last executing test programs:

19.147644206s ago: executing program 0 (id=881):
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8907, 0x0)
close(0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400089d)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000700)=ANY=[@ANYBLOB="180000008100000000000000e204000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000019008500000083000000bf0900000000000055090100000600000000000000000000040000000e0000000000000000000000bf91000000000000b7020000010000008500e1c85c197feebfa9049e000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="1b00000019007f089ea6690ca4dc", 0xe}], 0x1}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x20, 0x0, 0x0, 0x24023, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x4, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4048001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4d}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x5, &(0x7f0000001cc0)=ANY=[@ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0), 0x4)
socket$kcm(0x25, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0xfffffffd, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x1e, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="cd6096e0159ccf3208f92f633f8a659b96c4b9a404a4d339fc7e91a5d24455c0805ff20baf743ae11223f38d6da6aeb2ac8f180ba8b1907a77af71d4474c4b6e3862546d52f1aa2daaef11b2d1a85ef70ed9e56fd66853f01d1068625e43252abbe6432fa2056c43a07eb7043cfdae163c9ce9e40bd24393b0f4fe76a8606200"/141, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r4}, 0x10)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x4040000)

18.863309831s ago: executing program 0 (id=887):
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101fff0000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

18.77643964s ago: executing program 0 (id=889):
r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x7, 0x2, 0xb, 0x0, 0x9, 0x90400, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x80000001, 0x2}, 0x8, 0x21, 0x6, 0x6, 0x9, 0x9, 0x0, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xf)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x2)
r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r1, 0x2, 0x1, 0x1ff, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000008c0)={0x5}, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r2}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x70bd26, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2000000}}}]}, {0xfffb}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8918, &(0x7f0000000000)={r7})

18.53669311s ago: executing program 1 (id=895):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r2, r1, 0x4, r1}, 0x10) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 64)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x157, 0x0, 0xfff, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

18.45106608s ago: executing program 1 (id=897):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d000000ba7b00001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x9, 0x0, 0x0, 0x40, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x50)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x2000c052)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) (async)
write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d000000ba7b00001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x9, 0x0, 0x0, 0x40, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x50) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x2000c052) (async)

18.361605516s ago: executing program 1 (id=899):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e0001080007400000000008000840"], 0x1f0}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1, 0x9, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x3, 0x408, 0x4, 0x1, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20)
socket$kcm(0x10, 0x3, 0x10)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8)
close(r6)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x93, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x93, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7b04, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50)
socket$kcm(0x11, 0x3, 0x0) (async)
r9 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000300)="020401000000ffb1000000", 0xb}], 0x1}, 0x200440c4)

18.360740256s ago: executing program 0 (id=900):
bpf$ENABLE_STATS(0x20, 0x0, 0x98e9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000008000002"})
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe64)
socket$kcm(0x10, 0x2, 0x0)

18.011162922s ago: executing program 2 (id=903):
r0 = socket$kcm(0x11, 0x3, 0x0) (async)
r1 = socket$kcm(0x22, 0x2, 0x21)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x80044943, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000180)="27050200d40f00000600002f88a8", 0xe}], 0x1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r5}, 0x38) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000040), &(0x7f0000000180)=""/42}, 0x20) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x0)

17.726035838s ago: executing program 2 (id=904):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x464e3680, 0x90, 0x4, 0xffffff7f, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x54004}, 0x0)
getpid()
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x181}, 0x80)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2d1b47cadf767bbd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24004080)
sendmsg$NFT_BATCH(r5, &(0x7f0000001240)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x118, 0x0, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x101, 0x6, "df5c8ac28b6ef3089651ca64eb403fdea79282110c7bb7ca619bd11893b28c27fe2d6bad96ee45f87e83bcf2c6ac8466aa7a93a44e2480024f80596a84674f896735b548921acf47bdd775cc65d27740547f33688c4d07cbcfb2895ce8e8fbe87ab21769a58ae9b9e65fe719c10324782770409982eacfc88c67aa9c18138d403b3bc0a86948ab0bd4bbd3c27d6cbd96c10aab48d5a31d9dd3a8918f4eb03d2f0baecbc8fff74a7e7775b55a928c8af10dfc7cd16501053151c19ea4545ebf5288bc2f0788eab9a08156232814cd1fb1c706df3489721dc6ed052cd106304102baeb49168fa7ae5205184906b7cdad670cb5f4f5e9430495f6fc1bb834"}]}, @NFT_MSG_NEWSET={0x148, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_EXPRESSIONS={0x68, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_USERDATA={0xae, 0xd, 0x1, 0x0, "87ee45bf7b1eec7ad64f25f92b72a32abed64f330070c879772f37536b416e1e9c157fe64c017d6fecd3e8522d3bd8f89db3380edbd05dafee4932eb77c7812ca9a0f5e0cb093c4d779226ff90802923014868a42d97f19df3427c22f9a0d1cbfbd0e21843edf7ce1a4df59d0faa39c1d08b72284247881b6b93c3ca579c9a1f569607bebdb5f7617ceab99c882f2e54a5d8c2bb47f2e093918915321730da8bf9475459a1527e690011"}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1bc, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x82, 0x6, "055fe47f24c44e8e78e15771e479b400927f392566f51653c8cece37df94d02dd193bc58a566603958e5c4819e79e7bdbabf79b4f243e1c8660e7b9e4a7a2ec12483295bb68389d8fe2ebfc25123b3fe4694697b515d8d56fda254603659f80b8b82f99b200ac44a10c758efbcd430ade014c362f8044331ad8d101511ce"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xef, 0x6, "bba1b980eff2492c207b997a9cc29912ffecb8b130ae225c227952198549349a43d60a16e22fb50fa06daf4b32bc4828c842571af62b08b43e713c1370f350d0e78df0d43e6f55171ed631f1b4589a1f2d7640735f324bcb5a563564f2c35f3a639abc0db902f9574fb975ef98f062562d11cf4158dd5e58a33169cd6a8077997932ea44e6597aad32b56455f1b90a4acb7e4b72a1309d3dc0659fdf6ee4a5456ebc6468d380ba1eb3fe93d91329053165028ebaaf5074d3d45c343d62fb778ddefb0b3335ce5982de17f0be07fcb30a40837283cc671dd260ecfae64b5c96ef18063d2411a21ea4995053"}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x15c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x13}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x94, 0x7, 0x1, 0x0, "823e6dcd375d50cb6ca786a56cacd49e640495187e8c78bff2c2722504e001e8213211f55a42efb143544f222daaec6728512401f457743fe1c98667332ea9513636741a0ffdd651d185afc1010ff317c0c55689be22bcf6e70ca62014c9525ca7e161e5c6352f604e6ca9193a34968c22277c1607c6b9c6f2ae834cc6c0e056cc829bfe856e459606f5c3d455eac5f9"}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xf3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x174, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x12, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}, {0x58, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}]}}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa00}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x2a, 0x7, 0x1, 0x0, "076400004a29a5c9e1483fb6f529a39c199e8dffc21bdddd0aca30c750b134e7d70069d6db72"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x144, 0x8, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x12, 0x7, 0x1, 0x0, "17b623399e3bdcc74b762e148ac5"}, @NFTA_RULE_USERDATA={0x37, 0x7, 0x1, 0x0, "dbc359c93bda4adf25c30a859d48e38915c4e113130d6f104cefa20cb1100ed9b4ab4a7f97578d8c3b249db9572f7bf6dbcc15"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8809}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x874}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000150a012300000000000000000b000004"], 0x14}}, 0x40000)
fstat(r6, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$bpf(0x0, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0), 0x1810840, &(0x7f0000001500)={[{@gid={'gid', 0x3d, r7}}], [{@obj_role={'obj_role', 0x3d, '$'}}, {@dont_measure}, {@uid_gt={'uid>', 0xee01}}, {@fowner_lt}]})
fstat(0xffffffffffffffff, &(0x7f0000000840))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r8}, 0x38)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

17.614685937s ago: executing program 2 (id=905):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0x2e}], 0x1, 0x0, 0xfffffffffffffde0}, 0xa010)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x2004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x8f, 0x1}, 0x11efa, 0x6, 0x98, 0x0, 0x3, 0x9, 0x6, 0x0, 0xfffffffe, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1ff, 0x10}, 0xc)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r11, 0x4)

17.61431945s ago: executing program 1 (id=906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
close(r1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x440d4}, 0x20044000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)

17.546231276s ago: executing program 2 (id=907):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2, 0x0, 0x4000000}, 0x18)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8940, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e002e0010000000ba80013ffa85f59a0000005a8c3774fa0af3dc59a933c1e6a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f", 0x67}], 0x1}, 0x1000)

17.4358859s ago: executing program 0 (id=908):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x40080)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x12, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x7, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000001, 0xe}, 0x18020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000200)="5c00000010006bcc9e3be35c6e17aa31076b856c150000007ea20864160af3650c001ac008000a00040008001e618294ff0051f60284c9f4d4938037e786a6d0001000000e4509c5bb0100000053c7e834371ccdd11774738d52317c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000082000000000000000020000000705000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000600)=""/4088, 0x0, 0xff8, 0x1}, 0x28)
r6 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r6, 0x84, 0x72, &(0x7f0000000000), 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38}, 0x41)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab070004000523"], 0xfe33)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r8)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

17.435692493s ago: executing program 1 (id=909):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='!~u&\t0|\t\t')
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_pressure(r2, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x5, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040400}, 0x44010)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

17.422519466s ago: executing program 1 (id=910):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f089e", 0x9}, {&(0x7f0000000180)="68ca8abd0058fc0a1d6b689866f0", 0xe}], 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_open_procfs$namespace(0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

17.280147334s ago: executing program 2 (id=911):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000740), 0x4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000210001000200000004000000fc020000000000000000000000000000fc02000000000000000000000000000000007fff000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b36b6e0000000000cc011100fc010000000000000000000000000000ac1414aa0000000000000000000000010a010100000000d6e9550024bb3ebcda0c630000000000000000000000000001ff030000063500000a00020000000000000000000000000000000000000000000000000000000000000000000000ffffac1414aaac1e00010000000000000000000000003c040000ff34000002"], 0x21c}}, 0x4000040)

17.279708057s ago: executing program 2 (id=912):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x18, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xe, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x21000000, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x38}, 0x28)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@rfm={0x25, 0x8, "5bf7602c15edec42f02899f9e69719f1"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06", 0x29}], 0x1}, 0x4008001)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='cpu<00||!')
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8210a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

17.203465663s ago: executing program 0 (id=913):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}]}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x84, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xb, &(0x7f00000001c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf95}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xfe3, 0x17, &(0x7f0000000240)=""/23, 0x41100, 0x38, '\x00', r3, @fallback=0x2e, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x6, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[r1], &(0x7f0000000700)=[{0x4, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0xb}, {0x1, 0x3, 0x9, 0x8}, {0x3, 0x2, 0x3, 0x9}, {0xb61, 0x2, 0xd, 0x9}, {0x1, 0x4, 0x7, 0x4}, {0x3, 0x4, 0xb, 0x9}, {0x3, 0x3, 0x9, 0x8}, {0x3, 0x2, 0xc, 0x7}], 0x10, 0x24}, 0x94)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{r1}, &(0x7f0000001600), &(0x7f0000001640)=r4}, 0x20)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9f, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x2, 0x6, 0x9, 0xfff, 0xa6, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000013c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)=@generic={&(0x7f0000001400)='./file0\x00', 0x0, 0x10}, 0x18)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd2, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r11, &(0x7f00000015c0)="65b892eee1", 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0xffffff22, 0x1000, &(0x7f0000000340)=""/4096, 0x41000, 0x14, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000000100)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001480)=[r8, r9, 0x1, r10, r11, 0x1, r12, r13], &(0x7f00000014c0)=[{0x0, 0x5, 0x0, 0xa}], 0x10, 0xfffffff7}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x44)

296.232069ms ago: executing program 32 (id=913):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}]}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x84, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xb, &(0x7f00000001c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf95}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xfe3, 0x17, &(0x7f0000000240)=""/23, 0x41100, 0x38, '\x00', r3, @fallback=0x2e, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x6, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[r1], &(0x7f0000000700)=[{0x4, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0xb}, {0x1, 0x3, 0x9, 0x8}, {0x3, 0x2, 0x3, 0x9}, {0xb61, 0x2, 0xd, 0x9}, {0x1, 0x4, 0x7, 0x4}, {0x3, 0x4, 0xb, 0x9}, {0x3, 0x3, 0x9, 0x8}, {0x3, 0x2, 0xc, 0x7}], 0x10, 0x24}, 0x94)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{r1}, &(0x7f0000001600), &(0x7f0000001640)=r4}, 0x20)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9f, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x2, 0x6, 0x9, 0xfff, 0xa6, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000013c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)=@generic={&(0x7f0000001400)='./file0\x00', 0x0, 0x10}, 0x18)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd2, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r11, &(0x7f00000015c0)="65b892eee1", 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0xffffff22, 0x1000, &(0x7f0000000340)=""/4096, 0x41000, 0x14, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000000100)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001480)=[r8, r9, 0x1, r10, r11, 0x1, r12, r13], &(0x7f00000014c0)=[{0x0, 0x5, 0x0, 0xa}], 0x10, 0xfffffff7}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x44)

138.283323ms ago: executing program 33 (id=910):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f089e", 0x9}, {&(0x7f0000000180)="68ca8abd0058fc0a1d6b689866f0", 0xe}], 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_open_procfs$namespace(0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

