last executing test programs:

6.070354043s ago: executing program 1 (id=3989):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, 0x0, 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4)
sendmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200), 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32=r0], 0x58, 0x8830}, 0x20000000)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
r5 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

5.486051033s ago: executing program 0 (id=3990):
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xf3, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x6e}, 0x0, 0x0, 0x0, 0x0, 0x30000000000, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300080c5)
setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000040), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000004000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x4, 0x0)
close(0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x40800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000", @ANYRES32], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000006000000800000000000000022000000", @ANYRES32=r4, @ANYRES32=0x0], 0x50)
r6 = socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)={r6})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="00e10000d3a8"})

5.068449483s ago: executing program 1 (id=3994):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000140)="0500000016080b63d25a80dc9f14e53420b46463", 0x14}, {&(0x7f0000000040)="386226c9e6a4b1b59d53d08084f097cea2f5f93a9baf9e7f69145a00dd6739ed87d1a91a8e39cae06e38085b3d0459961d31d34e14ae704fd7ff"}, {&(0x7f0000000a00)="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"}], 0x10}, 0x800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x5}, {}, {0x85, 0x0, 0x0, 0xd2}}}, &(0x7f0000000780)='GPL\x00'}, 0x94)
sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="287fb9b3359aef293edbf1c7397ed657302483cde7e775d73f8a75de542aaa90e991f3db7f8ded9b7bce3c8f123818b25ca9bdf788e98b7b2188a44cdee0a4e06ac623e2f419772367bfaa6a7be8b01dd772033b498e5f68e7ada8bdbe58da179f5e3e58df768b31bb5f1b3d0eda454cfb523288846a23b72d86952f15a90b74c3f0db9a1bf602e04400394e95c15c51b1cd453244088ddf2b45fa815ddd291afffcae72107c143db8e88da6c38ab66fd9b6b238a81e26ac9003833591da001206334f1bf5743c28eb511af63e6a6d300e794fa5f25cf6edfb6e18176f062dc71f66adc4d5", 0xe5}, {&(0x7f0000000280)="aeda242926bbfc17f63f41b5385b26a79a4aeb0595d66dea3d4d46b4993cd3591135fc7eceb7c24954360c2b56da88dfa856c78c19250572315e65c3cd23ea32ff30174570e5979ae89c3d2c9f41ada7810cf1d97a9aab3fdd9115c22f56d58b49695f5aa923471a0ee872d229d53c22ff0f43d4644a49d3189204b51512f9a1a9280ae0d73e734f6f14f63d641a6b323f", 0x91}, {&(0x7f0000000340)="58282722311d1329abca72bd45edeb1be6001a4a7583520b05388814fff5ebe8a9c6ca6437c354e0afe44910e606cb82261d935e9930dba50924a85a81528b1c4c35a2a8163f72edaa72fe0085013299965beddf46c4ad6e464a8fb3df6ca479db1075fca0726dad1073a53b896f3af178dbf93eed3c8e0254d6a21850c07663d061cf64dc0122c1478b7857bacec7bb1c1fcc1ac4927bda9ad7e4b8", 0x9c}, {&(0x7f0000000400)="65afc6e6c46d157349", 0x9}, {&(0x7f0000000440)="a0cce8b6faf57d552875f1a5df18dcd4fa9943b4077fa170df6582ff0a6060e27343c17cb3182deb40e2555074af2507d39b", 0x32}], 0x5, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x83, 0x11, "9c60ec9c8ae9382c1e065e0a81cf5d"}, @noop, @lsrr={0x83, 0x1f, 0x39, [@loopback, @local, @private=0xa010100, @multicast2, @loopback, @private=0xa010100, @multicast1]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa3c}}], 0x90}, 0x8000)

5.037225395s ago: executing program 0 (id=3996):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

4.870577744s ago: executing program 1 (id=3999):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='\a', 0x1}], 0x1}, 0x800)
recvmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000000580)=""/113, 0x71}], 0x7, &(0x7f0000000680)=""/212, 0xd4}, 0x40000000)
sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)

4.806431717s ago: executing program 0 (id=4001):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095"], 0x0, 0x9, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r3 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000))
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4, 0x3, 0x0, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="d80000001c0081044e81f782db44b904bc4d0802", 0x14}], 0x1, 0x0, 0x0, 0x7400}, 0x8810)
r7 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, &(0x7f0000000000))
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x8, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={0x0}, 0x208, 0x6, 0x0, 0x6, 0x1, 0xfdff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
r11 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r11, &(0x7f0000001440)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x4000000)
sendmsg$inet(r11, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000"], 0x20}, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r12, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYRESOCT=0x0], &(0x7f0000000980)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.675162804s ago: executing program 3 (id=4003):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x3, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x49}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x80)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000004000000040000000200000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff950000000016001b049cb83bd81ee7a5588a00"], &(0x7f0000000080)='GPL\x00', 0x4, 0xb, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x0, 0x4d}, 0x28)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1", 0x2d}], 0x1}, 0x0)
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10)
sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1}, 0x80d1)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33)

4.15996837s ago: executing program 0 (id=4005):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x20c8, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x80000002009}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x42d}, {&(0x7f0000001480)="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"/1589, 0x635}], 0x2, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
recvmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x6)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)

4.071234044s ago: executing program 3 (id=4006):
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xf3, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x6e}, 0x0, 0x0, 0x0, 0x0, 0x30000000000, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300080c5)
setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000040), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000004000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x4, 0x0)
close(0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x40800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000", @ANYRES32], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000006000000800000000000000022000000", @ANYRES32=r4, @ANYRES32=0x0], 0x50)
r6 = socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)={r6})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="00e10000d3a8"})

3.933349111s ago: executing program 1 (id=4007):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000efff00000000000000000000000000000000eedb6066f475315c231b87d8890b00f13f9e23e81fa9ac6389a7f6772cf87bafb864ace100fe2dfbc73ff8d5c73aaa34bb0ea2fe52a9a72057ba5b4ef2e01e0aaa9c0c5fe6c0c527b81a61f123ac0cb72142d4d436b0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000009400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)

3.728431221s ago: executing program 3 (id=4008):
syz_clone(0xbaff3e50736035b6, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3) (async, rerun: 64)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000081}, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b9040220080218000000040000a118000200e0009bbb54fd0e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dc934e7ce80b2cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730da4683f5aab00dbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

3.618021017s ago: executing program 1 (id=4009):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

3.525055842s ago: executing program 3 (id=4010):
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socket$kcm(0x11, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0xca58c30f81b6079f})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x4, 0xfffff01c}, {0x6, 0x0, 0x5}]})

3.439747526s ago: executing program 2 (id=4011):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba", 0x29}], 0x1, 0x0, 0x0, 0xc9e}, 0x80)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0}, 0xffffffffffffff88)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1820000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='freezer.state\x00', 0x0, 0x0)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x100)
setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r11 = socket$kcm(0x21, 0x2, 0xa)
setsockopt$sock_attach_bpf(r11, 0x110, 0x2, &(0x7f0000000140)=r10, 0x16)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x4}, 0x50)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x62c}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r14=>0xffffffffffffffff})
recvmsg$unix(r14, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r15=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r16 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r16, 0x11b, 0x2, &(0x7f0000000900)=r15, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000180)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xef}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}], &(0x7f0000000240)='GPL\x00', 0xd8c6, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0xe, 0x80000000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r5, r8, r9, r10, r12, r0, r13, r15], 0x0, 0x10, 0xfb}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

3.36501604s ago: executing program 1 (id=4012):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095"], 0x0, 0x9, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0xf6}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20)

2.334572142s ago: executing program 2 (id=4013):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff7ffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)

2.265270585s ago: executing program 3 (id=4014):
socketpair(0x1e, 0x6, 0x7ff, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="c48ec4024df5f9233936258563a7fa166d26fbddf4346576a47067dacb26e68a7850b433a23a94a983d867355f4bdd411b8c804e6d9a2fbd5cea271253324fc83a5021c35b95848ed7f6d9b692e5f8afe5b187a8a08f2b75ae31662954fab94568428aee8428fab904a06d77f7db0ea52fbfa9763937", 0x76}, {&(0x7f0000000240)="887a376ad8427803b7ff0e2647a4f59a95fcff0cae17dbbd7f9b626f78da0d9a67c8b7c693a0d2a7255e6afa6c249a1998fbdbd8a97aaf9bc9af3bcbaa1c0fdc27e5fd2c3ff84c173655afb6c5b47bc4dbc96f4adf64dd791fe53ed5a0da89a99ca2332fd87683984c2668ad09eea0b37306de27c20caf89cea60de82f", 0x7d}, {&(0x7f00000002c0)="0e9637ead9ebc80c14693ff79ad4bb4f6fb421ecffc7d02723889e3ed7e828bccbf36dac7f40b0f5095b750faed9adb04d803def78a38ff5121e1d15803401fba6fb8720fd2adbe84b723204", 0x4c}], 0x3, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x30}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x6d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0xfe33)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x3)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e00000036000511d25a80698c6394090324fc602f6e35400800018025581d00d1bd00000000000000000000000f05", 0x2f}], 0x1, 0x0, 0x0, 0x39c}, 0x4040014)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8912, &(0x7f0000000340)='\xce\xcf\xe3x\x13\x825@\xa2V\xd5\x9a\xbf\xbb\xfcX\x86\xb2\xa8\xcd\x12\x93\xabe`\xac\x05*BFg}\xa9\xd0\x06\xd30\xacJ(\x11;\xf3O-\x82x\xb6\x04z-\xd5\x04l\f\"\xde\xd3I=\xe0\xdd\x1c\xee\xbf}\x91n\x81\xdb\xd0f\x17\xc4y}\xb8q\xf2\x11\xe0\xb4S\x9b\xaf\xa9\xfeP\x01\xc6\x90:\xff\x945%Q\xc7\x8eN\xd3O\x7f\xaf=\x8aE\xd3h\xbc\x0f\xe1\".\xe5bX/\x15\xe7_\xf7K\xc8Q\x92\xbd\xbc\xc8\xb8\xf9\xbb\xed~\xdb/\xab\x18\x1a6\xc1\x94\x06y,\xf1N\xea\x8c\x8f\x88\xd4\xc6\xe3{\x9e\x9a!\xf65mH\xf1\'\xc6\xdf~O\f9\xb2_\xa7\xb1\x1ba\xaa\x83Si\xea\xf3(\xe4\x11;\x99\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04tgRX\xf5I\xf9P\xc0d\xcf\xf7\xf0\xd0\x80\x9eq7\xc96\xa5\xd8\x9d')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xd, &(0x7f00000000c0), 0x10)

2.221368978s ago: executing program 2 (id=4015):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095"], 0x0, 0x9, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r3 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000))
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4, 0x3, 0x0, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="d80000001c0081044e81f782db44b904bc4d0802", 0x14}], 0x1, 0x0, 0x0, 0x7400}, 0x8810)
r7 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, &(0x7f0000000000))
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x8, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={0x0}, 0x208, 0x6, 0x0, 0x6, 0x1, 0xfdff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
r11 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r11, &(0x7f0000001440)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x4000000)
sendmsg$inet(r11, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000"], 0x20}, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r12, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYRESOCT=0x0], &(0x7f0000000980)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.219766248s ago: executing program 0 (id=4023):
r0 = socket$kcm(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0189436, &(0x7f00000005c0))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424f3db", 0x14}], 0x1}, 0x4000800)
sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x61, 0x4, 0x0, 0x6, 0x86e46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0xc, 0x806}, 0xc0, 0x1, 0x0, 0x3, 0x9, 0xffff0000, 0xe, 0x0, 0xfffffffd, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)
socketpair(0x10, 0x2, 0xb, &(0x7f0000000000))

1.824237178s ago: executing program 2 (id=4016):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = socket$kcm(0xa, 0x2, 0x0) (async)
r2 = socket$kcm(0xa, 0x6, 0x0) (async, rerun: 64)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0xffff) (rerun: 64)
setsockopt$sock_attach_bpf(r2, 0x10d, 0xb, &(0x7f0000000000)=r3, 0x4) (async)
setsockopt$sock_attach_bpf(r1, 0x29, 0xb, &(0x7f00000000c0), 0xb9) (async, rerun: 64)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x160)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES8], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d}, 0x94) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e81556a10a000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6eaa0c261210ef0a007a290457f0189b3050000002d4462d72f886bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc92954b43370e97039264bc7bb6", 0xd8}], 0x1}, 0x0)

1.632224677s ago: executing program 2 (id=4017):
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xf3, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x6e}, 0x0, 0x0, 0x0, 0x0, 0x30000000000, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300080c5)
setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000040), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000004000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x4, 0x0)
close(0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x40800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000", @ANYRES32], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000006000000800000000000000022000000", @ANYRES32=r4, @ANYRES32=0x0], 0x50)
r6 = socket$kcm(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)={r6})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="00e10000d3a8"})

56.258267ms ago: executing program 0 (id=4018):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0xb, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x9, 0x7}], 'Y'}, @union={0x7, 0x2, 0x0, 0x5, 0x0, 0x7fff, [{0x1, 0x4, 0x3}, {0x1, 0x3, 0xfffffff7}]}, @func={0x8, 0x0, 0x0, 0xc, 0x2}, @restrict={0xd, 0x0, 0x0, 0xb, 0x3}, @union={0x9, 0x3, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x0, 0x3}, {0x8, 0x0, 0x6}, {0x10, 0x2, 0x4b}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x1}, @enum64={0x8, 0x2, 0x0, 0x13, 0x0, 0x0, [{0x1, 0x1, 0x3}, {0x9, 0x8, 0x3}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x5f, 0x30, 0x2e, 0x0, 0x61, 0x61, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000680)=""/19, 0xf7, 0x13, 0x0, 0x5, 0x10000, @value=r2}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x3b, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000)

16.642449ms ago: executing program 3 (id=4019):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)="c6d3ddca886199f5af98723127d2", &(0x7f0000000340), 0xffffffff, r0}, 0x38)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x9, [@restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, 0x4d, 0x1}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xc0000}}]}, {0x0, [0x2e, 0x5f, 0x0, 0x2e, 0x30, 0x30, 0x0]}}, &(0x7f0000000680)=""/200, 0x7d, 0xc8, 0x1, 0x1, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r3, 0x40, '\x00', r4, r5, 0x4, 0x1, 0x2}, 0x50)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

0s ago: executing program 2 (id=4020):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

kernel console output (not intermixed with test programs):

