last executing test programs:

6.413202151s ago: executing program 4 (id=4613):
r0 = gettid()
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba9, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)}, 0x900000000000000)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
openat$tun(0xffffffffffffff9c, 0x0, 0x40e02, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0xa, 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

5.894279674s ago: executing program 4 (id=4618):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4273, r0}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500e00080000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40)
sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff3556b3b598b353011a5b90650042e2dacdc165ecece4e6be1862e2bdacd2737d00ad6f9f030000005e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f8049f260c603dbc317f54b901ee80eae132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x24008000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x30}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d0019", 0x29}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb014000000000000000000c0000000c00000002000000030000000000000f00000004"], 0x0, 0x26, 0x0, 0x1, 0xc46}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRES64=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10, 0xffffffffffffffff}, 0x94)

5.793785985s ago: executing program 2 (id=4620):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x8, 0xb}, 0x50)
close(0x3)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x2, 0x6, 0x20101}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d0000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000240), 0x0, &(0x7f0000000a40)="585ce436ec5813c7f14bd1d71e2bf4cf7d0ea6cfab07f0961d4f0a79959631a54f3c007f5e3e3ca2147d52d3ae9971d51f067347365c841ee43748a9af6df524557c5acdd4e239dc7637291197a11b3fa7e26a83ab45ab969742317454a8596205587f1bc11148f72ddfd3b2cbda35708259c1073e7bef083cbd90b4d2bfea3059d558e243c55adc2092706777a452857cb5dd198d645b0a6c208186041c9de68b161eb83e52698b2abda2610ed0352954a4ef56", &(0x7f0000000b40)="31765ebdfa89f50b4327422e14097c4f6078d5c0802ff0b781a781bbefdc8c0ca72544020e5f2b253b481cefda1ed9d0e8c03f43469ce86fc3d11ace80a1ddfa06250e7fef13f086330285f1793f75501a1c2e111c069b4813c8ae7068c9835abe65b28a44cf6476c08263f5f24912a7f9f408a0c7844a0a146d7bcc43d4c0b0bdfecee5ddb45c164e4b353a837967d8382085ca92bb39499eeecbcb40f54472db79d69eaeaa5e5125a2279b62dc0d61a6fa8bc8cd659b166dd5cd17b55566585820c724a2cf69da58f9eb63c54fadc66ab14115c5765b5e76598fa1b1914f86ffad86d10933fefb85dca0dd38bccf17de5b4507d57ca6efcf", 0x8, r1, 0x4}, 0x38)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000380)='memory.current\x00', 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
sendmsg$inet(r6, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000180)={'wlan1\x00', @local})
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0)

5.536950638s ago: executing program 2 (id=4624):
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8)
close(r2)
r4 = socket$kcm(0x11, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
openat$cgroup_ro(r6, 0x0, 0x0, 0x0)

3.006147224s ago: executing program 4 (id=4627):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200), 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)=0x20000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f00000001c0), &(0x7f0000000080)=""/45}, 0x20)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

2.98332376s ago: executing program 2 (id=4628):
syz_clone(0x20861600, &(0x7f0000000340)="62c92b0d600807b74d69c8694d64528369897e72543407698c05f90bf001f8b478ae9ab217c42e9c805d53ccefa9c6de0d50a714376129aae5322b5fe6b9b12780e351f41eaaf42de808e96d02a76433b1", 0x4a, &(0x7f0000001040), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe)
syz_clone(0x2a340800, 0x0, 0xc, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x14, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac"], 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

2.370869344s ago: executing program 3 (id=4634):
socket$kcm(0x10, 0x2, 0x4)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000040000000000fb6c3b80c05b8f9aec742cc7791c077bd22d5e47a0b99157c08402dc74887107ea43687eb49d9d384c4227e58f65731668af2eefd51428337ec13ced2d01d54fe09b5c33cf48940bb4493365f6afad46cb4fa0a2baa7aafeb7b8b09037e00b11f27fd19591ca28b22f366869fbeb7b3dd08b90f5d90ad44943e000"/156, @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000014006b030231a6080c000af32c0cae88539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1e61ad3edbd00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa9}, 0x10}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x41, 0x0, 0x8f00)
r5 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

2.370499244s ago: executing program 2 (id=4635):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
write$cgroup_subtree(r1, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xf, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000003c0)=""/51, 0x29, 0x33, 0x1, 0x7, 0x10000, @value=r1}, 0x28)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x10}, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r4}, 0x8)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xbb}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3, r4, 0xffffffffffffffff, r5], &(0x7f0000000580), 0x10, 0x1}, 0x94)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}, 0x10}, 0x94)
r8 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0xb, &(0x7f0000000000), 0xe)
sendmsg$inet(r8, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x24000840)
close(r8)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12)

2.369913994s ago: executing program 1 (id=4636):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0xe, &(0x7f00000000c0), 0xd8)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x80440, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x3fff, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0}, 0x34000001)
r3 = socket$kcm(0x21, 0x2, 0xa)
setsockopt$sock_attach_bpf(r3, 0x110, 0x2, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))

2.300478741s ago: executing program 4 (id=4637):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))
syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8040, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004800)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1041, 0x8000000000000002, 0xfffffffe, 0x0, 0x9d, 0x4008}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000713812000000000095000000e2000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x5, 0x2, 0x0, 0x0, 0x9, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x13420, 0x0, 0x6, 0x5, 0xfffffffffffffffc, 0x0, 0x9f, 0x0, 0x3, 0x0, 0xfffffffffffffff7}, 0x0, 0x7, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
socket$kcm(0xa, 0x2, 0x3a)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x1ff)

2.068712718s ago: executing program 1 (id=4639):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x1, 0x45}, 0x80, 0x0}, 0x260408d0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)={0x1, 0x0, [0x0]})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080))
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0x8, '\x00', 0x0, r2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x3c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_devices(r6, &(0x7f0000000740)=ANY=[], 0xffdd)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4, r9}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

2.007274966s ago: executing program 3 (id=4640):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000080000000000000006000000950000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x3, 0x3c2a, 0x5, 0x20000, 0xffffffffffffffff, 0x6, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)

1.960292748s ago: executing program 0 (id=4650):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff8001, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x11, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000340)={0x0, 0x1, [@remote]})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000740)={{r1}, 0x0, &(0x7f0000000700)}, 0x20)
perf_event_open(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)
r2 = getpid()
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x1008, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[], 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000001200)={'wlan1\x00'})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xfe1b)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

1.635348446s ago: executing program 3 (id=4641):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0x3}, {0x0}], 0x2}, 0x200ce0c0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x20040080)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0})
socketpair$tipc(0x1e, 0x3, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))

1.633479476s ago: executing program 2 (id=4652):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1", 0x2f}], 0x1, 0x0, 0x0, 0x2000}, 0x0)
r3 = gettid()
write$cgroup_pid(r1, &(0x7f00000001c0)=r3, 0x12)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12)
r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0xde, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)
r9 = getpid()
r10 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10000000400, 0x1e36cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000f00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r10, 0x0, 0x0, 0x0}, 0x30)
r12 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b50000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x20)

1.54901034s ago: executing program 0 (id=4642):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r1=>0x0}, 0x8)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10)
socket$kcm(0x23, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000022009179c980f4051b"], 0xfe33)
recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x8000})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xe, 0x0, 0x0, 0x5d31, 0x28418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080))

1.390139191s ago: executing program 0 (id=4643):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1", 0x2f}], 0x1, 0x0, 0x0, 0x2000}, 0x0)
r3 = gettid()
write$cgroup_pid(r1, &(0x7f00000001c0)=r3, 0x12)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12)
r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0xde, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)
r9 = getpid()
r10 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10000000400, 0x1e36cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000f00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r10, 0x0, 0x0, 0x0}, 0x30)
r12 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b50000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r12], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x20)

1.355303854s ago: executing program 1 (id=4644):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x82d7)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x4, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={0x0, &(0x7f0000003680)=""/4096, 0x0, 0x1000, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)='/proc/1\f\xcf\x8eG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080))
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$cgroup_int(r3, &(0x7f0000000600), 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x355b)

1.307582115s ago: executing program 2 (id=4645):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x1, 0x45}, 0x80, 0x0}, 0x260408d0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)={0x1, 0x0, [0x0]})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080))
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0x8, '\x00', 0x0, r2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x3c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_devices(r6, &(0x7f0000000740)=ANY=[@ANYBLOB], 0xffdd)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4, r9}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

1.290470682s ago: executing program 3 (id=4646):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))
close(0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x5, 0x2)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[], 0x10b8}, 0x134c58d86b541130)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
close(r3)
r4 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000000000840000000700000094040000441000000000000000050000000000000000000011000000000000000000011601000000000000000000000003cfaff1a411936940e815b82c26205472b6847265849d913aac5ebe"], 0x98}, 0x4dc)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r3)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001c40))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280)="dfaf1c116a4cf38eb7702f2adf694ec069b2a6362d917e", 0x0}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x84)
syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

1.268499508s ago: executing program 4 (id=4647):
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20230, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x102000, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x55}, [@call={0x6f}], {0x95, 0x0, 0xa}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff00000000950000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00')
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x19, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000))
sendmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x8000)
sendmsg$kcm(r3, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
close(r4)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(0xffffffffffffffff)

1.132121592s ago: executing program 1 (id=4648):
socket$kcm(0xa, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4107b7e, 0x2, @perf_config_ext={0x7fffff, 0x3fff7ffd}, 0x22a6, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaed}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x2, 0x1, 0xfffffffe, &(0x7f0000000040)={0x0, 0x0})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r1=>0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x1, &(0x7f0000000200))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'macsec0\x00', 0x1})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012100)

1.131526102s ago: executing program 0 (id=4649):
socket$kcm(0x10, 0x400000002, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000880), 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x3a)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x73, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000300), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x10, '\x00', r6, r7, 0x2, 0x4, 0x1}, 0x50)
setsockopt$sock_attach_bpf(r4, 0x29, 0x30, 0x0, 0x500)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000640)=r1, 0x4)
bpf$ITER_CREATE(0x21, 0x0, 0x0)

845.937049ms ago: executing program 3 (id=4651):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
write$cgroup_subtree(r1, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xf, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000003c0)=""/51, 0x29, 0x33, 0x1, 0x7, 0x10000, @value=r1}, 0x28)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x10}, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r4}, 0x8)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xbb}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3, r4, 0xffffffffffffffff, r5], &(0x7f0000000580), 0x10, 0x1}, 0x94)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}, 0x10}, 0x94)
r8 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0xb, &(0x7f0000000000), 0xe)
sendmsg$inet(r8, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x24000840)
close(r8)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12)

696.781531ms ago: executing program 0 (id=4653):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000080000000000000006000000950000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x3, 0x3c2a, 0x5, 0x20000, 0xffffffffffffffff, 0x6, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)

670.549526ms ago: executing program 1 (id=4654):
r0 = gettid()
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba9, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)}, 0x900000000000000)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
openat$tun(0xffffffffffffff9c, 0x0, 0x40e02, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0xa, 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e62e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

459.272616ms ago: executing program 0 (id=4655):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
write$cgroup_subtree(r1, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xf, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000003c0)=""/51, 0x29, 0x33, 0x1, 0x7, 0x10000, @value=r1}, 0x28)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x10}, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r4}, 0x8)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xbb}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3, r4, 0xffffffffffffffff, r5], &(0x7f0000000580), 0x10, 0x1}, 0x94)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}, 0x10}, 0x94)
r8 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0xb, &(0x7f0000000000), 0xe)
sendmsg$inet(r8, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x24000840)
close(r8)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12)

290.164195ms ago: executing program 3 (id=4656):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r3)
r4 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x9, 0x4, 0x7d, 0xfe, 0x0, 0x5, 0x10, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0x8000, 0x8, 0x5, 0xe, 0x1000, 0x9, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x1, 0x6, 0xf7, 0x48, 0x0, 0x8003, 0x4010, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000180), 0xd}, 0x0, 0x800, 0x2, 0x9, 0xc, 0x8, 0x6, 0x0, 0x9, 0x0, 0x401}, 0xffffffffffffffff, 0xb, r4, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)

247.579087ms ago: executing program 4 (id=4657):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1", 0x2f}], 0x1, 0x0, 0x0, 0x2000}, 0x0)
r3 = gettid()
write$cgroup_pid(r1, &(0x7f00000001c0)=r3, 0x12)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12)
r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0xde, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12)
r9 = getpid()
r10 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10000000400, 0x1e36cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000f00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, r10, 0x0, 0x0, 0x0}, 0x30)
r12 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b50000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x20)

0s ago: executing program 1 (id=4658):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004004)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'], 0x88}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0100"/20, @ANYRES32], 0xfffffffffffffe13)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005", 0x17}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x20000000}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast})
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

