last executing test programs:

5.678480023s ago: executing program 2 (id=2768):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc00, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001800000000000000100100000c000000e8000000288670"], 0x30}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f00000001c0), 0x0}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
r3 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000ff0000003249", @ANYRES32=0x1, @ANYBLOB="0000008dd73f4a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x8)
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

5.573251386s ago: executing program 3 (id=2769):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x48000)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5411, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8, 0x9, 0x0, 0x20000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xf, 0x3, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a1180015000600f300030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace806872123b6f5220f4cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040a9925667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52e9ecbee28a0", 0xd8}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@phonet={0x23, 0x5, 0xb, 0xb4}, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)="f5f87e6c2e322e2534a68a59bb4d9ff91c521d412b0eb2f503eb139c0b327c1912160c577a91e4", 0x27}], 0x1, &(0x7f0000000280)=[{0x10, 0x84}], 0x10}, 0x4040081)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900001d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$tipc(0x1e, 0x5641e577e96e3246, 0x0, &(0x7f0000000000))

2.699976575s ago: executing program 0 (id=2770):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d8d664f}, 0x94)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x13, 0x0, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x38d000, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0xfffffffffffffffc, 0x400}, 0x2010, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x98e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x4}, 0x18)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r3, r0, 0x22, 0x2010, 0x0, @value=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
r7 = getpid()
write$cgroup_pid(r6, &(0x7f0000000400)=r7, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x0, 0xc8}, r7, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)=0x9)
r8 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x17, &(0x7f0000000000)=r11, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0xc3200, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.689674435s ago: executing program 2 (id=2771):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x3, 0x9, 0xa}, 0xfffffdda, 0x0}, 0x10)

2.655184676s ago: executing program 1 (id=2772):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0x6}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x4020, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x15, 0x300, &(0x7f0000001840)="b9ff0307683a268cb8091a998137", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.634229076s ago: executing program 3 (id=2773):
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfc, 0x20, 0x0, 0x3, 0x265ac, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000400), 0x5}, 0xa0, 0x32, 0x43a1bd76, 0x4, 0x20000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000680)="f173c71466b051f922f8dd680672bd3f7a1eaa", 0x13}, {&(0x7f00000009c0)="acfe649432c83af5761e803439dd84b8ec308859b0f24b7ce8694d71686447bd62b1d3d89c91a52b45bb32f7675dfc6c0491f609691c95ea8c323b8dec4b730a019b651f28481a8913b4e0b409f04b9c02adde707705067ef47019884d11fc68d9ee9c67d11d495e8d00a9783df522f8d61dff57064ac85c24eba67e4ecb64ae34bdeb28a462fbd2384748adc98b43578a591e53ad2628b2e1481d92928446e8b98e2593294ded4493b00562a1447184651ffacd98", 0xb5}, {&(0x7f0000000a80)="080e7901845ab2d4bc5d80a97c87fc3f553883d808bd31abbca2d39c8cccff0311b5dd683c41e305d0", 0x29}, {&(0x7f0000000ac0)="c5835aa65d8630e061f3913b318db9eb03bb38d1dc1407ab538a54032f4cff4a494b76b6016535fa5d827d48e028fb0f170062d5fec7ac5643314b444f0e70167d2e48c1734a05ba0a44771f899b922863aec0422aca34e179e5e642dc37befac85d5d", 0x63}], 0x4}, 0x20000840)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x1e, 0x0, &(0x7f0000000940)="e0b9547ed3a764960bed2626df5e0f43e50347690587dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000840)={0x5, 0x80, 0x1, 0x8, 0x6, 0x2, 0x0, 0x3, 0x10, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000003c0), 0x7}, 0x119b94, 0x6, 0x6, 0x8, 0xd39, 0x2, 0x8000, 0x0, 0x5, 0x0, 0x1})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x94)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYRESHEX], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1e00000006000000070000000000010000440200", @ANYRES32=r5, @ANYBLOB="3999000000000000f1f600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000020000000300"/28], 0x50)
setsockopt$sock_attach_bpf(r3, 0x6, 0x1e, &(0x7f0000000500), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="100000000020000000000000", @ANYRES32, @ANYBLOB="890f94337c55c69a6abc81a22f1de89a0b5bea5ae1413a91e7de5633adaffa4d56a0e13e4b2b6c9fce39932ae1cd2c5016beffdeb17af3c0931966709af553582c4fcc3cd80b1eff5ada47f65e9b2c3137c5188c16bfd983c51e97f4d9021a2135da7a4db1267e244345011f675a2e31ff2360cd60150a3aef663669d252ff95287ae23378b34a207ae79e57441db2aa3ac54ec1301f91e3a7c93f843b3c6fde6ae7fc317688a4589b55a44be1dbd0a0ddd6ad4ee5902c7315623845", @ANYRES64=0x0], 0x20)

2.533240408s ago: executing program 0 (id=2774):
r0 = syz_clone(0x20082080, &(0x7f00000000c0)="8ce7d35e56975b022b14ca75f1722a1e9eaddfc0f48011b14ad2565192eeb49226c35e2477a9290dfed2c7983e9162376b3cbeb7f54ec74451e78a61a73bca020495687632405129344ad1638806257236f92b7b3ee996d15f44c51dae682c9671d748f771ebc2f988c08c2da098d14cdce098eb573ab62337af2c724715513e79e049107fd09c861ff9a666803e702ca653bfb993ea5792d7390e41935f44e52e5cff852702c1f3ec09fc3baf226c502fb92d1691fa26d6def2cbfbdd1b41b6de972d060af9a8495ed7e73d351c3da0", 0xd0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="d9f1327d5fb0b58811d927bb64108837e30ccd689aa422088d6b00977e1ab20f70dc7f46850b9e09944cb5735c8389c46847aecc396aa01b33ca9c6d3fe18983b0960a764c6dfb5276ae929b6ab0e6ac29c20673307eaf3b6df6fd756dd4a6e92b009c7f1e9be1d1f17dc73928ecc09dda811ecb615f8638c8951124cd28ac70909bbc57a62a67ccbb43e9dfe1f3169827847adecd3cda7834b1fdd81f8f1c3c8701")
r1 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x8, 0x1a, 0x8, 0x0, 0x4, 0x1200d, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000300), 0x8}, 0x22, 0x9, 0x6, 0x0, 0xaa5c, 0x4, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffff7}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x5)
r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x19, 0xc, 0x0, 0x8, 0x12400, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x11, 0x1a53, 0x4, 0x3, 0x6, 0x5, 0x9, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, r0, 0x1, r1, 0xb)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000003c0)='\x00')
r3 = perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0xe, 0x5, 0x4, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0xab}, 0x8008, 0x1, 0x548, 0x0, 0x10001, 0x1dba, 0xfff, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r2, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6)
r4 = perf_event_open$cgroup(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x7, 0xc9, 0x3, 0x0, 0x78, 0x62120, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x75e, 0x0, @perf_config_ext={0x1, 0x49b}, 0x1008, 0x200, 0x80000001, 0x3, 0x0, 0x7c78, 0xb2a6, 0x0, 0x4, 0x0, 0xff}, 0xffffffffffffffff, 0x7, r3, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={r5, 0x7fffffff}, 0xc)
r7 = syz_clone(0x1080, &(0x7f0000000600)="0d33204bd4b3b7e3bd2429a5972db8abf9b8bff50a34fe7a34627a89610328acf3ff916741e28b487a6294bdaf25bfb9aff5c691e8128217001b844b8c6cc3a5014d15cce63817befab0f925e7332210b35b481dee0199bc3d2ba14599c14b10bb3c30e47b2120035819e1c4020eca0c5f3f1de4031e92c8792b9baaa6e198ca8fa80f03ea8f88ceea1cf699fe25a5f804912bfb5fb3a1bd4051feecd1f9fe8b226ac8b8b2a2be0b17", 0xa9, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="10386191e9c6acb6a74d1190481030bc435a2ed5f7fc092ac7cafd7e546aec")
syz_open_procfs$namespace(r7, &(0x7f0000000780)='ns/time\x00')
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000007c0)=0xffffffffffffffff, 0x4)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r8}, 0x8)
openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000840), 0x2, 0x0)
r10 = gettid()
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x47e)
ioctl$TUNSETVNETBE(r9, 0x400454de, &(0x7f0000000880))
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000008c0), 0x4)
socket$kcm(0x29, 0xe, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@ifindex=r6, 0xe, 0x0, 0xb090, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r9, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], 0x0, 0x5f, &(0x7f0000000b00)=[{}, {}], 0x10, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0)={r11}, 0x8)
r13 = perf_event_open$cgroup(&(0x7f0000000d40)={0x4, 0x80, 0x2, 0x6, 0x1c, 0x1, 0x0, 0x8, 0x1280, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x8}, 0x0, 0x27, 0xe, 0x7, 0x9, 0x7, 0xfff7, 0x0, 0x8, 0x0, 0x5}, r12, 0x3, r1, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e40)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000e00)='\x00'}, 0x30)
ioctl$PERF_EVENT_IOC_RESET(r13, 0x2403, 0x100000001)
perf_event_open(&(0x7f0000000e80)={0x4, 0x80, 0x89, 0x4, 0x7, 0x5, 0x0, 0x6, 0x840, 0xb, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0x4, 0x7}, 0x40c, 0x6, 0x8, 0x0, 0x0, 0x6, 0x2, 0x0, 0x9, 0x0, 0x1c00000000000}, r0, 0xa, r9, 0xc)
perf_event_open(&(0x7f0000000f00)={0x4, 0x80, 0x1, 0xc0, 0xa2, 0xad, 0x0, 0x2, 0x400, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x6002, 0x7, 0xedb, 0x9, 0x7, 0x9, 0x8, 0x0, 0xffff, 0x0, 0x8000}, r10, 0xc, 0xffffffffffffffff, 0x1)
r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000f80)={r12}, 0x8)
ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000000fc0)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}})

2.395201072s ago: executing program 2 (id=2775):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x48000)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5411, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8, 0x9, 0x0, 0x20000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xf, 0x3, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a1180015000600f300030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace806872123b6f5220f4cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040a9925667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52e9ecbee28a0", 0xd8}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@phonet={0x23, 0x5, 0xb, 0xb4}, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)="f5f87e6c2e322e2534a68a59bb4d9ff91c521d412b0eb2f503eb139c0b327c1912160c577a91e422", 0x28}], 0x1, &(0x7f0000000280)}, 0x4040081)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900001d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$tipc(0x1e, 0x5641e577e96e3246, 0x0, &(0x7f0000000000))

2.386679062s ago: executing program 1 (id=2776):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4)
sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x20040044)

2.372050292s ago: executing program 3 (id=2777):
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)
socket$kcm(0x11, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5411, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63e214b0ebed8e46dc3f2ddf33c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c)

2.131259778s ago: executing program 1 (id=2778):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x30300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008d"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x3}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000340)=""/195, 0x2c, 0xc3, 0x0, 0xd3}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="050000000300000004000000ff01", @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32], 0x50)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r1, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xd5, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080)=r6, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r4, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0xbb, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r4, <r11=>0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r7}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x20, 0xf, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000010000800000", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000faffffff850000008200000018330000030000000000000000000000b54208000100000095000000000000007d3f05088ab0b0a38af41c784054f800e5c9116d69622bdec2081af43fd405e9e0802a4609c039de0aff02ee9de9abcd97e08e680d243bf53beec29d87569ec88d486d9b63a20aa0eed4a3fb22e23a0256c409080719120e4cc083cd3de1e476d946cadcb2bacb6222caf2995fce8167d86ca98bd1ed756f43b07a64fea102410a95a86664aa8547db2b4208ad427bf535ed6b9bb1ef5c"], 0x0, 0x1000, 0x39, &(0x7f0000000380)=""/57, 0x41000, 0x0, '\x00', r8, @fallback=0x35, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r7, 0x0, &(0x7f0000000b80)=[r4, r4, r11, r4], &(0x7f0000000bc0), 0x10, 0x70d9ebf8}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)=r1}, 0x20)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x4, 0x20}, 0xc)
r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50)
r15 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r15, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(r15, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r16=>0xffffffffffffffff})
recvmsg$unix(r16, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r17=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r15, 0x84, 0x7b, &(0x7f0000000000)=r17, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x7, &(0x7f0000000080)=@raw=[@exit, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0xe8, &(0x7f0000000100)=""/232, 0x41100, 0x42, '\x00', r2, @fallback=0x24, r3, 0x8, &(0x7f0000000540)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x2, 0x2, 0x5}, 0x10, r10, r0, 0x6, &(0x7f0000000800)=[r12, r13, r14, r17, 0xffffffffffffffff], &(0x7f0000000840)=[{0x4, 0x2, 0x10, 0x6}, {0x2, 0x2, 0x9, 0xcc4183f95abde6cf}, {0x3, 0x2, 0xc, 0x6}, {0x58ae, 0x4, 0x3, 0xc}, {0x5, 0x3, 0x0, 0x7}, {0x1, 0x5, 0x4, 0x8}], 0x10, 0x14e2}, 0x94)

1.905194994s ago: executing program 0 (id=2779):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.598563931s ago: executing program 0 (id=2780):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ff0700000013000000000000850000002a00800018010012646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095000000000000007b2cff6ab9a4e3463acf1581a12c31bb9c55ac8bb72fab7c7d29e6b00bff917fcee909888aa3340e62111e253357e900982f8a260bc7f55bdeaab7c7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000480)=r2)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_bp={&(0x7f0000000680)}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0)
write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0d00000000010000020000000002000082000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000200"/28], 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/312, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, &(0x7f00000001c0), 0x0}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000600000000000000000000006800040000000000000000002a0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86)
r9 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000200)='syz0\x00', 0x1ff)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffffffffeec, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

1.101587413s ago: executing program 3 (id=2781):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc00, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001800000000000000100100000c000000e8000000288670"], 0x30}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f00000001c0), 0x0}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
r3 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000ff0000003249", @ANYRES32=0x1, @ANYBLOB="0000008dd73f4a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x8)
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

1.030759965s ago: executing program 0 (id=2782):
r0 = socket$kcm(0x2, 0x0, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4)
socket$kcm(0x2, 0x1, 0x84)
r1 = gettid()
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0xa}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0xc0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
socketpair(0x11, 0x2, 0xfde, &(0x7f0000000180))
close(r2)
socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000006600646d887551e97443fed2bd922a821b0a00000000"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="100064395db5f222afa2", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000002d008188a7480e0000e3bd6efb440009000434ffe200"/46, 0x2e}], 0x1}, 0x0)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xd, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x74)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x1, 0x106)
mkdir(0x0, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x6419599304258992)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r7, 0x1}, 0xc)

981.497396ms ago: executing program 1 (id=2783):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 2)

915.544408ms ago: executing program 2 (id=2784):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0x6}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x4020, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x15, 0x300, &(0x7f0000001840)="b9ff0307683a268cb8091a998137", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

