last executing test programs:

18.494475091s ago: executing program 1 (id=3889):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x40}, 0x20002880)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b62, &(0x7f0000000200)=[{&(0x7f0000000040)="e03f030033000b35d25a80000a000200053582c137153e37000c0680058802000300"/46, 0x33fe0}, {&(0x7f0000000180)="6207322d369385a5d8f1146dbb143947c6dc10af03548cc906e40481709052b3dbd4c85aee496caeb30b2e19e75b8b3fb9881b19cdd9bc9dffcb8292e9979b52985b8053b33effe6cb36f1d2f9b081742918bfb9e54c92be007458b5"}], 0x1}, 0x8000) (fail_nth: 2)

18.383859754s ago: executing program 3 (id=3890):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @multicast1}, 0x7, 0x3, 0xffff, 0x1}}, 0x80, 0x0}, 0x4048850)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x481, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000006c0)=r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f7", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0x11, 0x0, 0x98)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x4, 0xfc, 0x1, 0x0, 0x100000000, 0xc0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x5, 0x800}, 0x10281, 0x4, 0x8000, 0x5, 0x3, 0x9, 0x1d37, 0x0, 0x9, 0x0, 0x7fff}, 0x0, 0xc, r0, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)

17.935034239s ago: executing program 1 (id=3894):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (fail_nth: 12)

17.933899289s ago: executing program 3 (id=3895):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00f28f0000000000000000000700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60b5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7fff}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, 0x0, 0x0)
r5 = socket$kcm(0xf, 0x3, 0x2)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000300)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712b3ef00000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452298fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0e25aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4710219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96ab41a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xab}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x800)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000001c0)={r6})
r7 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r8, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa81, 0x0, 0x4})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x40}, 0x8)
bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc)

17.850414782s ago: executing program 2 (id=3896):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r1}, 0xc)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='}^#:\x00')

17.685315167s ago: executing program 2 (id=3897):
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'netdevsim0\x00', @random="7157ffe02ef2"})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0))
r1 = socket$kcm(0x11, 0x2, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8919, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0xc4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xb)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a)
ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000001c0))
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030048000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

17.24603999s ago: executing program 2 (id=3898):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x22}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010218"], &(0x7f00000014c0)=""/2, 0x6b, 0x2, 0x1}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x2000}, 0x1}}, 0x80, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0)

17.244157741s ago: executing program 1 (id=3906):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)=@o_path={&(0x7f0000001140)='./file0\x00', 0x0, 0x4000}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001480)=[0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000001600)=[0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000001540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001580), &(0x7f00000015c0), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000001a80)}}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x3, '\x00', r1, r2, 0x4, 0x0, 0x1}, 0x50)
sendmsg(0xffffffffffffffff, &(0x7f0000006080)={&(0x7f00000010c0)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}, 0x4)
r3 = openat$cgroup_procs(r2, &(0x7f0000001800)='tasks\x00', 0x2, 0x0)
r4 = syz_clone(0x0, &(0x7f0000001840)="0c3e0512a2b45192249a1cc9186bbfe69149dc061cd4744bef0645d50751f869a2bcf5858523e3141a1eb36b1fdeb4cde7c0f99731264bb8886532b2f7ac7598d4eac5414f463f1af7cc79789813f1a309e795b54f8e9424bc242e17df260900b85b85e33b64e9208911af4449ef1755fceb3aad10ca44048e859f342168917c808c4979a70b7f13787e6fbf0ab948ded026b2baffb886d85510dbec796994ad1a110470a2ee4eca56a6c57b10f364b19e651db96c39d5a485cb", 0xba, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)="40dad13e67d0c6de35ae3b98405d70cc0ac2e5bbf20551350d1b7a01189b5589c520f13590094f14c0132ab5f797cdf3e338dbb70d0a243d890e7a70e7114eff289e530e33066cced5c867dba0f663a7caa42f0f8e51f0d13d73de73aba469b75500e9d5aaa23ed3cf49c16b05c9a6237d3d876b8ec65e4723e2915a1b627239426f5ddc8fe701c8cb6922a7daedd6f95cbb826054d91d187e7c50d7b81f400e5713359a426adfeb53bb5d2ff402e8")
write$cgroup_pid(r3, &(0x7f0000001a40)=r4, 0x12)
r5 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)

17.055220447s ago: executing program 1 (id=3899):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x1, 0x0, 0xc}], 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1)

16.95072893s ago: executing program 3 (id=3901):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22950dd1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="a096", 0x2}], 0x1}, 0x24000008)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x40000000)
setsockopt$sock_attach_bpf(r3, 0x84, 0x14, &(0x7f0000000000)=r5, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x1, 0x2, 0x0, 0x1, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x6d, &(0x7f0000000100)=""/109, 0x40f00, 0x40, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000000240)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x80000001, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x6, 0x5}, {0x0, 0x4, 0xa, 0x3}], 0x10, 0x7ff}, 0x94)

16.94976234s ago: executing program 2 (id=3902):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

16.886086962s ago: executing program 0 (id=3903):
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x11, 0xa, 0x300)
ioctl$TUNGETVNETLE(r2, 0x8955, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r3 = socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)
r4 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x8, 0xe, 0x36, 0x7, 0x0, 0x0, 0x80080, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x9, 0x4, 0x6, 0x7779, 0x8, 0xb, 0x0, 0xd1, 0x0, 0x8}, 0xffffffffffffffff, 0xc, r4, 0x2)

16.835297274s ago: executing program 2 (id=3904):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @multicast1}, 0x7, 0x3, 0xffff, 0x1}}, 0x80, 0x0}, 0x4048850)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x481, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000006c0)=r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f7", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087"], 0xfe33)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0x11, 0x0, 0x98)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x4, 0xfc, 0x1, 0x0, 0x100000000, 0xc0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x5, 0x800}, 0x10281, 0x4, 0x8000, 0x5, 0x3, 0x9, 0x1d37, 0x0, 0x9, 0x0, 0x7fff}, 0x0, 0xc, r0, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)

16.822109695s ago: executing program 1 (id=3905):
socket$kcm(0x10, 0x2, 0x4)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x8020)
write$cgroup_subtree(r3, 0x0, 0xfdef)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r4, r5, 0x10, 0x0, 0x0, @void, @value=r3}, 0x20)
r6 = socket$kcm(0xa, 0x1, 0x106)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x13, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x78, &(0x7f0000000500)=""/120, 0x41100, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000580)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x0, 0x4, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3, r3], 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r7, 0x0, 0x1000, 0x67, &(0x7f00000007c0)="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", &(0x7f00000017c0)=""/103, 0x6, 0x0, 0x5d, 0xe0, &(0x7f0000001840)="17db00e68527eec03b6d4c4113a458160758451e9038b8bf39d557d162cc46a18edeb5488425902552f9cd06cf2f420109a6376940f016646453ea896f86082424120d1a1f89fd1bdf3b7cef38b128a230aded4e307b19b6ee4fd52da5", &(0x7f00000018c0)="e9a6f1156bb6575c02c1ba2e09ea8033e807edeb01804160bb216b3a02866f8f4a8056aa66164840b74ab19dd5212811f68ea2d8caeb192252bfb9b706389250cba5d6f607a931b5ee21e008b709692589efdb1a5a834cf5f12f22ec67d99ec0eee352fcb85d2cd0a9c6c58cbf0f058ad346f181676a5fcb219618a386859dbb33a3f13b24d748a8892d9275903e20a8dc60fc317cf300b134106bbc41fc4c67e7f5508f8f947a166f1cd9e87efecb1182461ae0e8010573b8dda4b3d71fc60ba25327ecb91a6060f41373931807158669ae4d0c0b572846cc42c808cd023fe1", 0x4, 0x0, 0x3}, 0x50)
sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x20000010)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @remote, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)

16.718549957s ago: executing program 2 (id=3907):
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'netdevsim0\x00', @random="7157ffe02ef2"})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0))
r1 = socket$kcm(0x11, 0x2, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8919, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0xc4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xb)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a)
ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000001c0))
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

16.708663488s ago: executing program 1 (id=3908):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xf}, 0x21, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f00000001c0)="8397b6ed4d77d50767e86d0df2e06c2817f2611506111aa5fe1a14b55889a1f32c", &(0x7f0000000240)=""/81, &(0x7f0000000340)="503c7bfc2b38d1dada22b6ccc2c38e05fffeff69f5b876ac10ed89aa76c8be39f5", &(0x7f00000005c0)="b8c654449801b0d4e5fd95ab37f9253f75df8ae5b4f52bfecf4bfedc050c33cd8c95cc0c68cf4be104728d2b2dde975ee9f462d501adb71ec84993c66023c581cc202d7c398e061654ae2226f0cd29b8c03770ea8b95b3f3b2b12f87d95be00f83ead750ce1b2cad7014df72bb48c171dffc7b7200", 0x5, r0}, 0x38)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
close(0x3)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))

16.63522781s ago: executing program 0 (id=3909):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000340000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r3, &(0x7f00000001c0), 0x0}, 0x20)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
close(r7)
recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000340000000400000002"], 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r3, &(0x7f00000001c0), 0x0}, 0x20) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
close(r7) (async)
recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async)

16.33174431s ago: executing program 0 (id=3910):
socket$kcm(0x2b, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, 0x0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r6, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0)
close(r7)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000002c0)='syzkaller\x00')
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, 0x0, 0x0}, 0x20)
socket$kcm(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r9 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

16.034837419s ago: executing program 3 (id=3911):
syz_clone(0x80802000, &(0x7f0000000100)="537a52d2fa83a93cee938e2f49c77e8c17c2376666f488e52aa433ececa387acc9cc06c19cc4c952e3516f60396299bfc2cb5cc52c817a068a3acbcf26951b0fefbb65c2940cd664c01caefd8e5a2fcbef4bc4ff18f11a71f71b31f41165bc70446a29afe453290041d1327275990e8bdf790e25b4acb7f2345eaab75ca4e7560ba0f2951b298a208215780079d25a11e84a2d675113f30298b074d263676e3f7178186f1711", 0xa6, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000340)="fa97b22d1266cc22802a2ff96ba352a1e6b928f3ade4979f072067834c10fde30bbf51135991f5a4a9b13a6320a6577693faed1514338ce0c3c7091c1c00a979e74c3187603283622b98962cfee19b338818050d9dcefbc1ef895a66aa9d7be3b9f9f1d9d777ff1eda3d12403bf9b31897cc3974ed09fd2ae1580639f5010287ce26cc53205e8a62f59c9aabf116b4dbb69adff458ea8cddc2f81851b4a7a3a065d6ed252598388b0a930b1b245013d8b959e0f1bfc52876449f75c6242ac07947e72fe029128ed974a318f37eae12")
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x1, r1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x7, 0xbf, 0x0, 0x0, 0x0, 0x10088, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x76, 0xc}, 0x88040, 0xca, 0x0, 0x0, 0x0, 0x3ffffc, 0x0, 0x0, 0xe, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r8, 0x0)
recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYBLOB="3eca", @ANYRES8=r9], 0x13)
bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r4}, 0x8)
setsockopt$sock_attach_bpf(r0, 0x107, 0xe, &(0x7f0000000000)=r4, 0x1)

15.539111655s ago: executing program 3 (id=3912):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x22}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010218"], &(0x7f00000014c0)=""/2, 0x6b, 0x2, 0x1}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x2000}, 0x1}}, 0x80, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0)

15.318271332s ago: executing program 0 (id=3913):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9376, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0)

15.205392836s ago: executing program 3 (id=3914):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f7", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a5000000000000184900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4, r0}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff})
sendmsg$sock(r5, &(0x7f0000000340)={&(0x7f0000000040)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)}, {&(0x7f0000000280)="16bc5b4945bebaa89837220e06f150b9442fe3818ed942b22a84fc095f82977316dfa29289edfaf411433996cefa0f478f60ab090092eafab525f27fec849d61b2e91664f76d7b76a36226efae682d3863275a71e9f78fb30b61f8b9e1bb4134b5da0446838580cd31", 0x69}], 0x2}, 0x40081)
socketpair(0x8, 0x8, 0x2, &(0x7f0000000240))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x80008, 0x4a, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a)

15.203047056s ago: executing program 0 (id=3915):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x1, 0x0, 0xc}], 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1)

15.0676132s ago: executing program 0 (id=3916):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @multicast1}, 0x7, 0x3, 0xffff, 0x1}}, 0x80, 0x0}, 0x4048850)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x481, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000006c0)=r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f7", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087"], 0xfe33)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0x11, 0x0, 0x98)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x4, 0xfc, 0x1, 0x0, 0x100000000, 0xc0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x5, 0x800}, 0x10281, 0x4, 0x8000, 0x5, 0x3, 0x9, 0x1d37, 0x0, 0x9, 0x0, 0x7fff}, 0x0, 0xc, r0, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)

1.099941716s ago: executing program 32 (id=3908):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xf}, 0x21, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f00000001c0)="8397b6ed4d77d50767e86d0df2e06c2817f2611506111aa5fe1a14b55889a1f32c", &(0x7f0000000240)=""/81, &(0x7f0000000340)="503c7bfc2b38d1dada22b6ccc2c38e05fffeff69f5b876ac10ed89aa76c8be39f5", &(0x7f00000005c0)="b8c654449801b0d4e5fd95ab37f9253f75df8ae5b4f52bfecf4bfedc050c33cd8c95cc0c68cf4be104728d2b2dde975ee9f462d501adb71ec84993c66023c581cc202d7c398e061654ae2226f0cd29b8c03770ea8b95b3f3b2b12f87d95be00f83ead750ce1b2cad7014df72bb48c171dffc7b7200", 0x5, r0}, 0x38)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
close(0x3)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))

1.055263687s ago: executing program 33 (id=3907):
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'netdevsim0\x00', @random="7157ffe02ef2"})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0))
r1 = socket$kcm(0x11, 0x2, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8919, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0xc4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xb)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a)
ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000001c0))
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

31.200629ms ago: executing program 34 (id=3916):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @multicast1}, 0x7, 0x3, 0xffff, 0x1}}, 0x80, 0x0}, 0x4048850)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x481, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000006c0)=r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f7", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087"], 0xfe33)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0x11, 0x0, 0x98)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x4, 0xfc, 0x1, 0x0, 0x100000000, 0xc0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x5, 0x800}, 0x10281, 0x4, 0x8000, 0x5, 0x3, 0x9, 0x1d37, 0x0, 0x9, 0x0, 0x7fff}, 0x0, 0xc, r0, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)

0s ago: executing program 35 (id=3914):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f7", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a5000000000000184900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4, r0}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff})
sendmsg$sock(r5, &(0x7f0000000340)={&(0x7f0000000040)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)}, {&(0x7f0000000280)="16bc5b4945bebaa89837220e06f150b9442fe3818ed942b22a84fc095f82977316dfa29289edfaf411433996cefa0f478f60ab090092eafab525f27fec849d61b2e91664f76d7b76a36226efae682d3863275a71e9f78fb30b61f8b9e1bb4134b5da0446838580cd31", 0x69}], 0x2}, 0x40081)
socketpair(0x8, 0x8, 0x2, &(0x7f0000000240))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x80008, 0x4a, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a)