9383][T15155]  xskq_create+0xbf/0x170
[  547.713748][T15155]  xsk_init_queue+0xad/0x100
[  547.718386][T15155]  xsk_setsockopt+0x4e5/0x760
[  547.723109][T15155]  ? xsk_poll+0x680/0x680
[  547.727478][T15155]  ? __fget_files+0x28/0x4b0
[  547.732098][T15155]  ? __fget_files+0x28/0x4b0
[  547.736722][T15155]  ? aa_sock_opt_perm+0x74/0x100
[  547.741697][T15155]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  547.747277][T15155]  ? security_socket_setsockopt+0x7e/0xa0
[  547.753057][T15155]  ? xsk_poll+0x680/0x680
[  547.757422][T15155]  do_sock_setsockopt+0x175/0x1a0
[  547.762485][T15155]  ? __fdget+0x180/0x210
[  547.766771][T15155]  __x64_sys_setsockopt+0x182/0x200
[  547.772015][T15155]  do_syscall_64+0x55/0xa0
[  547.776459][T15155]  ? clear_bhb_loop+0x40/0x90
[  547.781167][T15155]  ? clear_bhb_loop+0x40/0x90
[  547.785887][T15155]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  547.791818][T15155] RIP: 0033:0x7f4328d9c819
[  547.796264][T15155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  547.815911][T15155] RSP: 002b:00007f4329c78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  547.824366][T15155] RAX: ffffffffffffffda RBX: 00007f4329015fa0 RCX: 00007f4328d9c819
[  547.832367][T15155] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  547.840367][T15155] RBP: 00007f4328e32c91 R08: 0000000000000004 R09: 0000000000000000
[  547.848388][T15155] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  547.856388][T15155] R13: 00007f4329016038 R14: 00007f4329015fa0 R15: 00007fff39b72218
[  547.864409][T15155]  </TASK>
[  547.892713][T15155] Mem-Info:
[  547.896089][T15155] active_anon:24442 inactive_anon:0 isolated_anon:0
[  547.896089][T15155]  active_file:17373 inactive_file:40115 isolated_file:0
[  547.896089][T15155]  unevictable:768 dirty:41 writeback:0
[  547.896089][T15155]  slab_reclaimable:11224 slab_unreclaimable:92869
[  547.896089][T15155]  mapped:34688 shmem:17681 pagetables:564
[  547.896089][T15155]  sec_pagetables:0 bounce:0
[  547.896089][T15155]  kernel_misc_reclaimable:0
[  547.896089][T15155]  free:1326369 free_pcp:11279 free_cma:0
[  547.947292][T15155] Node 0 active_anon:97768kB inactive_anon:0kB active_file:69492kB inactive_file:160256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138752kB dirty:160kB writeback:0kB shmem:69188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10544kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no
[  547.986909][T15155] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  548.028165][T15155] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  548.068572][T15155] lowmem_reserve[]: 0 2521 2522 2522 2522
[  548.079734][T15155] Node 0 DMA32 free:1392828kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:97928kB inactive_anon:0kB active_file:69492kB inactive_file:159436kB unevictable:1536kB writepending:160kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:33008kB local_pcp:14008kB free_cma:0kB
[  548.118452][T15155] lowmem_reserve[]: 0 0 0 0 0
[  548.125995][T15155] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  548.154744][T15145] team0 (unregistering): Port device team_slave_0 removed
[  548.169423][T15155] lowmem_reserve[]: 0 0 0 0 0
[  548.183834][T15155] Node 1 Normal free:3896796kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12576kB local_pcp:3872kB free_cma:0kB
[  548.195885][T15145] team0 (unregistering): Port device team_slave_1 removed
[  548.240074][T15155] lowmem_reserve[]: 0 0 0 0 0
[  548.255278][T15155] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  548.334185][T15155] Node 0 DMA32: 1*4kB (M) 3*8kB (UE) 366*16kB (UE) 64*32kB (UME) 117*64kB (UME) 199*128kB (UM) 125*256kB (UME) 60*512kB (UME) 25*1024kB (UME) 15*2048kB (UME) 301*4096kB (UM) = 1392828kB
[  548.356471][T15155] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  548.368834][T15155] Node 1 Normal: 239*4kB (UME) 46*8kB (UME) 49*16kB (UME) 161*32kB (UME) 50*64kB (UE) 12*128kB (UME) 1*256kB (E) 1*512kB (M) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3896796kB
[  548.397190][T15155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  548.427128][T15155] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  548.447675][T15155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  548.476886][T15155] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  548.486247][T15155] 75013 total pagecache pages
[  548.496068][T15155] 0 pages in swap cache
[  548.500961][T15155] Free swap  = 124996kB
[  548.507178][T15155] Total swap = 124996kB
[  548.512168][T15155] 2097051 pages RAM
[  548.517314][T15155] 0 pages HighMem/MovableOnly
[  548.522048][T15155] 416927 pages reserved
[  548.526239][T15155] 0 pages cma reserved
[  548.684425][T15168] netlink: 'syz.0.2597': attribute type 4 has an invalid length.
[  548.697216][T15168] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2597'.
[  548.719567][T15168] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  548.749842][T15170] netlink: 'syz.0.2597': attribute type 4 has an invalid length.
[  548.776950][T15170] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2597'.
[  548.807149][T15170] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  550.408821][T15214] syzkaller0: entered promiscuous mode
[  550.414383][T15214] syzkaller0: entered allmulticast mode
[  550.439348][T15221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2614'.
[  550.466377][T15223] netlink: 'syz.0.2613': attribute type 3 has an invalid length.
[  550.487527][T15223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2613'.
[  550.510788][T15221] netlink: 'syz.2.2614': attribute type 21 has an invalid length.
[  550.539339][T15221] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2614'.
[  551.003422][T15237] netlink: 'syz.2.2617': attribute type 10 has an invalid length.
[  551.024631][T15237] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2617'.
[  553.004924][T15257] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2623'.
[  553.202588][T15264] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2625'.
[  553.339629][T15266] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2626'.
[  553.425407][T15277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2626'.
[  553.467269][T15277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2626'.
[  553.535302][T15266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2626'.
[  553.731190][T15287] netlink: 'syz.2.2633': attribute type 10 has an invalid length.
[  553.740375][T15286] netlink: 'syz.1.2632': attribute type 4 has an invalid length.
[  553.748720][T15286] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2632'.
[  553.762590][T15287] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  553.885938][T15292] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2634'.
[  553.949357][T15297] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2636'.
[  554.104238][T15306] TCP: TCP_TX_DELAY enabled
[  554.108362][T15304] tun0: tun_chr_ioctl cmd 1074025677
[  554.118703][T15304] tun0: linktype set to 1
[  554.126070][T15306] sit0: entered promiscuous mode
[  554.149800][T15310] netlink: 'syz.2.2637': attribute type 4 has an invalid length.
[  554.170170][T15310] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2637'.
[  554.570048][T15323] netlink: 'syz.3.2645': attribute type 1 has an invalid length.
[  554.580344][T15323] netlink: 'syz.3.2645': attribute type 4 has an invalid length.
[  554.903981][T15326] netlink: 'syz.3.2646': attribute type 10 has an invalid length.
[  557.371410][T15329] netlink: 'syz.3.2646': attribute type 10 has an invalid length.
[  558.072235][T15360] netlink: 'syz.1.2657': attribute type 1 has an invalid length.
[  558.084319][T15360] __nla_validate_parse: 2 callbacks suppressed
[  558.084356][T15360] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2657'.
[  558.140434][T15367] netlink: 'syz.0.2659': attribute type 6 has an invalid length.
[  558.289456][T15370] netlink: 'syz.0.2660': attribute type 10 has an invalid length.
[  558.334235][T15370] team0: Port device macvlan0 added
[  558.392147][T15376] netlink: 'syz.3.2661': attribute type 10 has an invalid length.
[  558.442294][T15376] netlink: 'syz.3.2661': attribute type 153 has an invalid length.
[  558.463211][T15376] netlink: 124592 bytes leftover after parsing attributes in process `syz.3.2661'.
[  558.518857][T15380] netlink: 'syz.2.2663': attribute type 25 has an invalid length.
[  558.537093][T15380] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2663'.
[  558.720959][T15387] netlink: 'syz.2.2666': attribute type 10 has an invalid length.
[  558.931417][T15387] team0 (unregistering): Port device C removed
[  558.966960][T15387] team0 (unregistering): Port device team_slave_1 removed
[  559.082127][T15392] tap1: tun_chr_ioctl cmd 1074025677
[  559.090092][T15392] tap1: linktype set to 778
[  560.311201][T15420] netlink: 'syz.3.2677': attribute type 39 has an invalid length.
[  561.774924][T15470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'.
[  562.184842][T15487] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2693'.
[  562.984217][T15525] netlink: 'syz.1.2704': attribute type 7 has an invalid length.
[  562.993823][T15526] netlink: 'syz.1.2704': attribute type 7 has an invalid length.
[  563.178609][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  563.184995][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  563.366834][T15537] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2706'.
[  566.605055][T15535] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2702'.
[  566.614640][T15535] bridge_slave_1: default FDB implementation only supports local addresses
[  566.626394][T15521] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2702'.
[  566.635792][T15521] bridge_slave_1: default FDB implementation only supports local addresses
[  567.881792][T15573] netlink: 'syz.1.2717': attribute type 3 has an invalid length.
[  567.901483][T15573] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2717'.
[  568.117210][T15586] netlink: 'syz.0.2721': attribute type 2 has an invalid length.
[  568.125027][T15586] netlink: 'syz.0.2721': attribute type 1 has an invalid length.
[  568.157334][T15586] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2721'.
[  568.192892][T15586] tap0: tun_chr_ioctl cmd 99999999
[  568.273379][T15595] netlink: 'syz.0.2721': attribute type 11 has an invalid length.
[  568.288875][T15595] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2721'.
[  568.839161][T15610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  568.908278][T15617] netlink: 'syz.3.2729': attribute type 10 has an invalid length.
[  569.011199][T15620] syzkaller0: entered promiscuous mode
[  569.027035][T15620] syzkaller0: entered allmulticast mode
[  569.579064][T15641] netlink: 'syz.3.2738': attribute type 1 has an invalid length.
[  569.668674][T15641] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2738'.
[  570.157934][T15647] sit0: entered allmulticast mode
[  570.534884][T15655] sit0: entered promiscuous mode
[  570.961466][T15653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  571.185634][T15676] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2747'.
[  571.590268][ T5768] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  571.829184][T15705] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2754'.
[  572.349096][T15729] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2760'.
[  572.895055][T15740] netlink: 'syz.0.2763': attribute type 9 has an invalid length.
[  572.916884][T15740] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2763'.
[  573.752270][T15754] netlink: 'syz.1.2766': attribute type 33 has an invalid length.
[  573.788156][T15754] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2766'.
[  574.463564][T15764] netlink: 'syz.2.2768': attribute type 21 has an invalid length.
[  574.475382][T15763] netlink: 'syz.0.2769': attribute type 33 has an invalid length.
[  574.495519][T15764] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2768'.
[  575.979094][T15784] netlink: 'syz.2.2775': attribute type 3 has an invalid length.
[  576.027024][T15784] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2775'.
[  577.546947][T15800] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2781'.
[  578.677856][T15813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  578.717132][T15813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  578.788592][T15813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  578.806615][T15813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  579.024352][T15815] netlink: 'syz.2.2784': attribute type 1 has an invalid length.
[  579.072978][T15815] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2784'.
[  579.917617][T15818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2786'.
[  580.914238][T15832] netlink: 'syz.2.2789': attribute type 2 has an invalid length.
[  581.006410][T15832] netlink: 'syz.2.2789': attribute type 8 has an invalid length.
[  581.063161][T15832] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2789'.
[  581.215821][T15832] delete_channel: no stack
[  581.245228][T15832] delete_channel: no stack
[  581.293295][T15842] netlink: 'syz.0.2791': attribute type 11 has an invalid length.
[  581.467769][T15842] netlink: 192280 bytes leftover after parsing attributes in process `syz.0.2791'.
[  587.481788][T15862] syzkaller0: entered promiscuous mode
[  587.527195][T15862] syzkaller0: entered allmulticast mode
[  593.041358][T15883] veth1_to_bond: entered allmulticast mode
[  593.251325][T15892] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2806'.
[  593.287496][T15892] netlink: 'syz.3.2806': attribute type 2 has an invalid length.
[  593.486519][T15902] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2809'.
[  593.528847][T15902] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2809'.
[  593.581899][T15902] tipc: Started in network mode
[  593.606893][T15902] tipc: Node identity b, cluster identity 73
[  593.625037][T15902] tipc: Node number set to 11
[  593.642188][T15907] netlink: 'syz.0.2811': attribute type 13 has an invalid length.
[  593.657063][T15907] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2811'.
[  593.710558][T15910] netlink: set zone limit has 8 unknown bytes
[  593.770418][T15907] erspan0: refused to change device tx_queue_len
[  593.777588][T15907] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  594.119756][T15906] delete_channel: no stack
[  594.727989][T15929] netlink: 'syz.3.2815': attribute type 27 has an invalid length.
[  594.735939][T15929] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2815'.
[  595.090257][T15935] netlink: 'syz.0.2817': attribute type 10 has an invalid length.
[  595.823108][T15944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.733587][T15986] netlink: 'syz.0.2828': attribute type 4 has an invalid length.
[  597.264797][T16000] delete_channel: no stack
[  597.289243][T16000] delete_channel: no stack
[  597.318552][T16000] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.2833'.
[  597.645303][T16010] netlink: 'syz.3.2835': attribute type 21 has an invalid length.
[  597.672620][T16010] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2835'.
[  597.804373][T16011] netlink: 'syz.3.2835': attribute type 5 has an invalid length.
[  597.831732][T16011] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2835'.
[  597.866354][T16010] netlink: 'syz.3.2835': attribute type 5 has an invalid length.
[  597.897220][T16010] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2835'.
[  597.958903][T16018] netlink: 'syz.0.2839': attribute type 10 has an invalid length.
[  598.521383][T16018] team0: Device wg1 is of different type
[  598.915733][T16038] netlink: 'syz.2.2843': attribute type 2 has an invalid length.
[  598.987091][T16038] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2843'.
[  599.316930][T16050] netlink: 'syz.3.2845': attribute type 2 has an invalid length.
[  599.358906][T16050] netlink: 'syz.3.2845': attribute type 8 has an invalid length.
[  599.374259][T16050] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2845'.
[  600.195646][T16068] netlink: 'syz.0.2851': attribute type 4 has an invalid length.
[  600.213854][T16068] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2851'.
[  601.189218][T16102] netlink: 'syz.2.2860': attribute type 8 has an invalid length.
[  601.261769][T16102] netlink: 'syz.2.2860': attribute type 3 has an invalid length.
[  601.306534][T16103] netlink: 'syz.2.2860': attribute type 10 has an invalid length.
[  601.327078][T16102] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2860'.
[  602.083205][T16113] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.2864'.
[  602.917717][T16124] netlink: 'syz.3.2866': attribute type 39 has an invalid length.
[  602.950479][T16124] netlink: 'syz.3.2866': attribute type 1 has an invalid length.
[  602.996878][T16124] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2866'.
[  603.009994][T16127] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2866'.
[  603.043910][T16127] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[  603.111659][T16133] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2869'.
[  603.138619][T16133] bridge_slave_1: default FDB implementation only supports local addresses
[  603.375295][T16148] netlink: 'syz.1.2874': attribute type 25 has an invalid length.
[  603.442280][T16145] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  603.503665][T16150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2876'.
[  603.513409][T16150] batadv0: entered promiscuous mode
[  603.535149][T16150] batadv0: entered allmulticast mode