628.536224ms ago: executing program 1 (id=2785):
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfc, 0x20, 0x0, 0x3, 0x265ac, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000400), 0x5}, 0xa0, 0x32, 0x43a1bd76, 0x4, 0x20000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000680)="f173c71466b051f922f8dd680672bd3f7a1eaa", 0x13}, {&(0x7f00000009c0)="acfe649432c83af5761e803439dd84b8ec308859b0f24b7ce8694d71686447bd62b1d3d89c91a52b45bb32f7675dfc6c0491f609691c95ea8c323b8dec4b730a019b651f28481a8913b4e0b409f04b9c02adde707705067ef47019884d11fc68d9ee9c67d11d495e8d00a9783df522f8d61dff57064ac85c24eba67e4ecb64ae34bdeb28a462fbd2384748adc98b43578a591e53ad2628b2e1481d92928446e8b98e2593294ded4493b00562a1447184651ffacd98", 0xb5}, {&(0x7f0000000a80)="080e7901845ab2d4bc5d80a97c87fc3f553883d808bd31abbca2d39c8cccff0311b5dd683c41e305d0", 0x29}, {&(0x7f0000000ac0)="c5835aa65d8630e061f3913b318db9eb03bb38d1dc1407ab538a54032f4cff4a494b76b6016535fa5d827d48e028fb0f170062d5fec7ac5643314b444f0e70167d2e48c1734a05ba0a44771f899b922863aec0422aca34e179e5e642dc37befac85d5d", 0x63}], 0x4}, 0x20000840)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x1e, 0x0, &(0x7f0000000940)="e0b9547ed3a764960bed2626df5e0f43e50347690587dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000840)={0x5, 0x80, 0x1, 0x8, 0x6, 0x2, 0x0, 0x3, 0x10, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000003c0), 0x7}, 0x119b94, 0x6, 0x6, 0x8, 0xd39, 0x2, 0x8000, 0x0, 0x5, 0x0, 0x1})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x94)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYRESHEX], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1e00000006000000070000000000010000440200", @ANYRES32=r5, @ANYBLOB="3999000000000000f1f600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000020000000300"/28], 0x50)
setsockopt$sock_attach_bpf(r3, 0x6, 0x1e, &(0x7f0000000500), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="100000000020000000000000", @ANYRES32, @ANYBLOB="890f94337c55c69a6abc81a22f1de89a0b5bea5ae1413a91e7de5633adaffa4d56a0e13e4b2b6c9fce39932ae1cd2c5016beffdeb17af3c0931966709af553582c4fcc3cd80b1eff5ada47f65e9b2c3137c5188c16bfd983c51e97f4d9021a2135da7a4db1267e244345011f675a2e31ff2360cd60150a3aef663669d252ff95287ae23378b34a207ae79e57441db2aa3ac54ec1301f91e3a7c93f843b3c6fde6ae7fc317688a4589b55a44be1dbd0a0ddd6ad4ee5902c7315623845", @ANYRES64=0x0], 0x20)

553.293746ms ago: executing program 2 (id=2786):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000000000000010000000000000000000000140000000000000000000000020000000000000000000000000000000000000000000000070000004400d34000000620000000810000079a000000810000000600008001000000738300f3e00000020a0101020700eee0000002e0000001e0000002008900af64010100e00000027f000001e0000001ac141431ac1e00010a0101010a01010244008813ac1414383d12369cac1414bb00000fff008600ffffffff010084e95dd8170050472e2246379d6499010086d93f5f715697bd4302003c2a06fa32eb00000061fdffffffffffff0000000002000000010000800000000011000000"], 0xc8}, 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$SIOCSIFHWADDR(r6, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x13, 0x0, &(0x7f0000000180)="5486bbac43bbf8e44dcdd0e6b689f0ca471909", 0xfffffffffffffffd, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe14}, 0x1f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f00000006c0)="9daaac999f69c48373a1ee570000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000000000902000000040000000000000700000000000000005e00"], &(0x7f0000000540)=""/246, 0x36, 0xf6, 0x1}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000, r8}, 0x18) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r9 = syz_clone(0x4904100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, r9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@enum64={0x4, 0x2, 0x0, 0x13, 0x0, 0xc, [{0x3, 0x9, 0x6}, {0x10, 0x1, 0xfff}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x5}, {0xf, 0x4}, {0x6, 0x1}, {0x0, 0x5}, {0xb, 0x5}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x30, 0x5f]}}, &(0x7f0000000300)=""/14, 0x77, 0xe, 0x1, 0xa}, 0x28)
write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) (async)
r12 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)

172.776025ms ago: executing program 1 (id=2787):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc00, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001800000000000000100100000c000000e8000000288670"], 0x30}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f00000001c0), 0x0}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
r3 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000ff0000003249", @ANYRES32=0x1, @ANYBLOB="0000008dd73f4a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x8)
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

172.408665ms ago: executing program 3 (id=2788):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

143.750636ms ago: executing program 2 (id=2789):
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)
socket$kcm(0x11, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5411, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63e214b0ebed8e46dc3f2ddf33c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c)

89.409018ms ago: executing program 0 (id=2790):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ff0700000013000000000000850000002a00800018010012646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095000000000000007b2cff6ab9a4e3463acf1581a12c31bb9c55ac8bb72fab7c7d29e6b00bff917fcee909888aa3340e62111e253357e900982f8a260bc7f55bdeaab7c7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000480)=r2)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_bp={&(0x7f0000000680)}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0)
write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0d00000000010000020000000002000082000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000200"/28], 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/312, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, &(0x7f00000001c0), 0x0}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000600000000000000000000006800040000000000000000002a0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86)
r9 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000200)='syz0\x00', 0x1ff)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffffffffeec, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

0s ago: executing program 3 (id=2791):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = gettid()
syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/mnt\x00')
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8f, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbc", 0xf}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a84", 0xee}], 0x3}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="95"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000500)=""/5, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94)
socketpair(0x1, 0x1, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x21ff, 0x5e, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe}, 0x50)

kernel console output (not intermixed with test programs):