cv_msg+0xcea/0xf90
[  182.103826][ T6632]  ? lock_chain_count+0x20/0x20
[  182.108833][ T6632]  ? genl_bind+0x380/0x380
[  182.113306][ T6632]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  182.119337][ T6632]  ? verify_lock_unused+0x140/0x140
[  182.124587][ T6632]  ? rcu_is_watching+0x11/0xa0
[  182.129399][ T6632]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  182.135686][ T6632]  ? lockdep_hardirqs_on+0x94/0x140
[  182.141039][ T6632]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  182.147243][ T6632]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  182.154001][ T6632]  netlink_rcv_skb+0x1f5/0x440
[  182.158822][ T6632]  ? genl_bind+0x380/0x380
[  182.163284][ T6632]  ? netlink_ack+0xb50/0xb50
[  182.167929][ T6632]  ? __lock_acquire+0x7d10/0x7d10
[  182.173011][ T6632]  ? down_read+0x1aa/0x2e0
[  182.177490][ T6632]  genl_rcv+0x24/0x40
[  182.181518][ T6632]  netlink_unicast+0x774/0x920
[  182.186351][ T6632]  netlink_sendmsg+0x8ba/0xbe0
[  182.191155][ T6632]  ? lockdep_hardirqs_on+0x94/0x140
[  182.196416][ T6632]  ? netlink_getsockopt+0x570/0x570
[  182.201667][ T6632]  ? security_socket_sendmsg+0x77/0xa0
[  182.207173][ T6632]  ? security_socket_sendmsg+0x7c/0xa0
[  182.212685][ T6632]  ? netlink_getsockopt+0x570/0x570
[  182.218424][ T6632]  ____sys_sendmsg+0x5b7/0x8f0
[  182.223257][ T6632]  ? __sys_sendmsg_sock+0x30/0x30
[  182.228377][ T6632]  ? import_iovec+0x6f/0xa0
[  182.232946][ T6632]  ___sys_sendmsg+0x236/0x2e0
[  182.237684][ T6632]  ? __sys_sendmsg+0x2a0/0x2a0
[  182.242510][ T6632]  ? ktime_get_real_ts64+0x440/0x440
[  182.247993][ T6632]  __se_sys_sendmsg+0x1af/0x290
[  182.252904][ T6632]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  182.259111][ T6632]  ? __x64_sys_sendmsg+0x80/0x80
[  182.264132][ T6632]  ? __sanitizer_cov_trace_pc+0x4/0x60
[  182.269648][ T6632]  do_syscall_64+0x4c/0xa0
[  182.274555][ T6632]  ? clear_bhb_loop+0x30/0x80
[  182.279376][ T6632]  ? clear_bhb_loop+0x30/0x80
[  182.284137][ T6632]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  182.290074][ T6632] RIP: 0033:0x7f7fc6515799
[  182.294549][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.314209][ T6632] RSP: 002b:00007f7fc476f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  182.322776][ T6632] RAX: ffffffffffffffda RBX: 00007f7fc678efa0 RCX: 00007f7fc6515799
[  182.330811][ T6632] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  182.338825][ T6632] RBP: 00007f7fc65abbd9 R08: 0000000000000000 R09: 0000000000000000
[  182.346883][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.354916][ T6632] R13: 00007f7fc678f038 R14: 00007f7fc678efa0 R15: 00007fff725902b8
[  182.362952][ T6632]  </TASK>
[  182.755811][ T6649] device bridge_slave_1 left promiscuous mode
[  182.798099][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.882850][ T6648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.774'.
[  182.906251][ T6649] device bridge_slave_0 left promiscuous mode
[  182.971338][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.647714][ T6667] netlink: 'syz.1.777': attribute type 6 has an invalid length.
[  183.670221][ T6659] netlink: 'syz.2.774': attribute type 10 has an invalid length.
[  183.718392][ T6659] netlink: 55 bytes leftover after parsing attributes in process `syz.2.774'.
[  183.768714][ T6670] delete_channel: no stack
[  183.848444][ T6672] delete_channel: no stack
[  184.386377][ T6676] delete_channel: no stack
[  184.438080][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.785'.
[  184.517679][ T6695] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.784'.
[  184.739846][ T6695] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  184.755169][ T6695] CPU: 1 PID: 6695 Comm: syz.2.784 Not tainted syzkaller #0
[  184.762532][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  184.772626][ T6695] Call Trace:
[  184.775953][ T6695]  <TASK>
[  184.778913][ T6695]  dump_stack_lvl+0x188/0x250
[  184.783638][ T6695]  ? show_regs_print_info+0x20/0x20
[  184.788888][ T6695]  ? load_image+0x400/0x400
[  184.793447][ T6695]  sysfs_warn_dup+0x8a/0xa0
[  184.797990][ T6695]  sysfs_do_create_link_sd+0xc0/0x110
[  184.803582][ T6695]  device_add+0x7ed/0xfb0
[  184.808069][ T6695]  wiphy_register+0x1e81/0x2c30
[  184.813097][ T6695]  ? cfg80211_event_work+0x40/0x40
[  184.818262][ T6695]  ? minstrel_ht_alloc+0x808/0x980
[  184.823428][ T6695]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  184.829597][ T6695]  ieee80211_register_hw+0x2aa1/0x3af0
[  184.835227][ T6695]  ? ieee80211_tasklet_handler+0x20/0x20
[  184.840917][ T6695]  ? rcu_is_watching+0x11/0xa0
[  184.845812][ T6695]  ? memset+0x1e/0x40
[  184.850027][ T6695]  ? hrtimer_init+0x10c/0x220
[  184.854757][ T6695]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  184.860646][ T6695]  hwsim_new_radio_nl+0xa6f/0xc40
[  184.865779][ T6695]  genl_rcv_msg+0xcea/0xf90
[  184.870370][ T6695]  ? genl_bind+0x380/0x380
[  184.875206][ T6695]  ? __dev_queue_xmit+0x1cbf/0x2f80
[  184.880445][ T6695]  ? verify_lock_unused+0x140/0x140
[  184.885799][ T6695]  ? kmalloc_large_node+0xf2/0x190
[  184.890976][ T6695]  ? dev_queue_xmit+0x20/0x20
[  184.895788][ T6695]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  184.902347][ T6695]  netlink_rcv_skb+0x1f5/0x440
[  184.907145][ T6695]  ? genl_bind+0x380/0x380
[  184.911760][ T6695]  ? netlink_ack+0xb50/0xb50
[  184.916408][ T6695]  ? __lock_acquire+0x7d10/0x7d10
[  184.921575][ T6695]  ? down_read+0x1aa/0x2e0
[  184.926046][ T6695]  genl_rcv+0x24/0x40
[  184.930067][ T6695]  netlink_unicast+0x774/0x920
[  184.934880][ T6695]  netlink_sendmsg+0x8ba/0xbe0
[  184.939737][ T6695]  ? netlink_getsockopt+0x570/0x570
[  184.944988][ T6695]  ? aa_sock_msg_perm+0x94/0x150
[  184.949975][ T6695]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  184.955303][ T6695]  ? security_socket_sendmsg+0x7c/0xa0
[  184.960932][ T6695]  ? netlink_getsockopt+0x570/0x570
[  184.966175][ T6695]  ____sys_sendmsg+0x5b7/0x8f0
[  184.970999][ T6695]  ? __sys_sendmsg_sock+0x30/0x30
[  184.976092][ T6695]  ? import_iovec+0x6f/0xa0
[  184.980650][ T6695]  ___sys_sendmsg+0x236/0x2e0
[  184.985383][ T6695]  ? __sys_sendmsg+0x2a0/0x2a0
[  184.990281][ T6695]  __se_sys_sendmsg+0x1af/0x290
[  184.995188][ T6695]  ? __x64_sys_sendmsg+0x80/0x80
[  185.000251][ T6695]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  185.006326][ T6695]  ? lockdep_hardirqs_on+0x94/0x140
[  185.011577][ T6695]  do_syscall_64+0x4c/0xa0
[  185.016121][ T6695]  ? clear_bhb_loop+0x30/0x80
[  185.020837][ T6695]  ? clear_bhb_loop+0x30/0x80
[  185.025553][ T6695]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  185.031482][ T6695] RIP: 0033:0x7f4420ab1799
[  185.035931][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.055758][ T6695] RSP: 002b:00007f441ecc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.064400][ T6695] RAX: ffffffffffffffda RBX: 00007f4420d2b180 RCX: 00007f4420ab1799
[  185.072435][ T6695] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  185.080799][ T6695] RBP: 00007f4420b47bd9 R08: 0000000000000000 R09: 0000000000000000
[  185.088841][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.096900][ T6695] R13: 00007f4420d2b218 R14: 00007f4420d2b180 R15: 00007fff6e9a2cc8
[  185.104954][ T6695]  </TASK>
[  185.507967][ T6709] Ÿë
: port 3(gretap0) entered blocking state
[  185.520563][ T6709] Ÿë
: port 3(gretap0) entered disabled state
[  185.587319][ T6709] device gretap0 entered promiscuous mode
[  185.634249][ T6716] netlink: 'syz.4.794': attribute type 6 has an invalid length.
[  185.651841][ T6712] delete_channel: no stack
[  185.796694][ T6727] netlink: 'syz.0.797': attribute type 3 has an invalid length.
[  185.836024][ T6727] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.797'.
[  186.022692][ T6731] netlink: 'syz.0.797': attribute type 3 has an invalid length.
[  186.045887][ T6731] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.797'.
[  186.483769][ T6747] netlink: 156 bytes leftover after parsing attributes in process `syz.2.803'.
[  186.601962][ T6754] netlink: 'syz.1.805': attribute type 39 has an invalid length.
[  186.885674][ T6765] netlink: 'syz.2.808': attribute type 6 has an invalid length.
[  186.961992][ T6757] delete_channel: no stack
[  187.232555][ T6771] Ÿë
: port 2(gretap0) entered blocking state
[  187.243478][ T6775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.811'.
[  187.261144][ T6772] delete_channel: no stack
[  187.271834][ T6771] Ÿë
: port 2(gretap0) entered disabled state
[  187.346227][ T6771] device gretap0 entered promiscuous mode
[  187.423485][ T6775] netlink: 'syz.3.811': attribute type 10 has an invalid length.
[  187.463410][ T6775] netlink: 55 bytes leftover after parsing attributes in process `syz.3.811'.
[  188.286996][ T6779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.812'.
[  188.308785][ T6783] netlink: 'syz.4.815': attribute type 6 has an invalid length.
[  188.317080][ T6787] netlink: 'syz.2.814': attribute type 6 has an invalid length.
[  188.643335][ T6799] netlink: 'syz.4.819': attribute type 10 has an invalid length.
[  188.672398][ T6799] netlink: 55 bytes leftover after parsing attributes in process `syz.4.819'.
[  188.987663][ T6812] netlink: 'syz.1.823': attribute type 4 has an invalid length.
[  188.996347][ T6812] netlink: 152 bytes leftover after parsing attributes in process `syz.1.823'.
[  189.007944][ T6814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.824'.
[  189.592057][ T6817] delete_channel: no stack
[  189.793793][ T6825] netlink: 156 bytes leftover after parsing attributes in process `syz.4.829'.
[  189.832844][ T6830] Ÿë
: port 4(gretap0) entered blocking state
[  189.841519][ T6830] Ÿë
: port 4(gretap0) entered disabled state
[  189.854632][ T6830] device gretap0 entered promiscuous mode
[  190.720096][ T6861] delete_channel: no stack
[  190.896573][ T6874] validate_nla: 2 callbacks suppressed
[  190.896609][ T6874] netlink: 'syz.3.843': attribute type 3 has an invalid length.
[  190.950299][ T6874] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.843'.
[  191.116647][ T6877] netlink: 'syz.3.843': attribute type 3 has an invalid length.
[  191.197571][ T6877] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.843'.
[  191.399539][ T1111] Bluetooth: hci2: command 0x0406 tx timeout
[  191.479456][ T1111] Bluetooth: hci0: command 0x0406 tx timeout
[  191.479456][ T1108] Bluetooth: hci1: command 0x0406 tx timeout
[  191.479552][ T1108] Bluetooth: hci4: command 0x0406 tx timeout
[  191.488294][ T1111] Bluetooth: hci3: command 0x0406 tx timeout
[  191.773458][ T6889] netlink: 156 bytes leftover after parsing attributes in process `syz.3.846'.
[  192.239727][ T6907] delete_channel: no stack
[  192.484765][ T6912] Ÿë
: port 4(gretap0) entered blocking state
[  192.524299][ T6912] Ÿë
: port 4(gretap0) entered disabled state
[  192.577282][ T6912] device gretap0 entered promiscuous mode
[  192.804128][ T6935] netlink: 'syz.1.858': attribute type 3 has an invalid length.
[  192.880346][ T6935] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.858'.
[  192.931742][ T6933] netlink: 'syz.3.859': attribute type 10 has an invalid length.
[  192.943272][ T6933] netlink: 55 bytes leftover after parsing attributes in process `syz.3.859'.
[  193.068015][ T6936] netlink: 'syz.1.858': attribute type 3 has an invalid length.
[  193.082446][ T6936] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.858'.
[  193.158113][ T6942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.861'.
[  193.636364][ T6946] netlink: 'syz.4.861': attribute type 10 has an invalid length.
[  193.649499][ T6946] netlink: 55 bytes leftover after parsing attributes in process `syz.4.861'.
[  194.457767][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.464253][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  195.322090][ T6998] netlink: 156 bytes leftover after parsing attributes in process `syz.1.876'.
[  195.454987][ T7005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.880'.
[  195.579661][ T7005] netlink: 'syz.0.880': attribute type 10 has an invalid length.
[  195.588085][ T7005] netlink: 55 bytes leftover after parsing attributes in process `syz.0.880'.
[  196.485672][ T7009] delete_channel: no stack
[  196.499595][ T7015] netlink: 'syz.1.881': attribute type 10 has an invalid length.
[  196.514656][ T7015] netlink: 55 bytes leftover after parsing attributes in process `syz.1.881'.
[  197.416984][ T7056] netlink: 156 bytes leftover after parsing attributes in process `syz.0.894'.
[  197.851368][ T7067] delete_channel: no stack
[  198.634433][ T7082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.901'.
[  198.816005][ T7089] netlink: 'syz.1.901': attribute type 10 has an invalid length.
[  198.860740][ T7089] netlink: 55 bytes leftover after parsing attributes in process `syz.1.901'.
[  199.531457][ T7091] netlink: 'syz.2.905': attribute type 10 has an invalid length.
[  199.540539][ T7091] netlink: 55 bytes leftover after parsing attributes in process `syz.2.905'.
[  199.946299][ T7118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.910'.
[  200.270386][ T7118] device veth0_to_bridge left promiscuous mode
[  200.277882][ T7118] Ÿë
: port 1(veth0_to_bridge) entered disabled state
[  200.350388][ T7121] netlink: 156 bytes leftover after parsing attributes in process `syz.2.914'.
[  200.960948][ T7141] netlink: 'syz.1.920': attribute type 6 has an invalid length.
[  201.697513][ T7166] netlink: 'syz.2.928': attribute type 6 has an invalid length.
[  201.937328][ T7176] netlink: 'syz.4.931': attribute type 6 has an invalid length.
[  201.971568][ T7167] delete_channel: no stack
[  202.067098][ T7170] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.929'.
[  202.181500][ T7187] netlink: 'syz.2.934': attribute type 6 has an invalid length.
[  202.272048][ T7186] netlink: 'syz.3.943': attribute type 6 has an invalid length.
[  203.175584][ T7210] netlink: 'syz.0.938': attribute type 10 has an invalid length.
[  203.241080][ T7210] netlink: 55 bytes leftover after parsing attributes in process `syz.0.938'.
[  204.059359][ T7233] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.947'.
[  204.083948][ T7230] netlink: 'syz.2.948': attribute type 6 has an invalid length.
[  204.101793][ T7219] delete_channel: no stack
[  204.702592][ T7239] delete_channel: no stack
[  204.863793][ T7251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.952'.
[  204.865912][ T7243] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.951'.
[  205.660899][ T7240] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.951'.
[  205.904065][ T7251] device veth0_to_bridge left promiscuous mode
[  205.930803][ T7251] Ÿë
: port 1(veth0_to_bridge) entered disabled state
[  206.079319][ T7248] delete_channel: no stack
[  206.629808][ T7289] netlink: 'syz.0.961': attribute type 10 has an invalid length.
[  206.731738][ T7289] netlink: 55 bytes leftover after parsing attributes in process `syz.0.961'.
[  206.880373][ T7281] netlink: 'syz.1.959': attribute type 6 has an invalid length.
[  207.014162][ T7296] netlink: 'syz.4.966': attribute type 10 has an invalid length.
[  207.062054][ T7296] device hsr0 entered promiscuous mode
[  207.555764][ T7316] netlink: 'syz.2.972': attribute type 10 has an invalid length.
[  207.940714][ T7306] delete_channel: no stack
[  208.625968][ T7354] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.982'.
[  209.844529][ T7371] delete_channel: no stack
[  210.045423][ T7393] delete_channel: no stack
[  210.134094][ T7397] netlink: 'syz.0.992': attribute type 10 has an invalid length.
[  210.187191][ T7397] device hsr0 entered promiscuous mode
[  210.270982][ T7397] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  210.380822][ T7397] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  210.459775][ T7397] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  210.502639][ T7397] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  210.529104][ T7396] netlink: 'syz.4.994': attribute type 6 has an invalid length.
[  211.704390][ T7431] delete_channel: no stack
[  211.831514][ T7441] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1005'.
[  211.896802][ T7448] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1005'.
[  212.097386][ T7449] netlink: 'syz.3.1008': attribute type 6 has an invalid length.
[  212.357700][ T7459] netlink: 'syz.0.1011': attribute type 10 has an invalid length.
[  212.390136][ T7459] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1011'.
[  212.462469][ T7454] netlink: 'syz.1.1009': attribute type 10 has an invalid length.
[  212.638846][ T7454] device hsr0 entered promiscuous mode
[  212.949893][ T7466] delete_channel: no stack
[  213.901302][ T7478] delete_channel: no stack
[  213.941449][ T7497] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1020'.
[  214.203727][ T7503] netlink: 'syz.2.1023': attribute type 6 has an invalid length.
[  214.447475][ T7510] netlink: 'syz.2.1036': attribute type 6 has an invalid length.
[  215.005752][ T7521] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1025'.
[  215.142576][ T7530] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1025'.
[  215.666501][ T7541] netlink: 'syz.3.1034': attribute type 10 has an invalid length.
[  215.707693][ T7534] delete_channel: no stack
[  215.951131][ T7551] delete_channel: no stack
[  216.131742][ T7550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.139191][ T7550] IPv6: NLM_F_CREATE should be set when creating new route
[  216.147080][ T7550] IPv6: NLM_F_CREATE should be set when creating new route
[  216.155670][ T7550] IPv6: NLM_F_CREATE should be set when creating new route
[  216.178258][ T7537] delete_channel: no stack
[  216.517655][ T7560] netlink: 'syz.0.1039': attribute type 10 has an invalid length.
[  216.559506][ T7560] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1039'.
[  216.896661][ T7576] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1045'.
[  217.409626][ T7583] delete_channel: no stack