0s ago: executing program 34 (id=912):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x18, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xe, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x21000000, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x38}, 0x28)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@rfm={0x25, 0x8, "5bf7602c15edec42f02899f9e69719f1"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06", 0x29}], 0x1}, 0x4008001)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='cpu<00||!')
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8210a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

put+0x11b/0x210
[   58.987341][ T6012]  netlink_sendmsg+0x805/0xb30
[   58.987355][ T6012]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.987366][ T6012]  ? aa_sock_msg_perm+0xf1/0x1d0
[   58.987378][ T6012]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   58.987385][ T6012]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.987396][ T6012]  __sock_sendmsg+0x21c/0x270
[   58.987407][ T6012]  ____sys_sendmsg+0x505/0x830
[   58.987416][ T6012]  ? __pfx_____sys_sendmsg+0x10/0x10
[   58.987427][ T6012]  ? import_iovec+0x74/0xa0
[   58.987437][ T6012]  ___sys_sendmsg+0x21f/0x2a0
[   58.987445][ T6012]  ? __pfx____sys_sendmsg+0x10/0x10
[   58.987467][ T6012]  ? __fget_files+0x2a/0x420
[   58.987473][ T6012]  ? __fget_files+0x3a0/0x420
[   58.987484][ T6012]  __x64_sys_sendmsg+0x19b/0x260
[   58.987493][ T6012]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   58.987504][ T6012]  ? rcu_is_watching+0x15/0xb0
[   58.987513][ T6012]  ? do_syscall_64+0xbe/0x3b0
[   58.987526][ T6012]  do_syscall_64+0xfa/0x3b0
[   58.987541][ T6012]  ? lockdep_hardirqs_on+0x9c/0x150
[   58.987551][ T6012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.987559][ T6012]  ? exc_page_fault+0x9f/0xf0
[   58.987569][ T6012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.987576][ T6012] RIP: 0033:0x7fbf8458ebe9
[   58.987584][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.987591][ T6012] RSP: 002b:00007fbf8539b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.987599][ T6012] RAX: ffffffffffffffda RBX: 00007fbf847b5fa0 RCX: 00007fbf8458ebe9
[   58.987604][ T6012] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[   58.987609][ T6012] RBP: 00007fbf84611e19 R08: 0000000000000000 R09: 0000000000000000
[   58.987613][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.987617][ T6012] R13: 00007fbf847b6038 R14: 00007fbf847b5fa0 R15: 00007fff628cca18
[   58.987629][ T6012]  </TASK>
[   59.338033][ T6020] blkio.reset_stats is deprecated
[   60.587267][ T5842] Bluetooth: hci1: command tx timeout
[   60.589534][ T5842] Bluetooth: hci0: command tx timeout
[   60.591334][ T5842] Bluetooth: hci2: command tx timeout
[   61.457548][ T6071] bpf: Bad value for 'gid'
[   61.462750][ T6068] dvmrp1: tun_chr_ioctl cmd 1074025677
[   61.464770][ T6068] dvmrp1: linktype set to 773
[   61.473455][ T6074] C: renamed from team_slave_0 (while UP)
[   61.537428][ T6077] syzkaller0: entered promiscuous mode
[   61.539392][ T6077] syzkaller0: entered allmulticast mode
[   61.760441][ T6084] delete_channel: no stack
[   62.405321][ T6108] IPv6: NLM_F_CREATE should be specified when creating new route
[   62.408322][ T6108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.410952][ T6108] IPv6: NLM_F_CREATE should be set when creating new route
[   62.653971][ T5852] Bluetooth: hci0: command tx timeout
[   62.656342][   T54] Bluetooth: hci1: command tx timeout
[   62.658870][ T5842] Bluetooth: hci2: command tx timeout
[   63.215269][ T6112] __nla_validate_parse: 1 callbacks suppressed
[   63.215283][ T6112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.59'.
[   63.226351][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.59'.
[   63.309657][ T6121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.375615][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.63'.
[   63.892800][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.484571][ T6168] validate_nla: 4 callbacks suppressed
[   64.484581][ T6168] netlink: 'syz.2.72': attribute type 11 has an invalid length.
[   65.024999][ T6190] netlink: 'syz.0.81': attribute type 10 has an invalid length.
[   65.045192][ T6190] team0: Port device dummy0 added
[   65.054492][ T6189] netlink: 'syz.0.81': attribute type 10 has an invalid length.
[   65.082436][ T6189] team0: Port device dummy0 removed
[   65.093548][ T6189] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   65.321380][ T6198] netlink: ct family unspecified
[   65.332014][ T6198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.348166][ T6193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   65.351743][ T6193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   65.355236][ T6193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   65.358785][ T6193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   65.362295][ T6193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   65.365783][ T6193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   65.369184][ T6193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   66.205982][ T6211] syzkaller0: entered promiscuous mode
[   66.208371][ T6211] syzkaller0: entered allmulticast mode
[   66.247166][ T6218] netlink: 'syz.0.91': attribute type 39 has an invalid length.
[   66.269567][ T6218] veth0_macvtap: left promiscuous mode
[   66.306144][ T6218] netlink: 3 bytes leftover after parsing attributes in process `syz.0.91'.
[   66.338908][ T6222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.92'.
[   66.911003][ T6238] netlink: 'syz.0.97': attribute type 10 has an invalid length.
[   67.005725][ T6238] team0: Device ipvlan1 failed to register rx_handler
[   67.305316][ T6249] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.101'.
[   67.425208][ T6256] netlink: 'syz.0.103': attribute type 1 has an invalid length.
[   67.440218][ T6250] netlink: 'syz.1.100': attribute type 29 has an invalid length.
[   67.451378][ T6251] netlink: 'syz.1.100': attribute type 29 has an invalid length.
[   67.461237][ T6250] netlink: 'syz.1.100': attribute type 29 has an invalid length.
[   69.559243][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'.
[   69.563121][ T6342] netlink: 152 bytes leftover after parsing attributes in process `syz.0.127'.
[   69.649968][ T6345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.129'.
[   69.655274][ T6345] veth1_macvtap: entered allmulticast mode
[   69.946089][ T6353] debugfs: '!' already exists in 'ieee80211'
[   70.016479][ T6355] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   70.019748][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.1.133 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   70.019765][ T6355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.019773][ T6355] Call Trace:
[   70.019778][ T6355]  <TASK>
[   70.019785][ T6355]  dump_stack_lvl+0x189/0x250
[   70.019806][ T6355]  ? kernfs_path_from_node+0x2f/0x290
[   70.019823][ T6355]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.019864][ T6355]  ? __pfx__printk+0x10/0x10
[   70.019889][ T6355]  ? kernfs_path_from_node+0x2f/0x290
[   70.019903][ T6355]  ? kernfs_path_from_node+0x250/0x290
[   70.019916][ T6355]  ? kernfs_path_from_node+0x2f/0x290
[   70.019934][ T6355]  sysfs_warn_dup+0x8e/0xa0
[   70.019948][ T6355]  sysfs_do_create_link_sd+0xc0/0x110
[   70.019964][ T6355]  device_add_class_symlinks+0x1cf/0x240
[   70.019983][ T6355]  device_add+0x475/0xb50
[   70.020001][ T6355]  wiphy_register+0x1ba6/0x28d0
[   70.020037][ T6355]  ? __pfx_wiphy_register+0x10/0x10
[   70.020053][ T6355]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   70.020075][ T6355]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   70.020101][ T6355]  ieee80211_register_hw+0x3425/0x4080
[   70.020132][ T6355]  ? ieee80211_register_hw+0x1441/0x4080
[   70.020155][ T6355]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   70.020174][ T6355]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   70.020199][ T6355]  ? __hrtimer_setup+0x187/0x210
[   70.020211][ T6355]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   70.020232][ T6355]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   70.020279][ T6355]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   70.020294][ T6355]  ? trace_kmalloc+0x1f/0xd0
[   70.020309][ T6355]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   70.020334][ T6355]  ? kstrndup+0xbf/0x160
[   70.020356][ T6355]  hwsim_new_radio_nl+0xea4/0x1b10
[   70.020373][ T6355]  ? __pfx___nla_validate_parse+0x10/0x10
[   70.020405][ T6355]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   70.020432][ T6355]  ? __nla_parse+0x40/0x60
[   70.020454][ T6355]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   70.020483][ T6355]  genl_family_rcv_msg_doit+0x215/0x300
[   70.020519][ T6355]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   70.020547][ T6355]  ? bpf_lsm_capable+0x9/0x20
[   70.020564][ T6355]  ? security_capable+0x7e/0x2e0
[   70.020591][ T6355]  genl_rcv_msg+0x60e/0x790
[   70.020611][ T6355]  ? __pfx_genl_rcv_msg+0x10/0x10
[   70.020624][ T6355]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   70.020641][ T6355]  ? __asan_memcpy+0x40/0x70
[   70.020655][ T6355]  ? __pfx_ref_tracker_free+0x10/0x10
[   70.020677][ T6355]  netlink_rcv_skb+0x208/0x470
[   70.020692][ T6355]  ? __lock_acquire+0xab9/0xd20
[   70.020709][ T6355]  ? __pfx_genl_rcv_msg+0x10/0x10
[   70.020722][ T6355]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   70.020752][ T6355]  ? down_read+0x1ad/0x2e0
[   70.020771][ T6355]  genl_rcv+0x28/0x40
[   70.020782][ T6355]  netlink_unicast+0x82f/0x9e0
[   70.020808][ T6355]  ? __pfx_netlink_unicast+0x10/0x10
[   70.020868][ T6355]  ? netlink_sendmsg+0x642/0xb30
[   70.020885][ T6355]  ? skb_put+0x11b/0x210
[   70.020900][ T6355]  netlink_sendmsg+0x805/0xb30
[   70.020924][ T6355]  ? __pfx_netlink_sendmsg+0x10/0x10
[   70.020944][ T6355]  ? aa_sock_msg_perm+0xf1/0x1d0
[   70.020964][ T6355]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   70.020977][ T6355]  ? __pfx_netlink_sendmsg+0x10/0x10
[   70.020994][ T6355]  __sock_sendmsg+0x21c/0x270
[   70.021013][ T6355]  ____sys_sendmsg+0x505/0x830
[   70.021030][ T6355]  ? __pfx_____sys_sendmsg+0x10/0x10
[   70.021052][ T6355]  ? import_iovec+0x74/0xa0
[   70.021069][ T6355]  ___sys_sendmsg+0x21f/0x2a0
[   70.021084][ T6355]  ? __pfx____sys_sendmsg+0x10/0x10
[   70.021116][ T6355]  ? __fget_files+0x2a/0x420
[   70.021140][ T6355]  ? __fget_files+0x2a/0x420
[   70.021150][ T6355]  ? __fget_files+0x3a0/0x420
[   70.021170][ T6355]  __x64_sys_sendmsg+0x19b/0x260
[   70.021186][ T6355]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   70.021216][ T6355]  ? do_syscall_64+0xbe/0x3b0
[   70.021237][ T6355]  do_syscall_64+0xfa/0x3b0
[   70.021254][ T6355]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.021270][ T6355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.021282][ T6355]  ? exc_page_fault+0x9f/0xf0
[   70.021300][ T6355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.021312][ T6355] RIP: 0033:0x7f962358ebe9
[   70.021325][ T6355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.021335][ T6355] RSP: 002b:00007f96244d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   70.021349][ T6355] RAX: ffffffffffffffda RBX: 00007f96237b5fa0 RCX: 00007f962358ebe9
[   70.021358][ T6355] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000005
[   70.021366][ T6355] RBP: 00007f9623611e19 R08: 0000000000000000 R09: 0000000000000000
[   70.021374][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.021382][ T6355] R13: 00007f96237b6038 R14: 00007f96237b5fa0 R15: 00007fff7fd532d8
[   70.021408][ T6355]  </TASK>
[   70.525348][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'.
[   70.529318][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'.
[   70.662538][ T6391] netlink: 'syz.2.148': attribute type 21 has an invalid length.
[   70.666328][ T6391] netlink: 168 bytes leftover after parsing attributes in process `syz.2.148'.
[   70.823033][ T6397] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   70.826373][ T6397] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.150'.
[   70.902722][ T6403] netlink: 'syz.0.152': attribute type 13 has an invalid length.
[   70.975406][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.978300][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.096889][ T6405] netlink: 196 bytes leftover after parsing attributes in process `syz.1.153'.
[   71.109728][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.153'.
[   71.114613][ T6412] netlink: 'syz.2.156': attribute type 1 has an invalid length.
[   72.699584][ T6428] netlink: 'syz.2.161': attribute type 29 has an invalid length.
[   72.908556][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'.
[   72.908635][ T6434] netlink: 'syz.1.163': attribute type 29 has an invalid length.
[   72.980988][ T6434] netlink: 'syz.1.163': attribute type 29 has an invalid length.
[   73.054696][ T6440] netlink: 'syz.2.165': attribute type 10 has an invalid length.
[   73.054702][ T6441] netlink: 'syz.2.165': attribute type 10 has an invalid length.
[   73.060464][ T6441] team0: Device veth1_macvtap failed to register rx_handler
[   73.074649][ T6440] team0: Device veth1_macvtap failed to register rx_handler
[   73.656951][ T6449] netlink: 'syz.0.170': attribute type 1 has an invalid length.
[   73.678522][ T6456] syz.2.172 uses obsolete (PF_INET,SOCK_PACKET)
[   73.995728][ T6478] 8021q: adding VLAN 0 to HW filter on device team0
[   74.012308][ T6478] bond0: (slave team0): Enslaving as an active interface with an up link
[   74.157142][ T6488] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   74.159891][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: syz.1.183 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   74.159902][ T6488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.159907][ T6488] Call Trace:
[   74.159911][ T6488]  <TASK>
[   74.159914][ T6488]  dump_stack_lvl+0x189/0x250
[   74.159928][ T6488]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.159938][ T6488]  ? __pfx__printk+0x10/0x10
[   74.159950][ T6488]  ? kernfs_path_from_node+0x2f/0x290
[   74.159958][ T6488]  ? kernfs_path_from_node+0x250/0x290
[   74.159965][ T6488]  ? kernfs_path_from_node+0x2f/0x290
[   74.159975][ T6488]  sysfs_warn_dup+0x8e/0xa0
[   74.159982][ T6488]  sysfs_do_create_link_sd+0xc0/0x110
[   74.159992][ T6488]  device_add_class_symlinks+0x1cf/0x240
[   74.160001][ T6488]  device_add+0x475/0xb50