50
[  611.646857][T11712]  proc_fail_nth_read+0x1e8/0x260
[  611.646892][T11712]  ? proc_fault_inject_write+0x360/0x360
[  611.646928][T11712]  ? fsnotify_perm+0x271/0x5e0
[  611.646957][T11712]  ? proc_fault_inject_write+0x360/0x360
[  611.646989][T11712]  vfs_read+0x298/0x990
[  611.647026][T11712]  ? kernel_read+0x1e0/0x1e0
[  611.647058][T11712]  ? __fget_files+0x28/0x460
[  611.647095][T11712]  ? __fget_files+0x3fc/0x460
[  611.647134][T11712]  ? __fdget_pos+0x2a3/0x330
[  611.647161][T11712]  ? ksys_read+0x74/0x260
[  611.647194][T11712]  ksys_read+0x151/0x260
[  611.647227][T11712]  ? vfs_write+0x9a0/0x9a0
[  611.647262][T11712]  ? lockdep_hardirqs_on+0x98/0x150
[  611.647296][T11712]  do_syscall_64+0x55/0xb0
[  611.647319][T11712]  ? clear_bhb_loop+0x40/0x90
[  611.647343][T11712]  ? clear_bhb_loop+0x40/0x90
[  611.647370][T11712]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  611.647394][T11712] RIP: 0033:0x7f1f55b5e90e
[  611.647414][T11712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  611.647434][T11712] RSP: 002b:00007f1f56a90fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  611.647459][T11712] RAX: ffffffffffffffda RBX: 00007f1f56a916c0 RCX: 00007f1f55b5e90e
[  611.647476][T11712] RDX: 000000000000000f RSI: 00007f1f56a910a0 RDI: 0000000000000006
[  611.647490][T11712] RBP: 00007f1f56a91090 R08: 0000000000000000 R09: 0000000000000000
[  611.647505][T11712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.647518][T11712] R13: 00007f1f55e26038 R14: 00007f1f55e25fa0 R15: 00007ffde930d048
[  611.647553][T11712]  </TASK>
[  611.984501][T11718] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2109'.
[  612.169483][T11721] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2110'.
[  612.497643][T11725] netlink: 'syz.2.2112': attribute type 39 has an invalid length.
[  615.306089][T11738] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2116'.
[  615.480857][T11742] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2118'.
[  615.640440][T11746] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2121'.
[  615.658911][T11744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  616.021399][T11752] netlink: 'syz.0.2123': attribute type 39 has an invalid length.
[  616.232247][T11760] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2126'.
[  619.442614][T11768] FAULT_INJECTION: forcing a failure.
[  619.442614][T11768] name failslab, interval 1, probability 0, space 0, times 0
[  619.516586][T11768] CPU: 1 PID: 11768 Comm: syz.1.2130 Not tainted syzkaller #0
[  619.524188][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  619.534332][T11768] Call Trace:
[  619.537689][T11768]  <TASK>
[  619.540712][T11768]  dump_stack_lvl+0x18c/0x250
[  619.545502][T11768]  ? show_regs_print_info+0x20/0x20
[  619.550797][T11768]  ? load_image+0x420/0x420
[  619.555440][T11768]  ? __might_sleep+0xe0/0xe0
[  619.560144][T11768]  ? __lock_acquire+0x7d80/0x7d80
[  619.565243][T11768]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  619.571070][T11768]  should_fail_ex+0x394/0x4c0
[  619.575849][T11768]  should_failslab+0x9/0x20
[  619.580437][T11768]  slab_pre_alloc_hook+0x59/0x300
[  619.585570][T11768]  kmem_cache_alloc+0x5a/0x2c0
[  619.590421][T11768]  ? getname_flags+0xbb/0x500
[  619.595219][T11768]  getname_flags+0xbb/0x500
[  619.599841][T11768]  __x64_sys_mkdirat+0x7c/0xa0
[  619.604698][T11768]  do_syscall_64+0x55/0xb0
[  619.609194][T11768]  ? clear_bhb_loop+0x40/0x90
[  619.613953][T11768]  ? clear_bhb_loop+0x40/0x90
[  619.618713][T11768]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  619.624653][T11768] RIP: 0033:0x7f8b21b9e0d9
[  619.629121][T11768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  619.648863][T11768] RSP: 002b:00007f8b22a01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  619.657344][T11768] RAX: ffffffffffffffda RBX: 00007f8b21e25fa0 RCX: 00007f8b21b9e0d9
[  619.665378][T11768] RDX: 00000000000001ff RSI: 0000200000000200 RDI: 000000000000000e
[  619.673397][T11768] RBP: 00007f8b22a01090 R08: 0000000000000000 R09: 0000000000000000
[  619.681414][T11768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  619.689432][T11768] R13: 00007f8b21e26038 R14: 00007f8b21e25fa0 R15: 00007ffcceaefb58
[  619.697486][T11768]  </TASK>
[  619.860100][T11775] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2131'.
[  619.964337][T11777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  620.041309][T11779] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2133'.
[  620.351273][T11784] netlink: 'syz.2.2135': attribute type 39 has an invalid length.
[  620.531544][T11789] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2138'.
[  620.771335][T11795] netlink: 'syz.0.2141': attribute type 19 has an invalid length.
[  623.783314][T11808] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2145'.
[  623.806903][T11804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  623.884094][T11809] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2144'.
[  624.142688][T11815] netlink: 'syz.0.2148': attribute type 39 has an invalid length.
[  624.331346][T11819] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.2150'.
[  624.714736][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  624.721306][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  627.445660][T11831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  627.729437][T11837] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2156'.
[  628.039650][T11844] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2159'.
[  628.140410][T11845] netlink: 'syz.2.2160': attribute type 39 has an invalid length.
[  628.365057][T11852] netlink: 'syz.1.2162': attribute type 29 has an invalid length.
[  628.403428][T11852] netlink: 'syz.1.2162': attribute type 29 has an invalid length.
[  628.919492][T11856] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.2164'.
[  631.315895][T11859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  631.799708][T11872] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2170'.
[  631.983762][T11874] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2171'.
[  632.126528][T11877] netlink: 'syz.0.2173': attribute type 39 has an invalid length.
[  632.181775][T11880] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2174'.
[  632.380206][T11886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  632.471770][T11885] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.2176'.
[  635.435061][T11903] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2182'.
[  635.672312][T11908] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2184'.
[  635.758825][T11910] netlink: 'syz.2.2185': attribute type 39 has an invalid length.
[  636.201115][T11915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  636.557266][T11923] FAULT_INJECTION: forcing a failure.
[  636.557266][T11923] name failslab, interval 1, probability 0, space 0, times 0
[  636.580090][T11923] CPU: 1 PID: 11923 Comm: syz.3.2190 Not tainted syzkaller #0
[  636.587653][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  636.597815][T11923] Call Trace:
[  636.601148][T11923]  <TASK>
[  636.604122][T11923]  dump_stack_lvl+0x18c/0x250
[  636.608863][T11923]  ? show_regs_print_info+0x20/0x20
[  636.614110][T11923]  ? load_image+0x420/0x420
[  636.618668][T11923]  ? __might_sleep+0xe0/0xe0
[  636.623306][T11923]  ? __lock_acquire+0x7d80/0x7d80
[  636.628389][T11923]  should_fail_ex+0x394/0x4c0
[  636.633128][T11923]  should_failslab+0x9/0x20
[  636.637688][T11923]  slab_pre_alloc_hook+0x59/0x300
[  636.642773][T11923]  ? page_pool_create+0x71/0x5c0
[  636.647884][T11923]  __kmem_cache_alloc_node+0x53/0x250
[  636.653305][T11923]  ? page_pool_create+0x71/0x5c0
[  636.658292][T11923]  kmalloc_node_trace+0x26/0xe0
[  636.663201][T11923]  page_pool_create+0x71/0x5c0
[  636.668022][T11923]  bpf_test_run_xdp_live+0x203/0x1b30
[  636.673458][T11923]  ? 0xffffffffa0004740
[  636.677653][T11923]  ? 0xffffffffa0004740
[  636.681849][T11923]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  636.687800][T11923]  ? xdp_convert_md_to_buff+0x330/0x330
[  636.693428][T11923]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  636.699717][T11923]  ? _copy_from_user+0xa5/0xe0
[  636.704550][T11923]  ? bpf_test_init+0x119/0x140
[  636.709356][T11923]  ? xdp_convert_md_to_buff+0x5b/0x330
[  636.714853][T11923]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  636.720270][T11923]  ? __lock_acquire+0x7d80/0x7d80
[  636.725353][T11923]  ? dev_put+0x80/0x80
[  636.729503][T11923]  ? dev_put+0x80/0x80
[  636.733619][T11923]  bpf_prog_test_run+0x31f/0x390
[  636.738613][T11923]  __sys_bpf+0x49d/0x890
[  636.742907][T11923]  ? bpf_link_show_fdinfo+0x390/0x390
[  636.748334][T11923]  ? lock_chain_count+0x20/0x20
[  636.753260][T11923]  __x64_sys_bpf+0x7c/0x90
[  636.757718][T11923]  do_syscall_64+0x55/0xb0
[  636.762180][T11923]  ? clear_bhb_loop+0x40/0x90
[  636.766928][T11923]  ? clear_bhb_loop+0x40/0x90
[  636.771649][T11923]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  636.777591][T11923] RIP: 0033:0x7f81c8f9e0d9
[  636.782071][T11923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.801728][T11923] RSP: 002b:00007f81c9eff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  636.810201][T11923] RAX: ffffffffffffffda RBX: 00007f81c9225fa0 RCX: 00007f81c8f9e0d9
[  636.818215][T11923] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  636.826225][T11923] RBP: 00007f81c9eff090 R08: 0000000000000000 R09: 0000000000000000
[  636.834230][T11923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.842247][T11923] R13: 00007f81c9226038 R14: 00007f81c9225fa0 R15: 00007fffb53031e8
[  636.850278][T11923]  </TASK>
[  636.938120][T11926] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2191'.
[  637.049264][T11930] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2193'.
[  640.043527][T11937] netlink: 'syz.3.2197': attribute type 39 has an invalid length.
[  640.130801][T11939] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2196'.
[  640.290558][T11942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  640.797958][T11953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2202'.
[  640.950297][T11958] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2204'.
[  640.972707][T11958] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  641.033852][T11955] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.2203'.
[  641.251576][T11966] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2206'.
[  644.401110][T11970] netlink: 'syz.1.2208': attribute type 39 has an invalid length.
[  644.450060][T11973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  645.074781][T11986] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2211'.
[  645.504573][T11990] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.2214'.
[  645.771595][T11997] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2217'.
[  646.671277][T12006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  646.973675][T12010] netlink: 'syz.2.2221': attribute type 39 has an invalid length.
[  648.919022][T12013] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2223'.
[  649.663158][T12031] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2228'.
[  649.692366][T12032] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2230'.
[  650.096013][T12041] netlink: 'syz.2.2232': attribute type 39 has an invalid length.
[  650.128757][T12042] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2234'.
[  653.085915][T12049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  653.771840][T12064] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2242'.
[  653.875174][T12068] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2241'.
[  654.047089][T12070] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2244'.
[  654.063336][T12070] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  657.029325][T12076] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2246'.
[  657.121340][T12081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  657.161753][T12079] netlink: 'syz.0.2247': attribute type 39 has an invalid length.
[  657.246105][T12083] delete_channel: no stack
[  657.484895][T12094] FAULT_INJECTION: forcing a failure.
[  657.484895][T12094] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  657.517971][T12094] CPU: 0 PID: 12094 Comm: syz.3.2254 Not tainted syzkaller #0
[  657.525679][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  657.535827][T12094] Call Trace:
[  657.539190][T12094]  <TASK>
[  657.542199][T12094]  dump_stack_lvl+0x18c/0x250
[  657.546984][T12094]  ? show_regs_print_info+0x20/0x20
[  657.552273][T12094]  ? load_image+0x420/0x420
[  657.556880][T12094]  ? __might_fault+0xaa/0x120
[  657.561650][T12094]  ? __lock_acquire+0x7d80/0x7d80
[  657.566784][T12094]  should_fail_ex+0x394/0x4c0
[  657.571580][T12094]  _copy_from_user+0x2f/0xe0
[  657.576306][T12094]  kstrtouint_from_user+0xde/0x170
[  657.581524][T12094]  ? kstrtol_from_user+0x190/0x190
[  657.586789][T12094]  proc_fail_nth_write+0x8f/0x250
[  657.591911][T12094]  ? proc_fail_nth_read+0x260/0x260
[  657.597237][T12094]  ? proc_fail_nth_read+0x260/0x260
[  657.602542][T12094]  vfs_write+0x299/0x9a0
[  657.606898][T12094]  ? file_end_write+0x250/0x250
[  657.611827][T12094]  ? __fget_files+0x28/0x460
[  657.616482][T12094]  ? __fget_files+0x3fc/0x460
[  657.621253][T12094]  ? __fdget_pos+0x2a3/0x330
[  657.625901][T12094]  ? ksys_write+0x74/0x260
[  657.630414][T12094]  ksys_write+0x151/0x260
[  657.634822][T12094]  ? __ia32_sys_read+0x90/0x90
[  657.639662][T12094]  ? lockdep_hardirqs_on+0x98/0x150
[  657.644964][T12094]  do_syscall_64+0x55/0xb0
[  657.649438][T12094]  ? clear_bhb_loop+0x40/0x90
[  657.654186][T12094]  ? clear_bhb_loop+0x40/0x90
[  657.658928][T12094]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  657.664879][T12094] RIP: 0033:0x7f81c8f5e90e
[  657.669352][T12094] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  657.689026][T12094] RSP: 002b:00007f81c9eddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  657.697513][T12094] RAX: ffffffffffffffda RBX: 00007f81c9ede6c0 RCX: 00007f81c8f5e90e
[  657.705576][T12094] RDX: 0000000000000001 RSI: 00007f81c9ede0a0 RDI: 0000000000000006
[  657.713605][T12094] RBP: 00007f81c9ede090 R08: 0000000000000000 R09: 0000000000000000
[  657.721627][T12094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.729654][T12094] R13: 00007f81c9226128 R14: 00007f81c9226090 R15: 00007fffb53031e8
[  657.737730][T12094]  </TASK>
[  658.216718][T12104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  658.338071][T12109] FAULT_INJECTION: forcing a failure.
[  658.338071][T12109] name failslab, interval 1, probability 0, space 0, times 0
[  658.355483][T12109] CPU: 1 PID: 12109 Comm: syz.1.2260 Not tainted syzkaller #0
[  658.363029][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  658.373144][T12109] Call Trace:
[  658.376479][T12109]  <TASK>
[  658.379471][T12109]  dump_stack_lvl+0x18c/0x250
[  658.384213][T12109]  ? show_regs_print_info+0x20/0x20
[  658.389472][T12109]  ? load_image+0x420/0x420
[  658.394058][T12109]  should_fail_ex+0x394/0x4c0
[  658.398797][T12109]  should_failslab+0x9/0x20
[  658.403356][T12109]  slab_pre_alloc_hook+0x59/0x300
[  658.408451][T12109]  kmem_cache_alloc+0x5a/0x2c0
[  658.413280][T12109]  ? __nf_conntrack_alloc+0x93/0x370
[  658.418739][T12109]  __nf_conntrack_alloc+0x93/0x370
[  658.423935][T12109]  init_conntrack+0x166/0xe20
[  658.428688][T12109]  ? early_drop+0x7f0/0x7f0
[  658.433255][T12109]  ? nf_conntrack_find_get+0x670/0x670
[  658.438764][T12109]  ? __local_bh_enable_ip+0x13a/0x1c0
[  658.444183][T12109]  ? __siphash_unaligned+0x25c/0x3d0
[  658.449574][T12109]  nf_conntrack_in+0xc29/0x15b0
[  658.454507][T12109]  ? nf_ct_pernet+0x270/0x270
[  658.459287][T12109]  ? ipt_do_table+0x2c5/0x15c0
[  658.464266][T12109]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[  658.469810][T12109]  ? ipv4_conntrack_local+0x123/0x200
[  658.475275][T12109]  ? ipv4_conntrack_in+0x20/0x20
[  658.480289][T12109]  nf_hook_slow+0xbd/0x200
[  658.484773][T12109]  ? nf_hook+0x390/0x390
[  658.489075][T12109]  nf_hook+0x228/0x390
[  658.493226][T12109]  ? nf_hook+0xa2/0x390
[  658.497427][T12109]  ? __ip_local_out+0x5f0/0x5f0
[  658.502334][T12109]  ? nf_hook+0x390/0x390
[  658.506684][T12109]  ? ip_fast_csum+0x1ee/0x2b0
[  658.511431][T12109]  __ip_local_out+0x4db/0x5f0
[  658.516161][T12109]  ? nf_hook+0x390/0x390
[  658.520459][T12109]  ip_send_skb+0x4c/0x1d0
[  658.524854][T12109]  udp_send_skb+0xa7d/0x1440
[  658.529564][T12109]  udp_sendmsg+0x1b23/0x23d0
[  658.534303][T12109]  ? release_sock+0x2f/0x1c0
[  658.538982][T12109]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  658.543900][T12109]  ? udp_cmsg_send+0x350/0x350
[  658.548732][T12109]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  658.554783][T12109]  ? lock_chain_count+0x20/0x20
[  658.559698][T12109]  ? inet_sendmsg+0x10d/0x2a0
[  658.564446][T12109]  ? __local_bh_enable_ip+0x13a/0x1c0
[  658.569889][T12109]  ? _local_bh_enable+0xa0/0xa0
[  658.574799][T12109]  ? inet_sendmsg+0x10d/0x2a0
[  658.579544][T12109]  ? inet_sendmsg+0x10d/0x2a0
[  658.584289][T12109]  ? inet_send_prepare+0x250/0x250
[  658.589467][T12109]  ____sys_sendmsg+0x61b/0x980
[  658.594304][T12109]  ? __asan_memset+0x22/0x40
[  658.598961][T12109]  ? __sys_sendmsg_sock+0x30/0x30
[  658.604046][T12109]  ? __import_iovec+0x3fa/0x850
[  658.608969][T12109]  ? import_iovec+0x73/0xa0
[  658.613561][T12109]  ___sys_sendmsg+0x2a6/0x360
[  658.618296][T12109]  ? finish_task_switch+0x25d/0x8f0
[  658.623559][T12109]  ? __sys_sendmsg+0x2b0/0x2b0
[  658.628406][T12109]  ? __schedule+0x15b6/0x4660
[  658.633218][T12109]  __se_sys_sendmsg+0x1d0/0x2c0
[  658.638163][T12109]  ? __x64_sys_sendmsg+0x80/0x80
[  658.643181][T12109]  ? lockdep_hardirqs_on+0x98/0x150
[  658.648443][T12109]  do_syscall_64+0x55/0xb0
[  658.652910][T12109]  ? clear_bhb_loop+0x40/0x90
[  658.657654][T12109]  ? clear_bhb_loop+0x40/0x90
[  658.662394][T12109]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  658.668345][T12109] RIP: 0033:0x7f8b21b9e0d9
[  658.672806][T12109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  658.692473][T12109] RSP: 002b:00007f8b22a01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  658.700945][T12109] RAX: ffffffffffffffda RBX: 00007f8b21e25fa0 RCX: 00007f8b21b9e0d9
[  658.708996][T12109] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000004
[  658.717035][T12109] RBP: 00007f8b22a01090 R08: 0000000000000000 R09: 0000000000000000
[  658.725066][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  658.733095][T12109] R13: 00007f8b21e26038 R14: 00007f8b21e25fa0 R15: 00007ffcceaefb58
[  658.741146][T12109]  </TASK>
[  658.892679][T12111] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2261'.
[  659.043260][T12113] netlink: 'syz.1.2262': attribute type 39 has an invalid length.
[  661.340100][T12118] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2265'.
[  661.943799][T12137] FAULT_INJECTION: forcing a failure.
[  661.943799][T12137] name failslab, interval 1, probability 0, space 0, times 0