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.0.3153'.
[  487.020928][T14221] netlink: 'syz.3.3152': attribute type 2 has an invalid length.
[  487.029129][T14221] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3152'.
[  487.209011][T14238] tap0: tun_chr_ioctl cmd 1074025677
[  487.215761][T14238] tap0: linktype set to 778
[  487.221958][T14241] netlink: 'syz.1.3166': attribute type 46 has an invalid length.
[  487.232249][T14241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3166'.
[  487.245375][T14241] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3166'.
[  487.686314][T14238] tap0: tun_chr_ioctl cmd 2147767511
[  487.706171][T14248] FAULT_INJECTION: forcing a failure.
[  487.706171][T14248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  487.735082][T14248] CPU: 1 PID: 14248 Comm: syz.2.3159 Not tainted syzkaller #0
[  487.742754][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  487.752820][T14248] Call Trace:
[  487.756103][T14248]  <TASK>
[  487.759026][T14248]  dump_stack_lvl+0x18c/0x250
[  487.763709][T14248]  ? show_regs_print_info+0x20/0x20
[  487.768907][T14248]  ? load_image+0x420/0x420
[  487.773404][T14248]  ? __might_fault+0xaa/0x120
[  487.778076][T14248]  ? __lock_acquire+0x7d40/0x7d40
[  487.783099][T14248]  should_fail_ex+0x39d/0x4d0
[  487.787782][T14248]  _copy_from_user+0x2f/0xe0
[  487.792368][T14248]  kstrtouint_from_user+0xde/0x170
[  487.797480][T14248]  ? kstrtol_from_user+0x190/0x190
[  487.802597][T14248]  proc_fail_nth_write+0x8f/0x250
[  487.807624][T14248]  ? proc_fail_nth_read+0x260/0x260
[  487.812832][T14248]  ? proc_fail_nth_read+0x260/0x260
[  487.818025][T14248]  vfs_write+0x296/0x990
[  487.822269][T14248]  ? file_end_write+0x250/0x250
[  487.827118][T14248]  ? __fget_files+0x28/0x4b0
[  487.831704][T14248]  ? __fget_files+0x28/0x4b0
[  487.836289][T14248]  ? __fget_files+0x43d/0x4b0
[  487.840968][T14248]  ? __fdget_pos+0x2a3/0x330
[  487.845554][T14248]  ? ksys_write+0x75/0x260
[  487.849971][T14248]  ksys_write+0x150/0x260
[  487.854299][T14248]  ? __ia32_sys_read+0x90/0x90
[  487.859062][T14248]  ? lockdep_hardirqs_on+0x98/0x150
[  487.864258][T14248]  do_syscall_64+0x55/0xb0
[  487.868665][T14248]  ? clear_bhb_loop+0x40/0x90
[  487.873374][T14248]  ? clear_bhb_loop+0x40/0x90
[  487.878040][T14248]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  487.883933][T14248] RIP: 0033:0x7fb098b5d68e
[  487.888339][T14248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  487.907938][T14248] RSP: 002b:00007fb099abbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  487.916344][T14248] RAX: ffffffffffffffda RBX: 00007fb099abc6c0 RCX: 00007fb098b5d68e
[  487.924306][T14248] RDX: 0000000000000001 RSI: 00007fb099abc0a0 RDI: 0000000000000004
[  487.932271][T14248] RBP: 00007fb099abc090 R08: 0000000000000000 R09: 0000000000000000
[  487.940232][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.948195][T14248] R13: 00007fb098e16038 R14: 00007fb098e15fa0 R15: 00007ffcc6763258
[  487.956170][T14248]  </TASK>
[  488.011281][T14250] FAULT_INJECTION: forcing a failure.
[  488.011281][T14250] name failslab, interval 1, probability 0, space 0, times 0
[  488.026539][T14250] CPU: 0 PID: 14250 Comm: syz.3.3160 Not tainted syzkaller #0
[  488.034027][T14250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  488.044095][T14250] Call Trace:
[  488.047390][T14250]  <TASK>
[  488.050333][T14250]  dump_stack_lvl+0x18c/0x250
[  488.055028][T14250]  ? sctp_sendmsg+0x15d2/0x2910
[  488.060001][T14250]  ? ___sys_sendmsg+0x2a6/0x360
[  488.064875][T14250]  ? show_regs_print_info+0x20/0x20
[  488.070091][T14250]  ? load_image+0x420/0x420
[  488.074624][T14250]  should_fail_ex+0x39d/0x4d0
[  488.079329][T14250]  should_failslab+0x9/0x20
[  488.083856][T14250]  slab_pre_alloc_hook+0x59/0x310
[  488.088905][T14250]  ? sctp_add_bind_addr+0x8c/0x360
[  488.094037][T14250]  __kmem_cache_alloc_node+0x53/0x250
[  488.099450][T14250]  ? sctp_add_bind_addr+0x8c/0x360
[  488.104554][T14250]  kmalloc_trace+0x2a/0xe0
[  488.108984][T14250]  sctp_add_bind_addr+0x8c/0x360
[  488.113912][T14250]  sctp_copy_local_addr_list+0x315/0x4f0
[  488.119617][T14250]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  488.125333][T14250]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  488.131388][T14250]  ? sctp_v4_is_any+0x35/0x60
[  488.136068][T14250]  ? sctp_copy_one_addr+0x8c/0x350
[  488.141209][T14250]  sctp_bind_addr_copy+0xb3/0x3c0
[  488.146236][T14250]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  488.152586][T14250]  sctp_connect_new_asoc+0x2f9/0x6a0
[  488.157899][T14250]  ? __sctp_connect+0xd80/0xd80
[  488.159432][T14255] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  488.162763][T14250]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  488.162824][T14250]  ? security_sctp_bind_connect+0x89/0xb0
[  488.162850][T14250]  sctp_sendmsg+0x15d2/0x2910
[  488.194159][T14250]  ? sctp_getsockopt+0xb60/0xb60
[  488.199096][T14250]  ? aa_sk_perm+0x83c/0x970
[  488.203616][T14250]  ? aa_af_perm+0x330/0x330
[  488.208107][T14250]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  488.214514][T14250]  ? sock_rps_record_flow+0x19/0x3f0
[  488.219814][T14250]  ? inet_sendmsg+0xe9/0x2f0
[  488.224393][T14250]  ? inet_send_prepare+0x260/0x260
[  488.229497][T14250]  ____sys_sendmsg+0x5ba/0x960
[  488.234261][T14250]  ? __lock_acquire+0x7d40/0x7d40
[  488.239309][T14250]  ? __asan_memset+0x22/0x40
[  488.243907][T14250]  ? __sys_sendmsg_sock+0x30/0x30
[  488.248928][T14250]  ? __import_iovec+0x5f2/0x850
[  488.253775][T14250]  ? import_iovec+0x73/0xa0
[  488.258264][T14250]  ___sys_sendmsg+0x2a6/0x360
[  488.262931][T14250]  ? get_pid_task+0x20/0x1e0
[  488.267513][T14250]  ? __sys_sendmsg+0x2a0/0x2a0
[  488.272279][T14250]  ? __lock_acquire+0x7d40/0x7d40
[  488.277304][T14250]  __se_sys_sendmsg+0x1c2/0x2b0
[  488.282144][T14250]  ? __x64_sys_sendmsg+0x80/0x80
[  488.287079][T14250]  ? lockdep_hardirqs_on+0x98/0x150
[  488.292290][T14250]  do_syscall_64+0x55/0xb0
[  488.296715][T14250]  ? clear_bhb_loop+0x40/0x90
[  488.301392][T14250]  ? clear_bhb_loop+0x40/0x90
[  488.306055][T14250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  488.311941][T14250] RIP: 0033:0x7f56b339ce59
[  488.316341][T14250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.335945][T14250] RSP: 002b:00007f56b42fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  488.344392][T14250] RAX: ffffffffffffffda RBX: 00007f56b3615fa0 RCX: 00007f56b339ce59
[  488.352350][T14250] RDX: 0000000024004800 RSI: 00002000000010c0 RDI: 0000000000000005
[  488.360306][T14250] RBP: 00007f56b42fa090 R08: 0000000000000000 R09: 0000000000000000
[  488.368261][T14250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  488.376219][T14250] R13: 00007f56b3616038 R14: 00007f56b3615fa0 R15: 00007ffc6d493b88
[  488.384206][T14250]  </TASK>
[  488.752692][T14267] FAULT_INJECTION: forcing a failure.
[  488.752692][T14267] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  488.761121][T14268] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  488.804937][T14267] CPU: 1 PID: 14267 Comm: syz.2.3167 Not tainted syzkaller #0
[  488.812477][T14267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  488.822577][T14267] Call Trace:
[  488.825895][T14267]  <TASK>
[  488.828859][T14267]  dump_stack_lvl+0x18c/0x250
[  488.833576][T14267]  ? show_regs_print_info+0x20/0x20
[  488.838814][T14267]  ? load_image+0x420/0x420
[  488.843353][T14267]  ? __lock_acquire+0x7d40/0x7d40
[  488.848399][T14267]  ? snprintf+0xe9/0x140
[  488.852673][T14267]  should_fail_ex+0x39d/0x4d0
[  488.857391][T14267]  _copy_to_user+0x2f/0xa0
[  488.861859][T14267]  simple_read_from_buffer+0xe7/0x150
[  488.867267][T14267]  proc_fail_nth_read+0x1e8/0x260
[  488.872327][T14267]  ? proc_fault_inject_write+0x360/0x360
[  488.877992][T14267]  ? fsnotify_perm+0x271/0x5e0
[  488.882780][T14267]  ? proc_fault_inject_write+0x360/0x360
[  488.888451][T14267]  vfs_read+0x28b/0x970
[  488.892651][T14267]  ? kernel_read+0x1e0/0x1e0
[  488.897261][T14267]  ? __fget_files+0x28/0x4b0
[  488.901873][T14267]  ? __fget_files+0x28/0x4b0
[  488.906484][T14267]  ? __fget_files+0x43d/0x4b0
[  488.911206][T14267]  ? __fdget_pos+0x2a3/0x330
[  488.915811][T14267]  ? ksys_read+0x75/0x260
[  488.920166][T14267]  ksys_read+0x150/0x260
[  488.924437][T14267]  ? vfs_write+0x990/0x990
[  488.928886][T14267]  ? lockdep_hardirqs_on+0x98/0x150
[  488.934127][T14267]  do_syscall_64+0x55/0xb0
[  488.938565][T14267]  ? clear_bhb_loop+0x40/0x90
[  488.943249][T14267]  ? clear_bhb_loop+0x40/0x90
[  488.947941][T14267]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  488.953849][T14267] RIP: 0033:0x7fb098b5d68e
[  488.958284][T14267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  488.977912][T14267] RSP: 002b:00007fb099abbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  488.986349][T14267] RAX: ffffffffffffffda RBX: 00007fb099abc6c0 RCX: 00007fb098b5d68e
[  488.994347][T14267] RDX: 000000000000000f RSI: 00007fb099abc0a0 RDI: 0000000000000005
[  489.002345][T14267] RBP: 00007fb099abc090 R08: 0000000000000000 R09: 0000000000000000
[  489.010335][T14267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  489.018322][T14267] R13: 00007fb098e16038 R14: 00007fb098e15fa0 R15: 00007ffcc6763258
[  489.026348][T14267]  </TASK>
[  489.344287][T14277] tap0: tun_chr_ioctl cmd 1074025677
[  489.349941][T14277] tap0: linktype set to 778
[  489.358810][T14277] tap0: tun_chr_ioctl cmd 2147767511
[  489.640910][T14283] tap0: tun_chr_ioctl cmd 1074025677
[  489.647399][T14283] tap0: linktype set to 778
[  489.656581][T14283] tap0: tun_chr_ioctl cmd 2147767511
[  489.839589][T14291] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  490.738599][T14313] validate_nla: 8 callbacks suppressed
[  490.738615][T14313] netlink: 'syz.3.3181': attribute type 10 has an invalid length.
[  490.757593][T14313] __nla_validate_parse: 7 callbacks suppressed
[  490.757608][T14313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3181'.
[  490.776851][T14313] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  490.793179][T14312] tap0: tun_chr_ioctl cmd 1074025677
[  490.802580][T14312] tap0: linktype set to 778
[  490.821653][T14309] tap0: tun_chr_ioctl cmd 2147767511
[  490.951052][T14318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3184'.
[  491.366743][T14326] netlink: 'syz.3.3188': attribute type 10 has an invalid length.
[  491.382893][T14326] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3188'.
[  491.408698][T14326] netlink: 'syz.3.3188': attribute type 4 has an invalid length.
[  491.416841][T14326] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3188'.
[  491.426942][T14326] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  491.788925][T14345] FAULT_INJECTION: forcing a failure.
[  491.788925][T14345] name failslab, interval 1, probability 0, space 0, times 0
[  491.808166][T14345] CPU: 0 PID: 14345 Comm: syz.3.3194 Not tainted syzkaller #0
[  491.815663][T14345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  491.825743][T14345] Call Trace:
[  491.829028][T14345]  <TASK>
[  491.831955][T14345]  dump_stack_lvl+0x18c/0x250
[  491.836639][T14345]  ? show_regs_print_info+0x20/0x20
[  491.841835][T14345]  ? load_image+0x420/0x420
[  491.846337][T14345]  ? __lock_acquire+0x7d40/0x7d40
[  491.851376][T14345]  should_fail_ex+0x39d/0x4d0
[  491.856058][T14345]  should_failslab+0x9/0x20
[  491.860561][T14345]  slab_pre_alloc_hook+0x59/0x310
[  491.865591][T14345]  ? apparmor_sk_alloc_security+0x77/0x100
[  491.871396][T14345]  __kmem_cache_alloc_node+0x53/0x250
[  491.876859][T14345]  ? apparmor_sk_alloc_security+0x77/0x100
[  491.882663][T14345]  kmalloc_trace+0x2a/0xe0
[  491.887081][T14345]  apparmor_sk_alloc_security+0x77/0x100
[  491.892712][T14345]  security_sk_alloc+0x6e/0xa0
[  491.897480][T14345]  sk_prot_alloc+0x101/0x210
[  491.902073][T14345]  sk_alloc+0x3a/0x360
[  491.906144][T14345]  unix_create1+0xb0/0x790
[  491.910590][T14345]  unix_create+0x154/0x1f0
[  491.915003][T14345]  __sock_create+0x4a6/0x940
[  491.919594][T14345]  __sys_socketpair+0x1c1/0x550
[  491.924441][T14345]  __x64_sys_socketpair+0x9b/0xb0
[  491.929460][T14345]  do_syscall_64+0x55/0xb0
[  491.933870][T14345]  ? clear_bhb_loop+0x40/0x90
[  491.938536][T14345]  ? clear_bhb_loop+0x40/0x90
[  491.943208][T14345]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  491.949098][T14345] RIP: 0033:0x7f56b339ce59
[  491.953508][T14345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  491.973108][T14345] RSP: 002b:00007f56b42fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  491.981520][T14345] RAX: ffffffffffffffda RBX: 00007f56b3615fa0 RCX: 00007f56b339ce59
[  491.989484][T14345] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  491.997449][T14345] RBP: 00007f56b42fa090 R08: 0000000000000000 R09: 0000000000000000
[  492.005412][T14345] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000002
[  492.013375][T14345] R13: 00007f56b3616038 R14: 00007f56b3615fa0 R15: 00007ffc6d493b88
[  492.021356][T14345]  </TASK>
[  492.047305][T14341] tap0: tun_chr_ioctl cmd 1074025677
[  492.053446][T14341] tap0: linktype set to 778
[  492.064535][T14350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3194'.
[  492.079530][T14341] tap0: tun_chr_ioctl cmd 2147767511
[  492.118364][T14352] IPv6: Can't replace route, no match found
[  492.417245][T14362] netlink: 'syz.1.3205': attribute type 9 has an invalid length.
[  492.442232][T14362] netlink: 201636 bytes leftover after parsing attributes in process `syz.1.3205'.
[  493.039514][T14368] netlink: 'syz.1.3199': attribute type 10 has an invalid length.
[  493.052258][T14368] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3199'.
[  493.071764][T14368] netlink: 'syz.1.3199': attribute type 4 has an invalid length.
[  493.080483][T14368] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3199'.
[  493.092940][T14368] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  493.153476][T14372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3201'.
[  493.439603][T14379] netlink: 'syz.1.3211': attribute type 10 has an invalid length.
[  493.476641][T14379] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3211'.
[  493.523337][T14376] netlink: 'syz.1.3211': attribute type 4 has an invalid length.
[  493.553143][T14376] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  496.575463][T14407] netlink: 'syz.0.3209': attribute type 9 has an invalid length.
[  496.609687][T14407] __nla_validate_parse: 1 callbacks suppressed
[  496.609702][T14407] netlink: 201636 bytes leftover after parsing attributes in process `syz.0.3209'.
[  497.014227][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'.
[  497.122992][T14417] FAULT_INJECTION: forcing a failure.
[  497.122992][T14417] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  497.136468][T14417] CPU: 0 PID: 14417 Comm: syz.2.3214 Not tainted syzkaller #0
[  497.143937][T14417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  497.154008][T14417] Call Trace:
[  497.157276][T14417]  <TASK>
[  497.160195][T14417]  dump_stack_lvl+0x18c/0x250
[  497.164876][T14417]  ? show_regs_print_info+0x20/0x20
[  497.170073][T14417]  ? load_image+0x420/0x420
[  497.174575][T14417]  ? __might_fault+0xaa/0x120
[  497.179261][T14417]  should_fail_ex+0x39d/0x4d0
[  497.183955][T14417]  copyin+0x1a/0x90
[  497.187761][T14417]  _copy_from_iter+0x404/0x12e0
[  497.192614][T14417]  ? __virt_addr_valid+0x18c/0x540
[  497.197749][T14417]  ? __lock_acquire+0x7d40/0x7d40
[  497.202791][T14417]  ? copyout_mc+0x70/0x70
[  497.207146][T14417]  ? __virt_addr_valid+0x18c/0x540
[  497.212252][T14417]  ? __virt_addr_valid+0x18c/0x540
[  497.217354][T14417]  ? __virt_addr_valid+0x469/0x540
[  497.222472][T14417]  ? __check_object_size+0x506/0xa20
[  497.227762][T14417]  netlink_sendmsg+0x76b/0xbf0
[  497.232521][T14417]  ? netlink_getsockopt+0x590/0x590
[  497.237709][T14417]  ? aa_sock_msg_perm+0x94/0x150
[  497.242662][T14417]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  497.247943][T14417]  ? security_socket_sendmsg+0x80/0xa0
[  497.253399][T14417]  ? netlink_getsockopt+0x590/0x590
[  497.258588][T14417]  ____sys_sendmsg+0x5ba/0x960
[  497.263345][T14417]  ? __asan_memset+0x22/0x40
[  497.267932][T14417]  ? __sys_sendmsg_sock+0x30/0x30
[  497.272942][T14417]  ? __import_iovec+0x3fa/0x850
[  497.277793][T14417]  ? import_iovec+0x73/0xa0
[  497.282292][T14417]  ___sys_sendmsg+0x2a6/0x360
[  497.286989][T14417]  ? get_pid_task+0x20/0x1e0
[  497.291593][T14417]  ? __sys_sendmsg+0x2a0/0x2a0
[  497.296377][T14417]  ? __lock_acquire+0x7d40/0x7d40
[  497.301428][T14417]  __se_sys_sendmsg+0x1c2/0x2b0
[  497.306280][T14417]  ? __x64_sys_sendmsg+0x80/0x80
[  497.311215][T14417]  ? lockdep_hardirqs_on+0x98/0x150
[  497.316409][T14417]  do_syscall_64+0x55/0xb0
[  497.320819][T14417]  ? clear_bhb_loop+0x40/0x90
[  497.325481][T14417]  ? clear_bhb_loop+0x40/0x90
[  497.330153][T14417]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  497.336058][T14417] RIP: 0033:0x7fb098b9ce59
[  497.340461][T14417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.360057][T14417] RSP: 002b:00007fb099abc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.368478][T14417] RAX: ffffffffffffffda RBX: 00007fb098e15fa0 RCX: 00007fb098b9ce59
[  497.376437][T14417] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  497.384404][T14417] RBP: 00007fb099abc090 R08: 0000000000000000 R09: 0000000000000000
[  497.392398][T14417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.400357][T14417] R13: 00007fb098e16038 R14: 00007fb098e15fa0 R15: 00007ffcc6763258
[  497.408329][T14417]  </TASK>
[  497.549345][T14421] netlink: 'syz.2.3215': attribute type 10 has an invalid length.
[  497.613121][T14420] FAULT_INJECTION: forcing a failure.
[  497.613121][T14420] name failslab, interval 1, probability 0, space 0, times 0
[  497.628280][T14421] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3215'.
[  497.647709][T14420] CPU: 0 PID: 14420 Comm: syz.0.3223 Not tainted syzkaller #0
[  497.655213][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  497.665277][T14420] Call Trace:
[  497.668563][T14420]  <TASK>
[  497.671504][T14420]  dump_stack_lvl+0x18c/0x250
[  497.676207][T14420]  ? show_regs_print_info+0x20/0x20
[  497.681421][T14420]  ? load_image+0x420/0x420
[  497.685943][T14420]  ? __might_sleep+0xe0/0xe0
[  497.690547][T14420]  ? __lock_acquire+0x7d40/0x7d40
[  497.695596][T14420]  should_fail_ex+0x39d/0x4d0
[  497.700302][T14420]  should_failslab+0x9/0x20
[  497.704823][T14420]  slab_pre_alloc_hook+0x59/0x310
[  497.709866][T14420]  ? lock_chain_count+0x20/0x20
[  497.714733][T14420]  ? tcp_sendmsg_fastopen+0x1de/0x5d0
[  497.720155][T14420]  __kmem_cache_alloc_node+0x53/0x250
[  497.725553][T14420]  ? __local_bh_enable_ip+0x13a/0x1c0
[  497.730942][T14420]  ? tcp_sendmsg_fastopen+0x1de/0x5d0
[  497.736334][T14420]  kmalloc_trace+0x2a/0xe0
[  497.740773][T14420]  tcp_sendmsg_fastopen+0x1de/0x5d0
[  497.745999][T14420]  mptcp_sendmsg_fastopen+0x138/0x4d0
[  497.751478][T14420]  mptcp_sendmsg+0x14b2/0x16d0
[  497.756257][T14420]  ? perf_trace_lock_acquire+0x34f/0x410
[  497.761932][T14420]  ? aa_sk_perm+0x83c/0x970
[  497.766465][T14420]  ? aa_af_perm+0x330/0x330
[  497.770976][T14420]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  497.777402][T14420]  ? mptcp_shutdown+0x80/0x80
[  497.782113][T14420]  ? inet6_sendmsg+0x5f/0xd0
[  497.786713][T14420]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  497.791929][T14420]  ____sys_sendmsg+0x5ba/0x960
[  497.796709][T14420]  ? __lock_acquire+0x7d40/0x7d40
[  497.801780][T14420]  ? __asan_memset+0x22/0x40
[  497.806390][T14420]  ? __sys_sendmsg_sock+0x30/0x30
[  497.811424][T14420]  ? __import_iovec+0x3fa/0x850
[  497.816308][T14420]  ? import_iovec+0x73/0xa0
[  497.821011][T14420]  ___sys_sendmsg+0x2a6/0x360
[  497.825700][T14420]  ? get_pid_task+0x20/0x1e0
[  497.830317][T14420]  ? __sys_sendmsg+0x2a0/0x2a0
[  497.835148][T14420]  ? __lock_acquire+0x7d40/0x7d40
[  497.840242][T14420]  __se_sys_sendmsg+0x1c2/0x2b0
[  497.845112][T14420]  ? __x64_sys_sendmsg+0x80/0x80
[  497.850097][T14420]  ? lockdep_hardirqs_on+0x98/0x150
[  497.855324][T14420]  do_syscall_64+0x55/0xb0
[  497.859748][T14420]  ? clear_bhb_loop+0x40/0x90
[  497.864429][T14420]  ? clear_bhb_loop+0x40/0x90
[  497.869115][T14420]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  497.875020][T14420] RIP: 0033:0x7f38d4b9ce59
[  497.879445][T14420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.899057][T14420] RSP: 002b:00007f38d59af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.907485][T14420] RAX: ffffffffffffffda RBX: 00007f38d4e15fa0 RCX: 00007f38d4b9ce59
[  497.915465][T14420] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000005
[  497.923444][T14420] RBP: 00007f38d59af090 R08: 0000000000000000 R09: 0000000000000000
