last executing test programs:

7.102549162s ago: executing program 3 (id=4318):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

6.892319937s ago: executing program 3 (id=4322):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
close(0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908feffffff0035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

6.496116296s ago: executing program 3 (id=4326):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32, @ANYBLOB="7f20000e00000000000000000000136fc946f1f569c058010000000000000000000000000000000000000080002c1567c3e736e92a"], 0x230}, 0x1)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x1458}, 0x240048c0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r6, 0xffffffffffffffff, 0x4, 0x5}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x8, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x9, 0x0, 0x8, 0x402, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r12 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r11}, 0x8)
write$cgroup_int(r12, &(0x7f00000001c0), 0xfffffdef)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.375790161s ago: executing program 3 (id=4334):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c", 0x26}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500001800000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0x3)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x894b, 0x0)

5.327878912s ago: executing program 0 (id=4336):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0) (async)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x0, 0x26, 0x0, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, <r5=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
socket$kcm(0x29, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r7)
write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

4.307114415s ago: executing program 3 (id=4342):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013a000000000095000000000000006dd49ce32174533466dea5d576455601e2fb1b5f31e4419a986250033107fbd0a73eb80c10a24968f8126dd26538975e8b2d8755d6dec5bb047740716c1457a324f349bc95093f3982cbb72b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x70000000}, 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

4.255547676s ago: executing program 3 (id=4343):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f8482900", 0x16}, {&(0x7f00000000c0)="6ebbc8bb9819eebbb0f107ee724aa0c18ae8518e74aeb06b", 0x18}], 0x2}, 0xd0)

4.208083717s ago: executing program 2 (id=4344):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002cecac240954c9b3996e9b258ad95cd503150d30e18cc0000000000000c0200"/65], 0x0, 0x34}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pB    \x00'}, 0x20) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x200100, 0x0)
ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000980)=0x1) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x7b, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYBLOB="0100"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50) (async)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000009c0), 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94)
perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x9e, 0xfc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xc}, 0x5488, 0xb46, 0x0, 0x0, 0x9, 0x10000a, 0x0, 0x0, 0xffffffff, 0x0, 0xc}, 0x0, 0x5, 0xffffffffffffffff, 0x9) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x661b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x1006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async, rerun: 64)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r7 = socket$kcm(0x2, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9) (async)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x17, &(0x7f0000000000)=r10, 0x10) (async, rerun: 32)
r11 = socket$kcm(0x2, 0x3, 0x84) (rerun: 32)
socketpair(0x2b, 0xa, 0x8, &(0x7f0000000400)) (async)
sendmsg$inet(r11, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}}}], 0x20}, 0x0)

3.928201773s ago: executing program 2 (id=4345):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socket$kcm(0x11, 0x5, 0x0) (async)
r0 = socket$kcm(0x11, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0xef)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="6204270018ff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) (async)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="6204270018ff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b180008903040000845088fb325f003911050b038da1005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

3.646834949s ago: executing program 2 (id=4348):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1)

2.134011893s ago: executing program 1 (id=4353):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
close(0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000003000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

1.979621656s ago: executing program 1 (id=4354):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013a000000000095000000000000006dd49ce32174533466dea5d576455601e2fb1b5f31e4419a986250033107fbd0a73eb80c10a24968f8126dd26538975e8b2d8755d6dec5bb047740716c1457a324f349bc95093f3982cbb72b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x74000000}, 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

1.868469899s ago: executing program 1 (id=4355):
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x5, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0x10, 0x2, 0x10)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, 0x0, 0xa4ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000200fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x4, 0x8}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r7, 0x0, 0x2, 0x0)
syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x0, 0x4, 0x98, 0x0, 0x2, 0x3, 0xfffc, 0x0, 0x9, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000b000000008000000400000044000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000c12fad550000000000000000000000000000000000000000000073a55f6adf27c539ebea795f19ad6c32"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r9}, 0x20)

864.062531ms ago: executing program 0 (id=4356):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x102aa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4f, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x7}, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400), 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000a0000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000072a9c9f2c0b1bc703911f0195ca38539dc32f1ccd522368d56c8b26cfdcf0daa8a097b15dbb302cd45ebaf351ff7f4440a540eef40482fab8447e999cfa4f785f396fd4c7033ff300b39e739c840f8f1b45e8695953727acf0025c1ad240b89900000000000000"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000100), 0x0}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000100), 0x0}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x5f5e0ff, [{}, {}, {0xfffffffc}, {0xc, 0x3}]}]}}, 0x0, 0x46, 0x0, 0xa}, 0x28)
r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0xb7, 0x28, 0x3, 0x9c, 0x0, 0x80000001, 0x2000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0xf1c, 0x30a3b77}, 0x10, 0x3ec800000000, 0x4, 0x0, 0xb8, 0x9, 0x3, 0x0, 0x6, 0x0, 0xfffffffffffffffa}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xd)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x1000) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x5, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

807.300213ms ago: executing program 2 (id=4357):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r0 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="05", 0x1}, {0x0, 0xea}], 0x2}, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r1, &(0x7f0000000100)="108bf33dd254c6b371e18382c4c29b0e4ef11e597241175bdc49e3d1d9b91cce847e926c224de4b330b78790beb2422a9ac36b678730edd363330dfe764a7e120e2126b876f66efebf3883dbc68881ccd5", &(0x7f0000000180)=""/74}, 0x20)

672.184505ms ago: executing program 1 (id=4358):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[], 0x0}, 0x94)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10a00, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$kcm(0x2, 0x1000000000000002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe74, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c11", 0x27}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
socket$kcm(0xa, 0x1, 0x106)

670.629756ms ago: executing program 2 (id=4359):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40107b83, 0x1, @perf_config_ext={0xfffffffffffffff5, 0x5}, 0x8000, 0x1, 0x43a1bd77, 0x7, 0x200000009, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, r0, 0x9)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x405ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000", @ANYRESHEX, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@generic={&(0x7f0000000e40)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x1c, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000700)='syzkaller\x00', 0xf, 0x18, &(0x7f0000000740)=""/24, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0x3, 0xcc65, 0x1ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ec0), &(0x7f0000000f00)=[{0x3, 0x1, 0xf, 0xa}, {0x2, 0x2, 0xd, 0x3}, {0x1, 0x2, 0x3, 0xc}], 0x10, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000004c452b0006"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x20)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000002f901a4b7b9b41ff01000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="9e82000000000000000080000000", @ANYRES32, @ANYBLOB='^\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x12, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x3, 0x2, 0x1, 0x4, 0x20, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x83, &(0x7f0000000100)=""/131, 0x23fac4bcb7a70e69, 0x20, '\x00', r6, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x3, 0x0, &(0x7f0000000240)=[{0x2, 0x4, 0x8, 0xc}, {0x2, 0x3, 0x10, 0xb}, {0x5, 0x2, 0x9, 0xb}], 0x10, 0xffffe6ec}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x25, &(0x7f0000000a00)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xcd, 0x9, 0xa, 0x5, 0xf61e}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r6, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108a82, 0xac5d, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0xa, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x47, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

448.278321ms ago: executing program 0 (id=4360):
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="feffff7f00000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

306.305384ms ago: executing program 0 (id=4361):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

213.892306ms ago: executing program 1 (id=4362):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
close(0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc090800000a000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

124.431078ms ago: executing program 0 (id=4363):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013a000000000095000000000000006dd49ce32174533466dea5d576455601e2fb1b5f31e4419a986250033107fbd0a73eb80c10a24968f8126dd26538975e8b2d8755d6dec5bb047740716c1457a324f349bc95093f3982cbb72b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x7a000000}, 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

118.702828ms ago: executing program 2 (id=4364):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000100)=0x8, 0x12)
ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="6261746164765f736c6176e934d80ba566fc74d4779e8b0f233ed276b98b50dd6b97aed94e2aed7eb62123b63b23bb97854be4d956e96c3e767877f47fef4109000000820b3d17e9a670776bbb8a58f57f9a988661b9b42dfcc40d9725b19e89d5575022c9a5a100a354e30b2dd3abcffb6bab8809c5dfe885b4948478e10a52cc23420e3bdfe98635cb1affea30bf2fdefbc9c5fb0c8532fd2648"], 0x11)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xff, 0xff, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x2082}, 0x0, 0xffffffffffffffff, r7, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x28, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0xd, 0x7, 0x8, 0xffffffffffffffe0, 0x8}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @printk={@lli}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac63}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x98e}, @alu={0x4, 0x0, 0xb, 0x7, 0x9, 0xfffffffffffffffc, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000400)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x1, 0xa, 0x80000000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000005c0)=[{0x2, 0x2, 0xa, 0x8}, {0x1, 0x3, 0x1000, 0x2}, {0x0, 0x1, 0x9}], 0x10, 0x5}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0xa, 0x3, 0xff, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
socket$kcm(0x10, 0x3, 0x10)

65.302379ms ago: executing program 0 (id=4365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x101, 0x0, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x101, 0x0, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
syz_clone(0x8009400, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000e700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000006e19d2e5b45c9c502f4717a2418366919cf3aa9d37c99877e6dcba2daada7dc48cb85c0b9a40f2cd662b4fa81d34364b1b8e2486dcbc69c85afe1ed80e2fe23098f3de31f8e3806a4f0802d4c9135611cb4d8af5ad82aa65a6c967760c3728a4fdb8b0f03612dc40e6721e64b3b46b992714a308db3768303ba1f887dd0fd2ac63a1d1f9bc05e8fd58ad608709ace45e6c8b7a1b354cdb6ee0d2ea07025a92c57917", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000006e19d2e5b45c9c502f4717a2418366919cf3aa9d37c99877e6dcba2daada7dc48cb85c0b9a40f2cd662b4fa81d34364b1b8e2486dcbc69c85afe1ed80e2fe23098f3de31f8e3806a4f0802d4c9135611cb4d8af5ad82aa65a6c967760c3728a4fdb8b0f03612dc40e6721e64b3b46b992714a308db3768303ba1f887dd0fd2ac63a1d1f9bc05e8fd58ad608709ace45e6c8b7a1b354cdb6ee0d2ea07025a92c57917", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000980)="add92cbf", 0x4}], 0x1}, 0x20040005)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0800, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0800, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'gretap0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080))
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0x4, 0x0, 0x4}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x1}, 0x28)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x3, 0x1, 0x2}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000140)=[{}], 0xfd9e, 0x10, &(0x7f00000003c0), &(0x7f0000000500), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x8001, 0x8, 0x5, 0x16332, r9, 0x4, '\x00', 0x0, r10, 0x4, 0x5, 0x3, 0x1}, 0x50)
perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe52c}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x64d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x9, 0x8, 0x4, 0x30}, @map_val={0x18, 0x5, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x6a861d463c291256}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', r13, 0x0, r10, 0x8, &(0x7f00000006c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xa, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0x1, r14], &(0x7f0000000840)=[{0x5, 0x1, 0xa, 0xa}, {0x1, 0x2, 0x3}], 0x10, 0x1}, 0x94)
write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYRES64=r4], 0xee8a)

0s ago: executing program 1 (id=4366):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf6, 0x6, 0x8, 0xe7, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8e7d, 0x1, @perf_config_ext={0x6, 0x4}, 0x1, 0x112a, 0x0, 0x4, 0x3, 0x10, 0x10, 0x0, 0xfffffff6, 0x0, 0xd87d}, 0x0, 0x9, 0xffffffffffffffff, 0x8)
r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)={'macvlan0', 0x32, 0x35}, 0xb)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1, <r3=>0x0}, 0x8)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x800}, [@tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xa, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000480)=[{0x2, 0x3, 0xc, 0x9}, {0x1, 0x4, 0x8, 0xc}, {0x4, 0x4, 0x6, 0x4}], 0x10, 0x10001}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x0, 0x9, 0x2, 0xfffffffffffffff4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xba, &(0x7f00000001c0)=""/186, 0x41100, 0x7e, '\x00', 0x0, @fallback=0x10, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x0, 0x81, 0x9}, 0x10, r3, r4, 0x8, &(0x7f0000000580), &(0x7f00000005c0)=[{0x2, 0x3, 0x0, 0xa}, {0x0, 0x3, 0x5, 0x2}, {0x3, 0x4, 0xd, 0xc}, {0x5, 0x2, 0xd, 0x5}, {0x2, 0x1, 0xe, 0x7}, {0x4, 0x3, 0x6, 0xa}, {0x3, 0x3, 0xd, 0x1}, {0x0, 0x1, 0x7, 0x3}], 0x10, 0x80}, 0x94)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000740)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
r8 = socket$kcm(0x29, 0x7, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000007c0)={r9})
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf, '\x00', 0x0, r2, 0x5, 0x3, 0x1}, 0x50)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x1, '\x00', 0x0, r2, 0x2, 0x0, 0x3}, 0x50)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x8}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x2}, {0xa, 0x43ca}, {0xe, 0x2}]}, @float={0x1, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x30, 0x61, 0x3aeecc31f2eb606b]}}, &(0x7f0000000ac0), 0x5e, 0x0, 0x1, 0x3ff, 0x10000}, 0x28)
r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x8, &(0x7f0000000900)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0xb}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0xbb}, @jmp={0x5, 0x1, 0x5, 0xa, 0x4, 0x80}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000940)='syzkaller\x00', 0xe393, 0x94, &(0x7f0000000980)=""/148, 0x41000, 0x0, '\x00', 0x0, 0x25, r13, 0x8, &(0x7f0000000b40)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0xe, 0x5, 0x10000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000bc0)=[{0x3, 0x2, 0xc, 0x4}], 0x10, 0x101}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@cgroup=<r15=>0xffffffffffffffff, 0x11, 0x0, 0xfffff860, &(0x7f0000000cc0)=[0x0], 0x1, 0x0, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r16=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)={@map=r11, r5, 0x30, 0x19, r5, @void, @value=r14, @void, @void, r16}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r5, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e40)=[0x0, 0x0], ""/16, <r17=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0], 0x0, 0x32, &(0x7f0000000f00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10)
r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0x7, 0x0, r12, 0x9, '\x00', r17, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r19 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001200)=@generic={&(0x7f00000011c0)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r19)
openat$cgroup_devices(r15, &(0x7f0000001240)='devices.allow\x00', 0x2, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001280)={0xf}, 0x8)
r20 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x16, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @alu={0x7, 0x1, 0x5, 0x5, 0xb, 0xfffffffffffffffc, 0x6dfc690303e69c7a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000001380)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f00000013c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001400)=[r18, r12, 0x1, r18], &(0x7f0000001440)=[{0x4, 0x2, 0x7, 0x7}, {0x2, 0x2, 0xa, 0xa}, {0x5, 0x5, 0xd, 0xa}, {0x4, 0x3, 0xa, 0x9}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001540)={@map=r7, r20, 0x38, 0x8, 0x0, @void, @value=r5, @void, @void, r16}, 0x20)
socketpair(0x0, 0x1, 0x30, &(0x7f0000001580))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001780)={{r8, <r21=>0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)='%-5lx  \x00'}, 0x20)
r22 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000017c0)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x7fff, '\x00', r17, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4a}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x0, 0xf, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001840)=[r12, r21, r22, r11], &(0x7f0000001880)=[{0x1, 0x3, 0xb}, {0x4, 0x4, 0x10, 0x5}, {0x5, 0x3, 0x6, 0x4}, {0x3, 0x1, 0xc, 0x6}, {0x1, 0x1, 0x10}], 0x10, 0x3}, 0x94)

kernel console output (not intermixed with test programs):