[  661.954873][T12131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  661.978295][T12137] CPU: 1 PID: 12137 Comm: syz.0.2270 Not tainted syzkaller #0
[  661.985846][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  661.995963][T12137] Call Trace:
[  661.999289][T12137]  <TASK>
[  662.002268][T12137]  dump_stack_lvl+0x18c/0x250
[  662.007006][T12137]  ? show_regs_print_info+0x20/0x20
[  662.012258][T12137]  ? load_image+0x420/0x420
[  662.016825][T12137]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  662.022869][T12137]  ? __asan_memset+0x22/0x40
[  662.027520][T12137]  should_fail_ex+0x394/0x4c0
[  662.032260][T12137]  should_failslab+0x9/0x20
[  662.036866][T12137]  slab_pre_alloc_hook+0x59/0x300
[  662.041951][T12137]  ? __debug_object_init+0xec/0x450
[  662.047221][T12137]  kmem_cache_alloc+0x5a/0x2c0
[  662.052057][T12137]  ? slab_build_skb+0x28/0x3e0
[  662.056909][T12137]  slab_build_skb+0x28/0x3e0
[  662.061566][T12137]  bpf_prog_test_run_skb+0x38f/0x18f0
[  662.067006][T12137]  ? __fget_files+0x28/0x460
[  662.071666][T12137]  ? __fget_files+0x3fc/0x460
[  662.076393][T12137]  ? cpu_online+0x60/0x60
[  662.080761][T12137]  bpf_prog_test_run+0x31f/0x390
[  662.085728][T12137]  __sys_bpf+0x49d/0x890
[  662.090005][T12137]  ? bpf_link_show_fdinfo+0x390/0x390
[  662.095452][T12137]  ? lock_chain_count+0x20/0x20
[  662.100343][T12137]  __x64_sys_bpf+0x7c/0x90
[  662.104790][T12137]  do_syscall_64+0x55/0xb0
[  662.109231][T12137]  ? clear_bhb_loop+0x40/0x90
[  662.113936][T12137]  ? clear_bhb_loop+0x40/0x90
[  662.118671][T12137]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  662.124590][T12137] RIP: 0033:0x7f70f7b9e0d9
[  662.129043][T12137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  662.148675][T12137] RSP: 002b:00007f70f8a59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  662.157121][T12137] RAX: ffffffffffffffda RBX: 00007f70f7e26090 RCX: 00007f70f7b9e0d9
[  662.165119][T12137] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a
[  662.173113][T12137] RBP: 00007f70f8a59090 R08: 0000000000000000 R09: 0000000000000000
[  662.181110][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  662.189106][T12137] R13: 00007f70f7e26128 R14: 00007f70f7e26090 R15: 00007ffc89fd0e98
[  662.197119][T12137]  </TASK>
[  662.396315][T12142] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2273'.
[  662.523496][T12143] netlink: 'syz.0.2274': attribute type 39 has an invalid length.
[  662.539562][T12147] netlink: 'syz.1.2275': attribute type 6 has an invalid length.
[  662.548211][T12147] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2275'.
[  665.441080][T12153] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2277'.
[  665.911721][T12163] FAULT_INJECTION: forcing a failure.
[  665.911721][T12163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  665.961476][T12163] CPU: 0 PID: 12163 Comm: syz.1.2280 Not tainted syzkaller #0
[  665.969031][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  665.979166][T12163] Call Trace:
[  665.982493][T12163]  <TASK>
[  665.985463][T12163]  dump_stack_lvl+0x18c/0x250
[  665.990202][T12163]  ? show_regs_print_info+0x20/0x20
[  665.995483][T12163]  ? load_image+0x420/0x420
[  666.000029][T12163]  ? __might_fault+0xaa/0x120
[  666.004780][T12163]  ? __lock_acquire+0x7d80/0x7d80
[  666.009868][T12163]  should_fail_ex+0x394/0x4c0
[  666.014613][T12163]  _copy_from_user+0x2f/0xe0
[  666.019242][T12163]  __sys_bpf+0x23e/0x890
[  666.023526][T12163]  ? bpf_link_show_fdinfo+0x390/0x390
[  666.028970][T12163]  ? lock_chain_count+0x20/0x20
[  666.033857][T12163]  __x64_sys_bpf+0x7c/0x90
[  666.038327][T12163]  do_syscall_64+0x55/0xb0
[  666.042768][T12163]  ? clear_bhb_loop+0x40/0x90
[  666.047483][T12163]  ? clear_bhb_loop+0x40/0x90
[  666.052193][T12163]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  666.058124][T12163] RIP: 0033:0x7f8b21b9e0d9
[  666.062570][T12163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.082441][T12163] RSP: 002b:00007f8b22a01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  666.090899][T12163] RAX: ffffffffffffffda RBX: 00007f8b21e25fa0 RCX: 00007f8b21b9e0d9
[  666.098910][T12163] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  666.106913][T12163] RBP: 00007f8b22a01090 R08: 0000000000000000 R09: 0000000000000000
[  666.114915][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  666.122915][T12163] R13: 00007f8b21e26038 R14: 00007f8b21e25fa0 R15: 00007ffcceaefb58
[  666.130934][T12163]  </TASK>
[  666.208256][T12166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  666.377172][T12168] netlink: 'syz.2.2282': attribute type 39 has an invalid length.
[  666.461341][T12171] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2283'.
[  666.554060][T12177] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2285'.
[  666.565664][T12177] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  666.770281][T12182] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2287'.
[  666.849617][T12185] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2289'.
[  667.193377][T12187] netlink: 'syz.1.2288': attribute type 39 has an invalid length.
[  670.137203][T12191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  670.187174][T12194] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2294'.
[  670.435891][T12200] netlink: 'syz.3.2295': attribute type 39 has an invalid length.
[  670.903671][T12208] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2299'.
[  671.340570][T12216] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2300'.
[  671.684329][T12220] netlink: 'syz.1.2302': attribute type 39 has an invalid length.
[  671.865540][T12222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  671.972619][T12224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  674.943913][T12237] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2310'.
[  675.261273][T12243] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2319'.
[  675.344984][T12243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  675.439580][T12241] netlink: 'syz.1.2311': attribute type 39 has an invalid length.
[  675.479084][T12248] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2313'.
[  676.314440][T12252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  676.541735][T12259] netlink: 'syz.3.2316': attribute type 39 has an invalid length.
[  676.792906][T12264] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2324'.
[  676.891104][T12264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  679.891241][T12272] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2322'.
[  679.985296][T12274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  680.109708][T12278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  680.208128][T12280] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2326'.
[  680.467564][T12282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  680.536624][T12284] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2328'.
[  680.745175][T12288] netlink: 'syz.1.2330': attribute type 39 has an invalid length.
[  680.999892][T12294] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2332'.
[  681.018009][T12294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  683.935821][T12299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  683.982830][T12297] netlink: 'syz.0.2342': attribute type 39 has an invalid length.
[  684.159205][T12304] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2336'.
[  684.665220][T12313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  684.678647][T12310] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2339'.
[  684.955029][T12322] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2345'.
[  684.988087][T12322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  685.489475][T12330] netlink: 'syz.1.2347': attribute type 39 has an invalid length.
[  685.903756][T12333] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2348'.
[  686.133393][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  686.148345][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  688.492160][T12339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  688.728719][T12345] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2360'.
[  691.583035][T12347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  691.638569][T12351] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2354'.
[  691.924970][T12355] netlink: 'syz.1.2358': attribute type 39 has an invalid length.
[  691.943703][T12358] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2355'.
[  692.027988][T12358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  692.697494][T12365] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2359'.
[  693.990479][T12377] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2365'.
[  696.722432][T12382] netlink: 'syz.3.2368': attribute type 39 has an invalid length.
[  696.743460][T12384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  697.316120][T12390] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2370'.
[  697.368172][T12390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  697.449677][T12396] netlink: 'syz.3.2379': attribute type 39 has an invalid length.
[  697.546480][T12399] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  697.557147][T12399] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  697.582247][T12399] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  697.604526][T12399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  697.626936][T12399] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  697.641868][T12399] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  697.676927][ T5781] bond0: (slave syz_tun): Releasing backup interface
[  698.086999][T12405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  698.301330][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.334581][T12409] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2381'.
[  698.389075][T12409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  698.634314][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.651642][T12418] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2375'.
[  698.734312][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.881365][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.921786][T12398] chnl_net:caif_netlink_parms(): no params data found
[  698.991280][T12426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  699.115023][T12428] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  699.157436][T12431] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2385'.
[  699.198772][T12431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  699.458132][T12398] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.465428][T12398] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.473549][T12398] bridge_slave_0: entered allmulticast mode
[  699.487791][T12398] bridge_slave_0: entered promiscuous mode
[  699.504384][T12398] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.521367][T12398] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.555660][T12398] bridge_slave_1: entered allmulticast mode
[  699.566547][T12398] bridge_slave_1: entered promiscuous mode
[  699.644112][T12398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.705704][T12398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  699.728099][ T5784] Bluetooth: hci4: command tx timeout
[  700.126394][T12398] team0: Port device team_slave_0 added
[  700.255540][T12398] team0: Port device team_slave_1 added
[  700.315875][T12455] netlink: 'syz.1.2382': attribute type 39 has an invalid length.
[  700.521266][T12398] batman_adv: batadv0: Adding interface: batadv_slave_0
[  700.540803][T12398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  700.608219][T12398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  700.630341][T12398] batman_adv: batadv0: Adding interface: batadv_slave_1
[  700.637355][T12398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  700.666249][T12398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  700.895311][T12461] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2383'.
[  701.000517][T12398] hsr_slave_0: entered promiscuous mode
[  701.019059][T12398] hsr_slave_1: entered promiscuous mode
[  701.025563][T12398] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  701.037777][T12398] Cannot create hsr debugfs directory
[  701.414623][T12468] netlink: 'syz.0.2392': attribute type 39 has an invalid length.
[  701.807983][ T5784] Bluetooth: hci4: command tx timeout
[  702.178352][T12481] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2387'.
[  702.887877][T12486] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2388'.
[  702.962987][T12486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  703.015645][T12492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  703.178981][ T2966] wlan1: Trigger new scan to find an IBSS to join
[  703.436267][   T59] hsr_slave_0: left promiscuous mode
[  703.472063][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  703.487984][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  703.500065][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  703.507550][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  703.560286][   T59] bridge0: port 2(dummy0) entered disabled state
[  703.595711][   T59] veth1_macvtap: left promiscuous mode
[  703.601924][   T59] veth0_macvtap: left promiscuous mode
[  703.617908][   T59] veth1_vlan: left promiscuous mode
[  703.898442][ T5784] Bluetooth: hci4: command tx timeout
[  704.293357][   T59] team0 (unregistering): Port device vlan0 removed
[  704.363394][   T59] team0 (unregistering): Port device virt_wifi0 removed
[  704.590919][   T59] team0 (unregistering): Port device team_slave_1 removed
[  704.639077][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  704.706282][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  704.755489][   T59] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  704.790618][   T59] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface
[  705.003016][   T59] team0 (unregistering): Port device bond0 removed
[  705.032353][   T59] bond0 (unregistering): Released all slaves
[  705.127965][T12508] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  705.270004][T12398] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  705.292102][T12398] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  705.315029][T12398] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  705.336717][T12398] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  705.548004][T12398] 8021q: adding VLAN 0 to HW filter on device bond0
[  705.607189][T12398] 8021q: adding VLAN 0 to HW filter on device team0
[  705.630738][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.638059][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state
[  705.666826][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.674102][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  705.968981][ T5784] Bluetooth: hci4: command tx timeout
[  706.041466][T12398] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.142648][T12398] veth0_vlan: entered promiscuous mode
[  706.166832][T12398] veth1_vlan: entered promiscuous mode
[  706.229278][T12398] veth0_macvtap: entered promiscuous mode
[  706.250461][T12398] veth1_macvtap: entered promiscuous mode
[  706.283166][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.294392][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.310582][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.325144][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.337611][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.355115][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.367270][T12398] batman_adv: batadv0: Interface activated: batadv_slave_0
[  706.394107][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.409816][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.424907][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.439425][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.451024][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.468109][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.484112][T12398] batman_adv: batadv0: Interface activated: batadv_slave_1
[  706.500881][T12398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  706.510739][T12398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  706.519974][T12398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  706.529723][T12398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  706.639741][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.647623][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  706.708769][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.716743][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  706.989085][T12550] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2369'.
[  707.259325][ T1333] wlan1: Trigger new scan to find an IBSS to join
[  707.454097][T12558] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2396'.
[  707.693064][T12563] netlink: 'syz.3.2395': attribute type 39 has an invalid length.
[  707.787310][ T5778] bond0: (slave syz_tun): Releasing backup interface
[  708.082493][T12399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  708.092923][T12399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  708.101535][T12399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  708.132586][ T2966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.148003][T12399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  708.158277][T12399] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  708.169548][T12399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  708.250283][T12567] netlink: 'syz.1.2397': attribute type 39 has an invalid length.
[  708.422119][ T2966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.463602][T12576] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2398'.
[  708.550911][ T2966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.742610][ T2966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.822107][T12582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  708.946389][T12589] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2399'.
[  708.962878][T12589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  709.772427][T12602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  709.824758][T12568] chnl_net:caif_netlink_parms(): no params data found
[  710.040700][T12600] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2409'.
[  710.075636][T12600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  710.208456][T12399] Bluetooth: hci1: command tx timeout
[  710.718056][T12619] netlink: 'syz.1.2403': attribute type 39 has an invalid length.
[  710.872367][T12623] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2412'.
[  710.930011][T12623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  711.032891][T12568] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.068229][T12568] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.075574][T12568] bridge_slave_0: entered allmulticast mode
[  711.119977][T12568] bridge_slave_0: entered promiscuous mode
[  711.218654][T12634] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2405'.
[  711.252463][ T1333] wlan1: Trigger new scan to find an IBSS to join