[  497.931429][T14420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.939407][T14420] R13: 00007f38d4e16038 R14: 00007f38d4e15fa0 R15: 00007fff32d18368
[  497.947423][T14420]  </TASK>
[  498.006587][T14422] netlink: 'syz.2.3215': attribute type 4 has an invalid length.
[  498.014506][T14422] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3215'.
[  498.027742][T14422] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  498.200686][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3217'.
[  498.280396][T14434] syz.2.3219[14434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.280736][T14434] syz.2.3219[14434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.485890][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  498.569035][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3222'.
[  498.644517][T14446] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3225'.
[  498.737497][T14446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  498.773475][T14446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  498.815674][T14446] bond0 (unregistering): Released all slaves
[  498.877368][T14453] netlink: 'syz.0.3228': attribute type 10 has an invalid length.
[  498.888516][T14453] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3228'.
[  498.909487][T14453] netlink: 'syz.0.3228': attribute type 4 has an invalid length.
[  498.917573][T14453] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3228'.
[  498.927212][T14453] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  499.000843][T14456] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3229'.
[  499.388461][T14461] delete_channel: no stack
[  499.539027][T14476] bond0: (slave bond_slave_0): Releasing backup interface
[  499.554540][T14476] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  499.618944][T14478] netlink: 'syz.2.3239': attribute type 10 has an invalid length.
[  499.629676][T14478] netlink: 'syz.2.3239': attribute type 4 has an invalid length.
[  499.786382][T14482] syzkaller0: entered promiscuous mode
[  499.792914][T14482] syzkaller0: entered allmulticast mode
[  501.530114][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  501.536579][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  501.578402][T14505] FAULT_INJECTION: forcing a failure.
[  501.578402][T14505] name failslab, interval 1, probability 0, space 0, times 0
[  501.592929][T14505] CPU: 1 PID: 14505 Comm: syz.1.3249 Not tainted syzkaller #0
[  501.600421][T14505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  501.610474][T14505] Call Trace:
[  501.613751][T14505]  <TASK>
[  501.616675][T14505]  dump_stack_lvl+0x18c/0x250
[  501.621351][T14505]  ? show_regs_print_info+0x20/0x20
[  501.626548][T14505]  ? load_image+0x420/0x420
[  501.631068][T14505]  ? __might_sleep+0xe0/0xe0
[  501.635667][T14505]  ? __lock_acquire+0x7d40/0x7d40
[  501.640698][T14505]  should_fail_ex+0x39d/0x4d0
[  501.645381][T14505]  should_failslab+0x9/0x20
[  501.649885][T14505]  slab_pre_alloc_hook+0x59/0x310
[  501.654911][T14505]  ? lock_chain_count+0x20/0x20
[  501.659754][T14505]  ? tcp_sendmsg_fastopen+0x1de/0x5d0
[  501.665135][T14505]  __kmem_cache_alloc_node+0x53/0x250
[  501.670508][T14505]  ? __local_bh_enable_ip+0x13a/0x1c0
[  501.675876][T14505]  ? tcp_sendmsg_fastopen+0x1de/0x5d0
[  501.681259][T14505]  kmalloc_trace+0x2a/0xe0
[  501.685686][T14505]  tcp_sendmsg_fastopen+0x1de/0x5d0
[  501.690888][T14505]  mptcp_sendmsg_fastopen+0x138/0x4d0
[  501.696272][T14505]  mptcp_sendmsg+0x14b2/0x16d0
[  501.701038][T14505]  ? __lock_acquire+0x1273/0x7d40
[  501.706058][T14505]  ? verify_lock_unused+0x140/0x140
[  501.711258][T14505]  ? aa_sk_perm+0x83c/0x970
[  501.715775][T14505]  ? aa_af_perm+0x330/0x330
[  501.720267][T14505]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  501.726677][T14505]  ? mptcp_shutdown+0x80/0x80
[  501.731357][T14505]  ? inet6_sendmsg+0x5f/0xd0
[  501.735943][T14505]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  501.741136][T14505]  ____sys_sendmsg+0x5ba/0x960
[  501.745893][T14505]  ? __lock_acquire+0x7d40/0x7d40
[  501.750911][T14505]  ? __asan_memset+0x22/0x40
[  501.755499][T14505]  ? __sys_sendmsg_sock+0x30/0x30
[  501.760518][T14505]  ? __import_iovec+0x3fa/0x850
[  501.765404][T14505]  ? import_iovec+0x73/0xa0
[  501.769916][T14505]  ___sys_sendmsg+0x2a6/0x360
[  501.774598][T14505]  ? get_pid_task+0x20/0x1e0
[  501.779188][T14505]  ? __sys_sendmsg+0x2a0/0x2a0
[  501.783960][T14505]  ? __lock_acquire+0x7d40/0x7d40
[  501.788994][T14505]  __se_sys_sendmsg+0x1c2/0x2b0
[  501.793843][T14505]  ? __x64_sys_sendmsg+0x80/0x80
[  501.798786][T14505]  ? lockdep_hardirqs_on+0x98/0x150
[  501.803983][T14505]  do_syscall_64+0x55/0xb0
[  501.808391][T14505]  ? clear_bhb_loop+0x40/0x90
[  501.813059][T14505]  ? clear_bhb_loop+0x40/0x90
[  501.817728][T14505]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  501.823623][T14505] RIP: 0033:0x7f83a9f9ce59
[  501.828030][T14505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.847630][T14505] RSP: 002b:00007f83aade4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  501.856036][T14505] RAX: ffffffffffffffda RBX: 00007f83aa215fa0 RCX: 00007f83a9f9ce59
[  501.864002][T14505] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000003
[  501.872054][T14505] RBP: 00007f83aade4090 R08: 0000000000000000 R09: 0000000000000000
[  501.880016][T14505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.887977][T14505] R13: 00007f83aa216038 R14: 00007f83aa215fa0 R15: 00007ffc8db82788
[  501.895952][T14505]  </TASK>
[  501.986407][T14507] netlink: 'syz.2.3250': attribute type 10 has an invalid length.
[  502.002120][T14507] __nla_validate_parse: 5 callbacks suppressed
[  502.002152][T14507] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3250'.
[  502.052523][T14507] netlink: 'syz.2.3250': attribute type 4 has an invalid length.
[  502.062197][T14507] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3250'.
[  502.080270][T14515] netlink: 'syz.0.3252': attribute type 10 has an invalid length.
[  502.167376][T14515] team0: Port device wlan1 added
[  502.757115][T14537] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3261'.
[  502.859473][T14537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  502.899839][T14537] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  502.920053][T14537] bond0 (unregistering): Released all slaves
[  502.989160][T14546] netlink: 'syz.1.3263': attribute type 10 has an invalid length.
[  503.008911][T14546] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3263'.
[  503.031188][T14549] netlink: 'syz.3.3264': attribute type 10 has an invalid length.
[  503.040487][T14549] team0: Device hsr0 is up. Set it down before adding it as a team port
[  503.068490][T14550] netlink: 'syz.1.3263': attribute type 4 has an invalid length.
[  503.078661][T14550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3263'.
[  503.090240][T14550] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  503.445768][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'.
[  503.482858][T14558] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3266'.
[  503.529832][T14562] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3268'.
[  503.560149][T14562] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3268'.
[  503.584501][T14568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3268'.
[  503.676411][T14571] netlink: 'syz.2.3269': attribute type 10 has an invalid length.
[  503.707885][T14571] team0: Port device wlan1 added
[  503.864676][T14575] netlink: 'syz.3.3271': attribute type 4 has an invalid length.
[  503.893062][T14557] delete_channel: no stack
[  504.053291][T14582] netlink: 'syz.1.3274': attribute type 10 has an invalid length.
[  504.074772][T14582] netlink: 'syz.1.3274': attribute type 4 has an invalid length.
[  504.092945][T14582] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  505.590273][T14611] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  507.023832][T14653] delete_channel: no stack
[  507.028984][T14653] delete_channel: no stack
[  507.052064][T14655] __nla_validate_parse: 25 callbacks suppressed
[  507.052110][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3301'.
[  507.408533][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'.
[  507.611757][T14669] validate_nla: 7 callbacks suppressed
[  507.611774][T14669] netlink: 'syz.3.3305': attribute type 10 has an invalid length.
[  507.801598][T14669] 8021q: adding VLAN 0 to HW filter on device team0
[  507.827163][T14669] bond0: (slave team0): Enslaving as an active interface with an up link
[  507.945640][T14672] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3306'.
[  508.577274][T14683] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3309'.
[  508.755501][T14683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.805957][T14683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.876892][T14683] bond0 (unregistering): (slave team0): Releasing backup interface
[  508.947215][T14683] bond0 (unregistering): Released all slaves
[  509.504176][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3317'.
[  509.541373][T14707] netlink: 'syz.0.3318': attribute type 21 has an invalid length.
[  509.554029][T14707] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3318'.
[  509.591786][T14707] netlink: 'syz.0.3318': attribute type 21 has an invalid length.
[  509.936707][T14719] netlink: 'syz.0.3321': attribute type 10 has an invalid length.
[  510.057646][T14718] netlink: 'syz.2.3322': attribute type 10 has an invalid length.
[  510.073363][T14718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3322'.
[  510.100414][T14718] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  510.420659][T14723] FAULT_INJECTION: forcing a failure.
[  510.420659][T14723] name failslab, interval 1, probability 0, space 0, times 0
[  510.433616][T14723] CPU: 0 PID: 14723 Comm: syz.3.3324 Not tainted syzkaller #0
[  510.441092][T14723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  510.451160][T14723] Call Trace:
[  510.454455][T14723]  <TASK>
[  510.457400][T14723]  dump_stack_lvl+0x18c/0x250
[  510.462106][T14723]  ? show_regs_print_info+0x20/0x20
[  510.467324][T14723]  ? load_image+0x420/0x420
[  510.471849][T14723]  ? skb_network_protocol+0x51f/0x780
[  510.477355][T14723]  should_fail_ex+0x39d/0x4d0
[  510.482068][T14723]  should_failslab+0x9/0x20
[  510.486592][T14723]  slab_pre_alloc_hook+0x59/0x310
[  510.491625][T14723]  kmem_cache_alloc+0x5a/0x2d0
[  510.496388][T14723]  ? skb_clone+0x1eb/0x370
[  510.500843][T14723]  skb_clone+0x1eb/0x370
[  510.505080][T14723]  ? dev_queue_xmit_nit+0x212/0xbb0
[  510.510291][T14723]  dev_queue_xmit_nit+0x24d/0xbb0
[  510.515324][T14723]  ? dev_queue_xmit_nit+0x2d/0xbb0
[  510.520433][T14723]  ? validate_xmit_skb+0x949/0xf60
[  510.525544][T14723]  dev_hard_start_xmit+0x148/0x740
[  510.530663][T14723]  __dev_queue_xmit+0x19a3/0x3660
[  510.535694][T14723]  ? __dev_queue_xmit+0x265/0x3660
[  510.540809][T14723]  ? netdev_core_pick_tx+0x340/0x340
[  510.546093][T14723]  ? __copy_skb_header+0xa3/0x4a0
[  510.551112][T14723]  ? __asan_memcpy+0x40/0x70
[  510.555696][T14723]  ? __skb_clone+0x63/0x790
[  510.560194][T14723]  ? __skb_clone+0x480/0x790
[  510.564783][T14723]  ? skb_clone+0x21f/0x370
[  510.569193][T14723]  __netlink_deliver_tap+0x5ab/0x830
[  510.574484][T14723]  ? netlink_deliver_tap+0x2e/0x1b0
[  510.579676][T14723]  netlink_deliver_tap+0x19c/0x1b0
[  510.584781][T14723]  netlink_unicast+0x72c/0x8d0
[  510.589545][T14723]  netlink_sendmsg+0x8d0/0xbf0
[  510.594320][T14723]  ? netlink_getsockopt+0x590/0x590
[  510.599520][T14723]  ? aa_sock_msg_perm+0x94/0x150
[  510.604454][T14723]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  510.609735][T14723]  ? security_socket_sendmsg+0x80/0xa0
[  510.615190][T14723]  ? netlink_getsockopt+0x590/0x590
[  510.620385][T14723]  ____sys_sendmsg+0x5ba/0x960
[  510.625167][T14723]  ? __asan_memset+0x22/0x40
[  510.629752][T14723]  ? __sys_sendmsg_sock+0x30/0x30
[  510.634767][T14723]  ? __import_iovec+0x5f2/0x850
[  510.639616][T14723]  ? import_iovec+0x73/0xa0
[  510.644121][T14723]  ___sys_sendmsg+0x2a6/0x360
[  510.648795][T14723]  ? get_pid_task+0x20/0x1e0
[  510.653395][T14723]  ? __sys_sendmsg+0x2a0/0x2a0
[  510.658170][T14723]  ? __lock_acquire+0x7d40/0x7d40
[  510.663206][T14723]  __se_sys_sendmsg+0x1c2/0x2b0
[  510.668056][T14723]  ? __x64_sys_sendmsg+0x80/0x80
[  510.673004][T14723]  ? lockdep_hardirqs_on+0x98/0x150
[  510.678202][T14723]  do_syscall_64+0x55/0xb0
[  510.682610][T14723]  ? clear_bhb_loop+0x40/0x90
[  510.687277][T14723]  ? clear_bhb_loop+0x40/0x90
[  510.691946][T14723]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  510.697835][T14723] RIP: 0033:0x7f56b339ce59
[  510.702243][T14723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.721845][T14723] RSP: 002b:00007f56b42fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  510.730258][T14723] RAX: ffffffffffffffda RBX: 00007f56b3615fa0 RCX: 00007f56b339ce59
[  510.738221][T14723] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  510.746185][T14723] RBP: 00007f56b42fa090 R08: 0000000000000000 R09: 0000000000000000
[  510.754147][T14723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.762105][T14723] R13: 00007f56b3616038 R14: 00007f56b3615fa0 R15: 00007ffc6d493b88
[  510.770078][T14723]  </TASK>
[  510.844550][T14729] netlink: 'syz.0.3325': attribute type 10 has an invalid length.
[  510.854400][T14729] FAULT_INJECTION: forcing a failure.
[  510.854400][T14729] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  510.869025][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3323'.
[  510.871524][T14729] CPU: 1 PID: 14729 Comm: syz.0.3325 Not tainted syzkaller #0
[  510.885546][T14729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  510.895614][T14729] Call Trace:
[  510.895846][T14723] netlink: 'syz.3.3324': attribute type 10 has an invalid length.
[  510.898883][T14729]  <TASK>
[  510.898891][T14729]  dump_stack_lvl+0x18c/0x250
[  510.914295][T14729]  ? show_regs_print_info+0x20/0x20
[  510.919519][T14729]  ? load_image+0x420/0x420
[  510.924049][T14729]  ? __lock_acquire+0x7d40/0x7d40
[  510.929097][T14729]  ? snprintf+0xe9/0x140
[  510.933366][T14729]  should_fail_ex+0x39d/0x4d0
[  510.938075][T14729]  _copy_to_user+0x2f/0xa0
[  510.942506][T14729]  simple_read_from_buffer+0xe7/0x150
[  510.947894][T14729]  proc_fail_nth_read+0x1e8/0x260
[  510.952924][T14729]  ? proc_fault_inject_write+0x360/0x360
[  510.958558][T14729]  ? fsnotify_perm+0x271/0x5e0
[  510.963314][T14729]  ? proc_fault_inject_write+0x360/0x360
[  510.968948][T14729]  vfs_read+0x28b/0x970
[  510.973106][T14729]  ? kernel_read+0x1e0/0x1e0
[  510.977690][T14729]  ? __fget_files+0x28/0x4b0
[  510.982275][T14729]  ? __fget_files+0x28/0x4b0
[  510.986871][T14729]  ? __fget_files+0x43d/0x4b0
[  510.991553][T14729]  ? __fdget_pos+0x2a3/0x330
[  510.996144][T14729]  ? ksys_read+0x75/0x260
[  511.000473][T14729]  ksys_read+0x150/0x260
[  511.004717][T14729]  ? vfs_write+0x990/0x990
[  511.009132][T14729]  ? lockdep_hardirqs_on+0x98/0x150
[  511.014328][T14729]  do_syscall_64+0x55/0xb0
[  511.018737][T14729]  ? clear_bhb_loop+0x40/0x90
[  511.023402][T14729]  ? clear_bhb_loop+0x40/0x90
[  511.028072][T14729]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  511.033963][T14729] RIP: 0033:0x7f38d4b5d68e
[  511.038370][T14729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  511.057966][T14729] RSP: 002b:00007f38d59aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  511.066373][T14729] RAX: ffffffffffffffda RBX: 00007f38d59af6c0 RCX: 00007f38d4b5d68e
[  511.074336][T14729] RDX: 000000000000000f RSI: 00007f38d59af0a0 RDI: 0000000000000004
[  511.082299][T14729] RBP: 00007f38d59af090 R08: 0000000000000000 R09: 0000000000000000
[  511.090259][T14729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  511.098221][T14729] R13: 00007f38d4e16038 R14: 00007f38d4e15fa0 R15: 00007fff32d18368
[  511.106200][T14729]  </TASK>
[  511.188582][T14723] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  511.461770][T14735] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3327'.
[  511.505875][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3328'.
[  512.359937][T14752] netlink: 'syz.2.3333': attribute type 27 has an invalid length.
[  512.377350][T14752] netlink: 'syz.2.3333': attribute type 3 has an invalid length.
[  512.406641][T14752] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3333'.
[  512.538300][T14756] netlink: 'syz.1.3334': attribute type 10 has an invalid length.
[  512.553081][T14756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3334'.
[  512.711856][T14761] netlink: 'syz.3.3335': attribute type 21 has an invalid length.
[  512.731287][T14761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3335'.
[  512.776170][T14761] netlink: 'syz.3.3335': attribute type 21 has an invalid length.
[  513.519193][T14769] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3336'.
[  513.550051][T14769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  513.608249][T14773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3339'.
[  513.940839][T14785] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.3340'.
[  514.673685][T14799] netlink: 'syz.2.3347': attribute type 10 has an invalid length.
[  514.703008][T14799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3347'.
[  514.741009][T14799] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  514.981033][T14808] netlink: 'syz.0.3348': attribute type 10 has an invalid length.
[  515.416946][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3349'.
[  516.688071][T14838] netlink: 'syz.0.3358': attribute type 10 has an invalid length.
[  517.364114][T14846] netlink: 'syz.3.3359': attribute type 21 has an invalid length.
[  517.372111][T14846] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3359'.
[  517.493150][T14847] netlink: 'syz.1.3360': attribute type 10 has an invalid length.
[  517.523101][T14847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3360'.
[  517.721337][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3361'.
[  518.739449][T14877] netlink: 'syz.3.3370': attribute type 10 has an invalid length.
[  518.964714][ T5780] Bluetooth: hci1: command 0x0406 tx timeout
[  519.296003][T14880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3371'.
[  521.528047][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'.
[  521.782802][T14896] netlink: 'syz.0.3374': attribute type 10 has an invalid length.
[  521.831983][T14896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3374'.
[  521.883010][T14896] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  522.425359][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3381'.
[  523.013078][T14918] netlink: 'syz.3.3384': attribute type 10 has an invalid length.
[  523.127177][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3385'.
[  523.361216][T14927] netlink: 'syz.0.3388': attribute type 21 has an invalid length.
[  523.378460][T14927] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3388'.
[  523.503182][T14932] netlink: 'syz.0.3388': attribute type 21 has an invalid length.
[  524.090053][T14949] netlink: 'syz.3.3392': attribute type 10 has an invalid length.
[  524.123046][T14949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3392'.
[  524.164233][T14949] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  524.360355][T14952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3394'.
[  524.657859][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3396'.
[  524.948803][T14960] netlink: 'syz.3.3398': attribute type 10 has an invalid length.
[  525.223014][T14968] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3402'.
[  525.266697][T14968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  525.304258][T14968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  525.395184][T14968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  525.428506][T14968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  525.698566][T14978] tap0: tun_chr_ioctl cmd 1074025677
[  525.706226][T14978] tap0: linktype set to 778
[  525.756007][T14979] tap0: tun_chr_ioctl cmd 2147767511
[  525.768263][T14983] netlink: 'syz.0.3404': attribute type 10 has an invalid length.
[  525.787729][T14983] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3404'.
[  525.913803][T14982] netlink: 'syz.0.3404': attribute type 4 has an invalid length.
[  525.936295][T14982] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3404'.
[  526.128086][T14985] netlink: 'syz.0.3405': attribute type 21 has an invalid length.
[  526.143104][T14985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3405'.
[  526.172586][T14986] netlink: 'syz.0.3405': attribute type 21 has an invalid length.
[  526.361306][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3406'.
[  526.586069][T14993] netlink: 'syz.1.3408': attribute type 10 has an invalid length.