081) Use of int in max_burst socket option deprecated.
[  583.571433][T14081] Use struct sctp_assoc_value instead
[  587.159367][T14150] netlink: 'syz.0.2649': attribute type 11 has an invalid length.
[  587.217306][T14156] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2650'.
[  588.053946][T14170] FAULT_INJECTION: forcing a failure.
[  588.053946][T14170] name failslab, interval 1, probability 0, space 0, times 0
[  588.079732][T14170] CPU: 0 PID: 14170 Comm: syz.1.2664 Not tainted syzkaller #0
[  588.088833][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  588.099654][T14170] Call Trace:
[  588.103023][T14170]  <TASK>
[  588.106019][T14170]  dump_stack_lvl+0x18c/0x250
[  588.110884][T14170]  ? sctp_sendmsg+0x1519/0x27b0
[  588.115893][T14170]  ? ___sys_sendmsg+0x2a6/0x360
[  588.121090][T14170]  ? show_regs_print_info+0x20/0x20
[  588.124568][T14171] netlink: 'syz.3.2657': attribute type 21 has an invalid length.
[  588.126434][T14170]  ? load_image+0x420/0x420
[  588.139012][T14170]  should_fail_ex+0x394/0x4c0
[  588.143756][T14170]  should_failslab+0x9/0x20
[  588.148328][T14170]  slab_pre_alloc_hook+0x59/0x300
[  588.154057][T14170]  ? sctp_add_bind_addr+0x8c/0x360
[  588.159499][T14170]  __kmem_cache_alloc_node+0x53/0x250
[  588.164943][T14170]  ? sctp_add_bind_addr+0x8c/0x360
[  588.170945][T14170]  kmalloc_trace+0x2a/0xe0
[  588.176031][T14170]  sctp_add_bind_addr+0x8c/0x360
[  588.181153][T14170]  sctp_copy_local_addr_list+0x31b/0x4e0
[  588.189723][T14170]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  588.196819][T14170]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  588.203044][T14170]  ? sctp_v4_is_any+0x35/0x60
[  588.207950][T14170]  ? sctp_copy_one_addr+0x8c/0x350
[  588.213322][T14170]  sctp_bind_addr_copy+0xb3/0x3c0
[  588.218579][T14170]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  588.224964][T14170]  sctp_connect_new_asoc+0x2f9/0x6a0
[  588.230930][T14170]  ? __sctp_connect+0xd80/0xd80
[  588.236281][T14170]  ? __local_bh_enable_ip+0x13a/0x1c0
[  588.242171][T14170]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  588.248350][T14170]  ? security_sctp_bind_connect+0x89/0xb0
[  588.254482][T14170]  sctp_sendmsg+0x1519/0x27b0
[  588.259857][T14170]  ? sctp_getsockopt+0xb60/0xb60
[  588.266306][T14170]  ? aa_af_perm+0x330/0x330
[  588.271406][T14170]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  588.280608][T14170]  ? sock_rps_record_flow+0x19/0x3f0
[  588.288609][T14170]  ? inet_sendmsg+0xce/0x2a0
[  588.294217][T14170]  ? inet_send_prepare+0x250/0x250
[  588.301330][T14170]  ____sys_sendmsg+0x61b/0x980
[  588.307121][T14170]  ? __asan_memset+0x22/0x40
[  588.312414][T14170]  ? __sys_sendmsg_sock+0x30/0x30
[  588.317686][T14170]  ? __import_iovec+0x3fa/0x850
[  588.324430][T14170]  ? import_iovec+0x73/0xa0
[  588.330471][T14170]  ___sys_sendmsg+0x2a6/0x360
[  588.336684][T14170]  ? get_pid_task+0x20/0x1e0
[  588.342741][T14170]  ? __sys_sendmsg+0x2b0/0x2b0
[  588.347660][T14170]  ? __lock_acquire+0x7d80/0x7d80
[  588.353893][T14170]  __se_sys_sendmsg+0x1d0/0x2c0
[  588.358816][T14170]  ? __x64_sys_sendmsg+0x80/0x80
[  588.364017][T14170]  ? lockdep_hardirqs_on+0x98/0x150
[  588.369400][T14170]  do_syscall_64+0x55/0xb0
[  588.373882][T14170]  ? clear_bhb_loop+0x40/0x90
[  588.378753][T14170]  ? clear_bhb_loop+0x40/0x90
[  588.383612][T14170]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  588.389593][T14170] RIP: 0033:0x7f5b2ef9de59
[  588.395281][T14170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.416959][T14170] RSP: 002b:00007f5b2fec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.425873][T14170] RAX: ffffffffffffffda RBX: 00007f5b2f225fa0 RCX: 00007f5b2ef9de59
[  588.435051][T14170] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003
[  588.443681][T14170] RBP: 00007f5b2fec6090 R08: 0000000000000000 R09: 0000000000000000
[  588.455129][T14170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  588.466302][T14170] R13: 00007f5b2f226038 R14: 00007f5b2f225fa0 R15: 00007fff35030b98
[  588.474700][T14170]  </TASK>
[  588.491903][T14171] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2657'.
[  588.950621][T14178] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2659'.
[  589.016221][T14176] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2658'.
[  590.015758][T14204] FAULT_INJECTION: forcing a failure.
[  590.015758][T14204] name failslab, interval 1, probability 0, space 0, times 0
[  590.030748][T14204] CPU: 0 PID: 14204 Comm: syz.0.2669 Not tainted syzkaller #0
[  590.038330][T14204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  590.048920][T14204] Call Trace:
[  590.052782][T14204]  <TASK>
[  590.056305][T14204]  dump_stack_lvl+0x18c/0x250
[  590.061421][T14204]  ? sctp_sendmsg+0x1519/0x27b0
[  590.066744][T14204]  ? ___sys_sendmsg+0x2a6/0x360
[  590.072246][T14204]  ? show_regs_print_info+0x20/0x20
[  590.077726][T14204]  ? load_image+0x420/0x420
[  590.082491][T14204]  should_fail_ex+0x394/0x4c0
[  590.087351][T14204]  should_failslab+0x9/0x20
[  590.092109][T14204]  slab_pre_alloc_hook+0x59/0x300
[  590.097253][T14204]  ? sctp_add_bind_addr+0x8c/0x360
[  590.103314][T14204]  __kmem_cache_alloc_node+0x53/0x250
[  590.109204][T14204]  ? sctp_add_bind_addr+0x8c/0x360
[  590.114567][T14204]  kmalloc_trace+0x2a/0xe0
[  590.119061][T14204]  sctp_add_bind_addr+0x8c/0x360
[  590.124070][T14204]  sctp_copy_local_addr_list+0x31b/0x4e0
[  590.129759][T14204]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  590.136120][T14204]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  590.142268][T14204]  ? sctp_v4_is_any+0x35/0x60
[  590.147018][T14204]  ? sctp_copy_one_addr+0x8c/0x350
[  590.152842][T14204]  sctp_bind_addr_copy+0xb3/0x3c0
[  590.160989][T14204]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  590.168009][T14204]  sctp_connect_new_asoc+0x2f9/0x6a0
[  590.173385][T14204]  ? __sctp_connect+0xd80/0xd80
[  590.178321][T14204]  ? __local_bh_enable_ip+0x13a/0x1c0
[  590.183866][T14204]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  590.189493][T14204]  ? security_sctp_bind_connect+0x89/0xb0
[  590.195548][T14204]  sctp_sendmsg+0x1519/0x27b0
[  590.200504][T14204]  ? sctp_getsockopt+0xb60/0xb60
[  590.205610][T14204]  ? aa_af_perm+0x330/0x330
[  590.210184][T14204]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  590.217234][T14204]  ? sock_rps_record_flow+0x19/0x3f0
[  590.223907][T14204]  ? inet_sendmsg+0xce/0x2a0
[  590.228593][T14204]  ? inet_send_prepare+0x250/0x250
[  590.233793][T14204]  ____sys_sendmsg+0x61b/0x980
[  590.238645][T14204]  ? __asan_memset+0x22/0x40
[  590.243320][T14204]  ? __sys_sendmsg_sock+0x30/0x30
[  590.248416][T14204]  ? __import_iovec+0x3fa/0x850
[  590.253440][T14204]  ? import_iovec+0x73/0xa0
[  590.258018][T14204]  ___sys_sendmsg+0x2a6/0x360
[  590.262772][T14204]  ? get_pid_task+0x20/0x1e0
[  590.268516][T14204]  ? __sys_sendmsg+0x2b0/0x2b0
[  590.274717][T14204]  ? __lock_acquire+0x7d80/0x7d80
[  590.279851][T14204]  __se_sys_sendmsg+0x1d0/0x2c0
[  590.284795][T14204]  ? __x64_sys_sendmsg+0x80/0x80
[  590.289843][T14204]  ? lockdep_hardirqs_on+0x98/0x150
[  590.296205][T14204]  do_syscall_64+0x55/0xb0
[  590.302099][T14204]  ? clear_bhb_loop+0x40/0x90
[  590.308857][T14204]  ? clear_bhb_loop+0x40/0x90
[  590.314707][T14204]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  590.320696][T14204] RIP: 0033:0x7fd33fb9de59
[  590.325176][T14204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.345835][T14204] RSP: 002b:00007fd33ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  590.354537][T14204] RAX: ffffffffffffffda RBX: 00007fd33fe25fa0 RCX: 00007fd33fb9de59
[  590.363791][T14204] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003
[  590.372183][T14204] RBP: 00007fd33ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  590.380247][T14204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  590.388369][T14204] R13: 00007fd33fe26038 R14: 00007fd33fe25fa0 R15: 00007ffe4e10a678
[  590.397128][T14204]  </TASK>
[  592.155629][T14236] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2681'.
[  592.599184][T14239] netlink: 'syz.2.2680': attribute type 3 has an invalid length.
[  592.618318][T14241] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2681'.
[  592.670340][T14239] netlink: 'syz.2.2680': attribute type 4 has an invalid length.
[  592.742218][T14241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2681'.
[  592.754273][T14239] netlink: 'syz.2.2680': attribute type 7 has an invalid length.
[  592.765522][T14239] netlink: 'syz.2.2680': attribute type 8 has an invalid length.
[  592.773967][T14239] netlink: 'syz.2.2680': attribute type 7 has an invalid length.
[  592.782399][T14239] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.2680'.
[  595.647819][T14283] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2694'.
[  595.683494][T14279] netlink: 'syz.2.2692': attribute type 10 has an invalid length.
[  595.911601][T14279] team0 (unregistering): Port device C removed
[  596.003043][T14279] team0 (unregistering): Port device team_slave_1 removed
[  596.056781][T14283] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  596.075086][T14283] CPU: 0 PID: 14283 Comm: syz.1.2694 Not tainted syzkaller #0
[  596.083625][T14283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  596.097362][T14283] Call Trace:
[  596.102126][T14283]  <TASK>
[  596.106696][T14283]  dump_stack_lvl+0x18c/0x250
[  596.112380][T14283]  ? show_regs_print_info+0x20/0x20
[  596.119970][T14283]  ? load_image+0x420/0x420
[  596.125505][T14283]  sysfs_warn_dup+0x8e/0xa0
[  596.133185][T14283]  sysfs_do_create_link_sd+0xc0/0x110
[  596.142082][T14283]  device_add_class_symlinks+0x1cf/0x240
[  596.150988][T14283]  device_add+0x4f9/0xc40
[  596.157240][T14283]  wiphy_register+0x1d99/0x2ac0
[  596.162467][T14283]  ? cfg80211_event_work+0x40/0x40
[  596.167652][T14283]  ? minstrel_ht_alloc+0x88a/0x990
[  596.172958][T14283]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  596.179176][T14283]  ieee80211_register_hw+0x2dd8/0x3b30
[  596.184958][T14283]  ? ieee80211_register_hw+0xef1/0x3b30
[  596.190783][T14283]  ? ieee80211_tasklet_handler+0x20/0x20
[  596.196591][T14283]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  596.203929][T14283]  ? __debug_object_init+0xec/0x450
[  596.209397][T14283]  ? __asan_memset+0x22/0x40
[  596.214070][T14283]  ? __hrtimer_init+0x189/0x270
[  596.219112][T14283]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  596.225599][T14283]  ? mac80211_hwsim_free+0x220/0x220
[  596.235499][T14283]  ? rcu_is_watching+0x15/0xb0
[  596.240807][T14283]  ? kstrndup+0xbd/0x140
[  596.245592][T14283]  hwsim_new_radio_nl+0xdad/0x1a70
[  596.252625][T14283]  ? __nla_validate+0x50/0x50
[  596.257941][T14283]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  596.264392][T14283]  ? __nla_parse+0x40/0x50
[  596.269175][T14283]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  596.276076][T14283]  genl_family_rcv_msg_doit+0x21a/0x310
[  596.283642][T14283]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  596.290256][T14283]  ? bpf_lsm_capable+0x9/0x10
[  596.296131][T14283]  ? security_capable+0x89/0xb0
[  596.303547][T14283]  genl_rcv_msg+0x611/0x7a0
[  596.309385][T14283]  ? genl_bind+0x360/0x360
[  596.313943][T14283]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  596.321013][T14283]  netlink_rcv_skb+0x235/0x4c0
[  596.325866][T14283]  ? genl_bind+0x360/0x360
[  596.330442][T14283]  ? netlink_ack+0x1160/0x1160
[  596.335440][T14283]  ? __lock_acquire+0x7d80/0x7d80
[  596.342298][T14283]  ? down_read+0x1ac/0x2e0
[  596.347232][T14283]  genl_rcv+0x28/0x40
[  596.351462][T14283]  netlink_unicast+0x7b1/0x930
[  596.356330][T14283]  netlink_sendmsg+0x8d0/0xbf0
[  596.361571][T14283]  ? netlink_getsockopt+0x590/0x590
[  596.367881][T14283]  ? apparmor_socket_sendmsg+0x8e/0x330
[  596.373793][T14283]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  596.379145][T14283]  ? security_socket_sendmsg+0x80/0xa0
[  596.384820][T14283]  ? netlink_getsockopt+0x590/0x590
[  596.390085][T14283]  ____sys_sendmsg+0x61b/0x980
[  596.394936][T14283]  ? __asan_memset+0x22/0x40
[  596.399688][T14283]  ? __sys_sendmsg_sock+0x30/0x30
[  596.404785][T14283]  ? __import_iovec+0x5f2/0x850
[  596.410062][T14283]  ? import_iovec+0x73/0xa0
[  596.414819][T14283]  ___sys_sendmsg+0x2a6/0x360
[  596.419771][T14283]  ? __sys_sendmsg+0x2b0/0x2b0
[  596.424647][T14283]  ? trace_call_bpf+0xc3/0x6c0
[  596.429569][T14283]  ? fd_install+0x60/0x4e0
[  596.434085][T14283]  __se_sys_sendmsg+0x1d0/0x2c0
[  596.439272][T14283]  ? perf_trace_preemptirq_template+0x269/0x330
[  596.446288][T14283]  ? __x64_sys_sendmsg+0x80/0x80
[  596.451764][T14283]  ? lockdep_hardirqs_on+0x98/0x150
[  596.457739][T14283]  do_syscall_64+0x55/0xb0
[  596.462500][T14283]  ? clear_bhb_loop+0x40/0x90
[  596.467848][T14283]  ? clear_bhb_loop+0x40/0x90
[  596.472674][T14283]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  596.478664][T14283] RIP: 0033:0x7f5b2ef9de59
[  596.483140][T14283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.502818][T14283] RSP: 002b:00007f5b2fec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  596.511552][T14283] RAX: ffffffffffffffda RBX: 00007f5b2f225fa0 RCX: 00007f5b2ef9de59
[  596.521276][T14283] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  596.530389][T14283] RBP: 00007f5b2f033e6f R08: 0000000000000000 R09: 0000000000000000
[  596.538870][T14283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  596.547030][T14283] R13: 00007f5b2f226038 R14: 00007f5b2f225fa0 R15: 00007fff35030b98
[  596.555197][T14283]  </TASK>
[  596.597689][T14290] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2696'.
[  596.608348][T14290] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2696'.
[  597.214268][T14313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2704'.
[  597.247409][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2704'.
[  597.608729][T14328] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.2708'.
[  597.843034][T14332] netlink: 703 bytes leftover after parsing attributes in process `syz.0.2709'.
[  600.654578][T14387] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2726'.
[  600.732260][T14390] netlink: 'syz.1.2727': attribute type 10 has an invalid length.
[  600.905413][T14390] team0 (unregistering): Port device team_slave_0 removed
[  600.952883][T14390] team0 (unregistering): Port device team_slave_1 removed
[  602.742348][ T5783] Bluetooth: hci1: ISO packet for unknown connection handle 44
[  602.939413][T14431] netlink: 'syz.1.2740': attribute type 10 has an invalid length.
[  603.021807][T14431] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2740'.
[  603.915453][T14447] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2744'.
[  605.999701][T14449] FAULT_INJECTION: forcing a failure.
[  605.999701][T14449] name failslab, interval 1, probability 0, space 0, times 0
[  606.020997][T14449] CPU: 0 PID: 14449 Comm: syz.2.2745 Not tainted syzkaller #0
[  606.028557][T14449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  606.039203][T14449] Call Trace:
[  606.042615][T14449]  <TASK>
[  606.046390][T14449]  dump_stack_lvl+0x18c/0x250
[  606.051236][T14449]  ? show_regs_print_info+0x20/0x20
[  606.056513][T14449]  ? load_image+0x420/0x420
[  606.061123][T14449]  should_fail_ex+0x394/0x4c0
[  606.066015][T14449]  should_failslab+0x9/0x20
[  606.071156][T14449]  slab_pre_alloc_hook+0x59/0x300
[  606.077318][T14449]  ? sctp_bind_addrs_to_raw+0x10b/0x350
[  606.083490][T14449]  ? sctp_bind_addrs_to_raw+0x10b/0x350
[  606.090095][T14449]  __kmem_cache_alloc_node+0x53/0x250
[  606.096429][T14449]  ? sctp_bind_addrs_to_raw+0x10b/0x350
[  606.102070][T14449]  __kmalloc+0xa7/0x240
[  606.107387][T14449]  sctp_bind_addrs_to_raw+0x10b/0x350
[  606.113177][T14449]  ? sctp_del_bind_addr+0x190/0x190
[  606.118640][T14449]  sctp_make_init+0x164/0xf80
[  606.123673][T14449]  ? sctp_addto_chunk+0x220/0x220
[  606.128762][T14449]  ? kernel_text_address+0xa0/0xd0
[  606.133975][T14449]  ? __kernel_text_address+0xd/0x30
[  606.139233][T14449]  ? unwind_get_return_address+0x91/0xc0
[  606.145294][T14449]  ? stack_trace_save+0x100/0x100
[  606.150380][T14449]  ? arch_stack_walk+0x160/0x190
[  606.155492][T14449]  sctp_sf_do_prm_asoc+0xcf/0x3e0
[  606.160675][T14449]  sctp_do_sm+0x23b/0x5af0
[  606.165245][T14449]  ? sctp_cname+0x110/0x110
[  606.169900][T14449]  ? kasan_set_track+0x4e/0x70
[  606.174719][T14449]  ? __kasan_kmalloc+0x8f/0xa0
[  606.179534][T14449]  ? sctp_stream_init_ext+0x57/0x170
[  606.185823][T14449]  ? sctp_sendmsg_to_asoc+0x12cc/0x17f0
[  606.191442][T14449]  ? sctp_generate_t3_rtx_event+0x340/0x340
[  606.197415][T14449]  ? __se_sys_sendmsg+0x1d0/0x2c0
[  606.202530][T14449]  ? do_syscall_64+0x55/0xb0
[  606.207266][T14449]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  606.213437][T14449]  ? __sk_mem_raise_allocated+0x97b/0x11e0
[  606.219572][T14449]  sctp_primitive_ASSOCIATE+0x95/0xc0
[  606.225055][T14449]  sctp_sendmsg_to_asoc+0x1009/0x17f0
[  606.230512][T14449]  ? sctp_assoc_add_peer+0xcc4/0x1350
[  606.236473][T14449]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  606.243212][T14449]  ? __sctp_connect+0xd80/0xd80
[  606.248573][T14449]  ? __local_bh_enable_ip+0x13a/0x1c0
[  606.254139][T14449]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  606.260019][T14449]  ? security_sctp_bind_connect+0x89/0xb0
[  606.265816][T14449]  sctp_sendmsg+0x1afa/0x27b0
[  606.270582][T14449]  ? sctp_getsockopt+0xb60/0xb60
[  606.275607][T14449]  ? aa_af_perm+0x330/0x330
[  606.280274][T14449]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  606.287157][T14449]  ? sock_rps_record_flow+0x19/0x3f0
[  606.292949][T14449]  ? inet_sendmsg+0xce/0x2a0
[  606.297632][T14449]  ? inet_send_prepare+0x250/0x250
[  606.302887][T14449]  ____sys_sendmsg+0x61b/0x980
[  606.307742][T14449]  ? __asan_memset+0x22/0x40
[  606.312546][T14449]  ? __sys_sendmsg_sock+0x30/0x30
[  606.317698][T14449]  ? __import_iovec+0x3fa/0x850
[  606.323025][T14449]  ? import_iovec+0x73/0xa0
[  606.328705][T14449]  ___sys_sendmsg+0x2a6/0x360
[  606.337375][T14449]  ? get_pid_task+0x20/0x1e0
[  606.343949][T14449]  ? __sys_sendmsg+0x2b0/0x2b0
[  606.351281][T14449]  ? __lock_acquire+0x7d80/0x7d80
[  606.358556][T14449]  __se_sys_sendmsg+0x1d0/0x2c0
[  606.364494][T14449]  ? __x64_sys_sendmsg+0x80/0x80
[  606.370503][T14449]  ? lockdep_hardirqs_on+0x98/0x150
[  606.376520][T14449]  do_syscall_64+0x55/0xb0
[  606.381076][T14449]  ? clear_bhb_loop+0x40/0x90
[  606.385930][T14449]  ? clear_bhb_loop+0x40/0x90
[  606.390656][T14449]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  606.396631][T14449] RIP: 0033:0x7ff87799de59
[  606.402483][T14449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  606.424951][T14449] RSP: 002b:00007ff878845028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  606.433402][T14449] RAX: ffffffffffffffda RBX: 00007ff877c25fa0 RCX: 00007ff87799de59