[  711.401402][T12568] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.441591][T12568] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.458832][T12568] bridge_slave_1: entered allmulticast mode
[  711.478809][T12568] bridge_slave_1: entered promiscuous mode
[  711.767086][T12568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  711.787520][T12640] netlink: 'syz.3.2406': attribute type 39 has an invalid length.
[  711.825507][T12568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  711.868019][T12642] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2407'.
[  711.925050][T12568] team0: Port device team_slave_0 added
[  711.940757][T12568] team0: Port device team_slave_1 added
[  712.052584][T12568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  712.067758][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  712.103454][T12568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  712.122475][T12568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  712.134947][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  712.174456][T12568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  712.288422][T12399] Bluetooth: hci1: command tx timeout
[  712.301556][T12653] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2411'.
[  712.328119][T12653] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  712.459733][T12651] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2418'.
[  712.684305][ T2966] hsr_slave_0: left promiscuous mode
[  712.699812][ T2966] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  712.713093][ T2966] batman_adv: batadv0: Removing interface: batadv_slave_0
[  712.730350][ T2966] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  712.738521][ T2966] batman_adv: batadv0: Removing interface: batadv_slave_1
[  712.757379][ T2966] bridge_slave_1: left allmulticast mode
[  712.784351][ T2966] bridge_slave_1: left promiscuous mode
[  712.805150][ T2966] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.832763][ T2966] bridge_slave_0: left allmulticast mode
[  712.843170][ T2966] bridge_slave_0: left promiscuous mode
[  712.858802][ T2966] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.912466][ T2966] veth1_macvtap: left promiscuous mode
[  712.922459][ T2966] veth0_macvtap: left promiscuous mode
[  712.928522][ T2966] veth1_vlan: left promiscuous mode
[  712.934213][ T2966] veth0_vlan: left promiscuous mode
[  713.254524][   T59] wlan1: Creating new IBSS network, BSSID b6:13:d6:cd:5a:c6
[  713.566197][ T2966] team0 (unregistering): Port device virt_wifi0 removed
[  713.786091][ T2966] team0 (unregistering): Port device team_slave_1 removed
[  713.835749][ T2966] team0 (unregistering): Port device team_slave_0 removed
[  713.876505][ T2966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.922261][ T2966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.242745][ T2966] bond0 (unregistering): Released all slaves
[  714.327217][T12568] hsr_slave_0: entered promiscuous mode
[  714.333903][T12568] hsr_slave_1: entered promiscuous mode
[  714.340759][T12654] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2408'.
[  714.351513][T12666] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2413'.
[  714.368549][T12399] Bluetooth: hci1: command tx timeout
[  714.824019][T12676] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2415'.
[  714.871663][T12677] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2416'.
[  714.884466][T12677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  714.930711][T12680] netlink: 'syz.2.2417': attribute type 39 has an invalid length.
[  715.115249][T12680] hsr_slave_1 (unregistering): left promiscuous mode
[  715.582896][T12697] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2420'.
[  715.691155][T12699] netlink: 'syz.1.2419': attribute type 39 has an invalid length.
[  715.906796][T12703] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2421'.
[  715.920284][T12703] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  715.939600][T12705] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2422'.
[  716.313380][T12714] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2430'.
[  716.362047][T12715] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2431'.
[  716.375973][T12715] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  716.445654][T12568] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  716.452963][T12399] Bluetooth: hci1: command tx timeout
[  716.483769][T12568] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  716.523641][T12568] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  716.539238][T12568] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  716.647631][T12568] 8021q: adding VLAN 0 to HW filter on device bond0
[  716.679054][T12568] 8021q: adding VLAN 0 to HW filter on device team0
[  716.693748][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state
[  716.701020][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state
[  716.716556][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.723798][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.122761][T12568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  717.231545][T12568] veth0_vlan: entered promiscuous mode
[  717.282853][T12568] veth1_vlan: entered promiscuous mode
[  717.333256][T12736] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2425'.
[  717.346173][T12736] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  717.384827][T12568] veth0_macvtap: entered promiscuous mode
[  717.425586][T12568] veth1_macvtap: entered promiscuous mode
[  717.467618][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  717.484692][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.495567][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  717.506258][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.516339][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  717.527001][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.540130][T12568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  717.583554][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.631838][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.654646][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.673792][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.686934][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.704628][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.716870][T12568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  717.827111][T12568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.875756][T12568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.897818][T12568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  717.906633][T12568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  718.124788][T12758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  718.246096][T12757] netlink: 'syz.1.2428': attribute type 39 has an invalid length.
[  718.379272][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.397907][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.487343][ T2897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.502246][ T2897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.820354][T12765] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  719.197785][T12774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  719.205661][T12774] IPv6: NLM_F_CREATE should be set when creating new route
[  719.213941][T12774] IPv6: NLM_F_CREATE should be set when creating new route
[  719.222511][T12774] IPv6: NLM_F_CREATE should be set when creating new route
[  719.260593][T12776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  719.305296][T12777] netlink: 'syz.0.2429': attribute type 39 has an invalid length.
[  719.615630][T12777] hsr_slave_1 (unregistering): left promiscuous mode
[  719.683308][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  719.704688][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  719.714250][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  719.726345][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  719.735244][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  719.743136][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  719.901223][ T5780] bond0: (slave syz_tun): Releasing backup interface
[  720.054422][ T2897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.186042][ T2897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.315832][ T2897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.355081][T12784] chnl_net:caif_netlink_parms(): no params data found
[  720.413334][ T2897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.557002][T12784] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.566906][T12784] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.574760][T12784] bridge_slave_0: entered allmulticast mode
[  720.582719][T12784] bridge_slave_0: entered promiscuous mode
[  720.608504][T12784] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.615807][T12784] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.624368][T12784] bridge_slave_1: entered allmulticast mode
[  720.632505][T12784] bridge_slave_1: entered promiscuous mode
[  720.732430][T12784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  720.774685][T12784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  720.892978][T12784] team0: Port device team_slave_0 added
[  720.927515][T12784] team0: Port device team_slave_1 added
[  720.958694][T12784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  720.965718][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  720.992340][T12784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  721.057442][T12784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  721.066488][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  721.093154][T12784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  721.168526][   T59] wlan1: Trigger new scan to find an IBSS to join
[  721.178813][T12784] hsr_slave_0: entered promiscuous mode
[  721.185789][T12784] hsr_slave_1: entered promiscuous mode
[  721.194319][T12784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  721.202306][T12784] Cannot create hsr debugfs directory
[  721.809406][ T5784] Bluetooth: hci3: command tx timeout
[  722.000696][T12784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  722.013034][T12784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  722.023996][T12784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  722.035772][T12784] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  722.087286][ T2897] hsr_slave_0: left promiscuous mode
[  722.094474][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.102634][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.112918][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.120927][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.139418][ T2897] hsr0: left allmulticast mode
[  722.144465][ T2897] bridge0: port 1(hsr0) entered disabled state
[  722.220497][ T2897] veth1_macvtap: left promiscuous mode
[  722.226122][ T2897] veth0_macvtap: left promiscuous mode
[  722.246265][ T2897] veth1_vlan: left promiscuous mode
[  722.251887][ T2897] veth0_vlan: left promiscuous mode
[  722.340035][T12830] __nla_validate_parse: 3 callbacks suppressed
[  722.340057][T12830] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2437'.
[  722.395666][T12830] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  722.633094][ T2897] team0 (unregistering): Port device geneve1 removed
[  722.922945][ T2897] team0 (unregistering): Port device virt_wifi0 removed
[  723.153074][ T2897] team0 (unregistering): Port device team_slave_1 removed
[  723.206863][ T2897] team0 (unregistering): Port device team_slave_0 removed
[  723.255590][ T2897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  723.264392][ T1333] wlan1: Trigger new scan to find an IBSS to join
[  723.317456][ T2897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  723.367776][ T2897] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  723.577437][ T2897] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  723.610863][ T2897] team0 (unregistering): Port device bond0 removed
[  723.643622][ T2897] bond0 (unregistering): Released all slaves
[  723.740773][T12837] netlink: 'syz.3.2441': attribute type 39 has an invalid length.
[  723.888651][ T5784] Bluetooth: hci3: command tx timeout
[  723.930199][T12784] 8021q: adding VLAN 0 to HW filter on device bond0
[  723.961563][T12784] 8021q: adding VLAN 0 to HW filter on device team0
[  724.007544][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state
[  724.015687][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state
[  724.057199][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.064570][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state
[  724.194412][T12842] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2443'.
[  724.886617][T12784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  724.974014][T12784] veth0_vlan: entered promiscuous mode
[  725.030655][T12784] veth1_vlan: entered promiscuous mode
[  725.181072][T12784] veth0_macvtap: entered promiscuous mode
[  725.201713][T12784] veth1_macvtap: entered promiscuous mode
[  725.267347][T12784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  725.296711][T12784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.317138][T12784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  725.344597][T12784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.376547][T12784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  725.404613][T12784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.436270][T12784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  725.496060][T12784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  725.514139][T12784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.527530][T12784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  725.546956][T12784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.557483][T12784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  725.582220][T12784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.601165][T12784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  725.644587][T12784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  725.673433][T12784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  725.687088][T12784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  725.703948][T12784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  725.968092][ T5784] Bluetooth: hci3: command tx timeout
[  727.114213][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  727.147214][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  727.248900][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  727.255638][ T2928] wlan1: Trigger new scan to find an IBSS to join
[  727.284360][T12867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  727.291607][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  727.299904][T12867] IPv6: NLM_F_CREATE should be set when creating new route
[  727.307785][T12867] IPv6: NLM_F_CREATE should be set when creating new route
[  727.316313][T12867] IPv6: NLM_F_CREATE should be set when creating new route
[  727.427427][ T2966] wlan1: Creating new IBSS network, BSSID ba:52:b0:a9:a3:d9
[  727.574512][T12875] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2449'.
[  727.603457][T12875] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  727.774410][T12879] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2440'.
[  727.817872][T12879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  727.994363][T12883] netlink: 'syz.2.2452': attribute type 39 has an invalid length.
[  728.047834][ T5784] Bluetooth: hci3: command tx timeout
[  728.183523][T12885] netlink: 'syz.3.2453': attribute type 39 has an invalid length.
[  728.232895][T12887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  728.583293][T12896] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2458'.
[  728.618789][T12896] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  729.235669][T12399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  729.244861][T12399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  729.254379][T12399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  729.265324][T12399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  729.276140][T12399] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  729.284616][T12399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  731.279446][T12894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  731.329109][T12399] Bluetooth: hci0: command tx timeout
[  731.790553][ T5779] bond0: (slave syz_tun): Releasing backup interface
[  731.851550][T12911] netlink: 'syz.0.2463': attribute type 39 has an invalid length.
[  731.951639][T12914] netlink: 'syz.1.2464': attribute type 39 has an invalid length.
[  732.382942][T12914] hsr_slave_1 (unregistering): left promiscuous mode
[  732.488488][T12915] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2462'.
[  732.497616][T12915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  732.523400][T12918] netlink: 'syz.0.2465': attribute type 39 has an invalid length.
[  732.634433][ T2966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.932325][ T2966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.408840][T12399] Bluetooth: hci0: command tx timeout
[  735.498560][T12399] Bluetooth: hci0: command tx timeout
[  736.001657][T12901] chnl_net:caif_netlink_parms(): no params data found
[  736.066396][ T2966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.569314][ T2966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.669607][T12937] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2470'.
[  737.022692][T12901] bridge0: port 1(bridge_slave_0) entered blocking state
[  737.056588][T12901] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.110919][T12901] bridge_slave_0: entered allmulticast mode
[  737.284430][T12901] bridge_slave_0: entered promiscuous mode
[  737.331312][T12949] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2473'.
[  737.400763][T12949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  737.462241][T12901] bridge0: port 2(bridge_slave_1) entered blocking state
[  737.471831][T12901] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.480450][T12901] bridge_slave_1: entered allmulticast mode
[  737.487564][T12901] bridge_slave_1: entered promiscuous mode
[  737.525916][T12951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  737.533983][T12951] IPv6: NLM_F_CREATE should be set when creating new route
[  737.541837][T12951] IPv6: NLM_F_CREATE should be set when creating new route
[  737.550371][T12951] IPv6: NLM_F_CREATE should be set when creating new route
[  737.578320][T12399] Bluetooth: hci0: command tx timeout
[  737.594909][T12901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  737.660544][T12901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  737.789597][T12901] team0: Port device team_slave_0 added
[  737.800532][T12901] team0: Port device team_slave_1 added
[  737.949208][ T2966] tipc: Left network mode
[  737.954122][T12960] netlink: 'syz.2.2475': attribute type 39 has an invalid length.