[   74.160010][ T6488]  wiphy_register+0x1ba6/0x28d0
[   74.160028][ T6488]  ? __pfx_wiphy_register+0x10/0x10
[   74.160037][ T6488]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   74.160048][ T6488]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   74.160061][ T6488]  ieee80211_register_hw+0x3425/0x4080
[   74.160076][ T6488]  ? ieee80211_register_hw+0x1441/0x4080
[   74.160087][ T6488]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   74.160096][ T6488]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   74.160109][ T6488]  ? __hrtimer_setup+0x187/0x210
[   74.160116][ T6488]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   74.160127][ T6488]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   74.160148][ T6488]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   74.160156][ T6488]  ? trace_kmalloc+0x1f/0xd0
[   74.160165][ T6488]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   74.160174][ T6488]  ? kstrndup+0xbf/0x160
[   74.160188][ T6488]  hwsim_new_radio_nl+0xea4/0x1b10
[   74.160216][ T6488]  ? __pfx___nla_validate_parse+0x10/0x10
[   74.160233][ T6488]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   74.160247][ T6488]  ? __nla_parse+0x40/0x60
[   74.160259][ T6488]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   74.160271][ T6488]  genl_family_rcv_msg_doit+0x215/0x300
[   74.160282][ T6488]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   74.160296][ T6488]  ? bpf_lsm_capable+0x9/0x20
[   74.160305][ T6488]  ? security_capable+0x7e/0x2e0
[   74.160319][ T6488]  genl_rcv_msg+0x60e/0x790
[   74.160329][ T6488]  ? __pfx_genl_rcv_msg+0x10/0x10
[   74.160336][ T6488]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   74.160346][ T6488]  ? __asan_memcpy+0x40/0x70
[   74.160354][ T6488]  ? __pfx_ref_tracker_free+0x10/0x10
[   74.160366][ T6488]  netlink_rcv_skb+0x208/0x470
[   74.160376][ T6488]  ? __lock_acquire+0xab9/0xd20
[   74.160386][ T6488]  ? __pfx_genl_rcv_msg+0x10/0x10
[   74.160394][ T6488]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   74.160412][ T6488]  ? down_read+0x1ad/0x2e0
[   74.160424][ T6488]  genl_rcv+0x28/0x40
[   74.160436][ T6488]  netlink_unicast+0x82f/0x9e0
[   74.160449][ T6488]  ? __pfx_netlink_unicast+0x10/0x10
[   74.160459][ T6488]  ? netlink_sendmsg+0x642/0xb30
[   74.160468][ T6488]  ? skb_put+0x11b/0x210
[   74.160476][ T6488]  netlink_sendmsg+0x805/0xb30
[   74.160490][ T6488]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.160502][ T6488]  ? aa_sock_msg_perm+0xf1/0x1d0
[   74.160515][ T6488]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   74.160523][ T6488]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.160535][ T6488]  __sock_sendmsg+0x21c/0x270
[   74.160547][ T6488]  ____sys_sendmsg+0x505/0x830
[   74.160557][ T6488]  ? __pfx_____sys_sendmsg+0x10/0x10
[   74.160569][ T6488]  ? import_iovec+0x74/0xa0
[   74.160579][ T6488]  ___sys_sendmsg+0x21f/0x2a0
[   74.160587][ T6488]  ? __pfx____sys_sendmsg+0x10/0x10
[   74.160609][ T6488]  ? __fget_files+0x2a/0x420
[   74.160615][ T6488]  ? __fget_files+0x3a0/0x420
[   74.160626][ T6488]  __x64_sys_sendmsg+0x19b/0x260
[   74.160634][ T6488]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   74.160646][ T6488]  ? rcu_is_watching+0x15/0xb0
[   74.160655][ T6488]  ? do_syscall_64+0xbe/0x3b0
[   74.160667][ T6488]  do_syscall_64+0xfa/0x3b0
[   74.160676][ T6488]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.160685][ T6488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.160692][ T6488]  ? exc_page_fault+0x9f/0xf0
[   74.160702][ T6488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.160708][ T6488] RIP: 0033:0x7f962358ebe9
[   74.160716][ T6488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.160722][ T6488] RSP: 002b:00007f96244d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.160731][ T6488] RAX: ffffffffffffffda RBX: 00007f96237b5fa0 RCX: 00007f962358ebe9
[   74.160736][ T6488] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[   74.160741][ T6488] RBP: 00007f9623611e19 R08: 0000000000000000 R09: 0000000000000000
[   74.160745][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.160749][ T6488] R13: 00007f96237b6038 R14: 00007f96237b5fa0 R15: 00007fff7fd532d8
[   74.160761][ T6488]  </TASK>
[   74.895181][ T6517] __nla_validate_parse: 3 callbacks suppressed
[   74.895195][ T6517] netlink: 104 bytes leftover after parsing attributes in process `syz.2.193'.
[   74.933821][ T6511] syzkaller0: entered promiscuous mode
[   74.936152][ T6511] syzkaller0: entered allmulticast mode
[   75.102620][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'.
[   75.209442][ T6521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.196'.
[   75.274978][ T6522] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.196'.
[   76.055345][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   76.059168][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   76.425121][ T6534] validate_nla: 1 callbacks suppressed
[   76.425131][ T6534] netlink: 'syz.0.200': attribute type 10 has an invalid length.
[   76.476981][ T6535] netlink: 'syz.0.200': attribute type 10 has an invalid length.
[   76.786044][ T6533] netlink: 'syz.0.200': attribute type 3 has an invalid length.
[   76.789955][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.793498][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.816112][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.818848][ T6534] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.821801][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.824306][ T6534] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.844561][ T6534] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   76.885809][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'.
[   76.889371][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'.
[   77.237881][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'.
[   77.416037][ T6565] netlink: 'syz.1.212': attribute type 10 has an invalid length.
[   77.487331][ T6575] unsupported nla_type 256
[   77.601241][ T6586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.218'.
[   77.801112][ T6601] netlink: 'syz.0.222': attribute type 27 has an invalid length.
[   77.966922][ T6607] tap0: tun_chr_ioctl cmd 1074025677
[   77.969335][ T6607] tap0: linktype set to 0
[   78.269268][ T6615] net_ratelimit: 569 callbacks suppressed
[   78.269281][ T6615] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   78.276312][ T6615] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   78.989851][ T6647] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   79.547703][ T6669] netlink: 'syz.1.249': attribute type 21 has an invalid length.
[   79.638477][ T6676] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   79.642525][ T6676] CPU: 1 UID: 0 PID: 6676 Comm: syz.1.251 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   79.642537][ T6676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.642542][ T6676] Call Trace:
[   79.642545][ T6676]  <TASK>
[   79.642549][ T6676]  dump_stack_lvl+0x189/0x250
[   79.642562][ T6676]  ? kernfs_path_from_node+0x2f/0x290
[   79.642572][ T6676]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.642581][ T6676]  ? __pfx__printk+0x10/0x10
[   79.642594][ T6676]  ? kernfs_path_from_node+0x2f/0x290
[   79.642602][ T6676]  ? kernfs_path_from_node+0x250/0x290
[   79.642609][ T6676]  ? kernfs_path_from_node+0x2f/0x290
[   79.642619][ T6676]  sysfs_warn_dup+0x8e/0xa0
[   79.642627][ T6676]  sysfs_do_create_link_sd+0xc0/0x110
[   79.642637][ T6676]  device_add_class_symlinks+0x1cf/0x240
[   79.642647][ T6676]  device_add+0x475/0xb50
[   79.642656][ T6676]  wiphy_register+0x1ba6/0x28d0
[   79.642675][ T6676]  ? __pfx_wiphy_register+0x10/0x10
[   79.642685][ T6676]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   79.642697][ T6676]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   79.642711][ T6676]  ieee80211_register_hw+0x3425/0x4080
[   79.642752][ T6676]  ? ieee80211_register_hw+0x1441/0x4080
[   79.642764][ T6676]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   79.642774][ T6676]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.642788][ T6676]  ? __hrtimer_setup+0x187/0x210
[   79.642796][ T6676]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   79.642808][ T6676]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   79.642832][ T6676]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   79.642841][ T6676]  ? trace_kmalloc+0x1f/0xd0
[   79.642850][ T6676]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   79.642859][ T6676]  ? kstrndup+0xbf/0x160
[   79.642872][ T6676]  hwsim_new_radio_nl+0xea4/0x1b10
[   79.642883][ T6676]  ? __pfx___nla_validate_parse+0x10/0x10
[   79.642901][ T6676]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   79.642917][ T6676]  ? __nla_parse+0x40/0x60
[   79.642930][ T6676]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   79.642942][ T6676]  genl_family_rcv_msg_doit+0x215/0x300
[   79.642954][ T6676]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   79.642968][ T6676]  ? bpf_lsm_capable+0x9/0x20
[   79.642977][ T6676]  ? security_capable+0x7e/0x2e0
[   79.642991][ T6676]  genl_rcv_msg+0x60e/0x790
[   79.643002][ T6676]  ? __pfx_genl_rcv_msg+0x10/0x10
[   79.643010][ T6676]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   79.643020][ T6676]  ? __asan_memcpy+0x40/0x70
[   79.643031][ T6676]  ? __pfx_ref_tracker_free+0x10/0x10
[   79.643046][ T6676]  netlink_rcv_skb+0x208/0x470
[   79.643056][ T6676]  ? __lock_acquire+0xab9/0xd20
[   79.643067][ T6676]  ? __pfx_genl_rcv_msg+0x10/0x10
[   79.643075][ T6676]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   79.643095][ T6676]  ? down_read+0x1ad/0x2e0
[   79.643106][ T6676]  genl_rcv+0x28/0x40
[   79.643113][ T6676]  netlink_unicast+0x82f/0x9e0
[   79.643127][ T6676]  ? __pfx_netlink_unicast+0x10/0x10
[   79.643137][ T6676]  ? netlink_sendmsg+0x642/0xb30
[   79.643146][ T6676]  ? skb_put+0x11b/0x210
[   79.643155][ T6676]  netlink_sendmsg+0x805/0xb30
[   79.643170][ T6676]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.643182][ T6676]  ? aa_sock_msg_perm+0xf1/0x1d0
[   79.643194][ T6676]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   79.643202][ T6676]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.643212][ T6676]  __sock_sendmsg+0x21c/0x270
[   79.643223][ T6676]  ____sys_sendmsg+0x505/0x830
[   79.643234][ T6676]  ? __pfx_____sys_sendmsg+0x10/0x10
[   79.643246][ T6676]  ? import_iovec+0x74/0xa0
[   79.643256][ T6676]  ___sys_sendmsg+0x21f/0x2a0
[   79.643265][ T6676]  ? __pfx____sys_sendmsg+0x10/0x10
[   79.643289][ T6676]  ? __fget_files+0x2a/0x420
[   79.643303][ T6676]  ? __fget_files+0x2a/0x420
[   79.643310][ T6676]  ? __fget_files+0x3a0/0x420
[   79.643322][ T6676]  __x64_sys_sendmsg+0x19b/0x260
[   79.643332][ T6676]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   79.643344][ T6676]  ? rcu_is_watching+0x15/0xb0
[   79.643355][ T6676]  ? do_syscall_64+0xbe/0x3b0
[   79.643369][ T6676]  do_syscall_64+0xfa/0x3b0
[   79.643378][ T6676]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.643389][ T6676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.643396][ T6676]  ? exc_page_fault+0x9f/0xf0
[   79.643407][ T6676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.643414][ T6676] RIP: 0033:0x7f962358ebe9
[   79.643422][ T6676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.643428][ T6676] RSP: 002b:00007f96244d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   79.643437][ T6676] RAX: ffffffffffffffda RBX: 00007f96237b5fa0 RCX: 00007f962358ebe9
[   79.643444][ T6676] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[   79.643449][ T6676] RBP: 00007f9623611e19 R08: 0000000000000000 R09: 0000000000000000
[   79.643453][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.643458][ T6676] R13: 00007f96237b6038 R14: 00007f96237b5fa0 R15: 00007fff7fd532d8
[   79.643471][ T6676]  </TASK>
[   79.956173][ T6686] __nla_validate_parse: 4 callbacks suppressed
[   79.956188][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'.
[   79.963259][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'.
[   80.455660][ T6701] debugfs: '!' already exists in 'ieee80211'
[   80.500839][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'.
[   80.589377][ T6715] netlink: 60 bytes leftover after parsing attributes in process `syz.1.261'.
[   80.607947][ T6715] netlink: 60 bytes leftover after parsing attributes in process `syz.1.261'.
[   80.628028][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'.
[   80.652868][ T6715] netlink: 60 bytes leftover after parsing attributes in process `syz.1.261'.
[   80.895614][ T6734] netlink: 'syz.2.266': attribute type 8 has an invalid length.
[   80.898794][ T6734] netlink: 'syz.2.266': attribute type 6 has an invalid length.
[   80.901873][ T6734] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.266'.
[   81.019365][ T6739] netlink: 'syz.2.268': attribute type 29 has an invalid length.
[   81.111141][ T6742] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.269'.
[   81.162905][ T6747] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.271'.
[   81.220406][   T10] cfg80211: failed to load regulatory.db
[   81.562130][ T5842] Bluetooth: hci1: Malformed Event: 0x02
[   82.922320][ T6790] validate_nla: 7 callbacks suppressed
[   82.922334][ T6790] netlink: 'syz.2.284': attribute type 1 has an invalid length.
[   83.091549][ T6799] veth1_macvtap: left promiscuous mode
[   83.095809][ T6799] macsec0: entered allmulticast mode
[   83.203711][ T6805] netlink: 'syz.2.291': attribute type 27 has an invalid length.
[   83.210365][ T6805] netlink: 'syz.2.291': attribute type 2 has an invalid length.
[   83.220461][ T6805] netlink: 'syz.2.291': attribute type 7 has an invalid length.
[   83.224180][ T6805] netlink: 'syz.2.291': attribute type 2 has an invalid length.
[   83.227366][ T6805] netlink: 'syz.2.291': attribute type 7 has an invalid length.
[   83.451252][ T6813] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   83.473754][ T6813] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   83.627821][ T6833] netlink: 'syz.0.300': attribute type 29 has an invalid length.
[   83.633869][ T6833] raw_sendmsg: syz.0.300 forgot to set AF_INET. Fix it!
[   83.636880][ T6833] netlink: 'syz.0.300': attribute type 29 has an invalid length.
[   85.286323][ T6929] __nla_validate_parse: 12 callbacks suppressed
[   85.286338][ T6929] netlink: 64 bytes leftover after parsing attributes in process `syz.1.308'.
[   86.138242][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'.