[  606.441725][T14449] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003
[  606.449751][T14449] RBP: 00007ff878845090 R08: 0000000000000000 R09: 0000000000000000
[  606.458039][T14449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  606.466544][T14449] R13: 00007ff877c26038 R14: 00007ff877c25fa0 R15: 00007fff2c868248
[  606.474591][T14449]  </TASK>
[  606.719058][T14454] netlink: 'syz.3.2747': attribute type 3 has an invalid length.
[  606.744907][T14454] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2747'.
[  607.725000][T14474] FAULT_INJECTION: forcing a failure.
[  607.725000][T14474] name failslab, interval 1, probability 0, space 0, times 0
[  607.792903][T14474] CPU: 0 PID: 14474 Comm: syz.1.2754 Not tainted syzkaller #0
[  607.800477][T14474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  607.810603][T14474] Call Trace:
[  607.813939][T14474]  <TASK>
[  607.816918][T14474]  dump_stack_lvl+0x18c/0x250
[  607.821677][T14474]  ? ____sys_sendmsg+0x61b/0x980
[  607.826691][T14474]  ? __se_sys_sendmsg+0x1d0/0x2c0
[  607.832328][T14474]  ? show_regs_print_info+0x20/0x20
[  607.837615][T14474]  ? load_image+0x420/0x420
[  607.842428][T14474]  should_fail_ex+0x394/0x4c0
[  607.847186][T14474]  should_failslab+0x9/0x20
[  607.851856][T14474]  slab_pre_alloc_hook+0x59/0x300
[  607.856965][T14474]  ? lockdep_init_map_type+0x9c/0x8e0
[  607.862526][T14474]  ? nf_ct_ext_add+0x1ad/0x440
[  607.868058][T14474]  ? nf_ct_ext_add+0x1ad/0x440
[  607.872984][T14474]  __kmem_cache_alloc_node+0x53/0x250
[  607.878968][T14474]  ? nf_ct_ext_add+0x1ad/0x440
[  607.883812][T14474]  __kmalloc_node_track_caller+0xa4/0x230
[  607.889690][T14474]  ? rcu_is_watching+0x15/0xb0
[  607.894543][T14474]  krealloc+0x86/0x120
[  607.898687][T14474]  nf_ct_ext_add+0x1ad/0x440
[  607.903341][T14474]  init_conntrack+0x5e9/0xf40
[  607.908091][T14474]  ? early_drop+0x7f0/0x7f0
[  607.912777][T14474]  ? nf_conntrack_find_get+0x670/0x670
[  607.918443][T14474]  ? __local_bh_enable_ip+0x13a/0x1c0
[  607.923869][T14474]  ? __siphash_unaligned+0x25c/0x3d0
[  607.929211][T14474]  nf_conntrack_in+0xc29/0x1630
[  607.934142][T14474]  ? nf_ct_pernet+0x270/0x270
[  607.938886][T14474]  ? ipt_do_table+0x2c5/0x15c0
[  607.943842][T14474]  ? kmem_cache_free+0xf8/0x290
[  607.948755][T14474]  ? sctp_packet_transmit+0x143d/0x2950
[  607.954548][T14474]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[  607.960164][T14474]  ? ___sys_sendmsg+0x2a6/0x360
[  607.965155][T14474]  ? ipv4_conntrack_local+0x123/0x200
[  607.970655][T14474]  ? ipv4_conntrack_in+0x20/0x20
[  607.975633][T14474]  nf_hook_slow+0xbd/0x200
[  607.980292][T14474]  ? nf_hook+0x390/0x390
[  607.985007][T14474]  nf_hook+0x228/0x390
[  607.989138][T14474]  ? nf_hook+0xa2/0x390
[  607.993333][T14474]  ? __ip_local_out+0x5f0/0x5f0
[  607.998361][T14474]  ? nf_hook+0x390/0x390
[  608.002735][T14474]  ? __lock_acquire+0x7d80/0x7d80
[  608.007822][T14474]  ? read_lock_is_recursive+0x20/0x20
[  608.014046][T14474]  ? ip_fast_csum+0x1ee/0x2b0
[  608.018799][T14474]  __ip_local_out+0x4db/0x5f0
[  608.023533][T14474]  ? nf_hook+0x390/0x390
[  608.027880][T14474]  ? __ip_queue_xmit+0x5d/0x1960
[  608.032892][T14474]  __ip_queue_xmit+0xf89/0x1960
[  608.037812][T14474]  ? __ip_queue_xmit+0x5d/0x1960
[  608.042790][T14474]  sctp_packet_transmit+0x23e4/0x2950
[  608.048372][T14474]  sctp_packet_singleton+0x230/0x330
[  608.053934][T14474]  ? sctp_outq_select_transport+0x590/0x590
[  608.059885][T14474]  ? sctp_outq_select_transport+0x480/0x590
[  608.065821][T14474]  ? sctp_transport_burst_limited+0x197/0x280
[  608.071928][T14474]  sctp_outq_flush+0x4fc/0x3260
[  608.076815][T14474]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  608.082747][T14474]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  608.088674][T14474]  ? rcu_is_watching+0x15/0xb0
[  608.093475][T14474]  ? sctp_outq_tail+0x8a0/0x8a0
[  608.098413][T14474]  ? sctp_outq_uncork+0x4d/0xa0
[  608.103419][T14474]  sctp_do_sm+0x53c4/0x5af0
[  608.107970][T14474]  ? sctp_generate_t3_rtx_event+0x340/0x340
[  608.114005][T14474]  ? __se_sys_sendmsg+0x1d0/0x2c0
[  608.119103][T14474]  ? __sk_mem_raise_allocated+0x97b/0x11e0
[  608.124955][T14474]  sctp_primitive_ASSOCIATE+0x95/0xc0
[  608.130364][T14474]  sctp_sendmsg_to_asoc+0x1009/0x17f0
[  608.135773][T14474]  ? sctp_assoc_add_peer+0xcc4/0x1350
[  608.141209][T14474]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  608.147171][T14474]  ? __sctp_connect+0xd80/0xd80
[  608.152255][T14474]  ? __local_bh_enable_ip+0x13a/0x1c0
[  608.157779][T14474]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  608.163391][T14474]  ? security_sctp_bind_connect+0x89/0xb0
[  608.169331][T14474]  sctp_sendmsg+0x1afa/0x27b0
[  608.174440][T14474]  ? sctp_getsockopt+0xb60/0xb60
[  608.179631][T14474]  ? aa_af_perm+0x330/0x330
[  608.184367][T14474]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  608.190857][T14474]  ? sock_rps_record_flow+0x19/0x3f0
[  608.196292][T14474]  ? inet_sendmsg+0xce/0x2a0
[  608.201389][T14474]  ? inet_send_prepare+0x250/0x250
[  608.207368][T14474]  ____sys_sendmsg+0x61b/0x980
[  608.213364][T14474]  ? __asan_memset+0x22/0x40
[  608.218044][T14474]  ? __sys_sendmsg_sock+0x30/0x30
[  608.223320][T14474]  ? __import_iovec+0x3fa/0x850
[  608.228496][T14474]  ? import_iovec+0x73/0xa0
[  608.233320][T14474]  ___sys_sendmsg+0x2a6/0x360
[  608.238721][T14474]  ? get_pid_task+0x20/0x1e0
[  608.243490][T14474]  ? __sys_sendmsg+0x2b0/0x2b0
[  608.248421][T14474]  ? __lock_acquire+0x7d80/0x7d80
[  608.253596][T14474]  __se_sys_sendmsg+0x1d0/0x2c0
[  608.258537][T14474]  ? __x64_sys_sendmsg+0x80/0x80
[  608.263578][T14474]  ? lockdep_hardirqs_on+0x98/0x150
[  608.268994][T14474]  do_syscall_64+0x55/0xb0
[  608.273452][T14474]  ? clear_bhb_loop+0x40/0x90
[  608.278152][T14474]  ? clear_bhb_loop+0x40/0x90
[  608.282956][T14474]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  608.289043][T14474] RIP: 0033:0x7f5b2ef9de59
[  608.294164][T14474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.316001][T14474] RSP: 002b:00007f5b2fec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  608.325431][T14474] RAX: ffffffffffffffda RBX: 00007f5b2f225fa0 RCX: 00007f5b2ef9de59
[  608.334044][T14474] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003
[  608.342156][T14474] RBP: 00007f5b2fec6090 R08: 0000000000000000 R09: 0000000000000000
[  608.350352][T14474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  608.359695][T14474] R13: 00007f5b2f226038 R14: 00007f5b2f225fa0 R15: 00007fff35030b98
[  608.368791][T14474]  </TASK>
[  612.161388][T14497] netlink: 'syz.2.2761': attribute type 46 has an invalid length.
[  612.202344][T14497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2761'.
[  613.350039][T14510] netlink: 'syz.1.2765': attribute type 10 has an invalid length.
[  616.347769][T14522] tap0: tun_chr_ioctl cmd 1074025677
[  616.354209][T14522] tap0: linktype set to 270
[  616.817027][ T5783] Bluetooth: hci4: command 0x0406 tx timeout
[  617.686728][T14546] netlink: 'syz.1.2773': attribute type 3 has an invalid length.
[  617.694981][T14546] netlink: 'syz.1.2773': attribute type 1 has an invalid length.
[  617.703099][T14546] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2773'.
[  619.969270][T14566] netlink: 'syz.2.2780': attribute type 10 has an invalid length.
[  620.392537][T14574] tap0: tun_chr_ioctl cmd 1074025677
[  620.398849][T14574] tap0: linktype set to 270
[  620.498084][T14582] netlink: 'syz.3.2784': attribute type 9 has an invalid length.
[  620.506864][T14582] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2784'.
[  621.105060][T14603] FAULT_INJECTION: forcing a failure.
[  621.105060][T14603] name failslab, interval 1, probability 0, space 0, times 0
[  621.147346][T14603] CPU: 1 PID: 14603 Comm: syz.3.2791 Not tainted syzkaller #0
[  621.155712][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  621.165828][T14603] Call Trace:
[  621.169269][T14603]  <TASK>
[  621.173602][T14603]  dump_stack_lvl+0x18c/0x250
[  621.178819][T14603]  ? show_regs_print_info+0x20/0x20
[  621.184704][T14603]  ? load_image+0x420/0x420
[  621.189291][T14603]  ? __might_sleep+0xe0/0xe0
[  621.193954][T14603]  ? __lock_acquire+0x7d80/0x7d80
[  621.199062][T14603]  should_fail_ex+0x394/0x4c0
[  621.203817][T14603]  should_failslab+0x9/0x20
[  621.209383][T14603]  slab_pre_alloc_hook+0x59/0x300
[  621.216404][T14603]  kmem_cache_alloc_node+0x5e/0x310
[  621.222119][T14603]  ? __alloc_skb+0x103/0x2c0
[  621.228533][T14603]  __alloc_skb+0x103/0x2c0
[  621.234406][T14603]  _sctp_make_chunk+0x5b/0x430
[  621.241082][T14603]  sctp_make_datafrag_empty+0x12b/0x240
[  621.246707][T14603]  ? sctp_make_ecne+0x350/0x350
[  621.251904][T14603]  ? sctp_auth_send_cid+0x69/0x250
[  621.257173][T14603]  sctp_datamsg_from_user+0x72e/0xee0
[  621.262908][T14603]  sctp_sendmsg_to_asoc+0xfdd/0x17f0
[  621.268337][T14603]  ? sctp_assoc_add_peer+0xcc4/0x1350
[  621.274501][T14603]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  621.280738][T14603]  ? __sctp_connect+0xd80/0xd80
[  621.285741][T14603]  ? __local_bh_enable_ip+0x13a/0x1c0
[  621.292019][T14603]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  621.297833][T14603]  ? security_sctp_bind_connect+0x89/0xb0
[  621.305994][T14603]  sctp_sendmsg+0x1afa/0x27b0
[  621.312498][T14603]  ? sctp_getsockopt+0xb60/0xb60
[  621.318215][T14603]  ? aa_af_perm+0x330/0x330
[  621.322940][T14603]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  621.329803][T14603]  ? sock_rps_record_flow+0x19/0x3f0
[  621.335177][T14603]  ? inet_sendmsg+0xce/0x2a0
[  621.340223][T14603]  ? inet_send_prepare+0x250/0x250
[  621.345761][T14603]  ____sys_sendmsg+0x61b/0x980
[  621.348239][T14607] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2794'.
[  621.350904][T14603]  ? __asan_memset+0x22/0x40
[  621.364941][T14603]  ? __sys_sendmsg_sock+0x30/0x30
[  621.370137][T14603]  ? __import_iovec+0x3fa/0x850
[  621.375602][T14603]  ? import_iovec+0x73/0xa0
[  621.380583][T14603]  ___sys_sendmsg+0x2a6/0x360
[  621.385935][T14607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  621.386886][T14603]  ? get_pid_task+0x20/0x1e0
[  621.386931][T14603]  ? __sys_sendmsg+0x2b0/0x2b0
[  621.412923][T14603]  ? __lock_acquire+0x7d80/0x7d80
[  621.418219][T14603]  __se_sys_sendmsg+0x1d0/0x2c0
[  621.424495][T14603]  ? __x64_sys_sendmsg+0x80/0x80
[  621.430884][T14603]  ? lockdep_hardirqs_on+0x98/0x150
[  621.436616][T14603]  do_syscall_64+0x55/0xb0
[  621.441115][T14603]  ? clear_bhb_loop+0x40/0x90
[  621.446208][T14603]  ? clear_bhb_loop+0x40/0x90
[  621.451044][T14603]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  621.457099][T14603] RIP: 0033:0x7f3f45f9de59
[  621.461597][T14603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.484480][T14603] RSP: 002b:00007f3f46ed9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  621.493217][T14603] RAX: ffffffffffffffda RBX: 00007f3f46225fa0 RCX: 00007f3f45f9de59
[  621.501786][T14603] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003
[  621.511476][T14603] RBP: 00007f3f46ed9090 R08: 0000000000000000 R09: 0000000000000000
[  621.520051][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  621.528520][T14603] R13: 00007f3f46226038 R14: 00007f3f46225fa0 R15: 00007ffddb5b6398
[  621.537873][T14603]  </TASK>
[  621.601631][T14607] ipvlan1: entered promiscuous mode
[  621.612575][T14607] ipvlan1: entered allmulticast mode
[  621.620966][T14607] veth0_vlan: entered allmulticast mode
[  622.094467][T14622] netlink: 'syz.2.2798': attribute type 10 has an invalid length.
[  622.137054][T14623] netlink: 'syz.3.2796': attribute type 10 has an invalid length.
[  622.274838][T14630] netlink: 'syz.0.2800': attribute type 21 has an invalid length.
[  622.292935][T14630] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2800'.
[  622.518090][T14634] delete_channel: no stack
[  622.544972][T14634] delete_channel: no stack
[  622.588153][T14634] netlink: 'syz.2.2802': attribute type 17 has an invalid length.
[  622.663309][T14634] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2802'.
[  622.763407][T14634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  622.847926][T14643] FAULT_INJECTION: forcing a failure.
[  622.847926][T14643] name failslab, interval 1, probability 0, space 0, times 0
[  622.881835][T14643] CPU: 1 PID: 14643 Comm: syz.3.2805 Not tainted syzkaller #0
[  622.890200][T14643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  622.902230][T14643] Call Trace:
[  622.906000][T14643]  <TASK>
[  622.908986][T14643]  dump_stack_lvl+0x18c/0x250
[  622.914267][T14643]  ? show_regs_print_info+0x20/0x20
[  622.919558][T14643]  ? load_image+0x420/0x420
[  622.924181][T14643]  ? __might_sleep+0xe0/0xe0
[  622.928831][T14643]  ? __lock_acquire+0x7d80/0x7d80
[  622.934047][T14643]  ? __se_sys_sendmsg+0x1d0/0x2c0
[  622.939261][T14643]  should_fail_ex+0x394/0x4c0
[  622.944125][T14643]  should_failslab+0x9/0x20
[  622.948746][T14643]  slab_pre_alloc_hook+0x59/0x300
[  622.955165][T14643]  ? sctp_datamsg_from_user+0x88/0xee0
[  622.961247][T14643]  __kmem_cache_alloc_node+0x53/0x250
[  622.966717][T14643]  ? sctp_datamsg_from_user+0x88/0xee0
[  622.972358][T14643]  kmalloc_trace+0x2a/0xe0
[  622.977221][T14643]  sctp_datamsg_from_user+0x88/0xee0
[  622.982717][T14643]  ? __sk_mem_raise_allocated+0x97b/0x11e0
[  622.989498][T14643]  ? sctp_primitive_ASSOCIATE+0x95/0xc0
[  622.995416][T14643]  sctp_sendmsg_to_asoc+0xfdd/0x17f0
[  623.001380][T14643]  ? sctp_assoc_add_peer+0xcc4/0x1350
[  623.007756][T14643]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  623.016903][T14643]  ? __sctp_connect+0xd80/0xd80
[  623.021937][T14643]  ? __local_bh_enable_ip+0x13a/0x1c0
[  623.027746][T14643]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  623.033380][T14643]  ? security_sctp_bind_connect+0x89/0xb0
[  623.039190][T14643]  sctp_sendmsg+0x1afa/0x27b0
[  623.044000][T14643]  ? sctp_getsockopt+0xb60/0xb60
[  623.049037][T14643]  ? aa_af_perm+0x330/0x330
[  623.053620][T14643]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  623.060236][T14643]  ? sock_rps_record_flow+0x19/0x3f0
[  623.065695][T14643]  ? inet_sendmsg+0xce/0x2a0
[  623.070886][T14643]  ? inet_send_prepare+0x250/0x250
[  623.076075][T14643]  ____sys_sendmsg+0x61b/0x980
[  623.081088][T14643]  ? __asan_memset+0x22/0x40
[  623.085925][T14643]  ? __sys_sendmsg_sock+0x30/0x30
[  623.091038][T14643]  ? __import_iovec+0x3fa/0x850
[  623.095988][T14643]  ? import_iovec+0x73/0xa0
[  623.100936][T14643]  ___sys_sendmsg+0x2a6/0x360
[  623.106299][T14643]  ? get_pid_task+0x20/0x1e0
[  623.110964][T14643]  ? __sys_sendmsg+0x2b0/0x2b0
[  623.115908][T14643]  ? __lock_acquire+0x7d80/0x7d80
[  623.121050][T14643]  __se_sys_sendmsg+0x1d0/0x2c0
[  623.126442][T14643]  ? __x64_sys_sendmsg+0x80/0x80
[  623.131479][T14643]  ? lockdep_hardirqs_on+0x98/0x150
[  623.136792][T14643]  do_syscall_64+0x55/0xb0
[  623.141290][T14643]  ? clear_bhb_loop+0x40/0x90
[  623.146399][T14643]  ? clear_bhb_loop+0x40/0x90
[  623.151279][T14643]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  623.157802][T14643] RIP: 0033:0x7f3f45f9de59
[  623.163701][T14643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  623.184859][T14643] RSP: 002b:00007f3f46ed9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  623.194212][T14643] RAX: ffffffffffffffda RBX: 00007f3f46225fa0 RCX: 00007f3f45f9de59
[  623.202902][T14643] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003
[  623.211034][T14643] RBP: 00007f3f46ed9090 R08: 0000000000000000 R09: 0000000000000000
[  623.219152][T14643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  623.227646][T14643] R13: 00007f3f46226038 R14: 00007f3f46225fa0 R15: 00007ffddb5b6398
[  623.236057][T14643]  </TASK>
[  624.232417][T14670] netlink: 'syz.2.2812': attribute type 10 has an invalid length.
[  624.363641][T14670] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  624.665326][T14685] FAULT_INJECTION: forcing a failure.
[  624.665326][T14685] name failslab, interval 1, probability 0, space 0, times 0
[  624.713801][T14685] CPU: 0 PID: 14685 Comm: syz.3.2818 Not tainted syzkaller #0
[  624.721925][T14685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  624.734160][T14685] Call Trace:
[  624.737713][T14685]  <TASK>
[  624.741143][T14685]  dump_stack_lvl+0x18c/0x250
[  624.745923][T14685]  ? show_regs_print_info+0x20/0x20
[  624.751374][T14685]  ? load_image+0x420/0x420
[  624.756044][T14685]  ? __might_sleep+0xe0/0xe0
[  624.761366][T14685]  ? __lock_acquire+0x7d80/0x7d80
[  624.766828][T14685]  should_fail_ex+0x394/0x4c0
[  624.772026][T14685]  should_failslab+0x9/0x20
[  624.777246][T14685]  slab_pre_alloc_hook+0x59/0x300
[  624.782646][T14685]  kmem_cache_alloc_node+0x5e/0x310
[  624.788018][T14685]  ? __alloc_skb+0x103/0x2c0
[  624.792714][T14685]  __alloc_skb+0x103/0x2c0
[  624.797407][T14685]  _sctp_make_chunk+0x5b/0x430
[  624.803150][T14685]  sctp_make_datafrag_empty+0x12b/0x240
[  624.809784][T14685]  ? sctp_make_ecne+0x350/0x350
[  624.815897][T14685]  ? sctp_auth_send_cid+0x69/0x250
[  624.822490][T14685]  sctp_datamsg_from_user+0x72e/0xee0
[  624.829027][T14685]  sctp_sendmsg_to_asoc+0xfdd/0x17f0
[  624.835282][T14685]  ? sctp_assoc_add_peer+0xcc4/0x1350
[  624.841394][T14685]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  624.849638][T14685]  ? __sctp_connect+0xd80/0xd80
[  624.855512][T14685]  ? __local_bh_enable_ip+0x13a/0x1c0
[  624.863259][T14685]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  624.870996][T14685]  ? security_sctp_bind_connect+0x89/0xb0
[  624.878391][T14685]  sctp_sendmsg+0x1afa/0x27b0
[  624.884838][T14685]  ? sctp_getsockopt+0xb60/0xb60
[  624.890455][T14685]  ? aa_af_perm+0x330/0x330
[  624.896197][T14685]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  624.904559][T14685]  ? sock_rps_record_flow+0x19/0x3f0
[  624.911314][T14685]  ? inet_sendmsg+0xce/0x2a0
[  624.918290][T14685]  ? inet_send_prepare+0x250/0x250
[  624.924958][T14685]  ____sys_sendmsg+0x61b/0x980
[  624.931472][T14685]  ? __asan_memset+0x22/0x40
[  624.938130][T14685]  ? __sys_sendmsg_sock+0x30/0x30
[  624.943488][T14685]  ? __import_iovec+0x3fa/0x850
[  624.949286][T14685]  ? import_iovec+0x73/0xa0
[  624.954119][T14685]  ___sys_sendmsg+0x2a6/0x360
[  624.959228][T14685]  ? __sys_sendmsg+0x2b0/0x2b0
[  624.965156][T14685]  ? __lock_acquire+0x7d80/0x7d80
[  624.971291][T14685]  __se_sys_sendmsg+0x1d0/0x2c0
[  624.976992][T14685]  ? __x64_sys_sendmsg+0x80/0x80
[  624.984934][T14685]  ? lockdep_hardirqs_on+0x98/0x150
[  624.990575][T14685]  do_syscall_64+0x55/0xb0
[  624.995971][T14685]  ? clear_bhb_loop+0x40/0x90
[  625.001060][T14685]  ? clear_bhb_loop+0x40/0x90
[  625.006055][T14685]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  625.012989][T14685] RIP: 0033:0x7f3f45f9de59
