last executing test programs:

8.916945707s ago: executing program 2 (id=1297):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r2, 0x4)

7.79559711s ago: executing program 2 (id=1298):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x1000000000000, r0, 0xb)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)}, 0x80d1)

7.560560535s ago: executing program 2 (id=1302):
r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5932, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000017000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18, 0xfffffffd}, [@ldst={0x4, 0x3, 0x3, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xb7, &(0x7f0000000300)=""/183, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0xb, 0x61, 0x1, 0xe2, 0x0, 0x80000000, 0x1000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0xca93a70f2a1c6a92, @perf_config_ext={0xc6f6, 0x8}, 0x10, 0xcaf2, 0x4, 0xd, 0x8000000000000001, 0xffffff7f, 0x3, 0x0, 0xd287}, 0x0, 0x10, r0, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00006c8d0000002200000000004a1164000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020066cc8fd848b179c713751c0709fb842e23000b", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000c40)=[{0x1, 0x5, 0x8, 0x9}, {0x0, 0x5, 0xf, 0x8}, {0x0, 0x5, 0xd, 0x6}, {0x0, 0x3, 0xd, 0x6}], 0x10, 0x3e5d}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4001, 0x3a0, 0x5, 0x0, r3, 0x2afac330, '\x00', r1}, 0x50)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x20000000, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x4d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x8)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r7, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0)

6.708910952s ago: executing program 0 (id=1306):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000140))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.666622883s ago: executing program 3 (id=1308):
socket$kcm(0x10, 0x2, 0x2)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(0x3)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x5a4, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

6.155686764s ago: executing program 3 (id=1310):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x34}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2d7, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)}, 0x10)
sendmsg$inet(r0, 0x0, 0x4000000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xfd, &(0x7f0000000200)=[{&(0x7f0000002940)="2000fd0020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)

5.896663569s ago: executing program 3 (id=1311):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB='E'], 0x31)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x2000000)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
recvmsg(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x2000)
r5 = socket$kcm(0x10, 0x2, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc6004000e000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x1000, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x13, 0x0, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xa, 0x8000000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r10 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x7, 0x0, 0x2a, 0x8, 0x0, 0x8, 0x908, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x1a040, 0x9, 0xa79, 0x9, 0x7fffffff, 0xfd, 0xfff8, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r9, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af36504000100381c1500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000))

5.660441804s ago: executing program 0 (id=1312):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x1000000000000, r0, 0xb)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1}, 0x80d1)

5.564226416s ago: executing program 2 (id=1313):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r0, 0x0, 0x1ff)
openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x50) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, 0x0, 0x0, 0x4}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, 0x0, 0x0, 0x4}, 0x20)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8002, 0xca, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xae04}, 0x0, 0xc, 0xffffffffffffffff, 0x8) (async)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8002, 0xca, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xae04}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000"], 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r9, 0x0, 0x15, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(r9, 0x0, 0x15, 0x0, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000), 0xe) (async)
write$cgroup_subtree(r8, &(0x7f0000000000), 0xe)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/93, 0x5d}], 0x3}, 0x40000040)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000079fbc0000000000062000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
socket$kcm(0x10, 0x2, 0x0)

5.182966364s ago: executing program 1 (id=1315):
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003}, 0x38)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
socket$kcm(0x2b, 0x1, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000080)=""/28, 0x1c}, {0x0}], 0x5}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)}, 0x0)

5.106336525s ago: executing program 0 (id=1316):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x2, 0x1, 0x106)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = socket$kcm(0xa, 0x6, 0x0)
close(r5)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r4, r0, 0x4, r1}, 0x10)
r6 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x20, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002a000b11d25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x35}, 0x0)

4.816518691s ago: executing program 4 (id=1317):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000380), 0x12)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000080)='syzkaller\x00'}, 0x88)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000003d40)={0xffffffffffffffff, &(0x7f0000002d40)="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"}, 0x20)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x4a, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x4c30, 0xc8, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xb, 0xffffffffffffffff, 0x2)
close(r6)
recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x2000)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c200007"], 0xfdef)
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.632292375s ago: executing program 1 (id=1318):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x8000002f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.068839347s ago: executing program 1 (id=1319):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0xfe, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
sendmsg$kcm(r0, 0x0, 0x0)

1.626729166s ago: executing program 4 (id=1320):
socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
socket$kcm(0x1e, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1.572266828s ago: executing program 2 (id=1321):
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(r6, 0x0, 0x101d0)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000040), 0x4)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

1.505525879s ago: executing program 1 (id=1322):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"})

1.499072839s ago: executing program 3 (id=1323):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
r3 = openat$cgroup_ro(r0, &(0x7f00000006c0)='memory.events.local\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x72}, [@jmp={0x5, 0x1, 0x0, 0x1, 0x4, 0x6, 0x8}]}, &(0x7f0000000680)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x2, 0x1, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[r2, r2], 0x0, 0x10, 0x62}, 0x94)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000300))
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffffffdcd5632e5f"], 0x48)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x40, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = getpid()
r10 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x4000000000000005}, 0x0, 0x2000000, 0xaba2}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r9, r10, 0x0, 0x15, &(0x7f0000000280)='\\{\x00'}, 0x12)
perf_event_open(0x0, r9, 0x10, r8, 0x1)
r12 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x5, 0x7, 0xff, 0x0, 0xda46, 0xc000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x11000, 0x9, 0xff, 0x7, 0x4, 0xbaff, 0x401, 0x0, 0x53f, 0x0, 0x4f9}, 0xffffffffffffffff, 0xe, r7, 0x1)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x4, 0x1, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x9a40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x4b6, 0x5}, 0x482, 0x5, 0x2, 0x5, 0x2, 0x2f, 0x800, 0x0, 0x1a2, 0x0, 0x4}, r9, 0xd, r12, 0x1)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r13)
socket$kcm(0x10, 0x2, 0x0)

1.397570921s ago: executing program 4 (id=1324):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r1 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000100)}, 0xf5)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000500)=0xae)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'ip6tnl0\x00', @multicast})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001300)=r3, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x8, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.291107074s ago: executing program 1 (id=1325):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x1a)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0xffffffff80000002, 0x12)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x2, 0x0)
socketpair(0xf, 0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0x15, 0x300, &(0x7f0000001840)="b9ff0307683a268cb8091a998137", 0x0, 0xfe, 0x60000009, 0x20, 0x0, 0x0, 0x0}, 0x50)

1.290462304s ago: executing program 0 (id=1335):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x6, 0x9}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.178728886s ago: executing program 3 (id=1326):
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6)
close(0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d0000000000000000030000000000000003000000040000000300000000000000000000050000"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000540)=""/145, 0x1c, 0x91, 0x1}, 0x28)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x2000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c0000002d006bcd9e3fe3dc6e480000000087033c0000001f03000000000000040014000d000a8a0d0000a122bf8dd3b58dbc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x80000, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffeffffffeffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x20, &(0x7f0000000300)={&(0x7f0000000180)=""/31, 0x1f, 0x0, &(0x7f00000001c0)=""/183, 0xb7}}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xf)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x0, r2}, 0x10)
syz_clone(0x86080000, 0x0, 0x0, &(0x7f0000001f00), &(0x7f0000001f40), 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)

1.043338929s ago: executing program 4 (id=1327):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x1000000000000, r0, 0xb)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1}, 0x80d1)

896.833242ms ago: executing program 0 (id=1328):
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003}, 0x38)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
socket$kcm(0x2b, 0x1, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000080)=""/28, 0x1c}, {0x0}], 0x5}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)}, 0x0)

855.574592ms ago: executing program 1 (id=1329):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x81, 0x100000000}, 0x16380, 0x0, 0x8ffff, 0x8, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, r1, 0x0, 0x12, &(0x7f0000000280)='\\{\x00'}, 0x12)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
socket$kcm(0xf, 0x3, 0x2)
r3 = socket$kcm(0xf, 0x3, 0x2)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

780.771824ms ago: executing program 4 (id=1330):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = getpid()
sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r0]}}], 0x38}, 0x8841)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x102200, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
socket$kcm(0xa, 0x6, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462", 0x26}, {&(0x7f0000000080)="53b1", 0x2}], 0x2}, 0x2000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

556.668979ms ago: executing program 2 (id=1331):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000380), 0x12)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000080)='syzkaller\x00'}, 0x88)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000003d40)={0xffffffffffffffff, &(0x7f0000002d40)="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"}, 0x20)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x4a, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x4c30, 0xc8, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xb, 0xffffffffffffffff, 0x2)
close(r6)
recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x2000)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c200007"], 0xfdef)
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

400.955212ms ago: executing program 0 (id=1332):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0xfe, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
sendmsg$kcm(r0, 0x0, 0x0)

279.600344ms ago: executing program 4 (id=1333):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB='E'], 0x31)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x2000000)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
recvmsg(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x2000)
r5 = socket$kcm(0x10, 0x2, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc6004000e000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x1000, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x13, 0x0, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xa, 0x8000000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r10 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x7, 0x0, 0x2a, 0x8, 0x0, 0x8, 0x908, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x1a040, 0x9, 0xa79, 0x9, 0x7fffffff, 0xfd, 0xfff8, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r9, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af36504000100381c1500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000))

0s ago: executing program 3 (id=1334):
socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
socket$kcm(0x1e, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

