329326][ T4272] hci_conn_add_sysfs+0xd1/0x1e0 [ 163.334266][ T4272] le_conn_complete_evt+0x105f/0x1670 [ 163.339647][ T4272] ? le_conn_complete_evt+0xe6/0x1670 [ 163.345021][ T4272] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 163.351263][ T4272] ? bt_info+0x180/0x180 [ 163.355506][ T4272] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 163.361137][ T4272] ? skb_pull_data+0xf7/0x200 [ 163.365823][ T4272] hci_le_conn_complete_evt+0x183/0x440 [ 163.371394][ T4272] ? hci_remote_host_features_evt+0x270/0x270 [ 163.377476][ T4272] hci_event_packet+0x7b6/0x1280 [ 163.382424][ T4272] ? bis_list+0x280/0x280 [ 163.386751][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 163.392640][ T4272] ? kcov_remote_start+0x4c7/0x7e0 [ 163.397748][ T4272] ? bt_warn+0x30/0x180 [ 163.401902][ T4272] ? hci_send_to_monitor+0x9c/0x4a0 [ 163.407101][ T4272] hci_rx_work+0x3eb/0xd40 [ 163.411541][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 163.416429][ T4272] ? process_one_work+0x7b0/0x1160 [ 163.421556][ T4272] process_one_work+0x8a2/0x1160 [ 163.426510][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 163.432148][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 163.437170][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 163.442714][ T4272] ? kthread_data+0x4b/0xc0 [ 163.447253][ T4272] worker_thread+0xaa2/0x1270 [ 163.451965][ T4272] kthread+0x29d/0x330 [ 163.456033][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 163.461059][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 163.465650][ T4272] ret_from_fork+0x1f/0x30 [ 163.470088][ T4272] [ 163.481298][ T4272] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 163.497221][ T4272] Bluetooth: hci0: failed to register connection device [ 163.553439][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.561188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.610602][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.719999][ T6115] netlink: 'syz.2.547': attribute type 21 has an invalid length. [ 163.735116][ T6115] netlink: 'syz.2.547': attribute type 1 has an invalid length. [ 163.754014][ T6115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.547'. [ 163.814380][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 164.148610][ T6124] device syzkaller0 entered promiscuous mode [ 165.573915][ T4272] Bluetooth: hci0: command 0x2016 tx timeout [ 166.396483][ T6136] IPv6: Can't replace route, no match found [ 166.402592][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.418848][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.452754][ T5967] device veth0_vlan entered promiscuous mode [ 166.502320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.517207][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.539442][ T5967] device veth1_vlan entered promiscuous mode [ 166.548907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.560605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.600831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.689917][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.707372][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.730562][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.758212][ T5967] device veth0_macvtap entered promiscuous mode [ 166.764664][ T4272] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 166.773456][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 166.783897][ T4272] CPU: 1 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 166.791479][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.801554][ T4272] Workqueue: hci2 hci_rx_work [ 166.806262][ T4272] Call Trace: [ 166.809554][ T4272] [ 166.812487][ T4272] dump_stack_lvl+0x188/0x24e [ 166.817179][ T4272] ? show_regs_print_info+0x12/0x12 [ 166.822376][ T4272] ? load_image+0x400/0x400 [ 166.826917][ T4272] sysfs_create_dir_ns+0x26a/0x290 [ 166.832056][ T4272] ? sysfs_warn_dup+0xa0/0xa0 [ 166.836754][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 166.841959][ T4272] kobject_add_internal+0x61c/0xcc0 [ 166.847186][ T4272] kobject_add+0x160/0x230 [ 166.851617][ T4272] ? kobject_init+0x1d0/0x1d0 [ 166.856308][ T4272] ? klist_children_get+0x50/0x50 [ 166.861330][ T4272] ? get_device_parent+0x121/0x3f0 [ 166.866453][ T4272] device_add+0x483/0xfb0 [ 166.870792][ T4272] ? kmem_cache_free+0xf7/0x290 [ 166.875657][ T4272] hci_conn_add_sysfs+0xd1/0x1e0 [ 166.880604][ T4272] le_conn_complete_evt+0x105f/0x1670 [ 166.885980][ T4272] ? le_conn_complete_evt+0xe6/0x1670 [ 166.891353][ T4272] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 166.897595][ T4272] ? bt_info+0x180/0x180 [ 166.901837][ T4272] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 166.907474][ T4272] ? skb_pull_data+0xf7/0x200 [ 166.912161][ T4272] hci_le_conn_complete_evt+0x183/0x440 [ 166.917710][ T4272] ? hci_remote_host_features_evt+0x270/0x270 [ 166.923777][ T4272] hci_event_packet+0x7b6/0x1280 [ 166.928720][ T4272] ? bis_list+0x280/0x280 [ 166.933043][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 166.938933][ T4272] ? kcov_remote_start+0x4c7/0x7e0 [ 166.944041][ T4272] ? bt_warn+0x30/0x180 [ 166.948202][ T4272] ? hci_send_to_monitor+0x9c/0x4a0 [ 166.953402][ T4272] hci_rx_work+0x3eb/0xd40 [ 166.957815][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 166.962666][ T4272] ? process_one_work+0x7b0/0x1160 [ 166.967780][ T4272] process_one_work+0x8a2/0x1160 [ 166.972732][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 166.978399][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 166.983428][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 166.988979][ T4272] ? kthread_data+0x4b/0xc0 [ 166.993501][ T4272] worker_thread+0xaa2/0x1270 [ 166.998207][ T4272] kthread+0x29d/0x330 [ 167.002273][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 167.007297][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 167.011924][ T4272] ret_from_fork+0x1f/0x30 [ 167.016351][ T4272] [ 167.022826][ T4272] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 167.036622][ T4272] Bluetooth: hci2: failed to register connection device [ 167.051659][ T5967] device veth1_macvtap entered promiscuous mode [ 167.098524][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.125773][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.139080][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.151220][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.166226][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.192923][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.210220][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.221192][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.238993][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.253364][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.271891][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.281949][ T6165] netlink: 'syz.3.562': attribute type 39 has an invalid length. [ 167.380014][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.409346][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.420627][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.449071][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.464653][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.483142][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.512425][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.549687][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.573218][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.613581][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.631038][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.642030][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.666742][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.692907][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.706765][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.750563][ T6169] netlink: 'syz.1.563': attribute type 21 has an invalid length. [ 167.760771][ T6169] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 167.820298][ T6169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.563'. [ 167.846693][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.856240][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.876766][ T5967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.887597][ T5967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.902547][ T5967] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.919698][ T5967] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.986580][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.000958][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.025359][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.094236][ T4272] Bluetooth: hci2: command 0x2016 tx timeout [ 169.104461][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.112409][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.185635][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.426595][ T6202] netlink: 132 bytes leftover after parsing attributes in process `syz.0.569'. [ 169.489727][ T6206] netlink: 'syz.0.569': attribute type 12 has an invalid length. [ 169.541034][ T6206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.569'. [ 169.630034][ T6210] netlink: 'syz.4.574': attribute type 2 has an invalid length. [ 169.768275][ T6210] device 0 entered promiscuous mode [ 170.077476][ T4272] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 170.085872][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:128' [ 170.095485][ T4272] CPU: 1 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 170.103052][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.113133][ T4272] Workqueue: hci2 hci_rx_work [ 170.117858][ T4272] Call Trace: [ 170.121154][ T4272] [ 170.124112][ T4272] dump_stack_lvl+0x188/0x24e [ 170.128824][ T4272] ? show_regs_print_info+0x12/0x12 [ 170.134054][ T4272] ? load_image+0x400/0x400 [ 170.138597][ T4272] sysfs_create_dir_ns+0x26a/0x290 [ 170.143744][ T4272] ? sysfs_warn_dup+0xa0/0xa0 [ 170.148454][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 170.153679][ T4272] kobject_add_internal+0x61c/0xcc0 [ 170.158905][ T4272] kobject_add+0x160/0x230 [ 170.163337][ T4272] ? kobject_init+0x1d0/0x1d0 [ 170.168033][ T4272] ? klist_children_get+0x50/0x50 [ 170.173053][ T4272] ? get_device_parent+0x121/0x3f0 [ 170.178168][ T4272] device_add+0x483/0xfb0 [ 170.182496][ T4272] ? kmem_cache_free+0xf7/0x290 [ 170.187351][ T4272] hci_conn_add_sysfs+0xd1/0x1e0 [ 170.192292][ T4272] le_conn_complete_evt+0x105f/0x1670 [ 170.197664][ T4272] ? le_conn_complete_evt+0xe6/0x1670 [ 170.203043][ T4272] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 170.209297][ T4272] ? bt_info+0x180/0x180 [ 170.213543][ T4272] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 170.219183][ T4272] ? skb_pull_data+0xf7/0x200 [ 170.223868][ T4272] hci_le_conn_complete_evt+0x183/0x440 [ 170.229417][ T4272] ? hci_remote_host_features_evt+0x270/0x270 [ 170.235485][ T4272] hci_event_packet+0x7b6/0x1280 [ 170.240434][ T4272] ? bis_list+0x280/0x280 [ 170.244760][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 170.250650][ T4272] ? kcov_remote_start+0x4c7/0x7e0 [ 170.255768][ T4272] ? bt_warn+0x30/0x180 [ 170.259923][ T4272] ? hci_send_to_monitor+0x9c/0x4a0 [ 170.265127][ T4272] hci_rx_work+0x3eb/0xd40 [ 170.269544][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 170.274396][ T4272] ? process_one_work+0x7b0/0x1160 [ 170.279503][ T4272] process_one_work+0x8a2/0x1160 [ 170.284448][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 170.290075][ T4272] ? _raw_spin_lock_irq+0x86/0xf0 [ 170.295096][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 170.300112][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 170.305680][ T4272] ? kthread_data+0x4b/0xc0 [ 170.310192][ T4272] worker_thread+0xaa2/0x1270 [ 170.314895][ T4272] kthread+0x29d/0x330 [ 170.318956][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 170.323976][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 170.328561][ T4272] ret_from_fork+0x1f/0x30 [ 170.332993][ T4272] [ 170.338497][ T4272] kobject_add_internal failed for hci2:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 170.351798][ T4272] Bluetooth: hci2: failed to register connection device [ 170.495926][ T6229] netlink: 'syz.2.579': attribute type 3 has an invalid length. [ 170.544021][ T6229] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.579'. [ 170.632503][ T6239] netlink: 'syz.1.581': attribute type 21 has an invalid length. [ 170.652349][ T6239] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 