[   86.258060][ T6956] netlink: 104 bytes leftover after parsing attributes in process `syz.0.319'.
[   86.490703][ T6967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.324'.
[   86.631895][ T6981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.325'.
[   86.643781][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'.
[   86.780016][ T6987] netlink: 209436 bytes leftover after parsing attributes in process `syz.2.330'.
[   86.781241][ T6985] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.329'.
[   87.039214][ T7002] netlink: 168 bytes leftover after parsing attributes in process `syz.2.335'.
[   87.045845][ T7002] netlink: zone id is out of range
[   87.048122][ T7002] netlink: zone id is out of range
[   87.050467][ T7002] netlink: zone id is out of range
[   87.057737][ T7002] netlink: zone id is out of range
[   87.059928][ T7002] netlink: zone id is out of range
[   87.061861][ T7002] netlink: zone id is out of range
[   87.066454][ T7002] netlink: zone id is out of range
[   87.068520][ T7002] netlink: zone id is out of range
[   87.070485][ T7002] netlink: zone id is out of range
[   87.074585][ T7002] netlink: zone id is out of range
[   87.129342][ T7011] netlink: 'syz.2.336': attribute type 2 has an invalid length.
[   87.140563][ T7011] netlink: 'syz.2.336': attribute type 1 has an invalid length.
[   87.815981][ T7040] netlink: 160 bytes leftover after parsing attributes in process `syz.1.342'.
[   87.824758][ T7040] erspan0: refused to change device tx_queue_len
[   87.910680][ T7048] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   87.918505][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.1.346 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   87.918523][ T7048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.918532][ T7048] Call Trace:
[   87.918538][ T7048]  <TASK>
[   87.918544][ T7048]  dump_stack_lvl+0x189/0x250
[   87.918567][ T7048]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.918584][ T7048]  ? __pfx__printk+0x10/0x10
[   87.918606][ T7048]  ? kernfs_path_from_node+0x2f/0x290
[   87.918647][ T7048]  ? kernfs_path_from_node+0x250/0x290
[   87.918662][ T7048]  ? kernfs_path_from_node+0x2f/0x290
[   87.918680][ T7048]  sysfs_warn_dup+0x8e/0xa0
[   87.918694][ T7048]  sysfs_do_create_link_sd+0xc0/0x110
[   87.918711][ T7048]  device_add_class_symlinks+0x1cf/0x240
[   87.918731][ T7048]  device_add+0x475/0xb50
[   87.918748][ T7048]  wiphy_register+0x1ba6/0x28d0
[   87.918780][ T7048]  ? __pfx_wiphy_register+0x10/0x10
[   87.918798][ T7048]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   87.918818][ T7048]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   87.918843][ T7048]  ieee80211_register_hw+0x3425/0x4080
[   87.918869][ T7048]  ? ieee80211_register_hw+0x1441/0x4080
[   87.918889][ T7048]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   87.918906][ T7048]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   87.918930][ T7048]  ? __hrtimer_setup+0x187/0x210
[   87.918942][ T7048]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   87.918969][ T7048]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   87.919008][ T7048]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   87.919024][ T7048]  ? trace_kmalloc+0x1f/0xd0
[   87.919039][ T7048]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   87.919057][ T7048]  ? kstrndup+0xbf/0x160
[   87.919079][ T7048]  hwsim_new_radio_nl+0xea4/0x1b10
[   87.919098][ T7048]  ? __pfx___nla_validate_parse+0x10/0x10
[   87.919129][ T7048]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   87.919156][ T7048]  ? __nla_parse+0x40/0x60
[   87.919176][ T7048]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   87.919198][ T7048]  genl_family_rcv_msg_doit+0x215/0x300
[   87.919218][ T7048]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   87.919242][ T7048]  ? bpf_lsm_capable+0x9/0x20
[   87.919258][ T7048]  ? security_capable+0x7e/0x2e0
[   87.919282][ T7048]  genl_rcv_msg+0x60e/0x790
[   87.919301][ T7048]  ? __pfx_genl_rcv_msg+0x10/0x10
[   87.919314][ T7048]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   87.919332][ T7048]  ? __asan_memcpy+0x40/0x70
[   87.919345][ T7048]  ? __pfx_ref_tracker_free+0x10/0x10
[   87.919368][ T7048]  netlink_rcv_skb+0x208/0x470
[   87.919385][ T7048]  ? __lock_acquire+0xab9/0xd20
[   87.919403][ T7048]  ? __pfx_genl_rcv_msg+0x10/0x10
[   87.919418][ T7048]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   87.919450][ T7048]  ? down_read+0x1ad/0x2e0
[   87.919472][ T7048]  genl_rcv+0x28/0x40
[   87.919483][ T7048]  netlink_unicast+0x82f/0x9e0
[   87.919507][ T7048]  ? __pfx_netlink_unicast+0x10/0x10
[   87.919524][ T7048]  ? netlink_sendmsg+0x642/0xb30
[   87.919540][ T7048]  ? skb_put+0x11b/0x210
[   87.919555][ T7048]  netlink_sendmsg+0x805/0xb30
[   87.919581][ T7048]  ? __pfx_netlink_sendmsg+0x10/0x10
[   87.919601][ T7048]  ? aa_sock_msg_perm+0xf1/0x1d0
[   87.919649][ T7048]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   87.919665][ T7048]  ? __pfx_netlink_sendmsg+0x10/0x10
[   87.919685][ T7048]  __sock_sendmsg+0x21c/0x270
[   87.919705][ T7048]  ____sys_sendmsg+0x505/0x830
[   87.919723][ T7048]  ? __pfx_____sys_sendmsg+0x10/0x10
[   87.919745][ T7048]  ? import_iovec+0x74/0xa0
[   87.919763][ T7048]  ___sys_sendmsg+0x21f/0x2a0
[   87.919779][ T7048]  ? __pfx____sys_sendmsg+0x10/0x10
[   87.919821][ T7048]  ? __fget_files+0x2a/0x420
[   87.919833][ T7048]  ? __fget_files+0x3a0/0x420
[   87.919852][ T7048]  __x64_sys_sendmsg+0x19b/0x260
[   87.919869][ T7048]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   87.919890][ T7048]  ? rcu_is_watching+0x15/0xb0
[   87.919908][ T7048]  ? do_syscall_64+0xbe/0x3b0
[   87.919929][ T7048]  do_syscall_64+0xfa/0x3b0
[   87.919944][ T7048]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.919967][ T7048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.919981][ T7048]  ? exc_page_fault+0x9f/0xf0
[   87.919998][ T7048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.920011][ T7048] RIP: 0033:0x7f962358ebe9
[   87.920024][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.920034][ T7048] RSP: 002b:00007f96244d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   87.920049][ T7048] RAX: ffffffffffffffda RBX: 00007f96237b5fa0 RCX: 00007f962358ebe9
[   87.920059][ T7048] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[   87.920067][ T7048] RBP: 00007f9623611e19 R08: 0000000000000000 R09: 0000000000000000
[   87.920075][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.920084][ T7048] R13: 00007f96237b6038 R14: 00007f96237b5fa0 R15: 00007fff7fd532d8
[   87.920105][ T7048]  </TASK>
[   89.542907][ T7119] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   89.546140][ T7119] CPU: 0 UID: 0 PID: 7119 Comm: syz.1.367 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   89.546158][ T7119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.546165][ T7119] Call Trace:
[   89.546172][ T7119]  <TASK>
[   89.546178][ T7119]  dump_stack_lvl+0x189/0x250
[   89.546209][ T7119]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.546226][ T7119]  ? __pfx__printk+0x10/0x10
[   89.546249][ T7119]  ? kernfs_path_from_node+0x2f/0x290
[   89.546264][ T7119]  ? kernfs_path_from_node+0x250/0x290
[   89.546279][ T7119]  ? kernfs_path_from_node+0x2f/0x290
[   89.546295][ T7119]  sysfs_warn_dup+0x8e/0xa0
[   89.546308][ T7119]  sysfs_do_create_link_sd+0xc0/0x110
[   89.546323][ T7119]  device_add_class_symlinks+0x1cf/0x240
[   89.546341][ T7119]  device_add+0x475/0xb50
[   89.546357][ T7119]  wiphy_register+0x1ba6/0x28d0
[   89.546387][ T7119]  ? __pfx_wiphy_register+0x10/0x10
[   89.546404][ T7119]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   89.546424][ T7119]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   89.546448][ T7119]  ieee80211_register_hw+0x3425/0x4080
[   89.546476][ T7119]  ? ieee80211_register_hw+0x1441/0x4080
[   89.546494][ T7119]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   89.546511][ T7119]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   89.546532][ T7119]  ? __hrtimer_setup+0x187/0x210
[   89.546544][ T7119]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   89.546565][ T7119]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   89.546623][ T7119]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   89.546641][ T7119]  ? trace_kmalloc+0x1f/0xd0
[   89.546657][ T7119]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   89.546674][ T7119]  ? kstrndup+0xbf/0x160
[   89.546697][ T7119]  hwsim_new_radio_nl+0xea4/0x1b10
[   89.546715][ T7119]  ? __pfx___nla_validate_parse+0x10/0x10
[   89.546744][ T7119]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   89.546771][ T7119]  ? __nla_parse+0x40/0x60
[   89.546794][ T7119]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   89.546815][ T7119]  genl_family_rcv_msg_doit+0x215/0x300
[   89.546834][ T7119]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   89.546859][ T7119]  ? bpf_lsm_capable+0x9/0x20
[   89.546875][ T7119]  ? security_capable+0x7e/0x2e0
[   89.546897][ T7119]  genl_rcv_msg+0x60e/0x790
[   89.546917][ T7119]  ? __pfx_genl_rcv_msg+0x10/0x10
[   89.546930][ T7119]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   89.546947][ T7119]  ? __asan_memcpy+0x40/0x70
[   89.546961][ T7119]  ? __pfx_ref_tracker_free+0x10/0x10
[   89.546984][ T7119]  netlink_rcv_skb+0x208/0x470
[   89.547000][ T7119]  ? __lock_acquire+0xab9/0xd20
[   89.547019][ T7119]  ? __pfx_genl_rcv_msg+0x10/0x10
[   89.547032][ T7119]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   89.547065][ T7119]  ? down_read+0x1ad/0x2e0
[   89.547087][ T7119]  genl_rcv+0x28/0x40
[   89.547098][ T7119]  netlink_unicast+0x82f/0x9e0
[   89.547121][ T7119]  ? __pfx_netlink_unicast+0x10/0x10
[   89.547139][ T7119]  ? netlink_sendmsg+0x642/0xb30
[   89.547155][ T7119]  ? skb_put+0x11b/0x210
[   89.547170][ T7119]  netlink_sendmsg+0x805/0xb30
[   89.547196][ T7119]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.547223][ T7119]  ? aa_sock_msg_perm+0xf1/0x1d0
[   89.547243][ T7119]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   89.547257][ T7119]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.547294][ T7119]  __sock_sendmsg+0x21c/0x270
[   89.547315][ T7119]  ____sys_sendmsg+0x505/0x830
[   89.547333][ T7119]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.547353][ T7119]  ? import_iovec+0x74/0xa0
[   89.547371][ T7119]  ___sys_sendmsg+0x21f/0x2a0
[   89.547387][ T7119]  ? __pfx____sys_sendmsg+0x10/0x10
[   89.547429][ T7119]  ? __fget_files+0x2a/0x420
[   89.547441][ T7119]  ? __fget_files+0x3a0/0x420
[   89.547460][ T7119]  __x64_sys_sendmsg+0x19b/0x260
[   89.547476][ T7119]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   89.547497][ T7119]  ? rcu_is_watching+0x15/0xb0
[   89.547515][ T7119]  ? do_syscall_64+0xbe/0x3b0
[   89.547536][ T7119]  do_syscall_64+0xfa/0x3b0
[   89.547552][ T7119]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.547568][ T7119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.547581][ T7119]  ? exc_page_fault+0x9f/0xf0
[   89.547622][ T7119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.547637][ T7119] RIP: 0033:0x7f962358ebe9
[   89.547651][ T7119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.547661][ T7119] RSP: 002b:00007f96244d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.547677][ T7119] RAX: ffffffffffffffda RBX: 00007f96237b5fa0 RCX: 00007f962358ebe9
[   89.547686][ T7119] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[   89.547694][ T7119] RBP: 00007f9623611e19 R08: 0000000000000000 R09: 0000000000000000
[   89.547703][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.547710][ T7119] R13: 00007f96237b6038 R14: 00007f96237b5fa0 R15: 00007fff7fd532d8
[   89.547732][ T7119]  </TASK>
[   89.787947][ T7123] validate_nla: 3 callbacks suppressed
[   89.787962][ T7123] netlink: 'syz.1.369': attribute type 1 has an invalid length.
[   89.802693][ T7123] netlink: 'syz.1.369': attribute type 4 has an invalid length.
[   89.935521][ T7135] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   89.939039][ T7135] CPU: 1 UID: 0 PID: 7135 Comm: syz.1.375 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   89.939056][ T7135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.939063][ T7135] Call Trace:
[   89.939069][ T7135]  <TASK>
[   89.939074][ T7135]  dump_stack_lvl+0x189/0x250
[   89.939095][ T7135]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.939112][ T7135]  ? __pfx__printk+0x10/0x10
[   89.939133][ T7135]  ? kernfs_path_from_node+0x2f/0x290
[   89.939147][ T7135]  ? kernfs_path_from_node+0x250/0x290
[   89.939159][ T7135]  ? kernfs_path_from_node+0x2f/0x290
[   89.939174][ T7135]  sysfs_warn_dup+0x8e/0xa0
[   89.939187][ T7135]  sysfs_do_create_link_sd+0xc0/0x110
[   89.939202][ T7135]  device_add_class_symlinks+0x1cf/0x240
[   89.939215][ T7135]  device_add+0x475/0xb50
[   89.939232][ T7135]  wiphy_register+0x1ba6/0x28d0
[   89.939260][ T7135]  ? __pfx_wiphy_register+0x10/0x10
[   89.939274][ T7135]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   89.939292][ T7135]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   89.939315][ T7135]  ieee80211_register_hw+0x3425/0x4080
[   89.939342][ T7135]  ? ieee80211_register_hw+0x1441/0x4080
[   89.939361][ T7135]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   89.939377][ T7135]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   89.939397][ T7135]  ? __hrtimer_setup+0x187/0x210
[   89.939410][ T7135]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   89.939427][ T7135]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   89.939463][ T7135]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   89.939476][ T7135]  ? trace_kmalloc+0x1f/0xd0
[   89.939491][ T7135]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   89.939507][ T7135]  ? kstrndup+0xbf/0x160
[   89.939527][ T7135]  hwsim_new_radio_nl+0xea4/0x1b10
[   89.939543][ T7135]  ? __pfx___nla_validate_parse+0x10/0x10
[   89.939571][ T7135]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   89.939595][ T7135]  ? __nla_parse+0x40/0x60
[   89.939640][ T7135]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   89.939662][ T7135]  genl_family_rcv_msg_doit+0x215/0x300
[   89.939682][ T7135]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   89.939704][ T7135]  ? bpf_lsm_capable+0x9/0x20
[   89.939721][ T7135]  ? security_capable+0x7e/0x2e0
[   89.939742][ T7135]  genl_rcv_msg+0x60e/0x790
[   89.939760][ T7135]  ? __pfx_genl_rcv_msg+0x10/0x10
[   89.939773][ T7135]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   89.939787][ T7135]  ? __asan_memcpy+0x40/0x70