[  603.551508][T16150] bridge0: port 3(batadv0) entered blocking state
[  603.564980][T16150] bridge0: port 3(batadv0) entered disabled state
[  603.608349][T16150] bridge0: port 3(batadv0) entered blocking state
[  603.615817][T16150] bridge0: port 3(batadv0) entered forwarding state
[  603.727809][ T5910] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  603.737734][ T5910] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  603.923974][T16160] syzkaller0: entered promiscuous mode
[  603.933678][T16160] syzkaller0: entered allmulticast mode
[  603.954046][T16157] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2879'.
[  604.001654][T16157] netlink: del zone limit has 4 unknown bytes
[  604.051102][T16171] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2882'.
[  606.534177][T16202] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2890'.
[  606.878808][T16203] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2889'.
[  606.888436][T16203] validate_nla: 3 callbacks suppressed
[  606.888450][T16203] netlink: 'syz.2.2889': attribute type 1 has an invalid length.
[  606.903254][T16203] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.2889'.
[  607.169497][T16211] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2893'.
[  607.184717][T16211] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2893'.
[  607.314818][T16214] netlink: 'syz.2.2894': attribute type 21 has an invalid length.
[  607.328815][T16214] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2894'.
[  607.368595][T16218] netlink: 'syz.1.2895': attribute type 12 has an invalid length.
[  607.424917][T16218] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2895'.
[  607.606318][T16232] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2900'.
[  607.621391][T16232] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.2900'.
[  607.634071][T16233] netlink: 'syz.0.2901': attribute type 11 has an invalid length.
[  607.851060][T16242] netlink: 'syz.0.2903': attribute type 21 has an invalid length.
[  609.234240][T16277] netlink: 'syz.2.2912': attribute type 2 has an invalid length.
[  609.256955][T16277] __nla_validate_parse: 7 callbacks suppressed
[  609.256974][T16277] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2912'.
[  609.726086][ T5768] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  609.856595][T16309] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2922'.
[  609.866895][T16309] netlink: zone id is out of range
[  609.889455][T16308] netlink: 'syz.1.2921': attribute type 21 has an invalid length.
[  610.584772][T16334] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2929'.
[  610.686372][T16334] syz.2.2929: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  610.722054][T16334] CPU: 1 PID: 16334 Comm: syz.2.2929 Not tainted syzkaller #0
[  610.729698][T16334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  610.739814][T16334] Call Trace:
[  610.743158][T16334]  <TASK>
[  610.746129][T16334]  dump_stack_lvl+0x18c/0x250
[  610.750860][T16334]  ? show_regs_print_info+0x20/0x20
[  610.756181][T16334]  ? load_image+0x420/0x420
[  610.760721][T16334]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  610.767177][T16334]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  610.773834][T16334]  warn_alloc+0x246/0x340
[  610.778206][T16334]  ? stack_trace_save+0xaa/0x100
[  610.783181][T16334]  ? zone_watermark_ok_safe+0x230/0x230
[  610.788787][T16334]  ? kasan_set_track+0x5f/0x70
[  610.793595][T16334]  ? kasan_set_track+0x4e/0x70
[  610.798397][T16334]  ? __kasan_kmalloc+0x8f/0xa0
[  610.803198][T16334]  ? xsk_init_queue+0xad/0x100
[  610.808009][T16334]  ? xsk_setsockopt+0x4e5/0x760
[  610.812901][T16334]  ? do_sock_setsockopt+0x175/0x1a0
[  610.818133][T16334]  ? __x64_sys_setsockopt+0x182/0x200
[  610.823546][T16334]  __vmalloc_node_range+0x126/0x1330
[  610.828909][T16334]  ? free_vm_area+0x50/0x50
[  610.833470][T16334]  vmalloc_user+0x74/0x80
[  610.837839][T16334]  ? xskq_create+0xbf/0x170
[  610.842394][T16334]  xskq_create+0xbf/0x170
[  610.846781][T16334]  xsk_init_queue+0xad/0x100
[  610.851406][T16334]  xsk_setsockopt+0x4e5/0x760
[  610.856128][T16334]  ? xsk_poll+0x680/0x680
[  610.860501][T16334]  ? __fget_files+0x28/0x4b0
[  610.865133][T16334]  ? __fget_files+0x28/0x4b0
[  610.869769][T16334]  ? aa_sock_opt_perm+0x74/0x100
[  610.874754][T16334]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  610.880374][T16334]  ? security_socket_setsockopt+0x7e/0xa0
[  610.886144][T16334]  ? xsk_poll+0x680/0x680
[  610.890524][T16334]  do_sock_setsockopt+0x175/0x1a0
[  610.895595][T16334]  ? __fdget+0x180/0x210
[  610.899895][T16334]  __x64_sys_setsockopt+0x182/0x200
[  610.905135][T16334]  do_syscall_64+0x55/0xa0
[  610.909585][T16334]  ? clear_bhb_loop+0x40/0x90
[  610.914298][T16334]  ? clear_bhb_loop+0x40/0x90
[  610.919025][T16334]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  610.924959][T16334] RIP: 0033:0x7f0c5c19c819
[  610.929421][T16334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.949060][T16334] RSP: 002b:00007f0c5d10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  610.957524][T16334] RAX: ffffffffffffffda RBX: 00007f0c5c415fa0 RCX: 00007f0c5c19c819
[  610.965523][T16334] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  610.973527][T16334] RBP: 00007f0c5c232c91 R08: 0000000000000004 R09: 0000000000000000
[  610.981540][T16334] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  610.989542][T16334] R13: 00007f0c5c416038 R14: 00007f0c5c415fa0 R15: 00007ffd961dada8
[  610.997586][T16334]  </TASK>
[  611.036873][T16334] Mem-Info:
[  611.040186][T16334] active_anon:8036 inactive_anon:0 isolated_anon:0
[  611.040186][T16334]  active_file:17373 inactive_file:40137 isolated_file:0
[  611.040186][T16334]  unevictable:768 dirty:25 writeback:0
[  611.040186][T16334]  slab_reclaimable:11072 slab_unreclaimable:94771
[  611.040186][T16334]  mapped:24583 shmem:1361 pagetables:508
[  611.040186][T16334]  sec_pagetables:0 bounce:0
[  611.040186][T16334]  kernel_misc_reclaimable:0
[  611.040186][T16334]  free:1342700 free_pcp:8105 free_cma:0
[  611.088601][T16334] Node 0 active_anon:32132kB inactive_anon:0kB active_file:69492kB inactive_file:160344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98380kB dirty:100kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10496kB pagetables:2068kB sec_pagetables:0kB all_unreclaimable? no
[  611.125178][T16338] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2929'.
[  611.134523][T16334] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  611.165689][T16334] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  611.193680][T16334] lowmem_reserve[]: 0 2521 2522 2522 2522
[  611.200642][T16334] Node 0 DMA32 free:1458388kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:32028kB inactive_anon:0kB active_file:69492kB inactive_file:159524kB unevictable:1536kB writepending:108kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:20420kB local_pcp:18844kB free_cma:0kB
[  611.231970][T16334] lowmem_reserve[]: 0 0 0 0 0
[  611.237161][T16334] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  611.266119][T16334] lowmem_reserve[]: 0 0 0 0 0
[  611.271901][T16334] Node 1 Normal free:3897052kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12320kB local_pcp:8704kB free_cma:0kB
[  611.303675][T16334] lowmem_reserve[]: 0 0 0 0 0
[  611.308829][T16334] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  611.355679][T16334] Node 0 DMA32: 749*4kB (UME) 1842*8kB (UME) 1321*16kB (UME) 828*32kB (UME) 422*64kB (UME) 206*128kB (UM) 217*256kB (UME) 102*512kB (UME) 47*1024kB (UME) 24*2048kB (UME) 277*4096kB (UM) = 1458388kB
[  611.426443][T16334] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  611.443381][T16334] Node 1 Normal: 239*4kB (UME) 46*8kB (UME) 49*16kB (UME) 167*32kB (UME) 51*64kB (UE) 12*128kB (UME) 1*256kB (E) 1*512kB (M) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3897052kB
[  611.465632][T16334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  611.476053][T16334] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  611.529551][T16334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  611.539939][T16334] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  611.550133][T16334] 58871 total pagecache pages
[  611.554875][T16334] 0 pages in swap cache
[  611.559823][T16334] Free swap  = 124996kB
[  611.564233][T16334] Total swap = 124996kB
[  611.578260][T16348] tap0: tun_chr_ioctl cmd 1074025677
[  611.590414][T16348] tap0: linktype set to 778
[  611.608328][T16334] 2097051 pages RAM
[  611.634018][T16334] 0 pages HighMem/MovableOnly
[  611.647565][T16334] 416927 pages reserved
[  611.666995][T16334] 0 pages cma reserved
[  612.753851][T16389] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2943'.
[  612.801981][T16387] delete_channel: no stack
[  613.043219][T16405] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2946'.
[  613.133731][T16405] wg2: entered promiscuous mode
[  613.146854][T16405] wg2: entered allmulticast mode
[  613.997324][T16476] delete_channel: no stack
[  614.051642][T16476] delete_channel: no stack
[  614.711889][T16501] netlink: 'syz.3.2965': attribute type 1 has an invalid length.
[  614.720239][T16501] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2965'.
[  614.739708][T16503] netlink: 'syz.3.2965': attribute type 1 has an invalid length.
[  614.751114][T16503] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2965'.
[  615.027294][T16517] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2970'.
[  615.455507][T16529] netlink: 'syz.2.2973': attribute type 1 has an invalid length.
[  615.464085][T16529] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2973'.
[  615.619746][T16531] netlink: 209632 bytes leftover after parsing attributes in process `syz.2.2974'.
[  616.451486][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  617.416692][T16540] netlink: 'syz.1.2977': attribute type 29 has an invalid length.
[  617.487376][T16540] netlink: 'syz.1.2977': attribute type 3 has an invalid length.
[  617.495207][T16540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2977'.
[  617.522590][T16540] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2977'.
[  617.532716][T16540] openvswitch: netlink: Duplicate key (type 0).
[  618.439457][T16574] netlink: 'syz.3.2987': attribute type 4 has an invalid length.
[  618.449422][T16574] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2987'.
[  618.639103][T16583] netlink: 'syz.3.2990': attribute type 22 has an invalid length.
[  619.060371][T16606] netlink: 'syz.2.2997': attribute type 2 has an invalid length.
[  619.071163][T16606] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2997'.
[  619.085248][T16608] netlink: 'syz.1.2998': attribute type 1 has an invalid length.
[  619.095729][T16608] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2998'.
[  619.683614][T16637] netlink: 'syz.1.3004': attribute type 2 has an invalid length.
[  620.294200][T16640] netlink: 'syz.3.3007': attribute type 10 has an invalid length.
[  620.328473][T16641] netlink: 'syz.3.3007': attribute type 2 has an invalid length.
[  620.356925][T16641] netlink: 'syz.3.3007': attribute type 8 has an invalid length.
[  620.364791][T16641] __nla_validate_parse: 7 callbacks suppressed
[  620.364804][T16641] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3007'.
[  621.489991][T16680] __sock_release: fasync list not empty!
[  622.475781][T16696] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3025'.
[  622.488566][T16696] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  624.636418][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  624.647031][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  624.925814][T16720] can: request_module (can-proto-3) failed.
[  625.538286][T16733] netlink: 'syz.0.3035': attribute type 5 has an invalid length.
[  625.558311][T16733] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3035'.
[  625.775018][T16751] netlink: 'syz.2.3041': attribute type 3 has an invalid length.
[  625.797178][T16751] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3041'.
[  625.882509][T16751] netlink: 'syz.2.3041': attribute type 3 has an invalid length.
[  625.894275][T16751] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3041'.
[  626.488765][T16770] netlink: 'syz.0.3046': attribute type 33 has an invalid length.
[  626.502653][T16770] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3046'.
[  627.972325][T16817] syzkaller0: entered promiscuous mode
[  628.008473][T16817] syzkaller0: entered allmulticast mode
[  628.200277][T16817] tc_dump_action: action bad kind
[  628.214266][T16817] syzkaller0: mtu less than device minimum
[  629.140868][ T5910] tipc: Subscription rejected, illegal request
[  630.859761][T16864] netlink: 151496 bytes leftover after parsing attributes in process `syz.1.3073'.
[  630.995470][T16864] can: request_module (can-proto-0) failed.
[  631.160610][T16876] netlink: 'syz.2.3076': attribute type 10 has an invalid length.
[  631.380154][T16882] netlink: 'syz.0.3077': attribute type 39 has an invalid length.
[  631.554112][T16891] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3080'.
[  632.319689][T16905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3082'.
[  632.329274][T16905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3082'.
[  632.357972][T16905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3082'.
[  632.667981][T16916] netlink: 'syz.0.3086': attribute type 10 has an invalid length.
[  632.707212][T16916] syz_tun: left promiscuous mode
[  632.717707][T16916] team0: Port device syz_tun added
[  633.391630][T16938] tun0: tun_chr_ioctl cmd 1074025677
[  633.411584][T16938] tun0: linktype set to 776
[  633.489463][T16928] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3089'.
[  633.644063][T16928] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  634.064933][T16965] netlink: 'syz.3.3101': attribute type 21 has an invalid length.
[  634.252686][T16975] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.3105'.
[  634.615221][T16974] delete_channel: no stack
[  635.719574][T17001] netlink: 'syz.1.3110': attribute type 13 has an invalid length.
[  635.736986][T17001] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.3110'.
[  636.029336][T17013] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3115'.
[  636.195705][T17015] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode
[  636.247620][T17015] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode
[  636.912161][T17032] sock: sock_set_timeout: `syz.1.3120' (pid 17032) tries to set negative timeout
[  637.090463][T17042] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3124'.
[  637.536983][T17060] netlink: 'syz.3.3129': attribute type 2 has an invalid length.
[  637.545017][T17060] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3129'.
[  637.573499][T17060] netlink: 'syz.3.3129': attribute type 21 has an invalid length.
[  638.234661][T17078] netlink: 'syz.2.3135': attribute type 12 has an invalid length.
[  638.272950][T17078] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3135'.
[  639.017194][T17110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3146'.
[  639.233362][T17113] delete_channel: no stack
[  639.869238][T17146] netlink: 'syz.1.3156': attribute type 10 has an invalid length.
[  641.279321][T17187] netlink: 'syz.0.3165': attribute type 1 has an invalid length.
[  641.291914][T17186] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3167'.
[  641.301742][T17187] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3165'.
[  641.312723][T17186] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  642.002835][T17220] netlink: 'syz.1.3175': attribute type 10 has an invalid length.
[  642.018879][T17220] netlink: 'syz.1.3175': attribute type 16 has an invalid length.
[  642.034945][T17220] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3175'.
[  642.059567][T17220] netlink: 'syz.1.3175': attribute type 10 has an invalid length.
[  642.077033][T17220] netlink: 'syz.1.3175': attribute type 16 has an invalid length.
[  642.091949][T17220] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3175'.
[  642.299623][T17225] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3177'.
[  642.684174][T17226] syzkaller0: entered promiscuous mode
[  642.703640][T17226] syzkaller0: entered allmulticast mode
[  648.050936][T17261] netlink: 'syz.1.3187': attribute type 21 has an invalid length.
[  651.781755][T17321] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3205'.
[  651.883120][T17327] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3206'.
[  652.010302][T17327] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3206'.
[  652.278886][T17339] netlink: 822 bytes leftover after parsing attributes in process `syz.2.3211'.
[  652.304172][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  652.493586][T17347] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3213'.
[  652.761156][T17356] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3216'.
[  653.145210][T17366] netlink: 'syz.2.3221': attribute type 39 has an invalid length.
[  653.794937][T17369] netlink: set zone limit has 8 unknown bytes
[  654.274844][T17374] bond_slave_1: entered promiscuous mode
[  654.305723][T17374] bond_slave_1: entered allmulticast mode
[  654.602300][T17381] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3226'.
[  654.638037][T17381] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[  654.676858][T17381] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[  654.841040][T17389] FAULT_INJECTION: forcing a failure.