[  217.667224][ T7594] delete_channel: no stack
[  217.844372][ T7594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  217.855003][ T7594] IPv6: NLM_F_CREATE should be set when creating new route
[  217.864626][ T7594] IPv6: NLM_F_CREATE should be set when creating new route
[  217.874813][ T7594] IPv6: NLM_F_CREATE should be set when creating new route
[  217.914806][ T7590] delete_channel: no stack
[  218.201515][ T7595] delete_channel: no stack
[  218.574551][ T7615] netlink: 'syz.1.1058': attribute type 10 has an invalid length.
[  218.609335][ T7615] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1058'.
[  218.941865][ T7625] delete_channel: no stack
[  219.385580][ T7641] delete_channel: no stack
[  219.459629][ T7632] delete_channel: no stack
[  219.501199][ T7644] netlink: 'syz.1.1067': attribute type 6 has an invalid length.
[  219.586833][ T7641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.594465][ T7641] IPv6: NLM_F_CREATE should be set when creating new route
[  219.602291][ T7641] IPv6: NLM_F_CREATE should be set when creating new route
[  219.609877][ T7641] IPv6: NLM_F_CREATE should be set when creating new route
[  220.324151][ T7675] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1077'.
[  220.415922][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1078'.
[  221.101510][ T7676] device veth0_to_bridge left promiscuous mode
[  221.107806][ T7676] Ÿë
: port 1(veth0_to_bridge) entered disabled state
[  221.181990][ T7689] netlink: 'syz.1.1079': attribute type 6 has an invalid length.
[  221.313614][ T7688] delete_channel: no stack
[  221.428289][ T7702] netlink: 'syz.1.1083': attribute type 6 has an invalid length.
[  222.015444][ T7723] netlink: 'syz.3.1089': attribute type 10 has an invalid length.
[  222.131792][ T7723] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  222.178702][ T7725] delete_channel: no stack
[  222.274627][ T7729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  222.281971][ T7729] IPv6: NLM_F_CREATE should be set when creating new route
[  222.289301][ T7729] IPv6: NLM_F_CREATE should be set when creating new route
[  222.296681][ T7729] IPv6: NLM_F_CREATE should be set when creating new route
[  222.760269][ T7740] netlink: 'syz.2.1094': attribute type 6 has an invalid length.
[  223.252230][ T7748] delete_channel: no stack
[  223.354180][ T7726] syz.3.1089 (7726) used greatest stack depth: 17240 bytes left
[  223.825631][ T7771] netlink: 'syz.3.1105': attribute type 21 has an invalid length.
[  223.946994][ T7781] netlink: 'syz.2.1109': attribute type 6 has an invalid length.
[  224.015814][ T7786] delete_channel: no stack
[  224.180523][ T7790] netlink: 'syz.2.1112': attribute type 10 has an invalid length.
[  224.219482][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1112'.
[  224.315168][ T7793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.479778][ T7792] delete_channel: no stack
[  224.574465][ T7802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1115'.
[  224.725150][ T7812] netlink: 'syz.1.1117': attribute type 6 has an invalid length.
[  225.130259][ T7816] netlink: 'syz.4.1119': attribute type 21 has an invalid length.
[  225.157267][ T7827] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1121'.
[  225.354520][ T7826] netlink: 'syz.0.1122': attribute type 6 has an invalid length.
[  225.610299][ T7841] netlink: 'syz.2.1125': attribute type 21 has an invalid length.
[  225.771588][ T7837] delete_channel: no stack
[  225.865080][ T7846] netlink: 'syz.4.1130': attribute type 6 has an invalid length.
[  226.000208][ T7855] netlink: 'syz.2.1131': attribute type 6 has an invalid length.
[  226.169541][ T7850] delete_channel: no stack
[  226.217800][ T7858] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1134'.
[  226.389972][ T7864] device wlan0 left promiscuous mode
[  226.431421][ T7871] device wlan0 entered promiscuous mode
[  226.577522][ T7871] ¤: port 1(batadv0) entered blocking state
[  226.637934][ T7871] ¤: port 1(batadv0) entered disabled state
[  226.651026][ T7871] device batadv0 entered promiscuous mode
[  226.660687][  T154] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  226.670455][  T154] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  226.680191][ T7876] netlink: 'syz.4.1139': attribute type 6 has an invalid length.
[  226.816942][ T7881] device hsr0 left promiscuous mode
[  226.858126][ T7881] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  226.993249][ T7878] delete_channel: no stack
[  227.069942][ T7882] delete_channel: no stack
[  228.173614][ T7895] delete_channel: no stack
[  228.213349][ T7912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1149'.
[  228.811687][ T7931] delete_channel: no stack
[  228.949209][ T7938] validate_nla: 6 callbacks suppressed
[  228.949250][ T7938] netlink: 'syz.2.1158': attribute type 21 has an invalid length.
[  229.081538][ T7945] netlink: 'syz.4.1161': attribute type 6 has an invalid length.
[  229.379765][ T7947] delete_channel: no stack
[  229.391622][ T7958] netlink: 'syz.4.1166': attribute type 6 has an invalid length.
[  229.711488][ T7967] delete_channel: no stack
[  229.880246][ T7980] device wlan0 entered promiscuous mode
[  230.043637][ T7988] netlink: 'syz.4.1174': attribute type 21 has an invalid length.
[  230.337885][ T7993] netlink: 'syz.0.1176': attribute type 6 has an invalid length.
[  230.537642][ T7998] netlink: 'syz.2.1177': attribute type 6 has an invalid length.
[  231.531195][ T8018] delete_channel: no stack
[  231.631457][ T8021] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1187'.
[  231.976880][ T8021] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  232.029389][ T8021] CPU: 1 PID: 8021 Comm: syz.0.1187 Not tainted syzkaller #0
[  232.037055][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  232.047279][ T8021] Call Trace:
[  232.050621][ T8021]  <TASK>
[  232.053618][ T8021]  dump_stack_lvl+0x188/0x250
[  232.058380][ T8021]  ? show_regs_print_info+0x20/0x20
[  232.063943][ T8021]  ? load_image+0x400/0x400
[  232.068684][ T8021]  sysfs_warn_dup+0x8a/0xa0
[  232.073442][ T8021]  sysfs_do_create_link_sd+0xc0/0x110
[  232.078899][ T8021]  device_add+0x7ed/0xfb0
[  232.083462][ T8021]  wiphy_register+0x1e81/0x2c30
[  232.088771][ T8021]  ? cfg80211_event_work+0x40/0x40
[  232.094108][ T8021]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  232.100403][ T8021]  ieee80211_register_hw+0x2aa1/0x3af0
[  232.106041][ T8021]  ? ieee80211_tasklet_handler+0x20/0x20
[  232.111829][ T8021]  ? rcu_is_watching+0x11/0xa0
[  232.116689][ T8021]  ? memset+0x1e/0x40
[  232.120850][ T8021]  ? hrtimer_init+0x10c/0x220
[  232.125633][ T8021]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  232.131503][ T8021]  hwsim_new_radio_nl+0xa6f/0xc40
[  232.136671][ T8021]  genl_rcv_msg+0xcea/0xf90
[  232.141300][ T8021]  ? genl_bind+0x380/0x380
[  232.145917][ T8021]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  232.151975][ T8021]  ? verify_lock_unused+0x140/0x140
[  232.157277][ T8021]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  232.163169][ T8021]  ? perf_trace_lock+0x301/0x390
[  232.168368][ T8021]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  232.175026][ T8021]  netlink_rcv_skb+0x1f5/0x440
[  232.179868][ T8021]  ? genl_bind+0x380/0x380
[  232.184630][ T8021]  ? netlink_ack+0xb50/0xb50
[  232.189286][ T8021]  ? lockdep_hardirqs_on+0x94/0x140
[  232.194677][ T8021]  ? down_read+0x1aa/0x2e0
[  232.199270][ T8021]  genl_rcv+0x24/0x40
[  232.203347][ T8021]  netlink_unicast+0x774/0x920
[  232.208306][ T8021]  netlink_sendmsg+0x8ba/0xbe0
[  232.213171][ T8021]  ? netlink_getsockopt+0x570/0x570
[  232.218452][ T8021]  ? aa_sock_msg_perm+0x94/0x150
[  232.223747][ T8021]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  232.229103][ T8021]  ? security_socket_sendmsg+0x7c/0xa0
[  232.234748][ T8021]  ? netlink_getsockopt+0x570/0x570
[  232.240019][ T8021]  ____sys_sendmsg+0x5b7/0x8f0
[  232.244906][ T8021]  ? __sys_sendmsg_sock+0x30/0x30
[  232.250038][ T8021]  ? import_iovec+0x6f/0xa0
[  232.254629][ T8021]  ___sys_sendmsg+0x236/0x2e0
[  232.259408][ T8021]  ? __sys_sendmsg+0x2a0/0x2a0
[  232.264285][ T8021]  ? trace_event_raw_event_lock+0x270/0x270
[  232.270539][ T8021]  __se_sys_sendmsg+0x1af/0x290
[  232.275584][ T8021]  ? __x64_sys_sendmsg+0x80/0x80
[  232.280683][ T8021]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  232.286786][ T8021]  ? lockdep_hardirqs_on+0x94/0x140
[  232.292085][ T8021]  do_syscall_64+0x4c/0xa0
[  232.296558][ T8021]  ? clear_bhb_loop+0x30/0x80
[  232.301394][ T8021]  ? clear_bhb_loop+0x30/0x80
[  232.306143][ T8021]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  232.312112][ T8021] RIP: 0033:0x7fc117c56799
[  232.316591][ T8021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.336459][ T8021] RSP: 002b:00007fc115eb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.344975][ T8021] RAX: ffffffffffffffda RBX: 00007fc117ecffa0 RCX: 00007fc117c56799
[  232.353204][ T8021] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[  232.361330][ T8021] RBP: 00007fc117cecbd9 R08: 0000000000000000 R09: 0000000000000000
[  232.369365][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.377555][ T8021] R13: 00007fc117ed0038 R14: 00007fc117ecffa0 R15: 00007ffd6e5effa8
[  232.385667][ T8021]  </TASK>
[  232.609668][ T8039] device wlan0 left promiscuous mode
[  232.655557][ T8036] netlink: 'syz.1.1191': attribute type 6 has an invalid length.
[  232.682569][ T8033] device wlan0 entered promiscuous mode
[  232.807232][ T8043] netlink: 'syz.0.1192': attribute type 6 has an invalid length.
[  233.391818][ T8059] delete_channel: no stack
[  233.597829][ T8071] netlink: 'syz.1.1204': attribute type 6 has an invalid length.
[  233.642887][ T8069] netlink: 'syz.2.1203': attribute type 39 has an invalid length.
[  234.205265][ T8091] device wlan0 left promiscuous mode
[  234.276113][ T8096] device wlan0 entered promiscuous mode
[  234.915180][ T8115] validate_nla: 1 callbacks suppressed
[  234.915217][ T8115] netlink: 'syz.2.1216': attribute type 6 has an invalid length.
[  235.039573][ T8118] netlink: 'syz.0.1218': attribute type 39 has an invalid length.
[  235.185131][ T8124] netlink: 'syz.3.1219': attribute type 6 has an invalid length.
[  235.491837][ T8139] delete_channel: no stack
[  235.945951][ T8159] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1229'.
[  236.153998][ T8160] device wlan0 entered promiscuous mode
[  236.161119][ T8164] netlink: 'syz.1.1230': attribute type 2 has an invalid length.
[  236.170300][ T8164] netlink: 'syz.1.1230': attribute type 8 has an invalid length.
[  236.178357][ T8164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1230'.
[  236.285664][ T8170] netlink: 'syz.0.1232': attribute type 6 has an invalid length.
[  236.458543][ T8173] netlink: 'syz.3.1233': attribute type 6 has an invalid length.
[  236.560857][ T8175] netlink: 'syz.1.1234': attribute type 39 has an invalid length.
[  236.749595][ T8180] delete_channel: no stack
[  237.315649][ T8201] netlink: 'syz.3.1246': attribute type 6 has an invalid length.
[  237.383812][ T8208] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1245'.
[  237.598164][ T8212] netlink: 'syz.4.1248': attribute type 6 has an invalid length.
[  237.777826][ T8219] device wlan0 left promiscuous mode
[  237.783924][ T8220] delete_channel: no stack
[  237.829226][ T8226] device wlan0 entered promiscuous mode
[  238.093956][ T8239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1256'.
[  238.756815][ T8260] delete_channel: no stack
[  239.901200][ T8296] delete_channel: no stack
[  240.112129][ T8310] validate_nla: 4 callbacks suppressed
[  240.112168][ T8310] netlink: 'syz.4.1281': attribute type 6 has an invalid length.
[  240.771957][ T8329] netlink: 'syz.2.1288': attribute type 6 has an invalid length.
[  240.865412][ T8335] netlink: 'syz.3.1287': attribute type 21 has an invalid length.
[  241.272395][ T8344] delete_channel: no stack
[  241.672428][ T8362] device wlan0 left promiscuous mode
[  241.741964][ T8366] device wlan0 entered promiscuous mode
[  241.858896][ T8372] netlink: 'syz.0.1300': attribute type 6 has an invalid length.
[  242.036795][ T8378] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1303'.
[  242.140003][ T8385] device wlan1 entered promiscuous mode
[  242.167493][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  242.221228][ T8379] delete_channel: no stack
[  242.392238][ T8390] delete_channel: no stack
[  242.506125][ T8400] netlink: 'syz.3.1308': attribute type 2 has an invalid length.
[  242.525276][ T8400] netlink: 'syz.3.1308': attribute type 8 has an invalid length.
[  242.599447][ T8400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1308'.
[  243.381324][ T8424] netlink: 'syz.1.1314': attribute type 6 has an invalid length.
[  243.883597][ T8432] delete_channel: no stack
[  244.429503][ T8448] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1323'.
[  244.671226][ T8448] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  244.704983][ T8448] CPU: 1 PID: 8448 Comm: syz.2.1323 Not tainted syzkaller #0
[  244.712465][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  244.722625][ T8448] Call Trace:
[  244.725972][ T8448]  <TASK>
[  244.728970][ T8448]  dump_stack_lvl+0x188/0x250
[  244.733718][ T8448]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  244.740064][ T8448]  ? show_regs_print_info+0x20/0x20
[  244.745378][ T8448]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  244.751984][ T8448]  sysfs_warn_dup+0x8a/0xa0
[  244.756600][ T8448]  sysfs_do_create_link_sd+0xc0/0x110
[  244.762159][ T8448]  device_add+0x7ed/0xfb0
[  244.766663][ T8448]  wiphy_register+0x1e81/0x2c30
[  244.771850][ T8448]  ? cfg80211_event_work+0x40/0x40
[  244.777045][ T8448]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  244.783705][ T8448]  ieee80211_register_hw+0x2aa1/0x3af0
[  244.789355][ T8448]  ? ieee80211_tasklet_handler+0x20/0x20
[  244.795097][ T8448]  ? rcu_is_watching+0x11/0xa0
[  244.799946][ T8448]  ? memset+0x1e/0x40
[  244.804179][ T8448]  ? hrtimer_init+0x10c/0x220
[  244.809130][ T8448]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  244.816155][ T8448]  hwsim_new_radio_nl+0xa6f/0xc40
[  244.821332][ T8448]  genl_rcv_msg+0xcea/0xf90
[  244.826224][ T8448]  ? genl_bind+0x380/0x380
[  244.830853][ T8448]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  244.837195][ T8448]  ? verify_lock_unused+0x140/0x140
[  244.842744][ T8448]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  244.848981][ T8448]  ? perf_trace_lock+0x301/0x390
[  244.854155][ T8448]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  244.860981][ T8448]  netlink_rcv_skb+0x1f5/0x440
[  244.865887][ T8448]  ? genl_bind+0x380/0x380
[  244.870441][ T8448]  ? netlink_ack+0xb50/0xb50
[  244.875088][ T8448]  ? __lock_acquire+0x7d10/0x7d10
[  244.880176][ T8448]  ? down_read+0x1aa/0x2e0
[  244.885175][ T8448]  genl_rcv+0x24/0x40
[  244.889371][ T8448]  netlink_unicast+0x774/0x920
[  244.894210][ T8448]  netlink_sendmsg+0x8ba/0xbe0
[  244.899038][ T8448]  ? netlink_getsockopt+0x570/0x570
[  244.904398][ T8448]  ? netlink_getsockopt+0x570/0x570
[  244.909635][ T8448]  ____sys_sendmsg+0x5b7/0x8f0
[  244.914578][ T8448]  ? __sys_sendmsg_sock+0x30/0x30
[  244.919773][ T8448]  ? import_iovec+0x6f/0xa0
[  244.924356][ T8448]  ___sys_sendmsg+0x236/0x2e0
[  244.929246][ T8448]  ? __sys_sendmsg+0x2a0/0x2a0
[  244.934108][ T8448]  ? trace_event_raw_event_lock+0x270/0x270
[  244.940225][ T8448]  __se_sys_sendmsg+0x1af/0x290
[  244.945177][ T8448]  ? __x64_sys_sendmsg+0x80/0x80
[  244.950211][ T8448]  ? syscall_enter_from_user_mode+0x2a/0x70
[  244.956396][ T8448]  do_syscall_64+0x4c/0xa0
[  244.960856][ T8448]  ? clear_bhb_loop+0x30/0x80
[  244.965600][ T8448]  ? clear_bhb_loop+0x30/0x80
[  244.970370][ T8448]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  244.976313][ T8448] RIP: 0033:0x7f4420ab1799
[  244.981659][ T8448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  245.001397][ T8448] RSP: 002b:00007f441ed0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.009860][ T8448] RAX: ffffffffffffffda RBX: 00007f4420d2afa0 RCX: 00007f4420ab1799
[  245.017879][ T8448] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f
[  245.025891][ T8448] RBP: 00007f4420b47bd9 R08: 0000000000000000 R09: 0000000000000000
[  245.033931][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.041953][ T8448] R13: 00007f4420d2b038 R14: 00007f4420d2afa0 R15: 00007fff6e9a2cc8
[  245.050148][ T8448]  </TASK>
[  245.196012][ T8458] netlink: 'syz.4.1326': attribute type 2 has an invalid length.
[  245.224098][ T8458] netlink: 'syz.4.1326': attribute type 8 has an invalid length.
[  245.238534][ T8458] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1326'.
[  245.466774][ T8472] netlink: 'syz.4.1331': attribute type 6 has an invalid length.
[  246.036614][ T8465] device syzkaller0 entered promiscuous mode
[  246.462196][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  246.509699][ T8492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.586526][ T8513] netlink: 'syz.2.1344': attribute type 6 has an invalid length.
[  246.606096][ T8509] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1342'.
[  246.757435][ T8517] device wlan1 entered promiscuous mode
[  247.270709][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  247.292694][ T8539] netlink: 'syz.3.1353': attribute type 39 has an invalid length.
[  247.583348][ T8545] IPv6: pim6reg1: Disabled Multicast RS
[  247.717080][ T8553] netlink: 'syz.3.1357': attribute type 6 has an invalid length.
[  247.746977][ T8548] delete_channel: no stack
[  248.181937][ T8567] delete_channel: no stack
[  248.513710][ T8584] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1367'.
[  248.583845][ T8595] device wlan1 entered promiscuous mode
[  248.677590][ T8592] netlink: 'syz.3.1371': attribute type 6 has an invalid length.
[  248.744880][ T8590] delete_channel: no stack