[   89.939801][ T7135]  ? __pfx_ref_tracker_free+0x10/0x10
[   89.939821][ T7135]  netlink_rcv_skb+0x208/0x470
[   89.939838][ T7135]  ? __lock_acquire+0xab9/0xd20
[   89.939855][ T7135]  ? __pfx_genl_rcv_msg+0x10/0x10
[   89.939869][ T7135]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   89.939897][ T7135]  ? down_read+0x1ad/0x2e0
[   89.939916][ T7135]  genl_rcv+0x28/0x40
[   89.939928][ T7135]  netlink_unicast+0x82f/0x9e0
[   89.939949][ T7135]  ? __pfx_netlink_unicast+0x10/0x10
[   89.939965][ T7135]  ? netlink_sendmsg+0x642/0xb30
[   89.939980][ T7135]  ? skb_put+0x11b/0x210
[   89.939993][ T7135]  netlink_sendmsg+0x805/0xb30
[   89.940023][ T7135]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.940043][ T7135]  ? aa_sock_msg_perm+0xf1/0x1d0
[   89.940062][ T7135]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   89.940077][ T7135]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.940096][ T7135]  __sock_sendmsg+0x21c/0x270
[   89.940114][ T7135]  ____sys_sendmsg+0x505/0x830
[   89.940131][ T7135]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.940152][ T7135]  ? import_iovec+0x74/0xa0
[   89.940169][ T7135]  ___sys_sendmsg+0x21f/0x2a0
[   89.940181][ T7135]  ? __pfx____sys_sendmsg+0x10/0x10
[   89.940220][ T7135]  ? __fget_files+0x2a/0x420
[   89.940230][ T7135]  ? __fget_files+0x3a0/0x420
[   89.940248][ T7135]  __x64_sys_sendmsg+0x19b/0x260
[   89.940262][ T7135]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   89.940281][ T7135]  ? rcu_is_watching+0x15/0xb0
[   89.940298][ T7135]  ? do_syscall_64+0xbe/0x3b0
[   89.940317][ T7135]  do_syscall_64+0xfa/0x3b0
[   89.940332][ T7135]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.940348][ T7135]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.940359][ T7135]  ? exc_page_fault+0x9f/0xf0
[   89.940376][ T7135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.940386][ T7135] RIP: 0033:0x7f962358ebe9
[   89.940398][ T7135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.940408][ T7135] RSP: 002b:00007f96244d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.940419][ T7135] RAX: ffffffffffffffda RBX: 00007f96237b5fa0 RCX: 00007f962358ebe9
[   89.940429][ T7135] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[   89.940436][ T7135] RBP: 00007f9623611e19 R08: 0000000000000000 R09: 0000000000000000
[   89.940442][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.940448][ T7135] R13: 00007f96237b6038 R14: 00007f96237b5fa0 R15: 00007fff7fd532d8
[   89.940470][ T7135]  </TASK>
[   90.155834][ T7138] netlink: 'syz.2.374': attribute type 39 has an invalid length.
[   90.204173][ T7141] netlink: 'syz.1.377': attribute type 21 has an invalid length.
[   90.207442][ T7141] netlink: 'syz.1.377': attribute type 4 has an invalid length.
[   90.307253][ T7143] netlink: 'syz.2.378': attribute type 5 has an invalid length.
[   90.309805][ T7143] __nla_validate_parse: 5 callbacks suppressed
[   90.309811][ T7143] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.378'.
[   90.371406][ T7147] netlink: 128 bytes leftover after parsing attributes in process `syz.1.380'.
[   90.376883][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.380'.
[   90.405902][ T7150] netlink: 'syz.1.381': attribute type 21 has an invalid length.
[   90.409002][ T7150] netlink: 128 bytes leftover after parsing attributes in process `syz.1.381'.
[   90.437141][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'.
[   90.440856][ T7151] netlink: 'syz.2.378': attribute type 3 has an invalid length.
[   90.678997][ T7154] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   90.681772][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.0.382 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   90.681784][ T7154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.681788][ T7154] Call Trace:
[   90.681792][ T7154]  <TASK>
[   90.681796][ T7154]  dump_stack_lvl+0x189/0x250
[   90.681811][ T7154]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.681820][ T7154]  ? __pfx__printk+0x10/0x10
[   90.681832][ T7154]  ? __rcu_read_unlock+0x84/0xe0
[   90.681859][ T7154]  ? kernfs_path_from_node+0x2f/0x290
[   90.681868][ T7154]  ? kernfs_path_from_node+0x250/0x290
[   90.681875][ T7154]  ? kernfs_path_from_node+0x2f/0x290
[   90.681885][ T7154]  sysfs_warn_dup+0x8e/0xa0
[   90.681892][ T7154]  sysfs_do_create_link_sd+0xc0/0x110
[   90.681901][ T7154]  device_add_class_symlinks+0x1cf/0x240
[   90.681911][ T7154]  device_add+0x475/0xb50
[   90.681921][ T7154]  wiphy_register+0x1ba6/0x28d0
[   90.681939][ T7154]  ? __pfx_wiphy_register+0x10/0x10
[   90.681953][ T7154]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   90.681969][ T7154]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   90.681996][ T7154]  ieee80211_register_hw+0x3425/0x4080
[   90.682023][ T7154]  ? ieee80211_register_hw+0x1441/0x4080
[   90.682044][ T7154]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   90.682061][ T7154]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   90.682083][ T7154]  ? __hrtimer_setup+0x187/0x210
[   90.682094][ T7154]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   90.682115][ T7154]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   90.682147][ T7154]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   90.682155][ T7154]  ? trace_kmalloc+0x1f/0xd0
[   90.682164][ T7154]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   90.682174][ T7154]  ? kstrndup+0xbf/0x160
[   90.682186][ T7154]  hwsim_new_radio_nl+0xea4/0x1b10
[   90.682196][ T7154]  ? __pfx___nla_validate_parse+0x10/0x10
[   90.682212][ T7154]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   90.682226][ T7154]  ? __nla_parse+0x40/0x60
[   90.682240][ T7154]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   90.682252][ T7154]  genl_family_rcv_msg_doit+0x215/0x300
[   90.682263][ T7154]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   90.682278][ T7154]  ? bpf_lsm_capable+0x9/0x20
[   90.682288][ T7154]  ? security_capable+0x7e/0x2e0
[   90.682301][ T7154]  genl_rcv_msg+0x60e/0x790
[   90.682312][ T7154]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.682319][ T7154]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   90.682328][ T7154]  ? __asan_memcpy+0x40/0x70
[   90.682336][ T7154]  ? __pfx_ref_tracker_free+0x10/0x10
[   90.682349][ T7154]  netlink_rcv_skb+0x208/0x470
[   90.682359][ T7154]  ? __lock_acquire+0xab9/0xd20
[   90.682370][ T7154]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.682378][ T7154]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   90.682396][ T7154]  ? down_read+0x1ad/0x2e0
[   90.682407][ T7154]  genl_rcv+0x28/0x40
[   90.682414][ T7154]  netlink_unicast+0x82f/0x9e0
[   90.682428][ T7154]  ? __pfx_netlink_unicast+0x10/0x10
[   90.682437][ T7154]  ? netlink_sendmsg+0x642/0xb30
[   90.682447][ T7154]  ? skb_put+0x11b/0x210
[   90.682455][ T7154]  netlink_sendmsg+0x805/0xb30
[   90.682469][ T7154]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.682481][ T7154]  ? aa_sock_msg_perm+0xf1/0x1d0
[   90.682493][ T7154]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   90.682500][ T7154]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.682511][ T7154]  __sock_sendmsg+0x21c/0x270
[   90.682522][ T7154]  ____sys_sendmsg+0x505/0x830
[   90.682532][ T7154]  ? __pfx_____sys_sendmsg+0x10/0x10
[   90.682543][ T7154]  ? import_iovec+0x74/0xa0
[   90.682553][ T7154]  ___sys_sendmsg+0x21f/0x2a0
[   90.682561][ T7154]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.682584][ T7154]  ? __fget_files+0x2a/0x420
[   90.682620][ T7154]  ? __fget_files+0x3a0/0x420
[   90.682632][ T7154]  __x64_sys_sendmsg+0x19b/0x260
[   90.682641][ T7154]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   90.682653][ T7154]  ? rcu_is_watching+0x15/0xb0
[   90.682663][ T7154]  ? do_syscall_64+0xbe/0x3b0
[   90.682676][ T7154]  do_syscall_64+0xfa/0x3b0
[   90.682686][ T7154]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.682695][ T7154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.682703][ T7154]  ? exc_page_fault+0x9f/0xf0
[   90.682714][ T7154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.682720][ T7154] RIP: 0033:0x7fbf8458ebe9
[   90.682728][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.682734][ T7154] RSP: 002b:00007fbf8539b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.682742][ T7154] RAX: ffffffffffffffda RBX: 00007fbf847b5fa0 RCX: 00007fbf8458ebe9
[   90.682747][ T7154] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[   90.682752][ T7154] RBP: 00007fbf84611e19 R08: 0000000000000000 R09: 0000000000000000
[   90.682756][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.682760][ T7154] R13: 00007fbf847b6038 R14: 00007fbf847b5fa0 R15: 00007fff628cca18
[   90.682772][ T7154]  </TASK>
[   91.019437][ T7160] netlink: 'syz.2.385': attribute type 21 has an invalid length.
[   91.267637][ T7163] netlink: 68 bytes leftover after parsing attributes in process `syz.1.386'.
[   91.429963][ T7179] netlink: 14 bytes leftover after parsing attributes in process `syz.2.391'.
[   91.536173][ T7182] netlink: 'syz.2.391': attribute type 10 has an invalid length.
[   91.563425][ T7179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.571469][ T7179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.579675][ T7179] bond0 (unregistering): (slave team0): Releasing backup interface
[   91.588772][ T7179] bond0 (unregistering): Released all slaves
[   91.649850][ T7184] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   91.654654][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.0.393 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   91.654674][ T7184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.654682][ T7184] Call Trace:
[   91.654688][ T7184]  <TASK>
[   91.654694][ T7184]  dump_stack_lvl+0x189/0x250
[   91.654716][ T7184]  ? kernfs_path_from_node+0x2f/0x290
[   91.654733][ T7184]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.654749][ T7184]  ? __pfx__printk+0x10/0x10
[   91.654773][ T7184]  ? kernfs_path_from_node+0x2f/0x290
[   91.654786][ T7184]  ? kernfs_path_from_node+0x250/0x290
[   91.654798][ T7184]  ? kernfs_path_from_node+0x2f/0x290
[   91.654815][ T7184]  sysfs_warn_dup+0x8e/0xa0
[   91.654831][ T7184]  sysfs_do_create_link_sd+0xc0/0x110
[   91.654848][ T7184]  device_add_class_symlinks+0x1cf/0x240
[   91.654866][ T7184]  device_add+0x475/0xb50
[   91.654883][ T7184]  wiphy_register+0x1ba6/0x28d0
[   91.654916][ T7184]  ? __pfx_wiphy_register+0x10/0x10
[   91.654953][ T7184]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   91.654976][ T7184]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   91.655001][ T7184]  ieee80211_register_hw+0x3425/0x4080
[   91.655031][ T7184]  ? ieee80211_register_hw+0x1441/0x4080
[   91.655053][ T7184]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   91.655070][ T7184]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   91.655096][ T7184]  ? __hrtimer_setup+0x187/0x210
[   91.655108][ T7184]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   91.655130][ T7184]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   91.655181][ T7184]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   91.655197][ T7184]  ? trace_kmalloc+0x1f/0xd0
[   91.655211][ T7184]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   91.655229][ T7184]  ? kstrndup+0xbf/0x160
[   91.655253][ T7184]  hwsim_new_radio_nl+0xea4/0x1b10
[   91.655272][ T7184]  ? __pfx___nla_validate_parse+0x10/0x10
[   91.655306][ T7184]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   91.655335][ T7184]  ? __nla_parse+0x40/0x60
[   91.655358][ T7184]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   91.655381][ T7184]  genl_family_rcv_msg_doit+0x215/0x300
[   91.655402][ T7184]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   91.655429][ T7184]  ? bpf_lsm_capable+0x9/0x20
[   91.655445][ T7184]  ? security_capable+0x7e/0x2e0
[   91.655470][ T7184]  genl_rcv_msg+0x60e/0x790
[   91.655490][ T7184]  ? __pfx_genl_rcv_msg+0x10/0x10
[   91.655504][ T7184]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   91.655521][ T7184]  ? __asan_memcpy+0x40/0x70
[   91.655536][ T7184]  ? __pfx_ref_tracker_free+0x10/0x10
[   91.655560][ T7184]  netlink_rcv_skb+0x208/0x470
[   91.655603][ T7184]  ? __lock_acquire+0xab9/0xd20
[   91.655624][ T7184]  ? __pfx_genl_rcv_msg+0x10/0x10
[   91.655641][ T7184]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   91.655678][ T7184]  ? down_read+0x1ad/0x2e0
[   91.655700][ T7184]  genl_rcv+0x28/0x40
[   91.655713][ T7184]  netlink_unicast+0x82f/0x9e0
[   91.655739][ T7184]  ? __pfx_netlink_unicast+0x10/0x10
[   91.655758][ T7184]  ? netlink_sendmsg+0x642/0xb30
[   91.655774][ T7184]  ? skb_put+0x11b/0x210
[   91.655790][ T7184]  netlink_sendmsg+0x805/0xb30
[   91.655817][ T7184]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.655839][ T7184]  ? aa_sock_msg_perm+0xf1/0x1d0
[   91.655861][ T7184]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   91.655874][ T7184]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.655893][ T7184]  __sock_sendmsg+0x21c/0x270
[   91.655913][ T7184]  ____sys_sendmsg+0x505/0x830
[   91.655931][ T7184]  ? __pfx_____sys_sendmsg+0x10/0x10
[   91.655954][ T7184]  ? import_iovec+0x74/0xa0
[   91.655972][ T7184]  ___sys_sendmsg+0x21f/0x2a0
[   91.655988][ T7184]  ? __pfx____sys_sendmsg+0x10/0x10
[   91.656021][ T7184]  ? __fget_files+0x2a/0x420
[   91.656046][ T7184]  ? __fget_files+0x2a/0x420
[   91.656056][ T7184]  ? __fget_files+0x3a0/0x420
[   91.656078][ T7184]  __x64_sys_sendmsg+0x19b/0x260
[   91.656093][ T7184]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   91.656117][ T7184]  ? rcu_is_watching+0x15/0xb0
[   91.656136][ T7184]  ? do_syscall_64+0xbe/0x3b0
[   91.656158][ T7184]  do_syscall_64+0xfa/0x3b0
[   91.656181][ T7184]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.656197][ T7184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.656210][ T7184]  ? exc_page_fault+0x9f/0xf0
[   91.656231][ T7184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.656243][ T7184] RIP: 0033:0x7fbf8458ebe9
[   91.656256][ T7184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.656266][ T7184] RSP: 002b:00007fbf8539b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.656280][ T7184] RAX: ffffffffffffffda RBX: 00007fbf847b5fa0 RCX: 00007fbf8458ebe9
[   91.656289][ T7184] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[   91.656297][ T7184] RBP: 00007fbf84611e19 R08: 0000000000000000 R09: 0000000000000000