[  654.841040][T17389] name failslab, interval 1, probability 0, space 0, times 0
[  654.855192][T17389] CPU: 0 PID: 17389 Comm: syz.3.3228 Not tainted syzkaller #0
[  654.862821][T17389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  654.872947][T17389] Call Trace:
[  654.876277][T17389]  <TASK>
[  654.879261][T17389]  dump_stack_lvl+0x18c/0x250
[  654.884009][T17389]  ? show_regs_print_info+0x20/0x20
[  654.889275][T17389]  ? load_image+0x420/0x420
[  654.893840][T17389]  ? __might_sleep+0xe0/0xe0
[  654.898491][T17389]  ? __lock_acquire+0x7d40/0x7d40
[  654.903582][T17389]  should_fail_ex+0x39d/0x4d0
[  654.908354][T17389]  should_failslab+0x9/0x20
[  654.913355][T17389]  slab_pre_alloc_hook+0x59/0x310
[  654.918536][T17389]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  654.924323][T17389]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  654.930102][T17389]  __kmem_cache_alloc_node+0x53/0x250
[  654.935546][T17389]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  654.941324][T17389]  __kmalloc+0xa4/0x230
[  654.945549][T17389]  tomoyo_realpath_from_path+0xe3/0x5d0
[  654.951185][T17389]  tomoyo_path_number_perm+0x248/0x620
[  654.956726][T17389]  ? tomoyo_path_number_perm+0x217/0x620
[  654.962439][T17389]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  654.967993][T17389]  ? ksys_write+0x1c4/0x260
[  654.972588][T17389]  ? __fget_files+0x28/0x4b0
[  654.977259][T17389]  ? __fget_files+0x28/0x4b0
[  654.981969][T17389]  security_file_ioctl+0x70/0xa0
[  654.986982][T17389]  __se_sys_ioctl+0x48/0x170
[  654.991646][T17389]  do_syscall_64+0x55/0xa0
[  654.996133][T17389]  ? clear_bhb_loop+0x40/0x90
[  655.000898][T17389]  ? clear_bhb_loop+0x40/0x90
[  655.005633][T17389]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  655.011611][T17389] RIP: 0033:0x7f4328d9c819
[  655.016072][T17389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  655.035760][T17389] RSP: 002b:00007f4329c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  655.044237][T17389] RAX: ffffffffffffffda RBX: 00007f4329016090 RCX: 00007f4328d9c819
[  655.052248][T17389] RDX: 00002000000006c0 RSI: 0000000000005452 RDI: 0000000000000003
[  655.060280][T17389] RBP: 00007f4329c57090 R08: 0000000000000000 R09: 0000000000000000
[  655.068283][T17389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  655.076285][T17389] R13: 00007f4329016128 R14: 00007f4329016090 R15: 00007fff39b72218
[  655.084330][T17389]  </TASK>
[  655.158142][T17389] ERROR: Out of memory at tomoyo_realpath_from_path.
[  655.215626][T17395] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3229'.
[  655.270164][T17399] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3229'.
[  655.507630][T17404] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3233'.
[  655.583225][T17404] netlink: 'syz.3.3233': attribute type 21 has an invalid length.
[  655.848024][T17406] netlink: 'syz.1.3234': attribute type 1 has an invalid length.
[  655.927721][T17406] netlink: 'syz.1.3234': attribute type 3 has an invalid length.
[  659.397851][T17434] Q±6ã�`Ò˜: renamed from lo (while UP)
[  659.429662][T17438] FAULT_INJECTION: forcing a failure.
[  659.429662][T17438] name failslab, interval 1, probability 0, space 0, times 0
[  659.451728][T17438] CPU: 0 PID: 17438 Comm: syz.2.3242 Not tainted syzkaller #0
[  659.459268][T17438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  659.469390][T17438] Call Trace:
[  659.472711][T17438]  <TASK>
[  659.475683][T17438]  dump_stack_lvl+0x18c/0x250
[  659.480427][T17438]  ? show_regs_print_info+0x20/0x20
[  659.485694][T17438]  ? load_image+0x420/0x420
[  659.490272][T17438]  ? __might_sleep+0xe0/0xe0
[  659.494928][T17438]  ? __lock_acquire+0x7d40/0x7d40
[  659.500011][T17438]  should_fail_ex+0x39d/0x4d0
[  659.504762][T17438]  should_failslab+0x9/0x20
[  659.509323][T17438]  slab_pre_alloc_hook+0x59/0x310
[  659.514420][T17438]  ? tomoyo_encode+0x28b/0x540
[  659.519231][T17438]  ? tomoyo_encode+0x28b/0x540
[  659.524043][T17438]  __kmem_cache_alloc_node+0x53/0x250
[  659.529492][T17438]  ? tomoyo_encode+0x28b/0x540
[  659.534295][T17438]  __kmalloc+0xa4/0x230
[  659.538524][T17438]  tomoyo_encode+0x28b/0x540
[  659.543175][T17438]  tomoyo_realpath_from_path+0x592/0x5d0
[  659.548876][T17438]  tomoyo_path_number_perm+0x248/0x620
[  659.554390][T17438]  ? tomoyo_path_number_perm+0x217/0x620
[  659.560168][T17438]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  659.565694][T17438]  ? ksys_write+0x1c4/0x260
[  659.570292][T17438]  ? __fget_files+0x28/0x4b0
[  659.574940][T17438]  ? __fget_files+0x28/0x4b0
[  659.579611][T17438]  security_file_ioctl+0x70/0xa0
[  659.584602][T17438]  __se_sys_ioctl+0x48/0x170
[  659.589264][T17438]  do_syscall_64+0x55/0xa0
[  659.593737][T17438]  ? clear_bhb_loop+0x40/0x90
[  659.598500][T17438]  ? clear_bhb_loop+0x40/0x90
[  659.603229][T17438]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  659.609182][T17438] RIP: 0033:0x7f0c5c19c819
[  659.613645][T17438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.633310][T17438] RSP: 002b:00007f0c5d0c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  659.641780][T17438] RAX: ffffffffffffffda RBX: 00007f0c5c416180 RCX: 00007f0c5c19c819
[  659.649813][T17438] RDX: 00002000000006c0 RSI: 0000000000005452 RDI: 0000000000000003
[  659.657831][T17438] RBP: 00007f0c5d0c8090 R08: 0000000000000000 R09: 0000000000000000
[  659.665856][T17438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  659.674002][T17438] R13: 00007f0c5c416218 R14: 00007f0c5c416180 R15: 00007ffd961dada8
[  659.682043][T17438]  </TASK>
[  659.695816][T17438] ERROR: Out of memory at tomoyo_realpath_from_path.
[  660.039809][T17453] netlink: 'syz.3.3247': attribute type 13 has an invalid length.
[  660.066765][T17453] __nla_validate_parse: 7 callbacks suppressed
[  660.066783][T17453] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3247'.
[  660.517248][T17463] netlink: 'syz.1.3248': attribute type 28 has an invalid length.
[  660.542209][T17463] netlink: 'syz.1.3248': attribute type 29 has an invalid length.
[  660.576215][T17463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3248'.
[  661.464902][T17494] FAULT_INJECTION: forcing a failure.
[  661.464902][T17494] name failslab, interval 1, probability 0, space 0, times 0
[  661.505487][T17494] CPU: 1 PID: 17494 Comm: syz.0.3255 Not tainted syzkaller #0
[  661.513045][T17494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  661.523179][T17494] Call Trace:
[  661.526505][T17494]  <TASK>
[  661.529470][T17494]  dump_stack_lvl+0x18c/0x250
[  661.534226][T17494]  ? show_regs_print_info+0x20/0x20
[  661.539499][T17494]  ? load_image+0x420/0x420
[  661.544076][T17494]  ? __might_sleep+0xe0/0xe0
[  661.548723][T17494]  ? __lock_acquire+0x7d40/0x7d40
[  661.553795][T17494]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  661.559837][T17494]  should_fail_ex+0x39d/0x4d0
[  661.564584][T17494]  should_failslab+0x9/0x20
[  661.569175][T17494]  slab_pre_alloc_hook+0x59/0x310
[  661.574251][T17494]  kmem_cache_alloc+0x5a/0x2d0
[  661.579067][T17494]  ? fasync_helper+0x3a/0xb0
[  661.583701][T17494]  fasync_helper+0x3a/0xb0
[  661.588150][T17494]  sock_fasync+0x88/0xf0
[  661.592426][T17494]  ? sock_close+0x230/0x230
[  661.596958][T17494]  do_vfs_ioctl+0x1284/0x1cc0
[  661.601659][T17494]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[  661.607331][T17494]  ? tomoyo_path_number_perm+0x217/0x620
[  661.613003][T17494]  ? __lock_acquire+0x7d40/0x7d40
[  661.618075][T17494]  ? slab_free_freelist_hook+0x130/0x1a0
[  661.623736][T17494]  ? tomoyo_path_number_perm+0x500/0x620
[  661.629402][T17494]  ? __kmem_cache_free+0xba/0x1e0
[  661.634462][T17494]  ? tomoyo_path_number_perm+0x5b4/0x620
[  661.640133][T17494]  ? tomoyo_path_number_perm+0x217/0x620
[  661.645801][T17494]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  661.651327][T17494]  ? __fget_files+0x28/0x4b0
[  661.655947][T17494]  ? __fget_files+0x28/0x4b0
[  661.660575][T17494]  ? bpf_lsm_file_ioctl+0x9/0x10
[  661.665537][T17494]  ? security_file_ioctl+0x80/0xa0
[  661.670679][T17494]  __se_sys_ioctl+0x83/0x170
[  661.675309][T17494]  do_syscall_64+0x55/0xa0
[  661.679753][T17494]  ? clear_bhb_loop+0x40/0x90
[  661.684462][T17494]  ? clear_bhb_loop+0x40/0x90
[  661.689190][T17494]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  661.695113][T17494] RIP: 0033:0x7f1859f9c819
[  661.699553][T17494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  661.719210][T17494] RSP: 002b:00007f185adad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  661.727654][T17494] RAX: ffffffffffffffda RBX: 00007f185a216180 RCX: 00007f1859f9c819
[  661.735648][T17494] RDX: 00002000000006c0 RSI: 0000000000005452 RDI: 0000000000000003
[  661.743655][T17494] RBP: 00007f185adad090 R08: 0000000000000000 R09: 0000000000000000
[  661.751653][T17494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  661.759677][T17494] R13: 00007f185a216218 R14: 00007f185a216180 R15: 00007ffc3ae29318
[  661.767707][T17494]  </TASK>
[  662.291044][T17504] syzkaller0: entered promiscuous mode
[  662.296614][T17504] syzkaller0: entered allmulticast mode
[  666.694586][T17513] netlink: 'syz.0.3261': attribute type 5 has an invalid length.
[  666.703713][T17514] netlink: 'syz.0.3261': attribute type 21 has an invalid length.
[  666.711857][T17514] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3261'.
[  666.737343][T17535] netlink: 'syz.1.3266': attribute type 10 has an invalid length.
[  666.746104][T17535] hsr_slave_0: left promiscuous mode
[  666.761083][T17535] hsr_slave_1: left promiscuous mode
[  666.896533][T17539] netlink: 'syz.2.3268': attribute type 17 has an invalid length.
[  666.913853][T17539] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3268'.
[  666.958789][T17539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  667.018304][T17543] FAULT_INJECTION: forcing a failure.
[  667.018304][T17543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  667.032771][T17543] CPU: 1 PID: 17543 Comm: syz.0.3267 Not tainted syzkaller #0
[  667.040288][T17543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  667.050397][T17543] Call Trace:
[  667.053728][T17543]  <TASK>
[  667.056708][T17543]  dump_stack_lvl+0x18c/0x250
[  667.061468][T17543]  ? show_regs_print_info+0x20/0x20
[  667.066735][T17543]  ? load_image+0x420/0x420
[  667.071310][T17543]  ? __lock_acquire+0x7d40/0x7d40
[  667.076397][T17543]  ? snprintf+0xe9/0x140
[  667.080706][T17543]  should_fail_ex+0x39d/0x4d0
[  667.085463][T17543]  _copy_to_user+0x2f/0xa0
[  667.089933][T17543]  simple_read_from_buffer+0xe7/0x150
[  667.095377][T17543]  proc_fail_nth_read+0x1e8/0x260
[  667.100481][T17543]  ? proc_fault_inject_write+0x360/0x360
[  667.106172][T17543]  ? fsnotify_perm+0x271/0x5e0
[  667.110971][T17543]  ? proc_fault_inject_write+0x360/0x360
[  667.116639][T17543]  vfs_read+0x28b/0x970
[  667.120852][T17543]  ? kernel_read+0x1e0/0x1e0
[  667.125473][T17543]  ? __fget_files+0x28/0x4b0
[  667.130092][T17543]  ? __fget_files+0x28/0x4b0
[  667.134753][T17543]  ? __fget_files+0x43d/0x4b0
[  667.139476][T17543]  ? __fdget_pos+0x2a3/0x330
[  667.144099][T17543]  ? ksys_read+0x75/0x260
[  667.148463][T17543]  ksys_read+0x150/0x260
[  667.152744][T17543]  ? vfs_write+0x990/0x990
[  667.157200][T17543]  ? lockdep_hardirqs_on+0x98/0x150
[  667.162446][T17543]  do_syscall_64+0x55/0xa0
[  667.166884][T17543]  ? clear_bhb_loop+0x40/0x90
[  667.171587][T17543]  ? clear_bhb_loop+0x40/0x90
[  667.176289][T17543]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  667.182218][T17543] RIP: 0033:0x7f1859f5d04e
[  667.186679][T17543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  667.206421][T17543] RSP: 002b:00007f185adacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  667.214864][T17543] RAX: ffffffffffffffda RBX: 00007f185adad6c0 RCX: 00007f1859f5d04e
[  667.222867][T17543] RDX: 000000000000000f RSI: 00007f185adad0a0 RDI: 0000000000000006
[  667.230863][T17543] RBP: 00007f185adad090 R08: 0000000000000000 R09: 0000000000000000
[  667.238859][T17543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  667.246860][T17543] R13: 00007f185a216218 R14: 00007f185a216180 R15: 00007ffc3ae29318
[  667.254880][T17543]  </TASK>
[  667.432296][T17553] netlink: 'syz.2.3272': attribute type 4 has an invalid length.
[  667.442347][T17553] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3272'.
[  667.453862][T17555] veth1_to_bridge: entered allmulticast mode
[  667.499756][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.539871][T17553] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3272'.
[  668.035366][T17588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3280'.
[  668.054736][T17588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3280'.
[  668.079733][T17583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3280'.
[  668.092284][T17586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3280'.
[  668.368697][T17596] netlink: 'syz.3.3283': attribute type 3 has an invalid length.
[  668.396896][T17596] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.3283'.
[  668.411680][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3284'.
[  669.142157][T17618] netlink: 'syz.2.3289': attribute type 1 has an invalid length.
[  669.190225][T17621] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  669.832982][T17641] netlink: 'syz.1.3293': attribute type 10 has an invalid length.
[  669.943526][T17641] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.005219][T17641] bridge_slave_1: left allmulticast mode
[  670.016882][T17641] bridge_slave_1: left promiscuous mode
[  670.028932][T17641] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.077755][T17641] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  671.381911][T17687] netlink: 'syz.2.3304': attribute type 10 has an invalid length.
[  671.438866][T17687] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.461686][T17687] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.489527][T17687] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.529230][T17687] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.723507][T17700] netlink: 'syz.0.3309': attribute type 9 has an invalid length.
[  671.756841][T17700] __nla_validate_parse: 3 callbacks suppressed
[  671.756861][T17700] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3309'.
[  672.041086][T17707] netlink: 'syz.0.3309': attribute type 9 has an invalid length.
[  672.065247][T17707] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3309'.
[  672.279082][T17696] delete_channel: no stack
[  673.320559][T17731] netlink: 'syz.2.3319': attribute type 10 has an invalid length.
[  673.388648][T17734] netlink: 'syz.2.3319': attribute type 9 has an invalid length.
[  673.428908][T17734] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3319'.
[  673.457400][T17731] netlink: 'syz.2.3319': attribute type 9 has an invalid length.
[  673.491733][T17731] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3319'.
[  673.872681][T17748] netlink: 'syz.1.3318': attribute type 2 has an invalid length.
[  673.903769][T17748] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3318'.
[  673.931362][T17728] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3316'.
[  674.209257][T17728] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  674.330132][T17754] netlink: 'syz.3.3322': attribute type 39 has an invalid length.
[  674.771449][T17762] netlink: 'syz.2.3324': attribute type 9 has an invalid length.
[  675.159603][T17770] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3324'.
[  675.209469][T17770] netlink: del zone limit has 4 unknown bytes
[  675.624958][T17778] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3330'.
[  676.009101][T17782] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3331'.
[  676.025401][T17782] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  676.416833][T17790] netlink: 'syz.0.3333': attribute type 23 has an invalid length.
[  676.637121][T17795] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3334'.
[  676.900057][T17795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3334'.
[  676.954965][T17802] netlink: 'syz.3.3336': attribute type 21 has an invalid length.
[  676.986783][T17802] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3336'.
[  677.491369][T17812] netlink: 'syz.1.3340': attribute type 28 has an invalid length.
[  677.506886][T17812] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3340'.
[  677.560050][T17812] netlink: 'syz.1.3340': attribute type 3 has an invalid length.
[  677.568054][T17812] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3340'.
[  677.587777][T17813] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3339'.
[  677.656889][T17813] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3339'.
[  677.682463][T17811] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3339'.
[  677.717946][T17817] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3339'.
[  677.738999][T17811] netlink: 'syz.0.3339': attribute type 10 has an invalid length.
[  677.748176][T17811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3339'.
[  678.145113][T17825] netlink: 'syz.0.3343': attribute type 10 has an invalid length.
[  678.164156][T17825] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3343'.
[  678.398984][T17833] syzkaller0: entered promiscuous mode
[  678.404726][T17833] syzkaller0: entered allmulticast mode
[  680.911723][T17860] netlink: 'syz.0.3353': attribute type 9 has an invalid length.
[  681.413274][T17880] netlink: del zone limit has 4 unknown bytes
[  682.245788][T17892] netlink: 'syz.3.3361': attribute type 2 has an invalid length.