[  248.862822][ T8599] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1373'.
[  249.222985][ T8614] delete_channel: no stack
[  249.498247][ T8627] netlink: 'syz.1.1384': attribute type 6 has an invalid length.
[  249.680167][ T8630] delete_channel: no stack
[  249.826385][ T8643] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1388'.
[  249.909728][ T8652] device wlan1 entered promiscuous mode
[  249.937997][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  250.230210][ T8659] delete_channel: no stack
[  250.313018][ T8669] netlink: 'syz.2.1398': attribute type 6 has an invalid length.
[  250.737106][ T8676] delete_channel: no stack
[  251.016863][ T8700] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1407'.
[  251.067830][ T8708] device wlan1 entered promiscuous mode
[  251.265296][ T8709] delete_channel: no stack
[  251.435828][ T8724] netlink: 'syz.1.1419': attribute type 6 has an invalid length.
[  252.343905][ T8727] delete_channel: no stack
[  252.769627][ T8753] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1426'.
[  252.788574][ T8748] delete_channel: no stack
[  252.795074][ T8764] netlink: 'syz.2.1428': attribute type 6 has an invalid length.
[  253.043417][ T8775] netlink: 'syz.1.1432': attribute type 6 has an invalid length.
[  253.437983][ T8783] delete_channel: no stack
[  253.515796][ T8793] device syzkaller0 entered promiscuous mode
[  253.702152][ T8802] delete_channel: no stack
[  253.956726][ T8809] delete_channel: no stack
[  253.979939][ T8817] netlink: 'syz.2.1447': attribute type 6 has an invalid length.
[  254.144327][ T8825] netlink: 'syz.3.1448': attribute type 6 has an invalid length.
[  254.200613][ T8824] IPv6: pim6reg1: Disabled Multicast RS
[  254.510740][ T8829] delete_channel: no stack
[  254.873851][ T8850] delete_channel: no stack
[  254.894836][ T8857] netlink: 'syz.0.1461': attribute type 6 has an invalid length.
[  255.104950][ T8868] netlink: 'syz.0.1475': attribute type 6 has an invalid length.
[  255.165848][ T8871] netlink: 'syz.3.1465': attribute type 6 has an invalid length.
[  255.476576][ T8873] IPv6: pim6reg1: Disabled Multicast RS
[  255.579815][ T8874] delete_channel: no stack
[  255.694299][ T8888] netlink: 'syz.0.1471': attribute type 4 has an invalid length.
[  255.909615][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.916055][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  256.093547][ T8892] delete_channel: no stack
[  256.274295][ T8901] netlink: 'syz.3.1477': attribute type 6 has an invalid length.
[  256.366580][ T8906] netlink: 'syz.0.1479': attribute type 6 has an invalid length.
[  256.410920][ T8909] netlink: 'syz.1.1480': attribute type 6 has an invalid length.
[  256.665049][ T8922] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1485'.
[  256.665808][ T8912] delete_channel: no stack
[  256.740508][ T8916] delete_channel: no stack
[  257.161366][ T8930] IPv6: pim6reg1: Disabled Multicast RS
[  257.244175][ T8939] netlink: 'syz.1.1492': attribute type 6 has an invalid length.
[  257.262238][ T8931] delete_channel: no stack
[  257.574944][ T8954] netlink: 'syz.2.1494': attribute type 6 has an invalid length.
[  257.790864][ T8947] delete_channel: no stack
[  257.980986][ T8964] delete_channel: no stack
[  258.168939][ T8972] delete_channel: no stack
[  258.458390][ T8991] netlink: 'syz.4.1509': attribute type 4 has an invalid length.
[  258.564926][ T8996] netlink: 'syz.3.1512': attribute type 6 has an invalid length.
[  258.755217][ T9001] delete_channel: no stack
[  258.895777][ T9003] delete_channel: no stack
[  259.398996][ T9014] delete_channel: no stack
[  259.483086][ T9025] IPv6: pim6reg1: Disabled Multicast RS
[  259.584867][ T9035] netlink: 'syz.3.1526': attribute type 4 has an invalid length.
[  259.636456][ T9037] netlink: 'syz.2.1525': attribute type 6 has an invalid length.
[  259.823794][ T9039] delete_channel: no stack
[  259.995590][ T9041] delete_channel: no stack
[  260.069427][ T9051] tc_dump_action: action bad kind
[  260.529616][ T9062] delete_channel: no stack
[  260.779602][ T9073] delete_channel: no stack
[  261.083029][ T9084] delete_channel: no stack
[  261.200926][ T9101] tc_dump_action: action bad kind
[  261.609626][ T9104] delete_channel: no stack
[  261.618950][ T9116] validate_nla: 2 callbacks suppressed
[  261.618988][ T9116] netlink: 'syz.1.1556': attribute type 6 has an invalid length.
[  261.750727][ T9117] delete_channel: no stack
[  261.929522][ T9131] netlink: 'syz.0.1564': attribute type 3 has an invalid length.
[  261.941797][ T9122] delete_channel: no stack
[  261.987884][ T9131] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1564'.
[  262.140860][ T9139] tc_dump_action: action bad kind
[  262.498924][ T9150] netlink: 'syz.1.1571': attribute type 6 has an invalid length.
[  262.529440][ T9142] delete_channel: no stack
[  262.644500][ T9156] netlink: 'syz.4.1573': attribute type 16 has an invalid length.
[  262.647775][ T9158] netlink: 'syz.3.1574': attribute type 29 has an invalid length.
[  262.695241][ T9156] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1573'.
[  262.871271][ T9161] delete_channel: no stack
[  263.326572][ T9182] delete_channel: no stack
[  263.378064][ T9192] netlink: 'syz.2.1587': attribute type 6 has an invalid length.
[  263.912646][ T9218] netlink: 'syz.3.1598': attribute type 6 has an invalid length.
[  264.118602][ T9225] netlink: 'syz.2.1600': attribute type 6 has an invalid length.
[  264.251993][ T9222] delete_channel: no stack
[  264.370810][ T9246] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1608'.
[  264.627230][ T9257] netlink: 'syz.2.1613': attribute type 6 has an invalid length.
[  264.705248][ T9264] netlink: 'syz.0.1616': attribute type 6 has an invalid length.
[  264.922054][ T9279] IPv6: Can't replace route, no match found
[  265.039902][ T9272] delete_channel: no stack
[  265.167943][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'.
[  265.553313][ T9297] delete_channel: no stack
[  265.824749][ T9319] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1640'.
[  265.951782][ T9316] delete_channel: no stack
[  266.217250][ T9339] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1649'.
[  266.282614][ T9347] IPv6: Can't replace route, no match found
[  266.431720][ T9354] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1655'.
[  266.460446][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'.
[  266.918671][ T9381] validate_nla: 7 callbacks suppressed
[  266.918690][ T9381] netlink: 'syz.1.1664': attribute type 39 has an invalid length.
[  266.972116][ T9381] device veth0_macvtap left promiscuous mode
[  267.013033][ T9388] netlink: 'syz.3.1668': attribute type 3 has an invalid length.
[  267.023712][ T9385] netlink: 'syz.4.1667': attribute type 6 has an invalid length.
[  267.056801][ T9392] IPv6: Can't replace route, no match found
[  267.094557][ T9388] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1668'.
[  267.224088][ T9400] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1671'.
[  267.621474][ T9420] netlink: 'syz.1.1682': attribute type 6 has an invalid length.
[  267.792463][ T9430] netlink: 'syz.4.1686': attribute type 3 has an invalid length.
[  267.859253][ T9430] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1686'.
[  267.951544][ T9442] netlink: set zone limit has 8 unknown bytes
[  268.222031][ T9454] netlink: 'syz.2.1696': attribute type 6 has an invalid length.
[  268.540058][ T9477] netlink: 'syz.0.1713': attribute type 6 has an invalid length.
[  268.921111][ T9497] netlink: 'syz.2.1712': attribute type 7 has an invalid length.
[  269.121886][ T9511] netlink: 'syz.4.1719': attribute type 29 has an invalid length.
[  269.172558][ T9511] netlink: 'syz.4.1719': attribute type 29 has an invalid length.
[  269.340192][ T9504] delete_channel: no stack
[  269.515721][ T9528] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1724'.
[  269.722236][ T9540] device veth0_macvtap left promiscuous mode
[  270.150988][ T9553] delete_channel: no stack
[  270.983511][ T9592] delete_channel: no stack
[  271.143155][ T9611] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1755'.
[  271.647737][ T9636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1765'.
[  271.685578][ T9641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1767'.
[  273.751698][ T9726] delete_channel: no stack
[  274.116243][ T9753] validate_nla: 10 callbacks suppressed
[  274.116284][ T9753] netlink: 'syz.4.1806': attribute type 6 has an invalid length.
[  274.639512][ T9774] delete_channel: no stack
[  274.974657][ T9793] netlink: 'syz.2.1822': attribute type 6 has an invalid length.
[  276.267436][ T9814] delete_channel: no stack
[  276.582120][ T9840] delete_channel: no stack
[  277.811132][ T9868] delete_channel: no stack
[  277.852134][ T9879] delete_channel: no stack
[  279.793341][ T9927] delete_channel: no stack
[  279.851698][ T9921] delete_channel: no stack
[  280.849907][ T9972] delete_channel: no stack
[  280.939972][ T9977] delete_channel: no stack
[  281.236246][ T9998] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1892'.
[  281.825209][T10015] delete_channel: no stack
[  281.911470][T10022] delete_channel: no stack
[  282.533303][T10044] delete_channel: no stack
[  282.679458][T10050] delete_channel: no stack
[  283.027671][T10057] delete_channel: no stack
[  283.494017][T10087] delete_channel: no stack
[  283.949574][T10094] delete_channel: no stack
[  284.211554][T10108] delete_channel: no stack
[  284.715594][T10134] delete_channel: no stack
[  285.001424][T10142] delete_channel: no stack
[  285.542293][T10181] netlink: 'syz.0.1961': attribute type 3 has an invalid length.
[  285.635890][T10181] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.1961'.
[  285.737864][T10176] delete_channel: no stack
[  285.772987][T10187] netlink: 'syz.0.1964': attribute type 29 has an invalid length.
[  285.799935][T10187] netlink: 'syz.0.1964': attribute type 29 has an invalid length.
[  285.840408][T10191] netlink: 'syz.0.1964': attribute type 29 has an invalid length.
[  286.259490][T10197] delete_channel: no stack
[  286.789871][T10223] delete_channel: no stack
[  286.936621][T10225] delete_channel: no stack
[  287.154183][T10238] delete_channel: no stack
[  287.341921][T10254] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1986'.
[  288.702702][T10314] netlink: 'syz.2.2011': attribute type 10 has an invalid length.
[  288.809555][T10314] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.2011'.
[  290.356661][T10380] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2035'.
[  295.238603][T10572] tap0: tun_chr_ioctl cmd 2147767511
[  295.872275][T10587] delete_channel: no stack
[  296.820919][T10628] delete_channel: no stack
[  298.060537][T10691] netlink: 'syz.1.2159': attribute type 6 has an invalid length.
[  298.918456][T10731] netlink: 'syz.4.2172': attribute type 6 has an invalid length.
[  299.213262][T10733] delete_channel: no stack
[  299.435764][T10758] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2181'.
[  299.686184][T10751] delete_channel: no stack
[  299.775324][T10769] netlink: 'syz.3.2186': attribute type 6 has an invalid length.
[  300.680023][T10802] delete_channel: no stack
[  300.995891][T10829] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2210'.
[  301.040815][T10836] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2211'.
[  301.394363][T10837] delete_channel: no stack
[  301.833765][T10876] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2224'.
[  302.500925][T10895] delete_channel: no stack
[  303.322500][T10941] delete_channel: no stack
[  303.392657][T10953] netlink: 'syz.4.2254': attribute type 4 has an invalid length.
[  303.405510][T10953] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2254'.
[  304.140894][T10981] delete_channel: no stack
[  305.104023][T11020] delete_channel: no stack
[  305.678351][T11038] netlink: 'syz.4.2286': attribute type 6 has an invalid length.
[  305.803276][T11046] netlink: 'syz.3.2289': attribute type 21 has an invalid length.
[  305.814800][T11046] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2289'.
[  306.237087][T11072] netlink: 'syz.4.2300': attribute type 6 has an invalid length.
[  306.605627][T11087] netlink: 'syz.1.2303': attribute type 21 has an invalid length.
[  306.687877][T11087] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2303'.
[  307.386235][T11106] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2310'.
[  307.398520][T11108] netlink: 'syz.0.2312': attribute type 6 has an invalid length.
[  307.439318][T11106] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  307.470583][T11106] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  307.688117][T11123] netlink: 'syz.4.2318': attribute type 21 has an invalid length.
[  307.729487][T11123] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2318'.
[  308.335218][T11139] netlink: 'syz.0.2325': attribute type 6 has an invalid length.
[  308.441837][T11141] netlink: 'syz.3.2326': attribute type 6 has an invalid length.
[  308.681811][T11150] netlink: 'syz.3.2332': attribute type 10 has an invalid length.
[  309.263927][T11168] netlink: 'syz.4.2340': attribute type 6 has an invalid length.
[  309.300789][T11162] delete_channel: no stack
[  309.723846][T11198] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2350'.
[  309.857557][T11201] netlink: 'syz.4.2353': attribute type 6 has an invalid length.
[  310.083437][T11204] delete_channel: no stack
[  310.655885][T11236] netlink: 'syz.1.2365': attribute type 6 has an invalid length.
[  310.790711][T11240] netlink: 'syz.3.2367': attribute type 6 has an invalid length.
[  311.053359][T11253] netlink: 'syz.4.2373': attribute type 1 has an invalid length.
[  311.067318][T11253] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2373'.
[  311.110900][T11245] delete_channel: no stack
[  311.464181][T11272] netlink: 'syz.1.2379': attribute type 6 has an invalid length.
[  311.755919][T11281] delete_channel: no stack
[  311.881870][T11284] delete_channel: no stack
[  312.082586][T11295] netlink: 'syz.1.2388': attribute type 1 has an invalid length.
[  312.319281][T11295] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2388'.
[  312.591746][T11309] netlink: 'syz.4.2395': attribute type 6 has an invalid length.
[  312.982831][T11318] delete_channel: no stack
[  313.171068][T11324] delete_channel: no stack
[  313.206827][T11333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2405'.
[  313.563811][T11350] validate_nla: 2 callbacks suppressed
[  313.563846][T11350] netlink: 'syz.1.2410': attribute type 6 has an invalid length.
[  313.816960][T11364] netlink: 'syz.1.2415': attribute type 6 has an invalid length.
[  314.145031][T11377] netlink: 'syz.1.2419': attribute type 4 has an invalid length.
[  314.193306][T11367] delete_channel: no stack
[  314.300632][T11365] delete_channel: no stack
[  314.473375][T11390] netlink: 'syz.4.2425': attribute type 6 has an invalid length.
[  314.611579][T11397] netlink: 'syz.0.2427': attribute type 6 has an invalid length.
[  314.891516][T11411] netlink: 'syz.0.2432': attribute type 46 has an invalid length.
[  315.069699][T11404] delete_channel: no stack
[  315.079087][T11416] netlink: 'syz.0.2434': attribute type 4 has an invalid length.
[  315.221833][T11423] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2435'.
[  315.511291][T11433] netlink: 'syz.4.2439': attribute type 6 has an invalid length.
[  315.646521][T11445] netlink: 'syz.4.2445': attribute type 46 has an invalid length.
[  315.821200][T11447] delete_channel: no stack
[  315.874730][T11455] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2449'.
[  315.891895][T11455] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2449'.
[  315.911016][T11455] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2449'.
[  315.932427][T11455] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2449'.
[  316.143934][T11471] netlink: 'syz.2.2455': attribute type 6 has an invalid length.
[  316.530859][T11481] delete_channel: no stack
[  316.618054][T11497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2465'.
[  316.627553][T11497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2465'.
[  316.655857][T11497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2465'.
[  316.714185][T11499] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2465'.
[  317.190276][T11528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2479'.
[  317.238005][T11523] delete_channel: no stack
[  317.324994][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.331526][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.347471][T11537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'.
[  317.388584][T11537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'.
[  317.417633][T11537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'.
[  317.446330][T11537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'.
[  317.486059][T11544] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2486'.
[  317.785784][T11551] delete_channel: no stack
[  317.909908][T11557] delete_channel: no stack
[  318.890242][T11589] delete_channel: no stack
[  318.911865][T11603] validate_nla: 10 callbacks suppressed
[  318.911905][T11603] netlink: 'syz.1.2510': attribute type 6 has an invalid length.
[  318.981509][T11607] netlink: 'syz.3.2511': attribute type 6 has an invalid length.
[  319.139900][T11604] delete_channel: no stack
[  319.301822][T11618] netlink: 'syz.4.2516': attribute type 6 has an invalid length.
[  319.695619][T11635] netlink: 'syz.3.2533': attribute type 6 has an invalid length.
[  319.804542][T11640] netlink: 'syz.2.2523': attribute type 9 has an invalid length.
[  320.201532][T11648] netlink: 'syz.1.2525': attribute type 6 has an invalid length.
[  320.360083][T11645] delete_channel: no stack
[  320.462516][T11656] netlink: 'syz.4.2529': attribute type 6 has an invalid length.
[  320.759948][T11668] netlink: 'syz.1.2536': attribute type 6 has an invalid length.