elper that may corrupt user memory!
[  111.124971][ T4689] syz.3.117[4689] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.510626][ T4676] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  111.639604][ T4687] netlink: 128 bytes leftover after parsing attributes in process `syz.0.118'.
[  111.667558][ T4687] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  111.917397][ T4693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.119'.
[  112.185877][ T4679] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  113.283155][ T4712] netlink: 56 bytes leftover after parsing attributes in process `syz.2.124'.
[  113.304160][ T4722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.127'.
[  113.379183][ T4712] netlink: 56 bytes leftover after parsing attributes in process `syz.2.124'.
[  113.543284][ T4720] netlink: 'syz.4.126': attribute type 9 has an invalid length.
[  113.628927][ T4720] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.126'.
[  113.975008][ T1236] wlan1: Trigger new scan to find an IBSS to join
[  114.038311][ T4727] netlink: 40 bytes leftover after parsing attributes in process `syz.3.129'.
[  115.001225][ T1236] wlan1: Trigger new scan to find an IBSS to join
[  116.040322][ T4739] netlink: 128 bytes leftover after parsing attributes in process `syz.0.133'.
[  116.067936][ T4739] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  116.261918][ T1236] wlan1: Creating new IBSS network, BSSID de:d3:7f:ff:ad:42
[  117.191131][ T4751] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.135'.
[  117.458587][ T4749] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  117.668070][ T4769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.142'.
[  117.729230][ T4751] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  117.984246][ T4262] wlan1: Trigger new scan to find an IBSS to join
[  118.253565][ T4767] netlink: 'syz.2.141': attribute type 10 has an invalid length.
[  118.335226][ T4767] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.141'.
[  118.532057][ T4776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.143'.
[  118.732993][ T4786] netlink: 56 bytes leftover after parsing attributes in process `syz.0.145'.
[  118.844571][ T4785] netlink: 128 bytes leftover after parsing attributes in process `syz.2.148'.
[  118.930448][ T4785] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  119.019140][ T4786] netlink: 56 bytes leftover after parsing attributes in process `syz.0.145'.
[  119.036534][ T1236] wlan1: Creating new IBSS network, BSSID de:75:71:6b:78:b2
[  119.135997][ T4787] netlink: 'syz.3.146': attribute type 9 has an invalid length.
[  119.191385][ T4787] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.146'.
[  119.947579][    T9] wlan1: Trigger new scan to find an IBSS to join
[  120.433616][ T4812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.154'.
[  120.744010][ T4811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.153'.
[  122.239370][ T4824] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  122.356280][ T4831] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  122.557268][ T4838] __nla_validate_parse: 1 callbacks suppressed
[  122.679471][ T4838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.160'.
[  122.745546][ T4842] netlink: 128 bytes leftover after parsing attributes in process `syz.2.161'.
[  122.849956][ T4842] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  123.254650][ T4847] netlink: 56 bytes leftover after parsing attributes in process `syz.3.162'.
[  123.371527][ T4847] netlink: 56 bytes leftover after parsing attributes in process `syz.3.162'.
[  123.909728][ T4860] netlink: 'syz.2.166': attribute type 9 has an invalid length.
[  124.037764][    T9] wlan1: Trigger new scan to find an IBSS to join
[  124.216894][ T4860] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.166'.
[  124.761566][ T4864] netlink: 40 bytes leftover after parsing attributes in process `syz.1.167'.
[  124.999747][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  125.259389][ T1236] wlan1: Creating new IBSS network, BSSID 76:ad:29:c6:9a:16
[  125.997813][ T4875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.169'.
[  126.297475][ T4874] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.171'.
[  126.368174][ T4874] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  126.395320][ T4874] CPU: 1 PID: 4874 Comm: syz.2.171 Not tainted syzkaller #0
[  126.402831][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  126.412957][ T4874] Call Trace:
[  126.416276][ T4874]  <TASK>
[  126.419434][ T4874]  dump_stack_lvl+0x188/0x250
[  126.424199][ T4874]  ? show_regs_print_info+0x20/0x20
[  126.429454][ T4874]  ? load_image+0x410/0x410
[  126.434032][ T4874]  sysfs_warn_dup+0x8a/0xa0
[  126.438578][ T4874]  sysfs_do_create_link_sd+0xc0/0x110
[  126.443995][ T4874]  device_add+0x83b/0x1050
[  126.448458][ T4874]  wiphy_register+0x1e74/0x2c40
[  126.453385][ T4874]  ? cfg80211_event_work+0x40/0x40
[  126.458863][ T4874]  ? minstrel_ht_alloc+0x807/0x980
[  126.464021][ T4874]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  126.470134][ T4874]  ieee80211_register_hw+0x2a03/0x3a60
[  126.475653][ T4874]  ? ieee80211_register_hw+0xac1/0x3a60
[  126.481347][ T4874]  ? ieee80211_tasklet_handler+0x20/0x20
[  126.487027][ T4874]  ? rcu_is_watching+0x11/0xa0
[  126.491839][ T4874]  ? hrtimer_init+0x10c/0x220
[  126.496661][ T4874]  mac80211_hwsim_new_radio+0x209d/0x4050
[  126.502550][ T4874]  hwsim_new_radio_nl+0xa7d/0xc50
[  126.507650][ T4874]  genl_rcv_msg+0xd0b/0xfa0
[  126.512214][ T4874]  ? genl_bind+0x370/0x370
[  126.516690][ T4874]  ? __dev_queue_xmit+0x1b64/0x2e50
[  126.521933][ T4874]  ? verify_lock_unused+0x140/0x140
[  126.527185][ T4874]  ? perf_trace_lock_acquire+0xed/0x3f0
[  126.532872][ T4874]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  126.539516][ T4874]  ? dev_queue_xmit+0x20/0x20
[  126.544260][ T4874]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  126.550945][ T4874]  netlink_rcv_skb+0x1e9/0x430
[  126.555856][ T4874]  ? genl_bind+0x370/0x370
[  126.560651][ T4874]  ? netlink_ack+0xb10/0xb10
[  126.565578][ T4874]  ? down_read+0x1aa/0x2e0
[  126.570233][ T4874]  genl_rcv+0x24/0x40
[  126.574280][ T4874]  netlink_unicast+0x78f/0x940
[  126.579356][ T4874]  netlink_sendmsg+0x8ba/0xbe0
[  126.584667][ T4874]  ? netlink_getsockopt+0x570/0x570
[  126.590599][ T4874]  ? aa_sock_msg_perm+0x94/0x150
[  126.595780][ T4874]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  126.601474][ T4874]  ? security_socket_sendmsg+0x7c/0xa0
[  126.607807][ T4874]  ? netlink_getsockopt+0x570/0x570
[  126.613152][ T4874]  ____sys_sendmsg+0x5be/0x8f0
[  126.618236][ T4874]  ? __sys_sendmsg_sock+0x30/0x30
[  126.623645][ T4874]  ? import_iovec+0x6f/0xa0
[  126.628782][ T4874]  ___sys_sendmsg+0x236/0x2e0
[  126.633534][ T4874]  ? __sys_sendmsg+0x290/0x290
[  126.638403][ T4874]  __se_sys_sendmsg+0x1b7/0x2a0
[  126.643571][ T4874]  ? __x64_sys_sendmsg+0x80/0x80
[  126.648561][ T4874]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  126.654615][ T4874]  ? lockdep_hardirqs_on+0x94/0x140
[  126.660247][ T4874]  do_syscall_64+0x4c/0xa0
[  126.664731][ T4874]  ? clear_bhb_loop+0x30/0x80
[  126.669459][ T4874]  ? clear_bhb_loop+0x30/0x80
[  126.674294][ T4874]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  126.680702][ T4874] RIP: 0033:0x7f372a6fde59
[  126.685167][ T4874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.704846][ T4874] RSP: 002b:00007f3728935028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  126.713300][ T4874] RAX: ffffffffffffffda RBX: 00007f372a986090 RCX: 00007f372a6fde59
[  126.721331][ T4874] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  126.729443][ T4874] RBP: 00007f372a793e6f R08: 0000000000000000 R09: 0000000000000000
[  126.737718][ T4874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.746066][ T4874] R13: 00007f372a986128 R14: 00007f372a986090 R15: 00007fffbc8c0748
[  126.754364][ T4874]  </TASK>
[  127.118070][ T4885] sock: sock_set_timeout: `syz.3.172' (pid 4885) tries to set negative timeout
[  127.379836][ T4889] netlink: 'syz.3.172': attribute type 39 has an invalid length.
[  127.647446][ T4891] netlink: 40 bytes leftover after parsing attributes in process `syz.4.173'.
[  128.599238][ T4886] netlink: 'syz.0.174': attribute type 10 has an invalid length.
[  128.982297][ T4886] team0: Port device wlan1 added
[  129.247876][ T4901] netlink: 128 bytes leftover after parsing attributes in process `syz.1.176'.
[  129.334315][ T4901] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  129.958569][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  130.578516][ T4919] netlink: 56 bytes leftover after parsing attributes in process `syz.1.182'.
[  130.668585][ T4919] netlink: 56 bytes leftover after parsing attributes in process `syz.1.182'.
[  130.726522][ T4922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.181'.
[  130.741613][ T4924] netlink: 'syz.3.183': attribute type 9 has an invalid length.
[  130.794509][ T4924] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.183'.
[  131.123925][ T4932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.185'.
[  131.159396][ T4248] wlan1: Creating new IBSS network, BSSID 86:d2:b8:39:49:dd
[  132.391820][ T4937] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.186'.
[  132.590160][ T4937] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  132.687589][ T4937] CPU: 0 PID: 4937 Comm: syz.0.186 Not tainted syzkaller #0
[  132.695155][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  132.706213][ T4937] Call Trace:
[  132.709545][ T4937]  <TASK>
[  132.712516][ T4937]  dump_stack_lvl+0x188/0x250
[  132.717681][ T4937]  ? show_regs_print_info+0x20/0x20
[  132.723583][ T4937]  ? load_image+0x410/0x410
[  132.728245][ T4937]  sysfs_warn_dup+0x8a/0xa0
[  132.733343][ T4937]  sysfs_do_create_link_sd+0xc0/0x110
[  132.739109][ T4937]  device_add+0x83b/0x1050
[  132.744494][ T4937]  wiphy_register+0x1e74/0x2c40
[  132.749712][ T4937]  ? cfg80211_event_work+0x40/0x40
[  132.755500][ T4937]  ? minstrel_ht_alloc+0x807/0x980
[  132.760686][ T4937]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  132.766836][ T4937]  ieee80211_register_hw+0x2a03/0x3a60
[  132.772981][ T4937]  ? ieee80211_register_hw+0xac1/0x3a60
[  132.778766][ T4937]  ? ieee80211_tasklet_handler+0x20/0x20
[  132.784824][ T4937]  ? rcu_is_watching+0x11/0xa0
[  132.790417][ T4937]  ? hrtimer_init+0x10c/0x220
[  132.795374][ T4937]  mac80211_hwsim_new_radio+0x209d/0x4050
[  132.801176][ T4937]  hwsim_new_radio_nl+0xa7d/0xc50
[  132.806597][ T4937]  genl_rcv_msg+0xd0b/0xfa0
[  132.811340][ T4937]  ? genl_bind+0x370/0x370
[  132.815908][ T4937]  ? __dev_queue_xmit+0x1b64/0x2e50
[  132.821361][ T4937]  ? verify_lock_unused+0x140/0x140
[  132.826702][ T4937]  ? perf_trace_lock_acquire+0xed/0x3f0
[  132.832472][ T4937]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  132.839216][ T4937]  ? dev_queue_xmit+0x20/0x20
[  132.844020][ T4937]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  132.850577][ T4937]  netlink_rcv_skb+0x1e9/0x430
[  132.855469][ T4937]  ? genl_bind+0x370/0x370
[  132.859930][ T4937]  ? netlink_ack+0xb10/0xb10
[  132.864960][ T4937]  ? down_read+0x1aa/0x2e0
[  132.869428][ T4937]  genl_rcv+0x24/0x40
[  132.873450][ T4937]  netlink_unicast+0x78f/0x940
[  132.878275][ T4937]  netlink_sendmsg+0x8ba/0xbe0
[  132.883121][ T4937]  ? netlink_getsockopt+0x570/0x570
[  132.888990][ T4937]  ? aa_sock_msg_perm+0x94/0x150
[  132.894138][ T4937]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  132.899543][ T4937]  ? security_socket_sendmsg+0x7c/0xa0
[  132.905481][ T4937]  ? netlink_getsockopt+0x570/0x570
[  132.910833][ T4937]  ____sys_sendmsg+0x5be/0x8f0
[  132.915646][ T4937]  ? __sys_sendmsg_sock+0x30/0x30
[  132.920709][ T4937]  ? import_iovec+0x6f/0xa0
[  132.925239][ T4937]  ___sys_sendmsg+0x236/0x2e0
[  132.929952][ T4937]  ? __sys_sendmsg+0x290/0x290
[  132.934885][ T4937]  __se_sys_sendmsg+0x1b7/0x2a0
[  132.940570][ T4937]  ? __x64_sys_sendmsg+0x80/0x80
[  132.945559][ T4937]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  132.951579][ T4937]  ? lockdep_hardirqs_on+0x94/0x140
[  132.956830][ T4937]  do_syscall_64+0x4c/0xa0
[  132.961269][ T4937]  ? clear_bhb_loop+0x30/0x80
[  132.966770][ T4937]  ? clear_bhb_loop+0x30/0x80
[  132.971585][ T4937]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  132.977699][ T4937] RIP: 0033:0x7f6859fd0e59
[  132.982233][ T4937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.002326][ T4937] RSP: 002b:00007f6858208028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  133.011333][ T4937] RAX: ffffffffffffffda RBX: 00007f685a259090 RCX: 00007f6859fd0e59
[  133.019659][ T4937] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  133.027666][ T4937] RBP: 00007f685a066e6f R08: 0000000000000000 R09: 0000000000000000
[  133.035674][ T4937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.043695][ T4937] R13: 00007f685a259128 R14: 00007f685a259090 R15: 00007fff9ee41ed8
[  133.052000][ T4937]  </TASK>
[  133.059028][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  133.065482][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.073096][ T1236] wlan1: Trigger new scan to find an IBSS to join
[  133.542496][ T4949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.191'.
[  134.758733][ T4944] netlink: 'syz.4.189': attribute type 41 has an invalid length.
[  134.806914][ T4951] netlink: 'syz.1.188': attribute type 10 has an invalid length.
[  134.857631][ T4951] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.188'.
[  135.237560][ T4960] netlink: 128 bytes leftover after parsing attributes in process `syz.0.194'.
[  135.247057][ T4960] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  135.841806][ T4977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.197'.
[  135.943249][ T4979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.199'.
[  135.987953][ T4978] netlink: 'syz.0.200': attribute type 9 has an invalid length.
[  136.069924][ T4978] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.200'.
[  136.907515][    T9] wlan1: Trigger new scan to find an IBSS to join
[  137.339380][ T5003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.206'.
[  137.976149][ T5006] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.204'.
[  137.994903][ T4464] wlan1: Creating new IBSS network, BSSID ca:22:02:04:e1:75
[  138.020504][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  138.182591][ T5013] netlink: 8281 bytes leftover after parsing attributes in process `syz.2.209'.
[  138.268251][ T5006] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  138.348293][ T5006] CPU: 1 PID: 5006 Comm: syz.4.204 Not tainted syzkaller #0
[  138.355665][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  138.365930][ T5006] Call Trace:
[  138.369249][ T5006]  <TASK>
[  138.372219][ T5006]  dump_stack_lvl+0x188/0x250
[  138.377126][ T5006]  ? show_regs_print_info+0x20/0x20
[  138.382636][ T5006]  ? load_image+0x410/0x410
[  138.387207][ T5006]  sysfs_warn_dup+0x8a/0xa0
[  138.391752][ T5006]  sysfs_do_create_link_sd+0xc0/0x110
[  138.397201][ T5006]  device_add+0x83b/0x1050
[  138.401661][ T5006]  wiphy_register+0x1e74/0x2c40
[  138.406587][ T5006]  ? cfg80211_event_work+0x40/0x40
[  138.411781][ T5006]  ? minstrel_ht_alloc+0x807/0x980
[  138.416948][ T5006]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  138.423227][ T5006]  ieee80211_register_hw+0x2a03/0x3a60
[  138.428744][ T5006]  ? ieee80211_register_hw+0xac1/0x3a60
[  138.434350][ T5006]  ? ieee80211_tasklet_handler+0x20/0x20
[  138.440043][ T5006]  ? rcu_is_watching+0x11/0xa0
[  138.444859][ T5006]  ? hrtimer_init+0x10c/0x220
[  138.449581][ T5006]  mac80211_hwsim_new_radio+0x209d/0x4050
[  138.455369][ T5006]  hwsim_new_radio_nl+0xa7d/0xc50
[  138.460463][ T5006]  genl_rcv_msg+0xd0b/0xfa0
[  138.465026][ T5006]  ? genl_bind+0x370/0x370
[  138.469590][ T5006]  ? __dev_queue_xmit+0x1b64/0x2e50
[  138.474838][ T5006]  ? verify_lock_unused+0x140/0x140
[  138.480084][ T5006]  ? perf_trace_lock_acquire+0xed/0x3f0
[  138.485680][ T5006]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  138.492526][ T5006]  ? dev_queue_xmit+0x20/0x20
[  138.497255][ T5006]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  138.503668][ T5006]  netlink_rcv_skb+0x1e9/0x430
[  138.509063][ T5006]  ? genl_bind+0x370/0x370
[  138.513538][ T5006]  ? netlink_ack+0xb10/0xb10
[  138.518202][ T5006]  ? down_read+0x1aa/0x2e0
[  138.522669][ T5006]  genl_rcv+0x24/0x40
[  138.526722][ T5006]  netlink_unicast+0x78f/0x940
[  138.531644][ T5006]  netlink_sendmsg+0x8ba/0xbe0
[  138.536478][ T5006]  ? netlink_getsockopt+0x570/0x570
[  138.541818][ T5006]  ? aa_sock_msg_perm+0x94/0x150
[  138.546825][ T5006]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  138.552193][ T5006]  ? security_socket_sendmsg+0x7c/0xa0
[  138.557858][ T5006]  ? netlink_getsockopt+0x570/0x570
[  138.563128][ T5006]  ____sys_sendmsg+0x5be/0x8f0
[  138.568356][ T5006]  ? __sys_sendmsg_sock+0x30/0x30
[  138.573634][ T5006]  ? import_iovec+0x6f/0xa0
[  138.578531][ T5006]  ___sys_sendmsg+0x236/0x2e0
[  138.583271][ T5006]  ? __sys_sendmsg+0x290/0x290
[  138.588151][ T5006]  __se_sys_sendmsg+0x1b7/0x2a0
[  138.593050][ T5006]  ? __x64_sys_sendmsg+0x80/0x80