[  625.018596][T14685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.041317][T14685] RSP: 002b:00007f3f46ed9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  625.051459][T14685] RAX: ffffffffffffffda RBX: 00007f3f46225fa0 RCX: 00007f3f45f9de59
[  625.059750][T14685] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003
[  625.068114][T14685] RBP: 00007f3f46ed9090 R08: 0000000000000000 R09: 0000000000000000
[  625.077112][T14685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  625.089676][T14685] R13: 00007f3f46226038 R14: 00007f3f46225fa0 R15: 00007ffddb5b6398
[  625.098097][T14685]  </TASK>
[  625.949705][T14707] netlink: 'syz.1.2826': attribute type 10 has an invalid length.
[  626.005935][T14707] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.052216][T14707] bridge_slave_1: left allmulticast mode
[  626.061949][T14707] bridge_slave_1: left promiscuous mode
[  626.078757][T14707] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.193728][T14707] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  626.301550][T14720] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2831'.
[  626.382700][T14720] netlink: 'syz.3.2831': attribute type 10 has an invalid length.
[  626.401908][T14720] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2831'.
[  626.435915][T14720] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  626.489393][T14724] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2832'.
[  626.923906][T14743] netlink: 'syz.2.2836': attribute type 10 has an invalid length.
[  626.948684][T14743] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2836'.
[  627.032544][T14743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  627.151389][T14738] netlink: 'syz.0.2837': attribute type 1 has an invalid length.
[  627.190509][T14738] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2837'.
[  628.204857][T14754] FAULT_INJECTION: forcing a failure.
[  628.204857][T14754] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  628.290648][T14754] CPU: 1 PID: 14754 Comm: syz.2.2840 Not tainted syzkaller #0
[  628.301213][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  628.311918][T14754] Call Trace:
[  628.315664][T14754]  <TASK>
[  628.319211][T14754]  dump_stack_lvl+0x18c/0x250
[  628.324295][T14754]  ? show_regs_print_info+0x20/0x20
[  628.331468][T14754]  ? load_image+0x420/0x420
[  628.336786][T14754]  ? __might_fault+0xaa/0x120
[  628.343708][T14754]  should_fail_ex+0x394/0x4c0
[  628.348978][T14754]  copyin+0x1a/0x90
[  628.353729][T14754]  _copy_from_iter+0x532/0x1290
[  628.359338][T14754]  ? copyout_mc+0x70/0x70
[  628.363950][T14754]  ? __virt_addr_valid+0x10c/0x380
[  628.370053][T14754]  ? __virt_addr_valid+0x10c/0x380
[  628.375899][T14754]  ? __virt_addr_valid+0x10c/0x380
[  628.381661][T14754]  ? __check_object_size+0x4fc/0xa40
[  628.387267][T14754]  sctp_user_addto_chunk+0x84/0x220
[  628.393169][T14754]  sctp_datamsg_from_user+0x74d/0xee0
[  628.399336][T14754]  sctp_sendmsg_to_asoc+0xfdd/0x17f0
[  628.405905][T14754]  ? sctp_assoc_add_peer+0xcc4/0x1350
[  628.411643][T14754]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  628.417995][T14754]  ? __sctp_connect+0xd80/0xd80
[  628.424567][T14754]  ? __local_bh_enable_ip+0x13a/0x1c0
[  628.432071][T14754]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  628.438945][T14754]  ? security_sctp_bind_connect+0x89/0xb0
[  628.446101][T14754]  sctp_sendmsg+0x1afa/0x27b0
[  628.451593][T14754]  ? sctp_getsockopt+0xb60/0xb60
[  628.457633][T14754]  ? aa_af_perm+0x330/0x330
[  628.464509][T14754]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  628.471237][T14754]  ? sock_rps_record_flow+0x19/0x3f0
[  628.476674][T14754]  ? inet_sendmsg+0xce/0x2a0
[  628.481552][T14754]  ? inet_send_prepare+0x250/0x250
[  628.488086][T14754]  ____sys_sendmsg+0x61b/0x980
[  628.493725][T14754]  ? __asan_memset+0x22/0x40
[  628.498632][T14754]  ? __sys_sendmsg_sock+0x30/0x30
[  628.503806][T14754]  ? __import_iovec+0x3fa/0x850
[  628.508971][T14754]  ? import_iovec+0x73/0xa0
[  628.513955][T14754]  ___sys_sendmsg+0x2a6/0x360
[  628.518758][T14754]  ? get_pid_task+0x20/0x1e0
[  628.524010][T14754]  ? __sys_sendmsg+0x2b0/0x2b0
[  628.528978][T14754]  ? __lock_acquire+0x7d80/0x7d80
[  628.534303][T14754]  __se_sys_sendmsg+0x1d0/0x2c0
[  628.539552][T14754]  ? __x64_sys_sendmsg+0x80/0x80
[  628.545272][T14754]  ? lockdep_hardirqs_on+0x98/0x150
[  628.550583][T14754]  do_syscall_64+0x55/0xb0
[  628.555101][T14754]  ? clear_bhb_loop+0x40/0x90
[  628.560065][T14754]  ? clear_bhb_loop+0x40/0x90
[  628.565105][T14754]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  628.571826][T14754] RIP: 0033:0x7ff87799de59
[  628.576430][T14754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.600400][T14754] RSP: 002b:00007ff878845028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  628.610813][T14754] RAX: ffffffffffffffda RBX: 00007ff877c25fa0 RCX: 00007ff87799de59
[  628.619546][T14754] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003
[  628.628827][T14754] RBP: 00007ff878845090 R08: 0000000000000000 R09: 0000000000000000
[  628.637244][T14754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  628.645929][T14754] R13: 00007ff877c26038 R14: 00007ff877c25fa0 R15: 00007fff2c868248
[  628.655479][T14754]  </TASK>
[  630.097905][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  630.107159][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  631.503334][T14763] netlink: 'syz.0.2842': attribute type 10 has an invalid length.
[  631.591511][T14763] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.622974][T14763] bridge_slave_1: left allmulticast mode
[  631.634568][T14763] bridge_slave_1: left promiscuous mode
[  631.649290][T14763] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.730953][T14763] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  632.006704][T14786] netlink: 'syz.1.2853': attribute type 2 has an invalid length.
[  632.021630][T14786] netlink: 'syz.1.2853': attribute type 11 has an invalid length.
[  632.031564][T14786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2853'.
[  632.496502][T14795] Dead loop on virtual device ip6_vti0, fix it urgently!
[  632.861878][T14806] netlink: 'syz.2.2860': attribute type 2 has an invalid length.
[  632.893511][T14806] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.2860'.
[  633.540864][T14821] netlink: 'syz.2.2864': attribute type 10 has an invalid length.
[  633.556195][T14821] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2864'.
[  634.573852][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'.
[  634.625946][T14862] netlink: 'syz.1.2875': attribute type 3 has an invalid length.
[  634.647683][T14862] netlink: 'syz.1.2875': attribute type 1 has an invalid length.
[  634.665069][T14862] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2875'.
[  634.862351][T14870] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2877'.
[  635.435352][T14882] netlink: 'syz.3.2881': attribute type 11 has an invalid length.
[  637.289213][T13309] Bluetooth: hci3: command 0x0406 tx timeout
[  637.519194][T14896] tap0: tun_chr_ioctl cmd 1074025677
[  637.578228][T14896] tap0: linktype set to 774
[  637.722795][T14900] netlink: 'syz.1.2886': attribute type 1 has an invalid length.
[  637.793831][T14900] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2886'.
[  637.938789][T14898] netlink: 'syz.1.2886': attribute type 1 has an invalid length.
[  637.959688][T14898] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2886'.
[  639.015519][T14930] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2896'.
[  639.970793][T14959] netlink: 'syz.0.2905': attribute type 2 has an invalid length.
[  639.989126][T14959] netlink: 'syz.0.2905': attribute type 1 has an invalid length.
[  640.008997][T14959] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2905'.
[  640.727153][T14972] netlink: 'syz.3.2909': attribute type 9 has an invalid length.
[  640.774697][T14972] netlink: 121180 bytes leftover after parsing attributes in process `syz.3.2909'.
[  644.297976][T15037] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2923'.
[  645.563520][T15064] netlink: 'syz.0.2929': attribute type 2 has an invalid length.
[  645.599626][T15065] netlink: 'syz.0.2929': attribute type 2 has an invalid length.
[  646.242613][T15080] netlink: 'syz.2.2934': attribute type 10 has an invalid length.
[  646.251113][T15080] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2934'.
[  646.713171][T15089] netlink: 'syz.2.2936': attribute type 1 has an invalid length.
[  649.266384][T15134] netlink: 'syz.2.2950': attribute type 3 has an invalid length.
[  649.302361][T15134] netlink: 'syz.2.2950': attribute type 1 has an invalid length.
[  649.332143][T15134] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.2950'.
[  649.402978][T15142] netlink: 'syz.0.2953': attribute type 27 has an invalid length.
[  649.421829][T15142] netlink: 'syz.0.2953': attribute type 25 has an invalid length.
[  651.287395][T15179] netlink: 'syz.0.2964': attribute type 8 has an invalid length.
[  651.325611][T15179] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2964'.
[  651.382444][T15192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2966'.
[  651.710860][T15179] syzkaller0: entered promiscuous mode
[  651.737247][T15179] syzkaller0: entered allmulticast mode
[  652.307777][T15210] netlink: 'syz.1.2971': attribute type 1 has an invalid length.
[  652.838402][T15219] netlink: 'syz.0.2975': attribute type 2 has an invalid length.
[  652.886517][T15222] netlink: 'syz.0.2975': attribute type 2 has an invalid length.
[  653.086057][T15232] netlink: 'syz.3.2979': attribute type 29 has an invalid length.
[  653.152841][T15232] netlink: 'syz.3.2979': attribute type 29 has an invalid length.
[  653.677493][T15239] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2982'.
[  653.717439][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2982'.
[  653.915921][T15246] netlink: 'syz.1.2985': attribute type 27 has an invalid length.
[  654.477478][T11610] tipc: Subscription rejected, illegal request
[  654.828216][T15266] ipvlan1: entered promiscuous mode
[  654.836302][T15266] ipvlan1: entered allmulticast mode
[  654.850378][T15266] veth0_vlan: entered allmulticast mode
[  655.239623][T15281] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3002'.
[  655.698154][T15295] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2999'.
[  656.108209][T15295] can: request_module (can-proto-0) failed.
[  656.679481][T15323] netlink: 'syz.3.3008': attribute type 29 has an invalid length.
[  656.704625][T15323] netlink: 'syz.3.3008': attribute type 29 has an invalid length.
[  656.729940][T15323] netlink: 'syz.3.3008': attribute type 29 has an invalid length.
[  656.783518][T15323] netlink: 'syz.3.3008': attribute type 10 has an invalid length.
[  656.811950][T15323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3008'.
[  656.849872][T15323] batman_adv: batadv0: Adding interface: vlan1
[  656.911071][T15323] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  656.953787][T15327] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3012'.
[  656.982553][T15323] batman_adv: batadv0: Interface activated: vlan1
[  657.169140][T15327] can: request_module (can-proto-0) failed.
[  657.762810][ T5783] Bluetooth: hci0: command 0x0406 tx timeout
[  658.251125][T15368] netlink: 'syz.0.3023': attribute type 12 has an invalid length.
[  658.259779][T15368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3023'.
[  658.914300][T15377] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3024'.
[  659.225893][T15377] can: request_module (can-proto-0) failed.
[  659.901356][T15394] netlink: 'syz.3.3029': attribute type 3 has an invalid length.
[  662.041514][T15397] sctp: [Deprecated]: syz.3.3030 (pid 15397) Use of struct sctp_assoc_value in delayed_ack socket option.
[  662.041514][T15397] Use struct sctp_sack_info instead
[  662.184454][T15401] netlink: 'syz.2.3031': attribute type 21 has an invalid length.
[  662.218557][T15401] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3031'.
[  662.389643][T15401] sit0: entered allmulticast mode
[  662.474332][T15408] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3035'.
[  662.548449][T15400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  662.553319][T15407] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3034'.
[  663.461947][T15432] Dead loop on virtual device ip6_vti0, fix it urgently!
[  663.554801][T15432] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3041'.
[  664.123168][T15437] netlink: 'syz.1.3043': attribute type 29 has an invalid length.
[  664.163812][T15437] netlink: 'syz.1.3043': attribute type 29 has an invalid length.
[  664.210559][T15438] netlink: 'syz.1.3043': attribute type 29 has an invalid length.
[  664.232274][T15441] netlink: 'syz.1.3043': attribute type 29 has an invalid length.
[  667.174042][T15460] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3049'.
[  667.259711][T15465] syz_tun: entered promiscuous mode
[  667.268242][T15465] syz_tun: entered allmulticast mode
[  667.502013][T15473] netlink: 'syz.0.3052': attribute type 39 has an invalid length.
[  671.134414][T15494] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3060'.
[  674.859643][T15527] netlink: 'syz.2.3072': attribute type 29 has an invalid length.
[  674.880982][T15527] netlink: 'syz.2.3072': attribute type 29 has an invalid length.
[  674.925235][T15531] netlink: 'syz.2.3072': attribute type 29 has an invalid length.
[  674.986649][T15527] netlink: 'syz.2.3072': attribute type 29 has an invalid length.
[  675.043064][T15532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  675.051185][T15532] IPv6: NLM_F_CREATE should be set when creating new route
[  675.060140][T15532] IPv6: NLM_F_CREATE should be set when creating new route
[  675.068247][T15532] IPv6: NLM_F_CREATE should be set when creating new route
[  676.842348][T15568] netlink: 'syz.0.3086': attribute type 21 has an invalid length.
[  676.883215][T15568] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3086'.
[  676.956246][T15565] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.3084'.
[  676.986861][T15577] netlink: 'syz.1.3089': attribute type 39 has an invalid length.
[  677.040779][T15568] sit0: entered allmulticast mode
[  677.232416][T15567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  677.333271][T15583] netlink: 'syz.3.3090': attribute type 29 has an invalid length.
[  677.354045][T15583] netlink: 'syz.3.3090': attribute type 29 has an invalid length.
[  677.382960][T15586] netlink: 'syz.3.3090': attribute type 29 has an invalid length.
[  677.436042][T15583] netlink: 'syz.3.3090': attribute type 29 has an invalid length.
[  677.735761][T15591] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.3093'.
[  678.155688][ T5783] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  678.321782][T13309] Bluetooth: hci1: command 0x0406 tx timeout
[  678.776757][T15602] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3098'.
[  679.055391][T15608] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.3099'.
[  680.997309][T15627] validate_nla: 13 callbacks suppressed
[  680.997391][T15627] netlink: 'syz.0.3105': attribute type 29 has an invalid length.
[  681.027179][T15627] netlink: 'syz.0.3105': attribute type 29 has an invalid length.
[  681.048472][T15632] netlink: 'syz.0.3105': attribute type 29 has an invalid length.
[  681.083228][T15627] netlink: 'syz.0.3105': attribute type 29 has an invalid length.
[  681.422188][T15635] mac80211_hwsim hwsim30 ..�c��: renamed from wlan1 (while UP)
[  681.658535][T15641] netlink: 'syz.3.3110': attribute type 27 has an invalid length.
[  681.681923][T15641] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3110'.
[  681.822669][T15645] netlink: 'syz.3.3110': attribute type 2 has an invalid length.
[  681.833012][T15645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3110'.
[  684.215881][T15659] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3115'.
[  684.651218][T15655] lo: entered allmulticast mode
[  684.727789][T15658] lo: entered promiscuous mode
[  684.738177][T15658] lo: left allmulticast mode
[  684.772210][T15659] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3115'.
[  684.799637][T15661] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3115'.
[  684.837317][T15663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3115'.
[  685.270250][T15686] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3120'.
[  685.324929][T15683] syzkaller1: tun_chr_ioctl cmd 1074025677
[  685.347614][T15683] syzkaller1: linktype set to 805
[  685.744417][T15695] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.3125'.
[  685.770896][T15695] netlink: 'syz.2.3125': attribute type 4 has an invalid length.
[  689.420426][T15706] delete_channel: no stack
[  690.514776][T15742] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3140'.
[  690.596338][T15741] netlink: 'syz.1.3140': attribute type 3 has an invalid length.
[  690.612467][T15742] netlink: del zone limit has 8 unknown bytes
[  691.535561][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  691.542593][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  691.747391][T15772] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.772050][T15772] bridge0: entered allmulticast mode
[  691.861944][T15771] bridge_slave_0: left allmulticast mode
[  691.881789][T15771] bridge_slave_0: left promiscuous mode
[  691.897500][T15771] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.096120][T15830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3165'.
[  694.162093][T15830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3165'.
[  694.174659][T15828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3165'.
[  694.209702][T15832] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3165'.
[  694.212991][T15830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3165'.
[  697.453432][T15844] netlink: 'syz.1.3172': attribute type 10 has an invalid length.
[  697.490773][T15844] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3172'.
[  701.304513][T15897] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.3185'.
[  701.358141][T15900] netlink: 'syz.2.3185': attribute type 2 has an invalid length.
[  701.386783][T15900] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3185'.
[  702.254116][T15913] netlink: 'syz.2.3191': attribute type 9 has an invalid length.
[  702.289994][T15913] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3191'.
[  702.503340][T15917] netlink: 'syz.2.3191': attribute type 9 has an invalid length.
[  702.571110][T15917] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3191'.
[  703.253155][T15937] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3200'.
[  704.591217][T15972] netlink: 'syz.2.3213': attribute type 19 has an invalid length.
[  704.602179][T15972] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3213'.