[  738.050394][T12962] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2482'.
[  738.098956][T12962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  738.222610][T12901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.244952][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.277922][T12901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.376272][T12901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  738.401925][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.477749][T12901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  741.355351][T12974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  742.186022][T12993] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2481'.
[  742.287169][T12996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  742.368247][T12901] hsr_slave_0: entered promiscuous mode
[  742.389756][T12901] hsr_slave_1: entered promiscuous mode
[  742.438054][T12901] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  742.445693][T12901] Cannot create hsr debugfs directory
[  743.243061][T13014] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2488'.
[  743.280974][T13014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  743.445581][T13021] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2490'.
[  743.471131][T13021] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  744.143107][T13027] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  744.314068][T13037] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2499'.
[  744.337845][T13037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  744.354329][T13036] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  745.274782][T13058] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2495'.
[  745.662093][T13071] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  745.976856][ T2966] hsr_slave_0: left promiscuous mode
[  746.055996][ T2966] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  746.087971][ T2966] batman_adv: batadv0: Removing interface: batadv_slave_0
[  746.109392][ T2966] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  746.116875][ T2966] batman_adv: batadv0: Removing interface: batadv_slave_1
[  746.148598][ T2966] batman_adv: batadv0: Removing interface: virt_wifi0
[  746.191578][ T2966] veth1_macvtap: left promiscuous mode
[  746.197385][ T2966] veth0_macvtap: left promiscuous mode
[  746.210812][ T2966] veth1_vlan: left promiscuous mode
[  746.216309][ T2966] veth0_vlan: left promiscuous mode
[  746.831953][ T2966] team0 (unregistering): Port device team_slave_1 removed
[  746.875879][ T2966] team0 (unregistering): Port device team_slave_0 removed
[  746.920914][ T2966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  746.965950][ T2966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  747.018336][ T2966] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  747.265627][ T2966] bond0 (unregistering): Released all slaves
[  747.349790][T13077] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2502'.
[  747.361591][T13077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  747.379702][T13082] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2503'.
[  747.398362][T13082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  747.573411][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  747.580218][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  747.603722][T12901] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  747.670128][T12901] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  747.802586][T13088] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  747.832720][T12901] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  747.847612][T12901] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  747.876623][T13086] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2512'.
[  748.094584][T12901] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.135182][T12901] 8021q: adding VLAN 0 to HW filter on device team0
[  748.160725][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.167986][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state
[  748.192168][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.199449][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  748.209456][   T11] wlan1: Trigger new scan to find an IBSS to join
[  748.216527][   T62] wlan1: Trigger new scan to find an IBSS to join
[  748.559012][T12901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.630674][T12901] veth0_vlan: entered promiscuous mode
[  748.660288][T12901] veth1_vlan: entered promiscuous mode
[  748.724199][T12901] veth0_macvtap: entered promiscuous mode
[  748.742177][T12901] veth1_macvtap: entered promiscuous mode
[  748.765963][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  748.787766][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.798034][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  748.808637][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.820407][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  748.835893][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.852917][T12901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  748.876162][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.888839][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.902646][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.913251][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.926426][T12901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.938367][T12901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.950557][T12901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  748.967555][T12901] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.977501][T12901] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.991881][T12901] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  749.000800][T12901] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.158517][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.166418][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.222307][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.235761][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.454448][T13131] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2514'.
[  749.499428][T13136] netlink: 'syz.3.2456': attribute type 6 has an invalid length.
[  749.592747][T13136] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2456'.
[  749.872791][T13139] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2515'.
[  750.214279][ T2928] wlan1: Trigger new scan to find an IBSS to join
[  752.208752][ T2966] wlan1: Trigger new scan to find an IBSS to join
[  752.209246][ T2897] wlan1: Trigger new scan to find an IBSS to join
[  752.299487][ T2966] wlan1: Creating new IBSS network, BSSID 72:e7:36:a2:40:57
[  753.154948][T13158] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  753.202288][T13164] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2507'.
[  753.221688][T13161] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  753.772518][T13176] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2513'.
[  753.785338][T13176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  753.870550][T13184] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  753.893062][T13185] netlink: 'syz.0.2519': attribute type 6 has an invalid length.
[  753.907956][T13185] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2519'.
[  754.111030][T13188] delete_channel: no stack
[  755.546828][T13195] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  755.564832][T13199] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2525'.
[  755.881885][T13207] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  756.296931][T13214] syzkaller0: entered promiscuous mode
[  756.320072][T13214] syzkaller0: entered allmulticast mode
[  756.552193][T13220] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  756.614010][T13216] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2532'.
[  756.632134][T13216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  756.831930][T13226] FAULT_INJECTION: forcing a failure.
[  756.831930][T13226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  756.851319][T13226] CPU: 1 PID: 13226 Comm: syz.2.2534 Not tainted syzkaller #0
[  756.858853][T13226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  756.868963][T13226] Call Trace:
[  756.872301][T13226]  <TASK>
[  756.875282][T13226]  dump_stack_lvl+0x18c/0x250
[  756.880035][T13226]  ? show_regs_print_info+0x20/0x20
[  756.885256][T13226]  ? load_image+0x420/0x420
[  756.890055][T13226]  ? __might_fault+0xaa/0x120
[  756.894765][T13226]  ? __lock_acquire+0x7d80/0x7d80
[  756.899847][T13226]  should_fail_ex+0x394/0x4c0
[  756.904560][T13226]  _copy_from_user+0x2f/0xe0
[  756.909175][T13226]  __sys_bpf+0x23e/0x890
[  756.913496][T13226]  ? bpf_link_show_fdinfo+0x390/0x390
[  756.918914][T13226]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  756.925144][T13226]  __x64_sys_bpf+0x7c/0x90
[  756.929619][T13226]  do_syscall_64+0x55/0xb0
[  756.934114][T13226]  ? clear_bhb_loop+0x40/0x90
[  756.938843][T13226]  ? clear_bhb_loop+0x40/0x90
[  756.943571][T13226]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  756.949491][T13226] RIP: 0033:0x7f151ad9e0d9
[  756.953921][T13226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.974086][T13226] RSP: 002b:00007f1518ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  756.982547][T13226] RAX: ffffffffffffffda RBX: 00007f151b025fa0 RCX: 00007f151ad9e0d9
[  756.990541][T13226] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  756.998557][T13226] RBP: 00007f1518ff6090 R08: 0000000000000000 R09: 0000000000000000
[  757.006571][T13226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  757.014585][T13226] R13: 00007f151b026038 R14: 00007f151b025fa0 R15: 00007ffee1c0f4d8
[  757.022606][T13226]  </TASK>
[  757.258013][ T2897] wlan1: Trigger new scan to find an IBSS to join
[  757.281639][T13229] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2535'.
[  758.211907][   T11] wlan1: Trigger new scan to find an IBSS to join
[  758.218990][ T2928] wlan1: Trigger new scan to find an IBSS to join
[  758.938265][T13234] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2537'.
[  759.259408][ T2928] wlan1: Trigger new scan to find an IBSS to join
[  759.543382][T13241] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2541'.
[  760.073203][T13244] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  760.153369][T13249] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2548'.
[  760.195095][T13252] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  761.263162][   T59] wlan1: Trigger new scan to find an IBSS to join
[  761.754293][T13258] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  761.771036][ T2928] wlan1: Creating new IBSS network, BSSID 1a:5e:33:1a:86:fb
[  761.785482][T13265] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2544'.
[  761.811676][T13265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  762.219541][T13285] netlink: 'syz.2.2550': attribute type 6 has an invalid length.
[  762.287914][ T2928] wlan1: Trigger new scan to find an IBSS to join
[  762.294604][ T2897] wlan1: Trigger new scan to find an IBSS to join
[  762.308051][T13285] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2550'.
[  762.507564][T13292] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2554'.
[  763.114867][   T11] wlan1: Creating new IBSS network, BSSID ba:83:99:a8:42:7b
[  764.307984][   T62] wlan1: Trigger new scan to find an IBSS to join
[  764.660459][T13314] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2560'.
[  764.697807][T13314] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  764.892506][T13320] FAULT_INJECTION: forcing a failure.
[  764.892506][T13320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  764.937542][T13320] CPU: 1 PID: 13320 Comm: syz.0.2561 Not tainted syzkaller #0
[  764.945100][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  764.955216][T13320] Call Trace:
[  764.958541][T13320]  <TASK>
[  764.961514][T13320]  dump_stack_lvl+0x18c/0x250
[  764.966249][T13320]  ? show_regs_print_info+0x20/0x20
[  764.971510][T13320]  ? load_image+0x420/0x420
[  764.976080][T13320]  ? __lock_acquire+0x7d80/0x7d80
[  764.981190][T13320]  ? __lock_acquire+0x7d80/0x7d80
[  764.986305][T13320]  should_fail_ex+0x394/0x4c0
[  764.991041][T13320]  _copy_from_user+0x2f/0xe0
[  764.995678][T13320]  perf_copy_attr+0x16a/0x820
[  765.000404][T13320]  __se_sys_perf_event_open+0x11b/0x1c60
[  765.006079][T13320]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  765.011755][T13320]  ? mutex_unlock+0x10/0x10
[  765.016297][T13320]  ? __fget_files+0x3fc/0x460
[  765.021015][T13320]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  765.026696][T13320]  ? lock_chain_count+0x20/0x20
[  765.031585][T13320]  ? lockdep_hardirqs_on+0x98/0x150
[  765.036816][T13320]  ? __x64_sys_perf_event_open+0x20/0xc0
[  765.042488][T13320]  do_syscall_64+0x55/0xb0
[  765.046950][T13320]  ? clear_bhb_loop+0x40/0x90
[  765.051664][T13320]  ? clear_bhb_loop+0x40/0x90
[  765.056397][T13320]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  765.062340][T13320] RIP: 0033:0x7f0ef1f9e0d9
[  765.066814][T13320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  765.086478][T13320] RSP: 002b:00007f0ef2dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  765.094968][T13320] RAX: ffffffffffffffda RBX: 00007f0ef2226090 RCX: 00007f0ef1f9e0d9
[  765.102974][T13320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  765.110979][T13320] RBP: 00007f0ef2dfd090 R08: 0000000000000000 R09: 0000000000000000
[  765.118977][T13320] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  765.126978][T13320] R13: 00007f0ef2226128 R14: 00007f0ef2226090 R15: 00007ffebf135828
[  765.135005][T13320]  </TASK>
[  765.248212][ T2897] wlan1: Trigger new scan to find an IBSS to join
[  767.087933][   T11] wlan1: Creating new IBSS network, BSSID ea:aa:91:3c:3f:d5
[  767.156543][T13319] netlink: 'syz.3.2562': attribute type 2 has an invalid length.
[  767.173378][T13319] netlink: 'syz.3.2562': attribute type 8 has an invalid length.
[  767.194932][T13319] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2562'.
[  767.226742][T13321] netlink: 'syz.3.2562': attribute type 2 has an invalid length.
[  767.258333][T13321] netlink: 'syz.3.2562': attribute type 8 has an invalid length.
[  767.266167][T13321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2562'.
[  768.090994][T13345] netlink: 'syz.1.2568': attribute type 16 has an invalid length.
[  768.116638][T13345] netlink: 'syz.1.2568': attribute type 3 has an invalid length.
[  768.143045][T13345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2568'.
[  768.684505][T13341] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2567'.
[  768.767147][T13348] FAULT_INJECTION: forcing a failure.
[  768.767147][T13348] name failslab, interval 1, probability 0, space 0, times 0
[  768.817012][T13348] CPU: 1 PID: 13348 Comm: syz.3.2577 Not tainted syzkaller #0
[  768.824629][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  768.834801][T13348] Call Trace:
[  768.838191][T13348]  <TASK>
[  768.841232][T13348]  dump_stack_lvl+0x18c/0x250
[  768.846051][T13348]  ? show_regs_print_info+0x20/0x20
[  768.851389][T13348]  ? load_image+0x420/0x420
[  768.856047][T13348]  ? __might_sleep+0xe0/0xe0
[  768.860764][T13348]  ? __lock_acquire+0x7d80/0x7d80
[  768.865946][T13348]  should_fail_ex+0x394/0x4c0
[  768.870782][T13348]  should_failslab+0x9/0x20
[  768.875385][T13348]  slab_pre_alloc_hook+0x59/0x300
[  768.880515][T13348]  ? trace_event_raw_event_lock+0x240/0x240
[  768.886481][T13348]  ? sock_kmalloc+0x96/0xf0
[  768.891084][T13348]  ? sock_kmalloc+0x96/0xf0
[  768.895669][T13348]  __kmem_cache_alloc_node+0x53/0x250
[  768.901159][T13348]  ? sock_kmalloc+0x96/0xf0
[  768.905741][T13348]  __kmalloc+0xa7/0x240
[  768.909994][T13348]  sock_kmalloc+0x96/0xf0
[  768.914411][T13348]  ____sys_sendmsg+0x1d4/0x980
[  768.919282][T13348]  ? __asan_memset+0x22/0x40
[  768.923957][T13348]  ? __sys_sendmsg_sock+0x30/0x30
[  768.929042][T13348]  ? __import_iovec+0x3fa/0x850
[  768.934016][T13348]  ? import_iovec+0x73/0xa0
[  768.938622][T13348]  ___sys_sendmsg+0x2a6/0x360
[  768.943403][T13348]  ? __sys_sendmsg+0x2b0/0x2b0
[  768.948337][T13348]  ? __lock_acquire+0x7d80/0x7d80
[  768.953559][T13348]  __se_sys_sendmsg+0x1d0/0x2c0
[  768.958529][T13348]  ? __x64_sys_sendmsg+0x80/0x80
[  768.963637][T13348]  ? lockdep_hardirqs_on+0x98/0x150
[  768.968972][T13348]  do_syscall_64+0x55/0xb0
[  768.973465][T13348]  ? clear_bhb_loop+0x40/0x90
[  768.978214][T13348]  ? clear_bhb_loop+0x40/0x90
[  768.982992][T13348]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  768.988963][T13348] RIP: 0033:0x7fa00339e0d9
[  768.993458][T13348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  769.013143][T13348] RSP: 002b:00007fa0041dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  769.021643][T13348] RAX: ffffffffffffffda RBX: 00007fa003625fa0 RCX: 00007fa00339e0d9
[  769.029684][T13348] RDX: 0000000020004044 RSI: 0000200000000540 RDI: 0000000000000007
[  769.037739][T13348] RBP: 00007fa0041dc090 R08: 0000000000000000 R09: 0000000000000000
[  769.045819][T13348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  769.053885][T13348] R13: 00007fa003626038 R14: 00007fa003625fa0 R15: 00007ffc2af8f718
[  769.062013][T13348]  </TASK>
[  769.169778][   T62] wlan1: Trigger new scan to find an IBSS to join
[  769.274881][   T11] wlan1: Creating new IBSS network, BSSID 6e:ad:2c:99:12:0b
[  769.484400][T13357] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2571'.
[  769.499062][T13357] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  769.773717][T13363] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2573'.
[  769.788318][T13363] bridge_slave_1: default FDB implementation only supports local addresses
[  770.690845][T13379] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2580'.
[  771.186809][T13386] FAULT_INJECTION: forcing a failure.
[  771.186809][T13386] name failslab, interval 1, probability 0, space 0, times 0
[  771.227897][T13386] CPU: 0 PID: 13386 Comm: syz.1.2581 Not tainted syzkaller #0
[  771.235460][T13386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  771.245569][T13386] Call Trace:
[  771.248895][T13386]  <TASK>
[  771.251873][T13386]  dump_stack_lvl+0x18c/0x250
[  771.256619][T13386]  ? show_regs_print_info+0x20/0x20
[  771.261872][T13386]  ? load_image+0x420/0x420
[  771.266482][T13386]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  771.272524][T13386]  ? __asan_memset+0x22/0x40
[  771.277177][T13386]  should_fail_ex+0x394/0x4c0
[  771.281918][T13386]  should_failslab+0x9/0x20
[  771.286475][T13386]  slab_pre_alloc_hook+0x59/0x300
[  771.291559][T13386]  ? __debug_object_init+0xec/0x450
[  771.296822][T13386]  kmem_cache_alloc+0x5a/0x2c0
[  771.301661][T13386]  ? slab_build_skb+0x28/0x3e0
[  771.306503][T13386]  slab_build_skb+0x28/0x3e0
[  771.311156][T13386]  bpf_prog_test_run_skb+0x38f/0x18f0
[  771.316601][T13386]  ? __fget_files+0x28/0x460
[  771.321263][T13386]  ? __fget_files+0x3fc/0x460
[  771.326012][T13386]  ? cpu_online+0x60/0x60
[  771.330403][T13386]  bpf_prog_test_run+0x31f/0x390