[  682.267409][T17892] __nla_validate_parse: 2 callbacks suppressed
[  682.267427][T17892] netlink: 17255 bytes leftover after parsing attributes in process `syz.3.3361'.
[  685.028279][T17961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3380'.
[  685.080791][T17959] netlink: 'syz.3.3379': attribute type 10 has an invalid length.
[  685.136188][T17959] veth1_macvtap: left promiscuous mode
[  685.338301][T17966] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3381'.
[  685.421091][T17970] netlink: 'syz.0.3382': attribute type 6 has an invalid length.
[  685.430051][T17970] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3382'.
[  685.774251][T17986] netlink: 'syz.0.3387': attribute type 21 has an invalid length.
[  685.782386][T17986] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3387'.
[  685.803568][T17986] netlink: 'syz.0.3387': attribute type 4 has an invalid length.
[  685.823059][T17986] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3387'.
[  686.118769][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  686.125285][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  686.405673][T18002] netlink: 'syz.3.3391': attribute type 9 has an invalid length.
[  686.451338][T18004] netlink: 'syz.2.3392': attribute type 10 has an invalid length.
[  686.472866][T18004] veth1_macvtap: left promiscuous mode
[  686.808287][T18012] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3391'.
[  686.886975][T18012] netlink: del zone limit has 4 unknown bytes
[  687.761204][T18028] netlink: 'syz.0.3400': attribute type 4 has an invalid length.
[  687.784780][T18028] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3400'.
[  687.813223][T18028] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  688.052115][T18037] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3402'.
[  688.594874][T18054] netlink: 'syz.0.3407': attribute type 10 has an invalid length.
[  688.611745][T18054] veth1_macvtap: left promiscuous mode
[  688.989482][T18057] netlink: 'syz.1.3409': attribute type 10 has an invalid length.
[  689.047278][T18057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3409'.
[  689.223538][T18058] IPv6: Can't replace route, no match found
[  691.291442][T18099] netlink: 'syz.1.3419': attribute type 10 has an invalid length.
[  691.413092][T18099] veth1_macvtap: left promiscuous mode
[  692.361334][T18111] netlink: set zone limit has 8 unknown bytes
[  692.377427][T18113] netlink: set zone limit has 8 unknown bytes
[  692.619725][T18116] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3423'.
[  692.629328][T18116] netlink: del zone limit has 4 unknown bytes
[  696.592861][T18114] netlink: 'syz.1.3423': attribute type 9 has an invalid length.
[  696.614597][T18123] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3426'.
[  696.624055][T18126] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3426'.
[  696.882898][T18155] netlink: 'syz.1.3434': attribute type 10 has an invalid length.
[  697.084703][T18165] netlink: 'syz.2.3438': attribute type 21 has an invalid length.
[  700.904372][T18203] netlink: 'syz.3.3448': attribute type 6 has an invalid length.
[  701.458591][T18218] netlink: 'syz.3.3455': attribute type 1 has an invalid length.
[  701.487132][T18218] netlink: 'syz.3.3455': attribute type 4 has an invalid length.
[  701.494998][T18218] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3455'.
[  702.525179][T18241] netlink: 'syz.2.3460': attribute type 9 has an invalid length.
[  702.547162][T18241] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3460'.
[  703.104767][T18256] syzkaller0: entered promiscuous mode
[  703.110784][T18256] syzkaller0: entered allmulticast mode
[  703.161695][T18267] netlink: 'syz.0.3468': attribute type 21 has an invalid length.
[  703.282006][T18270] netlink: 'syz.0.3470': attribute type 3 has an invalid length.
[  703.299517][T18270] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3470'.
[  703.320852][T18270] netlink: 'syz.0.3470': attribute type 29 has an invalid length.
[  703.331356][T18270] netlink: 'syz.0.3470': attribute type 3 has an invalid length.
[  703.339679][T18270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3470'.
[  703.377434][T18271] syzkaller0: entered promiscuous mode
[  703.383210][T18271] syzkaller0: entered allmulticast mode
[  703.397049][T18241] delete_channel: no stack
[  703.537975][T18280] netlink: 'syz.2.3473': attribute type 10 has an invalid length.
[  703.545889][T18280] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3473'.
[  703.718100][T18287] delete_channel: no stack
[  703.723626][T18287] delete_channel: no stack
[  703.816617][T18287] delete_channel: no stack
[  704.414711][T18287] netlink: 'syz.1.3474': attribute type 10 has an invalid length.
[  704.489943][T18285] delete_channel: no stack
[  704.526019][T18294] netlink: 'syz.1.3474': attribute type 10 has an invalid length.
[  704.546126][T18294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3474'.
[  704.559464][T18294] dummy0: entered promiscuous mode
[  704.565507][T18294] bridge0: port 2(dummy0) entered blocking state
[  704.573988][T18294] bridge0: port 2(dummy0) entered disabled state
[  704.582930][T18294] dummy0: entered allmulticast mode
[  704.592505][T18294] bridge0: port 2(dummy0) entered blocking state
[  704.599086][T18294] bridge0: port 2(dummy0) entered forwarding state
[  704.761561][T18302] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3478'.
[  704.794779][T18302] netlink: 'syz.0.3478': attribute type 1 has an invalid length.
[  704.812717][T18302] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3478'.
[  705.127480][T18323] netlink: 'syz.0.3481': attribute type 9 has an invalid length.
[  705.141343][T18323] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3481'.
[  705.356417][T18327] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3483'.
[  705.577020][T18331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3484'.
[  706.112332][ T1118] tipc: Subscription rejected, illegal request
[  708.111641][T18323] delete_channel: no stack
[  708.702341][T18345] validate_nla: 2 callbacks suppressed
[  708.702358][T18345] netlink: 'syz.0.3489': attribute type 10 has an invalid length.
[  708.716442][T18345] __nla_validate_parse: 3 callbacks suppressed
[  708.716456][T18345] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3489'.
[  709.063100][T18345] vlan0 (unregistering): left allmulticast mode
[  709.075603][T18345] veth0_vlan (unregistering): left allmulticast mode
[  709.083315][T18345] vlan0 (unregistering): left promiscuous mode
[  709.090231][T18345] À: port 1(vlan0) entered disabled state
[  709.215812][T18345] team0: Port device macvlan0 removed
[  709.277031][T18352] netlink: 'syz.1.3490': attribute type 10 has an invalid length.
[  709.853541][T18370] netlink: 'syz.1.3495': attribute type 12 has an invalid length.
[  709.896826][T18370] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3495'.
[  710.240666][T18380] netlink: 'syz.3.3498': attribute type 9 has an invalid length.
[  710.276435][T18380] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3498'.
[  710.775377][T18383] netlink: 177348 bytes leftover after parsing attributes in process `syz.1.3497'.
[  710.846186][T18383] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  710.909014][T18383] CPU: 1 PID: 18383 Comm: syz.1.3497 Not tainted syzkaller #0
[  710.916572][T18383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  710.926686][T18383] Call Trace:
[  710.930010][T18383]  <TASK>
[  710.932976][T18383]  dump_stack_lvl+0x18c/0x250
[  710.937704][T18383]  ? show_regs_print_info+0x20/0x20
[  710.942946][T18383]  ? load_image+0x420/0x420
[  710.947498][T18383]  sysfs_warn_dup+0x8e/0xa0
[  710.952030][T18383]  sysfs_do_create_link_sd+0xc0/0x110
[  710.957435][T18383]  device_add_class_symlinks+0x1cf/0x240
[  710.963140][T18383]  device_add+0x507/0xc20
[  710.967519][T18383]  wiphy_register+0x1dad/0x2ae0
[  710.972417][T18383]  ? cfg80211_event_work+0x40/0x40
[  710.977557][T18383]  ? minstrel_ht_alloc+0x88a/0x990
[  710.982711][T18383]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  710.988817][T18383]  ieee80211_register_hw+0x3464/0x4250
[  710.994341][T18383]  ? ieee80211_tasklet_handler+0x20/0x20
[  711.000002][T18383]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  711.006076][T18383]  ? __debug_object_init+0xec/0x450
[  711.011327][T18383]  ? __asan_memset+0x22/0x40
[  711.015960][T18383]  ? __hrtimer_init+0x186/0x270
[  711.020861][T18383]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  711.026737][T18383]  ? mac80211_hwsim_free+0x220/0x220
[  711.032064][T18383]  ? rcu_is_watching+0x15/0xb0
[  711.036874][T18383]  ? kstrndup+0xbd/0x140
[  711.041163][T18383]  hwsim_new_radio_nl+0xdc9/0x1a90
[  711.046315][T18383]  ? __nla_validate+0x50/0x50
[  711.051039][T18383]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  711.057433][T18383]  ? __nla_parse+0x40/0x50
[  711.061880][T18383]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  711.068301][T18383]  genl_family_rcv_msg_doit+0x211/0x310
[  711.074006][T18383]  ? end_current_label_crit_section+0x170/0x170
[  711.080294][T18383]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  711.086231][T18383]  ? bpf_lsm_capable+0x9/0x10
[  711.090950][T18383]  ? security_capable+0x89/0xb0
[  711.095849][T18383]  genl_rcv_msg+0x619/0x7a0
[  711.100392][T18383]  ? genl_bind+0x360/0x360
[  711.104892][T18383]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  711.111255][T18383]  ? ref_tracker_free+0x690/0x840
[  711.116333][T18383]  netlink_rcv_skb+0x241/0x4d0
[  711.121141][T18383]  ? genl_bind+0x360/0x360
[  711.125625][T18383]  ? netlink_ack+0x1180/0x1180
[  711.130533][T18383]  ? __lock_acquire+0x7d40/0x7d40
[  711.135603][T18383]  ? down_read+0x1ac/0x2e0
[  711.140067][T18383]  genl_rcv+0x28/0x40
[  711.144085][T18383]  netlink_unicast+0x751/0x8d0
[  711.148897][T18383]  netlink_sendmsg+0x8d0/0xbf0
[  711.153711][T18383]  ? netlink_getsockopt+0x590/0x590
[  711.158957][T18383]  ? aa_sock_msg_perm+0x94/0x150
[  711.163950][T18383]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  711.169277][T18383]  ? security_socket_sendmsg+0x80/0xa0
[  711.174770][T18383]  ? netlink_getsockopt+0x590/0x590
[  711.180007][T18383]  ____sys_sendmsg+0x5ba/0x960
[  711.184818][T18383]  ? __asan_memset+0x22/0x40
[  711.189438][T18383]  ? __sys_sendmsg_sock+0x30/0x30
[  711.194495][T18383]  ? __import_iovec+0x5f2/0x850
[  711.199384][T18383]  ? import_iovec+0x73/0xa0
[  711.203915][T18383]  ___sys_sendmsg+0x2a6/0x360
[  711.208651][T18383]  ? __sys_sendmsg+0x2a0/0x2a0
[  711.213475][T18383]  ? debug_mutex_init+0x38/0x70
[  711.218400][T18383]  __se_sys_sendmsg+0x1c2/0x2b0
[  711.223378][T18383]  ? __x64_sys_sendmsg+0x80/0x80
[  711.228370][T18383]  ? lockdep_hardirqs_on+0x98/0x150
[  711.233614][T18383]  do_syscall_64+0x55/0xa0
[  711.238074][T18383]  ? clear_bhb_loop+0x40/0x90
[  711.242797][T18383]  ? clear_bhb_loop+0x40/0x90
[  711.247533][T18383]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  711.253484][T18383] RIP: 0033:0x7fc8dc79c819
[  711.257950][T18383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  711.277605][T18383] RSP: 002b:00007fc8dd5cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  711.286056][T18383] RAX: ffffffffffffffda RBX: 00007fc8dca16180 RCX: 00007fc8dc79c819
[  711.294150][T18383] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[  711.302153][T18383] RBP: 00007fc8dc832c91 R08: 0000000000000000 R09: 0000000000000000
[  711.310152][T18383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  711.318179][T18383] R13: 00007fc8dca16218 R14: 00007fc8dca16180 R15: 00007fff452aac58
[  711.326200][T18383]  </TASK>
[  711.460481][T18380] delete_channel: no stack
[  711.839765][T18398] netlink: 'syz.2.3501': attribute type 10 has an invalid length.
[  712.481013][T18428] netlink: 'syz.3.3509': attribute type 10 has an invalid length.
[  712.526953][T18428] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3509'.
[  712.774707][T18443] netlink: 'syz.1.3511': attribute type 9 has an invalid length.
[  712.784687][T18443] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3511'.
[  713.729778][T18444] delete_channel: no stack
[  714.007774][T18451] dummy0: left allmulticast mode
[  714.032495][T18451] bridge0: port 2(dummy0) entered disabled state
[  714.102192][T18451] bridge_slave_0: left allmulticast mode
[  714.127466][T18451] bridge_slave_0: left promiscuous mode
[  714.133374][T18451] bridge0: port 1(bridge_slave_0) entered disabled state
[  714.608665][T18460] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  714.619653][T18460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  714.628219][T18460] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  714.638090][T18460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  714.646318][T18460] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  714.654385][T18460] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  716.696915][ T5768] Bluetooth: hci0: command tx timeout
[  717.115542][ T9750] team0: Port device syz_tun removed
[  717.243879][ T5929] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.420346][ T5929] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.530899][ T5929] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.724611][ T5929] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.001286][T18486] IPv6: Can't replace route, no match found
[  718.025575][T18458] chnl_net:caif_netlink_parms(): no params data found
[  718.060228][T18486] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  718.442321][T18458] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.468558][T18458] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.475941][T18458] bridge_slave_0: entered allmulticast mode
[  718.484169][T18458] bridge_slave_0: entered promiscuous mode
[  718.548301][T18458] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.569614][T18458] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.585258][T18458] bridge_slave_1: entered allmulticast mode
[  718.601513][T18458] bridge_slave_1: entered promiscuous mode
[  718.767755][ T5768] Bluetooth: hci0: command tx timeout
[  718.774271][T18458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  718.796477][T18523] sit0: entered promiscuous mode
[  718.836158][T18458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  718.978848][T18458] team0: Port device team_slave_0 added
[  718.989546][T18458] team0: Port device team_slave_1 added
[  719.103190][T18458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  719.115649][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  719.170136][T18458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  719.218660][T18458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  719.225755][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  719.252178][T18458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  719.363635][T18458] hsr_slave_0: entered promiscuous mode
[  719.371117][T18458] hsr_slave_1: entered promiscuous mode
[  719.379640][T18458] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  719.388412][T18458] Cannot create hsr debugfs directory
[  720.443168][T18552] IPv6: Can't replace route, no match found
[  720.460057][T18557] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  720.849439][ T5768] Bluetooth: hci0: command tx timeout
[  721.218973][T18574] netlink: 56963 bytes leftover after parsing attributes in process `syz.3.3539'.
[  721.271553][T18458] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  721.330464][ T5929] hsr_slave_0: left promiscuous mode
[  721.345286][ T5929] hsr_slave_1: left promiscuous mode
[  721.716227][T18596] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3545'.
[  721.988260][ T5929] team0 (unregistering): Port device team_slave_1 removed
[  722.039663][ T5929] team0 (unregistering): Port device C removed
[  722.429592][T18458] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  722.464594][T18458] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  722.481738][T18458] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  722.642655][T18458] 8021q: adding VLAN 0 to HW filter on device bond0
[  722.672410][T18458] 8021q: adding VLAN 0 to HW filter on device team0
[  722.687820][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state
[  722.695036][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state
[  722.725173][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state
[  722.732385][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state
[  722.773463][T18458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  722.931471][ T5768] Bluetooth: hci0: command tx timeout
[  723.015270][T18458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  723.064711][T18458] veth0_vlan: entered promiscuous mode
[  723.081331][T18458] veth1_vlan: entered promiscuous mode
[  723.119354][T18458] veth0_macvtap: entered promiscuous mode
[  723.131035][T18458] veth1_macvtap: entered promiscuous mode
[  723.153112][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.165137][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.177463][T18458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  723.199437][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.226972][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.238825][T18458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  723.252004][T18458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  723.261580][T18458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  723.272917][T18458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  723.282277][T18458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.373147][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.391651][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.439704][  T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.453596][  T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.141703][T18632] netlink: 177348 bytes leftover after parsing attributes in process `syz.0.3512'.