[  138.598122][ T5006]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  138.604191][ T5006]  ? lockdep_hardirqs_on+0x94/0x140
[  138.609555][ T5006]  do_syscall_64+0x4c/0xa0
[  138.614127][ T5006]  ? clear_bhb_loop+0x30/0x80
[  138.618853][ T5006]  ? clear_bhb_loop+0x30/0x80
[  138.623757][ T5006]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  138.629690][ T5006] RIP: 0033:0x7fc533777e59
[  138.634152][ T5006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.656249][ T5006] RSP: 002b:00007fc5319af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.667097][ T5006] RAX: ffffffffffffffda RBX: 00007fc533a00090 RCX: 00007fc533777e59
[  138.675523][ T5006] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  138.683559][ T5006] RBP: 00007fc53380de6f R08: 0000000000000000 R09: 0000000000000000
[  138.691588][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.699698][ T5006] R13: 00007fc533a00128 R14: 00007fc533a00090 R15: 00007ffc418e3668
[  138.707830][ T5006]  </TASK>
[  140.009929][ T5007] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.207'.
[  140.025323][ T5022] netlink: 128 bytes leftover after parsing attributes in process `syz.0.211'.
[  140.120274][ T5022] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  140.519326][    T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  140.573798][ T5026] netlink: 56 bytes leftover after parsing attributes in process `syz.2.212'.
[  140.591958][ T5032] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.213'.
[  140.637083][ T5026] netlink: 56 bytes leftover after parsing attributes in process `syz.2.212'.
[  140.795209][ T5039] netlink: 'syz.1.215': attribute type 12 has an invalid length.
[  140.944259][ T5039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.215'.
[  141.185485][ T5048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.217'.
[  141.539056][ T4464] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  141.617125][ T5055] netlink: 'syz.2.220': attribute type 9 has an invalid length.
[  141.635786][ T5055] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.220'.
[  142.042108][ T5060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.221'.
[  142.643139][ T5069] netlink: 128 bytes leftover after parsing attributes in process `syz.2.224'.
[  142.693312][ T5069] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  142.836525][ T5070] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  142.960552][ T5070] CPU: 0 PID: 5070 Comm: syz.1.223 Not tainted syzkaller #0
[  142.968122][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  142.979540][ T5070] Call Trace:
[  142.982871][ T5070]  <TASK>
[  142.985842][ T5070]  dump_stack_lvl+0x188/0x250
[  142.990972][ T5070]  ? show_regs_print_info+0x20/0x20
[  142.996218][ T5070]  ? load_image+0x410/0x410
[  143.000771][ T5070]  sysfs_warn_dup+0x8a/0xa0
[  143.005312][ T5070]  sysfs_do_create_link_sd+0xc0/0x110
[  143.010720][ T5070]  device_add+0x83b/0x1050
[  143.015269][ T5070]  wiphy_register+0x1e74/0x2c40
[  143.020364][ T5070]  ? cfg80211_event_work+0x40/0x40
[  143.025507][ T5070]  ? minstrel_ht_alloc+0x807/0x980
[  143.030662][ T5070]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  143.036801][ T5070]  ieee80211_register_hw+0x2a03/0x3a60
[  143.042397][ T5070]  ? ieee80211_register_hw+0xac1/0x3a60
[  143.047993][ T5070]  ? ieee80211_tasklet_handler+0x20/0x20
[  143.053661][ T5070]  ? rcu_is_watching+0x11/0xa0
[  143.058459][ T5070]  ? hrtimer_init+0x10c/0x220
[  143.063612][ T5070]  mac80211_hwsim_new_radio+0x209d/0x4050
[  143.071566][ T5070]  hwsim_new_radio_nl+0xa7d/0xc50
[  143.076740][ T5070]  genl_rcv_msg+0xd0b/0xfa0
[  143.081301][ T5070]  ? genl_bind+0x370/0x370
[  143.085755][ T5070]  ? __dev_queue_xmit+0x1b64/0x2e50
[  143.091414][ T5070]  ? verify_lock_unused+0x140/0x140
[  143.096647][ T5070]  ? perf_trace_lock_acquire+0xed/0x3f0
[  143.102321][ T5070]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  143.108941][ T5070]  ? dev_queue_xmit+0x20/0x20
[  143.113642][ T5070]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  143.120027][ T5070]  netlink_rcv_skb+0x1e9/0x430
[  143.124815][ T5070]  ? genl_bind+0x370/0x370
[  143.129258][ T5070]  ? netlink_ack+0xb10/0xb10
[  143.133895][ T5070]  ? down_read+0x1aa/0x2e0
[  143.138830][ T5070]  genl_rcv+0x24/0x40
[  143.143001][ T5070]  netlink_unicast+0x78f/0x940
[  143.147818][ T5070]  netlink_sendmsg+0x8ba/0xbe0
[  143.152628][ T5070]  ? netlink_getsockopt+0x570/0x570
[  143.157866][ T5070]  ? aa_sock_msg_perm+0x94/0x150
[  143.162832][ T5070]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  143.168344][ T5070]  ? security_socket_sendmsg+0x7c/0xa0
[  143.173843][ T5070]  ? netlink_getsockopt+0x570/0x570
[  143.179613][ T5070]  ____sys_sendmsg+0x5be/0x8f0
[  143.185151][ T5070]  ? __sys_sendmsg_sock+0x30/0x30
[  143.190227][ T5070]  ? import_iovec+0x6f/0xa0
[  143.194777][ T5070]  ___sys_sendmsg+0x236/0x2e0
[  143.199495][ T5070]  ? __sys_sendmsg+0x290/0x290
[  143.204418][ T5070]  __se_sys_sendmsg+0x1b7/0x2a0
[  143.209312][ T5070]  ? __x64_sys_sendmsg+0x80/0x80
[  143.214280][ T5070]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  143.220389][ T5070]  ? lockdep_hardirqs_on+0x94/0x140
[  143.225612][ T5070]  do_syscall_64+0x4c/0xa0
[  143.230053][ T5070]  ? clear_bhb_loop+0x30/0x80
[  143.234773][ T5070]  ? clear_bhb_loop+0x30/0x80
[  143.239477][ T5070]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  143.245601][ T5070] RIP: 0033:0x7f479445ee59
[  143.250065][ T5070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.269923][ T5070] RSP: 002b:00007f47926b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  143.278467][ T5070] RAX: ffffffffffffffda RBX: 00007f47946e6fa0 RCX: 00007f479445ee59
[  143.286488][ T5070] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  143.294700][ T5070] RBP: 00007f47944f4e6f R08: 0000000000000000 R09: 0000000000000000
[  143.302791][ T5070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.310785][ T5070] R13: 00007f47946e7038 R14: 00007f47946e6fa0 R15: 00007ffcf543e1b8
[  143.318800][ T5070]  </TASK>
[  145.027416][ T5076] netlink: 'syz.3.225': attribute type 10 has an invalid length.
[  145.035272][ T5076] __nla_validate_parse: 2 callbacks suppressed
[  145.035290][ T5076] netlink: 5385 bytes leftover after parsing attributes in process `syz.3.225'.
[  145.870182][ T5100] netlink: 56 bytes leftover after parsing attributes in process `syz.2.230'.
[  145.913365][ T5096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.232'.
[  145.959118][ T5100] netlink: 56 bytes leftover after parsing attributes in process `syz.2.230'.
[  146.751092][ T5111] netlink: 'syz.4.236': attribute type 9 has an invalid length.
[  146.817938][ T5111] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.236'.
[  147.264567][ T5118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.238'.
[  147.519036][ T5122] netlink: 128 bytes leftover after parsing attributes in process `syz.1.239'.
[  147.589223][ T5122] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  147.968885][ T5128] netlink: 'syz.0.241': attribute type 10 has an invalid length.
[  148.087636][ T5128] netlink: 5385 bytes leftover after parsing attributes in process `syz.0.241'.
[  149.134757][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  150.131968][ T5143] netlink: 128 bytes leftover after parsing attributes in process `syz.1.245'.
[  150.205079][ T5143] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  150.569040][ T4464] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  151.136710][ T5162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.249'.
[  152.536270][ T5174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.253'.
[  152.623835][ T5171] netlink: 'syz.0.252': attribute type 9 has an invalid length.
[  152.817668][ T5171] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.252'.
[  153.100692][ T5178] netlink: 128 bytes leftover after parsing attributes in process `syz.1.254'.
[  153.207879][ T5178] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  153.478368][ T5180] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  154.095449][ T5189] netlink: 'syz.1.256': attribute type 10 has an invalid length.
[  154.179954][ T5189] netlink: 5385 bytes leftover after parsing attributes in process `syz.1.256'.
[  154.979825][ T5206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.265'.
[  155.377201][    T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  155.574677][ T5211] netlink: 56 bytes leftover after parsing attributes in process `syz.1.266'.
[  155.669539][ T5211] netlink: 56 bytes leftover after parsing attributes in process `syz.1.266'.
[  155.904856][ T5221] netlink: 'syz.4.268': attribute type 9 has an invalid length.
[  155.964102][ T1236] wlan1: Trigger new scan to find an IBSS to join
[  155.975076][ T5221] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.268'.
[  156.394915][    T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  156.774868][ T5224] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  157.244851][ T5227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.270'.
[  157.486158][ T5236] netlink: 128 bytes leftover after parsing attributes in process `syz.1.273'.
[  157.570170][ T5236] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  158.588180][ T5256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.279'.
[  158.920162][ T1236] wlan1: Trigger new scan to find an IBSS to join
[  159.309857][ T5265] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  159.550603][ T5272] netlink: 'syz.1.283': attribute type 9 has an invalid length.
[  159.579943][ T5272] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.283'.
[  159.906172][ T5283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.284'.
[  160.483619][ T5295] netlink: 128 bytes leftover after parsing attributes in process `syz.2.290'.
[  160.523742][ T5295] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  160.669636][ T5294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.289'.
[  161.366291][ T5315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.295'.
[  161.948401][  T144] wlan1: Trigger new scan to find an IBSS to join
[  162.136804][ T5318] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  162.665472][ T5334] netlink: 128 bytes leftover after parsing attributes in process `syz.2.304'.
[  162.693440][ T5335] netlink: 'syz.3.303': attribute type 9 has an invalid length.
[  162.719666][ T5335] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.303'.
[  162.753818][ T5334] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  163.040333][ T5337] netlink: 56 bytes leftover after parsing attributes in process `syz.0.300'.
[  163.187706][ T5337] netlink: 56 bytes leftover after parsing attributes in process `syz.0.300'.
[  163.300050][ T5347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.306'.
[  163.599738][ T5346] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.305'.
[  163.794685][ T5355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.308'.
[  164.918322][  T154] wlan1: Trigger new scan to find an IBSS to join
[  165.530098][ T5361] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  166.567861][ T5384] netlink: 128 bytes leftover after parsing attributes in process `syz.4.316'.
[  166.699065][ T5384] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  166.932671][ T5391] netlink: 'syz.3.319': attribute type 9 has an invalid length.
[  166.948827][ T5392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'.
[  166.977199][ T5394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.320'.
[  167.057024][ T5391] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.319'.
[  167.298150][ T5399] netlink: 56 bytes leftover after parsing attributes in process `syz.2.321'.
[  167.372703][ T5399] netlink: 56 bytes leftover after parsing attributes in process `syz.2.321'.
[  167.949165][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  168.907703][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  170.769327][  T155] wlan1: Creating new IBSS network, BSSID da:f6:23:39:0f:c6
[  171.363707][ T5424] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  172.006119][ T5437] netlink: 128 bytes leftover after parsing attributes in process `syz.2.332'.
[  172.080575][ T5437] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  172.521430][ T5444] netlink: 40 bytes leftover after parsing attributes in process `syz.3.333'.
[  172.787249][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  172.978049][ T5453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.335'.
[  173.882522][ T5460] netlink: 56 bytes leftover after parsing attributes in process `syz.0.337'.
[  173.947459][  T155] wlan1: Trigger new scan to find an IBSS to join
[  174.085492][ T5460] netlink: 56 bytes leftover after parsing attributes in process `syz.0.337'.
[  174.201966][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  175.843753][ T5477] netlink: 'syz.4.341': attribute type 9 has an invalid length.
[  175.890931][ T5475] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  176.060742][ T5477] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.341'.
[  176.565300][ T5487] netlink: 128 bytes leftover after parsing attributes in process `syz.0.345'.
[  176.683779][ T5487] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  177.249935][ T5502] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.349'.
[  177.525730][ T5508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.352'.
[  177.962794][    T9] wlan1: Trigger new scan to find an IBSS to join
[  178.273784][ T5512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.353'.
[  178.826870][ T5524] netlink: 56 bytes leftover after parsing attributes in process `syz.0.355'.
[  178.860816][ T5523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.354'.
[  179.012625][ T5524] netlink: 56 bytes leftover after parsing attributes in process `syz.0.355'.
[  180.853572][ T5543] netlink: 128 bytes leftover after parsing attributes in process `syz.0.361'.
[  181.011623][ T5543] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  181.830995][ T5555] netlink: 'syz.4.363': attribute type 9 has an invalid length.
[  181.947505][  T154] wlan1: Trigger new scan to find an IBSS to join
[  182.047630][ T5555] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.363'.
[  182.297562][ T5563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.367'.
[  182.699464][  T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  183.323368][ T5568] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  183.675575][ T5577] netlink: 56 bytes leftover after parsing attributes in process `syz.0.371'.
[  183.696569][ T5577] netlink: 56 bytes leftover after parsing attributes in process `syz.0.371'.
[  183.909473][ T5585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.370'.
[  184.027564][ T5575] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.369'.
[  184.764129][ T5592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.374'.
[  185.202040][ T5599] netlink: 128 bytes leftover after parsing attributes in process `syz.0.376'.
[  185.257789][ T5599] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  185.947999][  T155] wlan1: Trigger new scan to find an IBSS to join
[  186.131694][ T5610] netlink: 'syz.0.381': attribute type 9 has an invalid length.
[  186.245680][ T5610] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.381'.
[  187.927550][    T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  189.150805][ T5624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.385'.
[  189.344084][ T5622] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  189.612891][ T5631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.388'.
[  190.251739][ T5638] netlink: 56 bytes leftover after parsing attributes in process `syz.1.387'.
[  190.289236][ T5639] netlink: 128 bytes leftover after parsing attributes in process `syz.4.390'.
[  190.431667][ T5639] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  191.788795][ T5638] netlink: 56 bytes leftover after parsing attributes in process `syz.1.387'.
[  191.890644][ T5652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.394'.
[  191.950700][ T4262] wlan1: Trigger new scan to find an IBSS to join
[  192.058920][ T5661] netlink: 'syz.4.396': attribute type 9 has an invalid length.
[  192.219404][ T5661] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.396'.
[  193.350734][ T5671] netlink: 128 bytes leftover after parsing attributes in process `syz.1.398'.
[  193.494569][ T5671] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  194.018221][ T5674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.400'.
[  194.203710][ T5685] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  194.362877][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.370264][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.388338][ T5687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.404'.
[  194.839402][ T5692] netlink: 128 bytes leftover after parsing attributes in process `syz.1.406'.
[  195.032674][ T5692] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  195.509688][ T5702] netlink: 'syz.2.407': attribute type 12 has an invalid length.
[  195.635583][ T5702] netlink: 132 bytes leftover after parsing attributes in process `syz.2.407'.