[  705.307432][T15997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  705.315420][T15997] IPv6: NLM_F_CREATE should be set when creating new route
[  705.324353][T15997] IPv6: NLM_F_CREATE should be set when creating new route
[  705.332052][T15997] IPv6: NLM_F_CREATE should be set when creating new route
[  706.379653][T16020] netlink: 'syz.3.3228': attribute type 10 has an invalid length.
[  706.389237][T16023] netlink: 'syz.3.3228': attribute type 3 has an invalid length.
[  706.395007][T16020] netlink: 'syz.3.3228': attribute type 10 has an invalid length.
[  706.423267][T16023] netlink: 'syz.3.3228': attribute type 9 has an invalid length.
[  706.432679][T16020] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.3228'.
[  706.469514][T16020] openvswitch: netlink: Message has 4 unknown bytes.
[  707.447451][T16040] netlink: 'syz.2.3234': attribute type 39 has an invalid length.
[  709.928466][T13309] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12
[  710.269839][T16120] FAULT_INJECTION: forcing a failure.
[  710.269839][T16120] name failslab, interval 1, probability 0, space 0, times 0
[  710.293564][T16120] CPU: 1 PID: 16120 Comm: syz.1.3261 Not tainted syzkaller #0
[  710.301932][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  710.314505][T16120] Call Trace:
[  710.318785][T16120]  <TASK>
[  710.321904][T16120]  dump_stack_lvl+0x18c/0x250
[  710.326865][T16120]  ? show_regs_print_info+0x20/0x20
[  710.332795][T16120]  ? load_image+0x420/0x420
[  710.337408][T16120]  ? __might_sleep+0xe0/0xe0
[  710.342103][T16120]  ? __lock_acquire+0x7d80/0x7d80
[  710.347428][T16120]  ? __lock_acquire+0x1262/0x7d80
[  710.352645][T16120]  should_fail_ex+0x394/0x4c0
[  710.357488][T16120]  should_failslab+0x9/0x20
[  710.362180][T16120]  slab_pre_alloc_hook+0x59/0x300
[  710.367402][T16120]  kmem_cache_alloc_node+0x5e/0x310
[  710.372942][T16120]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  710.378929][T16120]  ? __alloc_skb+0x103/0x2c0
[  710.383620][T16120]  __alloc_skb+0x103/0x2c0
[  710.388230][T16120]  alloc_skb_with_frags+0xcd/0x7a0
[  710.393472][T16120]  ? trace_event_raw_event_lock+0x240/0x240
[  710.399596][T16120]  ? perf_trace_buf_update+0xac/0x230
[  710.405150][T16120]  ? perf_tp_event+0x1550/0x1550
[  710.410327][T16120]  sock_alloc_send_pskb+0x883/0x9a0
[  710.415766][T16120]  ? sock_kzfree_s+0x50/0x50
[  710.420843][T16120]  ? aa_label_sk_perm+0x4d4/0x660
[  710.425991][T16120]  ? dev_get_by_index+0x22/0x2d0
[  710.431116][T16120]  ? dev_get_by_index+0x22/0x2d0
[  710.436249][T16120]  packet_sendmsg+0x3058/0x4c70
[  710.441533][T16120]  ? balance_push_set+0x140/0x370
[  710.447000][T16120]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  710.453188][T16120]  ? verify_lock_unused+0x140/0x140
[  710.459099][T16120]  ? perf_trace_lock_acquire+0x342/0x400
[  710.464964][T16120]  ? aa_sk_perm+0x83c/0x970
[  710.469702][T16120]  ? packet_getsockopt+0xad0/0xad0
[  710.475022][T16120]  ? tomoyo_write_file+0xf0/0xc50
[  710.480166][T16120]  ? aa_sock_msg_perm+0x94/0x150
[  710.485202][T16120]  ? apparmor_socket_sendmsg+0x8e/0x330
[  710.491059][T16120]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  710.496663][T16120]  ? security_socket_sendmsg+0x80/0xa0
[  710.502218][T16120]  ? packet_getsockopt+0xad0/0xad0
[  710.507694][T16120]  ____sys_sendmsg+0x61b/0x980
[  710.513897][T16120]  ? __asan_memset+0x22/0x40
[  710.519612][T16120]  ? __sys_sendmsg_sock+0x30/0x30
[  710.525086][T16120]  ? __import_iovec+0x5f2/0x850
[  710.530591][T16120]  ? import_iovec+0x73/0xa0
[  710.535552][T16120]  ___sys_sendmsg+0x2a6/0x360
[  710.540341][T16120]  ? __sys_sendmsg+0x2b0/0x2b0
[  710.545429][T16120]  ? __lock_acquire+0x7d80/0x7d80
[  710.550598][T16120]  __se_sys_sendmsg+0x1d0/0x2c0
[  710.555554][T16120]  ? __x64_sys_sendmsg+0x80/0x80
[  710.560801][T16120]  ? lockdep_hardirqs_on+0x98/0x150
[  710.566102][T16120]  do_syscall_64+0x55/0xb0
[  710.570620][T16120]  ? clear_bhb_loop+0x40/0x90
[  710.575469][T16120]  ? clear_bhb_loop+0x40/0x90
[  710.580239][T16120]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  710.586319][T16120] RIP: 0033:0x7f5b2ef9de59
[  710.590983][T16120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.611103][T16120] RSP: 002b:00007f5b2fec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  710.620727][T16120] RAX: ffffffffffffffda RBX: 00007f5b2f225fa0 RCX: 00007f5b2ef9de59
[  710.628999][T16120] RDX: 0000000000000045 RSI: 0000200000001780 RDI: 0000000000000004
[  710.637463][T16120] RBP: 00007f5b2fec6090 R08: 0000000000000000 R09: 0000000000000000
[  710.646663][T16120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  710.657772][T16120] R13: 00007f5b2f226038 R14: 00007f5b2f225fa0 R15: 00007fff35030b98
[  710.666051][T16120]  </TASK>
[  711.024429][T16129] netlink: 'syz.0.3264': attribute type 3 has an invalid length.
[  711.048765][T16129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3264'.
[  711.165978][T16127] can: request_module (can-proto-0) failed.
[  712.030446][T16135] netlink: 'syz.2.3266': attribute type 7 has an invalid length.
[  712.081796][T13309] Bluetooth: hci0: command 0x0406 tx timeout
[  712.295571][T16133] delete_channel: no stack
[  712.471194][T16146] netlink: 'syz.0.3267': attribute type 29 has an invalid length.
[  712.497780][T16146] netlink: 'syz.0.3267': attribute type 29 has an invalid length.
[  712.519094][T16146] netlink: 'syz.0.3267': attribute type 29 has an invalid length.
[  712.540389][T16146] netlink: 'syz.0.3267': attribute type 29 has an invalid length.
[  712.558546][T16146] netlink: 'syz.0.3267': attribute type 29 has an invalid length.
[  714.975468][T16178] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.3279'.
[  714.987488][T16178] openvswitch: netlink: IP tunnel dst address not specified
[  716.444705][T16209] FAULT_INJECTION: forcing a failure.
[  716.444705][T16209] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  716.512591][T16211] netlink: 'syz.1.3291': attribute type 64 has an invalid length.
[  716.516000][T16209] CPU: 1 PID: 16209 Comm: syz.0.3290 Not tainted syzkaller #0
[  716.528234][T16209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  716.538459][T16209] Call Trace:
[  716.541802][T16209]  <TASK>
[  716.544882][T16209]  dump_stack_lvl+0x18c/0x250
[  716.549964][T16209]  ? show_regs_print_info+0x20/0x20
[  716.555445][T16209]  ? load_image+0x420/0x420
[  716.560813][T16209]  ? __might_fault+0xaa/0x120
[  716.565738][T16209]  ? __lock_acquire+0x7d80/0x7d80
[  716.570972][T16209]  should_fail_ex+0x394/0x4c0
[  716.575817][T16209]  _copy_from_iter+0x1cd/0x1290
[  716.580788][T16209]  ? sock_alloc_send_pskb+0x8a1/0x9a0
[  716.586241][T16209]  ? copyout_mc+0x70/0x70
[  716.590738][T16209]  ? __virt_addr_valid+0x10c/0x380
[  716.596019][T16209]  ? __virt_addr_valid+0x10c/0x380
[  716.601229][T16209]  ? __virt_addr_valid+0x10c/0x380
[  716.606434][T16209]  ? __check_object_size+0x4fc/0xa40
[  716.611811][T16209]  skb_copy_datagram_from_iter+0xf2/0x6f0
[  716.617967][T16209]  ? dev_get_by_index+0x22/0x2d0
[  716.623090][T16209]  ? skb_put+0x112/0x210
[  716.628151][T16209]  packet_sendmsg+0x345e/0x4c70
[  716.633581][T16209]  ? balance_push_set+0x140/0x370
[  716.638796][T16209]  ? aa_sk_perm+0x83c/0x970
[  716.643447][T16209]  ? packet_getsockopt+0xad0/0xad0
[  716.648669][T16209]  ? tomoyo_write_file+0xf0/0xc50
[  716.657266][T16209]  ? aa_sock_msg_perm+0x94/0x150
[  716.663330][T16209]  ? apparmor_socket_sendmsg+0x8e/0x330
[  716.669463][T16209]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  716.675072][T16209]  ? security_socket_sendmsg+0x80/0xa0
[  716.680699][T16209]  ? packet_getsockopt+0xad0/0xad0
[  716.687182][T16209]  ____sys_sendmsg+0x61b/0x980
[  716.692973][T16209]  ? __asan_memset+0x22/0x40
[  716.698145][T16209]  ? __sys_sendmsg_sock+0x30/0x30
[  716.703912][T16209]  ? __import_iovec+0x5f2/0x850
[  716.708941][T16209]  ? import_iovec+0x73/0xa0
[  716.713677][T16209]  ___sys_sendmsg+0x2a6/0x360
[  716.718420][T16209]  ? get_pid_task+0x20/0x1e0
[  716.723159][T16209]  ? __sys_sendmsg+0x2b0/0x2b0
[  716.728178][T16209]  ? __lock_acquire+0x7d80/0x7d80
[  716.733290][T16209]  __se_sys_sendmsg+0x1d0/0x2c0
[  716.738210][T16209]  ? __x64_sys_sendmsg+0x80/0x80
[  716.743236][T16209]  ? lockdep_hardirqs_on+0x98/0x150
[  716.748790][T16209]  do_syscall_64+0x55/0xb0
[  716.754423][T16209]  ? clear_bhb_loop+0x40/0x90
[  716.759163][T16209]  ? clear_bhb_loop+0x40/0x90
[  716.764079][T16209]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  716.770045][T16209] RIP: 0033:0x7fd33fb9de59
[  716.775379][T16209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.795047][T16209] RSP: 002b:00007fd33ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  716.804416][T16209] RAX: ffffffffffffffda RBX: 00007fd33fe25fa0 RCX: 00007fd33fb9de59
[  716.813137][T16209] RDX: 0000000000000045 RSI: 0000200000001780 RDI: 0000000000000004
[  716.821240][T16209] RBP: 00007fd33ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  716.829701][T16209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  716.838351][T16209] R13: 00007fd33fe26038 R14: 00007fd33fe25fa0 R15: 00007ffe4e10a678
[  716.846675][T16209]  </TASK>
[  719.582892][T16230] can: request_module (can-proto-0) failed.
[  719.612001][T16238] netlink: 'syz.1.3298': attribute type 3 has an invalid length.
[  719.621921][T16238] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3298'.
[  722.729180][T16252] FAULT_INJECTION: forcing a failure.
[  722.729180][T16252] name failslab, interval 1, probability 0, space 0, times 0
[  722.742975][T16252] CPU: 1 PID: 16252 Comm: syz.2.3304 Not tainted syzkaller #0
[  722.751898][T16252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  722.763208][T16252] Call Trace:
[  722.767093][T16252]  <TASK>
[  722.770354][T16252]  dump_stack_lvl+0x18c/0x250
[  722.775179][T16252]  ? show_regs_print_info+0x20/0x20
[  722.780870][T16252]  ? load_image+0x420/0x420
[  722.785511][T16252]  should_fail_ex+0x394/0x4c0
[  722.790387][T16252]  should_failslab+0x9/0x20
[  722.794978][T16252]  slab_pre_alloc_hook+0x59/0x300
[  722.800176][T16252]  kmem_cache_alloc+0x5a/0x2c0
[  722.805256][T16252]  ? skb_clone+0x1eb/0x370
[  722.810740][T16252]  skb_clone+0x1eb/0x370
[  722.815920][T16252]  ? dev_queue_xmit_nit+0x227/0xba0
[  722.821642][T16252]  dev_queue_xmit_nit+0x23f/0xba0
[  722.827414][T16252]  ? dev_queue_xmit_nit+0x2d/0xba0
[  722.833031][T16252]  dev_hard_start_xmit+0x150/0x790
[  722.839976][T16252]  ? __dev_queue_xmit+0x275/0x3630
[  722.845962][T16252]  __dev_queue_xmit+0x198c/0x3630
[  722.851507][T16252]  ? __dev_queue_xmit+0x275/0x3630
[  722.857243][T16252]  ? netdev_core_pick_tx+0x370/0x370
[  722.863609][T16252]  ? packet_parse_headers+0x7dd/0xae0
[  722.870024][T16252]  ? packet_parse_headers+0x870/0xae0
[  722.876089][T16252]  ? __virt_addr_valid+0x10c/0x380
[  722.881282][T16252]  ? __check_object_size+0x4fc/0xa40
[  722.887433][T16252]  ? skb_setup_tx_timestamp+0x1f0/0x1f0
[  722.893422][T16252]  ? skb_copy_datagram_from_iter+0x602/0x6f0
[  722.900441][T16252]  ? packet_xmit+0x66/0x340
[  722.906183][T16252]  ? packet_sendmsg+0x3945/0x4c70
[  722.911979][T16252]  packet_sendmsg+0x3a7b/0x4c70
[  722.917102][T16252]  ? balance_push_set+0x140/0x370
[  722.922313][T16252]  ? aa_sk_perm+0x83c/0x970
[  722.926902][T16252]  ? packet_getsockopt+0xad0/0xad0
[  722.932287][T16252]  ? tomoyo_write_file+0xf0/0xc50
[  722.937826][T16252]  ? aa_sock_msg_perm+0x94/0x150
[  722.943067][T16252]  ? apparmor_socket_sendmsg+0x8e/0x330
[  722.948998][T16252]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  722.955005][T16252]  ? security_socket_sendmsg+0x80/0xa0
[  722.960979][T16252]  ? packet_getsockopt+0xad0/0xad0
[  722.966173][T16252]  ____sys_sendmsg+0x61b/0x980
[  722.971291][T16252]  ? __asan_memset+0x22/0x40
[  722.977021][T16252]  ? __sys_sendmsg_sock+0x30/0x30
[  722.983597][T16252]  ? __import_iovec+0x5f2/0x850
[  722.988572][T16252]  ? import_iovec+0x73/0xa0
[  722.994319][T16252]  ___sys_sendmsg+0x2a6/0x360
[  722.999098][T16252]  ? get_pid_task+0x20/0x1e0
[  723.003920][T16252]  ? __sys_sendmsg+0x2b0/0x2b0
[  723.009691][T16252]  ? __lock_acquire+0x7d80/0x7d80
[  723.015340][T16252]  __se_sys_sendmsg+0x1d0/0x2c0
[  723.020367][T16252]  ? __x64_sys_sendmsg+0x80/0x80
[  723.026031][T16252]  ? lockdep_hardirqs_on+0x98/0x150
[  723.032380][T16252]  do_syscall_64+0x55/0xb0
[  723.038329][T16252]  ? clear_bhb_loop+0x40/0x90
[  723.043866][T16252]  ? clear_bhb_loop+0x40/0x90
[  723.048634][T16252]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  723.056080][T16252] RIP: 0033:0x7ff87799de59
[  723.060682][T16252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  723.081919][T16252] RSP: 002b:00007ff878845028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  723.090840][T16252] RAX: ffffffffffffffda RBX: 00007ff877c25fa0 RCX: 00007ff87799de59
[  723.099048][T16252] RDX: 0000000000000045 RSI: 0000200000001780 RDI: 0000000000000004
[  723.110143][T16252] RBP: 00007ff878845090 R08: 0000000000000000 R09: 0000000000000000
[  723.118531][T16252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  723.126765][T16252] R13: 00007ff877c26038 R14: 00007ff877c25fa0 R15: 00007fff2c868248
[  723.134903][T16252]  </TASK>
[  723.617962][T16261] sit0: entered allmulticast mode
[  723.736859][T16260] netlink: 'syz.2.3308': attribute type 10 has an invalid length.
[  726.169526][T16265] sit0: entered promiscuous mode
[  726.423360][T16280] netlink: 'syz.0.3315': attribute type 20 has an invalid length.
[  726.443288][T16280] netlink: 'syz.0.3315': attribute type 21 has an invalid length.
[  726.451481][T16280] netlink: 'syz.0.3315': attribute type 23 has an invalid length.
[  726.501510][T16280] netlink: 'syz.0.3315': attribute type 25 has an invalid length.
[  726.531983][T16280] netlink: 'syz.0.3315': attribute type 27 has an invalid length.
[  726.554067][T16287] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3313'.
[  726.582053][T16287] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3313'.
[  726.599831][T16280] netlink: 'syz.0.3315': attribute type 28 has an invalid length.
[  726.620101][T16285] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3313'.
[  726.638385][T16280] netlink: 'syz.0.3315': attribute type 29 has an invalid length.
[  726.651033][T16287] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3313'.
[  726.662375][T16280] netlink: 'syz.0.3315': attribute type 30 has an invalid length.
[  726.875172][T16297] FAULT_INJECTION: forcing a failure.
[  726.875172][T16297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  726.932663][T16297] CPU: 1 PID: 16297 Comm: syz.0.3319 Not tainted syzkaller #0
[  726.940336][T16297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  726.950468][T16297] Call Trace:
[  726.954057][T16297]  <TASK>
[  726.957215][T16297]  dump_stack_lvl+0x18c/0x250
[  726.961975][T16297]  ? show_regs_print_info+0x20/0x20
[  726.967253][T16297]  ? load_image+0x420/0x420
[  726.971833][T16297]  ? __lock_acquire+0x7d80/0x7d80
[  726.976941][T16297]  ? snprintf+0xe9/0x140
[  726.981531][T16297]  should_fail_ex+0x394/0x4c0
[  726.986809][T16297]  _copy_to_user+0x2f/0xa0
[  726.991587][T16297]  simple_read_from_buffer+0xe7/0x150
[  726.997316][T16297]  proc_fail_nth_read+0x1e8/0x260
[  727.002463][T16297]  ? proc_fault_inject_write+0x360/0x360
[  727.008238][T16297]  ? fsnotify_perm+0x271/0x5e0
[  727.013047][T16297]  ? proc_fault_inject_write+0x360/0x360
[  727.018724][T16297]  vfs_read+0x298/0x990
[  727.023378][T16297]  ? kernel_read+0x1e0/0x1e0
[  727.028106][T16297]  ? __fget_files+0x28/0x460
[  727.033114][T16297]  ? __fget_files+0x3fc/0x460
[  727.038026][T16297]  ? __fdget_pos+0x2a3/0x330
[  727.042701][T16297]  ? ksys_read+0x74/0x260
[  727.047138][T16297]  ksys_read+0x151/0x260
[  727.051441][T16297]  ? vfs_write+0x9a0/0x9a0
[  727.055908][T16297]  ? lockdep_hardirqs_on+0x98/0x150
[  727.062041][T16297]  do_syscall_64+0x55/0xb0
[  727.067654][T16297]  ? clear_bhb_loop+0x40/0x90
[  727.073010][T16297]  ? clear_bhb_loop+0x40/0x90
[  727.077838][T16297]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  727.085061][T16297] RIP: 0033:0x7fd33fb5e68e
[  727.089617][T16297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  727.109931][T16297] RSP: 002b:00007fd33ddf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  727.118397][T16297] RAX: ffffffffffffffda RBX: 00007fd33ddf66c0 RCX: 00007fd33fb5e68e
[  727.126418][T16297] RDX: 000000000000000f RSI: 00007fd33ddf60a0 RDI: 0000000000000005
[  727.134713][T16297] RBP: 00007fd33ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  727.143279][T16297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  727.152348][T16297] R13: 00007fd33fe26038 R14: 00007fd33fe25fa0 R15: 00007ffe4e10a678
[  727.160401][T16297]  </TASK>
[  730.716398][T16311] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3325'.
[  730.905069][T16319] netlink: 'syz.2.3327': attribute type 1 has an invalid length.
[  730.929648][T16319] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3327'.
[  731.196221][T16326] netlink: 'syz.3.3329': attribute type 10 has an invalid length.
[  732.301036][T16354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  732.309385][T16354] IPv6: NLM_F_CREATE should be set when creating new route
[  732.318287][T16354] IPv6: NLM_F_CREATE should be set when creating new route
[  732.326728][T16354] IPv6: NLM_F_CREATE should be set when creating new route
[  732.338276][T16359] netlink: 'syz.2.3338': attribute type 9 has an invalid length.
[  732.349790][T16359] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3338'.
[  732.491195][T16354] netlink: 'syz.2.3338': attribute type 9 has an invalid length.
[  732.501815][T16362] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3341'.
[  732.513314][T16354] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3338'.
[  732.546566][T16362] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3341'.
[  732.570879][T16368] netlink: 'syz.3.3340': attribute type 11 has an invalid length.
[  732.852110][T16380] netlink: 'syz.2.3345': attribute type 21 has an invalid length.
[  732.874467][T16380] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3345'.
[  732.921401][T13309] Bluetooth: hci4: unexpected event 0x03 length: 151 > 11
[  733.109298][T16384] netlink: 'syz.0.3346': attribute type 6 has an invalid length.
[  736.499392][T16410] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3356'.
[  737.020725][T16429] ipvlan1: entered promiscuous mode
[  737.052296][T16429] ipvlan1: entered allmulticast mode
[  737.060283][T16429] veth0_vlan: entered allmulticast mode
[  737.170720][T16430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  737.211114][T16432] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3362'.
[  738.480154][T16430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3361'.
[  738.896201][T13309] Bluetooth: hci3: ISO packet for unknown connection handle 3889