[  771.335399][T13386]  __sys_bpf+0x49d/0x890
[  771.339697][T13386]  ? bpf_link_show_fdinfo+0x390/0x390
[  771.345141][T13386]  ? lock_chain_count+0x20/0x20
[  771.350055][T13386]  __x64_sys_bpf+0x7c/0x90
[  771.354531][T13386]  do_syscall_64+0x55/0xb0
[  771.359004][T13386]  ? clear_bhb_loop+0x40/0x90
[  771.363724][T13386]  ? clear_bhb_loop+0x40/0x90
[  771.368463][T13386]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  771.374407][T13386] RIP: 0033:0x7fec9d39e0d9
[  771.378868][T13386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.398525][T13386] RSP: 002b:00007fec9e2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  771.407005][T13386] RAX: ffffffffffffffda RBX: 00007fec9d625fa0 RCX: 00007fec9d39e0d9
[  771.415038][T13386] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a
[  771.423067][T13386] RBP: 00007fec9e2c6090 R08: 0000000000000000 R09: 0000000000000000
[  771.431097][T13386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  771.439123][T13386] R13: 00007fec9d626038 R14: 00007fec9d625fa0 R15: 00007ffcd274bda8
[  771.447188][T13386]  </TASK>
[  772.021899][T13402] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2586'.
[  772.112647][T13402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  772.137143][T13407] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2588'.
[  772.147224][T13407] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  772.724509][T13417] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2592'.
[  773.366393][T13428] FAULT_INJECTION: forcing a failure.
[  773.366393][T13428] name failslab, interval 1, probability 0, space 0, times 0
[  773.420129][T13428] CPU: 0 PID: 13428 Comm: syz.1.2596 Not tainted syzkaller #0
[  773.427686][T13428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  773.437806][T13428] Call Trace:
[  773.441137][T13428]  <TASK>
[  773.444126][T13428]  dump_stack_lvl+0x18c/0x250
[  773.448871][T13428]  ? show_regs_print_info+0x20/0x20
[  773.454141][T13428]  ? load_image+0x420/0x420
[  773.458719][T13428]  ? __might_sleep+0xe0/0xe0
[  773.463363][T13428]  ? __lock_acquire+0x7d80/0x7d80
[  773.468450][T13428]  should_fail_ex+0x394/0x4c0
[  773.473195][T13428]  should_failslab+0x9/0x20
[  773.477751][T13428]  slab_pre_alloc_hook+0x59/0x300
[  773.482839][T13428]  ? __lock_acquire+0x7d80/0x7d80
[  773.488098][T13428]  ? security_sk_alloc+0x4b/0x130
[  773.493181][T13428]  ? security_sk_alloc+0x4b/0x130
[  773.498257][T13428]  __kmem_cache_alloc_node+0x53/0x250
[  773.503697][T13428]  ? security_sk_alloc+0x4b/0x130
[  773.508778][T13428]  __kmalloc+0xa7/0x240
[  773.512999][T13428]  security_sk_alloc+0x4b/0x130
[  773.517905][T13428]  sk_prot_alloc+0x101/0x210
[  773.522557][T13428]  sk_alloc+0x3a/0x350
[  773.526691][T13428]  inet6_create+0x7d3/0x1120
[  773.531369][T13428]  ? inet6_create+0x80/0x1120
[  773.536120][T13428]  __sock_create+0x49e/0x940
[  773.540776][T13428]  mptcp_subflow_create_socket+0x10c/0xad0
[  773.546716][T13428]  ? verify_lock_unused+0x140/0x140
[  773.551980][T13428]  ? __mptcp_subflow_connect+0x14d0/0x14d0
[  773.557841][T13428]  ? mark_lock+0x94/0x320
[  773.562229][T13428]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  773.568268][T13428]  __mptcp_nmpc_sk+0x157/0x720
[  773.573096][T13428]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[  773.579906][T13428]  ? __local_bh_enable_ip+0x13a/0x1c0
[  773.585326][T13428]  ? lockdep_hardirqs_on+0x98/0x150
[  773.590588][T13428]  ? __local_bh_enable_ip+0x13a/0x1c0
[  773.596024][T13428]  mptcp_sendmsg_fastopen+0x7c/0x4c0
[  773.601391][T13428]  mptcp_sendmsg+0x144c/0x1670
[  773.606219][T13428]  ? aa_sk_perm+0x83c/0x970
[  773.610791][T13428]  ? aa_sk_perm+0x83c/0x970
[  773.615366][T13428]  ? aa_af_perm+0x330/0x330
[  773.619923][T13428]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  773.626398][T13428]  ? mptcp_shutdown+0x80/0x80
[  773.631136][T13428]  ? inet_send_prepare+0xb2/0x250
[  773.636228][T13428]  ? inet6_sendmsg+0x5f/0xd0
[  773.640872][T13428]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  773.646135][T13428]  ____sys_sendmsg+0x61b/0x980
[  773.650974][T13428]  ? __asan_memset+0x22/0x40
[  773.655641][T13428]  ? __sys_sendmsg_sock+0x30/0x30
[  773.660733][T13428]  ? __import_iovec+0x3fa/0x850
[  773.665653][T13428]  ? import_iovec+0x73/0xa0
[  773.670227][T13428]  ___sys_sendmsg+0x2a6/0x360
[  773.674960][T13428]  ? get_pid_task+0x20/0x1e0
[  773.679622][T13428]  ? __sys_sendmsg+0x2b0/0x2b0
[  773.684478][T13428]  ? __lock_acquire+0x7d80/0x7d80
[  773.689599][T13428]  __se_sys_sendmsg+0x1d0/0x2c0
[  773.694518][T13428]  ? __x64_sys_sendmsg+0x80/0x80
[  773.699547][T13428]  ? lockdep_hardirqs_on+0x98/0x150
[  773.704811][T13428]  do_syscall_64+0x55/0xb0
[  773.709278][T13428]  ? clear_bhb_loop+0x40/0x90
[  773.714014][T13428]  ? clear_bhb_loop+0x40/0x90
[  773.718753][T13428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  773.724703][T13428] RIP: 0033:0x7fec9d39e0d9
[  773.729170][T13428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  773.748864][T13428] RSP: 002b:00007fec9e2c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  773.757339][T13428] RAX: ffffffffffffffda RBX: 00007fec9d625fa0 RCX: 00007fec9d39e0d9
[  773.765362][T13428] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000003
[  773.773393][T13428] RBP: 00007fec9e2c6090 R08: 0000000000000000 R09: 0000000000000000
[  773.781417][T13428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  773.789440][T13428] R13: 00007fec9d626038 R14: 00007fec9d625fa0 R15: 00007ffcd274bda8
[  773.797496][T13428]  </TASK>
[  774.395455][T13441] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  774.444195][T13442] netlink: 'syz.0.2601': attribute type 39 has an invalid length.
[  774.762061][T13446] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2603'.
[  774.849979][T13446] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  775.022199][T13451] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2604'.
[  775.437445][T13453] bridge_slave_1: left allmulticast mode
[  775.469588][T13453] bridge_slave_1: left promiscuous mode
[  775.512956][T13453] bridge0: port 2(bridge_slave_1) entered disabled state
[  775.600320][T13456] netlink: 'syz.1.2606': attribute type 16 has an invalid length.
[  775.618062][T13456] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2606'.
[  775.892665][T13453] bridge_slave_0: left allmulticast mode
[  775.912067][T13453] bridge_slave_0: left promiscuous mode
[  775.939677][T13453] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.063211][T13474] netlink: 'syz.1.2613': attribute type 39 has an invalid length.
[  777.170855][  T148] wlan1: Trigger new scan to find an IBSS to join
[  777.210361][T13475] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  777.442949][T13471] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2611'.
[  777.607558][T13471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  779.116427][T13486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  779.125158][T13491] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2617'.
[  779.319185][T13502] bridge_slave_1: left allmulticast mode
[  779.332853][T13502] bridge_slave_1: left promiscuous mode
[  779.364418][T13502] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.469589][T13502] bridge_slave_0: left allmulticast mode
[  779.495801][T13502] bridge_slave_0: left promiscuous mode
[  779.516749][T13502] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.701092][T13505] netlink: 'syz.1.2622': attribute type 39 has an invalid length.
[  780.207172][T13521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  780.251893][T13523] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2629'.
[  780.278500][T13523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  780.923687][T13528] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2630'.
[  781.176658][ T1333] wlan1: Trigger new scan to find an IBSS to join
[  782.237395][ T1333] wlan1: Trigger new scan to find an IBSS to join
[  782.827582][T13537] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  782.881375][T13540] netlink: 'syz.2.2635': attribute type 39 has an invalid length.
[  782.904677][T13536] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2633'.
[  782.942886][T13536] bridge_slave_1: default FDB implementation only supports local addresses
[  783.262051][T13551] FAULT_INJECTION: forcing a failure.
[  783.262051][T13551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  783.285556][T13548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  783.293243][T13548] IPv6: NLM_F_CREATE should be set when creating new route
[  783.302414][T13548] IPv6: NLM_F_CREATE should be set when creating new route
[  783.309927][T13548] IPv6: NLM_F_CREATE should be set when creating new route
[  783.345547][T13551] CPU: 1 PID: 13551 Comm: syz.2.2639 Not tainted syzkaller #0
[  783.353104][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  783.363210][T13551] Call Trace:
[  783.366538][T13551]  <TASK>
[  783.369515][T13551]  dump_stack_lvl+0x18c/0x250
[  783.374251][T13551]  ? show_regs_print_info+0x20/0x20
[  783.379507][T13551]  ? load_image+0x420/0x420
[  783.384078][T13551]  ? __lock_acquire+0x7d80/0x7d80
[  783.389161][T13551]  ? snprintf+0xe9/0x140
[  783.393465][T13551]  should_fail_ex+0x394/0x4c0
[  783.398203][T13551]  _copy_to_user+0x2f/0xa0
[  783.402675][T13551]  simple_read_from_buffer+0xe7/0x150
[  783.408106][T13551]  proc_fail_nth_read+0x1e8/0x260
[  783.413194][T13551]  ? proc_fault_inject_write+0x360/0x360
[  783.418886][T13551]  ? fsnotify_perm+0x271/0x5e0
[  783.423712][T13551]  ? proc_fault_inject_write+0x360/0x360
[  783.429406][T13551]  vfs_read+0x298/0x990
[  783.433629][T13551]  ? kernel_read+0x1e0/0x1e0
[  783.438280][T13551]  ? __fget_files+0x28/0x460
[  783.442932][T13551]  ? __fget_files+0x3fc/0x460
[  783.447683][T13551]  ? __fdget_pos+0x2a3/0x330
[  783.452331][T13551]  ? ksys_read+0x74/0x260
[  783.456713][T13551]  ksys_read+0x151/0x260
[  783.461005][T13551]  ? vfs_write+0x9a0/0x9a0
[  783.465462][T13551]  ? lockdep_hardirqs_on+0x98/0x150
[  783.470700][T13551]  do_syscall_64+0x55/0xb0
[  783.475154][T13551]  ? clear_bhb_loop+0x40/0x90
[  783.479876][T13551]  ? clear_bhb_loop+0x40/0x90
[  783.484587][T13551]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  783.490592][T13551] RIP: 0033:0x7f151ad5e90e
[  783.495038][T13551] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  783.514679][T13551] RSP: 002b:00007f1518ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  783.523127][T13551] RAX: ffffffffffffffda RBX: 00007f1518ff66c0 RCX: 00007f151ad5e90e
[  783.531128][T13551] RDX: 000000000000000f RSI: 00007f1518ff60a0 RDI: 0000000000000003
[  783.539126][T13551] RBP: 00007f1518ff6090 R08: 0000000000000000 R09: 0000000000000000
[  783.547124][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  783.555121][T13551] R13: 00007f151b026038 R14: 00007f151b025fa0 R15: 00007ffee1c0f4d8
[  783.563137][T13551]  </TASK>
[  783.953006][T13561] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2641'.
[  784.000226][T13558] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2642'.
[  784.033515][T13558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  785.080276][T13568] netlink: 'syz.3.2645': attribute type 39 has an invalid length.
[  785.267826][ T2966] wlan1: Trigger new scan to find an IBSS to join
[  785.274482][ T1333] wlan1: Trigger new scan to find an IBSS to join
[  785.558485][T13568] hsr_slave_1 (unregistering): left promiscuous mode
[  785.867590][T13582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  786.043196][T13587] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2651'.
[  786.124982][T13587] netlink: 'syz.2.2651': attribute type 13 has an invalid length.
[  786.167787][T13587] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.2651'.
[  786.274278][T13590] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2652'.
[  786.361264][T13590] bridge_slave_1: default FDB implementation only supports local addresses
[  786.448890][T13591] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2653'.
[  786.596386][T13591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  786.988084][T13599] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2655'.
[  788.208200][ T2928] wlan1: Trigger new scan to find an IBSS to join
[  788.357157][T13610] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2666'.
[  788.462940][T13613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  788.677803][T13615] netlink: 'syz.2.2661': attribute type 39 has an invalid length.
[  789.012679][T13618] FAULT_INJECTION: forcing a failure.
[  789.012679][T13618] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  789.047856][T13618] CPU: 0 PID: 13618 Comm: syz.3.2662 Not tainted syzkaller #0
[  789.055408][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  789.065527][T13618] Call Trace:
[  789.068858][T13618]  <TASK>
[  789.071838][T13618]  dump_stack_lvl+0x18c/0x250
[  789.076584][T13618]  ? show_regs_print_info+0x20/0x20
[  789.081851][T13618]  ? load_image+0x420/0x420
[  789.086421][T13618]  ? __might_fault+0xaa/0x120
[  789.091164][T13618]  ? __lock_acquire+0x7d80/0x7d80
[  789.096260][T13618]  should_fail_ex+0x394/0x4c0
[  789.101011][T13618]  _copy_from_user+0x2f/0xe0
[  789.105656][T13618]  __sys_bpf+0x23e/0x890
[  789.109942][T13618]  ? bpf_link_show_fdinfo+0x390/0x390
[  789.115381][T13618]  ? lock_chain_count+0x20/0x20
[  789.120287][T13618]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  789.126328][T13618]  __x64_sys_bpf+0x7c/0x90
[  789.130817][T13618]  do_syscall_64+0x55/0xb0
[  789.135281][T13618]  ? clear_bhb_loop+0x40/0x90
[  789.140032][T13618]  ? clear_bhb_loop+0x40/0x90
[  789.144756][T13618]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  789.150690][T13618] RIP: 0033:0x7fa00339e0d9
[  789.155141][T13618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  789.174811][T13618] RSP: 002b:00007fa0041dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  789.183267][T13618] RAX: ffffffffffffffda RBX: 00007fa003625fa0 RCX: 00007fa00339e0d9
[  789.191291][T13618] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  789.199304][T13618] RBP: 00007fa0041dc090 R08: 0000000000000000 R09: 0000000000000000
[  789.207309][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  789.215329][T13618] R13: 00007fa003626038 R14: 00007fa003625fa0 R15: 00007ffc2af8f718
[  789.223374][T13618]  </TASK>
[  789.228191][ T2928] wlan1: Trigger new scan to find an IBSS to join
[  789.235061][ T2928] wlan1: Trigger new scan to find an IBSS to join
[  789.281052][T13621] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2663'.
[  789.296568][T13621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  789.728170][T13629] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  790.592757][T13640] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2671'.
[  790.637798][T13640] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  790.701674][T13642] netlink: 'syz.3.2672': attribute type 39 has an invalid length.
[  790.894396][T13644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  791.142676][T13652] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2675'.
[  791.180562][   T11] wlan1: Creating new IBSS network, BSSID ba:18:fa:e2:d5:18
[  791.280127][T13653] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2676'.
[  791.308224][T13653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  792.194092][T13666] 
@0Ù: renamed from bond_slave_1 (while UP)
[  792.210889][ T2928] wlan1: Trigger new scan to find an IBSS to join
[  792.218749][ T1333] wlan1: Trigger new scan to find an IBSS to join
[  792.618131][T13675] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2683'.
[  792.637754][T13675] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  792.668182][T13673] netlink: 'syz.2.2684': attribute type 39 has an invalid length.
[  793.083416][T13679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  793.434542][T13686] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2688'.
[  793.717905][T13686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  794.268127][ T1333] wlan1: Creating new IBSS network, BSSID ba:75:4d:b6:ba:cf
[  794.424610][T13692] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2689'.
[  795.942019][T13707] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2695'.
[  795.962041][T13707] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  796.103331][T13712] netlink: 'syz.0.2696': attribute type 39 has an invalid length.
[  796.166378][T13711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  796.208782][ T1333] wlan1: Trigger new scan to find an IBSS to join
[  796.373316][T13717] netlink: 'syz.0.2700': attribute type 1 has an invalid length.
[  796.383978][T13717] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2700'.
[  796.701199][T13725] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2701'.
[  796.718303][T13725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  796.735469][T13727] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2703'.
[  798.212346][ T2966] wlan1: Creating new IBSS network, BSSID 2e:fc:7f:b3:57:5c
[  798.857953][T13741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  798.865374][T13740] netlink: 'syz.3.2708': attribute type 39 has an invalid length.
[  799.189131][T13755] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2713'.
[  799.645663][T13760] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2714'.
[  799.695772][T13760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  800.077261][T13772] netlink: 'syz.3.2719': attribute type 39 has an invalid length.
[  800.141347][T13770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  800.458623][T13784] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2725'.
[  800.681852][T13787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  801.178339][T13797] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  801.248578][T13802] netlink: 'syz.1.2731': attribute type 39 has an invalid length.
[  801.416280][T13805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  801.642500][T13814] FAULT_INJECTION: forcing a failure.
[  801.642500][T13814] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  801.656112][T13814] CPU: 0 PID: 13814 Comm: syz.3.2735 Not tainted syzkaller #0
[  801.663628][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  801.673713][T13814] Call Trace:
[  801.677055][T13814]  <TASK>
[  801.680021][T13814]  dump_stack_lvl+0x18c/0x250
[  801.684739][T13814]  ? show_regs_print_info+0x20/0x20
[  801.689964][T13814]  ? load_image+0x420/0x420
[  801.694508][T13814]  ? __might_fault+0xaa/0x120
[  801.699244][T13814]  ? __lock_acquire+0x7d80/0x7d80
[  801.704310][T13814]  should_fail_ex+0x394/0x4c0
[  801.709030][T13814]  _copy_from_iter+0x1cd/0x1290
[  801.713928][T13814]  ? copyout_mc+0x70/0x70
[  801.718287][T13814]  ? __virt_addr_valid+0x10c/0x380
[  801.723428][T13814]  ? __virt_addr_valid+0x10c/0x380
[  801.728587][T13814]  ? __virt_addr_valid+0x10c/0x380
[  801.733739][T13814]  ? __check_object_size+0x4fc/0xa40
[  801.739063][T13814]  rawv6_send_hdrinc+0x7aa/0x1660
[  801.744241][T13814]  ? txopt_get+0x3f0/0x3f0