[  526.634464][T14993] 8021q: adding VLAN 0 to HW filter on device team0
[  526.656924][T14993] bond0: (slave team0): Enslaving as an active interface with an up link
[  527.827959][T15012] netlink: 'syz.3.3413': attribute type 10 has an invalid length.
[  527.879313][T15012] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  528.018413][T15016] tap0: tun_chr_ioctl cmd 1074025677
[  528.025260][T15016] tap0: linktype set to 778
[  528.047425][T15016] tap0: tun_chr_ioctl cmd 2147767511
[  528.216604][T15021] __nla_validate_parse: 2 callbacks suppressed
[  528.216622][T15021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3416'.
[  528.287407][T15023] netlink: 'syz.0.3417': attribute type 21 has an invalid length.
[  528.301752][T15023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3417'.
[  528.345165][T15023] netlink: 'syz.0.3417': attribute type 21 has an invalid length.
[  528.960691][T15046] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3424'.
[  528.980430][T15046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.000904][T15046] batman_adv: batadv0: Removing interface: batadv_slave_0
[  529.095042][T15046] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  529.126913][T15046] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.358797][T15050] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3425'.
[  529.734039][T15052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3426'.
[  530.046935][T15056] tap0: tun_chr_ioctl cmd 1074025677
[  530.062879][T15056] tap0: linktype set to 778
[  530.070884][T15055] tap0: tun_chr_ioctl cmd 2147767511
[  530.724031][T15063] netlink: 'syz.3.3429': attribute type 10 has an invalid length.
[  530.752867][T15063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3429'.
[  530.762367][T15063] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  531.009275][T15065] netlink: 'syz.1.3430': attribute type 21 has an invalid length.
[  531.020760][T15065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3430'.
[  531.067276][T15065] netlink: 'syz.1.3430': attribute type 21 has an invalid length.
[  531.498720][T15074] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3434'.
[  531.644201][T15078] tap0: tun_chr_ioctl cmd 1074025677
[  531.650230][T15078] tap0: linktype set to 778
[  531.661584][T15079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3435'.
[  531.691484][T15078] tap0: tun_chr_ioctl cmd 2147767511
[  532.014780][T15085] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3440'.
[  532.055577][T15085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  532.085381][T15085] batman_adv: batadv0: Removing interface: batadv_slave_0
[  532.182265][T15085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  532.204329][T15085] batman_adv: batadv0: Removing interface: batadv_slave_1
[  532.568246][T15087] netlink: 'syz.1.3441': attribute type 21 has an invalid length.
[  532.581480][T15089] netlink: 'syz.1.3441': attribute type 21 has an invalid length.
[  532.965743][T15106] netlink: 'syz.0.3444': attribute type 10 has an invalid length.
[  532.993185][T15106] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  533.333672][T15109] __nla_validate_parse: 3 callbacks suppressed
[  533.333713][T15109] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3446'.
[  533.493906][T15116] FAULT_INJECTION: forcing a failure.
[  533.493906][T15116] name failslab, interval 1, probability 0, space 0, times 0
[  533.514471][T15116] CPU: 0 PID: 15116 Comm: syz.1.3449 Not tainted syzkaller #0
[  533.521968][T15116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  533.532041][T15116] Call Trace:
[  533.535329][T15116]  <TASK>
[  533.538276][T15116]  dump_stack_lvl+0x18c/0x250
[  533.542980][T15116]  ? show_regs_print_info+0x20/0x20
[  533.548197][T15116]  ? load_image+0x420/0x420
[  533.552721][T15116]  ? __might_sleep+0xe0/0xe0
[  533.557336][T15116]  ? __lock_acquire+0x7d40/0x7d40
[  533.562386][T15116]  should_fail_ex+0x39d/0x4d0
[  533.567086][T15116]  should_failslab+0x9/0x20
[  533.571590][T15116]  slab_pre_alloc_hook+0x59/0x310
[  533.576617][T15116]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  533.582878][T15116]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  533.589118][T15116]  __kmem_cache_alloc_node+0x53/0x250
[  533.594497][T15116]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  533.600732][T15116]  __kmalloc+0xa4/0x230
[  533.604882][T15116]  ? netlink_lookup+0x30/0x200
[  533.609639][T15116]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  533.615715][T15116]  genl_start+0x180/0x6b0
[  533.620040][T15116]  ? netlink_lookup+0x30/0x200
[  533.624803][T15116]  __netlink_dump_start+0x4a9/0x810
[  533.630025][T15116]  genl_family_rcv_msg_dumpit+0x214/0x310
[  533.635756][T15116]  ? genl_rcv_msg+0x7a0/0x7a0
[  533.640432][T15116]  ? genl_get_cmd+0x692/0x920
[  533.645114][T15116]  ? genl_family_rcv_msg_doit+0x310/0x310
[  533.650831][T15116]  ? genl_start+0x6b0/0x6b0
[  533.655329][T15116]  ? genl_dumpit+0x1a0/0x1a0
[  533.659930][T15116]  genl_rcv_msg+0x5e5/0x7a0
[  533.664443][T15116]  ? genl_bind+0x360/0x360
[  533.668855][T15116]  ? ethnl_default_doit+0xb80/0xb80
[  533.674140][T15116]  ? ethnl_default_start+0x560/0x560
[  533.679430][T15116]  ? ethnl_default_dumpit+0x8a0/0x8a0
[  533.684799][T15116]  ? perf_trace_lock+0xfc/0x3b0
[  533.689666][T15116]  netlink_rcv_skb+0x241/0x4d0
[  533.694427][T15116]  ? genl_bind+0x360/0x360
[  533.698840][T15116]  ? netlink_ack+0x1180/0x1180
[  533.703605][T15116]  ? __lock_acquire+0x7d40/0x7d40
[  533.708640][T15116]  ? down_read+0x1ac/0x2e0
[  533.713116][T15116]  genl_rcv+0x28/0x40
[  533.717099][T15116]  netlink_unicast+0x751/0x8d0
[  533.721869][T15116]  netlink_sendmsg+0x8d0/0xbf0
[  533.726658][T15116]  ? netlink_getsockopt+0x590/0x590
[  533.731864][T15116]  ? aa_sock_msg_perm+0x94/0x150
[  533.736803][T15116]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  533.742081][T15116]  ? security_socket_sendmsg+0x80/0xa0
[  533.747532][T15116]  ? netlink_getsockopt+0x590/0x590
[  533.752741][T15116]  ____sys_sendmsg+0x5ba/0x960
[  533.757520][T15116]  ? __asan_memset+0x22/0x40
[  533.762110][T15116]  ? __sys_sendmsg_sock+0x30/0x30
[  533.767143][T15116]  ? __import_iovec+0x5f2/0x850
[  533.771998][T15116]  ? import_iovec+0x73/0xa0
[  533.776506][T15116]  ___sys_sendmsg+0x2a6/0x360
[  533.781188][T15116]  ? __sys_sendmsg+0x2a0/0x2a0
[  533.785973][T15116]  ? __lock_acquire+0x7d40/0x7d40
[  533.791019][T15116]  __se_sys_sendmsg+0x1c2/0x2b0
[  533.795875][T15116]  ? __x64_sys_sendmsg+0x80/0x80
[  533.800822][T15116]  ? lockdep_hardirqs_on+0x98/0x150
[  533.806045][T15116]  do_syscall_64+0x55/0xb0
[  533.810472][T15116]  ? clear_bhb_loop+0x40/0x90
[  533.815154][T15116]  ? clear_bhb_loop+0x40/0x90
[  533.819836][T15116]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  533.825730][T15116] RIP: 0033:0x7f83a9f9ce59
[  533.830168][T15116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  533.849777][T15116] RSP: 002b:00007f83aade4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.858194][T15116] RAX: ffffffffffffffda RBX: 00007f83aa215fa0 RCX: 00007f83a9f9ce59
[  533.866166][T15116] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  533.874134][T15116] RBP: 00007f83aade4090 R08: 0000000000000000 R09: 0000000000000000
[  533.882099][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  533.890064][T15116] R13: 00007f83aa216038 R14: 00007f83aa215fa0 R15: 00007ffc8db82788
[  533.898041][T15116]  </TASK>
[  533.944103][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3448'.
[  534.285076][T15119] tap0: tun_chr_ioctl cmd 1074025677
[  534.301785][T15119] tap0: linktype set to 778
[  534.312166][T15127] tap0: tun_chr_ioctl cmd 2147767511
[  534.321265][T15126] netlink: 'syz.0.3453': attribute type 21 has an invalid length.
[  534.335089][T15126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3453'.
[  534.385653][T15126] netlink: 'syz.0.3453': attribute type 21 has an invalid length.
[  534.982594][T15138] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3457'.
[  535.250974][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3459'.
[  535.346101][T15150] tap0: tun_chr_ioctl cmd 1074025677
[  535.352015][T15150] tap0: linktype set to 778
[  535.381276][T15150] tap0: tun_chr_ioctl cmd 2147767511
[  535.399519][T15157] netlink: 'syz.1.3463': attribute type 21 has an invalid length.
[  535.603530][T15157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3463'.
[  535.670369][T15157] netlink: 'syz.1.3463': attribute type 21 has an invalid length.
[  535.712195][T15158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3461'.
[  535.724923][T15158] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  535.841127][T15161] hsr0: VLAN not yet supported
[  539.217482][T15172] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3468'.
[  539.233718][T15176] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3469'.
[  539.245722][T15176] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.262876][T15176] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.275607][T15176] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.284191][T15176] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.564802][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3471'.
[  539.793183][T15193] validate_nla: 1 callbacks suppressed
[  539.793204][T15193] netlink: 'syz.3.3476': attribute type 21 has an invalid length.
[  539.808067][T15193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3476'.
[  539.818286][T15188] tap0: tun_chr_ioctl cmd 1074025677
[  539.827012][T15188] tap0: linktype set to 778
[  539.892870][T15191] tap0: tun_chr_ioctl cmd 2147767511
[  539.898991][T15193] netlink: 'syz.3.3476': attribute type 21 has an invalid length.
[  539.970076][T15199] netlink: 'syz.0.3475': attribute type 10 has an invalid length.
[  539.978419][T15199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3475'.
[  539.988705][T15199] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  540.296177][T15206] netlink: 'syz.2.3478': attribute type 10 has an invalid length.
[  540.306718][T15206] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3478'.
[  540.321819][T15206] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  540.344973][T15213] netlink: 'syz.3.3481': attribute type 10 has an invalid length.
[  540.657617][T15218] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3482'.
[  540.776334][T15222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3484'.
[  544.085573][T15236] netlink: 'syz.1.3487': attribute type 21 has an invalid length.
[  544.094480][T15236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3487'.
[  544.114813][T15234] tap0: tun_chr_ioctl cmd 1074025677
[  544.121793][T15234] tap0: linktype set to 778
[  544.144758][T15236] netlink: 'syz.1.3487': attribute type 21 has an invalid length.
[  544.158556][T15234] tap0: tun_chr_ioctl cmd 2147767511
[  544.604772][T15242] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  544.696718][T15255] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3493'.
[  544.718127][T15251] netlink: 'syz.2.3492': attribute type 10 has an invalid length.
[  544.827934][T15257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3494'.
[  548.174888][T15278] mac80211_hwsim hwsim15 ..ãc¤±: renamed from wlan1 (while UP)
[  548.397561][T15285] netlink: 'syz.3.3503': attribute type 21 has an invalid length.
[  548.406799][T15283] netlink: 'syz.3.3503': attribute type 21 has an invalid length.
[  548.417161][T15283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3503'.
[  548.427077][T15288] tap0: tun_chr_ioctl cmd 2147767511
[  548.537494][T15292] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3504'.
[  548.598249][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3505'.
[  548.630986][T15298] netlink: 'syz.3.3507': attribute type 21 has an invalid length.
[  548.663186][T15298] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3507'.
[  548.940360][T15312] netlink: 'syz.1.3510': attribute type 10 has an invalid length.
[  551.916737][T15315] netlink: 'syz.2.3513': attribute type 4 has an invalid length.
[  551.927804][T15315] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3513'.
[  551.985988][T15315] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  552.011547][T15318] netlink: 'syz.3.3514': attribute type 21 has an invalid length.
[  552.036858][T15318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3514'.
[  552.047239][T15319] netlink: 'syz.3.3514': attribute type 21 has an invalid length.
[  552.181158][T15323] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3517'.
[  552.289309][T15326] tap0: tun_chr_ioctl cmd 1074025677
[  552.335683][T15326] tap0: linktype set to 778
[  552.365059][T15334] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3526'.
[  552.403314][T15326] tap0: tun_chr_ioctl cmd 2147767511
[  555.285772][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3520'.
[  555.611322][T15359] netlink: 'syz.3.3524': attribute type 10 has an invalid length.
[  555.888457][T15361] netlink: 'syz.0.3525': attribute type 21 has an invalid length.
[  555.925930][T15361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3525'.
[  555.994202][T15363] netlink: 'syz.0.3525': attribute type 21 has an invalid length.
[  556.469791][T15375] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3528'.
[  557.320416][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3533'.
[  557.453774][T15397] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.3535'.
[  557.464967][T15395] tap0: tun_chr_ioctl cmd 1074025677
[  557.471147][T15395] tap0: linktype set to 778
[  557.478300][T15397] netlink: 'syz.2.3535': attribute type 10 has an invalid length.
[  557.486623][T15397] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3535'.
[  557.503538][T15395] tap0: tun_chr_ioctl cmd 2147767511
[  557.509398][T15397] netlink: 'syz.2.3535': attribute type 4 has an invalid length.
[  557.519199][T15397] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3535'.
[  557.578056][T15399] netlink: 'syz.2.3536': attribute type 21 has an invalid length.
[  557.586290][T15399] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3536'.
[  557.605485][T15399] netlink: 'syz.2.3536': attribute type 21 has an invalid length.
[  557.905042][T15408] netlink: 'syz.0.3538': attribute type 10 has an invalid length.
[  557.948356][T15405] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3539'.
[  558.702739][T15421] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.3545'.
[  558.731872][T15423] tap0: tun_chr_ioctl cmd 1074025677
[  558.739558][T15423] tap0: linktype set to 778
[  558.768071][T15421] netlink: 'syz.2.3545': attribute type 10 has an invalid length.
[  558.790724][T15421] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3545'.
[  558.822987][T15423] tap0: tun_chr_ioctl cmd 2147767511
[  558.853227][T15421] netlink: 'syz.2.3545': attribute type 4 has an invalid length.
[  558.879686][T15421] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3545'.
[  558.913343][T15431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3547'.
[  560.719453][T15468] validate_nla: 5 callbacks suppressed
[  560.719496][T15468] netlink: 'syz.0.3559': attribute type 21 has an invalid length.
[  560.804048][T15468] netlink: 'syz.0.3559': attribute type 21 has an invalid length.
[  560.848693][T15467] tap0: tun_chr_ioctl cmd 1074025677
[  560.859920][T15467] tap0: linktype set to 778
[  560.909853][T15471] tap0: tun_chr_ioctl cmd 2147767511
[  561.086799][T15478] netlink: 'syz.3.3564': attribute type 10 has an invalid length.
[  561.832106][T15490] sctp: [Deprecated]: syz.2.3568 (pid 15490) Use of struct sctp_assoc_value in delayed_ack socket option.
[  561.832106][T15490] Use struct sctp_sack_info instead
[  562.068231][T15495] netlink: 'syz.0.3570': attribute type 10 has an invalid length.
[  562.085411][T15495] netlink: 'syz.0.3570': attribute type 4 has an invalid length.
[  562.790757][T15508] netlink: 'syz.1.3575': attribute type 21 has an invalid length.
[  562.813103][T15508] __nla_validate_parse: 10 callbacks suppressed
[  562.813135][T15508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3575'.
[  562.888076][T15508] netlink: 'syz.1.3575': attribute type 21 has an invalid length.
[  562.988784][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  563.000041][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  563.181999][T15516] netlink: 'syz.3.3577': attribute type 10 has an invalid length.
[  563.667228][T15514] tap0: tun_chr_ioctl cmd 2147767511
[  563.687287][T15519] tap0: tun_chr_ioctl cmd 1074025677
[  563.723127][T15519] tap0: linktype set to 778
[  563.926861][T15522] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3578'.
[  564.206361][T15528] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.3580'.
[  564.278995][T15528] netlink: 'syz.1.3580': attribute type 10 has an invalid length.
[  564.292846][T15528] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3580'.
[  564.307835][T15529] netlink: 'syz.1.3580': attribute type 4 has an invalid length.
[  564.325156][T15529] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3580'.
[  564.344108][T15529] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  565.986774][T15544] netlink: 'syz.1.3586': attribute type 21 has an invalid length.
[  566.043252][T15544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3586'.
[  566.086437][T15544] netlink: 'syz.1.3586': attribute type 21 has an invalid length.
[  567.194884][T15553] tap0: tun_chr_ioctl cmd 1074025677
[  567.201449][T15553] tap0: linktype set to 778
[  567.214660][T15551] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3588'.
[  567.226333][T15553] tap0: tun_chr_ioctl cmd 2147767511
[  567.394335][T15556] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.3590'.
[  567.430196][T15556] netlink: 'syz.3.3590': attribute type 10 has an invalid length.
[  567.438823][T15556] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3590'.
[  567.467392][T15556] netlink: 'syz.3.3590': attribute type 4 has an invalid length.
[  567.482847][T15556] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3590'.
[  567.853756][T15570] __nla_validate_parse: 1 callbacks suppressed
[  567.853773][T15570] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3593'.
[  568.836577][T15585] netlink: 'syz.0.3597': attribute type 21 has an invalid length.
[  568.845375][T15585] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3597'.
[  568.926520][T15583] netlink: 'syz.0.3597': attribute type 21 has an invalid length.
[  569.063193][T15587] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3599'.
[  569.376708][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3600'.
[  569.556706][T15594] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.3601'.
[  569.680352][T15594] netlink: 'syz.0.3601': attribute type 10 has an invalid length.
[  569.727434][T15594] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3601'.
[  569.823230][T15599] netlink: 'syz.0.3601': attribute type 4 has an invalid length.
[  569.851502][T15599] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3601'.
[  569.885299][T15600] tap0: tun_chr_ioctl cmd 1074025677
[  569.890827][T15600] tap0: linktype set to 778
[  570.015573][T15603] tap0: tun_chr_ioctl cmd 2147767511
[  572.017149][T15625] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3608'.
[  572.332979][T15627] netlink: 'syz.1.3609': attribute type 21 has an invalid length.
[  572.370399][T15627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3609'.
[  572.409221][T15628] netlink: 'syz.1.3609': attribute type 21 has an invalid length.
[  572.523729][T15631] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3610'.
[  572.562996][T15631] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  572.582873][T15631] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[  572.624707][T15631] netlink: 'syz.3.3610': attribute type 1 has an invalid length.
[  572.662295][T15634] netlink: 'syz.1.3611': attribute type 10 has an invalid length.
[  572.684828][T15634] netlink: 'syz.1.3611': attribute type 4 has an invalid length.
[  572.694218][T15634] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  572.925610][T15637] FAULT_INJECTION: forcing a failure.
[  572.925610][T15637] name failslab, interval 1, probability 0, space 0, times 0
[  572.984063][T15637] CPU: 1 PID: 15637 Comm: syz.1.3613 Not tainted syzkaller #0
[  572.991583][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  573.001654][T15637] Call Trace:
[  573.004947][T15637]  <TASK>
[  573.007895][T15637]  dump_stack_lvl+0x18c/0x250
[  573.012593][T15637]  ? show_regs_print_info+0x20/0x20
[  573.017810][T15637]  ? load_image+0x420/0x420
[  573.022331][T15637]  ? __lock_acquire+0x7d40/0x7d40
[  573.027379][T15637]  should_fail_ex+0x39d/0x4d0
[  573.032081][T15637]  should_failslab+0x9/0x20
[  573.036605][T15637]  slab_pre_alloc_hook+0x59/0x310
[  573.041661][T15637]  ? ip6_setup_cork+0x50c/0xfe0