[   91.656304][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.656311][ T7184] R13: 00007fbf847b6038 R14: 00007fbf847b5fa0 R15: 00007fff628cca18
[   91.656337][ T7184]  </TASK>
[   92.024649][ T7181] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   92.187273][ T7181] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   92.504339][ T7196] netlink: 56 bytes leftover after parsing attributes in process `syz.0.398'.
[   92.511475][ T7196] netlink: 56 bytes leftover after parsing attributes in process `syz.0.398'.
[   92.522978][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'.
[   95.502778][ T7223] __nla_validate_parse: 3 callbacks suppressed
[   95.502791][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.404'.
[   95.635366][ T7223] netlink: 60 bytes leftover after parsing attributes in process `syz.2.404'.
[   95.642978][ T7224] netlink: 60 bytes leftover after parsing attributes in process `syz.2.404'.
[   96.353215][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'.
[   96.469594][ T7247] netlink: 'syz.1.414': attribute type 10 has an invalid length.
[   96.474187][ T7247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.414'.
[   96.478711][ T7247] dummy0: entered promiscuous mode
[   96.545036][ T7247] bridge0: port 3(dummy0) entered blocking state
[   96.552691][ T7247] bridge0: port 3(dummy0) entered disabled state
[   96.563589][ T7247] dummy0: entered allmulticast mode
[   96.675133][ T7247] bridge0: port 3(dummy0) entered blocking state
[   96.682691][ T7247] bridge0: port 3(dummy0) entered forwarding state
[   97.098145][ T7261] netlink: 60 bytes leftover after parsing attributes in process `syz.2.420'.
[   97.107070][ T7261] netlink: 60 bytes leftover after parsing attributes in process `syz.2.420'.
[   97.317367][ T7272] netlink: 152 bytes leftover after parsing attributes in process `syz.1.424'.
[   97.321423][ T7272] netlink: 6 bytes leftover after parsing attributes in process `syz.1.424'.
[   97.415637][ T7274] netlink: 56 bytes leftover after parsing attributes in process `syz.1.425'.
[   97.754397][ T7258] delete_channel: no stack
[   98.135160][ T7305] netlink: 'syz.2.436': attribute type 4 has an invalid length.
[   98.138437][ T7305] netlink: 'syz.2.436': attribute type 2 has an invalid length.
[   98.241180][ T7318] netlink: 'syz.0.442': attribute type 10 has an invalid length.
[   98.251126][ T7318] team0: Device hsr_slave_0 failed to register rx_handler
[   98.265822][ T7320] netlink: 'syz.2.441': attribute type 29 has an invalid length.
[   98.605326][ T7344] netlink: 'syz.0.451': attribute type 29 has an invalid length.
[   98.607754][ T7344] netlink: 'syz.0.451': attribute type 3 has an invalid length.
[   98.949403][ T7361] bridge0: port 3(dummy0) entered disabled state
[   98.952526][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.956429][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.967782][ T7361] bridge0: entered allmulticast mode
[   98.985732][ T7363] dummy0: left allmulticast mode
[   98.989217][ T7363] bridge0: port 3(dummy0) entered disabled state
[   98.998373][ T7363] bridge_slave_1: left allmulticast mode
[   99.001001][ T7363] bridge_slave_1: left promiscuous mode
[   99.004108][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.014371][ T7363] bridge_slave_0: left allmulticast mode
[   99.016875][ T7363] bridge_slave_0: left promiscuous mode
[   99.019448][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.964690][ T5842] Bluetooth: hci2: adv larger than maximum supported
[  101.186377][ T7410] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.198540][ T7410] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  101.792915][ T7423] netlink: 'syz.1.476': attribute type 2 has an invalid length.
[  101.796092][ T7423] netlink: 'syz.1.476': attribute type 1 has an invalid length.
[  101.799370][ T7423] __nla_validate_parse: 10 callbacks suppressed
[  101.799381][ T7423] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.476'.
[  102.100124][ T5842] Bluetooth: hci2: adv larger than maximum supported
[  102.308592][ T7472] netlink: 68 bytes leftover after parsing attributes in process `syz.2.488'.
[  102.349590][ T7473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.490'.
[  102.391682][ T7473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.490'.
[  102.632219][ T7479] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.492'.
[  103.097764][ T5842] Bluetooth: hci2: adv larger than maximum supported
[  103.219231][ T7487] netlink: 'syz.2.495': attribute type 1 has an invalid length.
[  103.229881][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[  103.338073][ T7501] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  103.341331][ T7501] CPU: 1 UID: 0 PID: 7501 Comm: syz.1.497 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  103.341349][ T7501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.341356][ T7501] Call Trace:
[  103.341362][ T7501]  <TASK>
[  103.341368][ T7501]  dump_stack_lvl+0x189/0x250
[  103.341391][ T7501]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.341407][ T7501]  ? __pfx__printk+0x10/0x10
[  103.341429][ T7501]  ? kernfs_path_from_node+0x2f/0x290
[  103.341467][ T7501]  ? kernfs_path_from_node+0x250/0x290
[  103.341482][ T7501]  ? kernfs_path_from_node+0x2f/0x290
[  103.341499][ T7501]  sysfs_warn_dup+0x8e/0xa0
[  103.341513][ T7501]  sysfs_do_create_link_sd+0xc0/0x110
[  103.341529][ T7501]  device_add_class_symlinks+0x1cf/0x240
[  103.341547][ T7501]  device_add+0x475/0xb50
[  103.341564][ T7501]  wiphy_register+0x1ba6/0x28d0
[  103.341594][ T7501]  ? __pfx_wiphy_register+0x10/0x10
[  103.341610][ T7501]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  103.341629][ T7501]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  103.341654][ T7501]  ieee80211_register_hw+0x3425/0x4080
[  103.341680][ T7501]  ? ieee80211_register_hw+0x1441/0x4080
[  103.341699][ T7501]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  103.341715][ T7501]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.341736][ T7501]  ? __hrtimer_setup+0x187/0x210
[  103.341747][ T7501]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  103.341766][ T7501]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  103.341811][ T7501]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  103.341827][ T7501]  ? trace_kmalloc+0x1f/0xd0
[  103.341843][ T7501]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  103.341861][ T7501]  ? kstrndup+0xbf/0x160
[  103.341881][ T7501]  hwsim_new_radio_nl+0xea4/0x1b10
[  103.341899][ T7501]  ? __pfx___nla_validate_parse+0x10/0x10
[  103.341947][ T7501]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  103.341972][ T7501]  ? __nla_parse+0x40/0x60
[  103.341991][ T7501]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  103.342010][ T7501]  genl_family_rcv_msg_doit+0x215/0x300
[  103.342029][ T7501]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  103.342052][ T7501]  ? bpf_lsm_capable+0x9/0x20
[  103.342068][ T7501]  ? security_capable+0x7e/0x2e0
[  103.342088][ T7501]  genl_rcv_msg+0x60e/0x790
[  103.342106][ T7501]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.342119][ T7501]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  103.342133][ T7501]  ? __asan_memcpy+0x40/0x70
[  103.342145][ T7501]  ? __pfx_ref_tracker_free+0x10/0x10
[  103.342166][ T7501]  netlink_rcv_skb+0x208/0x470
[  103.342182][ T7501]  ? __lock_acquire+0xab9/0xd20
[  103.342199][ T7501]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.342214][ T7501]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  103.342244][ T7501]  ? down_read+0x1ad/0x2e0
[  103.342265][ T7501]  genl_rcv+0x28/0x40
[  103.342277][ T7501]  netlink_unicast+0x82f/0x9e0
[  103.342297][ T7501]  ? __pfx_netlink_unicast+0x10/0x10
[  103.342313][ T7501]  ? netlink_sendmsg+0x642/0xb30
[  103.342328][ T7501]  ? skb_put+0x11b/0x210
[  103.342342][ T7501]  netlink_sendmsg+0x805/0xb30
[  103.342366][ T7501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.342386][ T7501]  ? aa_sock_msg_perm+0xf1/0x1d0
[  103.342406][ T7501]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  103.342419][ T7501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.342436][ T7501]  __sock_sendmsg+0x21c/0x270
[  103.342484][ T7501]  ____sys_sendmsg+0x505/0x830
[  103.342503][ T7501]  ? __pfx_____sys_sendmsg+0x10/0x10
[  103.342523][ T7501]  ? import_iovec+0x74/0xa0
[  103.342541][ T7501]  ___sys_sendmsg+0x21f/0x2a0
[  103.342556][ T7501]  ? __pfx____sys_sendmsg+0x10/0x10
[  103.342594][ T7501]  ? __fget_files+0x2a/0x420
[  103.342604][ T7501]  ? __fget_files+0x3a0/0x420
[  103.342624][ T7501]  __x64_sys_sendmsg+0x19b/0x260
[  103.342639][ T7501]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  103.342660][ T7501]  ? rcu_is_watching+0x15/0xb0
[  103.342675][ T7501]  ? do_syscall_64+0xbe/0x3b0
[  103.342696][ T7501]  do_syscall_64+0xfa/0x3b0
[  103.342712][ T7501]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.342727][ T7501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.342739][ T7501]  ? exc_page_fault+0x9f/0xf0
[  103.342756][ T7501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.342767][ T7501] RIP: 0033:0x7f962358ebe9
[  103.342779][ T7501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.342798][ T7501] RSP: 002b:00007f96244d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  103.342813][ T7501] RAX: ffffffffffffffda RBX: 00007f96237b5fa0 RCX: 00007f962358ebe9
[  103.342822][ T7501] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[  103.342831][ T7501] RBP: 00007f9623611e19 R08: 0000000000000000 R09: 0000000000000000
[  103.342838][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.342846][ T7501] R13: 00007f96237b6038 R14: 00007f96237b5fa0 R15: 00007fff7fd532d8
[  103.342869][ T7501]  </TASK>
[  103.968247][ T7535] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  103.978227][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.2.508 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  103.978247][ T7535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.978255][ T7535] Call Trace:
[  103.978261][ T7535]  <TASK>
[  103.978267][ T7535]  dump_stack_lvl+0x189/0x250
[  103.978290][ T7535]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.978307][ T7535]  ? __pfx__printk+0x10/0x10
[  103.978330][ T7535]  ? kernfs_path_from_node+0x2f/0x290
[  103.978344][ T7535]  ? kernfs_path_from_node+0x250/0x290
[  103.978357][ T7535]  ? kernfs_path_from_node+0x2f/0x290
[  103.978374][ T7535]  sysfs_warn_dup+0x8e/0xa0
[  103.978388][ T7535]  sysfs_do_create_link_sd+0xc0/0x110
[  103.978404][ T7535]  device_add_class_symlinks+0x1cf/0x240
[  103.978420][ T7535]  device_add+0x475/0xb50
[  103.978463][ T7535]  wiphy_register+0x1ba6/0x28d0
[  103.978495][ T7535]  ? __pfx_wiphy_register+0x10/0x10
[  103.978512][ T7535]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  103.978532][ T7535]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  103.978556][ T7535]  ieee80211_register_hw+0x3425/0x4080
[  103.978584][ T7535]  ? ieee80211_register_hw+0x1441/0x4080
[  103.978604][ T7535]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  103.978620][ T7535]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.978642][ T7535]  ? __hrtimer_setup+0x187/0x210
[  103.978652][ T7535]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  103.978675][ T7535]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  103.978713][ T7535]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  103.978728][ T7535]  ? trace_kmalloc+0x1f/0xd0
[  103.978745][ T7535]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  103.978764][ T7535]  ? kstrndup+0xbf/0x160
[  103.978786][ T7535]  hwsim_new_radio_nl+0xea4/0x1b10
[  103.978806][ T7535]  ? __pfx___nla_validate_parse+0x10/0x10
[  103.978842][ T7535]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  103.978869][ T7535]  ? __nla_parse+0x40/0x60
[  103.978892][ T7535]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  103.978915][ T7535]  genl_family_rcv_msg_doit+0x215/0x300
[  103.978935][ T7535]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  103.978958][ T7535]  ? bpf_lsm_capable+0x9/0x20
[  103.978976][ T7535]  ? security_capable+0x7e/0x2e0
[  103.978998][ T7535]  genl_rcv_msg+0x60e/0x790
[  103.979016][ T7535]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.979030][ T7535]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  103.979047][ T7535]  ? __asan_memcpy+0x40/0x70
[  103.979060][ T7535]  ? __pfx_ref_tracker_free+0x10/0x10
[  103.979083][ T7535]  netlink_rcv_skb+0x208/0x470
[  103.979099][ T7535]  ? __lock_acquire+0xab9/0xd20
[  103.979117][ T7535]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.979132][ T7535]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  103.979163][ T7535]  ? down_read+0x1ad/0x2e0
[  103.979183][ T7535]  genl_rcv+0x28/0x40
[  103.979196][ T7535]  netlink_unicast+0x82f/0x9e0
[  103.979218][ T7535]  ? __pfx_netlink_unicast+0x10/0x10
[  103.979236][ T7535]  ? netlink_sendmsg+0x642/0xb30
[  103.979251][ T7535]  ? skb_put+0x11b/0x210
[  103.979267][ T7535]  netlink_sendmsg+0x805/0xb30
[  103.979292][ T7535]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.979314][ T7535]  ? aa_sock_msg_perm+0xf1/0x1d0
[  103.979335][ T7535]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  103.979349][ T7535]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.979366][ T7535]  __sock_sendmsg+0x21c/0x270
[  103.979385][ T7535]  ____sys_sendmsg+0x505/0x830
[  103.979403][ T7535]  ? __pfx_____sys_sendmsg+0x10/0x10
[  103.979422][ T7535]  ? import_iovec+0x74/0xa0
[  103.979462][ T7535]  ___sys_sendmsg+0x21f/0x2a0
[  103.979480][ T7535]  ? __pfx____sys_sendmsg+0x10/0x10
[  103.979520][ T7535]  ? __fget_files+0x2a/0x420
[  103.979533][ T7535]  ? __fget_files+0x3a0/0x420
[  103.979552][ T7535]  __x64_sys_sendmsg+0x19b/0x260
[  103.979568][ T7535]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  103.979591][ T7535]  ? rcu_is_watching+0x15/0xb0
[  103.979608][ T7535]  ? do_syscall_64+0xbe/0x3b0
[  103.979629][ T7535]  do_syscall_64+0xfa/0x3b0
[  103.979645][ T7535]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.979660][ T7535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.979673][ T7535]  ? exc_page_fault+0x9f/0xf0
[  103.979689][ T7535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.979702][ T7535] RIP: 0033:0x7f29d0d8ebe9
[  103.979713][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.979724][ T7535] RSP: 002b:00007f29d1cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  103.979737][ T7535] RAX: ffffffffffffffda RBX: 00007f29d0fb5fa0 RCX: 00007f29d0d8ebe9