[  196.371476][ T5718] netlink: 'syz.3.413': attribute type 9 has an invalid length.
[  196.427404][ T4273] Bluetooth: hci1: command 0x0406 tx timeout
[  196.437223][ T4273] Bluetooth: hci0: command 0x0406 tx timeout
[  196.467434][ T4273] Bluetooth: hci3: command 0x0406 tx timeout
[  196.473728][ T4273] Bluetooth: hci2: command 0x0406 tx timeout
[  196.487502][ T4273] Bluetooth: hci4: command 0x0406 tx timeout
[  196.575041][ T5718] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.413'.
[  197.001656][ T4262] wlan1: Trigger new scan to find an IBSS to join
[  197.008382][  T155] wlan1: Trigger new scan to find an IBSS to join
[  197.107722][ T5724] netlink: 128 bytes leftover after parsing attributes in process `syz.0.415'.
[  197.187526][ T5724] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  197.411471][ T5732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.418'.
[  197.699654][ T5735] netlink: 40 bytes leftover after parsing attributes in process `syz.4.419'.
[  197.997655][ T5743] netlink: 128 bytes leftover after parsing attributes in process `syz.2.422'.
[  198.007031][ T5743] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  198.504489][  T154] wlan1: Creating new IBSS network, BSSID c2:07:48:b7:4f:d8
[  198.528640][ T5750] netlink: 128 bytes leftover after parsing attributes in process `syz.0.420'.
[  198.667395][ T5750] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  199.306905][ T5763] netlink: 'syz.1.426': attribute type 16 has an invalid length.
[  199.397219][ T5763] netlink: 164 bytes leftover after parsing attributes in process `syz.1.426'.
[  199.614482][ T5762] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  200.008982][ T5771] netlink: 56 bytes leftover after parsing attributes in process `syz.3.429'.
[  200.189225][ T5771] netlink: 56 bytes leftover after parsing attributes in process `syz.3.429'.
[  200.212274][ T5780] netlink: 'syz.2.433': attribute type 9 has an invalid length.
[  200.265078][ T5780] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.433'.
[  200.285061][ T5781] netlink: 40 bytes leftover after parsing attributes in process `syz.4.432'.
[  200.827730][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  201.062857][  T154] wlan1: Trigger new scan to find an IBSS to join
[  201.567427][ T5784] netlink: 128 bytes leftover after parsing attributes in process `syz.1.435'.
[  201.667323][ T5784] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  201.947729][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  201.956655][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  202.173058][  T155] wlan1: Creating new IBSS network, BSSID 82:70:4d:4c:58:e3
[  202.736538][ T5804] netlink: 56 bytes leftover after parsing attributes in process `syz.2.449'.
[  202.857395][ T5804] netlink: 56 bytes leftover after parsing attributes in process `syz.2.449'.
[  203.627568][ T5807] netlink: 14 bytes leftover after parsing attributes in process `syz.3.439'.
[  204.026590][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.394381][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.485169][ T5807] bond0 (unregistering): Released all slaves
[  204.949160][ T5823] netlink: 128 bytes leftover after parsing attributes in process `syz.4.444'.
[  204.977408][ T5829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.446'.
[  205.028871][ T5823] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  205.148963][ T5825] netlink: 'syz.1.445': attribute type 12 has an invalid length.
[  205.157194][ T5825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.445'.
[  205.248333][ T5826] netlink: 'syz.1.445': attribute type 21 has an invalid length.
[  205.256295][ T5826] netlink: 156 bytes leftover after parsing attributes in process `syz.1.445'.
[  206.142875][ T5843] netlink: 'syz.3.450': attribute type 9 has an invalid length.
[  206.277632][ T5843] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.450'.
[  207.037493][  T155] wlan1: Trigger new scan to find an IBSS to join
[  207.049013][ T5852] netlink: 128 bytes leftover after parsing attributes in process `syz.2.451'.
[  207.070393][ T5852] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  207.910657][ T5863] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.453'.
[  208.048865][ T5862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.452'.
[  208.199738][ T4262] wlan1: Creating new IBSS network, BSSID f6:8b:52:f4:a1:64
[  211.235978][ T5892] netlink: 128 bytes leftover after parsing attributes in process `syz.1.465'.
[  211.413209][ T5892] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  213.829542][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  215.316707][ T5943] netlink: 128 bytes leftover after parsing attributes in process `syz.0.480'.
[  215.414847][ T5943] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  215.625964][ T5946] netlink: 56 bytes leftover after parsing attributes in process `syz.3.478'.
[  216.008419][ T5946] netlink: 56 bytes leftover after parsing attributes in process `syz.3.478'.
[  216.564191][ T5962] netlink: 40 bytes leftover after parsing attributes in process `syz.4.485'.
[  217.025767][ T5968] netlink: 'syz.3.488': attribute type 16 has an invalid length.
[  217.072078][ T5969] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  217.257494][ T5968] netlink: 164 bytes leftover after parsing attributes in process `syz.3.488'.
[  217.744942][ T5976] netlink: 'syz.2.489': attribute type 3 has an invalid length.
[  217.969045][ T5976] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.489'.
[  218.164547][ T5979] netlink: 17259 bytes leftover after parsing attributes in process `syz.0.490'.
[  218.880906][ T5996] netlink: 128 bytes leftover after parsing attributes in process `syz.0.496'.
[  218.924074][ T5996] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  218.952243][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  219.653285][ T6009] netlink: 56 bytes leftover after parsing attributes in process `syz.4.499'.
[  220.008087][ T6019] device syzkaller0 entered promiscuous mode
[  220.015856][ T6009] netlink: 56 bytes leftover after parsing attributes in process `syz.4.499'.
[  220.252748][  T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  220.714807][ T6027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.505'.
[  220.927416][  T155] wlan1: Trigger new scan to find an IBSS to join
[  221.565789][ T6031] netlink: 128 bytes leftover after parsing attributes in process `syz.2.506'.
[  221.640868][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  222.294380][ T6031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  222.593896][ T6037] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  222.775470][ T6056] netlink: 'syz.0.512': attribute type 9 has an invalid length.
[  222.807576][ T6056] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.512'.
[  224.012209][ T6068] netlink: 56 bytes leftover after parsing attributes in process `syz.4.517'.
[  224.108192][ T6074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.519'.
[  224.269811][ T6068] netlink: 56 bytes leftover after parsing attributes in process `syz.4.517'.
[  224.990956][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  224.999095][    T9] wlan1: Trigger new scan to find an IBSS to join
[  225.950541][ T6084] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  226.424754][    T9] wlan1: Creating new IBSS network, BSSID da:15:16:25:fd:28
[  226.699770][ T6097] netlink: 14 bytes leftover after parsing attributes in process `syz.4.525'.
[  227.312512][ T6097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.494214][ T6097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.653476][ T6097] bond0 (unregistering): Released all slaves
[  228.907863][  T144] wlan1: Trigger new scan to find an IBSS to join
[  229.880156][    T9] wlan1: Creating new IBSS network, BSSID 42:ce:8a:e0:40:ed
[  229.947621][  T154] wlan1: Trigger new scan to find an IBSS to join
[  231.365652][ T6104] netlink: 'syz.3.528': attribute type 9 has an invalid length.
[  231.404558][ T6108] netlink: 128 bytes leftover after parsing attributes in process `syz.1.530'.
[  231.426346][ T6104] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.528'.
[  231.507093][ T6108] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  231.812103][ T6122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.533'.
[  232.262876][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  232.369115][ T6126] netlink: 56 bytes leftover after parsing attributes in process `syz.4.534'.
[  232.579941][ T6126] netlink: 56 bytes leftover after parsing attributes in process `syz.4.534'.
[  232.968379][    T9] wlan1: Trigger new scan to find an IBSS to join
[  233.490828][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  233.588598][ T6154] netlink: 128 bytes leftover after parsing attributes in process `syz.2.544'.
[  233.652725][ T6154] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  234.167444][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  234.347854][    T9] wlan1: Creating new IBSS network, BSSID ee:cd:fc:f5:37:2a
[  234.801939][ T6173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.549'.
[  235.119704][ T6172] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  235.566965][ T6178] netlink: 56 bytes leftover after parsing attributes in process `syz.1.550'.
[  235.579800][ T6190] netlink: 'syz.2.553': attribute type 9 has an invalid length.
[  235.667594][ T6190] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.553'.
[  235.687452][ T6178] netlink: 56 bytes leftover after parsing attributes in process `syz.1.550'.
[  236.174848][ T6200] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  236.987673][ T4262] wlan1: Trigger new scan to find an IBSS to join
[  237.077837][ T6215] __nla_validate_parse: 1 callbacks suppressed
[  237.077879][ T6215] netlink: 128 bytes leftover after parsing attributes in process `syz.0.561'.
[  237.217287][ T6215] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  237.978031][ T6221] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  238.997542][ T4248] wlan1: Creating new IBSS network, BSSID 4e:ab:8b:b8:70:22
[  239.252420][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.565'.
[  239.447539][ T6229] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  240.671345][ T6245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.569'.
[  241.146960][ T6252] netlink: 'syz.2.571': attribute type 9 has an invalid length.
[  241.205523][ T6252] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.571'.
[  241.357958][ T6257] netlink: 128 bytes leftover after parsing attributes in process `syz.4.572'.
[  241.367092][ T6257] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  241.957500][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  241.964227][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  244.856299][ T6303] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.585'.
[  245.228092][ T6308] netlink: 56 bytes leftover after parsing attributes in process `syz.0.586'.
[  245.500538][ T6304] netlink: 'syz.3.584': attribute type 3 has an invalid length.
[  245.508407][ T6308] netlink: 56 bytes leftover after parsing attributes in process `syz.0.586'.
[  245.757723][ T6304] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.584'.
[  245.961863][  T144] wlan1: Trigger new scan to find an IBSS to join
[  245.962575][  T155] wlan1: Trigger new scan to find an IBSS to join
[  246.111400][ T6312] netlink: 'syz.4.587': attribute type 9 has an invalid length.
[  246.197708][ T6312] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.587'.
[  246.609190][ T6315] netlink: 128 bytes leftover after parsing attributes in process `syz.0.589'.
[  246.687582][ T6315] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  246.964025][ T4248] wlan1: Creating new IBSS network, BSSID 06:46:ef:03:92:4b
[  247.009539][ T4248] wlan1: Creating new IBSS network, BSSID 86:ae:1f:f5:52:9e
[  247.858219][ T6335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.593'.
[  248.282805][ T6327] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  249.985693][ T6342] netlink: 17259 bytes leftover after parsing attributes in process `syz.4.596'.
[  250.023440][ T6346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.607'.
[  250.486927][ T6351] device syzkaller0 entered promiscuous mode
[  251.000563][  T154] wlan1: Trigger new scan to find an IBSS to join
[  253.550637][ T6367] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.598'.
[  253.620956][ T6368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.610'.
[  254.405845][ T6377] netlink: 'syz.1.601': attribute type 3 has an invalid length.
[  254.533630][ T6377] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.601'.
[  254.622616][ T6380] netlink: 'syz.4.602': attribute type 9 has an invalid length.
[  254.727410][ T6380] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.602'.
[  255.186409][ T6387] netlink: 128 bytes leftover after parsing attributes in process `syz.1.605'.
[  255.198915][ T6387] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  256.058899][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  256.065306][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  256.329344][ T6401] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.612'.
[  256.442939][  T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  256.477859][ T6401] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  256.486393][ T6401] CPU: 1 PID: 6401 Comm: syz.0.612 Not tainted syzkaller #0
[  256.493802][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  256.503916][ T6401] Call Trace:
[  256.507235][ T6401]  <TASK>
[  256.510235][ T6401]  dump_stack_lvl+0x188/0x250
[  256.515025][ T6401]  ? show_regs_print_info+0x20/0x20
[  256.520291][ T6401]  ? load_image+0x410/0x410
[  256.524860][ T6401]  sysfs_warn_dup+0x8a/0xa0
[  256.529403][ T6401]  sysfs_do_create_link_sd+0xc0/0x110
[  256.535045][ T6401]  device_add+0x83b/0x1050
[  256.539549][ T6401]  wiphy_register+0x1e74/0x2c40
[  256.544852][ T6401]  ? cfg80211_event_work+0x40/0x40
[  256.550119][ T6401]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  256.556354][ T6401]  ? ieee80211_register_hw+0x2964/0x3a60
[  256.562424][ T6401]  ieee80211_register_hw+0x2a03/0x3a60
[  256.567980][ T6401]  ? ieee80211_register_hw+0xac1/0x3a60
[  256.573974][ T6401]  ? ieee80211_tasklet_handler+0x20/0x20
[  256.579935][ T6401]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  256.586170][ T6401]  mac80211_hwsim_new_radio+0x209d/0x4050
[  256.592072][ T6401]  hwsim_new_radio_nl+0xa7d/0xc50
[  256.597277][ T6401]  genl_rcv_msg+0xd0b/0xfa0
[  256.602103][ T6401]  ? genl_bind+0x370/0x370
[  256.607234][ T6401]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  256.613289][ T6401]  ? lock_chain_count+0x20/0x20
[  256.618215][ T6401]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  256.624458][ T6401]  ? lockdep_hardirqs_on+0x94/0x140
[  256.629809][ T6401]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  256.636886][ T6401]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  256.643411][ T6401]  ? lock_acquire+0x208/0x400
[  256.648254][ T6401]  netlink_rcv_skb+0x1e9/0x430
[  256.653304][ T6401]  ? genl_bind+0x370/0x370
[  256.657788][ T6401]  ? netlink_ack+0xb10/0xb10
[  256.662453][ T6401]  ? down_read+0x1aa/0x2e0
[  256.666926][ T6401]  genl_rcv+0x24/0x40
[  256.670972][ T6401]  netlink_unicast+0x78f/0x940
[  256.675801][ T6401]  netlink_sendmsg+0x8ba/0xbe0
[  256.680637][ T6401]  ? netlink_getsockopt+0x570/0x570
[  256.686002][ T6401]  ? netlink_getsockopt+0x570/0x570
[  256.691264][ T6401]  ____sys_sendmsg+0x5be/0x8f0
[  256.696103][ T6401]  ? __sys_sendmsg_sock+0x30/0x30
[  256.701278][ T6401]  ? import_iovec+0x6f/0xa0
[  256.705924][ T6401]  ___sys_sendmsg+0x236/0x2e0
[  256.710662][ T6401]  ? __sys_sendmsg+0x290/0x290
[  256.715490][ T6401]  ? rcu_lock_release+0x9/0x20
[  256.720442][ T6401]  __se_sys_sendmsg+0x1b7/0x2a0
[  256.725536][ T6401]  ? __x64_sys_sendmsg+0x80/0x80
[  256.730536][ T6401]  ? lockdep_hardirqs_on+0x94/0x140
[  256.735826][ T6401]  do_syscall_64+0x4c/0xa0
[  256.740393][ T6401]  ? clear_bhb_loop+0x30/0x80
[  256.745398][ T6401]  ? clear_bhb_loop+0x30/0x80
[  256.750243][ T6401]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  256.756310][ T6401] RIP: 0033:0x7f6859fd0e59
[  256.760780][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.780543][ T6401] RSP: 002b:00007f6858229028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.789023][ T6401] RAX: ffffffffffffffda RBX: 00007f685a258fa0 RCX: 00007f6859fd0e59
[  256.797320][ T6401] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  256.805321][ T6401] RBP: 00007f685a066e6f R08: 0000000000000000 R09: 0000000000000000
[  256.813322][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.821324][ T6401] R13: 00007f685a259038 R14: 00007f685a258fa0 R15: 00007fff9ee41ed8
[  256.829346][ T6401]  </TASK>
[  256.998886][  T155] wlan1: Trigger new scan to find an IBSS to join
[  257.565139][ T6415] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  258.008716][    T9] wlan1: Creating new IBSS network, BSSID 8a:21:6b:3d:9f:4a
[  258.472217][ T6422] device syzkaller0 entered promiscuous mode
[  259.947690][    T9] wlan1: Trigger new scan to find an IBSS to join