[  573.046538][T15637]  ? ip6_setup_cork+0x50c/0xfe0
[  573.051409][T15637]  __kmem_cache_alloc_node+0x53/0x250
[  573.056801][T15637]  ? ip6_setup_cork+0x50c/0xfe0
[  573.061674][T15637]  __kmalloc_node_track_caller+0xa2/0x230
[  573.067465][T15637]  kmemdup+0x2b/0x70
[  573.071380][T15637]  ip6_setup_cork+0x50c/0xfe0
[  573.076088][T15637]  ip6_append_data+0x220/0x350
[  573.080873][T15637]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  573.085768][T15637]  l2tp_ip6_sendmsg+0x1237/0x1690
[  573.090887][T15637]  ? __might_sleep+0xe0/0xe0
[  573.095497][T15637]  ? l2tp_ip6_destroy_sock+0x60/0x60
[  573.100823][T15637]  ? aa_af_perm+0x330/0x330
[  573.105341][T15637]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  573.111779][T15637]  ? sock_rps_record_flow+0x19/0x3f0
[  573.117096][T15637]  ? inet_sendmsg+0x7c/0x2f0
[  573.121709][T15637]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  573.127013][T15637]  ? security_socket_sendmsg+0x80/0xa0
[  573.132485][T15637]  ? inet_send_prepare+0x260/0x260
[  573.137616][T15637]  ____sys_sendmsg+0x5ba/0x960
[  573.142398][T15637]  ? __lock_acquire+0x7d40/0x7d40
[  573.147442][T15637]  ? __sys_sendmsg_sock+0x30/0x30
[  573.152472][T15637]  ? __import_iovec+0x3fa/0x850
[  573.157365][T15637]  ? import_iovec+0x73/0xa0
[  573.161884][T15637]  ___sys_sendmsg+0x2a6/0x360
[  573.166578][T15637]  ? __sys_sendmsg+0x2a0/0x2a0
[  573.171403][T15637]  __se_sys_sendmsg+0x1c2/0x2b0
[  573.176267][T15637]  ? __x64_sys_sendmsg+0x80/0x80
[  573.181239][T15637]  ? lockdep_hardirqs_on+0x98/0x150
[  573.186467][T15637]  do_syscall_64+0x55/0xb0
[  573.190892][T15637]  ? clear_bhb_loop+0x40/0x90
[  573.195576][T15637]  ? clear_bhb_loop+0x40/0x90
[  573.200258][T15637]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  573.206169][T15637] RIP: 0033:0x7f83a9f9ce59
[  573.210591][T15637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.230208][T15637] RSP: 002b:00007f83aade4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  573.238631][T15637] RAX: ffffffffffffffda RBX: 00007f83aa215fa0 RCX: 00007f83a9f9ce59
[  573.246608][T15637] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000007
[  573.254583][T15637] RBP: 00007f83aade4090 R08: 0000000000000000 R09: 0000000000000000
[  573.262559][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  573.270530][T15637] R13: 00007f83aa216038 R14: 00007f83aa215fa0 R15: 00007ffc8db82788
[  573.278529][T15637]  </TASK>
[  573.770872][T15650] tap0: tun_chr_ioctl cmd 2147767511
[  573.790937][T15647] tap0: tun_chr_ioctl cmd 1074025677
[  573.805264][T15647] tap0: linktype set to 778
[  574.333429][T15660] tap0: tun_chr_ioctl cmd 1074025677
[  574.365992][T15660] tap0: linktype set to 778
[  574.393289][T15660] tap0: tun_chr_ioctl cmd 2147767511
[  575.028974][T15669] __nla_validate_parse: 4 callbacks suppressed
[  575.029010][T15669] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.3621'.
[  575.071557][T15669] netlink: 'syz.0.3621': attribute type 10 has an invalid length.
[  575.081195][T15669] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3621'.
[  575.096304][T15669] netlink: 'syz.0.3621': attribute type 4 has an invalid length.
[  575.104320][T15669] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3621'.
[  575.297953][T15677] FAULT_INJECTION: forcing a failure.
[  575.297953][T15677] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  575.312399][T15677] CPU: 0 PID: 15677 Comm: syz.1.3622 Not tainted syzkaller #0
[  575.319884][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  575.329931][T15677] Call Trace:
[  575.333209][T15677]  <TASK>
[  575.336165][T15677]  dump_stack_lvl+0x18c/0x250
[  575.340850][T15677]  ? show_regs_print_info+0x20/0x20
[  575.346040][T15677]  ? lockdep_hardirqs_on+0x98/0x150
[  575.351243][T15677]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  575.357401][T15677]  should_fail_ex+0x39d/0x4d0
[  575.362077][T15677]  _copy_from_iter+0x1d9/0x12e0
[  575.366924][T15677]  ? slab_post_alloc_hook+0x8a/0x4b0
[  575.372201][T15677]  ? __virt_addr_valid+0x18c/0x540
[  575.377304][T15677]  ? __lock_acquire+0x7d40/0x7d40
[  575.382322][T15677]  ? rcu_is_watching+0x15/0xb0
[  575.387085][T15677]  ? copyout_mc+0x70/0x70
[  575.391409][T15677]  ? __virt_addr_valid+0x18c/0x540
[  575.396512][T15677]  ? __virt_addr_valid+0x18c/0x540
[  575.401613][T15677]  ? __virt_addr_valid+0x469/0x540
[  575.406719][T15677]  ? __check_object_size+0x506/0xa20
[  575.411993][T15677]  netlink_sendmsg+0x76b/0xbf0
[  575.416754][T15677]  ? netlink_getsockopt+0x590/0x590
[  575.421946][T15677]  ? aa_sock_msg_perm+0x94/0x150
[  575.426875][T15677]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  575.432151][T15677]  ? security_socket_sendmsg+0x80/0xa0
[  575.437601][T15677]  ? netlink_getsockopt+0x590/0x590
[  575.442791][T15677]  ____sys_sendmsg+0x5ba/0x960
[  575.447549][T15677]  ? __asan_memset+0x22/0x40
[  575.452136][T15677]  ? __sys_sendmsg_sock+0x30/0x30
[  575.457147][T15677]  ? __import_iovec+0x5f2/0x850
[  575.461992][T15677]  ? import_iovec+0x73/0xa0
[  575.466485][T15677]  ___sys_sendmsg+0x2a6/0x360
[  575.471154][T15677]  ? get_pid_task+0x20/0x1e0
[  575.475739][T15677]  ? __sys_sendmsg+0x2a0/0x2a0
[  575.480507][T15677]  ? __lock_acquire+0x7d40/0x7d40
[  575.485537][T15677]  __se_sys_sendmsg+0x1c2/0x2b0
[  575.490385][T15677]  ? __x64_sys_sendmsg+0x80/0x80
[  575.495322][T15677]  ? lockdep_hardirqs_on+0x98/0x150
[  575.500515][T15677]  do_syscall_64+0x55/0xb0
[  575.504923][T15677]  ? clear_bhb_loop+0x40/0x90
[  575.509590][T15677]  ? clear_bhb_loop+0x40/0x90
[  575.514253][T15677]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  575.520140][T15677] RIP: 0033:0x7f83a9f9ce59
[  575.524549][T15677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  575.544150][T15677] RSP: 002b:00007f83aade4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  575.552561][T15677] RAX: ffffffffffffffda RBX: 00007f83aa215fa0 RCX: 00007f83a9f9ce59
[  575.560524][T15677] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007
[  575.568487][T15677] RBP: 00007f83aade4090 R08: 0000000000000000 R09: 0000000000000000
[  575.576448][T15677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  575.584406][T15677] R13: 00007f83aa216038 R14: 00007f83aa215fa0 R15: 00007ffc8db82788
[  575.592374][T15677]  </TASK>
[  576.180531][T15692] tap0: tun_chr_ioctl cmd 1074025677
[  576.187864][T15692] tap0: linktype set to 778
[  576.255505][T15692] tap0: tun_chr_ioctl cmd 2147767511
[  576.302979][T15696] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.3632'.
[  576.382837][T15696] netlink: 'syz.3.3632': attribute type 10 has an invalid length.
[  576.403740][T15696] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3632'.
[  576.508079][T15699] netlink: 'syz.3.3632': attribute type 4 has an invalid length.
[  576.516017][T15699] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3632'.
[  576.598107][T15702] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3633'.
[  576.763083][T15705] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.3634'.
[  576.866817][T15705] netlink: 'syz.3.3634': attribute type 10 has an invalid length.
[  576.899707][T15705] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3634'.
[  577.046332][T15712] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3634'.
[  578.187904][T15723] validate_nla: 1 callbacks suppressed
[  578.187942][T15723] netlink: 'syz.3.3642': attribute type 10 has an invalid length.
[  578.223640][T15723] netlink: 'syz.3.3642': attribute type 4 has an invalid length.
[  578.294296][T15725] tap0: tun_chr_ioctl cmd 1074025677
[  578.318381][T15725] tap0: linktype set to 778
[  578.354617][T15728] tap0: tun_chr_ioctl cmd 2147767511
[  579.346943][T15745] netlink: 'syz.0.3649': attribute type 10 has an invalid length.
[  579.404883][T15745] netlink: 'syz.0.3649': attribute type 4 has an invalid length.
[  579.682507][T15753] netlink: 'syz.1.3651': attribute type 10 has an invalid length.
[  579.692249][T15753] netlink: 'syz.1.3651': attribute type 4 has an invalid length.
[  579.701122][T15753] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  580.140573][T15765] tap0: tun_chr_ioctl cmd 1074025677
[  580.153270][T15765] tap0: linktype set to 778
[  580.174082][T15765] tap0: tun_chr_ioctl cmd 2147767511
[  580.228139][T15770] __nla_validate_parse: 11 callbacks suppressed
[  580.228182][T15770] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3665'.
[  580.556763][T15778] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.3662'.
[  580.653096][T15778] netlink: 'syz.3.3662': attribute type 10 has an invalid length.
[  580.661851][T15778] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3662'.
[  580.712673][T15785] netlink: 'syz.3.3662': attribute type 4 has an invalid length.
[  580.742575][T15785] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3662'.
[  581.166690][T15800] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3669'.
[  581.250957][T15803] tap0: tun_chr_ioctl cmd 1074025677
[  581.273439][T15803] tap0: linktype set to 778
[  581.308486][T15803] tap0: tun_chr_ioctl cmd 2147767511
[  581.330367][T15806] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3672'.
[  581.339974][T15806] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  581.349547][T15806] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  581.897504][T15817] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.3676'.
[  581.973939][T15817] netlink: 'syz.2.3676': attribute type 10 has an invalid length.
[  582.007160][T15817] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3676'.
[  582.019697][T15817] netlink: 'syz.2.3676': attribute type 4 has an invalid length.
[  582.028976][T15817] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3676'.
[  582.039210][T15825] FAULT_INJECTION: forcing a failure.
[  582.039210][T15825] name failslab, interval 1, probability 0, space 0, times 0
[  582.063657][T15825] CPU: 1 PID: 15825 Comm: syz.1.3680 Not tainted syzkaller #0
[  582.071147][T15825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  582.081214][T15825] Call Trace:
[  582.084502][T15825]  <TASK>
[  582.087433][T15825]  dump_stack_lvl+0x18c/0x250
[  582.092114][T15825]  ? show_regs_print_info+0x20/0x20
[  582.097307][T15825]  ? load_image+0x420/0x420
[  582.101804][T15825]  ? verify_lock_unused+0x140/0x140
[  582.106999][T15825]  should_fail_ex+0x39d/0x4d0
[  582.111674][T15825]  should_failslab+0x9/0x20
[  582.116173][T15825]  slab_pre_alloc_hook+0x59/0x310
[  582.121202][T15825]  kmem_cache_alloc+0x5a/0x2d0
[  582.125964][T15825]  ? skb_clone+0x1eb/0x370
[  582.130378][T15825]  skb_clone+0x1eb/0x370
[  582.134636][T15825]  __netlink_deliver_tap+0x41c/0x830
[  582.139922][T15825]  ? netlink_deliver_tap+0x2e/0x1b0
[  582.145111][T15825]  netlink_deliver_tap+0x19c/0x1b0
[  582.150213][T15825]  netlink_unicast+0x72c/0x8d0
[  582.154975][T15825]  netlink_sendmsg+0x8d0/0xbf0
[  582.159738][T15825]  ? netlink_getsockopt+0x590/0x590
[  582.164930][T15825]  ? aa_sock_msg_perm+0x94/0x150
[  582.169863][T15825]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  582.175146][T15825]  ? security_socket_sendmsg+0x80/0xa0
[  582.180596][T15825]  ? netlink_getsockopt+0x590/0x590
[  582.185785][T15825]  ____sys_sendmsg+0x5ba/0x960
[  582.190547][T15825]  ? __asan_memset+0x22/0x40
[  582.195132][T15825]  ? __sys_sendmsg_sock+0x30/0x30
[  582.200146][T15825]  ? __import_iovec+0x5f2/0x850
[  582.204992][T15825]  ? import_iovec+0x73/0xa0
[  582.209489][T15825]  ___sys_sendmsg+0x2a6/0x360
[  582.214157][T15825]  ? get_pid_task+0x20/0x1e0
[  582.218762][T15825]  ? __sys_sendmsg+0x2a0/0x2a0
[  582.223556][T15825]  ? __lock_acquire+0x7d40/0x7d40
[  582.228622][T15825]  __se_sys_sendmsg+0x1c2/0x2b0
[  582.233477][T15825]  ? __x64_sys_sendmsg+0x80/0x80
[  582.238449][T15825]  ? lockdep_hardirqs_on+0x98/0x150
[  582.243659][T15825]  do_syscall_64+0x55/0xb0
[  582.248072][T15825]  ? clear_bhb_loop+0x40/0x90
[  582.252741][T15825]  ? clear_bhb_loop+0x40/0x90
[  582.257418][T15825]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  582.263309][T15825] RIP: 0033:0x7f83a9f9ce59
[  582.267716][T15825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.287311][T15825] RSP: 002b:00007f83aade4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  582.295717][T15825] RAX: ffffffffffffffda RBX: 00007f83aa215fa0 RCX: 00007f83a9f9ce59
[  582.303681][T15825] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  582.311640][T15825] RBP: 00007f83aade4090 R08: 0000000000000000 R09: 0000000000000000
[  582.319599][T15825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.327562][T15825] R13: 00007f83aa216038 R14: 00007f83aa215fa0 R15: 00007ffc8db82788
[  582.335536][T15825]  </TASK>
[  582.506072][T15830] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3682'.
[  582.515628][T15830] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  582.525984][T15822] delete_channel: no stack
[  582.530995][T15830] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  582.792180][T15838] tap0: tun_chr_ioctl cmd 1074025677
[  582.813331][T15838] tap0: linktype set to 778
[  582.825047][T15838] tap0: tun_chr_ioctl cmd 2147767511
[  583.196841][T15849] tap0: tun_chr_ioctl cmd 1074025677
[  583.211861][T15849] tap0: linktype set to 778
[  583.249532][T15849] tap0: tun_chr_ioctl cmd 2147767511
[  583.583920][T15858] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  583.602876][T15858] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  583.645232][T15856] netlink: 'syz.3.3691': attribute type 10 has an invalid length.
[  583.686189][T15856] netlink: 'syz.3.3691': attribute type 4 has an invalid length.
[  584.310980][T15864] veth1_macvtap: entered allmulticast mode
[  584.821688][T15880] tap0: tun_chr_ioctl cmd 1074025677
[  584.831235][T15880] tap0: linktype set to 778
[  584.854997][T15880] tap0: tun_chr_ioctl cmd 2147767511
[  584.908630][T15883] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  584.926015][T15883] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[  585.125878][T15885] netlink: 'syz.1.3703': attribute type 10 has an invalid length.
[  585.154367][T15885] netlink: 'syz.1.3703': attribute type 4 has an invalid length.
[  585.177428][T15885] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  585.428130][T15891] __nla_validate_parse: 10 callbacks suppressed
[  585.428163][T15891] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3706'.
[  588.702039][T15916] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.3713'.
[  588.706417][T15917] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3711'.
[  588.719032][T15916] netlink: 'syz.1.3713': attribute type 10 has an invalid length.
[  588.723715][T15917] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  588.728951][T15916] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3713'.
[  588.737222][T15917] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[  588.787671][T15916] netlink: 'syz.1.3713': attribute type 4 has an invalid length.
[  588.803185][T15916] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3713'.
[  588.812490][T15916] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  588.836989][T15921] tap0: tun_chr_ioctl cmd 1074025677
[  588.855890][T15921] tap0: linktype set to 778
[  588.890129][T15914] tap0: tun_chr_ioctl cmd 2147767511
[  588.981674][T15927] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3716'.
[  589.223476][T15936] tap0: tun_chr_ioctl cmd 1074025677
[  589.233404][T15936] tap0: linktype set to 778
[  589.243183][T15936] tap0: tun_chr_ioctl cmd 2147767511
[  589.991456][T15948] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3724'.
[  590.017323][T15948] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  590.047809][T15948] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[  590.306834][T15958] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3729'.
[  590.426656][T15962] tap0: tun_chr_ioctl cmd 1074025677
[  590.433172][T15962] tap0: linktype set to 778
[  590.440008][T15962] tap0: tun_chr_ioctl cmd 2147767511
[  590.513687][T15959] delete_channel: no stack
[  590.532905][T15964] netlink: 'syz.3.3732': attribute type 21 has an invalid length.
[  590.547883][T15964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3732'.
[  590.575565][T15967] netlink: 'syz.3.3732': attribute type 21 has an invalid length.
[  591.120457][T15980] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3739'.
[  591.298500][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3742'.
[  591.729613][T15999] netlink: 'syz.0.3746': attribute type 10 has an invalid length.
[  592.400350][T16005] netlink: 'syz.1.3748': attribute type 9 has an invalid length.
[  592.408951][T16005] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3748'.
[  592.873738][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3753'.
[  592.913850][T16020] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3752'.
[  595.979637][T16027] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.3754'.
[  596.073806][T16027] netlink: 'syz.0.3754': attribute type 10 has an invalid length.
[  596.107384][T16027] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3754'.
[  596.129651][T16038] netlink: 'syz.0.3754': attribute type 4 has an invalid length.
[  596.142010][T16038] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3754'.
[  596.296992][T16036] tap0: tun_chr_ioctl cmd 1074025677
[  596.304174][T16036] tap0: linktype set to 778
[  596.313972][T16039] tap0: tun_chr_ioctl cmd 2147767511
[  596.431087][T16041] tap0: tun_chr_ioctl cmd 1074025677
[  596.449861][T16041] tap0: linktype set to 778
[  596.502779][T16041] tap0: tun_chr_ioctl cmd 2147767511
[  596.736134][T16049] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3761'.
[  596.951462][T16053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3764'.
[  597.034144][T16056] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3765'.
[  597.126314][T16059] netlink: 'syz.0.3766': attribute type 4 has an invalid length.
[  597.165687][T16059] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3766'.
[  597.397887][T16066] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.3767'.
[  597.439215][T16063] netlink: 'syz.2.3767': attribute type 10 has an invalid length.
[  597.452870][T16063] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3767'.
[  597.545489][T16063] netlink: 'syz.2.3767': attribute type 4 has an invalid length.
[  597.566946][T16070] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3771'.
[  597.597150][T16070] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  597.617362][T16070] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[  597.891134][T16073] tap0: tun_chr_ioctl cmd 1074025677
[  597.921944][T16073] tap0: linktype set to 778
[  597.941390][T16073] tap0: tun_chr_ioctl cmd 2147767511
[  598.673319][T16101] netlink: 'syz.3.3780': attribute type 10 has an invalid length.
[  599.253972][T16104] netlink: 'syz.0.3782': attribute type 10 has an invalid length.
[  599.278569][T16104] netlink: 'syz.0.3782': attribute type 4 has an invalid length.
[  599.296695][T16106] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  599.335504][T16106] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  599.756712][T16121] tap0: tun_chr_ioctl cmd 1074025677
[  599.774316][T16121] tap0: linktype set to 778
[  599.801676][T16121] tap0: tun_chr_ioctl cmd 2147767511
[  600.682884][T16137] netlink: 'syz.2.3795': attribute type 10 has an invalid length.
[  600.724839][T16138] netlink: 'syz.2.3795': attribute type 4 has an invalid length.
[  601.012019][T16148] __nla_validate_parse: 12 callbacks suppressed
[  601.012054][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3799'.
[  601.516834][T16162] netlink: 'syz.2.3803': attribute type 10 has an invalid length.
[  601.528865][T16161] netlink: 'syz.2.3803': attribute type 10 has an invalid length.
[  601.831887][T16170] netlink: 'syz.0.3806': attribute type 10 has an invalid length.
[  602.994291][T16194] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.3815'.
[  603.034349][T16194] netlink: 'syz.1.3815': attribute type 10 has an invalid length.
[  603.043354][T16194] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3815'.
[  603.100666][T16194] netlink: 'syz.1.3815': attribute type 4 has an invalid length.
[  603.170130][T16194] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3815'.
[  603.192889][T16194] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  603.647996][T16204] netlink: 'syz.1.3817': attribute type 10 has an invalid length.
[  603.664175][T16204] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3817'.
[  603.697105][T16204] netlink: 'syz.1.3817': attribute type 4 has an invalid length.
[  603.716976][T16204] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3817'.
[  603.729052][T16204] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  603.848833][T16211] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3820'.