[  321.193356][T11683] delete_channel: no stack
[  321.364856][T11698] netlink: 'syz.3.2550': attribute type 6 has an invalid length.
[  321.849519][T11719] delete_channel: no stack
[  321.870209][T11728] netlink: 'syz.3.2562': attribute type 10 has an invalid length.
[  321.937205][T11728] device wlan1 left promiscuous mode
[  322.065149][T11738] __nla_validate_parse: 10 callbacks suppressed
[  322.065179][T11738] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2564'.
[  322.413345][T11749] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2572'.
[  322.614639][T11760] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2578'.
[  322.669715][T11752] delete_channel: no stack
[  323.203064][T11789] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2585'.
[  323.461936][T11799] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2593'.
[  323.618112][T11796] delete_channel: no stack
[  323.639423][T11804] delete_channel: no stack
[  323.940977][T11812] validate_nla: 5 callbacks suppressed
[  323.941017][T11812] netlink: 'syz.1.2599': attribute type 6 has an invalid length.
[  323.981094][T11807] delete_channel: no stack
[  324.092894][T11821] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2602'.
[  324.474088][T11842] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2609'.
[  324.718409][T11857] netlink: 'syz.0.2624': attribute type 10 has an invalid length.
[  324.768101][T11857] device wlan1 left promiscuous mode
[  324.850277][T11857] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  325.072330][T11870] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2621'.
[  325.312428][T11887] netlink: 'syz.3.2627': attribute type 3 has an invalid length.
[  325.343112][T11887] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2627'.
[  325.383640][T11891] netlink: 'syz.3.2627': attribute type 3 has an invalid length.
[  325.402619][T11891] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2627'.
[  325.615636][T11897] device syzkaller0 entered promiscuous mode
[  325.654225][T11901] netlink: 'syz.2.2634': attribute type 10 has an invalid length.
[  325.671070][T11901] device wlan1 left promiscuous mode
[  325.959833][T11904] delete_channel: no stack
[  326.802136][T11941] delete_channel: no stack
[  327.387967][T11968] netlink: 'syz.0.2662': attribute type 6 has an invalid length.
[  327.537543][T11976] delete_channel: no stack
[  327.896168][T11985] delete_channel: no stack
[  328.317224][T12000] netlink: 'syz.4.2676': attribute type 6 has an invalid length.
[  328.585760][T12011] __nla_validate_parse: 3 callbacks suppressed
[  328.585784][T12011] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2680'.
[  328.754643][T12018] netlink: 'syz.0.2694': attribute type 3 has an invalid length.
[  328.812688][T12021] netlink: 'syz.0.2694': attribute type 3 has an invalid length.
[  328.821044][T12018] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2694'.
[  328.835368][T12013] delete_channel: no stack
[  328.919306][T12021] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2694'.
[  328.993037][T12028] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2687'.
[  329.078642][T12028] netlink: get zone limit has 8 unknown bytes
[  329.269625][T12025] delete_channel: no stack
[  329.316947][T12040] netlink: 'syz.3.2691': attribute type 6 has an invalid length.
[  329.920952][T12056] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2699'.
[  329.974752][T12052] delete_channel: no stack
[  330.433310][T12066] delete_channel: no stack
[  330.576191][T12077] netlink: 'syz.2.2707': attribute type 6 has an invalid length.
[  330.624794][T12079] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2706'.
[  331.873081][T12093] netlink: 'syz.3.2712': attribute type 6 has an invalid length.
[  331.951241][T12095] delete_channel: no stack
[  332.126874][T12103] netlink: 'syz.0.2726': attribute type 6 has an invalid length.
[  332.408463][T12109] delete_channel: no stack
[  332.525399][T12119] netlink: 'syz.4.2721': attribute type 6 has an invalid length.
[  332.907553][T12136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2729'.
[  333.391012][T12142] netlink: 'syz.0.2731': attribute type 6 has an invalid length.
[  333.781626][T12145] delete_channel: no stack
[  334.026855][T12159] netlink: 'syz.3.2736': attribute type 6 has an invalid length.
[  334.162139][T12154] delete_channel: no stack
[  334.508344][T12188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2746'.
[  334.812469][T12195] netlink: 'syz.4.2749': attribute type 6 has an invalid length.
[  334.861441][T12189] delete_channel: no stack
[  335.128541][T12205] delete_channel: no stack
[  335.220947][T12216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2758'.
[  335.521694][T12236] netlink: 'syz.1.2763': attribute type 6 has an invalid length.
[  335.661196][T12239] delete_channel: no stack
[  335.976832][T12244] delete_channel: no stack
[  336.332479][T12279] netlink: 'syz.4.2778': attribute type 6 has an invalid length.
[  336.472478][T12286] netlink: 'syz.0.2782': attribute type 6 has an invalid length.
[  339.771183][T12326] netlink: 'syz.1.2796': attribute type 6 has an invalid length.
[  340.471471][T12349] delete_channel: no stack
[  340.622005][T12368] netlink: 'syz.3.2813': attribute type 6 has an invalid length.
[  341.269877][T12395] netlink: 'syz.3.2827': attribute type 6 has an invalid length.
[  341.383571][T12386] delete_channel: no stack
[  341.721299][T12415] IPv6: Can't replace route, no match found
[  341.901570][T12423] netlink: 'syz.4.2840': attribute type 6 has an invalid length.
[  342.210953][T12433] delete_channel: no stack
[  342.457036][T12456] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2853'.
[  342.548593][T12460] netlink: 'syz.1.2855': attribute type 6 has an invalid length.
[  342.924244][T12467] netlink: 'syz.0.2867': attribute type 6 has an invalid length.
[  343.389562][T12476] delete_channel: no stack
[  343.709685][T12501] netlink: 'syz.3.2875': attribute type 33 has an invalid length.
[  343.743895][T12501] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2875'.
[  343.907875][T12503] netlink: 'syz.2.2876': attribute type 6 has an invalid length.
[  346.851792][T12508] delete_channel: no stack
[  346.856936][T12513] delete_channel: no stack
[  346.899583][T12511] delete_channel: no stack
[  347.520993][T12543] netlink: 'syz.1.2891': attribute type 6 has an invalid length.
[  347.655512][T12547] netlink: 'syz.1.2892': attribute type 6 has an invalid length.
[  350.232873][T12561] netlink: 'syz.2.2899': attribute type 33 has an invalid length.
[  350.328777][T12561] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2899'.
[  350.393948][T12558] delete_channel: no stack
[  350.549430][T12552] delete_channel: no stack
[  350.788238][T12572] netlink: 'syz.4.2902': attribute type 6 has an invalid length.
[  350.979593][T12581] netlink: 'syz.1.2904': attribute type 6 has an invalid length.
[  351.312390][T12594] delete_channel: no stack
[  351.384100][T12602] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2913'.
[  351.467532][T12602] netlink: del zone limit has 8 unknown bytes
[  351.620789][T12599] delete_channel: no stack
[  351.978968][T12617] netlink: 'syz.3.2918': attribute type 6 has an invalid length.
[  352.049549][T12619] netlink: 'syz.1.2919': attribute type 3 has an invalid length.
[  352.057610][T12619] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2919'.
[  352.160985][T12622] netlink: 'syz.0.2920': attribute type 6 has an invalid length.
[  352.568022][T12640] device syzkaller0 entered promiscuous mode
[  352.856181][T12661] netlink: 'syz.3.2934': attribute type 6 has an invalid length.
[  353.881034][T12689] netlink: 'syz.3.2947': attribute type 21 has an invalid length.
[  353.915089][T12689] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2947'.
[  354.147586][T12702] device syzkaller0 entered promiscuous mode
[  354.185526][T12704] netlink: 'syz.3.2951': attribute type 6 has an invalid length.
[  354.874687][T12734] netlink: 'syz.3.2963': attribute type 6 has an invalid length.
[  355.258478][T12750] device syzkaller0 entered promiscuous mode
[  358.425032][T12780] netlink: 'syz.4.2977': attribute type 6 has an invalid length.
[  358.450810][T12751] delete_channel: no stack
[  358.728088][T12792] netlink: 'syz.0.2980': attribute type 6 has an invalid length.
[  359.018070][T12808] netlink: 'syz.2.2989': attribute type 6 has an invalid length.
[  359.260723][T12810] delete_channel: no stack
[  359.298732][T12815] delete_channel: no stack
[  359.507965][T12828] netlink: 'syz.3.2998': attribute type 6 has an invalid length.
[  360.051854][T12841] delete_channel: no stack
[  360.525596][T12865] netlink: 'syz.4.3012': attribute type 6 has an invalid length.
[  361.362000][T12876] delete_channel: no stack
[  361.609387][T12890] syz.3.3021 (12890) used obsolete PPPIOCDETACH ioctl
[  361.941747][T12896] netlink: 'syz.2.3024': attribute type 6 has an invalid length.
[  362.256735][T12904] device syzkaller0 entered promiscuous mode
[  362.816661][T12912] netlink: 'syz.1.3030': attribute type 3 has an invalid length.
[  362.884732][T12912] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3030'.
[  363.080455][T12909] delete_channel: no stack
[  363.235685][T12928] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3038'.
[  363.658499][T12944] delete_channel: no stack
[  363.981613][T12948] delete_channel: no stack
[  364.385902][T12966] netlink: 'syz.0.3050': attribute type 3 has an invalid length.
[  364.416200][T12966] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3050'.
[  365.491676][T12986] delete_channel: no stack
[  365.737610][T12990] delete_channel: no stack
[  366.186360][T13017] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3068'.
[  366.248912][T13009] netlink: 'syz.4.3065': attribute type 3 has an invalid length.
[  366.335418][T13009] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3065'.
[  366.793802][T13024] netlink: 'syz.0.3071': attribute type 6 has an invalid length.
[  367.900615][T13039] delete_channel: no stack
[  368.164163][T13059] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3086'.
[  368.441980][T13069] netlink: 'syz.3.3088': attribute type 3 has an invalid length.
[  368.456981][T13069] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3088'.
[  369.025611][T13079] delete_channel: no stack
[  370.211784][T13124] delete_channel: no stack
[  370.350877][T13137] delete_channel: no stack
[  370.501237][T13141] delete_channel: no stack
[  371.534604][T13143] delete_channel: no stack
[  371.788566][T13177] netlink: 'syz.2.3131': attribute type 6 has an invalid length.
[  371.827619][T13172] delete_channel: no stack
[  372.480065][T13201] delete_channel: no stack
[  372.530166][T13208] netlink: 'syz.1.3144': attribute type 6 has an invalid length.
[  372.820581][T13211] delete_channel: no stack
[  373.001741][  T154] wlan1: Trigger new scan to find an IBSS to join
[  373.655768][T13246] delete_channel: no stack
[  373.772537][T13253] delete_channel: no stack
[  374.296004][T13279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.423976][T13288] netlink: 'syz.4.3174': attribute type 1 has an invalid length.
[  374.834963][T13299] delete_channel: no stack
[  375.353726][T13329] netlink: 'syz.4.3188': attribute type 1 has an invalid length.
[  375.437137][T13329] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3188'.
[  375.733059][T13322] delete_channel: no stack
[  375.806175][T13336] netlink: 'syz.2.3189': attribute type 1 has an invalid length.
[  375.889169][T13347] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  376.055133][  T154] wlan1: Trigger new scan to find an IBSS to join
[  376.925309][T13387] netlink: 'syz.1.3208': attribute type 1 has an invalid length.
[  377.094023][T13392] delete_channel: no stack
[  377.149532][T13393] delete_channel: no stack
[  378.039280][  T154] wlan1: Creating new IBSS network, BSSID ba:fe:22:a5:32:3a
[  378.047045][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  378.057140][T13432] delete_channel: no stack
[  378.622154][T13467] netlink: 'syz.3.3238': attribute type 1 has an invalid length.
[  378.672553][T13467] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3238'.
[  378.772630][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.779067][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  378.920073][T13472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.679554][T13471] delete_channel: no stack
[  379.985001][T13494] netlink: 'syz.3.3247': attribute type 1 has an invalid length.
[  380.574452][T13521] netlink: 'syz.1.3256': attribute type 6 has an invalid length.
[  381.023632][T13532] netlink: 'syz.0.3262': attribute type 1 has an invalid length.
[  381.466324][T13554] netlink: 'syz.1.3271': attribute type 6 has an invalid length.
[  381.836705][T13566] delete_channel: no stack
[  382.153983][T13586] netlink: 'syz.0.3281': attribute type 1 has an invalid length.
[  382.181311][T13586] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3281'.
[  382.731242][T13595] netlink: 'syz.0.3285': attribute type 6 has an invalid length.
[  383.199509][T13607] delete_channel: no stack
[  383.200455][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  383.230887][T13610] delete_channel: no stack
[  383.624786][T13620] delete_channel: no stack
[  383.776909][T13634] netlink: 'syz.3.3299': attribute type 6 has an invalid length.
[  384.218392][T13644] delete_channel: no stack
[  384.457686][T13648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.469802][T13649] delete_channel: no stack
[  384.588502][T13663] netlink: 'syz.2.3315': attribute type 6 has an invalid length.
[  384.943846][T13661] delete_channel: no stack
[  385.039832][T13677] delete_channel: no stack
[  385.178370][T13689] netlink: 'syz.4.3324': attribute type 1 has an invalid length.
[  385.188056][T13689] netlink: 'syz.4.3324': attribute type 4 has an invalid length.
[  385.200435][T13689] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3324'.
[  385.423587][T13701] netlink: 'syz.3.3328': attribute type 6 has an invalid length.
[  386.031687][T13711] delete_channel: no stack
[  386.184395][T13713] delete_channel: no stack
[  386.454253][T13729] netlink: 'syz.0.3340': attribute type 6 has an invalid length.
[  386.906308][T13748] netlink: 'syz.4.3347': attribute type 10 has an invalid length.
[  386.917276][T13745] delete_channel: no stack
[  386.925795][T13748] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.968927][T13748] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  387.021818][T13748] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  387.138512][T13748] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  387.421122][T13743] delete_channel: no stack
[  387.512798][T13757] delete_channel: no stack
[  387.555010][T13765] netlink: 'syz.1.3354': attribute type 6 has an invalid length.
[  388.090741][T13779] delete_channel: no stack
[  388.756144][T13785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.780367][T13794] delete_channel: no stack
[  388.799578][T13798] delete_channel: no stack
[  388.946857][T13816] syz.3.3373[13816] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  388.947027][T13816] syz.3.3373[13816] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  389.391566][T13821] delete_channel: no stack
[  389.588950][T13835] netlink: 'syz.3.3390': attribute type 6 has an invalid length.
[  389.679688][T13839] delete_channel: no stack
[  389.941736][T13841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.013763][T13853] syz.1.3387[13853] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  390.013923][T13853] syz.1.3387[13853] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  390.509552][T13850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.566018][T13866] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3392'.
[  390.827664][T13874] device syzkaller0 entered promiscuous mode
[  390.835339][T13877] netlink: 'syz.0.3396': attribute type 6 has an invalid length.
[  390.910756][T13867] delete_channel: no stack
[  390.991090][T13886] syz.2.3401[13886] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  390.991251][T13886] syz.2.3401[13886] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  391.467453][T13909] netlink: 'syz.2.3410': attribute type 1 has an invalid length.
[  391.488730][T13909] netlink: 'syz.2.3410': attribute type 4 has an invalid length.
[  391.508044][T13909] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3410'.
[  391.845858][T13921] netlink: 'syz.0.3413': attribute type 6 has an invalid length.
[  391.888315][T13920] device syzkaller0 entered promiscuous mode
[  391.899910][T13914] delete_channel: no stack
[  392.004424][T13910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.270851][T13934] device syzkaller0 entered promiscuous mode
[  392.501205][T13950] netlink: 'syz.0.3425': attribute type 2 has an invalid length.
[  392.533031][T13950] netlink: 'syz.0.3425': attribute type 8 has an invalid length.
[  392.547451][T13950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3425'.
[  392.560425][T13952] netlink: 'syz.1.3427': attribute type 6 has an invalid length.
[  392.601427][T13956] netlink: 'syz.3.3426': attribute type 6 has an invalid length.
[  392.845553][T13968] device syzkaller0 entered promiscuous mode
[  393.785260][T13991] device syzkaller0 entered promiscuous mode
[  393.851787][T13998] netlink: 'syz.2.3442': attribute type 6 has an invalid length.
[  393.893620][T14000] netlink: 'syz.4.3443': attribute type 1 has an invalid length.
[  394.000689][T14000] netlink: 'syz.4.3443': attribute type 4 has an invalid length.
[  394.073491][T14000] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3443'.
[  394.419186][T14017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3449'.
[  394.750550][T14014] delete_channel: no stack
[  394.913759][T14038] netlink: 'syz.4.3456': attribute type 6 has an invalid length.