[  260.311455][ T6439] netlink: 128 bytes leftover after parsing attributes in process `syz.0.618'.
[  260.374986][ T6439] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  260.563547][ T6444] netlink: 'syz.1.620': attribute type 10 has an invalid length.
[  260.825441][ T6442] netlink: 56 bytes leftover after parsing attributes in process `syz.2.619'.
[  261.188838][ T6444] batman_adv: batadv0: Adding interface: netdevsim0
[  261.195616][ T6444] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.337146][ T6449] netlink: 'syz.0.622': attribute type 9 has an invalid length.
[  261.400481][ T6449] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.622'.
[  261.587729][ T6444] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  262.184407][ T6442] netlink: 56 bytes leftover after parsing attributes in process `syz.2.619'.
[  263.103099][ T6458] netlink: 181252 bytes leftover after parsing attributes in process `syz.4.627'.
[  263.648894][ T6458] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  263.686291][ T6458] CPU: 1 PID: 6458 Comm: syz.4.627 Not tainted syzkaller #0
[  263.693667][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  263.703762][ T6458] Call Trace:
[  263.707087][ T6458]  <TASK>
[  263.710049][ T6458]  dump_stack_lvl+0x188/0x250
[  263.714884][ T6458]  ? show_regs_print_info+0x20/0x20
[  263.720139][ T6458]  ? load_image+0x410/0x410
[  263.725050][ T6458]  sysfs_warn_dup+0x8a/0xa0
[  263.729611][ T6458]  sysfs_do_create_link_sd+0xc0/0x110
[  263.735039][ T6458]  device_add+0x83b/0x1050
[  263.739638][ T6458]  wiphy_register+0x1e74/0x2c40
[  263.744632][ T6458]  ? lock_chain_count+0x20/0x20
[  263.749568][ T6458]  ? cfg80211_event_work+0x40/0x40
[  263.754854][ T6458]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  263.761702][ T6458]  ieee80211_register_hw+0x2a03/0x3a60
[  263.767215][ T6458]  ? ieee80211_register_hw+0xac1/0x3a60
[  263.772820][ T6458]  ? ieee80211_tasklet_handler+0x20/0x20
[  263.778595][ T6458]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  263.784856][ T6458]  mac80211_hwsim_new_radio+0x209d/0x4050
[  263.790748][ T6458]  hwsim_new_radio_nl+0xa7d/0xc50
[  263.795929][ T6458]  genl_rcv_msg+0xd0b/0xfa0
[  263.800495][ T6458]  ? genl_bind+0x370/0x370
[  263.804979][ T6458]  ? verify_lock_unused+0x140/0x140
[  263.810228][ T6458]  ? perf_trace_lock_acquire+0xed/0x3f0
[  263.815825][ T6458]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  263.822460][ T6458]  ? dev_queue_xmit+0x20/0x20
[  263.827327][ T6458]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  263.833720][ T6458]  netlink_rcv_skb+0x1e9/0x430
[  263.838813][ T6458]  ? genl_bind+0x370/0x370
[  263.843389][ T6458]  ? netlink_ack+0xb10/0xb10
[  263.848037][ T6458]  ? down_read+0x1aa/0x2e0
[  263.852593][ T6458]  genl_rcv+0x24/0x40
[  263.856807][ T6458]  netlink_unicast+0x78f/0x940
[  263.861642][ T6458]  netlink_sendmsg+0x8ba/0xbe0
[  263.866482][ T6458]  ? netlink_getsockopt+0x570/0x570
[  263.871743][ T6458]  ? aa_sock_msg_perm+0x94/0x150
[  263.876828][ T6458]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  263.882277][ T6458]  ? security_socket_sendmsg+0x7c/0xa0
[  263.887787][ T6458]  ? netlink_getsockopt+0x570/0x570
[  263.893054][ T6458]  ____sys_sendmsg+0x5be/0x8f0
[  263.897881][ T6458]  ? __sys_sendmsg_sock+0x30/0x30
[  263.903059][ T6458]  ? import_iovec+0x6f/0xa0
[  263.907704][ T6458]  ___sys_sendmsg+0x236/0x2e0
[  263.912442][ T6458]  ? __sys_sendmsg+0x290/0x290
[  263.917303][ T6458]  __se_sys_sendmsg+0x1b7/0x2a0
[  263.922287][ T6458]  ? __x64_sys_sendmsg+0x80/0x80
[  263.927298][ T6458]  ? syscall_enter_from_user_mode+0x2a/0x70
[  263.933242][ T6458]  do_syscall_64+0x4c/0xa0
[  263.937700][ T6458]  ? clear_bhb_loop+0x30/0x80
[  263.942418][ T6458]  ? clear_bhb_loop+0x30/0x80
[  263.947141][ T6458]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  263.953077][ T6458] RIP: 0033:0x7fc533777e59
[  263.957534][ T6458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.977654][ T6458] RSP: 002b:00007fc5319d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.986134][ T6458] RAX: ffffffffffffffda RBX: 00007fc5339fffa0 RCX: 00007fc533777e59
[  263.988241][    T9] wlan1: Trigger new scan to find an IBSS to join
[  263.994135][ T6458] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  263.994152][ T6458] RBP: 00007fc53380de6f R08: 0000000000000000 R09: 0000000000000000
[  263.994168][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  264.024690][ T6458] R13: 00007fc533a00038 R14: 00007fc5339fffa0 R15: 00007ffc418e3668
[  264.032757][ T6458]  </TASK>
[  264.389021][ T6474] netlink: 40 bytes leftover after parsing attributes in process `syz.0.629'.
[  264.395611][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.632'.
[  264.924218][  T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  265.161232][  T155] wlan1: Creating new IBSS network, BSSID ee:5c:ba:7c:7c:78
[  266.000188][ T6493] netlink: 'syz.4.638': attribute type 9 has an invalid length.
[  266.085530][ T6493] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.638'.
[  268.008502][ T6516] netlink: 128 bytes leftover after parsing attributes in process `syz.2.643'.
[  268.172842][ T6516] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  268.416568][ T6523] netlink: 128 bytes leftover after parsing attributes in process `syz.1.645'.
[  268.497610][ T6523] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  268.702526][ T6531] netlink: 128 bytes leftover after parsing attributes in process `syz.4.646'.
[  268.808307][ T6531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  268.852682][ T6530] netlink: 181252 bytes leftover after parsing attributes in process `syz.3.647'.
[  269.506111][ T6530] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  269.567663][ T6530] CPU: 1 PID: 6530 Comm: syz.3.647 Not tainted syzkaller #0
[  269.575023][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  269.585205][ T6530] Call Trace:
[  269.588527][ T6530]  <TASK>
[  269.591495][ T6530]  dump_stack_lvl+0x188/0x250
[  269.596222][ T6530]  ? show_regs_print_info+0x20/0x20
[  269.601469][ T6530]  ? load_image+0x410/0x410
[  269.606120][ T6530]  sysfs_warn_dup+0x8a/0xa0
[  269.610764][ T6530]  sysfs_do_create_link_sd+0xc0/0x110
[  269.616166][ T6530]  device_add+0x83b/0x1050
[  269.620608][ T6530]  wiphy_register+0x1e74/0x2c40
[  269.625498][ T6530]  ? cfg80211_event_work+0x40/0x40
[  269.630640][ T6530]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  269.636743][ T6530]  ieee80211_register_hw+0x2a03/0x3a60
[  269.642278][ T6530]  ? ieee80211_register_hw+0xac1/0x3a60
[  269.647870][ T6530]  ? ieee80211_tasklet_handler+0x20/0x20
[  269.653615][ T6530]  ? rcu_is_watching+0x11/0xa0
[  269.658401][ T6530]  ? hrtimer_init+0x10c/0x220
[  269.663104][ T6530]  mac80211_hwsim_new_radio+0x209d/0x4050
[  269.668864][ T6530]  hwsim_new_radio_nl+0xa7d/0xc50
[  269.673954][ T6530]  genl_rcv_msg+0xd0b/0xfa0
[  269.678591][ T6530]  ? genl_bind+0x370/0x370
[  269.683067][ T6530]  ? mark_lock+0x94/0x320
[  269.687456][ T6530]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  269.693505][ T6530]  ? lock_chain_count+0x20/0x20
[  269.698481][ T6530]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  269.704743][ T6530]  ? lockdep_hardirqs_on+0x94/0x140
[  269.709973][ T6530]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  269.716344][ T6530]  netlink_rcv_skb+0x1e9/0x430
[  269.721136][ T6530]  ? genl_bind+0x370/0x370
[  269.725600][ T6530]  ? netlink_ack+0xb10/0xb10
[  269.730245][ T6530]  ? down_read+0x1aa/0x2e0
[  269.734820][ T6530]  genl_rcv+0x24/0x40
[  269.738835][ T6530]  netlink_unicast+0x78f/0x940
[  269.743647][ T6530]  netlink_sendmsg+0x8ba/0xbe0
[  269.748449][ T6530]  ? netlink_getsockopt+0x570/0x570
[  269.753678][ T6530]  ? aa_sock_msg_perm+0x94/0x150
[  269.758639][ T6530]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  269.764041][ T6530]  ? security_socket_sendmsg+0x7c/0xa0
[  269.769607][ T6530]  ? netlink_getsockopt+0x570/0x570
[  269.774835][ T6530]  ____sys_sendmsg+0x5be/0x8f0
[  269.779814][ T6530]  ? __sys_sendmsg_sock+0x30/0x30
[  269.786271][ T6530]  ? import_iovec+0x6f/0xa0
[  269.791520][ T6530]  ___sys_sendmsg+0x236/0x2e0
[  269.796248][ T6530]  ? __sys_sendmsg+0x290/0x290
[  269.801118][ T6530]  __se_sys_sendmsg+0x1b7/0x2a0
[  269.806039][ T6530]  ? __x64_sys_sendmsg+0x80/0x80
[  269.811001][ T6530]  ? lockdep_hardirqs_on+0x94/0x140
[  269.816242][ T6530]  do_syscall_64+0x4c/0xa0
[  269.820686][ T6530]  ? clear_bhb_loop+0x30/0x80
[  269.825382][ T6530]  ? clear_bhb_loop+0x30/0x80
[  269.830127][ T6530]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  269.836129][ T6530] RIP: 0033:0x7f6049991e59
[  269.840769][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  269.860495][ T6530] RSP: 002b:00007f6047bea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.868945][ T6530] RAX: ffffffffffffffda RBX: 00007f6049c19fa0 RCX: 00007f6049991e59
[  269.876972][ T6530] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  269.885084][ T6530] RBP: 00007f6049a27e6f R08: 0000000000000000 R09: 0000000000000000
[  269.893087][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.901077][ T6530] R13: 00007f6049c1a038 R14: 00007f6049c19fa0 R15: 00007ffc075b7ea8
[  269.909088][ T6530]  </TASK>
[  270.206151][ T6545] netlink: 'syz.1.650': attribute type 10 has an invalid length.
[  270.304968][ T6550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.649'.
[  270.462550][ T6545] 8021q: adding VLAN 0 to HW filter on device team0
[  270.552323][ T6545] bond0: (slave team0): Enslaving as an active interface with an up link
[  270.624001][ T6551] netlink: 'syz.1.650': attribute type 10 has an invalid length.
[  270.688475][ T6551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.650'.
[  270.731629][ T6551] device team0 entered promiscuous mode
[  270.815078][ T6551] device team_slave_0 entered promiscuous mode
[  270.840600][ T6551] device team_slave_1 entered promiscuous mode
[  270.927847][ T6551] bond0: (slave team0): Releasing backup interface
[  271.049810][ T6551] bridge0: port 3(team0) entered blocking state
[  271.106631][ T6551] bridge0: port 3(team0) entered disabled state
[  273.344023][ T6580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.663'.
[  274.787738][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.669'.
[  275.177125][ T6601] netlink: 'syz.1.670': attribute type 10 has an invalid length.
[  275.730411][ T6601] bridge0: port 3(team0) entered disabled state
[  276.148027][ T6601] device team_slave_0 left promiscuous mode
[  276.434299][ T6601] team0 (unregistering): Port device team_slave_0 removed
[  276.457550][ T6601] device team_slave_1 left promiscuous mode
[  276.753024][ T6601] team0 (unregistering): Port device team_slave_1 removed
[  277.041897][  T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  277.057366][ T6600] netlink: 128 bytes leftover after parsing attributes in process `syz.0.667'.
[  277.189150][ T6600] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  277.506556][ T6604] netlink: 'syz.1.670': attribute type 25 has an invalid length.
[  277.563013][ T6604] netlink: 'syz.1.670': attribute type 25 has an invalid length.
[  279.384460][ T6646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.681'.
[  279.443575][ T6642] netlink: 56 bytes leftover after parsing attributes in process `syz.0.690'.
[  279.660192][ T6642] netlink: 56 bytes leftover after parsing attributes in process `syz.0.690'.
[  281.742553][ T6677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.691'.
[  281.967493][ T6679] netlink: 'syz.3.691': attribute type 10 has an invalid length.
[  282.077746][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.085451][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.004748][ T6703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.697'.
[  286.420673][ T6732] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.709'.
[  286.448659][ T6730] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  286.534834][ T6732] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  286.618838][ T6732] CPU: 1 PID: 6732 Comm: syz.2.709 Not tainted syzkaller #0
[  286.626304][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  286.637061][ T6732] Call Trace:
[  286.640393][ T6732]  <TASK>
[  286.643457][ T6732]  dump_stack_lvl+0x188/0x250
[  286.648268][ T6732]  ? show_regs_print_info+0x20/0x20
[  286.653639][ T6732]  ? load_image+0x410/0x410
[  286.658294][ T6732]  sysfs_warn_dup+0x8a/0xa0
[  286.663098][ T6732]  sysfs_do_create_link_sd+0xc0/0x110
[  286.668993][ T6732]  device_add+0x83b/0x1050
[  286.673464][ T6732]  wiphy_register+0x1e74/0x2c40
[  286.678378][ T6732]  ? cfg80211_event_work+0x40/0x40
[  286.683534][ T6732]  ? minstrel_ht_alloc+0x807/0x980
[  286.688724][ T6732]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  286.694846][ T6732]  ieee80211_register_hw+0x2a03/0x3a60
[  286.700356][ T6732]  ? ieee80211_register_hw+0xac1/0x3a60
[  286.705960][ T6732]  ? ieee80211_tasklet_handler+0x20/0x20
[  286.711654][ T6732]  ? rcu_is_watching+0x11/0xa0
[  286.716468][ T6732]  ? hrtimer_init+0x10c/0x220
[  286.721276][ T6732]  mac80211_hwsim_new_radio+0x209d/0x4050
[  286.727070][ T6732]  hwsim_new_radio_nl+0xa7d/0xc50
[  286.732158][ T6732]  genl_rcv_msg+0xd0b/0xfa0
[  286.736719][ T6732]  ? genl_bind+0x370/0x370
[  286.741197][ T6732]  ? __dev_queue_xmit+0x1b64/0x2e50
[  286.746439][ T6732]  ? verify_lock_unused+0x140/0x140
[  286.751683][ T6732]  ? perf_trace_lock_acquire+0xed/0x3f0
[  286.757332][ T6732]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  286.763976][ T6732]  ? dev_queue_xmit+0x20/0x20
[  286.768693][ T6732]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  286.775089][ T6732]  netlink_rcv_skb+0x1e9/0x430
[  286.779995][ T6732]  ? genl_bind+0x370/0x370
[  286.784463][ T6732]  ? netlink_ack+0xb10/0xb10
[  286.789152][ T6732]  ? down_read+0x1aa/0x2e0
[  286.793612][ T6732]  genl_rcv+0x24/0x40
[  286.797652][ T6732]  netlink_unicast+0x78f/0x940
[  286.802509][ T6732]  netlink_sendmsg+0x8ba/0xbe0
[  286.807322][ T6732]  ? netlink_getsockopt+0x570/0x570
[  286.812562][ T6732]  ? aa_sock_msg_perm+0x94/0x150
[  286.817539][ T6732]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  286.822884][ T6732]  ? security_socket_sendmsg+0x7c/0xa0
[  286.828392][ T6732]  ? netlink_getsockopt+0x570/0x570
[  286.833990][ T6732]  ____sys_sendmsg+0x5be/0x8f0
[  286.838931][ T6732]  ? __sys_sendmsg_sock+0x30/0x30
[  286.844038][ T6732]  ? import_iovec+0x6f/0xa0
[  286.848595][ T6732]  ___sys_sendmsg+0x236/0x2e0
[  286.853362][ T6732]  ? __sys_sendmsg+0x290/0x290
[  286.858219][ T6732]  __se_sys_sendmsg+0x1b7/0x2a0
[  286.863114][ T6732]  ? __x64_sys_sendmsg+0x80/0x80
[  286.868086][ T6732]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  286.874136][ T6732]  ? lockdep_hardirqs_on+0x94/0x140
[  286.879387][ T6732]  do_syscall_64+0x4c/0xa0
[  286.883840][ T6732]  ? clear_bhb_loop+0x30/0x80
[  286.888551][ T6732]  ? clear_bhb_loop+0x30/0x80
[  286.893302][ T6732]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  286.899230][ T6732] RIP: 0033:0x7f372a6fde59
[  286.903780][ T6732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.923426][ T6732] RSP: 002b:00007f3728935028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.931892][ T6732] RAX: ffffffffffffffda RBX: 00007f372a986090 RCX: 00007f372a6fde59
[  286.940024][ T6732] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  286.948040][ T6732] RBP: 00007f372a793e6f R08: 0000000000000000 R09: 0000000000000000
[  286.956051][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.964062][ T6732] R13: 00007f372a986128 R14: 00007f372a986090 R15: 00007fffbc8c0748
[  286.972100][ T6732]  </TASK>
[  286.997499][    T9] wlan1: Trigger new scan to find an IBSS to join
[  288.397316][ T6740] netlink: 56 bytes leftover after parsing attributes in process `syz.0.712'.
[  288.430318][ T6740] netlink: 56 bytes leftover after parsing attributes in process `syz.0.712'.
[  288.816788][ T6744] netlink: 40 bytes leftover after parsing attributes in process `syz.4.715'.
[  289.046191][  T144] wlan1: Trigger new scan to find an IBSS to join
[  289.957367][  T154] wlan1: Trigger new scan to find an IBSS to join
[  290.404148][ T6757] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  290.967402][ T6765] netlink: 40 bytes leftover after parsing attributes in process `syz.2.721'.
[  291.204897][ T6769] netlink: 'syz.4.722': attribute type 1 has an invalid length.
[  291.276713][ T6775] netlink: 56 bytes leftover after parsing attributes in process `syz.0.724'.
[  291.297440][ T6769] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.722'.
[  291.351857][ T6775] netlink: 56 bytes leftover after parsing attributes in process `syz.0.724'.
[  291.378619][ T6769] netlink: 'syz.4.722': attribute type 1 has an invalid length.
[  291.947497][  T144] wlan1: Trigger new scan to find an IBSS to join
[  292.049502][ T6784] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.726'.
[  292.141352][ T6778] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  292.178486][ T6784] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  292.207085][ T6784] CPU: 0 PID: 6784 Comm: syz.0.726 Not tainted syzkaller #0
[  292.214531][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  292.224622][ T6784] Call Trace:
[  292.227944][ T6784]  <TASK>
[  292.230912][ T6784]  dump_stack_lvl+0x188/0x250
[  292.235639][ T6784]  ? show_regs_print_info+0x20/0x20
[  292.240921][ T6784]  ? load_image+0x410/0x410
[  292.245565][ T6784]  sysfs_warn_dup+0x8a/0xa0
[  292.250133][ T6784]  sysfs_do_create_link_sd+0xc0/0x110
[  292.255548][ T6784]  device_add+0x83b/0x1050
[  292.260004][ T6784]  wiphy_register+0x1e74/0x2c40
[  292.264921][ T6784]  ? cfg80211_event_work+0x40/0x40
[  292.270073][ T6784]  ? minstrel_ht_alloc+0x807/0x980
[  292.275247][ T6784]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  292.281362][ T6784]  ieee80211_register_hw+0x2a03/0x3a60
[  292.286873][ T6784]  ? ieee80211_register_hw+0xac1/0x3a60
[  292.292481][ T6784]  ? ieee80211_tasklet_handler+0x20/0x20
[  292.298166][ T6784]  ? rcu_is_watching+0x11/0xa0
[  292.302973][ T6784]  ? hrtimer_init+0x10c/0x220
[  292.307702][ T6784]  mac80211_hwsim_new_radio+0x209d/0x4050
[  292.313490][ T6784]  hwsim_new_radio_nl+0xa7d/0xc50
[  292.318572][ T6784]  genl_rcv_msg+0xd0b/0xfa0
[  292.323137][ T6784]  ? genl_bind+0x370/0x370
[  292.327637][ T6784]  ? __dev_queue_xmit+0x1b64/0x2e50
[  292.332877][ T6784]  ? verify_lock_unused+0x140/0x140
[  292.338120][ T6784]  ? perf_trace_lock_acquire+0xed/0x3f0
[  292.343709][ T6784]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  292.350345][ T6784]  ? dev_queue_xmit+0x20/0x20
[  292.355066][ T6784]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  292.361454][ T6784]  netlink_rcv_skb+0x1e9/0x430
[  292.366260][ T6784]  ? genl_bind+0x370/0x370
[  292.370718][ T6784]  ? netlink_ack+0xb10/0xb10
[  292.375368][ T6784]  ? down_read+0x1aa/0x2e0
[  292.380089][ T6784]  genl_rcv+0x24/0x40
[  292.384121][ T6784]  netlink_unicast+0x78f/0x940
[  292.388945][ T6784]  netlink_sendmsg+0x8ba/0xbe0
[  292.393759][ T6784]  ? netlink_getsockopt+0x570/0x570
[  292.398997][ T6784]  ? aa_sock_msg_perm+0x94/0x150
[  292.403969][ T6784]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  292.409289][ T6784]  ? security_socket_sendmsg+0x7c/0xa0
[  292.414794][ T6784]  ? netlink_getsockopt+0x570/0x570
[  292.420049][ T6784]  ____sys_sendmsg+0x5be/0x8f0
[  292.424956][ T6784]  ? __sys_sendmsg_sock+0x30/0x30
[  292.430120][ T6784]  ? import_iovec+0x6f/0xa0
[  292.434679][ T6784]  ___sys_sendmsg+0x236/0x2e0
[  292.439414][ T6784]  ? __sys_sendmsg+0x290/0x290
[  292.444264][ T6784]  __se_sys_sendmsg+0x1b7/0x2a0
[  292.449164][ T6784]  ? __x64_sys_sendmsg+0x80/0x80
[  292.454246][ T6784]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  292.460285][ T6784]  ? lockdep_hardirqs_on+0x94/0x140
[  292.465515][ T6784]  do_syscall_64+0x4c/0xa0
[  292.469966][ T6784]  ? clear_bhb_loop+0x30/0x80
[  292.474675][ T6784]  ? clear_bhb_loop+0x30/0x80
[  292.479528][ T6784]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  292.485579][ T6784] RIP: 0033:0x7f6859fd0e59
[  292.490235][ T6784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.509884][ T6784] RSP: 002b:00007f6858208028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.518346][ T6784] RAX: ffffffffffffffda RBX: 00007f685a259090 RCX: 00007f6859fd0e59
[  292.526362][ T6784] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  292.534402][ T6784] RBP: 00007f685a066e6f R08: 0000000000000000 R09: 0000000000000000
[  292.542421][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.550426][ T6784] R13: 00007f685a259128 R14: 00007f685a259090 R15: 00007fff9ee41ed8
[  292.558453][ T6784]  </TASK>
[  292.908776][  T155] wlan1: Trigger new scan to find an IBSS to join
[  293.052254][ T6783] netlink: 'syz.4.727': attribute type 9 has an invalid length.
[  293.097839][ T6783] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.727'.
[  293.947464][    T9] wlan1: Creating new IBSS network, BSSID ea:17:79:b7:44:52
[  294.138742][ T6795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.730'.
[  294.250959][ T6803] netlink: 'syz.1.733': attribute type 41 has an invalid length.
[  294.590105][ T6814] netlink: 56 bytes leftover after parsing attributes in process `syz.0.736'.
[  294.682338][ T6814] netlink: 56 bytes leftover after parsing attributes in process `syz.0.736'.
[  294.691558][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.737'.
[  294.765283][ T6815] netlink: 'syz.3.739': attribute type 1 has an invalid length.
[  294.810301][ T6815] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.739'.
[  294.830898][ T6815] netlink: 'syz.3.739': attribute type 1 has an invalid length.
[  294.884677][ T6820] netlink: 'syz.4.741': attribute type 9 has an invalid length.
[  294.967513][ T6820] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.741'.
[  295.236907][    T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  295.604103][ T6838] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.742'.
[  295.644122][ T6831] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  295.732821][ T6838] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  295.755441][ T6838] CPU: 1 PID: 6838 Comm: syz.3.742 Not tainted syzkaller #0
[  295.762828][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  295.773044][ T6838] Call Trace:
[  295.776391][ T6838]  <TASK>
[  295.779463][ T6838]  dump_stack_lvl+0x188/0x250
[  295.784226][ T6838]  ? show_regs_print_info+0x20/0x20
[  295.789674][ T6838]  ? load_image+0x410/0x410
[  295.794343][ T6838]  sysfs_warn_dup+0x8a/0xa0
[  295.798928][ T6838]  sysfs_do_create_link_sd+0xc0/0x110
[  295.804377][ T6838]  device_add+0x83b/0x1050
[  295.808886][ T6838]  wiphy_register+0x1e74/0x2c40
[  295.813983][ T6838]  ? cfg80211_event_work+0x40/0x40
[  295.819491][ T6838]  ? minstrel_ht_alloc+0x807/0x980
[  295.824744][ T6838]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  295.830898][ T6838]  ieee80211_register_hw+0x2a03/0x3a60
[  295.836534][ T6838]  ? ieee80211_register_hw+0xac1/0x3a60
[  295.842328][ T6838]  ? ieee80211_tasklet_handler+0x20/0x20
[  295.848150][ T6838]  ? rcu_is_watching+0x11/0xa0
[  295.853096][ T6838]  ? hrtimer_init+0x10c/0x220
[  295.857855][ T6838]  mac80211_hwsim_new_radio+0x209d/0x4050
[  295.863799][ T6838]  hwsim_new_radio_nl+0xa7d/0xc50
[  295.868939][ T6838]  genl_rcv_msg+0xd0b/0xfa0
[  295.873552][ T6838]  ? genl_bind+0x370/0x370
[  295.878067][ T6838]  ? __dev_queue_xmit+0x1b64/0x2e50
[  295.883331][ T6838]  ? verify_lock_unused+0x140/0x140
[  295.888629][ T6838]  ? perf_trace_lock_acquire+0xed/0x3f0
[  295.894278][ T6838]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  295.900955][ T6838]  ? dev_queue_xmit+0x20/0x20
[  295.905694][ T6838]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  295.912148][ T6838]  netlink_rcv_skb+0x1e9/0x430
[  295.917021][ T6838]  ? genl_bind+0x370/0x370
[  295.921554][ T6838]  ? netlink_ack+0xb10/0xb10
[  295.926343][ T6838]  ? down_read+0x1aa/0x2e0
[  295.930834][ T6838]  genl_rcv+0x24/0x40
[  295.934870][ T6838]  netlink_unicast+0x78f/0x940
[  295.939740][ T6838]  netlink_sendmsg+0x8ba/0xbe0
[  295.944610][ T6838]  ? netlink_getsockopt+0x570/0x570
[  295.949883][ T6838]  ? aa_sock_msg_perm+0x94/0x150
[  295.954927][ T6838]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  295.960269][ T6838]  ? security_socket_sendmsg+0x7c/0xa0
[  295.965870][ T6838]  ? netlink_getsockopt+0x570/0x570
[  295.971131][ T6838]  ____sys_sendmsg+0x5be/0x8f0
[  295.972797][  T155] wlan1: Trigger new scan to find an IBSS to join
[  295.976056][ T6838]  ? __sys_sendmsg_sock+0x30/0x30
[  295.987586][ T6838]  ? import_iovec+0x6f/0xa0
[  295.992179][ T6838]  ___sys_sendmsg+0x236/0x2e0
[  295.996963][ T6838]  ? __sys_sendmsg+0x290/0x290
[  296.001927][ T6838]  __se_sys_sendmsg+0x1b7/0x2a0
[  296.006844][ T6838]  ? __x64_sys_sendmsg+0x80/0x80
[  296.011837][ T6838]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  296.017940][ T6838]  ? lockdep_hardirqs_on+0x94/0x140
[  296.023223][ T6838]  do_syscall_64+0x4c/0xa0
[  296.028545][ T6838]  ? clear_bhb_loop+0x30/0x80
[  296.033283][ T6838]  ? clear_bhb_loop+0x30/0x80
[  296.038033][ T6838]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  296.043986][ T6838] RIP: 0033:0x7f6049991e59
[  296.048470][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.068142][ T6838] RSP: 002b:00007f6047bc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  296.076641][ T6838] RAX: ffffffffffffffda RBX: 00007f6049c1a090 RCX: 00007f6049991e59
[  296.084784][ T6838] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  296.092842][ T6838] RBP: 00007f6049a27e6f R08: 0000000000000000 R09: 0000000000000000
[  296.100978][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.109011][ T6838] R13: 00007f6049c1a128 R14: 00007f6049c1a090 R15: 00007ffc075b7ea8
[  296.117113][ T6838]  </TASK>
[  296.363844][  T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  296.671663][ T6850] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.749'.
[  296.728497][ T6846] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  296.788338][ T6850] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  296.840714][ T6850] CPU: 1 PID: 6850 Comm: syz.4.749 Not tainted syzkaller #0
[  296.848095][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  296.858198][ T6850] Call Trace:
[  296.861519][ T6850]  <TASK>
[  296.864484][ T6850]  dump_stack_lvl+0x188/0x250
[  296.869214][ T6850]  ? show_regs_print_info+0x20/0x20
[  296.874460][ T6850]  ? load_image+0x410/0x410
[  296.879028][ T6850]  sysfs_warn_dup+0x8a/0xa0
[  296.883576][ T6850]  sysfs_do_create_link_sd+0xc0/0x110
[  296.888989][ T6850]  device_add+0x83b/0x1050
[  296.893461][ T6850]  wiphy_register+0x1e74/0x2c40
[  296.898372][ T6850]  ? cfg80211_event_work+0x40/0x40
[  296.903572][ T6850]  ? minstrel_ht_alloc+0x807/0x980
[  296.908747][ T6850]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  296.914869][ T6850]  ieee80211_register_hw+0x2a03/0x3a60
[  296.920473][ T6850]  ? ieee80211_register_hw+0xac1/0x3a60
[  296.926176][ T6850]  ? ieee80211_tasklet_handler+0x20/0x20
[  296.931860][ T6850]  ? rcu_is_watching+0x11/0xa0
[  296.936676][ T6850]  ? hrtimer_init+0x10c/0x220
[  296.941443][ T6850]  mac80211_hwsim_new_radio+0x209d/0x4050
[  296.947228][ T6850]  hwsim_new_radio_nl+0xa7d/0xc50
[  296.952356][ T6850]  genl_rcv_msg+0xd0b/0xfa0
[  296.956933][ T6850]  ? genl_bind+0x370/0x370
[  296.961413][ T6850]  ? __dev_queue_xmit+0x1b64/0x2e50
[  296.966828][ T6850]  ? verify_lock_unused+0x140/0x140
[  296.972079][ T6850]  ? perf_trace_lock_acquire+0xed/0x3f0
[  296.977686][ T6850]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  296.984699][ T6850]  ? dev_queue_xmit+0x20/0x20
[  296.989428][ T6850]  ? hwsim_tx_info_frame_received_nl+0xec0/0xec0
[  296.995823][ T6850]  netlink_rcv_skb+0x1e9/0x430
[  297.000642][ T6850]  ? genl_bind+0x370/0x370
[  297.005119][ T6850]  ? netlink_ack+0xb10/0xb10
[  297.009772][ T6850]  ? down_read+0x1aa/0x2e0
[  297.014236][ T6850]  genl_rcv+0x24/0x40
[  297.018264][ T6850]  netlink_unicast+0x78f/0x940
[  297.023087][ T6850]  netlink_sendmsg+0x8ba/0xbe0
[  297.027919][ T6850]  ? netlink_getsockopt+0x570/0x570
[  297.033175][ T6850]  ? aa_sock_msg_perm+0x94/0x150
[  297.038359][ T6850]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  297.043684][ T6850]  ? security_socket_sendmsg+0x7c/0xa0
[  297.049187][ T6850]  ? netlink_getsockopt+0x570/0x570
[  297.054446][ T6850]  ____sys_sendmsg+0x5be/0x8f0
[  297.059266][ T6850]  ? __sys_sendmsg_sock+0x30/0x30
[  297.064361][ T6850]  ? import_iovec+0x6f/0xa0
[  297.068909][ T6850]  ___sys_sendmsg+0x236/0x2e0
[  297.073636][ T6850]  ? __sys_sendmsg+0x290/0x290
[  297.078489][ T6850]  __se_sys_sendmsg+0x1b7/0x2a0
[  297.083394][ T6850]  ? __x64_sys_sendmsg+0x80/0x80
[  297.088378][ T6850]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  297.094422][ T6850]  ? lockdep_hardirqs_on+0x94/0x140
[  297.099672][ T6850]  do_syscall_64+0x4c/0xa0
[  297.104384][ T6850]  ? clear_bhb_loop+0x30/0x80
[  297.109112][ T6850]  ? clear_bhb_loop+0x30/0x80
[  297.113834][ T6850]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  297.119772][ T6850] RIP: 0033:0x7fc533777e59
[  297.124244][ T6850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  297.143899][ T6850] RSP: 002b:00007fc5319af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  297.152346][ T6850] RAX: ffffffffffffffda RBX: 00007fc533a00090 RCX: 00007fc533777e59
[  297.160551][ T6850] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  297.168642][ T6850] RBP: 00007fc53380de6f R08: 0000000000000000 R09: 0000000000000000
[  297.176657][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  297.184667][ T6850] R13: 00007fc533a00128 R14: 00007fc533a00090 R15: 00007ffc418e3668
[  297.192696][ T6850]  </TASK>
[  297.955709][    T9] wlan1: Trigger new scan to find an IBSS to join
[  298.094789][ T6857] netlink: 'syz.2.750': attribute type 41 has an invalid length.
[  298.523614][ T6880] netlink: 'syz.1.757': attribute type 9 has an invalid length.
[  298.637287][ T6880] __nla_validate_parse: 1 callbacks suppressed
[  298.637304][ T6880] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.757'.
[  298.857406][ T6889] 
@0Ù: renamed from bond_slave_1
[  298.997699][  T144] wlan1: Trigger new scan to find an IBSS to join
[  299.334611][ T6895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.765'.
[  299.957800][  T155] wlan1: Trigger new scan to find an IBSS to join
[  300.241028][ T6910] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  301.320463][ T4248] wlan1: Creating new IBSS network, BSSID ca:ac:5a:7c:61:53
[  301.755000][ T6940] netlink: 128 bytes leftover after parsing attributes in process `syz.4.777'.
[  301.804046][ T6940] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  302.045441][ T6948] netlink: 'syz.1.778': attribute type 9 has an invalid length.
[  302.088595][ T6948] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.778'.
[  302.481150][ T6952] netlink: 128 bytes leftover after parsing attributes in process `syz.4.780'.
[  302.558339][ T6952] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  302.686009][ T6955] netlink: 40 bytes leftover after parsing attributes in process `syz.3.779'.
[  303.004879][    T9] wlan1: Trigger new scan to find an IBSS to join
[  303.011627][  T155] wlan1: Trigger new scan to find an IBSS to join
[  303.017731][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  303.889839][ T6977] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  304.665984][ T6996] netlink: 'syz.4.796': attribute type 9 has an invalid length.
[  304.714710][ T6996] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.796'.
[  305.287196][ T7007] netlink: 'syz.1.801': attribute type 9 has an invalid length.
[  305.294962][ T7007] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.801'.
[  305.386995][ T7004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.799'.
[  305.947546][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  305.954159][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  306.220207][ T7021] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  307.281742][ T7043] netlink: 'syz.1.811': attribute type 9 has an invalid length.
[  307.367973][ T7043] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.811'.
[  307.949183][    T9] wlan1: Trigger new scan to find an IBSS to join
[  308.009792][ T7051] netlink: 'syz.2.813': attribute type 3 has an invalid length.
[  308.366466][ T7051] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.813'.
[  308.545335][ T7057] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  308.663951][ T7062] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.818'.
[  308.923533][ T4248] wlan1: Trigger new scan to find an IBSS to join
[  308.926593][ T4464] wlan1: Trigger new scan to find an IBSS to join
[  309.198590][ T7075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.820'.
[  309.217880][    T9] wlan1: Creating new IBSS network, BSSID aa:f4:19:ba:65:23
[  309.812871][ T7077] netlink: 128 bytes leftover after parsing attributes in process `syz.0.822'.
[  309.851951][ T7086] netlink: 'syz.3.826': attribute type 9 has an invalid length.
[  309.920093][ T7077] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  309.928176][ T7086] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.826'.
[  310.872401][ T7103] netlink: 'syz.4.830': attribute type 3 has an invalid length.
[  310.911696][  T144] wlan1: Trigger new scan to find an IBSS to join
[  310.977667][ T7103] netlink: 201336 bytes leftover after parsing attributes in process `syz.4.830'.
[  311.578842][ T7106] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  311.601985][ T7113] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.836'.
[  311.949463][  T144] wlan1: Trigger new scan to find an IBSS to join
[  311.977701][ T7112] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  312.924031][ T7136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.839'.
[  313.094907][ T7122] netlink: 'syz.1.848': attribute type 3 has an invalid length.
[  313.105063][ T7122] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.848'.
[  313.446573][ T7132] netlink: 56 bytes leftover after parsing attributes in process `syz.0.840'.
[  313.598169][ T7132] netlink: 56 bytes leftover after parsing attributes in process `syz.0.840'.
[  313.743420][ T7141] netlink: 'syz.1.843': attribute type 9 has an invalid length.