[  603.893112][T16211] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  603.901868][T16211] openvswitch: netlink: Message has 6332 unknown bytes.
[  604.228018][T16223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3825'.
[  604.466052][T16227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3835'.
[  604.798174][T16238] netlink: 'syz.3.3831': attribute type 21 has an invalid length.
[  604.813046][T16238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3831'.
[  604.841045][T16238] netlink: 'syz.3.3831': attribute type 21 has an invalid length.
[  605.058016][T16244] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  605.092821][T16244] openvswitch: netlink: Message has 6332 unknown bytes.
[  605.508407][T16250] tap0: tun_chr_ioctl cmd 1074025677
[  605.523613][T16250] tap0: linktype set to 778
[  605.543697][T16250] tap0: tun_chr_ioctl cmd 2147767511
[  605.967457][T16266] netlink: 'syz.3.3843': attribute type 21 has an invalid length.
[  605.994033][T16268] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  606.032850][T16268] openvswitch: netlink: Message has 6332 unknown bytes.
[  606.457814][T16285] tap0: tun_chr_ioctl cmd 1074025677
[  606.483523][T16285] tap0: linktype set to 778
[  606.492601][T16285] tap0: tun_chr_ioctl cmd 2147767511
[  606.886646][T16296] validate_nla: 1 callbacks suppressed
[  606.886678][T16296] netlink: 'syz.2.3853': attribute type 10 has an invalid length.
[  606.912885][T16296] __nla_validate_parse: 4 callbacks suppressed
[  606.912920][T16296] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3853'.
[  606.950179][T16299] netlink: 'syz.2.3853': attribute type 4 has an invalid length.
[  606.960555][T16299] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3853'.
[  606.984701][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3854'.
[  607.168749][T16303] netlink: 'syz.0.3855': attribute type 10 has an invalid length.
[  607.441621][T16305] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3856'.
[  607.475986][T16305] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  607.505470][T16305] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[  607.544560][T16308] netlink: 'syz.1.3857': attribute type 21 has an invalid length.
[  607.573490][T16308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3857'.
[  607.644898][T16308] netlink: 'syz.1.3857': attribute type 21 has an invalid length.
[  608.394718][T16321] tap0: tun_chr_ioctl cmd 1074025677
[  608.400714][T16321] tap0: linktype set to 778
[  608.425978][T16321] tap0: tun_chr_ioctl cmd 2147767511
[  608.608301][T16327] netlink: 'syz.1.3864': attribute type 10 has an invalid length.
[  608.636626][T16327] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3864'.
[  608.655051][T16330] netlink: 'syz.1.3864': attribute type 4 has an invalid length.
[  608.673398][T16330] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3864'.
[  608.687683][T16330] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  608.794696][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3865'.
[  609.026055][T16340] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3867'.
[  609.100623][T16340] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  609.162858][T16340] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[  609.494907][T16346] netlink: 'syz.2.3868': attribute type 10 has an invalid length.
[  609.775773][T16350] FAULT_INJECTION: forcing a failure.
[  609.775773][T16350] name failslab, interval 1, probability 0, space 0, times 0
[  609.806146][T16350] CPU: 1 PID: 16350 Comm: syz.1.3869 Not tainted syzkaller #0
[  609.813682][T16350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  609.823790][T16350] Call Trace:
[  609.827105][T16350]  <TASK>
[  609.830071][T16350]  dump_stack_lvl+0x18c/0x250
[  609.834791][T16350]  ? sctp_sendmsg+0x15d2/0x2910
[  609.839720][T16350]  ? ___sys_sendmsg+0x2a6/0x360
[  609.844625][T16350]  ? show_regs_print_info+0x20/0x20
[  609.849870][T16350]  ? load_image+0x420/0x420
[  609.854472][T16350]  should_fail_ex+0x39d/0x4d0
[  609.859217][T16350]  should_failslab+0x9/0x20
[  609.863765][T16350]  slab_pre_alloc_hook+0x59/0x310
[  609.868844][T16350]  ? sctp_add_bind_addr+0x8c/0x360
[  609.874007][T16350]  __kmem_cache_alloc_node+0x53/0x250
[  609.879456][T16350]  ? sctp_add_bind_addr+0x8c/0x360
[  609.884617][T16350]  kmalloc_trace+0x2a/0xe0
[  609.889095][T16350]  sctp_add_bind_addr+0x8c/0x360
[  609.894103][T16350]  sctp_copy_local_addr_list+0x315/0x4f0
[  609.899793][T16350]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  609.905552][T16350]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  609.911649][T16350]  ? sctp_v4_is_any+0x35/0x60
[  609.916340][T16350]  ? sctp_copy_one_addr+0x8c/0x350
[  609.921479][T16350]  sctp_bind_addr_copy+0xb3/0x3c0
[  609.926524][T16350]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  609.932879][T16350]  sctp_connect_new_asoc+0x2f9/0x6a0
[  609.938191][T16350]  ? __sctp_connect+0xd80/0xd80
[  609.943059][T16350]  ? __local_bh_enable_ip+0x13a/0x1c0
[  609.948462][T16350]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  609.954024][T16350]  ? security_sctp_bind_connect+0x89/0xb0
[  609.959771][T16350]  sctp_sendmsg+0x15d2/0x2910
[  609.964498][T16350]  ? sctp_getsockopt+0xb60/0xb60
[  609.969459][T16350]  ? aa_sk_perm+0x83c/0x970
[  609.974001][T16350]  ? aa_af_perm+0x330/0x330
[  609.978517][T16350]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  609.984961][T16350]  ? sock_rps_record_flow+0x19/0x3f0
[  609.990277][T16350]  ? inet_sendmsg+0xe9/0x2f0
[  609.994885][T16350]  ? inet_send_prepare+0x260/0x260
[  610.000023][T16350]  ____sys_sendmsg+0x5ba/0x960
[  610.004806][T16350]  ? __lock_acquire+0x7d40/0x7d40
[  610.009857][T16350]  ? __asan_memset+0x22/0x40
[  610.014465][T16350]  ? __sys_sendmsg_sock+0x30/0x30
[  610.019497][T16350]  ? __import_iovec+0x5f2/0x850
[  610.024389][T16350]  ? import_iovec+0x73/0xa0
[  610.028915][T16350]  ___sys_sendmsg+0x2a6/0x360
[  610.033622][T16350]  ? __sys_sendmsg+0x2a0/0x2a0
[  610.038455][T16350]  ? __lock_acquire+0x7d40/0x7d40
[  610.043556][T16350]  __se_sys_sendmsg+0x1c2/0x2b0
[  610.048433][T16350]  ? __x64_sys_sendmsg+0x80/0x80
[  610.053427][T16350]  ? lockdep_hardirqs_on+0x98/0x150
[  610.058659][T16350]  do_syscall_64+0x55/0xb0
[  610.063091][T16350]  ? clear_bhb_loop+0x40/0x90
[  610.067779][T16350]  ? clear_bhb_loop+0x40/0x90
[  610.072480][T16350]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  610.078390][T16350] RIP: 0033:0x7f83a9f9ce59
[  610.082825][T16350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.102440][T16350] RSP: 002b:00007f83aade4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  610.110871][T16350] RAX: ffffffffffffffda RBX: 00007f83aa215fa0 RCX: 00007f83a9f9ce59
[  610.118852][T16350] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000038
[  610.126835][T16350] RBP: 00007f83aade4090 R08: 0000000000000000 R09: 0000000000000000
[  610.134824][T16350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  610.142807][T16350] R13: 00007f83aa216038 R14: 00007f83aa215fa0 R15: 00007ffc8db82788
[  610.150832][T16350]  </TASK>
[  610.927464][T16361] tap0: tun_chr_ioctl cmd 1074025677
[  610.943435][T16361] tap0: linktype set to 778
[  610.963483][T16361] tap0: tun_chr_ioctl cmd 2147767511
[  611.138431][T16373] netlink: 'syz.2.3875': attribute type 10 has an invalid length.
[  611.156856][T16373] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3875'.
[  611.198311][T16376] netlink: 'syz.2.3875': attribute type 4 has an invalid length.
[  611.443373][T16384] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  611.461916][T16384] openvswitch: netlink: Message has 6332 unknown bytes.
[  611.707499][T16398] FAULT_INJECTION: forcing a failure.
[  611.707499][T16398] name failslab, interval 1, probability 0, space 0, times 0
[  611.736684][T16398] CPU: 1 PID: 16398 Comm: syz.2.3880 Not tainted syzkaller #0
[  611.744196][T16398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  611.754266][T16398] Call Trace:
[  611.757553][T16398]  <TASK>
[  611.760493][T16398]  dump_stack_lvl+0x18c/0x250
[  611.765203][T16398]  ? show_regs_print_info+0x20/0x20
[  611.770422][T16398]  ? load_image+0x420/0x420
[  611.774944][T16398]  ? __might_sleep+0xe0/0xe0
[  611.779578][T16398]  ? __lock_acquire+0x7d40/0x7d40
[  611.784631][T16398]  should_fail_ex+0x39d/0x4d0
[  611.789336][T16398]  should_failslab+0x9/0x20
[  611.793858][T16398]  slab_pre_alloc_hook+0x59/0x310
[  611.798902][T16398]  ? __get_vm_area_node+0x125/0x370
[  611.804122][T16398]  __kmem_cache_alloc_node+0x53/0x250
[  611.809524][T16398]  ? __get_vm_area_node+0x125/0x370
[  611.814739][T16398]  kmalloc_node_trace+0x26/0xe0
[  611.819606][T16398]  __get_vm_area_node+0x125/0x370
[  611.824655][T16398]  __vmalloc_node_range+0x36e/0x1330
[  611.829955][T16398]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  611.835517][T16398]  ? mark_lock+0x94/0x320
[  611.839860][T16398]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  611.845647][T16398]  ? perf_trace_preemptirq_template+0x269/0x330
[  611.851925][T16398]  ? free_vm_area+0x50/0x50
[  611.856453][T16398]  ? end_current_label_crit_section+0x170/0x170
[  611.862715][T16398]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  611.868275][T16398]  __vmalloc+0x7a/0x90
[  611.872362][T16398]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  611.877923][T16398]  bpf_prog_alloc_no_stats+0x47/0x440
[  611.883313][T16398]  ? bpf_prog_alloc+0x2b/0x1a0
[  611.888095][T16398]  bpf_prog_alloc+0x3d/0x1a0
[  611.892701][T16398]  bpf_prog_load+0x6eb/0x1670
[  611.897400][T16398]  ? map_freeze+0x420/0x420
[  611.901919][T16398]  ? __might_fault+0xaa/0x120
[  611.906613][T16398]  ? __lock_acquire+0x7d40/0x7d40
[  611.911657][T16398]  ? __might_fault+0xaa/0x120
[  611.916346][T16398]  ? __might_fault+0xc6/0x120
[  611.921032][T16398]  ? __might_fault+0xaa/0x120
[  611.925720][T16398]  ? bpf_lsm_bpf+0x9/0x10
[  611.930065][T16398]  ? security_bpf+0x7e/0xa0
[  611.934584][T16398]  __sys_bpf+0x5ba/0x890
[  611.938844][T16398]  ? bpf_link_show_fdinfo+0x390/0x390
[  611.944259][T16398]  __x64_sys_bpf+0x7c/0x90
[  611.948690][T16398]  do_syscall_64+0x55/0xb0
[  611.953125][T16398]  ? clear_bhb_loop+0x40/0x90
[  611.957817][T16398]  ? clear_bhb_loop+0x40/0x90
[  611.962504][T16398]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  611.968418][T16398] RIP: 0033:0x7fb098b9ce59
[  611.972842][T16398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  611.992463][T16398] RSP: 002b:00007fb099abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  612.000899][T16398] RAX: ffffffffffffffda RBX: 00007fb098e15fa0 RCX: 00007fb098b9ce59
[  612.008889][T16398] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[  612.016874][T16398] RBP: 00007fb099abc090 R08: 0000000000000000 R09: 0000000000000000
[  612.024857][T16398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  612.032858][T16398] R13: 00007fb098e16038 R14: 00007fb098e15fa0 R15: 00007ffcc6763258
[  612.040861][T16398]  </TASK>
[  612.051717][T16398] syz.2.3880: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  612.069721][T16398] CPU: 1 PID: 16398 Comm: syz.2.3880 Not tainted syzkaller #0
[  612.077202][T16398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  612.087266][T16398] Call Trace:
[  612.090552][T16398]  <TASK>
[  612.093497][T16398]  dump_stack_lvl+0x18c/0x250
[  612.098200][T16398]  ? show_regs_print_info+0x20/0x20
[  612.103420][T16398]  ? load_image+0x420/0x420
[  612.107942][T16398]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  612.114378][T16398]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  612.120900][T16398]  warn_alloc+0x246/0x340
[  612.125259][T16398]  ? __get_vm_area_node+0x125/0x370
[  612.130481][T16398]  ? zone_watermark_ok_safe+0x230/0x230
[  612.136044][T16398]  ? rcu_is_watching+0x15/0xb0
[  612.140837][T16398]  ? __get_vm_area_node+0x356/0x370
[  612.146069][T16398]  __vmalloc_node_range+0x393/0x1330
[  612.151377][T16398]  ? mark_lock+0x94/0x320
[  612.155727][T16398]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  612.161466][T16398]  ? perf_trace_preemptirq_template+0x269/0x330
[  612.167726][T16398]  ? free_vm_area+0x50/0x50
[  612.172235][T16398]  ? end_current_label_crit_section+0x170/0x170
[  612.178485][T16398]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  612.184029][T16398]  __vmalloc+0x7a/0x90
[  612.188101][T16398]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  612.193648][T16398]  bpf_prog_alloc_no_stats+0x47/0x440
[  612.199017][T16398]  ? bpf_prog_alloc+0x2b/0x1a0
[  612.203782][T16398]  bpf_prog_alloc+0x3d/0x1a0
[  612.208370][T16398]  bpf_prog_load+0x6eb/0x1670
[  612.213081][T16398]  ? map_freeze+0x420/0x420
[  612.217591][T16398]  ? __might_fault+0xaa/0x120
[  612.222263][T16398]  ? __lock_acquire+0x7d40/0x7d40
[  612.227288][T16398]  ? __might_fault+0xaa/0x120
[  612.231961][T16398]  ? __might_fault+0xc6/0x120
[  612.236630][T16398]  ? __might_fault+0xaa/0x120
[  612.241306][T16398]  ? bpf_lsm_bpf+0x9/0x10
[  612.245634][T16398]  ? security_bpf+0x7e/0xa0
[  612.250139][T16398]  __sys_bpf+0x5ba/0x890
[  612.254381][T16398]  ? bpf_link_show_fdinfo+0x390/0x390
[  612.259773][T16398]  __x64_sys_bpf+0x7c/0x90
[  612.264187][T16398]  do_syscall_64+0x55/0xb0
[  612.268600][T16398]  ? clear_bhb_loop+0x40/0x90
[  612.273270][T16398]  ? clear_bhb_loop+0x40/0x90
[  612.277940][T16398]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  612.283831][T16398] RIP: 0033:0x7fb098b9ce59
[  612.288241][T16398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.307844][T16398] RSP: 002b:00007fb099abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  612.316255][T16398] RAX: ffffffffffffffda RBX: 00007fb098e15fa0 RCX: 00007fb098b9ce59
[  612.324221][T16398] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[  612.332186][T16398] RBP: 00007fb099abc090 R08: 0000000000000000 R09: 0000000000000000
[  612.340152][T16398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  612.348114][T16398] R13: 00007fb098e16038 R14: 00007fb098e15fa0 R15: 00007ffcc6763258
[  612.356095][T16398]  </TASK>
[  612.398077][T16398] Mem-Info:
[  612.402170][T16398] active_anon:13761 inactive_anon:0 isolated_anon:0
[  612.402170][T16398]  active_file:19004 inactive_file:40169 isolated_file:0
[  612.402170][T16398]  unevictable:768 dirty:188 writeback:0
[  612.402170][T16398]  slab_reclaimable:10677 slab_unreclaimable:92083
[  612.402170][T16398]  mapped:24605 shmem:1380 pagetables:556
[  612.402170][T16398]  sec_pagetables:0 bounce:0
[  612.402170][T16398]  kernel_misc_reclaimable:0
[  612.402170][T16398]  free:1337791 free_pcp:12069 free_cma:0
[  612.458277][T16398] Node 0 active_anon:55144kB inactive_anon:0kB active_file:76016kB inactive_file:160472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98420kB dirty:752kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10204kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no
[  612.501977][T16398] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  612.586025][T16398] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  612.626537][T16398] lowmem_reserve[]: 0 2521 2522 2522 2522
[  612.632520][T16398] Node 0 DMA32 free:1456336kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:54804kB inactive_anon:0kB active_file:76016kB inactive_file:159640kB unevictable:1536kB writepending:752kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:9744kB local_pcp:8596kB free_cma:0kB
[  612.666752][T16398] lowmem_reserve[]: 0 0 0 0 0
[  612.671509][T16398] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  612.736837][T16398] lowmem_reserve[]: 0 0 0 0 0
[  612.741608][T16398] Node 1 Normal free:3899528kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19280kB local_pcp:9832kB free_cma:0kB
[  612.772448][T16398] lowmem_reserve[]: 0 0 0 0 0
[  612.778145][T16398] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  612.821983][T16419] tap0: tun_chr_ioctl cmd 1074025677
[  612.827594][T16398] Node 0 DMA32: 3773*4kB (UME) 2575*8kB (UME) 2164*16kB (UME) 3618*32kB (UME) 1742*64kB (UME) 1031*128kB (UME) 397*256kB (UME) 157*512kB (UM) 134*1024kB (UME) 17*2048kB (UME) 164*4096kB (UM) = 1455340kB
[  612.849283][T16419] tap0: linktype set to 778
[  612.856046][T16419] tap0: tun_chr_ioctl cmd 2147767511
[  612.863182][T16398] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  612.881389][T16398] Node 1 Normal: 248*4kB (UE) 63*8kB (UME) 39*16kB (UME) 46*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (U) 1*512kB (M) 0*1024kB 1*2048kB (U) 950*4096kB (ME) = 3899528kB
[  612.902645][T16398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  612.914364][T16398] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  612.923909][T16398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  612.933592][T16398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  612.943012][T16398] 60553 total pagecache pages
[  612.948752][T16398] 0 pages in swap cache
[  612.958587][T16398] Free swap  = 124996kB
[  612.963492][T16398] Total swap = 124996kB
[  612.967765][T16398] 2097051 pages RAM
[  612.971574][T16398] 0 pages HighMem/MovableOnly
[  612.976555][T16398] 416933 pages reserved
[  612.981478][T16398] 0 pages cma reserved
[  613.204571][T16436] FAULT_INJECTION: forcing a failure.
[  613.204571][T16436] name failslab, interval 1, probability 0, space 0, times 0
[  613.213470][T16433] __nla_validate_parse: 3 callbacks suppressed
[  613.213487][T16433] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.3888'.
[  613.217386][T16436] CPU: 1 PID: 16436 Comm: syz.1.3889 Not tainted syzkaller #0
[  613.240072][T16436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  613.250142][T16436] Call Trace:
[  613.253436][T16436]  <TASK>
[  613.256378][T16436]  dump_stack_lvl+0x18c/0x250
[  613.261077][T16436]  ? show_regs_print_info+0x20/0x20
[  613.266293][T16436]  ? load_image+0x420/0x420
[  613.270815][T16436]  ? __might_sleep+0xe0/0xe0
[  613.275434][T16436]  ? __lock_acquire+0x7d40/0x7d40
[  613.280467][T16436]  should_fail_ex+0x39d/0x4d0
[  613.285151][T16436]  should_failslab+0x9/0x20
[  613.289657][T16436]  slab_pre_alloc_hook+0x59/0x310
[  613.294683][T16436]  ? __get_vm_area_node+0x125/0x370
[  613.299879][T16436]  __kmem_cache_alloc_node+0x53/0x250
[  613.305251][T16436]  ? __get_vm_area_node+0x125/0x370
[  613.310440][T16436]  kmalloc_node_trace+0x26/0xe0
[  613.315289][T16436]  __get_vm_area_node+0x125/0x370
[  613.320313][T16436]  __vmalloc_node_range+0x36e/0x1330
[  613.325600][T16436]  ? netlink_sendmsg+0x602/0xbf0
[  613.330530][T16436]  ? netlink_insert+0x109f/0x13a0
[  613.335561][T16436]  ? netlink_data_ready+0x10/0x10
[  613.340581][T16436]  ? free_vm_area+0x50/0x50
[  613.345087][T16436]  ? netlink_sendmsg+0x602/0xbf0
[  613.350014][T16436]  vmalloc+0x79/0x90
[  613.353905][T16436]  ? netlink_sendmsg+0x602/0xbf0
[  613.358835][T16436]  netlink_sendmsg+0x602/0xbf0
[  613.363608][T16436]  ? netlink_getsockopt+0x590/0x590
[  613.368805][T16436]  ? aa_sock_msg_perm+0x94/0x150
[  613.373745][T16436]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  613.379024][T16436]  ? security_socket_sendmsg+0x80/0xa0
[  613.384478][T16436]  ? netlink_getsockopt+0x590/0x590
[  613.389671][T16436]  ____sys_sendmsg+0x5ba/0x960
[  613.394434][T16436]  ? __asan_memset+0x22/0x40
[  613.399019][T16436]  ? __sys_sendmsg_sock+0x30/0x30
[  613.404036][T16436]  ? __import_iovec+0x5f2/0x850
[  613.408884][T16436]  ? import_iovec+0x73/0xa0
[  613.413379][T16436]  ___sys_sendmsg+0x2a6/0x360
[  613.418049][T16436]  ? get_pid_task+0x20/0x1e0
[  613.422636][T16436]  ? __sys_sendmsg+0x2a0/0x2a0
[  613.427415][T16436]  ? __lock_acquire+0x7d40/0x7d40
[  613.432471][T16436]  __se_sys_sendmsg+0x1c2/0x2b0
[  613.437330][T16436]  ? __x64_sys_sendmsg+0x80/0x80
[  613.442544][T16436]  ? lockdep_hardirqs_on+0x98/0x150
[  613.447762][T16436]  do_syscall_64+0x55/0xb0
[  613.452183][T16436]  ? clear_bhb_loop+0x40/0x90
[  613.456853][T16436]  ? clear_bhb_loop+0x40/0x90
[  613.461527][T16436]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  613.467429][T16436] RIP: 0033:0x7f83a9f9ce59
[  613.471842][T16436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.491447][T16436] RSP: 002b:00007f83aade4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  613.499859][T16436] RAX: ffffffffffffffda RBX: 00007f83aa215fa0 RCX: 00007f83a9f9ce59
[  613.507821][T16436] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004
[  613.515782][T16436] RBP: 00007f83aade4090 R08: 0000000000000000 R09: 0000000000000000
[  613.523748][T16436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  613.531710][T16436] R13: 00007f83aa216038 R14: 00007f83aa215fa0 R15: 00007ffc8db82788
[  613.539689][T16436]  </TASK>
[  613.800578][T16451] FAULT_INJECTION: forcing a failure.
[  613.800578][T16451] name failslab, interval 1, probability 0, space 0, times 0