170.703629][ T6239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.581'. [ 170.775115][ T6242] netlink: 'syz.3.582': attribute type 41 has an invalid length. [ 170.838789][ T6242] netlink: 'syz.3.582': attribute type 41 has an invalid length. [ 172.165126][ T4272] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 172.373702][ T4272] Bluetooth: hci2: command 0x2016 tx timeout [ 173.158077][ T6281] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.594'. [ 173.174629][ T6281] net_ratelimit: 12 callbacks suppressed [ 173.174651][ T6281] openvswitch: netlink: Flow actions attr not present in new flow. [ 173.310134][ T6285] netlink: 'syz.2.595': attribute type 21 has an invalid length. [ 173.357472][ T6285] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 173.368974][ T6285] netlink: 132 bytes leftover after parsing attributes in process `syz.2.595'. [ 173.530816][ T4272] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 173.538763][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:128' [ 173.548531][ T4272] CPU: 1 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 173.556113][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.566207][ T4272] Workqueue: hci0 hci_rx_work [ 173.570948][ T4272] Call Trace: [ 173.574241][ T4272] [ 173.577185][ T4272] dump_stack_lvl+0x188/0x24e [ 173.581895][ T4272] ? show_regs_print_info+0x12/0x12 [ 173.587130][ T4272] ? load_image+0x400/0x400 [ 173.591686][ T4272] sysfs_create_dir_ns+0x26a/0x290 [ 173.596868][ T4272] ? sysfs_warn_dup+0xa0/0xa0 [ 173.601567][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 173.606790][ T4272] kobject_add_internal+0x61c/0xcc0 [ 173.612018][ T4272] kobject_add+0x160/0x230 [ 173.616587][ T4272] ? kobject_init+0x1d0/0x1d0 [ 173.621314][ T4272] ? klist_children_get+0x50/0x50 [ 173.626366][ T4272] ? get_device_parent+0x121/0x3f0 [ 173.631510][ T4272] device_add+0x483/0xfb0 [ 173.635868][ T4272] ? kmem_cache_free+0xf7/0x290 [ 173.640745][ T4272] hci_conn_add_sysfs+0xd1/0x1e0 [ 173.645712][ T4272] le_conn_complete_evt+0x105f/0x1670 [ 173.651110][ T4272] ? le_conn_complete_evt+0xe6/0x1670 [ 173.656514][ T4272] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 173.662783][ T4272] ? bt_info+0x180/0x180 [ 173.667049][ T4272] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 173.672711][ T4272] ? skb_pull_data+0xf7/0x200 [ 173.677433][ T4272] hci_le_conn_complete_evt+0x183/0x440 [ 173.683016][ T4272] ? hci_remote_host_features_evt+0x270/0x270 [ 173.689123][ T4272] hci_event_packet+0x7b6/0x1280 [ 173.694103][ T4272] ? bis_list+0x280/0x280 [ 173.698462][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 173.704381][ T4272] ? kcov_remote_start+0x4c7/0x7e0 [ 173.709516][ T4272] ? bt_warn+0x30/0x180 [ 173.713709][ T4272] ? hci_send_to_monitor+0x9c/0x4a0 [ 173.718933][ T4272] hci_rx_work+0x3eb/0xd40 [ 173.723356][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 173.728230][ T4272] ? process_one_work+0x7b0/0x1160 [ 173.733350][ T4272] process_one_work+0x8a2/0x1160 [ 173.738305][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 173.743936][ T4272] ? _raw_spin_lock_irq+0x86/0xf0 [ 173.748962][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 173.753987][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 173.759552][ T4272] ? kthread_data+0x4b/0xc0 [ 173.764077][ T4272] worker_thread+0xaa2/0x1270 [ 173.768793][ T4272] kthread+0x29d/0x330 [ 173.772863][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 173.777900][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 173.782505][ T4272] ret_from_fork+0x1f/0x30 [ 173.786942][ T4272] [ 173.794976][ T4272] kobject_add_internal failed for hci0:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.808365][ T4272] Bluetooth: hci0: failed to register connection device [ 175.734356][ T6301] netlink: 830 bytes leftover after parsing attributes in process `syz.4.598'. [ 175.893814][ T4280] Bluetooth: hci0: command 0x2016 tx timeout [ 176.089289][ T6334] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.606'. [ 176.139319][ T6335] netlink: 10 bytes leftover after parsing attributes in process `syz.1.607'. [ 176.182497][ T6339] netlink: 'syz.4.606': attribute