[  739.600583][T16469] netlink: 'syz.1.3373': attribute type 29 has an invalid length.
[  739.679720][T16469] netlink: 'syz.1.3373': attribute type 29 has an invalid length.
[  740.007472][T16479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3374'.
[  740.258515][T16486] netlink: 'syz.3.3376': attribute type 10 has an invalid length.
[  740.405839][T16486] team0: Device wg1 is of different type
[  740.456177][T16495] netlink: 'syz.1.3380': attribute type 10 has an invalid length.
[  740.581015][T16497] netlink: 'syz.2.3381': attribute type 2 has an invalid length.
[  740.637540][T16497] netlink: 'syz.2.3381': attribute type 3 has an invalid length.
[  740.683262][T16497] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3381'.
[  741.090033][T16509] netlink: 'syz.1.3385': attribute type 10 has an invalid length.
[  741.141824][T16509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3385'.
[  741.251231][T16509] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  741.392118][T16509] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  741.582835][T16509] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  743.087136][T16561] 
@0�: renamed from bond_slave_1 (while UP)
[  744.325250][T16583] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3405'.
[  744.398903][T16583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  745.215625][T16594] netlink: 'syz.0.3410': attribute type 10 has an invalid length.
[  745.340377][T16594] team0: Device wg1 is of different type
[  745.860680][T16615] netlink: 192188 bytes leftover after parsing attributes in process `syz.0.3416'.
[  745.883772][T16615] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  745.950978][T16613] syzkaller0: entered promiscuous mode
[  745.963768][T16613] syzkaller0: entered allmulticast mode
[  746.006151][T16618] netlink: 'syz.2.3417': attribute type 6 has an invalid length.
[  746.049665][T16618] netlink: 'syz.2.3417': attribute type 1 has an invalid length.
[  746.071593][T16618] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3417'.
[  746.277121][T16622] netlink: 'syz.1.3418': attribute type 2 has an invalid length.
[  746.319344][T16622] netlink: 'syz.1.3418': attribute type 8 has an invalid length.
[  746.352660][T16622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3418'.
[  747.104712][T16634] Q�6�`Ҙ: renamed from lo (while UP)
[  747.255181][T16635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  747.262673][T16635] IPv6: NLM_F_CREATE should be set when creating new route
[  747.270384][T16635] IPv6: NLM_F_CREATE should be set when creating new route
[  747.278042][T16635] IPv6: NLM_F_CREATE should be set when creating new route
[  747.390696][T16635] syzkaller1: tun_chr_ioctl cmd 1074025677
[  747.404631][T16635] syzkaller1: linktype set to 769
[  747.652722][T16646] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3425'.
[  748.866939][T16652] netlink: 'syz.3.3427': attribute type 10 has an invalid length.
[  748.881248][T16652] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3427'.
[  749.136247][T16661] delete_channel: no stack
[  751.054450][T16701] netlink: 'syz.3.3443': attribute type 10 has an invalid length.
[  751.156026][T16701] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  751.248844][T16704] netlink: 'syz.1.3445': attribute type 21 has an invalid length.
[  751.462840][T16709] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3446'.
[  751.489617][T16709] openvswitch: netlink: Duplicate key (type 0).
[  751.555386][T16709] bond_slave_0: mtu less than device minimum
[  752.384279][T16730] netlink: 'syz.2.3454': attribute type 21 has an invalid length.
[  753.212791][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  753.219766][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  754.335720][T16773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3466'.
[  755.293728][T16788] netlink: 'syz.0.3472': attribute type 1 has an invalid length.
[  755.330021][T16788] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3472'.
[  756.550853][T16815] netlink: 'syz.2.3483': attribute type 4 has an invalid length.
[  756.584382][T16815] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3483'.
[  756.710783][T16815] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  757.040445][T16828] netlink: 'syz.2.3488': attribute type 10 has an invalid length.
[  757.098127][T16828] syz_tun: left promiscuous mode
[  757.114061][T16828] syz_tun: left allmulticast mode
[  759.075845][T16870] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3500'.
[  759.125322][T16870] openvswitch: netlink: Duplicate key (type 0).
[  759.353032][T16870] bond_slave_0: mtu less than device minimum
[  759.433040][T16882] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3504'.
[  759.490463][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'.
[  761.236315][T16927] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.3517'.
[  761.326228][T16931] netlink: 'syz.2.3519': attribute type 1 has an invalid length.
[  761.358149][T16927] openvswitch: netlink: Duplicate key (type 0).
[  761.394520][T16931] netlink: 'syz.2.3519': attribute type 2 has an invalid length.
[  761.441904][T16931] netlink: 'syz.2.3519': attribute type 2 has an invalid length.
[  761.470445][T16931] netlink: 'syz.2.3519': attribute type 3 has an invalid length.
[  761.488419][T16927] bond_slave_0: mtu less than device minimum
[  761.496218][T16931] netlink: 'syz.2.3519': attribute type 4 has an invalid length.
[  761.521138][T16931] netlink: 'syz.2.3519': attribute type 5 has an invalid length.
[  761.550199][T16931] netlink: 'syz.2.3519': attribute type 6 has an invalid length.
[  761.592318][T16931] netlink: 'syz.2.3519': attribute type 7 has an invalid length.
[  761.601343][T16931] netlink: 'syz.2.3519': attribute type 9 has an invalid length.
[  761.631749][T16931] netlink: 'syz.2.3519': attribute type 10 has an invalid length.
[  761.639826][T16931] netlink: 'syz.2.3519': attribute type 11 has an invalid length.
[  761.671740][T16931] netlink: 'syz.2.3519': attribute type 7 has an invalid length.
[  761.679673][T16931] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.3519'.
[  762.675319][T16968] netlink: 'syz.1.3531': attribute type 16 has an invalid length.
[  762.729623][T16968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3531'.
[  762.741413][T16968] veth1_macvtap: entered allmulticast mode
[  763.044783][T16972] netlink: 'syz.1.3532': attribute type 1 has an invalid length.
[  763.064635][T16972] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3532'.
[  763.370094][T16974] netlink: 'syz.0.3533': attribute type 8 has an invalid length.
[  763.386907][T16974] netlink: 'syz.0.3533': attribute type 1 has an invalid length.
[  763.431728][T16974] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3533'.
[  763.962214][T16988] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3538'.
[  764.143973][T16988] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  764.711490][T17000] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3541'.
[  764.786597][T17002] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.3542'.
[  766.070347][T17025] netlink: 'syz.0.3550': attribute type 10 has an invalid length.
[  766.139910][T17025] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3550'.
[  766.258532][T17025] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  766.298314][T17032] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3550'.
[  766.347884][T17045] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3556'.
[  767.355911][T17062] validate_nla: 1 callbacks suppressed
[  767.355995][T17062] netlink: 'syz.2.3562': attribute type 10 has an invalid length.
[  767.409787][T17062] __nla_validate_parse: 2 callbacks suppressed
[  767.409919][T17062] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3562'.
[  767.435622][T17062] hsr0: entered promiscuous mode
[  767.591069][T17074] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3565'.
[  768.119173][T17088] netlink: 'syz.0.3569': attribute type 10 has an invalid length.
[  768.247229][T17088] netlink: 'syz.0.3569': attribute type 3 has an invalid length.
[  768.438142][T17088] netlink: 'syz.0.3569': attribute type 1 has an invalid length.
[  768.490880][T17088] netlink: 145724 bytes leftover after parsing attributes in process `syz.0.3569'.
[  771.220745][T17103] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode
[  771.612525][T17115] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3577'.
[  771.648744][T17117] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.3578'.
[  771.717392][T17119] netlink: zone id is out of range
[  771.738777][T17119] netlink: set zone limit has 8 unknown bytes
[  771.777336][T17115] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3577'.
[  772.022895][T17126] netlink: 'syz.0.3583': attribute type 5 has an invalid length.
[  775.412416][T17160] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3589'.
[  775.735563][T17160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  775.762397][T17158] netlink: 'syz.1.3588': attribute type 7 has an invalid length.
[  775.812315][T17158] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3588'.
[  775.994989][T17173] netlink: 'syz.1.3594': attribute type 16 has an invalid length.
[  776.003480][T17173] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3594'.
[  776.019302][T17171] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3593'.
[  776.059331][T17171] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3593'.
[  776.177011][T17175] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3593'.
[  777.435924][T17202] netlink: 'syz.0.3599': attribute type 7 has an invalid length.
[  782.086387][T17202] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3599'.
[  782.102010][T17212] netlink: 'syz.1.3600': attribute type 14 has an invalid length.
[  782.110410][T17212] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3600'.
[  782.828990][T17248] netlink: 'syz.3.3610': attribute type 21 has an invalid length.
[  783.882278][T17266] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.3617'.
[  784.277175][T17282] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3620'.
[  784.288198][T17282] openvswitch: netlink: Flow key attribute not present in set flow.
[  784.357158][T17277] syzkaller0: entered promiscuous mode
[  784.384211][T17277] syzkaller0: entered allmulticast mode
[  787.721903][T17298] netlink: 'syz.0.3626': attribute type 21 has an invalid length.
[  788.001242][T17304] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3630'.
[  788.049876][T17304] netlink: 'syz.2.3630': attribute type 4 has an invalid length.
[  788.072356][T17304] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3630'.
[  788.847419][T17315] netlink: 'syz.1.3634': attribute type 3 has an invalid length.
[  788.866667][T17315] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3634'.
[  789.030022][T17325] netlink: 'syz.2.3637': attribute type 3 has an invalid length.
[  789.069564][T17325] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3637'.
[  789.151856][T17316] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3635'.
[  789.250146][T17325] pimreg1: tun_chr_ioctl cmd 2147767517
[  789.373345][T17329] netlink: 'syz.1.3638': attribute type 1 has an invalid length.
[  789.412693][T17329] netlink: 'syz.1.3638': attribute type 2 has an invalid length.
[  789.449385][T17329] netlink: 'syz.1.3638': attribute type 2 has an invalid length.
[  789.475849][T17329] netlink: 'syz.1.3638': attribute type 3 has an invalid length.
[  789.504572][T17329] netlink: 'syz.1.3638': attribute type 4 has an invalid length.
[  789.539015][T17329] netlink: 'syz.1.3638': attribute type 5 has an invalid length.
[  789.581296][T17329] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.3638'.
[  790.822063][T17360] batadv_slave_1: entered promiscuous mode
[  790.828296][T17360] batadv_slave_1: entered allmulticast mode
[  791.349916][T17382] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3651'.
[  791.545672][T17374] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3650'.
[  791.775225][T17374] debugfs: Directory '!!�' with parent 'ieee80211' already present!
[  793.792395][T17409] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3660'.
[  793.804656][T17409] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  794.262212][T17426] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3665'.
[  795.395499][T17445] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3668'.
[  795.431966][T17447] validate_nla: 9 callbacks suppressed
[  795.431987][T17447] netlink: 'syz.1.3668': attribute type 4 has an invalid length.
[  795.458719][T17447] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3668'.
[  795.737072][T17455] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.3671'.
[  795.958388][T17461] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3669'.
[  796.045840][T17461] debugfs: Directory '!!�' with parent 'ieee80211' already present!
[  796.453054][T17483] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3678'.
[  796.486942][T17483] netlink: 'syz.3.3678': attribute type 4 has an invalid length.
[  796.507420][T17483] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3678'.
[  800.707190][T17510] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3687'.
[  800.945513][T17510] hsr_slave_0: left promiscuous mode
[  801.092991][T17510] hsr_slave_1: left promiscuous mode
[  801.918656][T17521] netlink: 'syz.0.3691': attribute type 10 has an invalid length.
[  801.952686][T17521] 8021q: adding VLAN 0 to HW filter on device bond0
[  801.975902][T17521] team0: Port device bond0 added
[  802.200679][T17533] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3693'.
[  807.314765][T17578] netlink: 63579 bytes leftover after parsing attributes in process `syz.1.3706'.
[  809.910514][T17589] netlink: 'syz.0.3709': attribute type 10 has an invalid length.
[  810.739216][T17589] netlink: 'syz.0.3709': attribute type 10 has an invalid length.
[  810.750674][T17589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3709'.
[  810.770162][T17589] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  810.779619][T17589] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  810.847702][T17610] sit0: left promiscuous mode
[  810.946039][T17612] sit0: entered promiscuous mode
[  812.248122][T17634] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.3722'.
[  812.269962][T17634] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  812.597814][T17647] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  812.880885][T17658] netlink: 'syz.3.3729': attribute type 10 has an invalid length.
[  813.897272][T17658] netlink: 'syz.3.3729': attribute type 10 has an invalid length.
[  813.950097][T17658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3729'.
[  814.001971][T17658] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  814.023090][T17658] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  814.072968][T17658] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  814.558916][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  814.565759][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  815.902685][T17698] sit0: entered allmulticast mode
[  816.114589][T17700] sit0: entered promiscuous mode
[  816.631400][T17708] netlink: 'syz.0.3746': attribute type 21 has an invalid length.
[  819.073139][T17716] netlink: 'syz.1.3748': attribute type 10 has an invalid length.
[  819.648683][T17718] netlink: 'syz.2.3749': attribute type 29 has an invalid length.
[  819.694382][T17718] netlink: 'syz.2.3749': attribute type 29 has an invalid length.
[  819.757216][T17727] netlink: 'syz.2.3749': attribute type 29 has an invalid length.
[  819.917888][T17716] netlink: 'syz.1.3748': attribute type 10 has an invalid length.
[  819.933119][T17716] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3748'.
[  820.410419][T17742] netlink: 'syz.3.3756': attribute type 9 has an invalid length.
[  820.423287][T17742] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3756'.
[  820.999420][T17751] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3758'.
[  821.116715][T17751] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3758'.
[  821.160149][T17746] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3758'.
[  821.209870][T17754] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3758'.
[  821.308102][T17746] netlink: 'syz.0.3758': attribute type 10 has an invalid length.
[  821.332432][T17746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3758'.
[  821.672894][T17778] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3766'.
[  822.220962][T17787] netlink: 'syz.2.3771': attribute type 9 has an invalid length.
[  822.240840][T17787] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3771'.
[  822.285655][T17786] macvlan1: entered promiscuous mode
[  822.336871][T17786] macvlan1: entered allmulticast mode
[  822.350092][T17786] veth1_vlan: entered allmulticast mode
[  823.353937][T17803] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3773'.
[  824.078568][T17793] netlink: 'syz.1.3773': attribute type 10 has an invalid length.
[  824.261006][T17808] netlink: 'syz.3.3777': attribute type 10 has an invalid length.
[  824.312029][T17808] dummy0: entered promiscuous mode
[  824.322704][T17808] dummy0: entered allmulticast mode
[  824.344404][T17808] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  824.772875][T17834] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  824.810392][T17832] delete_channel: no stack
[  824.949894][T17835] macvlan1: entered promiscuous mode
[  824.958279][T17835] macvlan1: entered allmulticast mode
[  824.966084][T17835] veth1_vlan: entered allmulticast mode
[  825.561101][T17839] syzkaller0: entered promiscuous mode
[  825.569502][T17839] syzkaller0: entered allmulticast mode
[  825.744883][T17842] netlink: 'syz.1.3786': attribute type 9 has an invalid length.
[  825.777298][T17842] __nla_validate_parse: 5 callbacks suppressed
[  825.777357][T17842] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3786'.
[  826.551084][T17859] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3789'.
[  828.570802][T17859] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3789'.
[  828.581351][T17861] netlink: 'syz.3.3789': attribute type 10 has an invalid length.
[  828.596967][T17861] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3789'.
[  829.256670][T17878] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3796'.
[  829.436274][T17883] netlink: 57099 bytes leftover after parsing attributes in process `syz.3.3799'.
[  829.812678][T17891] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3802'.
[  829.920585][T17891] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3802'.
[  830.097945][T17895] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3803'.
[  830.512083][T17904] syzkaller0: entered promiscuous mode