[  395.330432][T14050] device syzkaller0 entered promiscuous mode
[  395.824240][T14065] delete_channel: no stack
[  395.979033][T14079] netlink: 'syz.1.3471': attribute type 2 has an invalid length.
[  395.990546][T14079] netlink: 'syz.1.3471': attribute type 8 has an invalid length.
[  396.004064][T14079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3471'.
[  396.016530][T14076] netlink: 'syz.4.3470': attribute type 6 has an invalid length.
[  396.322182][T14082] delete_channel: no stack
[  396.801239][T14103] delete_channel: no stack
[  396.971958][T14121] netlink: 'syz.4.3486': attribute type 6 has an invalid length.
[  397.117788][T14126] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3488'.
[  397.311008][T14127] delete_channel: no stack
[  398.009924][T14154] 
: port 1(macsec0) entered blocking state
[  398.026724][T14154] 
: port 1(macsec0) entered disabled state
[  398.052076][T14154] device macsec0 entered promiscuous mode
[  398.168476][T14163] netlink: 'syz.1.3500': attribute type 6 has an invalid length.
[  398.966976][T14174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3502'.
[  399.354600][T14186] netlink: 'syz.0.3509': attribute type 10 has an invalid length.
[  399.409967][T14186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3509'.
[  399.429526][T14186] device dummy0 entered promiscuous mode
[  399.476462][T14186] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  399.709345][T14201] 
: port 1(macsec0) entered blocking state
[  399.724749][T14201] 
: port 1(macsec0) entered disabled state
[  399.733772][T14205] netlink: 'syz.2.3514': attribute type 11 has an invalid length.
[  399.744562][T14201] device macsec0 entered promiscuous mode
[  399.751062][T14205] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.3514'.
[  399.808212][T14205] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  399.831139][T14205] CPU: 0 PID: 14205 Comm: syz.2.3514 Not tainted syzkaller #0
[  399.838687][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  399.848826][T14205] Call Trace:
[  399.852170][T14205]  <TASK>
[  399.855133][T14205]  dump_stack_lvl+0x188/0x250
[  399.859871][T14205]  ? show_regs_print_info+0x20/0x20
[  399.865103][T14205]  ? load_image+0x400/0x400
[  399.869745][T14205]  sysfs_warn_dup+0x8a/0xa0
[  399.874276][T14205]  sysfs_do_create_link_sd+0xc0/0x110
[  399.879838][T14205]  device_add+0x7ed/0xfb0
[  399.884244][T14205]  wiphy_register+0x1e81/0x2c30
[  399.889171][T14205]  ? cfg80211_event_work+0x40/0x40
[  399.894322][T14205]  ? minstrel_ht_alloc+0x808/0x980
[  399.899483][T14205]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  399.905688][T14205]  ieee80211_register_hw+0x2aa1/0x3af0
[  399.911218][T14205]  ? ieee80211_tasklet_handler+0x20/0x20
[  399.916983][T14205]  ? rcu_is_watching+0x11/0xa0
[  399.921796][T14205]  ? memset+0x1e/0x40
[  399.925841][T14205]  ? hrtimer_init+0x10c/0x220
[  399.930644][T14205]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  399.936433][T14205]  hwsim_new_radio_nl+0xa6f/0xc40
[  399.941614][T14205]  genl_rcv_msg+0xcea/0xf90
[  399.946351][T14205]  ? genl_bind+0x380/0x380
[  399.950954][T14205]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  399.956717][T14205]  ? verify_lock_unused+0x140/0x140
[  399.961947][T14205]  ? perf_trace_lock_acquire+0x340/0x3e0
[  399.967714][T14205]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  399.974336][T14205]  ? kmalloc_large_node+0xf2/0x190
[  399.979512][T14205]  ? dev_queue_xmit+0x20/0x20
[  399.984220][T14205]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  399.990872][T14205]  netlink_rcv_skb+0x1f5/0x440
[  399.995669][T14205]  ? genl_bind+0x380/0x380
[  400.000141][T14205]  ? netlink_ack+0xb50/0xb50
[  400.004767][T14205]  ? __lock_acquire+0x7d10/0x7d10
[  400.010333][T14205]  ? down_read+0x1aa/0x2e0
[  400.014808][T14205]  genl_rcv+0x24/0x40
[  400.018841][T14205]  netlink_unicast+0x774/0x920
[  400.023657][T14205]  netlink_sendmsg+0x8ba/0xbe0
[  400.028560][T14205]  ? netlink_getsockopt+0x570/0x570
[  400.034035][T14205]  ? aa_sock_msg_perm+0x94/0x150
[  400.039135][T14205]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  400.044469][T14205]  ? security_socket_sendmsg+0x7c/0xa0
[  400.049962][T14205]  ? netlink_getsockopt+0x570/0x570
[  400.055197][T14205]  ____sys_sendmsg+0x5b7/0x8f0
[  400.060019][T14205]  ? __sys_sendmsg_sock+0x30/0x30
[  400.065112][T14205]  ? import_iovec+0x6f/0xa0
[  400.069679][T14205]  ___sys_sendmsg+0x236/0x2e0
[  400.074417][T14205]  ? __sys_sendmsg+0x2a0/0x2a0
[  400.079236][T14205]  ? percpu_counter_add_batch+0x13b/0x160
[  400.085211][T14205]  __se_sys_sendmsg+0x1af/0x290
[  400.090159][T14205]  ? __x64_sys_sendmsg+0x80/0x80
[  400.095244][T14205]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  400.101287][T14205]  ? lockdep_hardirqs_on+0x94/0x140
[  400.106621][T14205]  do_syscall_64+0x4c/0xa0
[  400.111176][T14205]  ? clear_bhb_loop+0x30/0x80
[  400.115925][T14205]  ? clear_bhb_loop+0x30/0x80
[  400.120644][T14205]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  400.126581][T14205] RIP: 0033:0x7f4420ab1799
[  400.131041][T14205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  400.150681][T14205] RSP: 002b:00007f441ed0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  400.159141][T14205] RAX: ffffffffffffffda RBX: 00007f4420d2afa0 RCX: 00007f4420ab1799
[  400.167152][T14205] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  400.175292][T14205] RBP: 00007f4420b47bd9 R08: 0000000000000000 R09: 0000000000000000
[  400.183298][T14205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.191393][T14205] R13: 00007f4420d2b038 R14: 00007f4420d2afa0 R15: 00007fff6e9a2cc8
[  400.199430][T14205]  </TASK>
[  400.454814][T14220] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3520'.
[  400.530829][T14210] netlink: 'syz.0.3517': attribute type 2 has an invalid length.
[  400.538911][T14210] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3517'.
[  401.458101][T14263] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3536'.
[  401.518277][T14266] netlink: 'syz.0.3537': attribute type 6 has an invalid length.
[  401.892387][T14278] netlink: 'syz.0.3540': attribute type 11 has an invalid length.
[  401.938108][T14278] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.3540'.
[  402.006957][T14278] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  402.057173][T14278] CPU: 0 PID: 14278 Comm: syz.0.3540 Not tainted syzkaller #0
[  402.064717][T14278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  402.075575][T14278] Call Trace:
[  402.078905][T14278]  <TASK>
[  402.082071][T14278]  dump_stack_lvl+0x188/0x250
[  402.087216][T14278]  ? show_regs_print_info+0x20/0x20
[  402.093216][T14278]  ? load_image+0x400/0x400
[  402.097862][T14278]  sysfs_warn_dup+0x8a/0xa0
[  402.102447][T14278]  sysfs_do_create_link_sd+0xc0/0x110
[  402.107891][T14278]  device_add+0x7ed/0xfb0
[  402.112329][T14278]  wiphy_register+0x1e81/0x2c30
[  402.117310][T14278]  ? cfg80211_event_work+0x40/0x40
[  402.122536][T14278]  ? minstrel_ht_alloc+0x808/0x980
[  402.127751][T14278]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  402.134331][T14278]  ieee80211_register_hw+0x2aa1/0x3af0
[  402.140307][T14278]  ? ieee80211_tasklet_handler+0x20/0x20
[  402.146203][T14278]  ? rcu_is_watching+0x11/0xa0
[  402.151077][T14278]  ? memset+0x1e/0x40
[  402.155126][T14278]  ? hrtimer_init+0x10c/0x220
[  402.159986][T14278]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  402.165813][T14278]  hwsim_new_radio_nl+0xa6f/0xc40
[  402.171315][T14278]  genl_rcv_msg+0xcea/0xf90
[  402.176067][T14278]  ? lock_chain_count+0x20/0x20
[  402.181098][T14278]  ? genl_bind+0x380/0x380
[  402.185592][T14278]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  402.191464][T14278]  ? verify_lock_unused+0x140/0x140
[  402.196727][T14278]  ? perf_trace_lock_acquire+0x340/0x3e0
[  402.202443][T14278]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  402.209207][T14278]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  402.216021][T14278]  netlink_rcv_skb+0x1f5/0x440
[  402.220950][T14278]  ? genl_bind+0x380/0x380
[  402.225483][T14278]  ? netlink_ack+0xb50/0xb50
[  402.230139][T14278]  ? __lock_acquire+0x7d10/0x7d10
[  402.235404][T14278]  ? down_read+0x1aa/0x2e0
[  402.239972][T14278]  genl_rcv+0x24/0x40
[  402.244442][T14278]  netlink_unicast+0x774/0x920
[  402.249266][T14278]  netlink_sendmsg+0x8ba/0xbe0
[  402.254177][T14278]  ? netlink_getsockopt+0x570/0x570
[  402.259566][T14278]  ? aa_sock_msg_perm+0x94/0x150
[  402.264579][T14278]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  402.269939][T14278]  ? security_socket_sendmsg+0x7c/0xa0
[  402.275449][T14278]  ? netlink_getsockopt+0x570/0x570
[  402.280698][T14278]  ____sys_sendmsg+0x5b7/0x8f0
[  402.285524][T14278]  ? __sys_sendmsg_sock+0x30/0x30
[  402.290719][T14278]  ? import_iovec+0x6f/0xa0
[  402.295354][T14278]  ___sys_sendmsg+0x236/0x2e0
[  402.300182][T14278]  ? __sys_sendmsg+0x2a0/0x2a0
[  402.305139][T14278]  __se_sys_sendmsg+0x1af/0x290
[  402.310097][T14278]  ? __x64_sys_sendmsg+0x80/0x80
[  402.315480][T14278]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  402.321643][T14278]  ? lockdep_hardirqs_on+0x94/0x140
[  402.327072][T14278]  do_syscall_64+0x4c/0xa0
[  402.331550][T14278]  ? clear_bhb_loop+0x30/0x80
[  402.336341][T14278]  ? clear_bhb_loop+0x30/0x80
[  402.341058][T14278]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  402.347000][T14278] RIP: 0033:0x7fc117c56799
[  402.351455][T14278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.371370][T14278] RSP: 002b:00007fc115eb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  402.379831][T14278] RAX: ffffffffffffffda RBX: 00007fc117ecffa0 RCX: 00007fc117c56799
[  402.387862][T14278] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  402.395887][T14278] RBP: 00007fc117cecbd9 R08: 0000000000000000 R09: 0000000000000000
[  402.404411][T14278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.412774][T14278] R13: 00007fc117ed0038 R14: 00007fc117ecffa0 R15: 00007ffd6e5effa8
[  402.420823][T14278]  </TASK>
[  402.704010][T14286] delete_channel: no stack
[  402.868572][T14297] netlink: 'syz.4.3548': attribute type 6 has an invalid length.
[  403.002866][T14299] netlink: 'syz.3.3549': attribute type 6 has an invalid length.
[  403.383183][T14313] 
: port 1(macsec0) entered blocking state
[  403.414159][T14313] 
: port 1(macsec0) entered disabled state
[  403.445425][T14313] device macsec0 entered promiscuous mode
[  403.680181][T14321] device syzkaller0 entered promiscuous mode
[  403.941251][T14323] delete_channel: no stack
[  403.949716][T14334] netlink: 'syz.1.3561': attribute type 11 has an invalid length.
[  404.003254][T14334] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.3561'.
[  404.073306][T14334] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  404.119537][T14334] CPU: 0 PID: 14334 Comm: syz.1.3561 Not tainted syzkaller #0
[  404.127091][T14334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  404.137827][T14334] Call Trace:
[  404.141205][T14334]  <TASK>
[  404.144705][T14334]  dump_stack_lvl+0x188/0x250
[  404.149635][T14334]  ? show_regs_print_info+0x20/0x20
[  404.155097][T14334]  ? load_image+0x400/0x400
[  404.159824][T14334]  sysfs_warn_dup+0x8a/0xa0
[  404.164396][T14334]  sysfs_do_create_link_sd+0xc0/0x110
[  404.169838][T14334]  device_add+0x7ed/0xfb0
[  404.174368][T14334]  wiphy_register+0x1e81/0x2c30
[  404.179339][T14334]  ? cfg80211_event_work+0x40/0x40
[  404.184617][T14334]  ? minstrel_ht_alloc+0x808/0x980
[  404.189801][T14334]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  404.196162][T14334]  ieee80211_register_hw+0x2aa1/0x3af0
[  404.201735][T14334]  ? ieee80211_tasklet_handler+0x20/0x20
[  404.207451][T14334]  ? rcu_is_watching+0x11/0xa0
[  404.212286][T14334]  ? memset+0x1e/0x40
[  404.216337][T14334]  ? hrtimer_init+0x10c/0x220
[  404.221082][T14334]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  404.226908][T14334]  hwsim_new_radio_nl+0xa6f/0xc40
[  404.232116][T14334]  genl_rcv_msg+0xcea/0xf90
[  404.237052][T14334]  ? genl_bind+0x380/0x380
[  404.241529][T14334]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  404.247521][T14334]  ? verify_lock_unused+0x140/0x140
[  404.252962][T14334]  ? perf_trace_lock_acquire+0x340/0x3e0
[  404.258874][T14334]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  404.265628][T14334]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  404.272325][T14334]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  404.278942][T14334]  netlink_rcv_skb+0x1f5/0x440
[  404.283901][T14334]  ? genl_bind+0x380/0x380
[  404.288611][T14334]  ? netlink_ack+0xb50/0xb50
[  404.293290][T14334]  ? __lock_acquire+0x7d10/0x7d10
[  404.298410][T14334]  ? down_read+0x1aa/0x2e0
[  404.302949][T14334]  genl_rcv+0x24/0x40
[  404.307007][T14334]  netlink_unicast+0x774/0x920
[  404.311952][T14334]  netlink_sendmsg+0x8ba/0xbe0
[  404.316993][T14334]  ? netlink_getsockopt+0x570/0x570
[  404.322313][T14334]  ? aa_sock_msg_perm+0x94/0x150
[  404.327351][T14334]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  404.332800][T14334]  ? security_socket_sendmsg+0x7c/0xa0
[  404.338331][T14334]  ? netlink_getsockopt+0x570/0x570
[  404.344248][T14334]  ____sys_sendmsg+0x5b7/0x8f0
[  404.349097][T14334]  ? __sys_sendmsg_sock+0x30/0x30
[  404.354385][T14334]  ? import_iovec+0x6f/0xa0
[  404.358962][T14334]  ___sys_sendmsg+0x236/0x2e0
[  404.363764][T14334]  ? __sys_sendmsg+0x2a0/0x2a0
[  404.368622][T14334]  ? percpu_counter_add_batch+0x13b/0x160
[  404.374465][T14334]  __se_sys_sendmsg+0x1af/0x290
[  404.379415][T14334]  ? __x64_sys_sendmsg+0x80/0x80
[  404.384409][T14334]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  404.390575][T14334]  ? lockdep_hardirqs_on+0x94/0x140
[  404.395852][T14334]  do_syscall_64+0x4c/0xa0
[  404.400355][T14334]  ? clear_bhb_loop+0x30/0x80
[  404.405095][T14334]  ? clear_bhb_loop+0x30/0x80
[  404.409926][T14334]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  404.415971][T14334] RIP: 0033:0x7fb9fa877799
[  404.420453][T14334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.440293][T14334] RSP: 002b:00007fb9f8ad1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  404.448996][T14334] RAX: ffffffffffffffda RBX: 00007fb9faaf0fa0 RCX: 00007fb9fa877799
[  404.457025][T14334] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  404.465055][T14334] RBP: 00007fb9fa90dbd9 R08: 0000000000000000 R09: 0000000000000000
[  404.473353][T14334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.481578][T14334] R13: 00007fb9faaf1038 R14: 00007fb9faaf0fa0 R15: 00007ffe1feed7e8
[  404.489825][T14334]  </TASK>
[  404.544616][T14336] netlink: 'syz.3.3562': attribute type 6 has an invalid length.
[  404.790571][T14345] netlink: 'syz.2.3564': attribute type 6 has an invalid length.
[  405.315395][T14370] netlink: 'syz.0.3574': attribute type 6 has an invalid length.
[  407.757757][T14366] delete_channel: no stack
[  407.816322][T14378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3578'.
[  407.905942][T14382] netlink: 'syz.1.3581': attribute type 6 has an invalid length.
[  408.365941][T14387] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3582'.
[  408.462986][T14401] netlink: 'syz.1.3586': attribute type 6 has an invalid length.
[  408.592134][T14405] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3588'.
[  408.695621][T14405] device team_slave_0 left promiscuous mode
[  408.756070][T14405] team0: Port device team_slave_0 removed
[  408.776899][T14405] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  409.549994][T14412] delete_channel: no stack
[  409.671593][T14421] netlink: 'syz.1.3595': attribute type 6 has an invalid length.
[  409.775845][T14426] netlink: 'syz.2.3597': attribute type 6 has an invalid length.
[  410.021067][T14439] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3602'.
[  410.056986][T14439] team0: Port device team_slave_0 removed
[  410.069012][T14439] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  410.367945][T14455] netlink: 'syz.1.3608': attribute type 6 has an invalid length.
[  410.490137][T14452] delete_channel: no stack
[  410.590756][T14462] netlink: 'syz.2.3611': attribute type 6 has an invalid length.
[  410.621116][T14464] netlink: 'syz.1.3620': attribute type 6 has an invalid length.
[  411.063168][T14482] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3619'.
[  411.204657][T14482] team0: Port device team_slave_0 removed
[  411.231487][T14482] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  411.353534][T14477] delete_channel: no stack
[  411.581055][T14491] delete_channel: no stack
[  411.601085][T14497] netlink: 'syz.1.3624': attribute type 6 has an invalid length.
[  411.653230][T14501] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.3626'.
[  412.528771][T14520] netlink: 'syz.0.3631': attribute type 6 has an invalid length.
[  412.905053][T14523] delete_channel: no stack
[  413.004595][T14533] netlink: 'syz.0.3637': attribute type 6 has an invalid length.
[  413.325689][T14541] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3639'.
[  413.758395][T14541] team0: Port device team_slave_0 removed
[  413.774166][T14541] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  413.793476][T14530] delete_channel: no stack
[  414.209534][T14554] delete_channel: no stack
[  414.368225][T14576] netlink: 'syz.0.3651': attribute type 6 has an invalid length.
[  415.044591][T14607] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3661'.
[  415.141884][T14604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  415.190436][T14607] team0: Port device team_slave_0 removed
[  415.212333][T14607] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  415.445403][T14612] delete_channel: no stack
[  415.538654][T14623] netlink: 'syz.2.3666': attribute type 6 has an invalid length.
[  418.692707][T14660] delete_channel: no stack
[  418.821670][T14665] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3681'.