[  613.819073][T16451] CPU: 1 PID: 16451 Comm: syz.1.3894 Not tainted syzkaller #0
[  613.826571][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  613.836638][T16451] Call Trace:
[  613.839934][T16451]  <TASK>
[  613.842882][T16451]  dump_stack_lvl+0x18c/0x250
[  613.847582][T16451]  ? lock_chain_count+0x20/0x20
[  613.852452][T16451]  ? show_regs_print_info+0x20/0x20
[  613.857670][T16451]  ? load_image+0x420/0x420
[  613.862191][T16451]  ? lockdep_hardirqs_on+0x98/0x150
[  613.867427][T16451]  should_fail_ex+0x39d/0x4d0
[  613.872135][T16451]  should_failslab+0x9/0x20
[  613.876663][T16451]  slab_pre_alloc_hook+0x59/0x310
[  613.881717][T16451]  ? kvmalloc_node+0x70/0x180
[  613.886419][T16451]  ? kvmalloc_node+0x70/0x180
[  613.891109][T16451]  __kmem_cache_alloc_node+0x53/0x250
[  613.896509][T16451]  ? kvmalloc_node+0x70/0x180
[  613.901202][T16451]  __kmalloc_node+0xa4/0x230
[  613.905816][T16451]  kvmalloc_node+0x70/0x180
[  613.910339][T16451]  __veth_napi_enable_range+0x2b4/0x700
[  613.915965][T16451]  ? __skb_frag_ref+0x1c0/0x1c0
[  613.920837][T16451]  ? netif_napi_add_weight+0xa22/0xdf0
[  613.926309][T16451]  veth_napi_enable_range+0xd0/0x150
[  613.931604][T16451]  veth_set_features+0x1c8/0x2a0
[  613.936543][T16451]  __netdev_update_features+0x9cb/0x18e0
[  613.942181][T16451]  ? trace_event_raw_event_lock+0x250/0x250
[  613.948082][T16451]  ? dev_xdp_attach+0x1030/0x1030
[  613.953122][T16451]  ? __might_fault+0xaa/0x120
[  613.957792][T16451]  ? __lock_acquire+0x7d40/0x7d40
[  613.962816][T16451]  ? lock_chain_count+0x20/0x20
[  613.967662][T16451]  ? __might_fault+0xaa/0x120
[  613.972336][T16451]  ? __might_fault+0xc6/0x120
[  613.977015][T16451]  ? __might_fault+0xaa/0x120
[  613.981693][T16451]  ethtool_set_one_feature+0x2a8/0x2f0
[  613.987160][T16451]  ? ethtool_get_one_feature+0x280/0x280
[  613.992796][T16451]  ? dev_ethtool+0x7ea/0x18d0
[  613.997469][T16451]  ? __sanitizer_cov_trace_switch+0x8e/0x120
[  614.003451][T16451]  dev_ethtool+0xfd7/0x18d0
[  614.007959][T16451]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  614.014198][T16451]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  614.020356][T16451]  ? lockdep_hardirqs_on+0x98/0x150
[  614.025554][T16451]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  614.031709][T16451]  ? dev_load+0x162/0x1f0
[  614.036048][T16451]  dev_ioctl+0x392/0x1140
[  614.040387][T16451]  sock_do_ioctl+0x239/0x310
[  614.044980][T16451]  ? sock_show_fdinfo+0xb0/0xb0
[  614.049841][T16451]  sock_ioctl+0x5ba/0x7e0
[  614.054169][T16451]  ? sock_poll+0x3e0/0x3e0
[  614.058592][T16451]  ? bpf_lsm_file_ioctl+0x9/0x10
[  614.063526][T16451]  ? security_file_ioctl+0x80/0xa0
[  614.068629][T16451]  ? sock_poll+0x3e0/0x3e0
[  614.073046][T16451]  __se_sys_ioctl+0xfd/0x170
[  614.077637][T16451]  do_syscall_64+0x55/0xb0
[  614.082046][T16451]  ? clear_bhb_loop+0x40/0x90
[  614.086715][T16451]  ? clear_bhb_loop+0x40/0x90
[  614.091388][T16451]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  614.097281][T16451] RIP: 0033:0x7f83a9f9ce59
[  614.101690][T16451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.121293][T16451] RSP: 002b:00007f83aade4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  614.129707][T16451] RAX: ffffffffffffffda RBX: 00007f83aa215fa0 RCX: 00007f83a9f9ce59
[  614.137675][T16451] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d
[  614.145670][T16451] RBP: 00007f83aade4090 R08: 0000000000000000 R09: 0000000000000000
[  614.153635][T16451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  614.161598][T16451] R13: 00007f83aa216038 R14: 00007f83aa215fa0 R15: 00007ffc8db82788
[  614.169587][T16451]  </TASK>
[  614.187058][T16451] veth1_to_bond: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9
[  614.260934][T16457] tap0: tun_chr_ioctl cmd 1074025677
[  614.267415][T16457] tap0: linktype set to 778
[  614.277213][T16457] tap0: tun_chr_ioctl cmd 2147767511
[  624.407379][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  624.413891][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  630.873020][T16532] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  630.881671][T16532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  630.891208][T16532] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  630.898495][T16537] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  630.906630][T16532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  630.907703][T16537] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  630.922580][T16532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  630.923055][T16537] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  630.930295][T16532] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  630.944367][T16532] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  630.947920][T16537] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  630.959068][T16537] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  631.925202][T16537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  631.934386][T16537] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  631.935603][   T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  631.950082][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  631.952909][T16537] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  631.966229][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  631.966780][T16537] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  631.981540][   T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  631.982073][T16537] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  631.989372][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  631.997083][T16537] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  632.010370][T16537] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  632.962913][T16532] Bluetooth: hci3: command tx timeout
[  633.042808][T16532] Bluetooth: hci5: command tx timeout
[  634.082927][T16532] Bluetooth: hci7: command tx timeout
[  634.082953][   T51] Bluetooth: hci6: command tx timeout
[  635.042893][T16532] Bluetooth: hci3: command tx timeout
[  635.123410][T16532] Bluetooth: hci5: command tx timeout
[  636.162829][T16532] Bluetooth: hci6: command tx timeout
[  636.168457][T16532] Bluetooth: hci7: command tx timeout
[  637.122830][T16532] Bluetooth: hci3: command tx timeout
[  637.202770][T16532] Bluetooth: hci5: command tx timeout
[  638.242788][   T51] Bluetooth: hci6: command tx timeout
[  638.245026][T16532] Bluetooth: hci7: command tx timeout
[  639.202734][T16532] Bluetooth: hci3: command tx timeout
[  639.282741][T16532] Bluetooth: hci5: command tx timeout
[  640.322764][T16532] Bluetooth: hci6: command tx timeout
[  640.322781][   T51] Bluetooth: hci7: command tx timeout
[  685.845788][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  685.852602][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  690.787262][   T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  690.796481][   T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  690.804805][   T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  690.813575][   T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  690.821186][   T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  690.828618][   T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  691.809144][   T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  691.817706][   T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  691.826219][   T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  691.835914][   T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  691.843943][   T51] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  691.851254][   T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  692.883706][T16532] Bluetooth: hci8: command tx timeout
[  692.917813][   T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  692.928377][   T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  692.936434][   T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  692.953532][   T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  692.961628][   T51] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  692.969520][   T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  693.018644][   T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  693.026801][   T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  693.036031][   T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  693.044656][   T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  693.052379][   T51] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  693.059988][   T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  693.922775][   T51] Bluetooth: hci9: command tx timeout
[  694.962711][   T51] Bluetooth: hci8: command tx timeout
[  695.042775][   T51] Bluetooth: hci10: command tx timeout
[  695.122774][   T51] Bluetooth: hci11: command tx timeout
[  696.012696][   T51] Bluetooth: hci9: command tx timeout
[  697.042824][   T51] Bluetooth: hci8: command tx timeout
[  697.122709][   T51] Bluetooth: hci10: command tx timeout
[  697.202743][   T51] Bluetooth: hci11: command tx timeout
[  698.082738][   T51] Bluetooth: hci9: command tx timeout
[  699.122816][   T51] Bluetooth: hci8: command tx timeout
[  699.203451][   T51] Bluetooth: hci10: command tx timeout
[  699.282710][   T51] Bluetooth: hci11: command tx timeout
[  700.162842][   T51] Bluetooth: hci9: command tx timeout
[  701.282704][   T51] Bluetooth: hci10: command tx timeout
[  701.362696][   T51] Bluetooth: hci11: command tx timeout
[  747.285012][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  747.291340][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  750.851031][T16532] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  750.860419][T16532] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  750.870184][T16532] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  750.878844][T16532] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  750.887288][T16532] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  750.894720][T16532] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  751.866627][T16532] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  751.874908][T16532] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  751.883068][T16532] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  751.891596][T16532] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  751.899893][T16532] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  751.908254][T16532] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  752.968324][T16583] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  752.976769][T16583] Bluetooth: hci12: command tx timeout
[  752.983207][T16583] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  752.991677][T16584] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  753.003629][T16584] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  753.011270][T16584] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  753.020501][T16584] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  753.057049][T16584] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  753.065565][T16584] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  753.074720][T16584] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  753.083397][T16584] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  753.091099][T16584] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  753.099504][T16584] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  754.002824][ T5780] Bluetooth: hci13: command tx timeout
[  754.482681][ T5780] Bluetooth: hci3: command 0x0406 tx timeout
[  754.482746][T16578] Bluetooth: hci6: command 0x0406 tx timeout
[  754.494354][ T5780] Bluetooth: hci7: command 0x0406 tx timeout
[  754.495010][T16584] Bluetooth: hci5: command 0x0406 tx timeout
[  755.042795][T16537] Bluetooth: hci12: command tx timeout
[  755.042938][   T51] Bluetooth: hci14: command tx timeout
[  755.122721][   T51] Bluetooth: hci15: command tx timeout
[  756.082800][   T51] Bluetooth: hci13: command tx timeout
[  757.122800][   T51] Bluetooth: hci12: command tx timeout
[  757.122806][T16537] Bluetooth: hci14: command tx timeout
[  757.202727][   T51] Bluetooth: hci15: command tx timeout
[  758.162864][   T51] Bluetooth: hci13: command tx timeout
[  759.202774][   T51] Bluetooth: hci14: command tx timeout
[  759.212838][   T51] Bluetooth: hci12: command tx timeout
[  759.282693][   T51] Bluetooth: hci15: command tx timeout
[  760.242863][   T51] Bluetooth: hci13: command tx timeout
[  761.283171][   T51] Bluetooth: hci14: command tx timeout
[  761.362761][   T51] Bluetooth: hci15: command tx timeout
[  762.002660][   T29] INFO: task kworker/u4:0:11 blocked for more than 143 seconds.
[  762.010404][   T29]       Not tainted syzkaller #0
[  762.016199][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  762.024910][   T29] task:kworker/u4:0    state:D stack:21448 pid:11    ppid:2      flags:0x00004000
[  762.034930][   T29] Workqueue: events_unbound linkwatch_event
[  762.040938][   T29] Call Trace:
[  762.044245][   T29]  <TASK>
[  762.047196][   T29]  __schedule+0x1553/0x45a0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  762.051732][   T29]  ? lock_chain_count+0x20/0x20
[  762.062656][   T29]  ? asan.module_dtor+0x20/0x20
[  762.067542][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  762.072212][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  762.092910][   T29]  ? kthread_data+0x4f/0xc0
[  762.097443][   T29]  ? wq_worker_sleeping+0x63/0x240
[  762.102546][   T29]  schedule+0xbd/0x170
[  762.122630][   T29]  schedule_preempt_disabled+0x13/0x20
[  762.128156][   T29]  __mutex_lock+0x6a9/0xcc0
[  762.138575][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  762.143396][   T29]  ? linkwatch_event+0xe/0x60
[  762.148095][   T29]  ? mutex_lock_nested+0x20/0x20
[  762.153646][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  762.158962][   T29]  ? process_scheduled_works+0x96f/0x15d0
[  762.165217][   T29]  linkwatch_event+0xe/0x60
[  762.169818][   T29]  process_scheduled_works+0xa5d/0x15d0
[  762.175831][   T29]  ? worker_attach_to_pool+0x380/0x380
[  762.181397][   T29]  ? assign_work+0x3d2/0x5d0
[  762.186390][   T29]  worker_thread+0xa55/0xfc0
[  762.191089][   T29]  kthread+0x2fa/0x390
[  762.195636][   T29]  ? pr_cont_work+0x560/0x560
[  762.200395][   T29]  ? kthread_blkcg+0xd0/0xd0
[  762.205513][   T29]  ret_from_fork+0x48/0x80
[  762.210018][   T29]  ? kthread_blkcg+0xd0/0xd0
[  762.215419][   T29]  ret_from_fork_asm+0x11/0x20
[  762.220317][   T29]  </TASK>
[  762.224011][   T29] INFO: task syz.2.3907:16491 blocked for more than 143 seconds.
[  762.231807][   T29]       Not tainted syzkaller #0
[  762.237183][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  762.252886][   T29] task:syz.2.3907      state:D stack:25832 pid:16491 ppid:12070  flags:0x00004004
[  762.302565][   T29] Call Trace:
[  762.306143][   T29]  <TASK>
[  762.309094][   T29]  __schedule+0x1553/0x45a0
[  762.315883][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  762.321909][   T29]  ? asan.module_dtor+0x20/0x20
[  762.327289][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  762.332010][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  762.337507][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  762.343725][   T29]  schedule+0xbd/0x170
[  762.347801][   T29]  schedule_preempt_disabled+0x13/0x20
[  762.353288][   T29]  __mutex_lock+0x6a9/0xcc0
[  762.357813][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  762.362499][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  762.367561][   T29]  ? mutex_lock_nested+0x20/0x20
[  762.372520][   T29]  ? __might_fault+0xaa/0x120
[  762.377257][   T29]  ? __might_fault+0xc6/0x120
[  762.381946][   T29]  ? __might_fault+0xaa/0x120
[  762.388886][   T29]  __tun_chr_ioctl+0x400/0x2000
[  762.393786][   T29]  ? tun_flow_create+0x310/0x310
[  762.398749][   T29]  ? __fdget+0x180/0x210
[  762.403042][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  762.407990][   T29]  ? security_file_ioctl+0x80/0xa0
[  762.413133][   T29]  ? tun_chr_poll+0x630/0x630
[  762.417900][   T29]  __se_sys_ioctl+0xfd/0x170
[  762.422514][   T29]  do_syscall_64+0x55/0xb0
[  762.427807][   T29]  ? clear_bhb_loop+0x40/0x90
[  762.432506][   T29]  ? clear_bhb_loop+0x40/0x90
[  762.437231][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  762.443173][   T29] RIP: 0033:0x7fb098b9ce59
[  762.447581][   T29] RSP: 002b:00007fb099abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  762.456020][   T29] RAX: ffffffffffffffda RBX: 00007fb098e15fa0 RCX: 00007fb098b9ce59
[  762.464020][   T29] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 000000000000000a
[  762.471981][   T29] RBP: 00007fb098c32d6f R08: 0000000000000000 R09: 0000000000000000
[  762.479990][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  762.488004][   T29] R13: 00007fb098e16038 R14: 00007fb098e15fa0 R15: 00007ffcc6763258
[  762.496270][   T29]  </TASK>
[  762.499401][   T29] INFO: task syz.2.3907:16494 blocked for more than 143 seconds.
[  762.507204][   T29]       Not tainted syzkaller #0
[  762.512142][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  762.521131][   T29] task:syz.2.3907      state:D stack:29128 pid:16494 ppid:12070  flags:0x00004004
[  762.530401][   T29] Call Trace:
[  762.533723][   T29]  <TASK>
[  762.536653][   T29]  __schedule+0x1553/0x45a0
[  762.541156][   T29]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  762.547015][   T29]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  762.553786][   T29]  ? asan.module_dtor+0x20/0x20
[  762.558658][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  762.563468][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  762.568951][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  762.575179][   T29]  schedule+0xbd/0x170
[  762.579260][   T29]  schedule_preempt_disabled+0x13/0x20
[  762.584771][   T29]  __mutex_lock+0x6a9/0xcc0
[  762.589317][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  762.594059][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  762.599118][   T29]  ? mutex_lock_nested+0x20/0x20
[  762.604126][   T29]  __tun_chr_ioctl+0x400/0x2000
[  762.608998][   T29]  ? tun_flow_create+0x310/0x310
[  762.614023][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  762.618976][   T29]  ? security_file_ioctl+0x80/0xa0
[  762.624451][   T29]  ? tun_chr_poll+0x630/0x630
[  762.629140][   T29]  __se_sys_ioctl+0xfd/0x170
[  762.633816][   T29]  do_syscall_64+0x55/0xb0
[  762.638265][   T29]  ? clear_bhb_loop+0x40/0x90
[  762.643161][   T29]  ? clear_bhb_loop+0x40/0x90
[  762.647860][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  762.653883][   T29] RIP: 0033:0x7fb098b9ce59
[  762.658316][   T29] RSP: 002b:00007fb099a9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  762.667098][   T29] RAX: ffffffffffffffda RBX: 00007fb098e16090 RCX: 00007fb098b9ce59
[  762.675161][   T29] RDX: 000000000000000b RSI: 00000000400454c9 RDI: 000000000000000a
[  762.683193][   T29] RBP: 00007fb098c32d6f R08: 0000000000000000 R09: 0000000000000000
[  762.691173][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  762.699222][   T29] R13: 00007fb098e16128 R14: 00007fb098e16090 R15: 00007ffcc6763258
[  762.707263][   T29]  </TASK>
[  762.710330][   T29] INFO: task syz.2.3907:16498 blocked for more than 144 seconds.
[  762.718658][   T29]       Not tainted syzkaller #0
[  762.723906][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  762.732638][   T29] task:syz.2.3907      state:D stack:28584 pid:16498 ppid:12070  flags:0x00004004
[  762.741872][   T29] Call Trace:
[  762.745750][   T29]  <TASK>
[  762.748699][   T29]  __schedule+0x1553/0x45a0
[  762.753325][   T29]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  762.759162][   T29]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  762.765865][   T29]  ? asan.module_dtor+0x20/0x20
[  762.770736][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  762.775801][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  762.781286][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  762.787510][   T29]  schedule+0xbd/0x170
[  762.791598][   T29]  schedule_preempt_disabled+0x13/0x20
[  762.797166][   T29]  __mutex_lock+0x6a9/0xcc0
[  762.801695][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  762.806457][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  762.811502][   T29]  ? mutex_lock_nested+0x20/0x20
[  762.816713][   T29]  __tun_chr_ioctl+0x400/0x2000
[  762.821593][   T29]  ? tun_flow_create+0x310/0x310
[  762.827204][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  762.832162][   T29]  ? security_file_ioctl+0x80/0xa0
[  762.837590][   T29]  ? tun_chr_poll+0x630/0x630
[  762.842289][   T29]  __se_sys_ioctl+0xfd/0x170
[  762.847258][   T29]  do_syscall_64+0x55/0xb0
[  762.851698][   T29]  ? clear_bhb_loop+0x40/0x90