[  103.979747][ T7535] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[  103.979754][ T7535] RBP: 00007f29d0e11e19 R08: 0000000000000000 R09: 0000000000000000
[  103.979761][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.979769][ T7535] R13: 00007f29d0fb6038 R14: 00007f29d0fb5fa0 R15: 00007ffc4adb0058
[  103.979789][ T7535]  </TASK>
[  104.371426][ T7544] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.510'.
[  104.504942][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.513'.
[  104.517397][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.513'.
[  104.521489][ T7549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.513'.
[  104.618635][ T5842] Bluetooth: hci0: adv larger than maximum supported
[  104.669682][ T7563] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  104.672598][ T7563] CPU: 0 UID: 0 PID: 7563 Comm: syz.2.517 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  104.672609][ T7563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.672614][ T7563] Call Trace:
[  104.672618][ T7563]  <TASK>
[  104.672621][ T7563]  dump_stack_lvl+0x189/0x250
[  104.672635][ T7563]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.672645][ T7563]  ? __pfx__printk+0x10/0x10
[  104.672658][ T7563]  ? kernfs_path_from_node+0x2f/0x290
[  104.672667][ T7563]  ? kernfs_path_from_node+0x250/0x290
[  104.672674][ T7563]  ? kernfs_path_from_node+0x2f/0x290
[  104.672683][ T7563]  sysfs_warn_dup+0x8e/0xa0
[  104.672692][ T7563]  sysfs_do_create_link_sd+0xc0/0x110
[  104.672701][ T7563]  device_add_class_symlinks+0x1cf/0x240
[  104.672712][ T7563]  device_add+0x475/0xb50
[  104.672721][ T7563]  wiphy_register+0x1ba6/0x28d0
[  104.672738][ T7563]  ? __pfx_wiphy_register+0x10/0x10
[  104.672748][ T7563]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  104.672759][ T7563]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  104.672780][ T7563]  ieee80211_register_hw+0x3425/0x4080
[  104.672797][ T7563]  ? ieee80211_register_hw+0x1441/0x4080
[  104.672809][ T7563]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  104.672819][ T7563]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.672832][ T7563]  ? __hrtimer_setup+0x187/0x210
[  104.672839][ T7563]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  104.672851][ T7563]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  104.672872][ T7563]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  104.672882][ T7563]  ? trace_kmalloc+0x1f/0xd0
[  104.672890][ T7563]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  104.672899][ T7563]  ? kstrndup+0xbf/0x160
[  104.672911][ T7563]  hwsim_new_radio_nl+0xea4/0x1b10
[  104.672921][ T7563]  ? __pfx___nla_validate_parse+0x10/0x10
[  104.672939][ T7563]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  104.672953][ T7563]  ? __nla_parse+0x40/0x60
[  104.672965][ T7563]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  104.672977][ T7563]  genl_family_rcv_msg_doit+0x215/0x300
[  104.672988][ T7563]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  104.673002][ T7563]  ? bpf_lsm_capable+0x9/0x20
[  104.673011][ T7563]  ? security_capable+0x7e/0x2e0
[  104.673026][ T7563]  genl_rcv_msg+0x60e/0x790
[  104.673036][ T7563]  ? __pfx_genl_rcv_msg+0x10/0x10
[  104.673044][ T7563]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  104.673053][ T7563]  ? __asan_memcpy+0x40/0x70
[  104.673061][ T7563]  ? __pfx_ref_tracker_free+0x10/0x10
[  104.673074][ T7563]  netlink_rcv_skb+0x208/0x470
[  104.673083][ T7563]  ? __lock_acquire+0xab9/0xd20
[  104.673094][ T7563]  ? __pfx_genl_rcv_msg+0x10/0x10
[  104.673102][ T7563]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  104.673120][ T7563]  ? down_read+0x1ad/0x2e0
[  104.673132][ T7563]  genl_rcv+0x28/0x40
[  104.673138][ T7563]  netlink_unicast+0x82f/0x9e0
[  104.673151][ T7563]  ? __pfx_netlink_unicast+0x10/0x10
[  104.673161][ T7563]  ? netlink_sendmsg+0x642/0xb30
[  104.673170][ T7563]  ? skb_put+0x11b/0x210
[  104.673179][ T7563]  netlink_sendmsg+0x805/0xb30
[  104.673193][ T7563]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.673204][ T7563]  ? aa_sock_msg_perm+0xf1/0x1d0
[  104.673217][ T7563]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  104.673224][ T7563]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.673234][ T7563]  __sock_sendmsg+0x21c/0x270
[  104.673245][ T7563]  ____sys_sendmsg+0x505/0x830
[  104.673255][ T7563]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.673266][ T7563]  ? import_iovec+0x74/0xa0
[  104.673276][ T7563]  ___sys_sendmsg+0x21f/0x2a0
[  104.673284][ T7563]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.673307][ T7563]  ? __fget_files+0x2a/0x420
[  104.673313][ T7563]  ? __fget_files+0x3a0/0x420
[  104.673323][ T7563]  __x64_sys_sendmsg+0x19b/0x260
[  104.673332][ T7563]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  104.673362][ T7563]  ? rcu_is_watching+0x15/0xb0
[  104.673374][ T7563]  ? do_syscall_64+0xbe/0x3b0
[  104.673388][ T7563]  do_syscall_64+0xfa/0x3b0
[  104.673397][ T7563]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.673408][ T7563]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.673416][ T7563]  ? exc_page_fault+0x9f/0xf0
[  104.673447][ T7563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.673457][ T7563] RIP: 0033:0x7f29d0d8ebe9
[  104.673464][ T7563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.673471][ T7563] RSP: 002b:00007f29d1cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.673480][ T7563] RAX: ffffffffffffffda RBX: 00007f29d0fb5fa0 RCX: 00007f29d0d8ebe9
[  104.673486][ T7563] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[  104.673490][ T7563] RBP: 00007f29d0e11e19 R08: 0000000000000000 R09: 0000000000000000
[  104.673495][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.673499][ T7563] R13: 00007f29d0fb6038 R14: 00007f29d0fb5fa0 R15: 00007ffc4adb0058
[  104.673512][ T7563]  </TASK>
[  104.925975][ T7571] net_ratelimit: 385 callbacks suppressed
[  104.925991][ T7571] openvswitch: netlink: nsh attr 165 is out of range max 3
[  104.931668][ T7571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.588546][ T7582] netlink: 'syz.0.524': attribute type 1 has an invalid length.
[  105.591716][ T7582] netlink: 'syz.0.524': attribute type 1 has an invalid length.
[  105.746449][ T5842] Bluetooth: hci2: adv larger than maximum supported
[  106.699355][ T5842] Bluetooth: hci2: adv larger than maximum supported
[  107.297462][ T5842] Bluetooth: hci0: adv larger than maximum supported
[  107.651479][ T7686] __nla_validate_parse: 9 callbacks suppressed
[  107.651490][ T7686] netlink: 68 bytes leftover after parsing attributes in process `syz.2.558'.
[  107.784754][ T5842] Bluetooth: hci0: adv larger than maximum supported
[  108.228893][ T7694] netlink: 'syz.0.561': attribute type 5 has an invalid length.
[  108.235203][ T7694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.561'.
[  108.478261][ T5842] Bluetooth: hci1: adv larger than maximum supported
[  108.539266][ T7716] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  108.545203][ T7716] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  108.619998][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  109.163424][ T7740] netlink: 'syz.2.577': attribute type 4 has an invalid length.
[  109.168717][ T7740] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.577'.
[  109.881393][ T7763] netlink: 404 bytes leftover after parsing attributes in process `syz.1.584'.
[  110.201546][ T7769] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.587'.
[  110.256513][ T7771] netlink: 'syz.1.588': attribute type 2 has an invalid length.
[  110.259725][ T7771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.588'.
[  110.317937][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'.
[  110.519965][ T7789] netlink: 'syz.0.594': attribute type 12 has an invalid length.
[  110.522796][ T7789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.594'.
[  110.530037][ T7792] netlink: 'syz.0.594': attribute type 12 has an invalid length.
[  110.535901][ T7792] netlink: 132 bytes leftover after parsing attributes in process `syz.0.594'.
[  110.651155][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'.
[  110.989567][ T7829] !: renamed from bond_slave_0 (while UP)
[  111.211187][ T7854] netlink: 'syz.2.617': attribute type 2 has an invalid length.
[  111.354942][ T7863] netlink: 'syz.1.620': attribute type 21 has an invalid length.
[  111.530222][ T7882] : entered promiscuous mode
[  112.031102][ T7907] netlink: 'syz.0.633': attribute type 2 has an invalid length.
[  112.074920][ T7906] netlink: 'syz.0.633': attribute type 2 has an invalid length.
[  114.070296][ T7977] netlink: 'syz.0.655': attribute type 2 has an invalid length.
[  114.074494][ T7977] netlink: 'syz.0.655': attribute type 9 has an invalid length.
[  114.077103][ T7977] __nla_validate_parse: 10 callbacks suppressed
[  114.077109][ T7977] netlink: 132 bytes leftover after parsing attributes in process `syz.0.655'.
[  114.179313][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'.
[  114.185231][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'.
[  114.740452][ T8003] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.666'.
[  114.994013][ T8008] netlink: 'syz.2.666': attribute type 10 has an invalid length.
[  114.996712][ T8008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.666'.
[  115.000144][ T8008] batman_adv: batadv0: Adding interface: hsr_slave_1
[  115.002554][ T8008] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.010633][ T8008] batman_adv: batadv0: Interface activated: hsr_slave_1
[  115.101878][ T8019] netlink: 'syz.2.671': attribute type 4 has an invalid length.
[  115.104626][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'.
[  115.171876][ T8023] netlink: 'syz.0.667': attribute type 1 has an invalid length.
[  115.204873][ T8027] netlink: 124 bytes leftover after parsing attributes in process `syz.2.672'.
[  115.210403][ T8027] netlink: 132 bytes leftover after parsing attributes in process `syz.2.672'.
[  115.374120][ T8029] netlink: 188 bytes leftover after parsing attributes in process `syz.1.674'.
[  115.667015][ T8032] netlink: 188 bytes leftover after parsing attributes in process `syz.1.675'.
[  116.624564][ T8067] netlink: 'syz.1.688': attribute type 21 has an invalid length.
[  116.627917][ T8067] IPv6: NLM_F_CREATE should be specified when creating new route
[  116.840020][ T8074] syzkaller0: create flow: hash 3555091697 index 1
[  116.987570][ T8092] openvswitch: netlink: Flow actions attr not present in new flow.
[  117.225881][ T5714] syzkaller0: tun_net_xmit 76
[  117.232135][ T5714] syzkaller0: tun_net_xmit 48
[  117.247742][ T8062] syzkaller0: delete flow: hash 3555091697 index 1
[  118.036484][ T8107] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  118.039760][ T8107] CPU: 1 UID: 0 PID: 8107 Comm: syz.2.698 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  118.039776][ T8107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.039783][ T8107] Call Trace:
[  118.039789][ T8107]  <TASK>
[  118.039795][ T8107]  dump_stack_lvl+0x189/0x250
[  118.039814][ T8107]  ? kernfs_path_from_node+0x2f/0x290
[  118.039830][ T8107]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.039854][ T8107]  ? __pfx__printk+0x10/0x10
[  118.039875][ T8107]  ? kernfs_path_from_node+0x2f/0x290
[  118.039889][ T8107]  ? kernfs_path_from_node+0x250/0x290
[  118.039901][ T8107]  ? kernfs_path_from_node+0x2f/0x290
[  118.039918][ T8107]  sysfs_warn_dup+0x8e/0xa0
[  118.039932][ T8107]  sysfs_do_create_link_sd+0xc0/0x110
[  118.039948][ T8107]  device_add_class_symlinks+0x1cf/0x240
[  118.039966][ T8107]  device_add+0x475/0xb50
[  118.039984][ T8107]  wiphy_register+0x1ba6/0x28d0
[  118.040017][ T8107]  ? __pfx_wiphy_register+0x10/0x10
[  118.040034][ T8107]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  118.040055][ T8107]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  118.040079][ T8107]  ieee80211_register_hw+0x3425/0x4080
[  118.040108][ T8107]  ? ieee80211_register_hw+0x1441/0x4080
[  118.040129][ T8107]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  118.040146][ T8107]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  118.040169][ T8107]  ? __hrtimer_setup+0x187/0x210
[  118.040181][ T8107]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  118.040202][ T8107]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  118.040244][ T8107]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  118.040258][ T8107]  ? trace_kmalloc+0x1f/0xd0
[  118.040272][ T8107]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  118.040317][ T8107]  ? kstrndup+0xbf/0x160
[  118.040339][ T8107]  hwsim_new_radio_nl+0xea4/0x1b10
[  118.040359][ T8107]  ? __pfx___nla_validate_parse+0x10/0x10
[  118.040391][ T8107]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  118.040418][ T8107]  ? __nla_parse+0x40/0x60
[  118.040439][ T8107]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  118.040459][ T8107]  genl_family_rcv_msg_doit+0x215/0x300
[  118.040480][ T8107]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  118.040507][ T8107]  ? bpf_lsm_capable+0x9/0x20
[  118.040523][ T8107]  ? security_capable+0x7e/0x2e0
[  118.040544][ T8107]  genl_rcv_msg+0x60e/0x790
[  118.040562][ T8107]  ? __pfx_genl_rcv_msg+0x10/0x10
[  118.040574][ T8107]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  118.040588][ T8107]  ? __asan_memcpy+0x40/0x70
[  118.040600][ T8107]  ? __pfx_ref_tracker_free+0x10/0x10
[  118.040615][ T8107]  netlink_rcv_skb+0x208/0x470
[  118.040624][ T8107]  ? __lock_acquire+0xab9/0xd20
[  118.040634][ T8107]  ? __pfx_genl_rcv_msg+0x10/0x10
[  118.040643][ T8107]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.040662][ T8107]  ? down_read+0x1ad/0x2e0
[  118.040674][ T8107]  genl_rcv+0x28/0x40
[  118.040681][ T8107]  netlink_unicast+0x82f/0x9e0
[  118.040695][ T8107]  ? __pfx_netlink_unicast+0x10/0x10
[  118.040705][ T8107]  ? netlink_sendmsg+0x642/0xb30
[  118.040714][ T8107]  ? skb_put+0x11b/0x210
[  118.040723][ T8107]  netlink_sendmsg+0x805/0xb30
[  118.040738][ T8107]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.040750][ T8107]  ? aa_sock_msg_perm+0xf1/0x1d0
[  118.040763][ T8107]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  118.040771][ T8107]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.040781][ T8107]  __sock_sendmsg+0x21c/0x270
[  118.040792][ T8107]  ____sys_sendmsg+0x505/0x830
[  118.040803][ T8107]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.040815][ T8107]  ? import_iovec+0x74/0xa0
[  118.040825][ T8107]  ___sys_sendmsg+0x21f/0x2a0