[  724.181115][T18632] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  725.221242][T18665] IPv6: Can't replace route, no match found
[  725.240307][T18659] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  725.290347][T18672] netlink: 'syz.1.3551': attribute type 23 has an invalid length.
[  725.610484][T18681] netlink: 'syz.3.3557': attribute type 7 has an invalid length.
[  726.311802][T18693] netlink: 177348 bytes leftover after parsing attributes in process `syz.2.3559'.
[  726.325504][T18705] netlink: 'syz.3.3564': attribute type 3 has an invalid length.
[  726.349724][T18705] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3564'.
[  726.421612][T18693] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  727.121331][T18731] netlink: 'syz.0.3572': attribute type 10 has an invalid length.
[  727.133971][T18731] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  727.219149][T18731] batman_adv: batadv0: Removing interface: batadv_slave_0
[  727.325998][T18731] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  727.668242][T18739] pim6reg: tun_chr_ioctl cmd 2147767521
[  727.697858][T18739] pim6reg: tun_chr_ioctl cmd 2147767511
[  728.770508][T18768] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3583'.
[  728.785615][T18768] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3583'.
[  728.807711][T18765] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3583'.
[  728.846055][T18766] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3583'.
[  729.215622][T18776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3586'.
[  731.548240][T18796] netlink: 'syz.1.3593': attribute type 39 has an invalid length.
[  732.269823][T18816] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.3600'.
[  732.574713][T18825] netlink: 'syz.1.3602': attribute type 39 has an invalid length.
[  733.651803][T18853] netlink: 'syz.2.3611': attribute type 39 has an invalid length.
[  734.448109][T18878] netlink: 'syz.1.3617': attribute type 29 has an invalid length.
[  734.604205][T18881] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3617'.
[  734.681499][T18878] netlink: 'syz.1.3617': attribute type 29 has an invalid length.
[  734.869612][T18872] syzkaller0: entered promiscuous mode
[  734.875339][T18872] syzkaller0: entered allmulticast mode
[  735.022814][T18887] syz.1.3618: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  735.059097][T18887] CPU: 1 PID: 18887 Comm: syz.1.3618 Not tainted syzkaller #0
[  735.066666][T18887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  735.076772][T18887] Call Trace:
[  735.080097][T18887]  <TASK>
[  735.083070][T18887]  dump_stack_lvl+0x18c/0x250
[  735.087827][T18887]  ? show_regs_print_info+0x20/0x20
[  735.093129][T18887]  ? load_image+0x420/0x420
[  735.097699][T18887]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  735.104165][T18887]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  735.110738][T18887]  warn_alloc+0x246/0x340
[  735.115128][T18887]  ? stack_trace_save+0xaa/0x100
[  735.120133][T18887]  ? zone_watermark_ok_safe+0x230/0x230
[  735.125771][T18887]  ? kasan_set_track+0x5f/0x70
[  735.130583][T18887]  ? kasan_set_track+0x4e/0x70
[  735.135395][T18887]  ? __kasan_kmalloc+0x8f/0xa0
[  735.140220][T18887]  ? xsk_init_queue+0xad/0x100
[  735.145056][T18887]  ? xsk_setsockopt+0x4e5/0x760
[  735.149982][T18887]  ? do_sock_setsockopt+0x175/0x1a0
[  735.155231][T18887]  ? __x64_sys_setsockopt+0x182/0x200
[  735.160687][T18887]  __vmalloc_node_range+0x126/0x1330
[  735.166063][T18887]  ? free_vm_area+0x50/0x50
[  735.170642][T18887]  vmalloc_user+0x74/0x80
[  735.175044][T18887]  ? xskq_create+0xbf/0x170
[  735.179613][T18887]  xskq_create+0xbf/0x170
[  735.184015][T18887]  xsk_init_queue+0xad/0x100
[  735.188671][T18887]  xsk_setsockopt+0x4e5/0x760
[  735.193410][T18887]  ? xsk_poll+0x680/0x680
[  735.197792][T18887]  ? aa_sock_opt_perm+0x21/0x100
[  735.202780][T18887]  ? aa_sock_opt_perm+0x4a/0x100
[  735.207771][T18887]  ? aa_sock_opt_perm+0x74/0x100
[  735.212763][T18887]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  735.218380][T18887]  ? security_socket_setsockopt+0x7e/0xa0
[  735.224163][T18887]  ? xsk_poll+0x680/0x680
[  735.228553][T18887]  do_sock_setsockopt+0x175/0x1a0
[  735.233656][T18887]  ? __fdget+0x180/0x210
[  735.237996][T18887]  __x64_sys_setsockopt+0x182/0x200
[  735.243261][T18887]  do_syscall_64+0x55/0xa0
[  735.247739][T18887]  ? clear_bhb_loop+0x40/0x90
[  735.252483][T18887]  ? clear_bhb_loop+0x40/0x90
[  735.257215][T18887]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  735.263166][T18887] RIP: 0033:0x7fc8dc79c819
[  735.267634][T18887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  735.287336][T18887] RSP: 002b:00007fc8dd60e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  735.295851][T18887] RAX: ffffffffffffffda RBX: 00007fc8dca15fa0 RCX: 00007fc8dc79c819
[  735.303876][T18887] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  735.311899][T18887] RBP: 00007fc8dc832c91 R08: 0000000000000004 R09: 0000000000000000
[  735.319936][T18887] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  735.327970][T18887] R13: 00007fc8dca16038 R14: 00007fc8dca15fa0 R15: 00007fff452aac58
[  735.336026][T18887]  </TASK>
[  735.455598][T18887] Mem-Info:
[  735.460153][T18887] active_anon:40904 inactive_anon:0 isolated_anon:0
[  735.460153][T18887]  active_file:17574 inactive_file:40185 isolated_file:0
[  735.460153][T18887]  unevictable:768 dirty:145 writeback:0
[  735.460153][T18887]  slab_reclaimable:11665 slab_unreclaimable:98042
[  735.460153][T18887]  mapped:28980 shmem:34188 pagetables:576
[  735.460153][T18887]  sec_pagetables:0 bounce:0
[  735.460153][T18887]  kernel_misc_reclaimable:0
[  735.460153][T18887]  free:1303469 free_pcp:11447 free_cma:0
[  735.507566][T18887] Node 0 active_anon:163616kB inactive_anon:0kB active_file:70296kB inactive_file:160536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115920kB dirty:576kB writeback:0kB shmem:135216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11180kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no
[  735.556808][T18887] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  735.606852][T18887] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  735.648427][T18887] lowmem_reserve[]: 0 2521 2522 2522 2522
[  735.665384][T18887] Node 0 DMA32 free:1307696kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:155376kB inactive_anon:0kB active_file:70296kB inactive_file:159716kB unevictable:1536kB writepending:572kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:35756kB local_pcp:21528kB free_cma:0kB
[  735.726940][T18887] lowmem_reserve[]: 0 0 0 0 0
[  735.758065][T18887] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  735.806872][T18887] lowmem_reserve[]: 0 0 0 0 0
[  735.836856][T18887] Node 1 Normal free:3898592kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:10784kB local_pcp:7936kB free_cma:0kB
[  735.903810][T18887] lowmem_reserve[]: 0 0 0 0 0
[  735.927438][T18887] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  735.967848][T18887] Node 0 DMA32: 1668*4kB (UME) 216*8kB (UME) 650*16kB (UME) 557*32kB (UME) 262*64kB (UME) 125*128kB (UM) 78*256kB (UME) 46*512kB (UME) 28*1024kB (UME) 19*2048kB (UM) 282*4096kB (UM) = 1335568kB
[  736.004027][T18887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  736.026749][T18887] Node 1 Normal: 240*4kB (UME) 46*8kB (UME) 49*16kB (UME) 201*32kB (UME) 56*64kB (UE) 13*128kB (UME) 1*256kB (E) 1*512kB (M) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3898592kB
[  736.066927][T18887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  736.076616][T18887] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  736.086321][T18887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  736.107911][T18887] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  736.136811][T18887] 82702 total pagecache pages
[  736.141821][T18887] 0 pages in swap cache
[  736.146034][T18887] Free swap  = 124996kB
[  736.162192][T18887] Total swap = 124996kB
[  736.177662][T18887] 2097051 pages RAM
[  736.181520][T18887] 0 pages HighMem/MovableOnly
[  736.209399][T18887] 416927 pages reserved
[  736.213639][T18887] 0 pages cma reserved
[  738.087192][T18895] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3621'.
[  738.119217][T18895] veth0_macvtap: left promiscuous mode
[  738.634687][T18905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  739.275143][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3628'.
[  739.438358][T18921] delete_channel: no stack
[  740.423519][T18932] netlink: 'syz.1.3640': attribute type 10 has an invalid length.
[  740.471797][ T5768] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[  740.753029][T18943] netlink: 'syz.1.3633': attribute type 11 has an invalid length.
[  740.872015][T18940] netlink: 'syz.3.3632': attribute type 39 has an invalid length.
[  741.390989][T18963] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3641'.
[  741.466235][T18972] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.3641'.
[  742.612939][T18995] netlink: 'syz.0.3649': attribute type 1 has an invalid length.
[  742.646779][T18995] netlink: 'syz.0.3649': attribute type 3 has an invalid length.
[  742.676078][T18995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3649'.
[  744.662157][T19063] netlink: 'syz.1.3663': attribute type 29 has an invalid length.
[  744.732100][T19063] netlink: 'syz.1.3663': attribute type 3 has an invalid length.
[  744.807684][T19063] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3663'.
[  746.198528][T19096] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3672'.
[  747.516524][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  747.526823][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  748.393866][T19150] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3686'.
[  748.498394][T19157] netlink: 'syz.0.3689': attribute type 6 has an invalid length.
[  748.603631][T19159] netlink: 'syz.2.3690': attribute type 4 has an invalid length.
[  748.612305][T19159] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3690'.
[  749.173562][T19173] netlink: 'syz.0.3702': attribute type 25 has an invalid length.
[  749.507259][T19178] tap0: tun_chr_ioctl cmd 1074025677
[  749.528637][T19178] tap0: linktype set to 6
[  751.802780][T19223] netlink: 'syz.2.3708': attribute type 21 has an invalid length.
[  751.811125][T19223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3708'.
[  752.462317][T19235] netlink: 'syz.3.3711': attribute type 10 has an invalid length.
[  752.480175][T19235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3711'.
[  753.155932][T19249] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.3716'.
[  753.517211][T19267] netlink: 'syz.3.3720': attribute type 9 has an invalid length.
[  753.567365][T19271] syzkaller0: entered promiscuous mode
[  753.573081][T19271] syzkaller0: entered allmulticast mode
[  753.944885][T19279] netlink: 'syz.2.3731': attribute type 21 has an invalid length.
[  753.972896][T19279] netlink: 'syz.2.3731': attribute type 1 has an invalid length.
[  755.429436][T19294] netlink: 'syz.0.3728': attribute type 3 has an invalid length.
[  755.445443][T19294] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3728'.
[  756.279509][T19308] netlink: 'syz.2.3734': attribute type 2 has an invalid length.
[  756.309370][T19308] netlink: 'syz.2.3734': attribute type 8 has an invalid length.
[  756.327146][T19308] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3734'.
[  756.419850][T19310] netlink: 'syz.2.3734': attribute type 11 has an invalid length.
[  756.935788][T19330] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3740'.
[  757.158181][T19339] netlink: 'syz.1.3743': attribute type 9 has an invalid length.
[  757.166005][T19339] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3743'.
[  757.490887][T19333] netlink: 'syz.2.3741': attribute type 3 has an invalid length.
[  757.512041][T19340] netlink: 'syz.1.3743': attribute type 9 has an invalid length.
[  757.547362][T19333] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3741'.
[  757.552422][T19340] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3743'.
[  757.610914][T19338] delete_channel: no stack
[  757.870066][T19350] delete_channel: no stack
[  757.941401][T19356] pim6reg1: entered promiscuous mode
[  757.956848][T19356] pim6reg1: entered allmulticast mode
[  758.220841][T19363] netlink: 2822 bytes leftover after parsing attributes in process `syz.2.3759'.
[  758.820482][T19381] sit0: left promiscuous mode
[  758.853421][T19381] sit0: entered allmulticast mode
[  758.922326][T19381] sit0: entered promiscuous mode
[  759.122326][T19386] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3766'.
[  759.273592][T19383] netlink: 'syz.3.3757': attribute type 3 has an invalid length.
[  759.294649][T19383] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3757'.
[  760.245136][T19426] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3770'.
[  760.481408][T19439] sit0: entered allmulticast mode
[  760.721189][T19446] sit0: entered promiscuous mode
[  762.350524][T19484] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3785'.
[  762.376959][T19484] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  762.419391][T19481] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3782'.
[  762.759115][T19494] sit0: entered promiscuous mode
[  762.764235][T19494] sit0: entered allmulticast mode
[  762.949152][T19505] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3792'.
[  763.066246][T19507] netlink: 'syz.1.3794': attribute type 10 has an invalid length.
[  763.515231][T19520] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3798'.
[  763.592229][T19523] netlink: 'syz.0.3799': attribute type 29 has an invalid length.
[  763.619192][T19523] netlink: 'syz.0.3799': attribute type 29 has an invalid length.
[  763.648075][T19524] netlink: 'syz.0.3799': attribute type 29 has an invalid length.
[  763.670292][T19523] netlink: 'syz.0.3799': attribute type 29 has an invalid length.
[  764.035979][T19524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  764.063030][T19524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  764.486453][ T5768] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  764.882449][T19550] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3809'.
[  765.637122][T19598] netlink: 'syz.2.3822': attribute type 9 has an invalid length.
[  765.645067][T19598] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3822'.
[  765.738635][T19600] netlink: 'syz.2.3822': attribute type 9 has an invalid length.
[  765.755702][T19600] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3822'.
[  765.929811][T19606] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3825'.
[  765.939476][T19606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'.
[  766.762234][T19633] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3834'.
[  766.833225][T19634] netlink: 'syz.1.3833': attribute type 40 has an invalid length.
[  766.969306][T19633] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô'
[  766.986897][T19633] CPU: 1 PID: 19633 Comm: syz.2.3834 Not tainted syzkaller #0
[  766.994484][T19633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  767.004643][T19633] Call Trace:
[  767.008016][T19633]  <TASK>
[  767.011008][T19633]  dump_stack_lvl+0x18c/0x250
[  767.015800][T19633]  ? show_regs_print_info+0x20/0x20
[  767.021084][T19633]  ? load_image+0x420/0x420
[  767.025698][T19633]  sysfs_warn_dup+0x8e/0xa0
[  767.030288][T19633]  sysfs_do_create_link_sd+0xc0/0x110
[  767.035734][T19633]  device_add_class_symlinks+0x1cf/0x240
[  767.041455][T19633]  device_add+0x507/0xc20
[  767.045868][T19633]  wiphy_register+0x1dad/0x2ae0
[  767.050833][T19633]  ? cfg80211_event_work+0x40/0x40
[  767.056006][T19633]  ? minstrel_ht_alloc+0x88a/0x990
[  767.061296][T19633]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  767.067453][T19633]  ieee80211_register_hw+0x3464/0x4250
[  767.073035][T19633]  ? ieee80211_tasklet_handler+0x20/0x20
[  767.078729][T19633]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  767.084689][T19633]  ? __debug_object_init+0xec/0x450
[  767.089990][T19633]  ? __asan_memset+0x22/0x40
[  767.094646][T19633]  ? __hrtimer_init+0x186/0x270
[  767.099591][T19633]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  767.105454][T19633]  ? mac80211_hwsim_free+0x220/0x220
[  767.110804][T19633]  ? rcu_is_watching+0x15/0xb0
[  767.115646][T19633]  ? kstrndup+0xbd/0x140
[  767.120008][T19633]  hwsim_new_radio_nl+0xdc9/0x1a90
[  767.125200][T19633]  ? __nla_validate+0x50/0x50
[  767.129972][T19633]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  767.136388][T19633]  ? kasan_save_alloc_info+0xe/0x30
[  767.141675][T19633]  ? __nla_parse+0x40/0x50
[  767.146164][T19633]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  767.152589][T19633]  genl_family_rcv_msg_doit+0x211/0x310
[  767.158212][T19633]  ? end_current_label_crit_section+0x170/0x170
[  767.164557][T19633]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  767.170547][T19633]  ? bpf_lsm_capable+0x9/0x10
[  767.175299][T19633]  ? security_capable+0x89/0xb0