[  830.556191][T17904] syzkaller0: entered allmulticast mode
[  830.788578][T17906] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3804'.
[  830.799544][T17906] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3804'.
[  830.877388][T17903] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3804'.
[  830.897503][T17906] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3804'.
[  833.082975][T17903] netlink: 'syz.2.3804': attribute type 10 has an invalid length.
[  833.090979][T17903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3804'.
[  833.101503][T17903] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  833.109023][T17903] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  833.276082][T17916] netlink: 'syz.3.3810': attribute type 5 has an invalid length.
[  834.018885][T17925] syzkaller0: entered promiscuous mode
[  834.056434][T17925] syzkaller0: entered allmulticast mode
[  834.069502][T17930] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3822'.
[  834.601413][T17944] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3818'.
[  834.630550][T17944] netlink: zone id is out of range
[  834.648619][T17944] netlink: zone id is out of range
[  834.692714][T17944] netlink: zone id is out of range
[  834.701916][T17944] netlink: zone id is out of range
[  834.707201][T17944] netlink: zone id is out of range
[  834.731976][T17944] netlink: zone id is out of range
[  834.737312][T17944] netlink: zone id is out of range
[  834.771910][T17944] netlink: zone id is out of range
[  834.792602][T17944] netlink: zone id is out of range
[  834.797935][T17944] netlink: zone id is out of range
[  837.263541][T17980] netlink: 'syz.2.3833': attribute type 21 has an invalid length.
[  837.451540][T17988] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3825'.
[  837.893115][T17995] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3828'.
[  839.062139][T18018] netlink: 'syz.3.3836': attribute type 21 has an invalid length.
[  839.975836][T18031] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3838'.
[  840.708224][T18050] netlink: 'syz.2.3845': attribute type 21 has an invalid length.
[  841.095404][T18066] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3851'.
[  841.916754][T18085] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3859'.
[  842.347178][T18108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3866'.
[  846.251232][T18143] netlink: 'syz.3.3877': attribute type 10 has an invalid length.
[  846.273040][T18143] netlink: 'syz.3.3877': attribute type 10 has an invalid length.
[  846.327496][T18143] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.3877'.
[  846.347093][T18148] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3877'.
[  846.394119][T18143] net_ratelimit: 42 callbacks suppressed
[  846.394223][T18143] openvswitch: netlink: Message has 4 unknown bytes.
[  846.447753][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3877'.
[  849.010617][T18145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3878'.
[  849.020976][T18152] netlink: 'syz.1.3879': attribute type 2 has an invalid length.
[  849.029351][T18152] netlink: 'syz.1.3879': attribute type 9 has an invalid length.
[  849.041240][T18152] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3879'.
[  849.055980][T18143] netlink: 'syz.3.3877': attribute type 10 has an invalid length.
[  849.098081][T18143] team0: Device wg1 is of different type
[  849.393431][T18158] netlink: 'syz.0.3882': attribute type 10 has an invalid length.
[  849.414341][T18158] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  849.744187][T18161] netlink: 'syz.0.3882': attribute type 39 has an invalid length.
[  850.490113][T18160] IPv6: Can't replace route, no match found
[  851.330141][T18182] netlink: 'syz.3.3889': attribute type 8 has an invalid length.
[  851.396227][T18182] netlink: 'syz.3.3889': attribute type 6 has an invalid length.
[  851.412758][T18182] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.3889'.
[  851.699538][T18189] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.3891'.
[  852.299732][T18200] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  852.338722][T18200] netlink: 'syz.0.3895': attribute type 3 has an invalid length.
[  852.348571][T18200] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3895'.
[  856.189726][T18258] IPv6: Can't replace route, no match found
[  856.441968][T18285] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3922'.
[  856.853608][T18291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  856.891488][T18297] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3926'.
[  857.259699][T18303] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3929'.
[  857.310207][T18303] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  857.320999][T18303] CPU: 1 PID: 18303 Comm: syz.1.3929 Not tainted syzkaller #0
[  857.330040][T18303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  857.340945][T18303] Call Trace:
[  857.344278][T18303]  <TASK>
[  857.347315][T18303]  dump_stack_lvl+0x18c/0x250
[  857.352095][T18303]  ? show_regs_print_info+0x20/0x20
[  857.357420][T18303]  ? load_image+0x420/0x420
[  857.362105][T18303]  sysfs_warn_dup+0x8e/0xa0
[  857.366731][T18303]  sysfs_do_create_link_sd+0xc0/0x110
[  857.372626][T18303]  device_add_class_symlinks+0x1cf/0x240
[  857.378793][T18303]  device_add+0x4f9/0xc40
[  857.383475][T18303]  wiphy_register+0x1d99/0x2ac0
[  857.388588][T18303]  ? cfg80211_event_work+0x40/0x40
[  857.394122][T18303]  ? minstrel_ht_alloc+0x88a/0x990
[  857.399317][T18303]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  857.405466][T18303]  ieee80211_register_hw+0x2dd8/0x3b30
[  857.411001][T18303]  ? ieee80211_register_hw+0xef1/0x3b30
[  857.416646][T18303]  ? ieee80211_tasklet_handler+0x20/0x20
[  857.422433][T18303]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  857.428417][T18303]  ? __debug_object_init+0xec/0x450
[  857.433965][T18303]  ? __asan_memset+0x22/0x40
[  857.438628][T18303]  ? __hrtimer_init+0x189/0x270
[  857.443829][T18303]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  857.450186][T18303]  ? mac80211_hwsim_free+0x220/0x220
[  857.455673][T18303]  ? rcu_is_watching+0x15/0xb0
[  857.460505][T18303]  ? kstrndup+0xbd/0x140
[  857.464932][T18303]  hwsim_new_radio_nl+0xdad/0x1a70
[  857.470319][T18303]  ? __nla_validate+0x50/0x50
[  857.476512][T18303]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  857.483293][T18303]  ? __nla_parse+0x24/0x50
[  857.487962][T18303]  ? __nla_parse+0x40/0x50
[  857.493311][T18303]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  857.500248][T18303]  genl_family_rcv_msg_doit+0x21a/0x310
[  857.506511][T18303]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  857.512629][T18303]  ? bpf_lsm_capable+0x9/0x10
[  857.517843][T18303]  ? security_capable+0x89/0xb0
[  857.522760][T18303]  genl_rcv_msg+0x611/0x7a0
[  857.527346][T18303]  ? genl_bind+0x360/0x360
[  857.531849][T18303]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  857.538382][T18303]  netlink_rcv_skb+0x235/0x4c0
[  857.543666][T18303]  ? genl_bind+0x360/0x360
[  857.548192][T18303]  ? netlink_ack+0x1160/0x1160
[  857.553928][T18303]  ? down_read+0x1ac/0x2e0
[  857.558482][T18303]  genl_rcv+0x28/0x40
[  857.562527][T18303]  netlink_unicast+0x7b1/0x930
[  857.567358][T18303]  netlink_sendmsg+0x8d0/0xbf0
[  857.572205][T18303]  ? netlink_getsockopt+0x590/0x590
[  857.577586][T18303]  ? apparmor_socket_sendmsg+0x8e/0x330
[  857.583277][T18303]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  857.588624][T18303]  ? security_socket_sendmsg+0x80/0xa0
[  857.594156][T18303]  ? netlink_getsockopt+0x590/0x590
[  857.599406][T18303]  ____sys_sendmsg+0x61b/0x980
[  857.604353][T18303]  ? __asan_memset+0x22/0x40
[  857.609011][T18303]  ? __sys_sendmsg_sock+0x30/0x30
[  857.614109][T18303]  ? __import_iovec+0x5f2/0x850
[  857.619475][T18303]  ? import_iovec+0x73/0xa0
[  857.624085][T18303]  ___sys_sendmsg+0x2a6/0x360
[  857.628835][T18303]  ? __sys_sendmsg+0x2b0/0x2b0
[  857.633848][T18303]  __se_sys_sendmsg+0x1d0/0x2c0
[  857.638789][T18303]  ? perf_trace_preemptirq_template+0x269/0x330
[  857.645109][T18303]  ? __x64_sys_sendmsg+0x80/0x80
[  857.650133][T18303]  ? lockdep_hardirqs_on+0x98/0x150
[  857.655670][T18303]  do_syscall_64+0x55/0xb0
[  857.660151][T18303]  ? clear_bhb_loop+0x40/0x90
[  857.664874][T18303]  ? clear_bhb_loop+0x40/0x90
[  857.669700][T18303]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  857.675741][T18303] RIP: 0033:0x7f5b2ef9de59
[  857.680221][T18303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  857.701148][T18303] RSP: 002b:00007f5b2fec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  857.710134][T18303] RAX: ffffffffffffffda RBX: 00007f5b2f225fa0 RCX: 00007f5b2ef9de59
[  857.718190][T18303] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  857.726306][T18303] RBP: 00007f5b2f033e6f R08: 0000000000000000 R09: 0000000000000000
[  857.734606][T18303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  857.743217][T18303] R13: 00007f5b2f226038 R14: 00007f5b2f225fa0 R15: 00007fff35030b98
[  857.753451][T18303]  </TASK>
[  858.742005][T18348] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3944'.
[  858.753732][T18348] netlink: 'syz.3.3944': attribute type 1 has an invalid length.
[  858.779268][T18348] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3944'.
[  861.331533][T18420] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3963'.
[  861.373890][T18420] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3963'.
[  861.430482][T18410] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3963'.
[  861.504456][T18420] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3963'.
[  861.603586][T18410] netlink: 'syz.1.3963': attribute type 10 has an invalid length.
[  861.622978][T18410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3963'.
[  862.584240][T18455] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3980'.
[  865.599334][T18501] netlink: 'syz.3.3994': attribute type 1 has an invalid length.
[  865.672051][T18501] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3994'.
[  868.710341][T18556] FAULT_INJECTION: forcing a failure.
[  868.710341][T18556] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  868.728254][T18556] CPU: 0 PID: 18556 Comm: syz.1.4012 Not tainted syzkaller #0
[  868.735988][T18556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  868.746549][T18556] Call Trace:
[  868.750348][T18556]  <TASK>
[  868.753476][T18556]  dump_stack_lvl+0x18c/0x250
[  868.758460][T18556]  ? show_regs_print_info+0x20/0x20
[  868.763978][T18556]  ? load_image+0x420/0x420
[  868.768564][T18556]  ? __might_fault+0xaa/0x120
[  868.773494][T18556]  ? __lock_acquire+0x7d80/0x7d80
[  868.780635][T18556]  should_fail_ex+0x394/0x4c0
[  868.786415][T18556]  _copy_from_user+0x2f/0xe0
[  868.792801][T18556]  __sys_bpf+0x23e/0x890
[  868.799835][T18556]  ? read_tsc+0x9/0x20
[  868.804216][T18556]  ? bpf_link_show_fdinfo+0x390/0x390
[  868.810037][T18556]  ? lock_chain_count+0x20/0x20
[  868.815207][T18556]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  868.821288][T18556]  __x64_sys_bpf+0x7c/0x90
[  868.825749][T18556]  do_syscall_64+0x55/0xb0
[  868.830229][T18556]  ? clear_bhb_loop+0x40/0x90
[  868.834931][T18556]  ? clear_bhb_loop+0x40/0x90
[  868.839650][T18556]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  868.845675][T18556] RIP: 0033:0x7f5b2ef9de59
[  868.850135][T18556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  868.869858][T18556] RSP: 002b:00007f5b2fec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  868.878317][T18556] RAX: ffffffffffffffda RBX: 00007f5b2f225fa0 RCX: 00007f5b2ef9de59
[  868.886702][T18556] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a
[  868.895008][T18556] RBP: 00007f5b2fec6090 R08: 0000000000000000 R09: 0000000000000000
[  868.903738][T18556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  868.912011][T18556] R13: 00007f5b2f226038 R14: 00007f5b2f225fa0 R15: 00007fff35030b98
[  868.920057][T18556]  </TASK>
[  869.801017][T18535] netlink: 'syz.0.4005': attribute type 21 has an invalid length.
[  869.991925][T18569] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4016'.
[  870.689852][T18586] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4021'.
[  871.074719][T18592] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4024'.
[  871.788385][T13309] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11
[  873.394617][T18632] netlink: 'syz.0.4037': attribute type 10 has an invalid length.
[  873.453883][T18632] team0: Device vxcan0 is of different type
[  874.048328][T18655] netlink: 'syz.0.4044': attribute type 29 has an invalid length.
[  874.066183][T18654] netlink: 'syz.0.4044': attribute type 29 has an invalid length.
[  874.139334][T18655] netlink: 'syz.0.4044': attribute type 29 has an invalid length.
[  874.163056][T18656] netlink: 'syz.0.4044': attribute type 29 has an invalid length.
[  875.845614][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  875.854805][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  880.292841][T18738] netlink: 'syz.2.4065': attribute type 3 has an invalid length.
[  880.388129][T18738] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4065'.
[  881.018771][T18748] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4072'.
[  882.120976][T18774] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4080'.
[  882.653733][T18778] FAULT_INJECTION: forcing a failure.
[  882.653733][T18778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  882.667214][T18778] CPU: 0 PID: 18778 Comm: syz.3.4082 Not tainted syzkaller #0
[  882.674746][T18778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  882.684862][T18778] Call Trace:
[  882.688197][T18778]  <TASK>
[  882.691264][T18778]  dump_stack_lvl+0x18c/0x250
[  882.696031][T18778]  ? show_regs_print_info+0x20/0x20
[  882.701350][T18778]  ? load_image+0x420/0x420
[  882.705975][T18778]  ? __might_fault+0xaa/0x120
[  882.710735][T18778]  ? __lock_acquire+0x7d80/0x7d80
[  882.715818][T18778]  should_fail_ex+0x394/0x4c0
[  882.720667][T18778]  _copy_to_user+0x2f/0xa0
[  882.725220][T18778]  bpf_test_finish+0x4e7/0x650
[  882.730081][T18778]  ? bpf_test_run+0x174/0x870
[  882.734860][T18778]  ? convert_skb_to___skb+0x420/0x420
[  882.740312][T18778]  bpf_prog_test_run_skb+0x1135/0x18f0
[  882.745844][T18778]  ? cpu_online+0x60/0x60
[  882.750312][T18778]  bpf_prog_test_run+0x31f/0x390
[  882.755495][T18778]  __sys_bpf+0x49d/0x890
[  882.759804][T18778]  ? bpf_link_show_fdinfo+0x390/0x390
[  882.765237][T18778]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  882.771902][T18778]  __x64_sys_bpf+0x7c/0x90
[  882.776976][T18778]  do_syscall_64+0x55/0xb0
[  882.781546][T18778]  ? clear_bhb_loop+0x40/0x90
[  882.786480][T18778]  ? clear_bhb_loop+0x40/0x90
[  882.791220][T18778]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  882.797262][T18778] RIP: 0033:0x7f3f45f9de59
[  882.801802][T18778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  882.821461][T18778] RSP: 002b:00007f3f46ed9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  882.829925][T18778] RAX: ffffffffffffffda RBX: 00007f3f46225fa0 RCX: 00007f3f45f9de59
[  882.837940][T18778] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a
[  882.845969][T18778] RBP: 00007f3f46ed9090 R08: 0000000000000000 R09: 0000000000000000
[  882.853970][T18778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  882.861988][T18778] R13: 00007f3f46226038 R14: 00007f3f46225fa0 R15: 00007ffddb5b6398
[  882.870027][T18778]  </TASK>
[  884.622660][T18771] netlink: 'syz.1.4079': attribute type 10 has an invalid length.
[  884.630827][T18771] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4079'.
[  886.658873][T18833] tap0: tun_chr_ioctl cmd 1074025676
[  886.665461][T18833] tap0: owner set to 776
[  886.670768][T18832] tap0: tun_chr_ioctl cmd 1074025676
[  886.677337][T18832] tap0: owner set to 776
[  887.078051][T18840] netlink: 826 bytes leftover after parsing attributes in process `syz.0.4101'.
[  887.393680][T18854] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4113'.
[  887.450112][T18854] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4113'.
[  888.147829][T18866] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[  888.209109][T18866] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode
[  888.518394][T18876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4111'.
[  888.746236][T18884] netlink: 'syz.2.4114': attribute type 11 has an invalid length.
[  888.757892][T18884] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4114'.
[  888.823632][T18888] netlink: 'syz.3.4116': attribute type 10 has an invalid length.
[  888.875386][T18889] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4116'.
[  888.899969][T18889] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4116'.
[  888.996306][T18888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4116'.
[  889.867623][T18905] netlink: 'syz.1.4121': attribute type 10 has an invalid length.
[  889.907702][T18905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4121'.
[  890.357657][T18905] batman_adv: batadv0: Adding interface: virt_wifi0
[  890.372372][T18905] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  890.412743][T18905] batman_adv: batadv0: Interface activated: virt_wifi0
[  890.576845][T18914] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4125'.
[  890.934976][T18926] netlink: 'syz.2.4129': attribute type 10 has an invalid length.
[  890.968544][T18926] batman_adv: batadv0: Adding interface: virt_wifi0
[  891.002482][T18926] batman_adv: batadv0: Interface activated: virt_wifi0
[  892.004562][T18937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  892.017554][T18937] batman_adv: batadv0: Removing interface: batadv_slave_0
[  892.039335][T18937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  892.056683][T18937] batman_adv: batadv0: Removing interface: batadv_slave_1
[  892.089106][T18937] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  892.114585][T18937] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  892.233669][T18944] netlink: 'syz.1.4137': attribute type 19 has an invalid length.
[  892.263645][T18944] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  892.950382][T18965] __nla_validate_parse: 1 callbacks suppressed
[  892.950405][T18965] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4142'.
[  895.774962][T18964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4145'.
[  895.801030][T18965] debugfs: Directory '!!�!' with parent 'ieee80211' already present!
[  895.865506][T18967] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4144'.
[  896.027805][T18973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4146'.
[  896.069007][T18972] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4146'.
[  900.574168][T19027] netlink: 'syz.0.4163': attribute type 10 has an invalid length.