[  418.876357][T14665] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  418.968533][T14669] netlink: 'syz.0.3683': attribute type 6 has an invalid length.
[  419.337674][T14687] netlink: 'syz.4.3690': attribute type 6 has an invalid length.
[  420.239749][T14704] device syzkaller0 entered promiscuous mode
[  420.292563][T14712] netlink: 'syz.0.3702': attribute type 6 has an invalid length.
[  420.441316][T14701] delete_channel: no stack
[  420.578918][T14718] netlink: 'syz.0.3708': attribute type 6 has an invalid length.
[  420.635743][T14723] netlink: 'syz.2.3699': attribute type 6 has an invalid length.
[  421.750723][T14754] delete_channel: no stack
[  422.003625][T14764] netlink: 'syz.3.3713': attribute type 6 has an invalid length.
[  422.022348][T14766] netlink: 'syz.0.3714': attribute type 6 has an invalid length.
[  422.670175][T14791] delete_channel: no stack
[  422.984075][T14816] netlink: 'syz.3.3728': attribute type 6 has an invalid length.
[  423.397360][T14833] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31
[  423.822060][T14838] delete_channel: no stack
[  424.835710][T14875] netlink: 'syz.1.3750': attribute type 13 has an invalid length.
[  424.869459][T14875] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.3750'.
[  425.396400][T14886] delete_channel: no stack
[  426.220562][T14939] netlink: 'syz.0.3771': attribute type 10 has an invalid length.
[  428.684877][T14939] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  428.722314][T14941] delete_channel: no stack
[  432.368405][T14983] delete_channel: no stack
[  432.641744][T15008] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.3791'.
[  432.702791][T15011] device syzkaller0 entered promiscuous mode
[  433.229702][T15027] delete_channel: no stack
[  433.437690][T15039] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3804'.
[  433.642644][T15042] delete_channel: no stack
[  433.923736][T15059] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.3812'.
[  434.272046][T15060] delete_channel: no stack
[  434.541290][T15078] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.3819'.
[  434.880378][T15085] delete_channel: no stack
[  435.028732][T15098] delete_channel: no stack
[  435.092369][T15104] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.3825'.
[  435.130820][T15097] delete_channel: no stack
[  435.695405][T15131] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3835'.
[  436.188099][T15145] netlink: 703 bytes leftover after parsing attributes in process `syz.3.3840'.
[  436.281479][T15142] delete_channel: no stack
[  436.392064][T15147] delete_channel: no stack
[  436.782405][T15173] netlink: 'syz.4.3851': attribute type 17 has an invalid length.
[  436.816227][T15174] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3853'.
[  437.541169][T15189] delete_channel: no stack
[  437.635812][T15193] delete_channel: no stack
[  437.816017][T15211] netlink: 'syz.3.3864': attribute type 17 has an invalid length.
[  440.208821][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.215350][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  440.827915][T15227] netlink: 703 bytes leftover after parsing attributes in process `syz.1.3870'.
[  440.847781][T15230] delete_channel: no stack
[  441.070813][T15234] delete_channel: no stack
[  441.302722][T15254] netlink: 'syz.1.3878': attribute type 17 has an invalid length.
[  441.920991][T15276] netlink: 'syz.4.3885': attribute type 10 has an invalid length.
[  441.933766][T15276] device wlan1 left promiscuous mode
[  441.964134][T15276] device wlan1 entered promiscuous mode
[  441.972228][T15276] team0: Device wlan1 is of different type
[  442.122646][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  442.198453][T15289] device syzkaller0 entered promiscuous mode
[  442.764215][T15300] netlink: 'syz.0.3894': attribute type 17 has an invalid length.
[  446.674152][T15362] netlink: 'syz.3.3913': attribute type 10 has an invalid length.
[  446.805341][T15362] team0: Port device wlan1 added
[  446.904982][T15360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.118900][T15380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.718223][T15393] device syzkaller0 entered promiscuous mode
[  448.999290][ T4216] wlan1: Trigger new scan to find an IBSS to join
[  450.575949][T15400] delete_channel: no stack
[  450.985969][T15420] device syzkaller0 entered promiscuous mode
[  451.279987][T15441] netlink: 'syz.4.3938': attribute type 10 has an invalid length.
[  451.336742][T15441] device veth0_macvtap left promiscuous mode
[  451.384721][T15447] syz.1.3941[15447] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  451.385344][T15447] syz.1.3941[15447] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  451.441189][T15437] device syzkaller0 entered promiscuous mode
[  452.630846][T15455] delete_channel: no stack
[  452.959387][T15476] delete_channel: no stack
[  453.001018][ T4216] wlan1: Trigger new scan to find an IBSS to join
[  453.223445][T15487] device syzkaller0 entered promiscuous mode
[  453.401432][T15502] device syzkaller0 entered promiscuous mode
[  453.601734][T15519] syz.4.3962[15519] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  453.602593][T15519] syz.4.3962[15519] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  454.482639][T15523] delete_channel: no stack
[  454.597544][T15543] netlink: 'syz.3.3968': attribute type 3 has an invalid length.
[  454.693716][T15543] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3968'.
[  454.813026][T15538] delete_channel: no stack
[  454.999266][  T154] wlan1: Creating new IBSS network, BSSID f6:bd:f5:44:95:68
[  455.018264][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  455.235364][T15556] device syzkaller0 entered promiscuous mode
[  455.523103][T15558] device syzkaller0 entered promiscuous mode
[  458.168387][T15588] syz.2.3983[15588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  458.170787][T15588] syz.2.3983[15588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  458.511831][T15589] delete_channel: no stack
[  458.621646][T15581] delete_channel: no stack
[  459.688251][T15623] device syzkaller0 entered promiscuous mode
[  459.939584][T15633] netlink: 'syz.4.3995': attribute type 3 has an invalid length.
[  459.947386][T15633] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3995'.
[  461.587196][T15615] delete_channel: no stack
[  461.741239][T15637] device syzkaller0 entered promiscuous mode
[  461.959818][T15634] delete_channel: no stack
[  462.350275][T15646] device syzkaller0 entered promiscuous mode
[  464.996831][T15651] delete_channel: no stack
[  465.162139][T15656] device syzkaller0 entered promiscuous mode
[  465.379633][T15666] delete_channel: no stack
[  465.546295][T15674] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4021'.
[  465.630038][T15674] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  465.700655][T15676] device syzkaller0 entered promiscuous mode
[  465.781361][T15668] delete_channel: no stack
[  465.791171][T15684] netlink: 'syz.2.4012': attribute type 3 has an invalid length.
[  465.817149][T15684] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4012'.
[  466.061891][T15694] netlink: 'syz.3.4016': attribute type 9 has an invalid length.
[  466.109341][T15694] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4016'.
[  466.243113][T15688] device syzkaller0 entered promiscuous mode
[  466.424671][T15700] netlink: 'syz.4.4017': attribute type 10 has an invalid length.
[  466.446500][T15700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4017'.
[  466.479973][T15700] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  466.548551][T15689] delete_channel: no stack
[  466.658096][T15698] netlink: 'syz.3.4016': attribute type 9 has an invalid length.
[  466.686204][T15698] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4016'.
[  467.021211][T15709] device syzkaller0 entered promiscuous mode
[  467.182235][T15710] delete_channel: no stack
[  467.785316][T15730] netlink: 'syz.1.4028': attribute type 3 has an invalid length.
[  467.933780][T15730] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4028'.
[  468.216482][T15739] delete_channel: no stack
[  468.444478][T15752] netlink: 'syz.4.4036': attribute type 9 has an invalid length.
[  468.534565][T15752] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4036'.
[  468.546615][T15745] device syzkaller0 entered promiscuous mode
[  468.903374][T15759] netlink: 'syz.1.4035': attribute type 10 has an invalid length.
[  468.911977][T15759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4035'.
[  468.932926][T15755] delete_channel: no stack
[  468.937629][T15758] netlink: 'syz.4.4036': attribute type 9 has an invalid length.
[  468.959682][T15759] device team0 entered promiscuous mode
[  468.971312][T15758] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4036'.
[  468.978407][T15759] device team_slave_1 entered promiscuous mode
[  469.010466][T15759] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  469.900483][T15783] device syzkaller0 entered promiscuous mode
[  469.937198][T15776] delete_channel: no stack
[  470.166563][T15784] netlink: 'syz.0.4045': attribute type 3 has an invalid length.
[  470.186257][T15784] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4045'.
[  470.352458][T15799] netlink: 'syz.2.4052': attribute type 9 has an invalid length.
[  470.567293][T15800] device team0 entered promiscuous mode
[  470.585136][T15800] device team_slave_1 entered promiscuous mode
[  470.592267][T15800] device wlan1 entered promiscuous mode
[  470.604228][T15800] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  470.646936][T15810] __nla_validate_parse: 2 callbacks suppressed
[  470.646963][T15810] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4052'.
[  470.974756][T15819] validate_nla: 2 callbacks suppressed
[  470.974850][T15819] netlink: 'syz.4.4058': attribute type 30 has an invalid length.
[  471.219433][T15820] delete_channel: no stack
[  472.541533][T15863] netlink: 'syz.0.4071': attribute type 10 has an invalid length.
[  472.551037][T15869] netlink: 'syz.1.4073': attribute type 9 has an invalid length.
[  472.591905][T15869] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4073'.
[  472.602520][T15863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4071'.
[  472.637981][T15863] device team0 entered promiscuous mode
[  472.680793][T15863] device team_slave_1 entered promiscuous mode
[  472.772606][T15863] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  472.921830][T15871] delete_channel: no stack
[  472.941611][T15877] netlink: 'syz.1.4073': attribute type 9 has an invalid length.
[  472.999189][T15877] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4073'.
[  474.169467][T15905] delete_channel: no stack
[  474.432175][T15925] device syzkaller0 entered promiscuous mode
[  474.452351][T15928] netlink: 'syz.0.4093': attribute type 9 has an invalid length.
[  474.515415][T15928] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4093'.
[  474.963470][T15942] netlink: 'syz.0.4097': attribute type 3 has an invalid length.
[  474.995443][T15942] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4097'.
[  478.306508][T15951] delete_channel: no stack
[  478.826715][T15990] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.4113'.
[  479.512380][T15995] delete_channel: no stack
[  479.668840][T16004] device syzkaller0 entered promiscuous mode
[  479.758400][T16007] netlink: 'syz.4.4119': attribute type 3 has an invalid length.
[  479.773174][T16007] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4119'.
[  479.851884][T16002] delete_channel: no stack
[  480.241187][T16017] delete_channel: no stack
[  480.707605][T16040] netlink: 'syz.4.4142': attribute type 3 has an invalid length.
[  480.750692][T16040] netlink: 'syz.4.4142': attribute type 8 has an invalid length.
[  480.778869][T16045] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4142'.
[  480.794182][T16040] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.4142'.
[  481.833277][T16061] device syzkaller0 entered promiscuous mode
[  482.559483][T16051] delete_channel: no stack
[  482.995561][T16067] delete_channel: no stack
[  483.115686][T16079] netlink: 'syz.1.4147': attribute type 30 has an invalid length.
[  483.240628][T16082] netlink: 'syz.3.4146': attribute type 10 has an invalid length.
[  483.287034][T16082] netlink: 601 bytes leftover after parsing attributes in process `syz.3.4146'.
[  483.501923][T16095] netlink: 'syz.4.4150': attribute type 41 has an invalid length.
[  486.191008][T16109] delete_channel: no stack
[  486.643599][T16136] netlink: 'syz.0.4166': attribute type 2 has an invalid length.
[  486.659678][T16136] netlink: 'syz.0.4166': attribute type 8 has an invalid length.
[  486.692140][T16136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4166'.
[  486.899623][T16141] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4166'.
[  487.007442][T16141] device hsr_slave_1 left promiscuous mode
[  490.554459][T16191] netlink: 'syz.1.4182': attribute type 2 has an invalid length.
[  490.615664][T16191] netlink: 'syz.1.4182': attribute type 8 has an invalid length.
[  490.650721][T16191] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4182'.
[  490.729687][T16194] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4182'.
[  491.409230][T16194] device hsr_slave_1 left promiscuous mode
[  492.355830][T16243] netlink: 'syz.1.4199': attribute type 11 has an invalid length.
[  492.396986][T16243] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.4199'.
[  492.482638][T16249] netlink: 'syz.3.4201': attribute type 2 has an invalid length.
[  492.545284][T16249] netlink: 'syz.3.4201': attribute type 8 has an invalid length.
[  492.643016][T16249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4201'.
[  492.699344][T16252] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4201'.
[  492.806747][T16252] device hsr_slave_1 left promiscuous mode
[  493.012856][ T4240] wlan1: Trigger new scan to find an IBSS to join
[  493.391397][T16275] netlink: 'syz.4.4206': attribute type 8 has an invalid length.
[  493.704701][T16275] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4206'.
[  494.416502][T16308] netlink: 'syz.2.4225': attribute type 10 has an invalid length.
[  494.453911][T16308] device veth0_macvtap left promiscuous mode
[  494.529408][T16314] netlink: 'syz.3.4223': attribute type 3 has an invalid length.
[  494.559470][T16314] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4223'.
[  494.604026][T16311] netlink: 'syz.3.4223': attribute type 6 has an invalid length.
[  495.673153][T16349] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4246'.
[  495.785385][T16349] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4246'.
[  495.814550][T16349] netlink: get zone limit has 8 unknown bytes
[  496.040397][ T4240] wlan1: Trigger new scan to find an IBSS to join
[  496.334052][T16360] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4240'.
[  496.598425][T16373] device syzkaller0 entered promiscuous mode
[  496.646441][T16380] netlink: 'syz.3.4248': attribute type 3 has an invalid length.
[  496.702952][T16380] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4248'.
[  496.909070][T16387] netlink: 'syz.2.4250': attribute type 11 has an invalid length.
[  496.928580][T16387] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4250'.
[  497.279922][T16402] netlink: 'syz.1.4254': attribute type 10 has an invalid length.
[  498.039806][  T154] wlan1: Creating new IBSS network, BSSID 4a:d9:5f:75:df:c1
[  498.547940][T16451] netlink: 'syz.3.4270': attribute type 39 has an invalid length.
[  499.316490][T16461] netlink: 'syz.0.4273': attribute type 10 has an invalid length.
[  499.374954][T16461] device veth0_macvtap left promiscuous mode
[  500.078371][T16486] netlink: 'syz.2.4279': attribute type 2 has an invalid length.
[  500.096578][T16486] netlink: 'syz.2.4279': attribute type 8 has an invalid length.
[  500.113689][T16486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4279'.
[  500.142244][T16491] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4279'.
[  500.347943][T16491] device hsr_slave_1 left promiscuous mode
[  501.603464][T16530] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  501.643947][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.650614][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  502.372065][T16562] netlink: 'syz.4.4300': attribute type 2 has an invalid length.
[  502.381340][T16562] netlink: 'syz.4.4300': attribute type 8 has an invalid length.
[  502.392776][T16562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4300'.
[  502.462953][T16565] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4300'.
[  502.529380][T16565] device hsr_slave_1 left promiscuous mode
[  502.592745][T16564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  503.019930][T16557] delete_channel: no stack
[  503.186900][T16587] netlink: 'syz.0.4324': attribute type 2 has an invalid length.
[  503.291256][T16587] netlink: 'syz.0.4324': attribute type 8 has an invalid length.
[  503.311624][T16587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4324'.
[  503.412479][T16598] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4324'.
[  503.960037][T16619] netlink: 'syz.0.4325': attribute type 39 has an invalid length.
[  504.190572][T16616] netlink: 'syz.3.4326': attribute type 4 has an invalid length.
[  504.205795][T16616] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4326'.
[  504.710132][T16635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  504.761946][T16640] netlink: 'syz.0.4334': attribute type 3 has an invalid length.
[  504.791132][T16640] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4334'.
[  504.819617][T16621] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  505.393070][T16654] netlink: 'syz.0.4339': attribute type 1 has an invalid length.
[  505.429448][T16654] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.4339'.