[  767.180248][T19633]  genl_rcv_msg+0x619/0x7a0
[  767.184839][T19633]  ? genl_bind+0x360/0x360
[  767.189333][T19633]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  767.195755][T19633]  ? perf_trace_lock+0x304/0x3b0
[  767.200813][T19633]  netlink_rcv_skb+0x241/0x4d0
[  767.205668][T19633]  ? genl_bind+0x360/0x360
[  767.210172][T19633]  ? netlink_ack+0x1180/0x1180
[  767.215061][T19633]  ? __lock_acquire+0x7d40/0x7d40
[  767.220198][T19633]  ? down_read+0x1ac/0x2e0
[  767.224703][T19633]  genl_rcv+0x28/0x40
[  767.228761][T19633]  netlink_unicast+0x751/0x8d0
[  767.233641][T19633]  netlink_sendmsg+0x8d0/0xbf0
[  767.238500][T19633]  ? perf_trace_lock+0x304/0x3b0
[  767.243541][T19633]  ? netlink_getsockopt+0x590/0x590
[  767.248842][T19633]  ? aa_sock_msg_perm+0x94/0x150
[  767.253856][T19633]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  767.259200][T19633]  ? security_socket_sendmsg+0x80/0xa0
[  767.264708][T19633]  ? netlink_getsockopt+0x590/0x590
[  767.269970][T19633]  ____sys_sendmsg+0x5ba/0x960
[  767.274795][T19633]  ? __asan_memset+0x22/0x40
[  767.279461][T19633]  ? __sys_sendmsg_sock+0x30/0x30
[  767.284522][T19633]  ? __import_iovec+0x5f2/0x850
[  767.289431][T19633]  ? import_iovec+0x73/0xa0
[  767.293997][T19633]  ___sys_sendmsg+0x2a6/0x360
[  767.298724][T19633]  ? __sys_sendmsg+0x2a0/0x2a0
[  767.303563][T19633]  ? trace_call_bpf+0xc3/0x6c0
[  767.308393][T19633]  ? debug_mutex_init+0x38/0x70
[  767.313339][T19633]  __se_sys_sendmsg+0x1c2/0x2b0
[  767.318248][T19633]  ? __x64_sys_sendmsg+0x80/0x80
[  767.323264][T19633]  ? lockdep_hardirqs_on+0x98/0x150
[  767.328533][T19633]  do_syscall_64+0x55/0xa0
[  767.332988][T19633]  ? clear_bhb_loop+0x40/0x90
[  767.337718][T19633]  ? clear_bhb_loop+0x40/0x90
[  767.342463][T19633]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  767.348407][T19633] RIP: 0033:0x7f0c5c19c819
[  767.352865][T19633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.372518][T19633] RSP: 002b:00007f0c5d10a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  767.380980][T19633] RAX: ffffffffffffffda RBX: 00007f0c5c415fa0 RCX: 00007f0c5c19c819
[  767.388994][T19633] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  767.397010][T19633] RBP: 00007f0c5c232c91 R08: 0000000000000000 R09: 0000000000000000
[  767.405019][T19633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  767.413024][T19633] R13: 00007f0c5c416038 R14: 00007f0c5c415fa0 R15: 00007ffd961dada8
[  767.421071][T19633]  </TASK>
[  767.482354][T19646] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3834'.
[  767.618034][T19650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3837'.
[  767.853809][T19652] netlink: 'syz.1.3838': attribute type 16 has an invalid length.
[  767.891066][T19652] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3838'.
[  767.984673][T19658] sit0: left allmulticast mode
[  768.856270][T19689] netlink: 'syz.3.3846': attribute type 40 has an invalid length.
[  769.044403][T19694] netlink: 'syz.0.3848': attribute type 10 has an invalid length.
[  769.078776][T19694] netlink: 'syz.0.3848': attribute type 16 has an invalid length.
[  769.101443][T19694] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3848'.
[  769.336236][T19708] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3852'.
[  770.131721][T19725] sit0: left allmulticast mode
[  770.486326][T19746] netlink: 'syz.3.3862': attribute type 10 has an invalid length.
[  770.518206][T19746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3862'.
[  770.528411][T19737] netlink: 'syz.0.3861': attribute type 40 has an invalid length.
[  770.663237][T19746] netlink: 'syz.3.3862': attribute type 10 has an invalid length.
[  770.676802][T19746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3862'.
[  774.014771][T19775] netlink: 'syz.3.3870': attribute type 4 has an invalid length.
[  774.022821][T19775] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3870'.
[  774.169418][T19779] netlink: 'syz.1.3871': attribute type 9 has an invalid length.
[  774.193411][T19779] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3871'.
[  774.218781][T19779] netlink: 'syz.1.3871': attribute type 3 has an invalid length.
[  774.236728][T19779] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3871'.
[  774.407083][T19786] sit0: left allmulticast mode
[  774.475940][T19794] netlink: 'syz.1.3883': attribute type 27 has an invalid length.
[  774.488743][T19794] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3883'.
[  775.025809][T19792] netlink: 'syz.2.3875': attribute type 40 has an invalid length.
[  775.248887][T19813] C: renamed from team_slave_0 (while UP)
[  775.260734][T19813] netlink: 'syz.0.3881': attribute type 3 has an invalid length.
[  775.284512][T19813] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  775.307723][T19815] netlink: 'syz.0.3881': attribute type 3 has an invalid length.
[  775.341306][T19815] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  775.634811][T19832] netlink: 'syz.0.3886': attribute type 1 has an invalid length.
[  775.661095][T19832] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3886'.
[  775.774028][T19839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3889'.
[  775.829360][T19839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3889'.
[  775.880762][T19840] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3889'.
[  775.990704][T19845] syzkaller0: entered allmulticast mode
[  776.475394][T19857] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3894'.
[  776.484913][T19857] tc_dump_action: action bad kind
[  776.497952][T19866] sit0: left allmulticast mode
[  776.909637][T19876] netlink: 'syz.3.3898': attribute type 3 has an invalid length.
[  776.917836][T19876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3898'.
[  777.308252][T19892] openvswitch: netlink: Flow key attribute not present in set flow.
[  778.450405][T19912] FAULT_INJECTION: forcing a failure.
[  778.450405][T19912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  778.512025][T19912] CPU: 1 PID: 19912 Comm: syz.1.3919 Not tainted syzkaller #0
[  778.519707][T19912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  778.529853][T19912] Call Trace:
[  778.533555][T19912]  <TASK>
[  778.536549][T19912]  dump_stack_lvl+0x18c/0x250
[  778.541331][T19912]  ? show_regs_print_info+0x20/0x20
[  778.546611][T19912]  ? load_image+0x420/0x420
[  778.551204][T19912]  ? __might_fault+0xaa/0x120
[  778.555961][T19912]  ? __lock_acquire+0x7d40/0x7d40
[  778.561085][T19912]  should_fail_ex+0x39d/0x4d0
[  778.565862][T19912]  _copy_from_user+0x2f/0xe0
[  778.570550][T19912]  ___sys_sendmsg+0x1c7/0x360
[  778.575299][T19912]  ? get_pid_task+0x20/0x1e0
[  778.579994][T19912]  ? __sys_sendmsg+0x2a0/0x2a0
[  778.584911][T19912]  ? __lock_acquire+0x7d40/0x7d40
[  778.590103][T19912]  __se_sys_sendmsg+0x1c2/0x2b0
[  778.595054][T19912]  ? __x64_sys_sendmsg+0x80/0x80
[  778.600127][T19912]  ? lockdep_hardirqs_on+0x98/0x150
[  778.605454][T19912]  do_syscall_64+0x55/0xa0
[  778.609951][T19912]  ? clear_bhb_loop+0x40/0x90
[  778.614695][T19912]  ? clear_bhb_loop+0x40/0x90
[  778.619460][T19912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  778.625443][T19912] RIP: 0033:0x7fc8dc79c819
[  778.629944][T19912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  778.649633][T19912] RSP: 002b:00007fc8dd60e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  778.658137][T19912] RAX: ffffffffffffffda RBX: 00007fc8dca15fa0 RCX: 00007fc8dc79c819
[  778.666180][T19912] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005
[  778.674234][T19912] RBP: 00007fc8dd60e090 R08: 0000000000000000 R09: 0000000000000000
[  778.682283][T19912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  778.690323][T19912] R13: 00007fc8dca16038 R14: 00007fc8dca15fa0 R15: 00007fff452aac58
[  778.698425][T19912]  </TASK>
[  780.312571][T19943] __nla_validate_parse: 1 callbacks suppressed
[  780.312591][T19943] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3915'.
[  780.349961][T19943] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3915'.
[  780.380176][T19933] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3915'.
[  780.431505][T19953] netlink: 'syz.2.3923': attribute type 39 has an invalid length.
[  780.520542][T19958] FAULT_INJECTION: forcing a failure.
[  780.520542][T19958] name failslab, interval 1, probability 0, space 0, times 0
[  780.544140][T19958] CPU: 1 PID: 19958 Comm: syz.3.3924 Not tainted syzkaller #0
[  780.551719][T19958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  780.561898][T19958] Call Trace:
[  780.565256][T19958]  <TASK>
[  780.568251][T19958]  dump_stack_lvl+0x18c/0x250
[  780.573017][T19958]  ? show_regs_print_info+0x20/0x20
[  780.578391][T19958]  ? load_image+0x420/0x420
[  780.582973][T19958]  ? __might_sleep+0xe0/0xe0
[  780.587631][T19958]  ? __lock_acquire+0x7d40/0x7d40
[  780.592756][T19958]  should_fail_ex+0x39d/0x4d0
[  780.597540][T19958]  should_failslab+0x9/0x20
[  780.602135][T19958]  slab_pre_alloc_hook+0x59/0x310
[  780.607273][T19958]  kmem_cache_alloc_node+0x60/0x320
[  780.612567][T19958]  ? __alloc_skb+0x103/0x2c0
[  780.617285][T19958]  __alloc_skb+0x103/0x2c0
[  780.621797][T19958]  alloc_skb_with_frags+0xca/0x7b0
[  780.627038][T19958]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  780.633726][T19958]  sock_alloc_send_pskb+0x883/0x9a0
[  780.639025][T19958]  ? sock_kzfree_s+0x50/0x50
[  780.643663][T19958]  ? do_raw_spin_lock+0x11f/0x2c0
[  780.648746][T19958]  ? __rwlock_init+0x150/0x150
[  780.653578][T19958]  ? do_raw_spin_unlock+0x121/0x230
[  780.658847][T19958]  unix_dgram_sendmsg+0x5a2/0x16d0
[  780.664015][T19958]  ? verify_lock_unused+0x140/0x140
[  780.669299][T19958]  ? aa_sk_perm+0x83c/0x970
[  780.673894][T19958]  ? unix_dgram_poll+0x680/0x680
[  780.678905][T19958]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  780.685390][T19958]  ? aa_sock_msg_perm+0x94/0x150
[  780.690435][T19958]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  780.695810][T19958]  ? security_socket_sendmsg+0x80/0xa0
[  780.701389][T19958]  ? unix_dgram_poll+0x680/0x680
[  780.706386][T19958]  ____sys_sendmsg+0x5ba/0x960
[  780.711224][T19958]  ? __asan_memset+0x22/0x40
[  780.715928][T19958]  ? __sys_sendmsg_sock+0x30/0x30
[  780.721014][T19958]  ? __import_iovec+0x3fa/0x850
[  780.725940][T19958]  ? import_iovec+0x73/0xa0
[  780.730511][T19958]  ___sys_sendmsg+0x2a6/0x360
[  780.735245][T19958]  ? get_pid_task+0x20/0x1e0
[  780.739920][T19958]  ? __sys_sendmsg+0x2a0/0x2a0
[  780.744796][T19958]  ? __lock_acquire+0x7d40/0x7d40
[  780.749939][T19958]  __se_sys_sendmsg+0x1c2/0x2b0
[  780.754848][T19958]  ? __x64_sys_sendmsg+0x80/0x80
[  780.759879][T19958]  ? lockdep_hardirqs_on+0x98/0x150
[  780.765148][T19958]  do_syscall_64+0x55/0xa0
[  780.769606][T19958]  ? clear_bhb_loop+0x40/0x90
[  780.774454][T19958]  ? clear_bhb_loop+0x40/0x90
[  780.779190][T19958]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  780.785146][T19958] RIP: 0033:0x7f4328d9c819
[  780.789619][T19958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  780.809292][T19958] RSP: 002b:00007f4329c78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  780.817778][T19958] RAX: ffffffffffffffda RBX: 00007f4329015fa0 RCX: 00007f4328d9c819
[  780.825912][T19958] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005
[  780.833939][T19958] RBP: 00007f4329c78090 R08: 0000000000000000 R09: 0000000000000000
[  780.841995][T19958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  780.850015][T19958] R13: 00007f4329016038 R14: 00007f4329015fa0 R15: 00007fff39b72218
[  780.858069][T19958]  </TASK>
[  781.006517][T19953] hsr_slave_1 (unregistering): left promiscuous mode
[  781.166945][T19954] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3915'.
[  784.198127][T19972] netlink: 'syz.2.3935': attribute type 1 has an invalid length.
[  784.206594][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'.
[  784.587371][T19981] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3934'.
[  784.762162][T19981] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3934'.
[  784.812014][T19973] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3934'.
[  784.863968][T19982] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3934'.
[  785.307329][T20002] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3931'.
[  785.324285][T19998] __nla_validate_parse: 1 callbacks suppressed
[  785.324303][T19998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3931'.
[  785.505702][T20009] netlink: 'syz.0.3936': attribute type 21 has an invalid length.
[  785.647682][T20012] FAULT_INJECTION: forcing a failure.
[  785.647682][T20012] name failslab, interval 1, probability 0, space 0, times 0
[  785.680728][T20012] CPU: 0 PID: 20012 Comm: syz.1.3937 Not tainted syzkaller #0
[  785.688293][T20012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  785.698402][T20012] Call Trace:
[  785.701725][T20012]  <TASK>
[  785.704726][T20012]  dump_stack_lvl+0x18c/0x250
[  785.709494][T20012]  ? show_regs_print_info+0x20/0x20
[  785.714759][T20012]  ? load_image+0x420/0x420
[  785.719317][T20012]  ? __might_sleep+0xe0/0xe0
[  785.723981][T20012]  ? __lock_acquire+0x7d40/0x7d40
[  785.729186][T20012]  should_fail_ex+0x39d/0x4d0
[  785.733930][T20012]  should_failslab+0x9/0x20
[  785.738490][T20012]  slab_pre_alloc_hook+0x59/0x310
[  785.743571][T20012]  ? memcg_alloc_slab_cgroups+0x87/0x130
[  785.749256][T20012]  ? memcg_alloc_slab_cgroups+0x87/0x130
[  785.754936][T20012]  __kmem_cache_alloc_node+0x53/0x250
[  785.760381][T20012]  ? memcg_alloc_slab_cgroups+0x87/0x130
[  785.766061][T20012]  __kmalloc_node+0xa4/0x230
[  785.770717][T20012]  memcg_alloc_slab_cgroups+0x87/0x130
[  785.776232][T20012]  slab_post_alloc_hook+0xf4/0x4b0
[  785.781437][T20012]  kmem_cache_alloc_node+0x14c/0x320
[  785.786773][T20012]  ? __alloc_skb+0x103/0x2c0
[  785.791416][T20012]  __alloc_skb+0x103/0x2c0
[  785.795876][T20012]  alloc_skb_with_frags+0xca/0x7b0
[  785.801046][T20012]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  785.807689][T20012]  ? verify_lock_unused+0x140/0x140
[  785.812961][T20012]  sock_alloc_send_pskb+0x883/0x9a0
[  785.818321][T20012]  ? sock_kzfree_s+0x50/0x50
[  785.822974][T20012]  ? do_raw_spin_lock+0x11f/0x2c0
[  785.828084][T20012]  ? __rwlock_init+0x150/0x150
[  785.832903][T20012]  ? do_raw_spin_unlock+0x121/0x230
[  785.838179][T20012]  unix_dgram_sendmsg+0x5a2/0x16d0
[  785.843337][T20012]  ? verify_lock_unused+0x140/0x140
[  785.848590][T20012]  ? aa_sk_perm+0x83c/0x970
[  785.853164][T20012]  ? unix_dgram_poll+0x680/0x680
[  785.858148][T20012]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  785.864615][T20012]  ? aa_sock_msg_perm+0x94/0x150
[  785.869600][T20012]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  785.874937][T20012]  ? security_socket_sendmsg+0x80/0xa0
[  785.880437][T20012]  ? unix_dgram_poll+0x680/0x680
[  785.885431][T20012]  ____sys_sendmsg+0x5ba/0x960
[  785.890253][T20012]  ? __asan_memset+0x22/0x40
[  785.894897][T20012]  ? __sys_sendmsg_sock+0x30/0x30
[  785.899961][T20012]  ? __import_iovec+0x3fa/0x850
[  785.904937][T20012]  ? import_iovec+0x73/0xa0
[  785.909490][T20012]  ___sys_sendmsg+0x2a6/0x360
[  785.914207][T20012]  ? get_pid_task+0x20/0x1e0
[  785.918865][T20012]  ? __sys_sendmsg+0x2a0/0x2a0
[  785.923693][T20012]  ? __lock_acquire+0x7d40/0x7d40
[  785.928793][T20012]  __se_sys_sendmsg+0x1c2/0x2b0
[  785.933707][T20012]  ? __x64_sys_sendmsg+0x80/0x80
[  785.938699][T20012]  ? syscall_enter_from_user_mode+0x20/0x80
[  785.944661][T20012]  ? lockdep_hardirqs_on+0x98/0x150
[  785.949923][T20012]  do_syscall_64+0x55/0xa0
[  785.954386][T20012]  ? clear_bhb_loop+0x40/0x90
[  785.959114][T20012]  ? clear_bhb_loop+0x40/0x90
[  785.963847][T20012]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  785.969794][T20012] RIP: 0033:0x7fc8dc79c819
[  785.974263][T20012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  785.993941][T20012] RSP: 002b:00007fc8dd60e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  786.002407][T20012] RAX: ffffffffffffffda RBX: 00007fc8dca15fa0 RCX: 00007fc8dc79c819
[  786.010435][T20012] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005
[  786.018463][T20012] RBP: 00007fc8dd60e090 R08: 0000000000000000 R09: 0000000000000000
[  786.026477][T20012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  786.034482][T20012] R13: 00007fc8dca16038 R14: 00007fc8dca15fa0 R15: 00007fff452aac58
[  786.042520][T20012]  </TASK>
[  786.306587][T20013] Ÿë
: port 1(ip6gretap0) entered blocking state
[  786.314562][T20013] Ÿë
: port 1(ip6gretap0) entered disabled state
[  786.367875][T20013] ip6gretap0: entered allmulticast mode
[  786.403331][T20013] ip6gretap0: entered promiscuous mode
[  786.798097][T20018] netlink: 'syz.3.3939': attribute type 21 has an invalid length.
[  786.806238][T20018] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3939'.
[  786.817352][T20018] netlink: 'syz.3.3939': attribute type 4 has an invalid length.
[  786.905447][T20031] netlink: 'syz.2.3949': attribute type 21 has an invalid length.
[  787.189964][T20031] Ÿë
: port 1(ip6gretap0) entered blocking state
[  787.235422][T20031] Ÿë
: port 1(ip6gretap0) entered disabled state
[  787.272239][T20031] ip6gretap0: entered allmulticast mode
[  787.380544][T20031] ip6gretap0: entered promiscuous mode
[  788.155615][T20049] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3943'.
[  788.171177][T20049] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3943'.
[  788.259998][T20042] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3943'.