[  801.748701][T13814]  ? txopt_get+0x344/0x3f0
[  801.753150][T13814]  ? fl6_sock_lookup+0xc0/0xc0
[  801.757954][T13814]  rawv6_sendmsg+0x128f/0x1740
[  801.762764][T13814]  ? compat_rawv6_ioctl+0x70/0x70
[  801.767841][T13814]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  801.774378][T13814]  ? aa_sock_msg_perm+0x94/0x150
[  801.779350][T13814]  ? inet_sendmsg+0x7e/0x2a0
[  801.783970][T13814]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  801.789313][T13814]  ? inet_send_prepare+0x250/0x250
[  801.794460][T13814]  ____sys_sendmsg+0x61b/0x980
[  801.799262][T13814]  ? __asan_memset+0x22/0x40
[  801.803887][T13814]  ? __sys_sendmsg_sock+0x30/0x30
[  801.808938][T13814]  ? __import_iovec+0x5f2/0x850
[  801.813833][T13814]  ? import_iovec+0x73/0xa0
[  801.818371][T13814]  ___sys_sendmsg+0x2a6/0x360
[  801.823081][T13814]  ? get_pid_task+0x20/0x1e0
[  801.827715][T13814]  ? __sys_sendmsg+0x2b0/0x2b0
[  801.832556][T13814]  ? __lock_acquire+0x7d80/0x7d80
[  801.837653][T13814]  __se_sys_sendmsg+0x1d0/0x2c0
[  801.842553][T13814]  ? __x64_sys_sendmsg+0x80/0x80
[  801.847542][T13814]  ? lockdep_hardirqs_on+0x98/0x150
[  801.852782][T13814]  do_syscall_64+0x55/0xb0
[  801.857225][T13814]  ? clear_bhb_loop+0x40/0x90
[  801.861933][T13814]  ? clear_bhb_loop+0x40/0x90
[  801.866668][T13814]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  801.872611][T13814] RIP: 0033:0x7fa00339e0d9
[  801.877056][T13814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  801.896706][T13814] RSP: 002b:00007fa0041dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  801.905157][T13814] RAX: ffffffffffffffda RBX: 00007fa003625fa0 RCX: 00007fa00339e0d9
[  801.913157][T13814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  801.921153][T13814] RBP: 00007fa0041dc090 R08: 0000000000000000 R09: 0000000000000000
[  801.929156][T13814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  801.937156][T13814] R13: 00007fa003626038 R14: 00007fa003625fa0 R15: 00007ffc2af8f718
[  801.945169][T13814]  </TASK>
[  802.164282][T13810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  802.197982][T13816] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2736'.
[  802.430031][T13818] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.2737'.
[  802.442768][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'.
[  802.664630][T13826] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  802.757876][T13831] netlink: 'syz.3.2743': attribute type 39 has an invalid length.
[  802.809103][T13829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  803.059252][T13836] FAULT_INJECTION: forcing a failure.
[  803.059252][T13836] name failslab, interval 1, probability 0, space 0, times 0
[  803.107079][T13836] CPU: 1 PID: 13836 Comm: syz.1.2746 Not tainted syzkaller #0
[  803.114645][T13836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  803.124769][T13836] Call Trace:
[  803.128200][T13836]  <TASK>
[  803.131221][T13836]  dump_stack_lvl+0x18c/0x250
[  803.135976][T13836]  ? show_regs_print_info+0x20/0x20
[  803.141235][T13836]  ? load_image+0x420/0x420
[  803.145807][T13836]  ? __might_sleep+0xe0/0xe0
[  803.150451][T13836]  ? __lock_acquire+0x7d80/0x7d80
[  803.155522][T13836]  ? __lock_acquire+0x1262/0x7d80
[  803.160594][T13836]  ? ima_match_policy+0x100/0x1fa0
[  803.165802][T13836]  should_fail_ex+0x394/0x4c0
[  803.170543][T13836]  should_failslab+0x9/0x20
[  803.175106][T13836]  slab_pre_alloc_hook+0x59/0x300
[  803.180212][T13836]  kmem_cache_alloc_node+0x5e/0x310
[  803.185459][T13836]  ? __alloc_skb+0x103/0x2c0
[  803.190107][T13836]  __alloc_skb+0x103/0x2c0
[  803.194571][T13836]  alloc_skb_with_frags+0xcd/0x7a0
[  803.199739][T13836]  ? mark_lock+0x94/0x320
[  803.204129][T13836]  sock_alloc_send_pskb+0x883/0x9a0
[  803.209400][T13836]  ? sock_kzfree_s+0x50/0x50
[  803.214053][T13836]  ? verify_lock_unused+0x140/0x140
[  803.219293][T13836]  ? aa_label_sk_perm+0x500/0x6a0
[  803.224398][T13836]  ? dev_get_by_index+0x22/0x2d0
[  803.229392][T13836]  ? dev_get_by_index+0x22/0x2d0
[  803.234560][T13836]  packet_sendmsg+0x3058/0x4c70
[  803.239473][T13836]  ? set_user_nice+0xa20/0xb20
[  803.244317][T13836]  ? verify_lock_unused+0x140/0x140
[  803.249591][T13836]  ? aa_sk_perm+0x83c/0x970
[  803.254152][T13836]  ? packet_getsockopt+0xad0/0xad0
[  803.259490][T13836]  ? tomoyo_get_name+0x490/0x570
[  803.264498][T13836]  ? aa_sock_msg_perm+0x94/0x150
[  803.269489][T13836]  ? apparmor_socket_sendmsg+0x8e/0x330
[  803.275075][T13836]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  803.280407][T13836]  ? security_socket_sendmsg+0x80/0xa0
[  803.285911][T13836]  ? packet_getsockopt+0xad0/0xad0
[  803.291084][T13836]  ____sys_sendmsg+0x61b/0x980
[  803.295911][T13836]  ? __asan_memset+0x22/0x40
[  803.300551][T13836]  ? __sys_sendmsg_sock+0x30/0x30
[  803.305609][T13836]  ? __import_iovec+0x3fa/0x850
[  803.310512][T13836]  ? import_iovec+0x73/0xa0
[  803.315068][T13836]  ___sys_sendmsg+0x2a6/0x360
[  803.319790][T13836]  ? get_pid_task+0x20/0x1e0
[  803.324481][T13836]  ? __sys_sendmsg+0x2b0/0x2b0
[  803.329347][T13836]  ? __lock_acquire+0x7d80/0x7d80
[  803.334444][T13836]  __se_sys_sendmsg+0x1d0/0x2c0
[  803.339330][T13836]  ? __x64_sys_sendmsg+0x80/0x80
[  803.344398][T13836]  ? lockdep_hardirqs_on+0x98/0x150
[  803.349650][T13836]  do_syscall_64+0x55/0xb0
[  803.354112][T13836]  ? clear_bhb_loop+0x40/0x90
[  803.358839][T13836]  ? clear_bhb_loop+0x40/0x90
[  803.363567][T13836]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  803.369505][T13836] RIP: 0033:0x7fec9d39e0d9
[  803.373969][T13836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  803.393613][T13836] RSP: 002b:00007fec9e2c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  803.402071][T13836] RAX: ffffffffffffffda RBX: 00007fec9d625fa0 RCX: 00007fec9d39e0d9
[  803.410080][T13836] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  803.418087][T13836] RBP: 00007fec9e2c6090 R08: 0000000000000000 R09: 0000000000000000
[  803.426104][T13836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  803.434112][T13836] R13: 00007fec9d626038 R14: 00007fec9d625fa0 R15: 00007ffcd274bda8
[  803.442144][T13836]  </TASK>
[  803.447316][T13840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  803.463691][   T11] wlan1: Trigger new scan to find an IBSS to join
[  803.661957][T13839] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2747'.
[  803.701889][T13839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  804.083410][T13850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  804.135310][T13851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  804.368576][T13853] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2751'.
[  804.395948][T13853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  804.732888][T13860] netlink: 'syz.2.2753': attribute type 39 has an invalid length.
[  805.171747][ T2966] wlan1: Trigger new scan to find an IBSS to join
[  805.225888][T13862] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  805.461188][T13873] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2757'.
[  805.504952][T13873] bridge_slave_1: default FDB implementation only supports local addresses
[  805.530616][T13864] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2755'.
[  805.553632][T13864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  805.919415][T13880] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2760'.
[  806.067795][T13880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  806.139973][T13882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  806.218182][  T148] wlan1: Trigger new scan to find an IBSS to join
[  806.289356][T13891] FAULT_INJECTION: forcing a failure.
[  806.289356][T13891] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  806.311114][T13891] CPU: 0 PID: 13891 Comm: syz.1.2764 Not tainted syzkaller #0
[  806.318673][T13891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  806.328781][T13891] Call Trace:
[  806.332106][T13891]  <TASK>
[  806.335086][T13891]  dump_stack_lvl+0x18c/0x250
[  806.339827][T13891]  ? show_regs_print_info+0x20/0x20
[  806.345086][T13891]  ? load_image+0x420/0x420
[  806.349658][T13891]  ? __lock_acquire+0x7d80/0x7d80
[  806.354749][T13891]  ? do_raw_spin_unlock+0x121/0x230
[  806.360058][T13891]  should_fail_ex+0x394/0x4c0
[  806.364802][T13891]  _copy_from_user+0x2f/0xe0
[  806.369444][T13891]  copy_from_bpfptr+0x67/0x80
[  806.374176][T13891]  bpf_prog_load+0xa3a/0x1610
[  806.378911][T13891]  ? map_freeze+0x420/0x420
[  806.383482][T13891]  ? __might_fault+0xaa/0x120
[  806.388217][T13891]  ? __might_fault+0xc6/0x120
[  806.392955][T13891]  ? __might_fault+0xaa/0x120
[  806.397689][T13891]  ? bpf_lsm_bpf+0x9/0x10
[  806.402074][T13891]  ? security_bpf+0x7e/0xa0
[  806.406631][T13891]  __sys_bpf+0x5ba/0x890
[  806.410924][T13891]  ? bpf_link_show_fdinfo+0x390/0x390
[  806.416360][T13891]  ? lock_chain_count+0x20/0x20
[  806.421270][T13891]  __x64_sys_bpf+0x7c/0x90
[  806.425740][T13891]  do_syscall_64+0x55/0xb0
[  806.430213][T13891]  ? clear_bhb_loop+0x40/0x90
[  806.434943][T13891]  ? clear_bhb_loop+0x40/0x90
[  806.439679][T13891]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  806.445977][T13891] RIP: 0033:0x7fec9d39e0d9
[  806.450449][T13891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  806.470392][T13891] RSP: 002b:00007fec9e2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  806.478883][T13891] RAX: ffffffffffffffda RBX: 00007fec9d625fa0 RCX: 00007fec9d39e0d9
[  806.486961][T13891] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  806.494987][T13891] RBP: 00007fec9e2c6090 R08: 0000000000000000 R09: 0000000000000000
[  806.503007][T13891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  806.511069][T13891] R13: 00007fec9d626038 R14: 00007fec9d625fa0 R15: 00007ffcd274bda8
[  806.519129][T13891]  </TASK>
[  807.058475][T13897] netlink: 'syz.1.2766': attribute type 39 has an invalid length.
[  809.018500][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  809.027500][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  809.196779][ T2928] wlan1: Trigger new scan to find an IBSS to join
[  809.204056][ T1333] wlan1: Trigger new scan to find an IBSS to join
[  809.479855][T13903] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  809.501815][T13906] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2769'.
[  809.515249][T13906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  809.836059][T13914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  810.332665][T13931] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2775'.
[  810.435841][T13931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  811.034432][T13941] netlink: 'syz.0.2780': attribute type 39 has an invalid length.
[  811.364318][T13946] FAULT_INJECTION: forcing a failure.
[  811.364318][T13946] name failslab, interval 1, probability 0, space 0, times 0
[  811.391499][T13946] CPU: 1 PID: 13946 Comm: syz.1.2783 Not tainted syzkaller #0
[  811.399061][T13946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  811.409173][T13946] Call Trace:
[  811.412494][T13946]  <TASK>
[  811.415461][T13946]  dump_stack_lvl+0x18c/0x250
[  811.420191][T13946]  ? show_regs_print_info+0x20/0x20
[  811.425439][T13946]  ? load_image+0x420/0x420
[  811.430007][T13946]  ? __lock_acquire+0x7d80/0x7d80
[  811.435090][T13946]  ? verify_lock_unused+0x140/0x140
[  811.440349][T13946]  should_fail_ex+0x394/0x4c0
[  811.445085][T13946]  should_failslab+0x9/0x20
[  811.449657][T13946]  slab_pre_alloc_hook+0x59/0x300
[  811.454778][T13946]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  811.460400][T13946]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  811.466009][T13946]  __kmem_cache_alloc_node+0x53/0x250
[  811.471453][T13946]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  811.477065][T13946]  __kmalloc+0xa7/0x240
[  811.481290][T13946]  bpf_prog_test_run_skb+0x242/0x18f0
[  811.486740][T13946]  ? __fget_files+0x28/0x460
[  811.491392][T13946]  ? __fget_files+0x3fc/0x460
[  811.496151][T13946]  ? cpu_online+0x60/0x60
[  811.500587][T13946]  bpf_prog_test_run+0x31f/0x390
[  811.505578][T13946]  __sys_bpf+0x49d/0x890
[  811.509881][T13946]  ? bpf_link_show_fdinfo+0x390/0x390
[  811.515323][T13946]  ? lock_chain_count+0x20/0x20
[  811.520233][T13946]  __x64_sys_bpf+0x7c/0x90
[  811.524698][T13946]  do_syscall_64+0x55/0xb0
[  811.529160][T13946]  ? clear_bhb_loop+0x40/0x90
[  811.533879][T13946]  ? clear_bhb_loop+0x40/0x90
[  811.538656][T13946]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  811.544648][T13946] RIP: 0033:0x7fec9d39e0d9
[  811.549118][T13946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  811.568787][T13946] RSP: 002b:00007fec9e2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  811.577270][T13946] RAX: ffffffffffffffda RBX: 00007fec9d625fa0 RCX: 00007fec9d39e0d9
[  811.585297][T13946] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  811.593322][T13946] RBP: 00007fec9e2c6090 R08: 0000000000000000 R09: 0000000000000000
[  811.601342][T13946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  811.609361][T13946] R13: 00007fec9d626038 R14: 00007fec9d625fa0 R15: 00007ffcd274bda8
[  811.617397][T13946]  </TASK>
[  811.624063][T13943] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  811.903901][T13954] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2782'.
[  811.989347][T13961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  812.210522][   T59] wlan1: Trigger new scan to find an IBSS to join
[  812.217248][   T59] wlan1: Trigger new scan to find an IBSS to join
[  812.326989][ T2928] wlan1: Creating new IBSS network, BSSID 2e:43:73:77:57:02
[  812.378121][T13967] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  812.389385][   T59] ------------[ cut here ]------------
[  812.395217][   T59] WARNING: CPU: 1 PID: 59 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430
[  812.405200][   T59] Modules linked in:
[  812.409208][   T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0
[  812.416626][   T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  812.426867][   T59] Workqueue: cfg80211 cfg80211_event_work
[  812.432910][   T59] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430
[  812.439254][   T59] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 16 98 f7 0f 0b eb bf e8 65 16 98 f7 <0f> 0b eb b6 e8 5c 16 98 f7 0f 0b e9 e2 fd ff ff e8 50 16 98 f7 0f
[  812.459095][   T59] RSP: 0018:ffffc900015a7a40 EFLAGS: 00010293
[  812.465229][   T59] RAX: ffffffff89ef5bbb RBX: dffffc0000000000 RCX: ffff88801e2c1e00
[  812.473313][   T59] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0
[  812.481588][   T59] RBP: ffffc900015a7af8 R08: ffffffff911ed56f R09: 1ffffffff223daad
[  812.489677][   T59] R10: dffffc0000000000 R11: fffffbfff223daae R12: ffff88806c4bcd10
[  812.497849][   T59] R13: ffff88801cff3658 R14: 1ffff920002b4f4c R15: 000000000000001f
[  812.505885][   T59] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  812.514957][   T59] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  812.521679][   T59] CR2: 0000001b32e19ff8 CR3: 0000000064dc1000 CR4: 00000000003506e0
[  812.529776][   T59] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  812.537883][   T59] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  812.545920][   T59] Call Trace:
[  812.549297][   T59]  <TASK>
[  812.552295][   T59]  ? trace_rdev_return_void+0x1c0/0x1c0
[  812.558001][   T59]  cfg80211_process_wdev_events+0x396/0x500
[  812.563986][   T59]  cfg80211_process_rdev_events+0xa1/0x110
[  812.569918][   T59]  cfg80211_event_work+0x2f/0x40
[  812.574909][   T59]  ? process_scheduled_works+0x975/0x1600
[  812.581433][   T59]  process_scheduled_works+0xa60/0x1600
[  812.587067][   T59]  ? worker_attach_to_pool+0x370/0x370
[  812.592862][   T59]  ? assign_work+0x3cc/0x5d0
[  812.597535][   T59]  worker_thread+0xa5e/0xfe0
[  812.602324][   T59]  kthread+0x2fa/0x390
[  812.606460][   T59]  ? pr_cont_work+0x550/0x550
[  812.611375][   T59]  ? kthread_blkcg+0xd0/0xd0
[  812.616030][   T59]  ret_from_fork+0x48/0x80
[  812.620603][   T59]  ? kthread_blkcg+0xd0/0xd0
[  812.625254][   T59]  ret_from_fork_asm+0x11/0x20
[  812.630188][   T59]  </TASK>
[  812.633248][   T59] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  812.640565][   T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0
[  812.647976][   T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  812.658062][   T59] Workqueue: cfg80211 cfg80211_event_work
[  812.663820][   T59] Call Trace:
[  812.667125][   T59]  <TASK>
[  812.670098][   T59]  dump_stack_lvl+0x18c/0x250
[  812.674809][   T59]  ? show_regs_print_info+0x20/0x20
[  812.680039][   T59]  ? load_image+0x420/0x420
[  812.684594][   T59]  panic+0x2ca/0x720
[  812.688532][   T59]  ? bpf_jit_dump+0xd0/0xd0
[  812.693079][   T59]  ? ret_from_fork_asm+0x11/0x20
[  812.698050][   T59]  __warn+0x2e0/0x470
[  812.702066][   T59]  ? __cfg80211_ibss_joined+0x3cb/0x430
[  812.707649][   T59]  ? __cfg80211_ibss_joined+0x3cb/0x430
[  812.713228][   T59]  report_bug+0x2be/0x4f0
[  812.717583][   T59]  ? __cfg80211_ibss_joined+0x3cb/0x430
[  812.723189][   T59]  ? __cfg80211_ibss_joined+0x3cb/0x430
[  812.728761][   T59]  ? __cfg80211_ibss_joined+0x3cd/0x430
[  812.734342][   T59]  handle_bug+0xcf/0x120
[  812.738616][   T59]  exc_invalid_op+0x1a/0x50
[  812.743154][   T59]  asm_exc_invalid_op+0x1a/0x20
[  812.748029][   T59] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430
[  812.754219][   T59] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 16 98 f7 0f 0b eb bf e8 65 16 98 f7 <0f> 0b eb b6 e8 5c 16 98 f7 0f 0b e9 e2 fd ff ff e8 50 16 98 f7 0f
[  812.773849][   T59] RSP: 0018:ffffc900015a7a40 EFLAGS: 00010293
[  812.779946][   T59] RAX: ffffffff89ef5bbb RBX: dffffc0000000000 RCX: ffff88801e2c1e00
[  812.787952][   T59] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0
[  812.796047][   T59] RBP: ffffc900015a7af8 R08: ffffffff911ed56f R09: 1ffffffff223daad
[  812.804047][   T59] R10: dffffc0000000000 R11: fffffbfff223daae R12: ffff88806c4bcd10
[  812.812045][   T59] R13: ffff88801cff3658 R14: 1ffff920002b4f4c R15: 000000000000001f
[  812.820051][   T59]  ? __cfg80211_ibss_joined+0x3cb/0x430
[  812.825668][   T59]  ? trace_rdev_return_void+0x1c0/0x1c0
[  812.831295][   T59]  cfg80211_process_wdev_events+0x396/0x500
[  812.837260][   T59]  cfg80211_process_rdev_events+0xa1/0x110
[  812.843121][   T59]  cfg80211_event_work+0x2f/0x40
[  812.848102][   T59]  ? process_scheduled_works+0x975/0x1600
[  812.853869][   T59]  process_scheduled_works+0xa60/0x1600
[  812.859491][   T59]  ? worker_attach_to_pool+0x370/0x370
[  812.864998][   T59]  ? assign_work+0x3cc/0x5d0
[  812.869641][   T59]  worker_thread+0xa5e/0xfe0
[  812.874297][   T59]  kthread+0x2fa/0x390
[  812.878418][   T59]  ? pr_cont_work+0x550/0x550
[  812.883143][   T59]  ? kthread_blkcg+0xd0/0xd0
[  812.887777][   T59]  ret_from_fork+0x48/0x80
[  812.892256][   T59]  ? kthread_blkcg+0xd0/0xd0
[  812.896887][   T59]  ret_from_fork_asm+0x11/0x20
[  812.901750][   T59]  </TASK>
[  812.904998][   T59] Kernel Offset: disabled
[  812.909422][   T59] Rebooting in 86400 seconds..