[  508.234923][T16677] netlink: 'syz.0.4344': attribute type 4 has an invalid length.
[  508.261182][T16677] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4344'.
[  508.297861][T16677] wlan1: mtu less than device minimum
[  508.357643][T16678] netlink: 'syz.2.4347': attribute type 39 has an invalid length.
[  508.513517][T16680] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  508.546344][T16680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  508.846135][T16691] netlink: 'syz.3.4353': attribute type 1 has an invalid length.
[  508.884947][T16691] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.4353'.
[  509.640989][T16716] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  510.114923][T16722] netlink: 'syz.2.4362': attribute type 4 has an invalid length.
[  510.148243][T16722] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4362'.
[  510.249640][T16722] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  510.615813][T16731] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  510.666530][T16731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  511.217447][T16749] netlink: 'syz.4.4369': attribute type 1 has an invalid length.
[  511.234422][T16749] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.4369'.
[  511.920532][T16770] netlink: 'syz.1.4378': attribute type 10 has an invalid length.
[  512.384416][T16777] netlink: 'syz.4.4379': attribute type 4 has an invalid length.
[  512.580291][T16777] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4379'.
[  513.116989][T16791] netlink: 'syz.3.4386': attribute type 10 has an invalid length.
[  513.163785][T16791] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4386'.
[  513.242468][T16797] raw_sendmsg: syz.3.4386 forgot to set AF_INET. Fix it!
[  513.401354][T16795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  514.664503][T16817] netlink: 'syz.4.4393': attribute type 29 has an invalid length.
[  516.300693][T16810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4390'.
[  516.315761][T16810] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4390'.
[  516.345686][T16817] netlink: 'syz.4.4393': attribute type 29 has an invalid length.
[  516.684285][T16822] netlink: 'syz.1.4394': attribute type 4 has an invalid length.
[  516.740011][T16822] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4394'.
[  517.357566][T16838] netlink: 'syz.1.4398': attribute type 39 has an invalid length.
[  517.660758][T16843] netlink: 'syz.0.4400': attribute type 10 has an invalid length.
[  517.670507][T16843] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4400'.
[  518.305737][T16862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4407'.
[  518.328170][T16862] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4407'.
[  518.712534][T16867] netlink: 'syz.0.4409': attribute type 4 has an invalid length.
[  518.779820][T16867] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4409'.
[  519.300994][T16867] wlan1: mtu less than device minimum
[  519.396570][T16873] delete_channel: no stack
[  519.508649][T16881] netlink: 'syz.2.4413': attribute type 10 has an invalid length.
[  519.528411][T16881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4413'.
[  519.764788][T16890] netlink: 'syz.1.4417': attribute type 10 has an invalid length.
[  519.783265][T16890] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4417'.
[  519.848590][T16887] netlink: 'syz.3.4416': attribute type 39 has an invalid length.
[  521.025954][T16907] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4421'.
[  521.151522][T16926] netlink: 'syz.0.4429': attribute type 10 has an invalid length.
[  521.367819][T16931] netlink: 'syz.4.4430': attribute type 10 has an invalid length.
[  521.383631][T16921] delete_channel: no stack
[  521.472925][T16931] __nla_validate_parse: 1 callbacks suppressed
[  521.472970][T16931] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4430'.
[  521.566025][T16935] netlink: 'syz.0.4432': attribute type 10 has an invalid length.
[  521.767361][T16935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4432'.
[  522.817708][T16953] netlink: 'syz.0.4437': attribute type 39 has an invalid length.
[  523.263613][T16961] netlink: 'syz.2.4438': attribute type 1 has an invalid length.
[  523.285538][T16961] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.4438'.
[  523.856803][T16979] netlink: 'syz.1.4444': attribute type 10 has an invalid length.
[  523.955157][T16979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4444'.
[  526.239475][T16968] delete_channel: no stack
[  526.636922][T16996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4450'.
[  526.661000][T16989] delete_channel: no stack
[  526.683020][T16996] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4450'.
[  527.501785][  T154] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  527.520711][  T154] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  527.960073][T17022] netlink: 'syz.4.4457': attribute type 39 has an invalid length.
[  531.021594][T17032] delete_channel: no stack
[  531.194595][T17044] netlink: 'syz.2.4468': attribute type 4 has an invalid length.
[  531.224798][T17044] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4468'.
[  531.263549][T17044] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  531.377917][T17051] netlink: 'syz.3.4467': attribute type 10 has an invalid length.
[  531.409151][T17051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4467'.
[  535.028302][T17101] netlink: 'syz.1.4486': attribute type 4 has an invalid length.
[  535.040403][T17101] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4486'.
[  535.056526][T17103] netlink: 'syz.3.4489': attribute type 39 has an invalid length.
[  535.231879][T17111] device wlan1 entered promiscuous mode
[  535.396484][T17121] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.4493'.
[  535.411026][T17121] openvswitch: netlink: Duplicate key (type 0).
[  535.520984][T17109] netlink: 'syz.4.4485': attribute type 10 has an invalid length.
[  535.544794][T17109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4485'.
[  535.604591][T17118] delete_channel: no stack
[  536.015479][T17135] device wg2 entered promiscuous mode
[  536.784598][T17168] device wg2 left promiscuous mode
[  536.900327][T17173] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.4511'.
[  536.915478][T17173] openvswitch: netlink: Duplicate key (type 0).
[  537.058538][T17176] netlink: 'syz.1.4512': attribute type 10 has an invalid length.
[  537.118789][T17171] delete_channel: no stack
[  537.503704][T17176] device team_slave_1 left promiscuous mode
[  537.704141][T17176] team0 (unregistering): Port device team_slave_1 removed
[  537.729383][T17197] netlink: 'syz.2.4518': attribute type 9 has an invalid length.
[  537.738078][T17197] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4518'.
[  537.757212][T17180] netlink: 'syz.4.4513': attribute type 10 has an invalid length.
[  537.773376][T17196] device wlan0 left promiscuous mode
[  537.795567][T17195] device wlan0 entered promiscuous mode
[  537.809973][T17193] Ÿë
: port 3(veth0_to_team) entered blocking state
[  537.818775][T17193] Ÿë
: port 3(veth0_to_team) entered disabled state
[  537.828909][T17193] device veth0_to_team entered promiscuous mode
[  537.979299][T17199] device wg2 entered promiscuous mode
[  538.418444][T17224] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.4527'.
[  538.492620][T17224] openvswitch: netlink: Duplicate key (type 0).
[  538.592767][T17223] delete_channel: no stack
[  538.661427][T17236] netlink: 39083 bytes leftover after parsing attributes in process `syz.3.4532'.
[  538.775255][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4534'.
[  538.903466][T17246] netlink: 'syz.3.4535': attribute type 10 has an invalid length.
[  538.919486][T17246] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4535'.
[  539.445875][T17255] device wg2 entered promiscuous mode
[  539.726973][T17274] netlink: 'syz.0.4542': attribute type 10 has an invalid length.
[  539.740331][T17274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4542'.
[  540.002970][T17289] openvswitch: netlink: Duplicate key (type 0).
[  540.049813][T17286] delete_channel: no stack
[  540.678759][T17318] device wg2 entered promiscuous mode
[  540.852182][T17332] __nla_validate_parse: 1 callbacks suppressed
[  540.852201][T17332] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4563'.
[  540.870811][T17332] netlink: 21648 bytes leftover after parsing attributes in process `syz.3.4563'.
[  541.547929][T17335] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.4564'.
[  541.604001][T17335] openvswitch: netlink: Duplicate key (type 0).
[  541.772325][T17335] delete_channel: no stack
[  542.359919][T17378] device wg2 entered promiscuous mode
[  542.835132][T17397] netlink: 'syz.2.4582': attribute type 10 has an invalid length.
[  542.861416][T17397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4582'.
[  542.882950][T17397] device team0 entered promiscuous mode
[  542.889572][T17397] device team_slave_1 entered promiscuous mode
[  542.898358][T17397] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  542.939236][T17390] netlink: 'syz.4.4580': attribute type 10 has an invalid length.
[  543.262879][T17390] device team_slave_1 left promiscuous mode
[  543.364966][T17390] team0 (unregistering): Port device team_slave_1 removed
[  543.640419][T17410] delete_channel: no stack
[  543.835300][T17425] device wg2 entered promiscuous mode
[  544.072255][T17427] delete_channel: no stack
[  544.101804][T17434] device wg2 left promiscuous mode
[  544.143875][T17434] device wg2 entered promiscuous mode
[  544.543013][T17447] netlink: 'syz.1.4599': attribute type 10 has an invalid length.
[  544.589503][T17447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4599'.
[  544.722826][T17461] netlink: 'syz.0.4602': attribute type 10 has an invalid length.
[  544.731471][T17461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4602'.
[  544.747773][T17461] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  545.213831][T17478] device wlan0 left promiscuous mode
[  545.245953][T17471] netlink: 'syz.3.4605': attribute type 10 has an invalid length.
[  545.314177][T17471] device team_slave_1 left promiscuous mode
[  545.327016][T17479] netlink: 'syz.0.4611': attribute type 9 has an invalid length.
[  545.335427][T17479] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4611'.
[  545.403442][T17471] team0 (unregistering): Port device team_slave_1 removed
[  545.413115][T17471] device wlan1 left promiscuous mode
[  545.430393][T17471] team0 (unregistering): Port device wlan1 removed
[  545.472045][T17478] device wlan0 entered promiscuous mode
[  545.663042][T17481] IPv6: Can't replace route, no match found
[  546.258906][T17502] netlink: 'syz.4.4618': attribute type 6 has an invalid length.
[  548.947077][T17520] netlink: 'syz.3.4623': attribute type 10 has an invalid length.
[  548.970444][T17520] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4623'.
[  549.165688][T17527] netlink: 'syz.4.4627': attribute type 4 has an invalid length.
[  549.251113][T17527] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4627'.
[  549.478744][T17527] netlink: 'syz.4.4627': attribute type 10 has an invalid length.
[  550.307633][T17560] device syzkaller0 entered promiscuous mode
[  550.941124][T17591] netlink: 'syz.1.4648': attribute type 29 has an invalid length.
[  551.063289][T17591] netlink: 'syz.1.4648': attribute type 29 has an invalid length.
[  551.103283][T17598] netlink: 'syz.1.4648': attribute type 29 has an invalid length.
[  551.602359][T17595] device syzkaller0 entered promiscuous mode
[  551.659096][T17608] IPv6: Can't replace route, no match found
[  551.687666][T17611] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  551.700551][ T4240] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  551.739067][ T4240] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  551.905035][T15517] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  551.931348][T15517] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  551.948463][  T154] ------------[ cut here ]------------
[  551.956655][  T154] WARNING: CPU: 1 PID: 154 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0
[  551.988506][  T154] Modules linked in:
[  552.001945][  T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0
[  552.029087][  T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  552.049998][  T154] Workqueue: cfg80211 cfg80211_event_work
[  552.063787][  T154] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0
[  552.090295][  T154] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a1 b7 43 f8 0f 0b eb bb e8 98 b7 43 f8 <0f> 0b eb b2 e8 8f b7 43 f8 0f 0b e9 77 fd ff ff e8 83 b7 43 f8 0f
[  552.127471][T17622] device wlan0 left promiscuous mode
[  552.169207][  T154] RSP: 0018:ffffc90001f77aa0 EFLAGS: 00010293
[  552.175502][  T154] RAX: ffffffff89356978 RBX: dffffc0000000000 RCX: ffff88801bec8000
[  552.189143][T17624] device wlan0 entered promiscuous mode
[  552.232668][  T154] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980
[  552.256085][  T154] RBP: ffffc90001f77b70 R08: ffffffff901d412f R09: 1ffffffff203a825
[  552.269860][T17622] netlink: 'syz.1.4658': attribute type 9 has an invalid length.
[  552.290382][  T154] R10: dffffc0000000000 R11: fffffbfff203a826 R12: ffff88802b6a35f0
[  552.298768][  T154] R13: 1ffff920003eef5c R14: 000000000000001f R15: ffff88805f0fcc90
[  552.303999][T17622] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4658'.
[  552.339848][  T154] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  552.363518][  T154] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  552.391935][  T154] CR2: 00007f4e1db0eff8 CR3: 0000000077583000 CR4: 00000000003506e0
[  552.422164][  T154] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  552.450354][  T154] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  552.458817][  T154] Call Trace:
[  552.482865][  T154]  <TASK>
[  552.485943][  T154]  ? trace_rdev_return_void+0x1c0/0x1c0
[  552.516260][  T154]  ? cfg80211_event_work+0x23/0x40
[  552.540559][  T154]  cfg80211_process_wdev_events+0x3ad/0x4f0
[  552.547308][  T154]  cfg80211_process_rdev_events+0x9d/0x110
[  552.580375][  T154]  cfg80211_event_work+0x2b/0x40
[  552.585436][  T154]  process_one_work+0x85f/0x1010
[  552.633796][  T154]  ? worker_detach_from_pool+0x240/0x240
[  552.650328][  T154]  ? lockdep_hardirqs_off+0x70/0x100
[  552.655886][  T154]  ? _raw_spin_lock_irq+0xb7/0xf0
[  552.670356][  T154]  ? _raw_spin_lock_irqsave+0x100/0x100
[  552.676047][  T154]  ? wq_worker_running+0x97/0x170
[  552.690375][  T154]  worker_thread+0xaa6/0x1290
[  552.695491][  T154]  ? lockdep_hardirqs_on+0x94/0x140
[  552.719141][  T154]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  552.725234][  T154]  kthread+0x436/0x520
[  552.739085][  T154]  ? rcu_lock_release+0x20/0x20
[  552.744153][  T154]  ? kthread_blkcg+0xd0/0xd0
[  552.748824][  T154]  ret_from_fork+0x1f/0x30
[  552.768148][  T154]  </TASK>
[  552.776170][  T154] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  552.783578][  T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0
[  552.793106][  T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  552.804742][  T154] Workqueue: cfg80211 cfg80211_event_work
[  552.811795][  T154] Call Trace:
[  552.816191][  T154]  <TASK>
[  552.820530][  T154]  dump_stack_lvl+0x188/0x250
[  552.827869][  T154]  ? show_regs_print_info+0x20/0x20
[  552.834546][  T154]  ? load_image+0x400/0x400
[  552.840088][  T154]  panic+0x2e5/0x810
[  552.844233][  T154]  ? bpf_jit_dump+0xd0/0xd0
[  552.849522][  T154]  ? ret_from_fork+0x1f/0x30
[  552.854344][  T154]  ? __cfg80211_ibss_joined+0x428/0x4b0
[  552.859961][  T154]  __warn+0x248/0x2b0
[  552.864893][  T154]  ? __cfg80211_ibss_joined+0x428/0x4b0
[  552.870595][  T154]  report_bug+0x1b7/0x2e0
[  552.875184][  T154]  handle_bug+0x3a/0x70
[  552.879541][  T154]  exc_invalid_op+0x16/0x40
[  552.884236][  T154]  asm_exc_invalid_op+0x16/0x20
[  552.889608][  T154] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0
[  552.896095][  T154] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a1 b7 43 f8 0f 0b eb bb e8 98 b7 43 f8 <0f> 0b eb b2 e8 8f b7 43 f8 0f 0b e9 77 fd ff ff e8 83 b7 43 f8 0f
[  552.917156][  T154] RSP: 0018:ffffc90001f77aa0 EFLAGS: 00010293
[  552.923294][  T154] RAX: ffffffff89356978 RBX: dffffc0000000000 RCX: ffff88801bec8000
[  552.932206][  T154] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980
[  552.940669][  T154] RBP: ffffc90001f77b70 R08: ffffffff901d412f R09: 1ffffffff203a825
[  552.950137][  T154] R10: dffffc0000000000 R11: fffffbfff203a826 R12: ffff88802b6a35f0
[  552.958340][  T154] R13: 1ffff920003eef5c R14: 000000000000001f R15: ffff88805f0fcc90
[  552.966628][  T154]  ? __cfg80211_ibss_joined+0x428/0x4b0
[  552.972390][  T154]  ? trace_rdev_return_void+0x1c0/0x1c0
[  552.978159][  T154]  ? cfg80211_event_work+0x23/0x40
[  552.983534][  T154]  cfg80211_process_wdev_events+0x3ad/0x4f0
[  552.989935][  T154]  cfg80211_process_rdev_events+0x9d/0x110
[  552.995911][  T154]  cfg80211_event_work+0x2b/0x40
[  553.001717][  T154]  process_one_work+0x85f/0x1010
[  553.006992][  T154]  ? worker_detach_from_pool+0x240/0x240
[  553.012967][  T154]  ? lockdep_hardirqs_off+0x70/0x100
[  553.018423][  T154]  ? _raw_spin_lock_irq+0xb7/0xf0
[  553.023525][  T154]  ? _raw_spin_lock_irqsave+0x100/0x100
[  553.029315][  T154]  ? wq_worker_running+0x97/0x170
[  553.034547][  T154]  worker_thread+0xaa6/0x1290
[  553.040316][  T154]  ? lockdep_hardirqs_on+0x94/0x140
[  553.045838][  T154]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  553.052198][  T154]  kthread+0x436/0x520
[  553.056384][  T154]  ? rcu_lock_release+0x20/0x20
[  553.061680][  T154]  ? kthread_blkcg+0xd0/0xd0
[  553.066546][  T154]  ret_from_fork+0x1f/0x30
[  553.071143][  T154]  </TASK>
[  553.074518][  T154] Kernel Offset: disabled
[  553.079217][  T154] Rebooting in 86400 seconds..