[  788.300764][T20055] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3943'.
[  788.455508][T20065] netlink: 151496 bytes leftover after parsing attributes in process `syz.2.3951'.
[  788.813611][T20076] netlink: 'syz.3.3956': attribute type 21 has an invalid length.
[  788.950820][T20076] Ÿë
: port 1(ip6gretap0) entered blocking state
[  788.957912][T20076] Ÿë
: port 1(ip6gretap0) entered disabled state
[  788.965441][T20076] ip6gretap0: entered allmulticast mode
[  788.993742][T20076] ip6gretap0: entered promiscuous mode
[  789.023768][T20080] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3955'.
[  789.097458][T20079] delete_channel: no stack
[  789.257983][T20091] FAULT_INJECTION: forcing a failure.
[  789.257983][T20091] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  789.273216][T20091] CPU: 0 PID: 20091 Comm: syz.0.3961 Not tainted syzkaller #0
[  789.280757][T20091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  789.290859][T20091] Call Trace:
[  789.294192][T20091]  <TASK>
[  789.297156][T20091]  dump_stack_lvl+0x18c/0x250
[  789.301887][T20091]  ? show_regs_print_info+0x20/0x20
[  789.307126][T20091]  ? load_image+0x420/0x420
[  789.311681][T20091]  ? __might_fault+0xaa/0x120
[  789.316420][T20091]  ? __lock_acquire+0x7d40/0x7d40
[  789.321520][T20091]  should_fail_ex+0x39d/0x4d0
[  789.326237][T20091]  _copy_from_user+0x2f/0xe0
[  789.330867][T20091]  kstrtouint_from_user+0xde/0x170
[  789.336019][T20091]  ? kstrtol_from_user+0x190/0x190
[  789.341204][T20091]  proc_fail_nth_write+0x8f/0x250
[  789.346279][T20091]  ? proc_fail_nth_read+0x260/0x260
[  789.351515][T20091]  ? proc_fail_nth_read+0x260/0x260
[  789.356749][T20091]  vfs_write+0x296/0x990
[  789.361034][T20091]  ? file_end_write+0x250/0x250
[  789.365943][T20091]  ? __fget_files+0x28/0x4b0
[  789.370566][T20091]  ? __fget_files+0x28/0x4b0
[  789.375191][T20091]  ? __fget_files+0x43d/0x4b0
[  789.379911][T20091]  ? __fdget_pos+0x2a3/0x330
[  789.384532][T20091]  ? ksys_write+0x75/0x260
[  789.388984][T20091]  ksys_write+0x150/0x260
[  789.393436][T20091]  ? __ia32_sys_read+0x90/0x90
[  789.398261][T20091]  ? lockdep_hardirqs_on+0x98/0x150
[  789.403514][T20091]  do_syscall_64+0x55/0xa0
[  789.407971][T20091]  ? clear_bhb_loop+0x40/0x90
[  789.412803][T20091]  ? clear_bhb_loop+0x40/0x90
[  789.417510][T20091]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  789.423430][T20091] RIP: 0033:0x7f26a675d04e
[  789.427883][T20091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  789.447529][T20091] RSP: 002b:00007f26a76c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  789.455974][T20091] RAX: ffffffffffffffda RBX: 00007f26a76c76c0 RCX: 00007f26a675d04e
[  789.463985][T20091] RDX: 0000000000000001 RSI: 00007f26a76c70a0 RDI: 0000000000000008
[  789.471987][T20091] RBP: 00007f26a76c7090 R08: 0000000000000000 R09: 0000000000000000
[  789.479983][T20091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  789.487972][T20091] R13: 00007f26a6a16038 R14: 00007f26a6a15fa0 R15: 00007ffe7bc11cf8
[  789.495990][T20091]  </TASK>
[  790.114510][T20108] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3965'.
[  790.127030][T20108] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3965'.
[  791.370378][T20131] __nla_validate_parse: 3 callbacks suppressed
[  791.370420][T20131] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.3971'.
[  791.488161][T20130] delete_channel: no stack
[  791.521276][T20134] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.3972'.
[  791.635276][T20141] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.3974'.
[  791.919887][T20152] netlink: 127924 bytes leftover after parsing attributes in process `syz.2.3979'.
[  791.940446][T20152] netlink: 16372 bytes leftover after parsing attributes in process `syz.2.3979'.
[  791.991463][T20154] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3987'.
[  791.994188][T20152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3979'.
[  792.035339][T20152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3979'.
[  792.065495][T20157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3979'.
[  792.076425][T20156] netlink: 'syz.3.3980': attribute type 10 has an invalid length.
[  792.084800][T20156] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3980'.
[  792.094342][T20156] .`: entered promiscuous mode
[  792.104978][T20153] delete_channel: no stack
[  792.109676][T20156] bond_slave_0: entered promiscuous mode
[  792.110007][T20156] 
@0Ù: entered promiscuous mode
[  792.122049][T20156] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  792.132882][T20156] 8021q: adding VLAN 0 to HW filter on device .`
[  792.956852][T20162] netlink: 'syz.0.3982': attribute type 2 has an invalid length.
[  792.976935][T20162] netlink: 'syz.0.3982': attribute type 8 has an invalid length.
[  793.012055][T20162] netlink: 'syz.0.3982': attribute type 11 has an invalid length.
[  793.238443][T20180] netlink: 'syz.1.3989': attribute type 10 has an invalid length.
[  794.545962][T20237] netlink: 'syz.2.4004': attribute type 21 has an invalid length.
[  794.554260][T20237] netlink: 'syz.2.4004': attribute type 5 has an invalid length.
[  794.999992][T20244] netlink: 'syz.1.4007': attribute type 2 has an invalid length.
[  795.391703][T20258] veth0_macvtap: entered allmulticast mode
[  795.882082][T20254] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  795.893096][T20254] CPU: 1 PID: 20254 Comm: syz.0.4005 Not tainted syzkaller #0
[  795.900654][T20254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  795.910775][T20254] Call Trace:
[  795.914100][T20254]  <TASK>
[  795.917076][T20254]  dump_stack_lvl+0x18c/0x250
[  795.921832][T20254]  ? show_regs_print_info+0x20/0x20
[  795.927104][T20254]  ? load_image+0x420/0x420
[  795.931693][T20254]  sysfs_warn_dup+0x8e/0xa0
[  795.936254][T20254]  sysfs_do_create_link_sd+0xc0/0x110
[  795.941674][T20254]  device_add_class_symlinks+0x1cf/0x240
[  795.947366][T20254]  device_add+0x507/0xc20
[  795.951762][T20254]  wiphy_register+0x1dad/0x2ae0
[  795.956690][T20254]  ? cfg80211_event_work+0x40/0x40
[  795.961853][T20254]  ? minstrel_ht_alloc+0x88a/0x990
[  795.967027][T20254]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  795.973152][T20254]  ieee80211_register_hw+0x3464/0x4250
[  795.978709][T20254]  ? ieee80211_tasklet_handler+0x20/0x20
[  795.984562][T20254]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  795.990532][T20254]  ? __debug_object_init+0xec/0x450
[  795.995799][T20254]  ? __asan_memset+0x22/0x40
[  796.000463][T20254]  ? __hrtimer_init+0x186/0x270
[  796.005379][T20254]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  796.011177][T20254]  ? mac80211_hwsim_free+0x220/0x220
[  796.016609][T20254]  ? rcu_is_watching+0x15/0xb0
[  796.021446][T20254]  ? kstrndup+0xbd/0x140
[  796.025775][T20254]  hwsim_new_radio_nl+0xdc9/0x1a90
[  796.030962][T20254]  ? __nla_validate+0x50/0x50
[  796.035732][T20254]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  796.042137][T20254]  ? __nla_parse+0x40/0x50
[  796.046613][T20254]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  796.053090][T20254]  genl_family_rcv_msg_doit+0x211/0x310
[  796.058709][T20254]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  796.064657][T20254]  ? lockdep_hardirqs_on+0x98/0x150
[  796.069925][T20254]  ? genl_rcv_msg+0x5f6/0x7a0
[  796.074659][T20254]  genl_rcv_msg+0x619/0x7a0
[  796.079227][T20254]  ? genl_bind+0x360/0x360
[  796.083701][T20254]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  796.090081][T20254]  ? lockdep_hardirqs_on+0x98/0x150
[  796.095340][T20254]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  796.101629][T20254]  netlink_rcv_skb+0x241/0x4d0
[  796.106501][T20254]  ? genl_bind+0x360/0x360
[  796.110986][T20254]  ? netlink_ack+0x1180/0x1180
[  796.115826][T20254]  ? __lock_acquire+0x7d40/0x7d40
[  796.120918][T20254]  ? down_read+0x1ac/0x2e0
[  796.125384][T20254]  genl_rcv+0x28/0x40
[  796.129442][T20254]  netlink_unicast+0x751/0x8d0
[  796.134282][T20254]  netlink_sendmsg+0x8d0/0xbf0
[  796.139118][T20254]  ? netlink_getsockopt+0x590/0x590
[  796.144386][T20254]  ? aa_sock_msg_perm+0x94/0x150
[  796.149382][T20254]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  796.154760][T20254]  ? security_socket_sendmsg+0x80/0xa0
[  796.160274][T20254]  ? netlink_getsockopt+0x590/0x590
[  796.165537][T20254]  ____sys_sendmsg+0x5ba/0x960
[  796.170354][T20254]  ? __asan_memset+0x22/0x40
[  796.174998][T20254]  ? __sys_sendmsg_sock+0x30/0x30
[  796.180077][T20254]  ? __import_iovec+0x5f2/0x850
[  796.184986][T20254]  ? import_iovec+0x73/0xa0
[  796.189550][T20254]  ___sys_sendmsg+0x2a6/0x360
[  796.194282][T20254]  ? __sys_sendmsg+0x2a0/0x2a0
[  796.199160][T20254]  __se_sys_sendmsg+0x1c2/0x2b0
[  796.204059][T20254]  ? __x64_sys_sendmsg+0x80/0x80
[  796.209399][T20254]  do_syscall_64+0x55/0xa0
[  796.213896][T20254]  ? clear_bhb_loop+0x40/0x90
[  796.218627][T20254]  ? clear_bhb_loop+0x40/0x90
[  796.223369][T20254]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  796.229319][T20254] RIP: 0033:0x7f26a679c819
[  796.233779][T20254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  796.253534][T20254] RSP: 002b:00007f26a76a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  796.262016][T20254] RAX: ffffffffffffffda RBX: 00007f26a6a16090 RCX: 00007f26a679c819
[  796.270050][T20254] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  796.278074][T20254] RBP: 00007f26a6832c91 R08: 0000000000000000 R09: 0000000000000000
[  796.286097][T20254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  796.294136][T20254] R13: 00007f26a6a16128 R14: 00007f26a6a16090 R15: 00007ffe7bc11cf8
[  796.302179][T20254]  </TASK>
[  796.425938][T20269] syzkaller0: entered promiscuous mode
[  796.431798][T20269] syzkaller0: entered allmulticast mode
[  796.669350][T20280] __nla_validate_parse: 8 callbacks suppressed
[  796.669369][T20280] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4014'.
[  798.657778][T20275] netlink: 17156 bytes leftover after parsing attributes in process `syz.3.4014'.
[  798.782885][    C1] 
[  798.782895][    C1] ================================
[  798.782902][    C1] WARNING: inconsistent lock state
[  798.782914][    C1] syzkaller #0 Not tainted
[  798.782924][    C1] --------------------------------
[  798.782930][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  798.782938][    C1] syz.3.4019/20297 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  798.782960][    C1] ffff88806a1cf218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[  798.783018][    C1] {INITIAL USE} state was registered at:
[  798.783030][    C1]   lock_acquire+0x19e/0x420
[  798.783054][    C1]   _raw_spin_lock+0x2e/0x40
[  798.783081][    C1]   htab_lock_bucket+0x17d/0x300
[  798.783102][    C1]   htab_map_update_elem+0x229/0x1040
[  798.783120][    C1]   bpf_map_update_value+0x660/0x720
[  798.783138][    C1]   generic_map_update_batch+0x5ec/0x810
[  798.783155][    C1]   bpf_map_do_batch+0x3d7/0x610
[  798.783176][    C1]   __sys_bpf+0x381/0x890
[  798.783193][    C1]   __x64_sys_bpf+0x7c/0x90
[  798.783210][    C1]   do_syscall_64+0x55/0xa0
[  798.783226][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  798.783249][    C1] irq event stamp: 920
[  798.783255][    C1] hardirqs last  enabled at (919): [<ffffffff8a861985>] exc_debug+0xf5/0x140
[  798.783280][    C1] hardirqs last disabled at (920): [<ffffffff8a861903>] exc_debug+0x73/0x140
[  798.783301][    C1] softirqs last  enabled at (852): [<ffffffff8196f317>] bpf_map_alloc_id+0x87/0xd0
[  798.783328][    C1] softirqs last disabled at (850): [<ffffffff8196f2b1>] bpf_map_alloc_id+0x21/0xd0
[  798.783355][    C1] 
[  798.783355][    C1] other info that might help us debug this:
[  798.783361][    C1]  Possible unsafe locking scenario:
[  798.783361][    C1] 
[  798.783365][    C1]        CPU0
[  798.783369][    C1]        ----
[  798.783371][    C1]   lock(&htab->lockdep_key);
[  798.783383][    C1]   <Interrupt>
[  798.783387][    C1]     lock(&htab->lockdep_key);
[  798.783398][    C1] 
[  798.783398][    C1]  *** DEADLOCK ***
[  798.783398][    C1] 
[  798.783403][    C1] no locks held by syz.3.4019/20297.
[  798.783411][    C1] 
[  798.783411][    C1] stack backtrace:
[  798.783417][    C1] CPU: 1 PID: 20297 Comm: syz.3.4019 Not tainted syzkaller #0
[  798.783437][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  798.783448][    C1] Call Trace:
[  798.783456][    C1]  <#DB>
[  798.783463][    C1]  dump_stack_lvl+0x18c/0x250
[  798.783498][    C1]  ? show_regs_print_info+0x20/0x20
[  798.783534][    C1]  ? print_usage_bug+0x475/0x690
[  798.783565][    C1]  ? verify_lock_unused+0x18/0x140
[  798.783591][    C1]  lock_acquire+0x2c2/0x420
[  798.783616][    C1]  ? htab_lock_bucket+0x17d/0x300
[  798.783640][    C1]  ? read_lock_is_recursive+0x20/0x20
[  798.783663][    C1]  ? trace_event_raw_event_lock+0x250/0x250
[  798.783681][    C1]  ? internal_get_user_pages_fast+0x214e/0x2760
[  798.783716][    C1]  _raw_spin_lock+0x2e/0x40
[  798.783739][    C1]  ? htab_lock_bucket+0x17d/0x300
[  798.783760][    C1]  htab_lock_bucket+0x17d/0x300
[  798.783785][    C1]  ? htab_lru_map_delete_node+0x760/0x760
[  798.783807][    C1]  ? look_up_lock_class+0x75/0x140
[  798.783832][    C1]  ? verify_lock_unused+0x18/0x140
[  798.783856][    C1]  ? htab_map_hash+0x1d7/0x330
[  798.783879][    C1]  htab_map_delete_elem+0x1a4/0x650
[  798.783904][    C1]  ? htab_map_update_elem+0x1040/0x1040
[  798.783925][    C1]  ? rcu_is_watching+0x15/0xb0
[  798.783952][    C1]  ? perf_callchain+0x220/0x220
[  798.783972][    C1]  ? lock_release+0xb5/0x8c0
[  798.783997][    C1]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  798.784019][    C1]  bpf_overflow_handler+0x1fc/0x510
[  798.784048][    C1]  ? perf_tp_event+0x1520/0x1520
[  798.784071][    C1]  ? perf_trace_buf_alloc+0x290/0x290
[  798.784095][    C1]  ? bpf_overflow_handler+0xde/0x510
[  798.784124][    C1]  ? tp_perf_event_destroy+0x20/0x20
[  798.784156][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  798.784181][    C1]  __perf_event_overflow+0x447/0x630
[  798.784209][    C1]  perf_swevent_overflow+0x268/0x340
[  798.784239][    C1]  ? perf_event_switch_output+0x790/0x790
[  798.784274][    C1]  perf_swevent_event+0x45c/0x570
[  798.784298][    C1]  ? perf_tp_event+0x1520/0x1520
[  798.784321][    C1]  ? trace_call_bpf+0x5e9/0x6c0
[  798.784351][    C1]  ? perf_trace_buf_alloc+0x290/0x290
[  798.784382][    C1]  perf_bp_event+0x319/0x430
[  798.784408][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  798.784449][    C1]  ? lock_acquire+0x2c2/0x420
[  798.784476][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  798.784505][    C1]  notifier_call_chain+0x197/0x380
[  798.784533][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  798.784566][    C1]  atomic_notifier_call_chain+0xda/0x180
[  798.784594][    C1]  notify_die+0x145/0x1a0
[  798.784621][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  798.784663][    C1]  ? rcu_is_watching+0x15/0xb0
[  798.784690][    C1]  notify_debug+0x2e/0x50
[  798.784709][    C1]  exc_debug+0xde/0x140
[  798.784730][    C1]  asm_exc_debug+0x1e/0x40
[  798.784752][    C1] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  798.784774][    C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  798.784790][    C1] RSP: 0018:ffffc9000bf4fb48 EFLAGS: 00050206
[  798.784806][    C1] RAX: ffffffff842a2001 RBX: 0000000000000068 RCX: 0000000000000066
[  798.784819][    C1] RDX: 0000000000000001 RSI: 0000200000000302 RDI: ffffc9000ced104a
[  798.784832][    C1] RBP: 0000000000000000 R08: ffffc9000ced10af R09: 1ffff920019da215
[  798.784845][    C1] R10: dffffc0000000000 R11: fffff520019da216 R12: 0000200000000368
[  798.784860][    C1] R13: 0000000000000000 R14: ffffc9000ced1048 R15: 0000200000000300
[  798.784878][    C1]  ? rcuref_put_slowpath+0xe1/0x150
[  798.784908][    C1]  </#DB>
[  798.784914][    C1]  <TASK>
[  798.784919][    C1]  _copy_from_user+0x8b/0xe0
[  798.784945][    C1]  copy_from_bpfptr+0x67/0x80
[  798.784966][    C1]  bpf_prog_load+0xa80/0x1670
[  798.784993][    C1]  ? map_freeze+0x420/0x420
[  798.785022][    C1]  ? __might_fault+0xaa/0x120
[  798.785041][    C1]  ? __might_fault+0xc6/0x120
[  798.785059][    C1]  ? __might_fault+0xaa/0x120
[  798.785078][    C1]  ? bpf_lsm_bpf+0x9/0x10
[  798.785103][    C1]  ? security_bpf+0x7e/0xa0
[  798.785130][    C1]  __sys_bpf+0x5ba/0x890
[  798.785151][    C1]  ? bpf_link_show_fdinfo+0x390/0x390
[  798.785181][    C1]  ? lock_chain_count+0x20/0x20
[  798.785206][    C1]  __x64_sys_bpf+0x7c/0x90
[  798.785226][    C1]  do_syscall_64+0x55/0xa0
[  798.785243][    C1]  ? clear_bhb_loop+0x40/0x90
[  798.785267][    C1]  ? clear_bhb_loop+0x40/0x90
[  798.785292][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  798.785316][    C1] RIP: 0033:0x7f4328d9c819
[  798.785330][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  798.785346][    C1] RSP: 002b:00007f4329c78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  798.785365][    C1] RAX: ffffffffffffffda RBX: 00007f4329015fa0 RCX: 00007f4328d9c819
[  798.785378][    C1] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
[  798.785390][    C1] RBP: 00007f4328e32c91 R08: 0000000000000000 R09: 0000000000000000
[  798.785402][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  798.785413][    C1] R13: 00007f4329016038 R14: 00007f4329015fa0 R15: 00007fff39b72218
[  798.785434][    C1]  </TASK>
[  799.577680][T20303] netlink: 'syz.0.4018': attribute type 9 has an invalid length.