[  313.802397][ T7141] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.843'.
[  313.961610][ T4464] wlan1: Creating new IBSS network, BSSID 42:00:45:b2:ef:74
[  313.969109][    T9] wlan1: Trigger new scan to find an IBSS to join
[  313.975724][    T9] wlan1: Trigger new scan to find an IBSS to join
[  315.684528][ T7154] netlink: 'syz.1.846': attribute type 3 has an invalid length.
[  315.968767][  T144] wlan1: Trigger new scan to find an IBSS to join
[  316.027327][ T7154] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.846'.
[  316.712210][ T7168] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.852'.
[  317.027037][  T144] wlan1: Trigger new scan to find an IBSS to join
[  317.108317][ T7176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.855'.
[  317.447425][ T7171] netlink: 128 bytes leftover after parsing attributes in process `syz.0.854'.
[  317.550590][ T7171] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  317.647644][ T4464] wlan1: Creating new IBSS network, BSSID 9a:21:5c:c1:2d:49
[  317.656845][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.663259][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.887067][ T7181] netlink: 'syz.3.857': attribute type 9 has an invalid length.
[  317.947534][ T4464] wlan1: Trigger new scan to find an IBSS to join
[  317.979216][ T7181] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.857'.
[  318.374710][ T7191] netlink: 128 bytes leftover after parsing attributes in process `syz.0.859'.
[  318.558548][ T7191] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  318.608387][ T7201] netlink: 56 bytes leftover after parsing attributes in process `syz.2.861'.
[  318.773272][ T7201] netlink: 56 bytes leftover after parsing attributes in process `syz.2.861'.
[  318.919358][ T7207] netlink: 'syz.3.862': attribute type 3 has an invalid length.
[  318.927068][ T7207] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.862'.
[  318.999150][ T4464] wlan1: Creating new IBSS network, BSSID 8e:6a:4f:14:6d:d6
[  319.967713][  T144] wlan1: Trigger new scan to find an IBSS to join
[  320.072874][  T144] wlan1: Creating new IBSS network, BSSID 46:9d:ca:ed:92:c2
[  320.208686][ T7213] netlink: 'syz.0.865': attribute type 3 has an invalid length.
[  320.216403][ T7213] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.865'.
[  320.984197][ T7226] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  321.241782][ T7232] __nla_validate_parse: 2 callbacks suppressed
[  321.241801][ T7232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.871'.
[  321.727578][ T7236] netlink: 'syz.0.872': attribute type 9 has an invalid length.
[  322.078754][ T7236] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.872'.
[  322.408248][ T7243] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.874'.
[  323.282764][ T7263] netlink: 56 bytes leftover after parsing attributes in process `syz.1.880'.
[  323.447821][ T7263] netlink: 56 bytes leftover after parsing attributes in process `syz.1.880'.
[  323.584706][ T7267] netlink: 'syz.3.883': attribute type 3 has an invalid length.
[  323.630826][ T7267] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.883'.
[  323.892702][ T7279] netlink: 128 bytes leftover after parsing attributes in process `syz.2.884'.
[  323.949658][ T7279] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  325.171657][ T7294] netlink: 'syz.2.891': attribute type 3 has an invalid length.
[  325.217526][ T7294] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.891'.
[  325.238653][ T7301] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.893'.
[  326.619296][ T7317] netlink: 'syz.1.899': attribute type 3 has an invalid length.
[  326.694838][ T7317] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.899'.
[  326.987007][ T7332] netlink: 'syz.1.904': attribute type 9 has an invalid length.
[  327.033281][ T7334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.905'.
[  327.050263][ T7332] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.904'.
[  327.239959][ T7336] netlink: 56 bytes leftover after parsing attributes in process `syz.2.903'.
[  327.273274][ T7336] netlink: 56 bytes leftover after parsing attributes in process `syz.2.903'.
[  327.635652][ T7340] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.906'.
[  328.725490][ T7354] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.910'.
[  329.709287][ T7367] netlink: 'syz.2.915': attribute type 3 has an invalid length.
[  329.829950][ T7367] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.915'.
[  331.840891][ T7370] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.917'.
[  332.464761][ T7384] netlink: 'syz.2.931': attribute type 3 has an invalid length.
[  333.082195][ T7384] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.931'.
[  333.266337][ T7386] netlink: 'syz.4.921': attribute type 3 has an invalid length.
[  333.407022][ T7386] netlink: 201336 bytes leftover after parsing attributes in process `syz.4.921'.
[  333.624959][ T7394] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.924'.
[  334.678373][ T7412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.932'.
[  337.385660][ T7430] netlink: 'syz.0.935': attribute type 3 has an invalid length.
[  337.420696][ T7429] netlink: 56 bytes leftover after parsing attributes in process `syz.1.936'.
[  337.534519][ T7429] netlink: 56 bytes leftover after parsing attributes in process `syz.1.936'.
[  337.546592][ T7430] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.935'.
[  337.954072][ T7428] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.937'.
[  338.610452][ T7445] netlink: 'syz.1.940': attribute type 3 has an invalid length.
[  338.682787][ T7445] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.940'.
[  339.708798][ T7463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.945'.
[  340.348261][ T7479] netlink: 56 bytes leftover after parsing attributes in process `syz.0.951'.
[  340.450904][ T7479] netlink: 56 bytes leftover after parsing attributes in process `syz.0.951'.
[  340.611695][ T7484] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.953'.
[  341.311130][ T7491] netlink: 'syz.3.955': attribute type 3 has an invalid length.
[  341.321060][ T7491] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.955'.
[  343.301943][ T7525] __nla_validate_parse: 2 callbacks suppressed
[  343.301963][ T7525] netlink: 56 bytes leftover after parsing attributes in process `syz.4.967'.
[  343.501795][ T7525] netlink: 56 bytes leftover after parsing attributes in process `syz.4.967'.
[  343.681115][ T7534] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.970'.
[  346.535969][ T7553] netlink: 'syz.0.977': attribute type 12 has an invalid length.
[  346.565788][ T7553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.977'.
[  346.619174][ T7557] netlink: 'syz.0.977': attribute type 21 has an invalid length.
[  346.662709][ T7557] netlink: 156 bytes leftover after parsing attributes in process `syz.0.977'.
[  347.021726][ T7569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.979'.
[  347.589312][  T155] tipc: Subscription rejected, illegal request
[  349.008289][    T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  349.100133][ T7587] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.986'.
[  350.161259][ T7596] netlink: 'syz.1.989': attribute type 2 has an invalid length.
[  350.188410][ T7596] netlink: 164 bytes leftover after parsing attributes in process `syz.1.989'.
[  350.275161][ T7595] netlink: 56 bytes leftover after parsing attributes in process `syz.0.988'.
[  350.383271][ T7595] netlink: 56 bytes leftover after parsing attributes in process `syz.0.988'.
[  350.545198][ T7604] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1000'.
[  351.047913][ T7619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.994'.
[  352.127143][ T7625] netlink: 128 bytes leftover after parsing attributes in process `syz.0.997'.
[  352.137118][ T7625] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  352.668880][    T9] tipc: Subscription rejected, illegal request
[  353.439219][ T7648] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1003'.
[  355.615064][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1010'.
[  355.923608][ T7674] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1011'.
[  356.660348][ T7693] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1018'.
[  357.296852][ T1236] tipc: Subscription rejected, illegal request
[  358.099128][ T7713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1023'.
[  360.129993][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1036'.
[  360.464837][ T7730] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1028'.
[  361.349850][ T7748] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1030'.
[  361.458968][ T7747] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1045'.
[  361.516471][ T7748] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1030'.
[  363.080098][ T7771] FAULT_INJECTION: forcing a failure.
[  363.080098][ T7771] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.201205][ T7771] CPU: 1 PID: 7771 Comm: syz.1.1039 Not tainted syzkaller #0
[  363.208748][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  363.218998][ T7771] Call Trace:
[  363.222316][ T7771]  <TASK>
[  363.225279][ T7771]  dump_stack_lvl+0x188/0x250
[  363.230161][ T7771]  ? show_regs_print_info+0x20/0x20
[  363.235558][ T7771]  ? load_image+0x410/0x410
[  363.240216][ T7771]  ? __lock_acquire+0x7b50/0x7b50
[  363.245383][ T7771]  should_fail+0x383/0x4b0
[  363.249908][ T7771]  _copy_from_user+0x2e/0x170
[  363.254740][ T7771]  __copy_msghdr_from_user+0x48a/0x630
[  363.260544][ T7771]  ? verify_lock_unused+0x140/0x140
[  363.265808][ T7771]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  363.271166][ T7771]  ___sys_sendmsg+0x19a/0x2e0
[  363.275959][ T7771]  ? __sys_sendmsg+0x290/0x290
[  363.280829][ T7771]  __se_sys_sendmsg+0x1b7/0x2a0
[  363.285863][ T7771]  ? __x64_sys_sendmsg+0x80/0x80
[  363.290844][ T7771]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  363.296892][ T7771]  ? lockdep_hardirqs_on+0x94/0x140
[  363.302260][ T7771]  do_syscall_64+0x4c/0xa0
[  363.306713][ T7771]  ? clear_bhb_loop+0x30/0x80
[  363.311527][ T7771]  ? clear_bhb_loop+0x30/0x80
[  363.316284][ T7771]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  363.322436][ T7771] RIP: 0033:0x7f479445ee59
[  363.326982][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  363.346627][ T7771] RSP: 002b:00007f47926b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.355089][ T7771] RAX: ffffffffffffffda RBX: 00007f47946e6fa0 RCX: 00007f479445ee59
[  363.363189][ T7771] RDX: 0000000000008400 RSI: 0000200000000480 RDI: 0000000000000003
[  363.371206][ T7771] RBP: 00007f47926b7090 R08: 0000000000000000 R09: 0000000000000000
[  363.379402][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.387421][ T7771] R13: 00007f47946e7038 R14: 00007f47946e6fa0 R15: 00007ffcf543e1b8
[  363.395457][ T7771]  </TASK>
[  363.562989][ T7778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1040'.
[  364.382419][ T7783] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1041'.
[  364.441963][ T7791] netlink: 'syz.3.1043': attribute type 10 has an invalid length.
[  364.497926][ T7791] netlink: 'syz.3.1043': attribute type 4 has an invalid length.
[  364.537383][ T7791] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1043'.
[  364.629372][ T7783] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1041'.
[  365.328157][ T1108] syzkaller0: tun_net_xmit 76
[  365.333437][ T1108] syzkaller0: tun_net_xmit 48
[  365.348764][ T7816] syzkaller0: create flow: hash 4174195551 index 1
[  365.360638][ T4233] syzkaller0: tun_net_xmit 76
[  365.504349][ T7815] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1053'.
[  365.520863][ T1108] syzkaller0: tun_net_xmit 76
[  365.531424][ T7809] syzkaller0: delete flow: hash 4174195551 index 1
[  366.548913][ T7821] netlink: 'syz.1.1055': attribute type 9 has an invalid length.
[  366.578921][ T7821] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1055'.
[  366.590740][ T7830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1058'.
[  367.630529][ T7839] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1061'.
[  367.833823][ T7839] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1061'.
[  369.252384][ T7867] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1069'.
[  369.462525][ T7874] FAULT_INJECTION: forcing a failure.
[  369.462525][ T7874] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.510449][ T7874] CPU: 1 PID: 7874 Comm: syz.3.1070 Not tainted syzkaller #0
[  369.518082][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  369.528518][ T7874] Call Trace:
[  369.531844][ T7874]  <TASK>
[  369.534819][ T7874]  dump_stack_lvl+0x188/0x250
[  369.539553][ T7874]  ? show_regs_print_info+0x20/0x20
[  369.544802][ T7874]  ? load_image+0x410/0x410
[  369.549401][ T7874]  ? __lock_acquire+0x7b50/0x7b50
[  369.554486][ T7874]  should_fail+0x383/0x4b0
[  369.558954][ T7874]  _copy_from_user+0x2e/0x170
[  369.563755][ T7874]  __copy_msghdr_from_user+0xc9/0x630
[  369.569398][ T7874]  ? verify_lock_unused+0x140/0x140
[  369.575622][ T7874]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  369.580982][ T7874]  ___sys_sendmsg+0x19a/0x2e0
[  369.585700][ T7874]  ? __sys_sendmsg+0x290/0x290
[  369.590497][ T7874]  ? trace_event_raw_event_lock+0x250/0x250
[  369.596456][ T7874]  __se_sys_sendmsg+0x1b7/0x2a0
[  369.601425][ T7874]  ? __x64_sys_sendmsg+0x80/0x80
[  369.606385][ T7874]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  369.612496][ T7874]  ? lockdep_hardirqs_on+0x94/0x140
[  369.617717][ T7874]  do_syscall_64+0x4c/0xa0
[  369.622159][ T7874]  ? clear_bhb_loop+0x30/0x80
[  369.626863][ T7874]  ? clear_bhb_loop+0x30/0x80
[  369.631566][ T7874]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  369.637483][ T7874] RIP: 0033:0x7f6049991e59
[  369.642388][ T7874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  369.662557][ T7874] RSP: 002b:00007f6047bc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.671313][ T7874] RAX: ffffffffffffffda RBX: 00007f6049c1a090 RCX: 00007f6049991e59
[  369.679332][ T7874] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003
[  369.687327][ T7874] RBP: 00007f6047bc9090 R08: 0000000000000000 R09: 0000000000000000
[  369.695319][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.703313][ T7874] R13: 00007f6049c1a128 R14: 00007f6049c1a090 R15: 00007ffc075b7ea8
[  369.711430][ T7874]  </TASK>
[  369.802681][ T7867] tap0: tun_chr_ioctl cmd 35111
[  370.368092][ T7878] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1072'.
[  370.544860][ T7886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1075'.
[  371.378846][ T7899] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1079'.
[  371.532566][ T7899] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1079'.
[  371.823366][ T7912] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1083'.
[  372.481476][ T7915] syzkaller1: tun_chr_ioctl cmd 1074025677
[  372.511289][ T7915] syzkaller1: linktype set to 777
[  372.550491][ T7923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1087'.
[  372.836553][ T7929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1089'.
[  372.986698][ T7934] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1091'.
[  373.529291][ T7942] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1094'.
[  373.579291][ T7942] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1094'.
[  373.663409][ T7952] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1095'.
[  374.427888][ T7958] FAULT_INJECTION: forcing a failure.
[  374.427888][ T7958] name failslab, interval 1, probability 0, space 0, times 1
[  374.540628][ T7962] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1099'.
[  374.545861][ T7958] CPU: 1 PID: 7958 Comm: syz.3.1098 Not tainted syzkaller #0
[  374.557404][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  374.567492][ T7958] Call Trace:
[  374.570822][ T7958]  <TASK>
[  374.573778][ T7958]  dump_stack_lvl+0x188/0x250
[  374.578622][ T7958]  ? show_regs_print_info+0x20/0x20
[  374.583869][ T7958]  ? load_image+0x410/0x410
[  374.588414][ T7958]  ? __might_sleep+0xf0/0xf0
[  374.593475][ T7958]  ? __lock_acquire+0x7b50/0x7b50
[  374.598538][ T7958]  should_fail+0x383/0x4b0
[  374.603001][ T7958]  should_failslab+0x5/0x20
[  374.607594][ T7958]  slab_pre_alloc_hook+0x51/0xc0
[  374.612604][ T7958]  __kmalloc+0x6b/0x340
[  374.616789][ T7958]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  374.622639][ T7958]  tomoyo_realpath_from_path+0xed/0x5e0
[  374.628241][ T7958]  tomoyo_path_number_perm+0x251/0x6b0
[  374.633741][ T7958]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  374.639382][ T7958]  ? perf_trace_lock+0xe4/0x390
[  374.644325][ T7958]  security_file_ioctl+0x6c/0xa0
[  374.649407][ T7958]  __se_sys_ioctl+0x48/0x170
[  374.654093][ T7958]  do_syscall_64+0x4c/0xa0
[  374.658549][ T7958]  ? clear_bhb_loop+0x30/0x80
[  374.663363][ T7958]  ? clear_bhb_loop+0x30/0x80
[  374.668074][ T7958]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  374.674003][ T7958] RIP: 0033:0x7f6049991e59