type 10 has an invalid length. [ 176.273065][ T6339] team0: Device vxcan1 is of different type [ 176.384663][ T6328] netlink: 'syz.2.604': attribute type 2 has an invalid length. [ 176.484253][ T6328] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.604'. [ 177.116757][ T6346] netlink: 'syz.1.610': attribute type 21 has an invalid length. [ 177.153791][ T6346] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 177.161599][ T6346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.610'. [ 177.258448][ T4272] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 177.266921][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:128' [ 177.284142][ T4272] CPU: 0 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 177.291731][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.301809][ T4272] Workqueue: hci4 hci_rx_work [ 177.306528][ T4272] Call Trace: [ 177.309820][ T4272] [ 177.312763][ T4272] dump_stack_lvl+0x188/0x24e [ 177.317644][ T4272] ? show_regs_print_info+0x12/0x12 [ 177.323139][ T4272] ? load_image+0x400/0x400 [ 177.327856][ T4272] sysfs_create_dir_ns+0x26a/0x290 [ 177.333053][ T4272] ? sysfs_warn_dup+0xa0/0xa0 [ 177.337766][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 177.342995][ T4272] kobject_add_internal+0x61c/0xcc0 [ 177.348236][ T4272] kobject_add+0x160/0x230 [ 177.352689][ T4272] ? kobject_init+0x1d0/0x1d0 [ 177.357501][ T4272] ? klist_children_get+0x50/0x50 [ 177.362563][ T4272] ? get_device_parent+0x121/0x3f0 [ 177.367717][ T4272] device_add+0x483/0xfb0 [ 177.372084][ T4272] ? kmem_cache_free+0xf7/0x290 [ 177.376988][ T4272] hci_conn_add_sysfs+0xd1/0x1e0 [ 177.382057][ T4272] le_conn_complete_evt+0x105f/0x1670 [ 177.387467][ T4272] ? le_conn_complete_evt+0xe6/0x1670 [ 177.392882][ T4272] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 177.399173][ T4272] ? bt_info+0x180/0x180 [ 177.403457][ T4272] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 177.409127][ T4272] ? skb_pull_data+0xf7/0x200 [ 177.413854][ T4272] hci_le_conn_complete_evt+0x183/0x440 [ 177.419441][ T4272] ? hci_remote_host_features_evt+0x270/0x270 [ 177.425554][ T4272] hci_event_packet+0x7b6/0x1280 [ 177.430539][ T4272] ? bis_list+0x280/0x280 [ 177.435015][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 177.440939][ T4272] ? kcov_remote_start+0x4c7/0x7e0 [ 177.446083][ T4272] ? bt_warn+0x30/0x180 [ 177.450300][ T4272] ? hci_send_to_monitor+0x9c/0x4a0 [ 177.455543][ T4272] hci_rx_work+0x3eb/0xd40 [ 177.460008][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 177.464895][ T4272] ? process_one_work+0x7b0/0x1160 [ 177.470035][ T4272] process_one_work+0x8a2/0x1160 [ 177.475038][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 177.480704][ T4272] ? _raw_spin_lock_irq+0x86/0xf0 [ 177.485765][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 177.490823][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 177.496488][ T4272] ? kthread_data+0x4b/0xc0 [ 177.501037][ T4272] worker_thread+0xaa2/0x1270 [ 177.505793][ T4272] kthread+0x29d/0x330 [ 177.509904][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 177.514964][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 177.519592][ T4272] ret_from_fork+0x1f/0x30 [ 177.524056][ T4272] [ 177.529423][ T4272] kobject_add_internal failed for hci4:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.543011][ T4272] Bluetooth: hci4: failed to register connection device [ 178.788225][ T4280] ------------[ cut here ]------------ [ 178.794080][ T4280] WARNING: CPU: 1 PID: 4280 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 178.804047][ T4280] Modules linked in: [ 178.807984][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 178.815620][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.825913][ T4280] Workqueue: hci2 hci_conn_timeout [ 178.831089][ T4280] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 178.836832][ T4280] Code: 1f 8e e8 04 5a 9f f8 48 8b 35 d5 c6 eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 46 20 f8 e8 11 6e 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 178.856809][ T4280] RSP: 0018:ffffc90004367c08 EFLAGS: 00010293 [ 178.862920][ T4280] RAX: ffffffff8934059f RBX: ffff88801fb4a330 RCX: ffff88802e900000 [ 178.871018][ T4280] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 178.879092][ T4280] RBP: 00000000ffffffff R08: ffff88801fb4a013 R09: 1ffff11003f69402 [ 178.887152][ T4280] R10: dffffc0000000000 R11: ffffed1003f69403 R12: dffffc0000000000 [ 178.895220][ T4280] R13: dffffc0000000000 R14: ffff88801fb4a000 R15: ffff88801fb4a010 [ 178.903226][ T4280] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 178.912256][ T4280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.918932][ T4280] CR2: 0000200000160000 CR3: 000000002982b000 CR4: 00000000003506e0 [ 178.926991][ T4280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.935026][ T4280] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 178.943024][ T4280] Call Trace: [ 178.946381][ T4280] [ 178.949336][ T4280] ? process_one_work+0x7b0/0x1160 [ 178.954527][ T4280] process_one_work+0x8a2/0x1160 [ 178.959507][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 178.965228][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 178.970279][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 178.975394][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 178.980978][ T4280] ? kthread_data+0x4b/0xc0 [ 178.985583][ T4280] worker_thread+0xaa2/0x1270 [ 178.990323][ T4280] kthread+0x29d/0x330 [ 178.994489][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 178.999565][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 179.004254][ T4280] ret_from_fork+0x1f/0x30 [ 179.008725][ T4280] [ 179.011771][ T4280] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.019154][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 179.027029][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.037106][ T4280] Workqueue: hci2 hci_conn_timeout [ 179.042238][ T4280] Call Trace: [ 179.045516][ T4280] [ 179.048448][ T4280] dump_stack_lvl+0x188/0x24e [ 179.053138][ T4280] ? memcpy+0x3c/0x60 [ 179.057126][ T4280] ? show_regs_print_info+0x12/0x12 [ 179.062344][ T4280] ? load_image+0x400/0x400 [ 179.066863][ T4280] panic+0x2e5/0x730 [ 179.070763][ T4280] ? bpf_jit_dump+0xd0/0xd0 [ 179.075266][ T4280] ? ret_from_fork+0x1f/0x30 [ 179.079880][ T4280] __warn+0x2f8/0x4f0 [ 179.083868][ T4280] ? hci_conn_timeout+0x24f/0x450 [ 179.088900][ T4280] ? hci_conn_timeout+0x24f/0x450 [ 179.093935][ T4280] report_bug+0x2ba/0x4f0 [ 179.098263][ T4280] ? hci_conn_timeout+0x24f/0x450 [ 179.103285][ T4280] handle_bug+0x3a/0x70 [ 179.107438][ T4280] exc_invalid_op+0x16/0x40 [ 179.111940][ T4280] asm_exc_invalid_op+0x16/0x20 [ 179.116787][ T4280] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 179.122462][ T4280] Code: 1f 8e e8 04 5a 9f f8 48 8b 35 d5 c6 eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 46 20 f8 e8 11 6e 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 179.142061][ T4280] RSP: 0018:ffffc90004367c08 EFLAGS: 00010293 [ 179.148121][ T4280] RAX: ffffffff8934059f RBX: ffff88801fb4a330 RCX: ffff88802e900000 [ 179.156089][ T4280] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 179.164048][ T4280] RBP: 00000000ffffffff R08: ffff88801fb4a013 R09: 1ffff11003f69402 [ 179.172010][ T4280] R10: dffffc0000000000 R11: ffffed1003f69403 R12: dffffc0000000000 [ 179.179981][ T4280] R13: dffffc0000000000 R14: ffff88801fb4a000 R15: ffff88801fb4a010 [ 179.187954][ T4280] ? hci_conn_timeout+0x24f/0x450 [ 179.192979][ T4280] ? hci_conn_timeout+0x24f/0x450 [ 179.197996][ T4280] ? process_one_work+0x7b0/0x1160 [ 179.203108][ T4280] process_one_work+0x8a2/0x1160 [ 179.208058][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 179.213681][ T4280] ? _raw_spin_lock_irq+0x86/0xf0 [ 179.218696][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 179.223709][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 179.229250][ T4280] ? kthread_data+0x4b/0xc0 [ 179.233754][ T4280] worker_thread+0xaa2/0x1270 [ 179.238453][ T4280] kthread+0x29d/0x330 [ 179.242515][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 179.247621][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 179.252200][ T4280] ret_from_fork+0x1f/0x30 [ 179.256624][ T4280] [ 179.259755][ T4280] Kernel Offset: disabled [ 179.264119][ T4280] Rebooting in 86400 seconds..