[  900.655630][T19027] team0: Device wg1 is of different type
[  900.813456][T19028] netlink: 'syz.2.4162': attribute type 1 has an invalid length.
[  900.900136][T19028] netlink: 'syz.2.4162': attribute type 4 has an invalid length.
[  900.952931][T19028] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4162'.
[  900.972057][T19033] netlink: 'syz.2.4162': attribute type 1 has an invalid length.
[  900.980230][T19033] netlink: 'syz.2.4162': attribute type 4 has an invalid length.
[  901.033917][T19033] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4162'.
[  903.040395][T19078] netlink: 'syz.2.4175': attribute type 2 has an invalid length.
[  903.091161][T19078] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4175'.
[  903.457549][T19090] netlink: 'syz.0.4178': attribute type 1 has an invalid length.
[  903.472083][T19090] netlink: 'syz.0.4178': attribute type 4 has an invalid length.
[  903.480072][T19090] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4178'.
[  903.502563][T19090] netlink: 'syz.0.4178': attribute type 1 has an invalid length.
[  903.512101][T19090] netlink: 'syz.0.4178': attribute type 4 has an invalid length.
[  903.520278][T19090] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4178'.
[  904.584298][T19110] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4187'.
[  905.663507][T19141] validate_nla: 1 callbacks suppressed
[  905.663529][T19141] netlink: 'syz.3.4195': attribute type 1 has an invalid length.
[  905.708290][T19141] netlink: 'syz.3.4195': attribute type 4 has an invalid length.
[  905.734700][T19141] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4195'.
[  905.750036][T19141] netlink: 'syz.3.4195': attribute type 1 has an invalid length.
[  905.766546][T19141] netlink: 'syz.3.4195': attribute type 4 has an invalid length.
[  905.774905][T19141] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4195'.
[  905.946528][T19152] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4200'.
[  907.198064][T19164] netlink: 'syz.2.4205': attribute type 27 has an invalid length.
[  907.309135][T19164] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4205'.
[  909.472967][T19192] netlink: 'syz.0.4214': attribute type 1 has an invalid length.
[  909.491894][T19192] netlink: 'syz.0.4214': attribute type 3 has an invalid length.
[  909.501050][T19192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4214'.
[  909.661143][T19195] syzkaller0: entered promiscuous mode
[  909.671975][T19195] syzkaller0: entered allmulticast mode
[  912.426045][T19210] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4218'.
[  912.435428][T19210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  912.452274][T19209] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4218'.
[  912.462469][T19209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  912.725803][T19232] netlink: 'syz.2.4225': attribute type 9 has an invalid length.
[  912.780498][T19232] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4225'.
[  912.882622][T19231] netlink: 'syz.2.4225': attribute type 9 has an invalid length.
[  912.896875][T19231] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4225'.
[  913.288690][T19251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  913.297207][T19251] IPv6: NLM_F_CREATE should be set when creating new route
[  913.552597][T19257] sock: sock_set_timeout: `syz.2.4231' (pid 19257) tries to set negative timeout
[  914.658016][T19290] sock: sock_set_timeout: `syz.0.4246' (pid 19290) tries to set negative timeout
[  915.007715][T19297] delete_channel: no stack
[  915.959944][T19320] sock: sock_set_timeout: `syz.1.4257' (pid 19320) tries to set negative timeout
[  916.551447][T19350] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4268'.
[  917.074003][T19364] netlink: 'syz.1.4273': attribute type 29 has an invalid length.
[  917.100012][T19364] netlink: 'syz.1.4273': attribute type 29 has an invalid length.
[  918.442264][T19399] syzkaller0: entered promiscuous mode
[  918.447868][T19399] syzkaller0: entered allmulticast mode
[  921.271735][T19415] netlink: 'syz.3.4289': attribute type 1 has an invalid length.
[  921.281011][T19415] netlink: 'syz.3.4289': attribute type 4 has an invalid length.
[  921.334104][T19415] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4289'.
[  921.957535][T19428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4294'.
[  921.985142][T19428] netlink: 'syz.3.4294': attribute type 12 has an invalid length.
[  922.001772][T19428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4294'.
[  922.661168][T19446] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4300'.
[  922.947060][T19453] netlink: 'syz.0.4302': attribute type 39 has an invalid length.
[  923.011016][T19458] netlink: 'syz.2.4304': attribute type 10 has an invalid length.
[  923.020300][T19458] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4304'.
[  923.865472][T19489] netlink: zone id is out of range
[  923.870700][T19489] netlink: set zone limit has 8 unknown bytes
[  923.979150][T19491] netlink: 'syz.2.4316': attribute type 39 has an invalid length.
[  925.284294][T19532] netlink: 'syz.2.4327': attribute type 9 has an invalid length.
[  925.366494][T19532] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4327'.
[  925.538803][T19535] netlink: 'syz.1.4332': attribute type 39 has an invalid length.
[  926.007470][T19550] syzkaller0: entered promiscuous mode
[  926.040083][T19550] syzkaller0: entered allmulticast mode
[  929.266317][T19604] netlink: 'syz.1.4355': attribute type 2 has an invalid length.
[  929.280368][T19604] netlink: 'syz.1.4355': attribute type 3 has an invalid length.
[  929.300097][T19604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4355'.
[  930.176137][T19582] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4343'.
[  930.211646][T19605] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4355'.
[  930.221478][T19605] bridge_slave_1: default FDB implementation only supports local addresses
[  930.644656][T19618] netlink: 'syz.1.4358': attribute type 9 has an invalid length.
[  930.660462][T19618] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4358'.
[  931.129710][T19637] ==================================================================
[  931.138347][T19637] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[  931.146390][T19637] Write of size 32 at addr ffff888060516060 by task syz.0.4365/19637
[  931.155855][T19637] 
[  931.158794][T19637] CPU: 0 PID: 19637 Comm: syz.0.4365 Not tainted syzkaller #0
[  931.166721][T19637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  931.177679][T19637] Call Trace:
[  931.181093][T19637]  <TASK>
[  931.184065][T19637]  dump_stack_lvl+0x18c/0x250
[  931.188821][T19637]  ? read_lock_is_recursive+0x20/0x20
[  931.194427][T19637]  ? show_regs_print_info+0x20/0x20
[  931.200495][T19637]  ? load_image+0x420/0x420
[  931.205246][T19637]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  931.210860][T19637]  ? __virt_addr_valid+0x10c/0x380
[  931.216268][T19637]  ? __virt_addr_valid+0x10c/0x380
[  931.222250][T19637]  ? __virt_addr_valid+0x10c/0x380
[  931.227611][T19637]  print_report+0xa8/0x210
[  931.232442][T19637]  ? __bpf_get_stackid+0x6c7/0x900
[  931.238510][T19637]  kasan_report+0x117/0x150
[  931.243446][T19637]  ? __bpf_get_stackid+0x6c7/0x900
[  931.248719][T19637]  kasan_check_range+0x241/0x290
[  931.254351][T19637]  ? __bpf_get_stackid+0x6c7/0x900
[  931.260927][T19637]  __asan_memcpy+0x40/0x70
[  931.265672][T19637]  __bpf_get_stackid+0x6c7/0x900
[  931.271148][T19637]  bpf_get_stackid_pe+0x2f0/0x410
[  931.276417][T19637]  bpf_prog_620e6a2847f43590+0x33/0x48
[  931.282199][T19637]  bpf_overflow_handler+0x1fc/0x510
[  931.287825][T19637]  ? bpf_overflow_handler+0xde/0x510
[  931.293990][T19637]  ? tp_perf_event_destroy+0x20/0x20
[  931.300390][T19637]  ? perf_trace_preemptirq_template+0x144/0x330
[  931.307357][T19637]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  931.314643][T19637]  ? __perf_event_account_interrupt+0x187/0x280
[  931.321780][T19637]  __perf_event_overflow+0x461/0x660
[  931.327163][T19637]  perf_swevent_event+0x319/0x570
[  931.332338][T19637]  ? perf_tp_event+0x1550/0x1550
[  931.337525][T19637]  ___perf_sw_event+0x4ab/0x730
[  931.342441][T19637]  ? ___perf_sw_event+0x19e/0x730
[  931.347722][T19637]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  931.354863][T19637]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  931.360923][T19637]  ? lock_chain_count+0x20/0x20
[  931.366103][T19637]  __perf_sw_event+0x139/0x270
[  931.370960][T19637]  do_user_addr_fault+0x1242/0x12d0
[  931.376416][T19637]  ? lock_chain_count+0x20/0x20
[  931.381339][T19637]  ? rcu_is_watching+0x15/0xb0
[  931.386175][T19637]  exc_page_fault+0x64/0x100
[  931.390825][T19637]  asm_exc_page_fault+0x26/0x30
[  931.395745][T19637] RIP: 0033:0x7ffe4e197a21
[  931.400218][T19637] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36
[  931.420352][T19637] RSP: 002b:00007fd33ddd4ff0 EFLAGS: 00010202
[  931.426740][T19637] RAX: 00025b4c620e20d8 RBX: 00007ffe4e1930b0 RCX: 0000000000000018
[  931.434774][T19637] RDX: 0000000002deb5bc RSI: 00007fd33ddd5080 RDI: 7fffffffffffffff
[  931.442810][T19637] RBP: 00007fd33ddd5030 R08: 00000000000003a3 R09: 0000000000745d1e
[  931.451906][T19637] R10: 000001e208ba6ebf R11: 000000000002c948 R12: 0000000000000010
[  931.461068][T19637] R13: 00007fd33fe26128 R14: 00007ffe4e193080 R15: 000000000002c948
[  931.469118][T19637]  </TASK>
[  931.472813][T19637] 
[  931.475179][T19637] Allocated by task 19636:
[  931.479727][T19637]  kasan_set_track+0x4e/0x70
[  931.484550][T19637]  __kasan_kmalloc+0x8f/0xa0
[  931.489375][T19637]  __kmalloc_node+0xb6/0x240
[  931.494638][T19637]  bpf_map_area_alloc+0x5e/0x110
[  931.499988][T19637]  prealloc_elems_and_freelist+0x86/0x1c0
[  931.505780][T19637]  stack_map_alloc+0x32b/0x4b0
[  931.510716][T19637]  map_create+0x877/0x12f0
[  931.515214][T19637]  __sys_bpf+0x651/0x890
[  931.519651][T19637]  __x64_sys_bpf+0x7c/0x90
[  931.524479][T19637]  do_syscall_64+0x55/0xb0
[  931.529774][T19637]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  931.535742][T19637] 
[  931.538103][T19637] Last potentially related work creation:
[  931.543967][T19637]  kasan_save_stack+0x3e/0x60
[  931.548974][T19637]  __kasan_record_aux_stack+0xaf/0xc0
[  931.554847][T19637]  kvfree_call_rcu+0xee/0x780
[  931.560678][T19637]  drop_sysctl_table+0x394/0x540
[  931.565681][T19637]  unregister_sysctl_table+0x41/0x60
[  931.571118][T19637]  mpls_dev_sysctl_unregister+0x8b/0xc0
[  931.576873][T19637]  mpls_dev_notify+0x533/0x7a0
[  931.581890][T19637]  notifier_call_chain+0x18f/0x380
[  931.587074][T19637]  unregister_netdevice_many_notify+0x1037/0x1910
[  931.594028][T19637]  default_device_exit_batch+0x962/0xa00
[  931.599740][T19637]  setup_net+0x85a/0xa20
[  931.605006][T19637]  copy_net_ns+0x35e/0x5d0
[  931.610184][T19637]  create_new_namespaces+0x3ce/0x700
[  931.615610][T19637]  copy_namespaces+0x42a/0x4a0
[  931.620702][T19637]  copy_process+0x174a/0x3df0
[  931.625869][T19637]  kernel_clone+0x24b/0x8a0
[  931.631821][T19637]  __x64_sys_clone+0x1b7/0x230
[  931.637341][T19637]  do_syscall_64+0x55/0xb0
[  931.642263][T19637]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  931.648924][T19637] 
[  931.651288][T19637] Second to last potentially related work creation:
[  931.658082][T19637]  kasan_save_stack+0x3e/0x60
[  931.662989][T19637]  __kasan_record_aux_stack+0xaf/0xc0
[  931.668418][T19637]  kvfree_call_rcu+0xee/0x780
[  931.673155][T19637]  drop_sysctl_table+0x394/0x540
[  931.678465][T19637]  unregister_sysctl_table+0x41/0x60
[  931.684085][T19637]  mpls_dev_sysctl_unregister+0x8b/0xc0
[  931.690141][T19637]  mpls_dev_notify+0x533/0x7a0
[  931.695140][T19637]  notifier_call_chain+0x18f/0x380
[  931.700317][T19637]  unregister_netdevice_many_notify+0x1037/0x1910
[  931.708112][T19637]  default_device_exit_batch+0x962/0xa00
[  931.714199][T19637]  cleanup_net+0x792/0xbb0
[  931.719244][T19637]  process_scheduled_works+0xa60/0x1600
[  931.724860][T19637]  worker_thread+0xa5e/0xfe0
[  931.729688][T19637]  kthread+0x2fa/0x390
[  931.734520][T19637]  ret_from_fork+0x48/0x80
[  931.739289][T19637]  ret_from_fork_asm+0x11/0x20
[  931.744695][T19637] 
[  931.747058][T19637] The buggy address belongs to the object at ffff888060516000
[  931.747058][T19637]  which belongs to the cache kmalloc-cg-128 of size 128
[  931.762198][T19637] The buggy address is located 96 bytes inside of
[  931.762198][T19637]  allocated 120-byte region [ffff888060516000, ffff888060516078)
[  931.776388][T19637] 
[  931.778764][T19637] The buggy address belongs to the physical page:
[  931.786272][T19637] page:ffffea0001814580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60516
[  931.797172][T19637] memcg:ffff88802688d201
[  931.801650][T19637] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  931.809391][T19637] page_type: 0xffffffff()
[  931.813790][T19637] raw: 00fff00000000800 ffff888017c4dc80 dead000000000100 dead000000000122
[  931.822630][T19637] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88802688d201
[  931.831298][T19637] page dumped because: kasan: bad access detected
[  931.837773][T19637] page_owner tracks the page as allocated
[  931.843532][T19637] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5776, tgid 5776 (syz-executor), ts 96750125057, free_ts 32578285693
[  931.862184][T19637]  post_alloc_hook+0x1c1/0x200
[  931.867012][T19637]  get_page_from_freelist+0x2181/0x22a0
[  931.872614][T19637]  __alloc_pages+0x1f0/0x460
[  931.877273][T19637]  alloc_slab_page+0x5d/0x180
[  931.882016][T19637]  new_slab+0x87/0x2d0
[  931.886149][T19637]  ___slab_alloc+0xc5c/0x12f0
[  931.890988][T19637]  __kmem_cache_alloc_node+0x11f/0x250
[  931.896551][T19637]  __kmalloc+0xa7/0x240
[  931.900790][T19637]  __register_sysctl_table+0x71/0x1210
[  931.906410][T19637]  mpls_dev_sysctl_register+0x207/0x2f0
[  931.912450][T19637]  mpls_dev_notify+0x357/0x7a0
[  931.917257][T19637]  notifier_call_chain+0x18f/0x380
[  931.922415][T19637]  register_netdevice+0x1670/0x1ba0
[  931.927649][T19637]  veth_newlink+0x5cb/0xc70
[  931.932839][T19637]  rtnl_newlink+0x15a0/0x2170
[  931.937977][T19637]  rtnetlink_rcv_msg+0x843/0xf90
[  931.943219][T19637] page last free stack trace:
[  931.948134][T19637]  free_unref_page_prepare+0x7d7/0x8f0
[  931.954175][T19637]  free_unref_page+0x32/0x2e0
[  931.959059][T19637]  free_contig_range+0xa1/0x150
[  931.963942][T19637]  destroy_args+0x7d/0x840
[  931.968816][T19637]  debug_vm_pgtable+0x411/0x440
[  931.974505][T19637]  do_one_initcall+0x242/0x790
[  931.979327][T19637]  do_initcall_level+0x13d/0x1f0
[  931.984339][T19637]  do_initcalls+0x69/0xd0
[  931.988722][T19637]  kernel_init_freeable+0x3d9/0x560
[  931.994032][T19637]  kernel_init+0x1d/0x1c0
[  931.998644][T19637]  ret_from_fork+0x48/0x80
[  932.003098][T19637]  ret_from_fork_asm+0x11/0x20
[  932.008009][T19637] 
[  932.011067][T19637] Memory state around the buggy address:
[  932.017913][T19637]  ffff888060515f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  932.028608][T19637]  ffff888060515f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  932.037130][T19637] >ffff888060516000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[  932.045229][T19637]                                                                 ^
[  932.053679][T19637]  ffff888060516080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  932.061778][T19637]  ffff888060516100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc
[  932.069974][T19637] ==================================================================
[  932.078437][T19637] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  932.087322][T19637] CPU: 0 PID: 19637 Comm: syz.0.4365 Not tainted syzkaller #0
[  932.095480][T19637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  932.106004][T19637] Call Trace:
[  932.109316][T19637]  <TASK>
[  932.112389][T19637]  dump_stack_lvl+0x18c/0x250
[  932.117213][T19637]  ? show_regs_print_info+0x20/0x20
[  932.122510][T19637]  ? load_image+0x420/0x420
[  932.127423][T19637]  panic+0x2ca/0x720
[  932.132853][T19637]  ? __lock_acquire+0x7d80/0x7d80
[  932.138631][T19637]  ? bpf_jit_dump+0xd0/0xd0
[  932.143443][T19637]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  932.149716][T19637]  ? _raw_spin_unlock+0x40/0x40
[  932.154619][T19637]  ? __bpf_get_stackid+0x6c7/0x900
[  932.159769][T19637]  check_panic_on_warn+0x84/0xa0
[  932.164747][T19637]  ? __bpf_get_stackid+0x6c7/0x900
[  932.170529][T19637]  end_report+0x6f/0x130
[  932.174936][T19637]  kasan_report+0x128/0x150
[  932.179514][T19637]  ? __bpf_get_stackid+0x6c7/0x900
[  932.185527][T19637]  kasan_check_range+0x241/0x290
[  932.191266][T19637]  ? __bpf_get_stackid+0x6c7/0x900
[  932.196545][T19637]  __asan_memcpy+0x40/0x70
[  932.201505][T19637]  __bpf_get_stackid+0x6c7/0x900
[  932.206500][T19637]  bpf_get_stackid_pe+0x2f0/0x410
[  932.211598][T19637]  bpf_prog_620e6a2847f43590+0x33/0x48
[  932.217700][T19637]  bpf_overflow_handler+0x1fc/0x510
[  932.222973][T19637]  ? bpf_overflow_handler+0xde/0x510
[  932.229538][T19637]  ? tp_perf_event_destroy+0x20/0x20
[  932.235766][T19637]  ? perf_trace_preemptirq_template+0x144/0x330
[  932.244166][T19637]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  932.252815][T19637]  ? __perf_event_account_interrupt+0x187/0x280
[  932.259531][T19637]  __perf_event_overflow+0x461/0x660
[  932.265378][T19637]  perf_swevent_event+0x319/0x570
[  932.270567][T19637]  ? perf_tp_event+0x1550/0x1550
[  932.275634][T19637]  ___perf_sw_event+0x4ab/0x730
[  932.280782][T19637]  ? ___perf_sw_event+0x19e/0x730
[  932.286211][T19637]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  932.293583][T19637]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  932.300479][T19637]  ? lock_chain_count+0x20/0x20
[  932.308097][T19637]  __perf_sw_event+0x139/0x270
[  932.314820][T19637]  do_user_addr_fault+0x1242/0x12d0
[  932.320754][T19637]  ? lock_chain_count+0x20/0x20
[  932.326018][T19637]  ? rcu_is_watching+0x15/0xb0
[  932.330903][T19637]  exc_page_fault+0x64/0x100
[  932.336184][T19637]  asm_exc_page_fault+0x26/0x30
[  932.341119][T19637] RIP: 0033:0x7ffe4e197a21
[  932.345823][T19637] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36
[  932.366956][T19637] RSP: 002b:00007fd33ddd4ff0 EFLAGS: 00010202
[  932.373448][T19637] RAX: 00025b4c620e20d8 RBX: 00007ffe4e1930b0 RCX: 0000000000000018
[  932.381749][T19637] RDX: 0000000002deb5bc RSI: 00007fd33ddd5080 RDI: 7fffffffffffffff
[  932.390013][T19637] RBP: 00007fd33ddd5030 R08: 00000000000003a3 R09: 0000000000745d1e
[  932.398677][T19637] R10: 000001e208ba6ebf R11: 000000000002c948 R12: 0000000000000010
[  932.407109][T19637] R13: 00007fd33fe26128 R14: 00007ffe4e193080 R15: 000000000002c948
[  932.415127][T19637]  </TASK>
[  932.419458][T19637] Kernel Offset: disabled
[  932.424873][T19637] Rebooting in 86400 seconds..