[  762.860212][   T29]  ? clear_bhb_loop+0x40/0x90
[  762.865153][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  762.871067][   T29] RIP: 0033:0x7fb098b9ce59
[  762.875716][   T29] RSP: 002b:00007fb099a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  762.884686][   T29] RAX: ffffffffffffffda RBX: 00007fb098e16180 RCX: 00007fb098b9ce59
[  762.892929][   T29] RDX: 000000000000030a RSI: 00000000400454cd RDI: 000000000000000a
[  762.900918][   T29] RBP: 00007fb098c32d6f R08: 0000000000000000 R09: 0000000000000000
[  762.909239][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  762.917467][   T29] R13: 00007fb098e16218 R14: 00007fb098e16180 R15: 00007ffcc6763258
[  762.925680][   T29]  </TASK>
[  762.929027][   T29] INFO: task syz.2.3907:16499 blocked for more than 144 seconds.
[  762.937844][   T29]       Not tainted syzkaller #0
[  762.943015][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  762.951697][   T29] task:syz.2.3907      state:D stack:29128 pid:16499 ppid:12070  flags:0x00004004
[  762.961338][   T29] Call Trace:
[  762.965061][   T29]  <TASK>
[  762.968016][   T29]  __schedule+0x1553/0x45a0
[  762.972565][   T29]  ? asan.module_dtor+0x20/0x20
[  762.977929][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  762.982846][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  762.988332][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  762.995018][   T29]  schedule+0xbd/0x170
[  762.999109][   T29]  schedule_preempt_disabled+0x13/0x20
[  763.005037][   T29]  __mutex_lock+0x6a9/0xcc0
[  763.009572][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  763.014640][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  763.019690][   T29]  ? mutex_lock_nested+0x20/0x20
[  763.024994][   T29]  __tun_chr_ioctl+0x400/0x2000
[  763.029875][   T29]  ? tun_flow_create+0x310/0x310
[  763.035468][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  763.040421][   T29]  ? security_file_ioctl+0x80/0xa0
[  763.045827][   T29]  ? tun_chr_poll+0x630/0x630
[  763.050523][   T29]  __se_sys_ioctl+0xfd/0x170
[  763.055475][   T29]  do_syscall_64+0x55/0xb0
[  763.059912][   T29]  ? clear_bhb_loop+0x40/0x90
[  763.064958][   T29]  ? clear_bhb_loop+0x40/0x90
[  763.069656][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  763.075907][   T29] RIP: 0033:0x7fb098b9ce59
[  763.080337][   T29] RSP: 002b:00007fb099a59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  763.089151][   T29] RAX: ffffffffffffffda RBX: 00007fb098e16270 RCX: 00007fb098b9ce59
[  763.098148][   T29] RDX: 00002000000001c0 RSI: 00000000800454d7 RDI: 000000000000000a
[  763.106520][   T29] RBP: 00007fb098c32d6f R08: 0000000000000000 R09: 0000000000000000
[  763.114744][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  763.123305][   T29] R13: 00007fb098e16308 R14: 00007fb098e16270 R15: 00007ffcc6763258
[  763.131315][   T29]  </TASK>
[  763.134997][   T29] INFO: task syz.3.3914:16517 blocked for more than 144 seconds.
[  763.143171][   T29]       Not tainted syzkaller #0
[  763.148117][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  763.157143][   T29] task:syz.3.3914      state:D stack:26120 pid:16517 ppid:12346  flags:0x00004004
[  763.166613][   T29] Call Trace:
[  763.169907][   T29]  <TASK>
[  763.173192][   T29]  __schedule+0x1553/0x45a0
[  763.177717][   T29]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  763.184151][   T29]  ? trace_event_raw_event_lock+0x250/0x250
[  763.190083][   T29]  ? asan.module_dtor+0x20/0x20
[  763.195038][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  763.199742][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  763.205546][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  763.211724][   T29]  schedule+0xbd/0x170
[  763.216055][   T29]  schedule_preempt_disabled+0x13/0x20
[  763.221540][   T29]  __mutex_lock+0x6a9/0xcc0
[  763.226120][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  763.230810][   T29]  ? rtnetlink_rcv_msg+0x811/0xfa0
[  763.236267][   T29]  ? mutex_lock_nested+0x20/0x20
[  763.241227][   T29]  rtnetlink_rcv_msg+0x811/0xfa0
[  763.246233][   T29]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  763.251361][   T29]  ? perf_trace_lock+0xfc/0x3b0
[  763.256301][   T29]  ? rtnetlink_bind+0x80/0x80
[  763.260994][   T29]  ? trace_event_raw_event_lock+0x250/0x250
[  763.266963][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  763.273002][   T29]  ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0
[  763.279595][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  763.285696][   T29]  ? lock_chain_count+0x20/0x20
[  763.290556][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  763.296542][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  763.301769][   T29]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  763.307742][   T29]  ? _raw_spin_unlock+0x40/0x40
[  763.312679][   T29]  ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0
[  763.319294][   T29]  ? perf_trace_lock+0xfc/0x3b0
[  763.324365][   T29]  netlink_rcv_skb+0x241/0x4d0
[  763.329147][   T29]  ? rtnetlink_bind+0x80/0x80
[  763.333952][   T29]  ? netlink_ack+0x1180/0x1180
[  763.338955][   T29]  ? __lock_acquire+0x7d40/0x7d40
[  763.344038][   T29]  ? __rcu_read_unlock+0x7c/0xd0
[  763.348998][   T29]  ? netlink_deliver_tap+0x2e/0x1b0
[  763.354303][   T29]  netlink_unicast+0x751/0x8d0
[  763.359079][   T29]  netlink_sendmsg+0x8d0/0xbf0
[  763.364403][   T29]  ? netlink_getsockopt+0x590/0x590
[  763.369678][   T29]  ? aa_sock_msg_perm+0x94/0x150
[  763.375301][   T29]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  763.380687][   T29]  ? security_socket_sendmsg+0x80/0xa0
[  763.386207][   T29]  sock_write_iter+0x2df/0x420
[  763.391002][   T29]  ? sock_read_iter+0x3e0/0x3e0
[  763.395914][   T29]  ? common_file_perm+0x198/0x1f0
[  763.400955][   T29]  vfs_write+0x46c/0x990
[  763.405263][   T29]  ? file_end_write+0x250/0x250
[  763.410126][   T29]  ? __fget_files+0x43d/0x4b0
[  763.414884][   T29]  ? __fdget_pos+0x1d8/0x330
[  763.419484][   T29]  ? ksys_write+0x75/0x260
[  763.423962][   T29]  ksys_write+0x150/0x260
[  763.428313][   T29]  ? __ia32_sys_read+0x90/0x90
[  763.433294][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  763.438519][   T29]  do_syscall_64+0x55/0xb0
[  763.443335][   T29]  ? clear_bhb_loop+0x40/0x90
[  763.448022][   T29]  ? clear_bhb_loop+0x40/0x90
[  763.452780][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  763.458698][   T29] RIP: 0033:0x7f56b339ce59
[  763.463189][   T29] RSP: 002b:00007f56b42fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  763.471611][   T29] RAX: ffffffffffffffda RBX: 00007f56b3615fa0 RCX: 00007f56b339ce59
[  763.479638][   T29] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003
[  763.487652][   T29] RBP: 00007f56b3432d6f R08: 0000000000000000 R09: 0000000000000000
[  763.495688][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  763.503713][   T29] R13: 00007f56b3616038 R14: 00007f56b3615fa0 R15: 00007ffc6d493b88
[  763.511712][   T29]  </TASK>
[  763.514843][   T29] INFO: task syz.0.3916:16520 blocked for more than 144 seconds.
[  763.522557][   T29]       Not tainted syzkaller #0
[  763.527653][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  763.536363][   T29] task:syz.0.3916      state:D stack:25576 pid:16520 ppid:11799  flags:0x00004004
[  763.545901][   T29] Call Trace:
[  763.549184][   T29]  <TASK>
[  763.552126][   T29]  __schedule+0x1553/0x45a0
[  763.556872][   T29]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  763.562687][   T29]  ? asan.module_dtor+0x20/0x20
[  763.567570][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  763.572241][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  763.577794][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  763.583992][   T29]  schedule+0xbd/0x170
[  763.588058][   T29]  schedule_preempt_disabled+0x13/0x20
[  763.593583][   T29]  __mutex_lock+0x6a9/0xcc0
[  763.598095][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  763.602833][   T29]  ? __tun_chr_ioctl+0x400/0x2000
[  763.607883][   T29]  ? mutex_lock_nested+0x20/0x20
[  763.612889][   T29]  __tun_chr_ioctl+0x400/0x2000
[  763.617766][   T29]  ? tun_flow_create+0x310/0x310
[  763.622764][   T29]  ? bpf_lsm_file_ioctl+0x9/0x10
[  763.627712][   T29]  ? security_file_ioctl+0x80/0xa0
[  763.632905][   T29]  ? tun_chr_poll+0x630/0x630
[  763.637602][   T29]  __se_sys_ioctl+0xfd/0x170
[  763.642206][   T29]  do_syscall_64+0x55/0xb0
[  763.646934][   T29]  ? clear_bhb_loop+0x40/0x90
[  763.651615][   T29]  ? clear_bhb_loop+0x40/0x90
[  763.656357][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  763.662269][   T29] RIP: 0033:0x7f38d4b9ce59
[  763.667027][   T29] RSP: 002b:00007f38d59af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  763.675486][   T29] RAX: ffffffffffffffda RBX: 00007f38d4e15fa0 RCX: 00007f38d4b9ce59
[  763.683506][   T29] RDX: 00002000000006c0 RSI: 00000000800454e1 RDI: 0000000000000005
[  763.691483][   T29] RBP: 00007f38d4c32d6f R08: 0000000000000000 R09: 0000000000000000
[  763.699506][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  763.707534][   T29] R13: 00007f38d4e16038 R14: 00007f38d4e15fa0 R15: 00007fff32d18368
[  763.715586][   T29]  </TASK>
[  763.718649][   T29] 
[  763.718649][   T29] Showing all locks held in the system:
[  763.726451][   T29] 3 locks held by kworker/u4:0/11:
[  763.731559][   T29]  #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  763.743280][   T29]  #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  763.754601][   T29]  #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  763.763695][   T29] 1 lock held by khungtaskd/29:
[  763.768553][   T29]  #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  763.778657][   T29] 3 locks held by kworker/u4:7/2980:
[  763.783987][   T29]  #0: ffff88802cb38138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  763.795596][   T29]  #1: ffffc9000c0f7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  763.809318][   T29]  #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  763.818947][   T29] 1 lock held by klogd/5128:
[  763.823583][   T29]  #0: ffff8880b8f3c098 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  763.833576][   T29] 2 locks held by getty/5531:
[  763.838253][   T29]  #0: ffff888031b5a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  763.848146][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  763.858521][   T29] 1 lock held by syz.1.3908/16490:
[  763.863752][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x1e2/0x18d0
[  763.872795][   T29] 1 lock held by syz.2.3907/16491:
[  763.877912][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  763.887477][   T29] 1 lock held by syz.2.3907/16494:
[  763.892642][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  763.901995][   T29] 1 lock held by syz.2.3907/16498:
[  763.907191][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  763.916541][   T29] 1 lock held by syz.2.3907/16499:
[  763.921637][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  763.931183][   T29] 1 lock held by syz.3.3914/16517:
[  763.936341][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  763.945813][   T29] 1 lock held by syz.0.3916/16520:
[  763.950933][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000
[  763.960607][   T29] 1 lock held by syz-executor/16530:
[  763.965943][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  763.975402][   T29] 1 lock held by syz-executor/16531:
[  763.980673][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  763.990127][   T29] 1 lock held by syz-executor/16541:
[  763.995554][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  764.005032][   T29] 1 lock held by syz-executor/16542:
[  764.010315][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  764.019792][   T29] 1 lock held by syz-executor/16552:
[  764.025145][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  764.034604][   T29] 1 lock held by syz-executor/16557:
[  764.039895][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  764.049391][   T29] 1 lock held by syz-executor/16561:
[  764.054896][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  764.064396][   T29] 1 lock held by syz-executor/16563:
[  764.069689][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  764.079201][   T29] 1 lock held by syz-executor/16572:
[  764.084606][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  764.094315][   T29] 1 lock held by syz-executor/16576:
[  764.099596][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  764.109203][   T29] 1 lock held by syz-executor/16581:
[  764.114535][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  764.124037][   T29] 1 lock held by syz-executor/16585:
[  764.129320][   T29]  #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  764.138760][   T29] 
[  764.141092][   T29] =============================================
[  764.141092][   T29] 
[  764.149573][   T29] NMI backtrace for cpu 0
[  764.153901][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  764.161090][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  764.171140][   T29] Call Trace:
[  764.174409][   T29]  <TASK>
[  764.177333][   T29]  dump_stack_lvl+0x18c/0x250
[  764.182004][   T29]  ? preempt_count_add+0x91/0x1a0
[  764.187024][   T29]  ? show_regs_print_info+0x20/0x20
[  764.192214][   T29]  ? load_image+0x420/0x420
[  764.196730][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  764.201664][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  764.207816][   T29]  ? _printk+0xde/0x130
[  764.211970][   T29]  ? load_image+0x420/0x420
[  764.216464][   T29]  ? load_image+0x420/0x420
[  764.220959][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  764.227024][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  764.233006][   T29]  watchdog+0xf3d/0xf80
[  764.237156][   T29]  ? watchdog+0x1e1/0xf80
[  764.241479][   T29]  kthread+0x2fa/0x390
[  764.245534][   T29]  ? hungtask_pm_notify+0x90/0x90
[  764.250550][   T29]  ? kthread_blkcg+0xd0/0xd0
[  764.255130][   T29]  ret_from_fork+0x48/0x80
[  764.259537][   T29]  ? kthread_blkcg+0xd0/0xd0
[  764.264131][   T29]  ret_from_fork_asm+0x11/0x20
[  764.268905][   T29]  </TASK>
[  764.272480][   T29] Sending NMI from CPU 0 to CPUs 1:
[  764.277743][    C1] NMI backtrace for cpu 1
[  764.277751][    C1] CPU: 1 PID: 16490 Comm: syz.1.3908 Not tainted syzkaller #0
[  764.277766][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  764.277774][    C1] RIP: 0010:__lock_acquire+0xfe/0x7d40
[  764.277796][    C1] Code: 00 00 0f 85 88 67 00 00 83 3d 79 65 23 0d 00 0f 84 16 10 00 00 83 3d b0 bc 97 0b 00 74 36 48 89 f8 48 c1 e8 03 42 80 3c 00 00 <74> 1f 48 8b bc 24 88 00 00 00 e8 e3 35 77 00 48 8b bc 24 88 00 00
[  764.277808][    C1] RSP: 0018:ffffc9000382ee80 EFLAGS: 00000046
[  764.277821][    C1] RAX: 1ffffffff1a2642c RBX: ffff88805caf8000 RCX: 1ffff92000705df4
[  764.277831][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d132160
[  764.277840][    C1] RBP: ffffc9000382f0c8 R08: dffffc0000000000 R09: 0000000000000001
[  764.277850][    C1] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: 0000000000000001
[  764.277859][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000
[  764.277868][    C1] FS:  00007f83aade46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  764.277880][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  764.277890][    C1] CR2: 0000561d607b8f70 CR3: 0000000052ac2000 CR4: 00000000003506e0
[  764.277902][    C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
[  764.277911][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  764.277919][    C1] Call Trace:
[  764.277927][    C1]  <TASK>
[  764.277942][    C1]  ? mark_lock+0x94/0x320
[  764.277958][    C1]  ? verify_lock_unused+0x140/0x140
[  764.277973][    C1]  ? __lock_acquire+0x1347/0x7d40
[  764.277995][    C1]  lock_acquire+0x19e/0x420
[  764.278009][    C1]  ? sched_balance_newidle+0x23e/0x1370
[  764.278027][    C1]  ? read_lock_is_recursive+0x20/0x20
[  764.278047][    C1]  sched_balance_newidle+0x25f/0x1370
[  764.278060][    C1]  ? sched_balance_newidle+0x23e/0x1370
[  764.278073][    C1]  ? update_cfs_group+0x104/0x210
[  764.278089][    C1]  ? dequeue_entity+0x743/0x1360
[  764.278104][    C1]  ? sched_balance_newidle+0x23e/0x1370
[  764.278123][    C1]  pick_next_task_fair+0x20f/0x650
[  764.278145][    C1]  __schedule+0x6b8/0x45a0
[  764.278166][    C1]  ? mark_lock+0x94/0x320
[  764.278181][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  764.278198][    C1]  ? asan.module_dtor+0x20/0x20
[  764.278213][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  764.278235][    C1]  ? _raw_spin_unlock+0x40/0x40
[  764.278255][    C1]  schedule+0xbd/0x170
[  764.278269][    C1]  schedule_hrtimeout_range_clock+0x1cf/0x3d0
[  764.278289][    C1]  ? hrtimer_nanosleep_restart+0x1d0/0x1d0
[  764.278308][    C1]  ? __remove_hrtimer+0x470/0x470
[  764.278325][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x8/0x90
[  764.278342][    C1]  ? read_tsc+0x9/0x20
[  764.278356][    C1]  ? ktime_get+0x24b/0x280
[  764.278371][    C1]  ? usleep_range_state+0xc5/0x1b0
[  764.278388][    C1]  usleep_range_state+0x127/0x1b0
[  764.278405][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  764.278426][    C1]  ? schedule_timeout_idle+0x90/0x90
[  764.278444][    C1]  ? napi_disable+0xf0/0x1f0
[  764.278459][    C1]  napi_disable+0x104/0x1f0
[  764.278473][    C1]  ? napi_watchdog+0x130/0x130
[  764.278485][    C1]  ? lockdep_rtnl_is_held+0x26/0x30
[  764.278500][    C1]  ? dev_qdisc_change_real_num_tx+0x118/0x130
[  764.278621][    C1]  ? netif_set_real_num_tx_queues+0x4f3/0x9a0
[  764.278642][    C1]  veth_napi_del_range+0xb7/0x210
[  764.278660][    C1]  veth_set_channels+0x872/0xa60
[  764.278678][    C1]  ethtool_set_channels+0x5b5/0x670
[  764.278701][    C1]  ? ethtool_get_channels+0x190/0x190
[  764.278724][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  764.278746][    C1]  ? dev_ethtool+0x7ea/0x18d0
[  764.278764][    C1]  dev_ethtool+0x1761/0x18d0
[  764.278784][    C1]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  764.278803][    C1]  ? __lock_acquire+0x7d40/0x7d40
[  764.278817][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  764.278838][    C1]  ? full_name_hash+0x92/0xe0
[  764.278859][    C1]  ? dev_load+0x21/0x1f0
[  764.278877][    C1]  dev_ioctl+0x392/0x1140
[  764.278896][    C1]  sock_do_ioctl+0x239/0x310
[  764.278914][    C1]  ? sock_show_fdinfo+0xb0/0xb0
[  764.278936][    C1]  sock_ioctl+0x5ba/0x7e0
[  764.278953][    C1]  ? sock_poll+0x3e0/0x3e0
[  764.278973][    C1]  ? bpf_lsm_file_ioctl+0x9/0x10
[  764.278987][    C1]  ? security_file_ioctl+0x80/0xa0
[  764.279000][    C1]  ? sock_poll+0x3e0/0x3e0
[  764.279015][    C1]  __se_sys_ioctl+0xfd/0x170
[  764.279033][    C1]  do_syscall_64+0x55/0xb0
[  764.279048][    C1]  ? clear_bhb_loop+0x40/0x90
[  764.279059][    C1]  ? clear_bhb_loop+0x40/0x90
[  764.279072][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  764.279090][    C1] RIP: 0033:0x7f83a9f9ce59
[  764.279103][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  764.279114][    C1] RSP: 002b:00007f83aade4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  764.279133][    C1] RAX: ffffffffffffffda RBX: 00007f83aa215fa0 RCX: 00007f83a9f9ce59
[  764.279143][    C1] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b
[  764.279152][    C1] RBP: 00007f83aa032d6f R08: 0000000000000000 R09: 0000000000000000
[  764.279161][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  764.279169][    C1] R13: 00007f83aa216038 R14: 00007f83aa215fa0 R15: 00007ffc8db82788
[  764.279184][    C1]  </TASK>
[  764.279812][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  764.800795][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  764.807980][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  764.818020][   T29] Call Trace:
[  764.821287][   T29]  <TASK>
[  764.824207][   T29]  dump_stack_lvl+0x18c/0x250
[  764.828881][   T29]  ? show_regs_print_info+0x20/0x20
[  764.834069][   T29]  ? load_image+0x420/0x420
[  764.838571][   T29]  panic+0x2dc/0x730
[  764.842458][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  764.848087][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  764.852585][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  764.858129][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  764.864278][   T29]  watchdog+0xf7c/0xf80
[  764.868425][   T29]  ? watchdog+0x1e1/0xf80
[  764.872747][   T29]  kthread+0x2fa/0x390
[  764.876809][   T29]  ? hungtask_pm_notify+0x90/0x90
[  764.881821][   T29]  ? kthread_blkcg+0xd0/0xd0
[  764.886400][   T29]  ret_from_fork+0x48/0x80
[  764.890808][   T29]  ? kthread_blkcg+0xd0/0xd0
[  764.895392][   T29]  ret_from_fork_asm+0x11/0x20
[  764.900154][   T29]  </TASK>
[  764.903406][   T29] Kernel Offset: disabled
[  764.908156][   T29] Rebooting in 86400 seconds..