[  374.678452][ T7958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  374.698111][ T7958] RSP: 002b:00007f6047bea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  374.706653][ T7958] RAX: ffffffffffffffda RBX: 00007f6049c19fa0 RCX: 00007f6049991e59
[  374.714673][ T7958] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004
[  374.722727][ T7958] RBP: 00007f6047bea090 R08: 0000000000000000 R09: 0000000000000000
[  374.730826][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.738921][ T7958] R13: 00007f6049c1a038 R14: 00007f6049c19fa0 R15: 00007ffc075b7ea8
[  374.747062][ T7958]  </TASK>
[  374.860115][ T7958] ERROR: Out of memory at tomoyo_realpath_from_path.
[  375.237549][ T7971] netlink: 'syz.3.1103': attribute type 9 has an invalid length.
[  375.315739][ T7971] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1103'.
[  375.997406][ T7982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1105'.
[  376.838076][ T7996] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1109'.
[  376.940024][ T7996] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1109'.
[  377.084794][ T8005] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1111'.
[  378.579211][ T8027] netlink: 'syz.0.1119': attribute type 9 has an invalid length.
[  378.627647][ T8027] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1119'.
[  378.768599][ T8028] syzkaller1: tun_chr_ioctl cmd 1074025677
[  378.790492][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.797717][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  378.892105][ T8028] syzkaller1: linktype set to 777
[  379.698816][ T8050] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1126'.
[  379.797501][ T8050] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1126'.
[  380.024285][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  380.298536][ T8054] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1127'.
[  381.413933][ T8061] device syzkaller0 entered promiscuous mode
[  381.881897][ T8086] netlink: 'syz.4.1137': attribute type 9 has an invalid length.
[  381.910552][ T8086] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1137'.
[  382.260693][ T8080] device syzkaller0 entered promiscuous mode
[  383.218849][ T8102] netlink: 'syz.4.1143': attribute type 17 has an invalid length.
[  383.237820][ T8102] netlink: 'syz.4.1143': attribute type 16 has an invalid length.
[  383.247759][ T8102] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1143'.
[  383.500245][ T8109] syzkaller1: tun_chr_ioctl cmd 1074025677
[  383.539358][ T8102] syz.4.1143 (8102) used greatest stack depth: 19888 bytes left
[  383.559114][ T8109] syzkaller1: linktype set to 777
[  383.721475][ T8119] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1146'.
[  384.025046][ T8121] netlink: 'syz.3.1149': attribute type 9 has an invalid length.
[  384.053559][ T8121] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1149'.
[  385.011386][ T8148] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  385.457380][ T8154] netlink: 'syz.1.1155': attribute type 21 has an invalid length.
[  385.465491][ T8154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1155'.
[  385.507319][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1155'.
[  385.916109][ T8162] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1162'.
[  386.722777][ T8172] netlink: 'syz.3.1165': attribute type 9 has an invalid length.
[  386.774031][ T8172] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1165'.
[  387.037724][ T8173] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1174'.
[  387.793011][ T8182] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1167'.
[  387.844454][ T8182] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1167'.
[  387.952095][ T8188] netlink: 'syz.0.1168': attribute type 1 has an invalid length.
[  388.004527][ T8191] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1180'.
[  388.028395][ T8188] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1168'.
[  388.346752][ T8198] netlink: 'syz.3.1171': attribute type 10 has an invalid length.
[  388.403892][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1171'.
[  388.560463][ T8193] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1169'.
[  389.614631][ T8217] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1179'.
[  389.648566][ T8217] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1179'.
[  389.793506][ T8211] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1176'.
[  390.926895][ T8233] netlink: 'syz.3.1184': attribute type 17 has an invalid length.
[  390.938193][ T8233] netlink: 'syz.3.1184': attribute type 16 has an invalid length.
[  392.048448][ T8252] __nla_validate_parse: 6 callbacks suppressed
[  392.048526][ T8252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1190'.
[  392.080375][ T8258] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1191'.
[  392.392951][ T8262] netlink: 'syz.2.1193': attribute type 9 has an invalid length.
[  392.464090][ T8262] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1193'.
[  393.538515][ T8275] netlink: 'syz.1.1208': attribute type 9 has an invalid length.
[  393.567299][ T8275] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1208'.
[  393.660927][ T8278] netlink: 'syz.4.1197': attribute type 8 has an invalid length.
[  393.810542][ T8273] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1196'.
[  393.825862][ T8278] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.1197'.
[  395.265295][ T8289] netlink: 'syz.1.1200': attribute type 17 has an invalid length.
[  395.376350][ T8289] netlink: 'syz.1.1200': attribute type 16 has an invalid length.
[  395.408259][ T8289] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1200'.
[  395.794076][ T8297] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1202'.
[  396.292761][ T8306] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1205'.
[  396.347443][ T8306] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1205'.
[  396.824472][ T8317] netlink: 'syz.3.1211': attribute type 9 has an invalid length.
[  399.229671][ T8327] __nla_validate_parse: 1 callbacks suppressed
[  399.229691][ T8327] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1213'.
[  399.265448][ T8327] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  399.404817][ T8330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1214'.
[  399.453808][ T8336] netlink: 'syz.1.1227': attribute type 9 has an invalid length.
[  399.492547][ T8336] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1227'.
[  399.623983][ T8335] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1225'.
[  399.704020][ T8341] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1215'.
[  400.143990][ T8341] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1215'.
[  400.540892][ T8360] syz.1.1223 uses obsolete (PF_INET,SOCK_PACKET)
[  400.862831][ T8373] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1226'.
[  400.946328][ T8373] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1226'.
[  402.238656][ T8393] netlink: 'syz.1.1233': attribute type 9 has an invalid length.
[  402.272843][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1231'.
[  402.289877][ T8393] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1233'.
[  403.948854][ T8426] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  404.057755][ T8430] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  406.943735][ T8441] __nla_validate_parse: 6 callbacks suppressed
[  406.943756][ T8441] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1251'.
[  406.961924][ T8448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1252'.
[  407.089121][ T8451] netlink: 'syz.3.1254': attribute type 39 has an invalid length.
[  407.937113][ T8468] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1257'.
[  408.481804][ T8483] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1263'.
[  408.556264][ T8483] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  408.664798][ T8483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  408.743038][ T8492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1265'.
[  409.377522][ T8501] netlink: 'syz.3.1267': attribute type 9 has an invalid length.
[  409.385340][ T8501] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1267'.
[  409.544060][ T8505] netlink: 'syz.0.1269': attribute type 13 has an invalid length.
[  409.557390][ T8505] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.1269'.
[  409.903714][ T8517] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1273'.
[  409.948833][ T8521] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1273'.
[  410.011819][ T8517] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1273'.
[  411.064362][    T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  411.582495][ T8549] netlink: 'syz.2.1283': attribute type 9 has an invalid length.
[  412.181188][ T8563] delete_channel: no stack
[  412.441586][ T8551] delete_channel: no stack
[  413.424316][ T8588] __nla_validate_parse: 5 callbacks suppressed
[  413.424936][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1296'.
[  414.659677][ T8605] netlink: 'syz.3.1301': attribute type 9 has an invalid length.
[  414.720881][ T8605] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1301'.
[  415.033577][ T8611] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1302'.
[  416.185742][ T8631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1309'.
[  416.645117][ T8638] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1311'.
[  416.743463][ T8638] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1311'.
[  416.896647][ T8641] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.906547][ T8641] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.237572][ T8642] device bridge_slave_1 left promiscuous mode
[  417.245363][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.484429][ T8642] device bridge_slave_0 left promiscuous mode
[  417.557712][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.884999][ T8642] team0: Port device bridge0 removed
[  420.906702][ T8675] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1324'.
[  420.926673][ T8675] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  421.203914][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1326'.
[  422.253018][ T8704] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1333'.
[  422.388206][ T8704] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1333'.
[  424.491519][ T8694] ------------[ cut here ]------------
[  424.497145][ T8694] WARNING: CPU: 0 PID: 8694 at kernel/events/core.c:6688 perf_pending_task+0x353/0x480
[  424.507382][ T8694] Modules linked in:
[  424.511405][ T8694] CPU: 0 PID: 8694 Comm: syz.1.1329 Not tainted syzkaller #0
[  424.518845][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  424.529245][ T8694] RIP: 0010:perf_pending_task+0x353/0x480
[  424.535105][ T8694] Code: e8 d2 4e de ff 84 db 75 10 e8 69 4c de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 4c de ff e8 dc d6 65 ff eb e9 e8 4d 4c de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[  424.554861][ T8694] RSP: 0018:ffffc90002f8f9c0 EFLAGS: 00010293
[  424.561140][ T8694] RAX: ffffffff819aa653 RBX: ffff88813fe62e18 RCX: ffff888025ca1dc0
[  424.569317][ T8694] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  424.577457][ T8694] RBP: ffff88813fe62be8 R08: ffff888025ca27d3 R09: 1ffff11004b944fa
[  424.585512][ T8694] R10: dffffc0000000000 R11: ffffed1004b944fb R12: ffff888025ca1dc0
[  424.593775][ T8694] R13: ffff88801fc66958 R14: 0000000000000000 R15: 1ffff11027fcc57d
[  424.601900][ T8694] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  424.611138][ T8694] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.617807][ T8694] CR2: 00007fc53156d000 CR3: 000000001f022000 CR4: 00000000003506f0
[  424.625978][ T8694] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  424.634131][ T8694] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  424.642377][ T8694] Call Trace:
[  424.645708][ T8694]  <TASK>
[  424.648734][ T8694]  task_work_run+0x125/0x1a0
[  424.653545][ T8694]  do_exit+0x635/0x2110
[  424.657917][ T8694]  ? put_task_struct+0x80/0x80
[  424.662742][ T8694]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  424.669415][ T8694]  ? lockdep_hardirqs_on+0x94/0x140
[  424.674728][ T8694]  do_group_exit+0x12c/0x2f0
[  424.679440][ T8694]  get_signal+0x7eb/0x12e0
[  424.683996][ T8694]  arch_do_signal_or_restart+0xe6/0x12a0
[  424.689895][ T8694]  ? futex_exit_release+0x1c0/0x1c0
[  424.695373][ T8694]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  424.701447][ T8694]  ? get_sigframe_size+0x10/0x10
[  424.706538][ T8694]  ? lock_chain_count+0x20/0x20
[  424.711638][ T8694]  ? exit_to_user_mode_loop+0x3b/0x130
[  424.717257][ T8694]  exit_to_user_mode_loop+0x9e/0x130
[  424.722788][ T8694]  exit_to_user_mode_prepare+0xee/0x180
[  424.728626][ T8694]  syscall_exit_to_user_mode+0x16/0x40
[  424.734224][ T8694]  do_syscall_64+0x58/0xa0
[  424.738744][ T8694]  ? clear_bhb_loop+0x30/0x80
[  424.743467][ T8694]  ? clear_bhb_loop+0x30/0x80
[  424.748242][ T8694]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  424.754356][ T8694] RIP: 0033:0x7f479445ee59
[  424.758858][ T8694] Code: Unable to access opcode bytes at RIP 0x7f479445ee2f.
[  424.766364][ T8694] RSP: 002b:00007f47926b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  424.775222][ T8694] RAX: fffffffffffffe00 RBX: 00007f47946e6fa8 RCX: 00007f479445ee59
[  424.783361][ T8694] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47946e6fa8
[  424.791430][ T8694] RBP: 00007f47946e6fa0 R08: 0000000000000000 R09: 0000000000000000
[  424.799578][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  424.807623][ T8694] R13: 00007f47946e7038 R14: 00007ffcf543e0d0 R15: 00007ffcf543e1b8
[  424.815665][ T8694]  </TASK>
[  424.818768][ T8694] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  424.826161][ T8694] CPU: 0 PID: 8694 Comm: syz.1.1329 Not tainted syzkaller #0
[  424.833571][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  424.843780][ T8694] Call Trace:
[  424.847092][ T8694]  <TASK>
[  424.850056][ T8694]  dump_stack_lvl+0x188/0x250
[  424.854788][ T8694]  ? show_regs_print_info+0x20/0x20
[  424.860063][ T8694]  ? load_image+0x410/0x410
[  424.864731][ T8694]  panic+0x2f8/0x850
[  424.868678][ T8694]  ? bpf_jit_dump+0xd0/0xd0
[  424.873327][ T8694]  ? perf_pending_task+0x353/0x480
[  424.878733][ T8694]  __warn+0x248/0x2b0
[  424.882773][ T8694]  ? perf_pending_task+0x353/0x480
[  424.887939][ T8694]  report_bug+0x1b9/0x2e0
[  424.892382][ T8694]  handle_bug+0x3a/0x70
[  424.896660][ T8694]  exc_invalid_op+0x16/0x40
[  424.901294][ T8694]  asm_exc_invalid_op+0x16/0x20
[  424.906191][ T8694] RIP: 0010:perf_pending_task+0x353/0x480
[  424.911969][ T8694] Code: e8 d2 4e de ff 84 db 75 10 e8 69 4c de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 4c de ff e8 dc d6 65 ff eb e9 e8 4d 4c de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[  424.931728][ T8694] RSP: 0018:ffffc90002f8f9c0 EFLAGS: 00010293
[  424.938562][ T8694] RAX: ffffffff819aa653 RBX: ffff88813fe62e18 RCX: ffff888025ca1dc0
[  424.946672][ T8694] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  424.954866][ T8694] RBP: ffff88813fe62be8 R08: ffff888025ca27d3 R09: 1ffff11004b944fa
[  424.963031][ T8694] R10: dffffc0000000000 R11: ffffed1004b944fb R12: ffff888025ca1dc0
[  424.971219][ T8694] R13: ffff88801fc66958 R14: 0000000000000000 R15: 1ffff11027fcc57d
[  424.979278][ T8694]  ? perf_pending_task+0x353/0x480
[  424.984551][ T8694]  task_work_run+0x125/0x1a0
[  424.989196][ T8694]  do_exit+0x635/0x2110
[  424.993403][ T8694]  ? put_task_struct+0x80/0x80
[  424.998205][ T8694]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  425.004404][ T8694]  ? lockdep_hardirqs_on+0x94/0x140
[  425.009664][ T8694]  do_group_exit+0x12c/0x2f0
[  425.014308][ T8694]  get_signal+0x7eb/0x12e0
[  425.018796][ T8694]  arch_do_signal_or_restart+0xe6/0x12a0
[  425.024590][ T8694]  ? futex_exit_release+0x1c0/0x1c0
[  425.029836][ T8694]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  425.035857][ T8694]  ? get_sigframe_size+0x10/0x10
[  425.040849][ T8694]  ? lock_chain_count+0x20/0x20
[  425.045761][ T8694]  ? exit_to_user_mode_loop+0x3b/0x130
[  425.051322][ T8694]  exit_to_user_mode_loop+0x9e/0x130
[  425.056653][ T8694]  exit_to_user_mode_prepare+0xee/0x180
[  425.062249][ T8694]  syscall_exit_to_user_mode+0x16/0x40
[  425.067759][ T8694]  do_syscall_64+0x58/0xa0
[  425.072214][ T8694]  ? clear_bhb_loop+0x30/0x80
[  425.076936][ T8694]  ? clear_bhb_loop+0x30/0x80
[  425.081656][ T8694]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  425.087700][ T8694] RIP: 0033:0x7f479445ee59
[  425.092154][ T8694] Code: Unable to access opcode bytes at RIP 0x7f479445ee2f.
[  425.099550][ T8694] RSP: 002b:00007f47926b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  425.107997][ T8694] RAX: fffffffffffffe00 RBX: 00007f47946e6fa8 RCX: 00007f479445ee59
[  425.116022][ T8694] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47946e6fa8
[  425.124125][ T8694] RBP: 00007f47946e6fa0 R08: 0000000000000000 R09: 0000000000000000
[  425.132137][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.140274][ T8694] R13: 00007f47946e7038 R14: 00007ffcf543e0d0 R15: 00007ffcf543e1b8
[  425.148406][ T8694]  </TASK>
[  425.151713][ T8694] Kernel Offset: disabled
[  425.156143][ T8694] Rebooting in 86400 seconds..