[  118.040834][ T8107]  ? __pfx____sys_sendmsg+0x10/0x10
[  118.040858][ T8107]  ? __fget_files+0x2a/0x420
[  118.040872][ T8107]  ? __fget_files+0x2a/0x420
[  118.040877][ T8107]  ? __fget_files+0x3a0/0x420
[  118.040889][ T8107]  __x64_sys_sendmsg+0x19b/0x260
[  118.040898][ T8107]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  118.040911][ T8107]  ? rcu_is_watching+0x15/0xb0
[  118.040923][ T8107]  ? do_syscall_64+0xbe/0x3b0
[  118.040936][ T8107]  do_syscall_64+0xfa/0x3b0
[  118.040946][ T8107]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.040956][ T8107]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.040964][ T8107]  ? exc_page_fault+0x9f/0xf0
[  118.040974][ T8107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.040981][ T8107] RIP: 0033:0x7f29d0d8ebe9
[  118.040989][ T8107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.040995][ T8107] RSP: 002b:00007f29d1cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.041005][ T8107] RAX: ffffffffffffffda RBX: 00007f29d0fb5fa0 RCX: 00007f29d0d8ebe9
[  118.041010][ T8107] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[  118.041015][ T8107] RBP: 00007f29d0e11e19 R08: 0000000000000000 R09: 0000000000000000
[  118.041019][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.041023][ T8107] R13: 00007f29d0fb6038 R14: 00007f29d0fb5fa0 R15: 00007ffc4adb0058
[  118.041038][ T8107]  </TASK>
[  118.301816][ T8110] netlink: 'syz.2.699': attribute type 4 has an invalid length.
[  118.568231][ T8137] sit0: entered allmulticast mode
[  119.131995][ T8156] __nla_validate_parse: 8 callbacks suppressed
[  119.132008][ T8156] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.715'.
[  119.229388][    C0] Illegal XDP return value 16128 on prog  (id 721) dev veth1_to_team, expect packet loss!
[  119.449203][ T8177] netlink: 6 bytes leftover after parsing attributes in process `syz.0.718'.
[  119.499578][ T5842] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  119.572167][ T8190] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.722'.
[  120.044396][ T5842] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  120.093881][ T8230] lo speed is unknown, defaulting to 1000
[  120.096753][ T8230] lo speed is unknown, defaulting to 1000
[  120.099820][ T8230] lo speed is unknown, defaulting to 1000
[  120.113546][ T8230] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  120.140174][ T8230] lo speed is unknown, defaulting to 1000
[  120.147790][ T8230] lo speed is unknown, defaulting to 1000
[  120.151231][ T8230] lo speed is unknown, defaulting to 1000
[  120.164186][ T8230] netlink: 48 bytes leftover after parsing attributes in process `syz.2.731'.
[  120.368385][ T8239] netlink: 26 bytes leftover after parsing attributes in process `syz.1.733'.
[  120.562721][ T8249] netlink: 56 bytes leftover after parsing attributes in process `syz.0.736'.
[  120.722028][ T8247] syzkaller0: entered allmulticast mode
[  120.890517][ T8262] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  120.894433][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.0.739 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  120.894452][ T8262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.894459][ T8262] Call Trace:
[  120.894465][ T8262]  <TASK>
[  120.894471][ T8262]  dump_stack_lvl+0x189/0x250
[  120.894495][ T8262]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.894510][ T8262]  ? __pfx__printk+0x10/0x10
[  120.894531][ T8262]  ? kernfs_path_from_node+0x2f/0x290
[  120.894544][ T8262]  ? kernfs_path_from_node+0x250/0x290
[  120.894555][ T8262]  ? kernfs_path_from_node+0x2f/0x290
[  120.894570][ T8262]  sysfs_warn_dup+0x8e/0xa0
[  120.894582][ T8262]  sysfs_do_create_link_sd+0xc0/0x110
[  120.894597][ T8262]  device_add_class_symlinks+0x1cf/0x240
[  120.894615][ T8262]  device_add+0x475/0xb50
[  120.894631][ T8262]  wiphy_register+0x1ba6/0x28d0
[  120.894660][ T8262]  ? __pfx_wiphy_register+0x10/0x10
[  120.894674][ T8262]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  120.894695][ T8262]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  120.894717][ T8262]  ieee80211_register_hw+0x3425/0x4080
[  120.894744][ T8262]  ? ieee80211_register_hw+0x1441/0x4080
[  120.894763][ T8262]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  120.894779][ T8262]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.894803][ T8262]  ? __hrtimer_setup+0x187/0x210
[  120.894814][ T8262]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  120.894839][ T8262]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  120.894876][ T8262]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  120.894890][ T8262]  ? trace_kmalloc+0x1f/0xd0
[  120.894905][ T8262]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  120.894921][ T8262]  ? kstrndup+0xbf/0x160
[  120.894940][ T8262]  hwsim_new_radio_nl+0xea4/0x1b10
[  120.894957][ T8262]  ? __pfx___nla_validate_parse+0x10/0x10
[  120.894986][ T8262]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  120.895012][ T8262]  ? __nla_parse+0x40/0x60
[  120.895032][ T8262]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  120.895053][ T8262]  genl_family_rcv_msg_doit+0x215/0x300
[  120.895072][ T8262]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  120.895096][ T8262]  ? bpf_lsm_capable+0x9/0x20
[  120.895112][ T8262]  ? security_capable+0x7e/0x2e0
[  120.895136][ T8262]  genl_rcv_msg+0x60e/0x790
[  120.895154][ T8262]  ? __pfx_genl_rcv_msg+0x10/0x10
[  120.895167][ T8262]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  120.895183][ T8262]  ? __asan_memcpy+0x40/0x70
[  120.895197][ T8262]  ? __pfx_ref_tracker_free+0x10/0x10
[  120.895221][ T8262]  netlink_rcv_skb+0x208/0x470
[  120.895237][ T8262]  ? __lock_acquire+0xab9/0xd20
[  120.895291][ T8262]  ? __pfx_genl_rcv_msg+0x10/0x10
[  120.895307][ T8262]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  120.895340][ T8262]  ? down_read+0x1ad/0x2e0
[  120.895361][ T8262]  genl_rcv+0x28/0x40
[  120.895395][ T8262]  netlink_unicast+0x82f/0x9e0
[  120.895417][ T8262]  ? __pfx_netlink_unicast+0x10/0x10
[  120.895456][ T8262]  ? netlink_sendmsg+0x642/0xb30
[  120.895473][ T8262]  ? skb_put+0x11b/0x210
[  120.895488][ T8262]  netlink_sendmsg+0x805/0xb30
[  120.895514][ T8262]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.895534][ T8262]  ? aa_sock_msg_perm+0xf1/0x1d0
[  120.895555][ T8262]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  120.895568][ T8262]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.895585][ T8262]  __sock_sendmsg+0x21c/0x270
[  120.895604][ T8262]  ____sys_sendmsg+0x505/0x830
[  120.895622][ T8262]  ? __pfx_____sys_sendmsg+0x10/0x10
[  120.895640][ T8262]  ? import_iovec+0x74/0xa0
[  120.895656][ T8262]  ___sys_sendmsg+0x21f/0x2a0
[  120.895669][ T8262]  ? __pfx____sys_sendmsg+0x10/0x10
[  120.895707][ T8262]  ? __fget_files+0x2a/0x420
[  120.895717][ T8262]  ? __fget_files+0x3a0/0x420
[  120.895734][ T8262]  __x64_sys_sendmsg+0x19b/0x260
[  120.895749][ T8262]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  120.895772][ T8262]  ? rcu_is_watching+0x15/0xb0
[  120.895786][ T8262]  ? do_syscall_64+0xbe/0x3b0
[  120.895806][ T8262]  do_syscall_64+0xfa/0x3b0
[  120.895821][ T8262]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.895845][ T8262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.895856][ T8262]  ? exc_page_fault+0x9f/0xf0
[  120.895874][ T8262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.895884][ T8262] RIP: 0033:0x7fbf8458ebe9
[  120.895895][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.895905][ T8262] RSP: 002b:00007fbf8539b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.895920][ T8262] RAX: ffffffffffffffda RBX: 00007fbf847b5fa0 RCX: 00007fbf8458ebe9
[  120.895929][ T8262] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[  120.895937][ T8262] RBP: 00007fbf84611e19 R08: 0000000000000000 R09: 0000000000000000
[  120.895945][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.895952][ T8262] R13: 00007fbf847b6038 R14: 00007fbf847b5fa0 R15: 00007fff628cca18
[  120.895974][ T8262]  </TASK>
[  121.544412][ T8282] netlink: 120 bytes leftover after parsing attributes in process `syz.1.746'.
[  121.577706][ T8284] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  121.580855][ T8284] CPU: 0 UID: 0 PID: 8284 Comm: syz.2.747 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  121.580871][ T8284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.580878][ T8284] Call Trace:
[  121.580888][ T8284]  <TASK>
[  121.580901][ T8284]  dump_stack_lvl+0x189/0x250
[  121.580928][ T8284]  ? kernfs_path_from_node+0x2f/0x290
[  121.580952][ T8284]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.580974][ T8284]  ? __pfx__printk+0x10/0x10
[  121.581019][ T8284]  ? kernfs_path_from_node+0x2f/0x290
[  121.581034][ T8284]  ? kernfs_path_from_node+0x250/0x290
[  121.581047][ T8284]  ? kernfs_path_from_node+0x2f/0x290
[  121.581080][ T8284]  sysfs_warn_dup+0x8e/0xa0
[  121.581102][ T8284]  sysfs_do_create_link_sd+0xc0/0x110
[  121.581131][ T8284]  device_add_class_symlinks+0x1cf/0x240
[  121.581163][ T8284]  device_add+0x475/0xb50
[  121.581200][ T8284]  wiphy_register+0x1ba6/0x28d0
[  121.581307][ T8284]  ? __pfx_wiphy_register+0x10/0x10
[  121.581330][ T8284]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  121.581377][ T8284]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  121.581420][ T8284]  ieee80211_register_hw+0x3425/0x4080
[  121.581496][ T8284]  ? ieee80211_register_hw+0x1441/0x4080
[  121.581543][ T8284]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  121.581575][ T8284]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.581622][ T8284]  ? __hrtimer_setup+0x187/0x210
[  121.581635][ T8284]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  121.581668][ T8284]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  121.581802][ T8284]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  121.581820][ T8284]  ? trace_kmalloc+0x1f/0xd0
[  121.581835][ T8284]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  121.581855][ T8284]  ? kstrndup+0xbf/0x160
[  121.581934][ T8284]  hwsim_new_radio_nl+0xea4/0x1b10
[  121.581969][ T8284]  ? __pfx___nla_validate_parse+0x10/0x10
[  121.582042][ T8284]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  121.582112][ T8284]  ? __nla_parse+0x40/0x60
[  121.582151][ T8284]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  121.582199][ T8284]  genl_family_rcv_msg_doit+0x215/0x300
[  121.582267][ T8284]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  121.582334][ T8284]  ? bpf_lsm_capable+0x9/0x20
[  121.582350][ T8284]  ? security_capable+0x7e/0x2e0
[  121.582399][ T8284]  genl_rcv_msg+0x60e/0x790
[  121.582444][ T8284]  ? __pfx_genl_rcv_msg+0x10/0x10
[  121.582461][ T8284]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  121.582490][ T8284]  ? __asan_memcpy+0x40/0x70
[  121.582509][ T8284]  ? __pfx_ref_tracker_free+0x10/0x10
[  121.582560][ T8284]  netlink_rcv_skb+0x208/0x470
[  121.582577][ T8284]  ? __lock_acquire+0xab9/0xd20
[  121.582602][ T8284]  ? __pfx_genl_rcv_msg+0x10/0x10
[  121.582628][ T8284]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  121.582719][ T8284]  ? down_read+0x1ad/0x2e0
[  121.582752][ T8284]  genl_rcv+0x28/0x40
[  121.582767][ T8284]  netlink_unicast+0x82f/0x9e0
[  121.582823][ T8284]  ? __pfx_netlink_unicast+0x10/0x10
[  121.582853][ T8284]  ? netlink_sendmsg+0x642/0xb30
[  121.582869][ T8284]  ? skb_put+0x11b/0x210
[  121.582907][ T8284]  netlink_sendmsg+0x805/0xb30
[  121.582965][ T8284]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.583002][ T8284]  ? aa_sock_msg_perm+0xf1/0x1d0
[  121.583034][ T8284]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  121.583050][ T8284]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.583077][ T8284]  __sock_sendmsg+0x21c/0x270
[  121.583112][ T8284]  ____sys_sendmsg+0x505/0x830
[  121.583154][ T8284]  ? __pfx_____sys_sendmsg+0x10/0x10
[  121.583209][ T8284]  ? import_iovec+0x74/0xa0
[  121.583268][ T8284]  ___sys_sendmsg+0x21f/0x2a0
[  121.583299][ T8284]  ? __pfx____sys_sendmsg+0x10/0x10
[  121.583398][ T8284]  ? __fget_files+0x2a/0x420
[  121.583461][ T8284]  ? __fget_files+0x2a/0x420
[  121.583474][ T8284]  ? __fget_files+0x3a0/0x420
[  121.583530][ T8284]  __x64_sys_sendmsg+0x19b/0x260
[  121.583560][ T8284]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  121.583618][ T8284]  ? rcu_is_watching+0x15/0xb0
[  121.583654][ T8284]  ? do_syscall_64+0xbe/0x3b0
[  121.583691][ T8284]  do_syscall_64+0xfa/0x3b0
[  121.583708][ T8284]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.583728][ T8284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.583743][ T8284]  ? exc_page_fault+0x9f/0xf0
[  121.583774][ T8284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.583786][ T8284] RIP: 0033:0x7f29d0d8ebe9
[  121.583805][ T8284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.583815][ T8284] RSP: 002b:00007f29d1cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.583828][ T8284] RAX: ffffffffffffffda RBX: 00007f29d0fb5fa0 RCX: 00007f29d0d8ebe9
[  121.583837][ T8284] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[  121.583844][ T8284] RBP: 00007f29d0e11e19 R08: 0000000000000000 R09: 0000000000000000
[  121.583851][ T8284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.583859][ T8284] R13: 00007f29d0fb6038 R14: 00007f29d0fb5fa0 R15: 00007ffc4adb0058
[  121.583933][ T8284]  </TASK>
[  121.879384][ T8291] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.749'.
[  122.042803][ T8299] netlink: 'syz.0.752': attribute type 8 has an invalid length.
[  122.046618][ T8299] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.752'.
[  122.508324][ T8326] netlink: 'syz.1.759': attribute type 1 has an invalid length.
[  122.515004][ T8326] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.759'.
[  122.568716][ T8333] netlink: 'syz.0.762': attribute type 1 has an invalid length.
[  122.575086][ T8333] netlink: 'syz.0.762': attribute type 3 has an invalid length.
[  122.620818][ T8336] netlink: 'syz.0.763': attribute type 10 has an invalid length.
[  123.089473][ T5842] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[  123.809969][ T5842] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  124.321465][ T8427] __nla_validate_parse: 3 callbacks suppressed
[  124.321478][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'.
[  124.416610][ T8436] netlink: 'syz.2.794': attribute type 1 has an invalid length.
[  124.484909][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.797'.
[  124.778024][ T8466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.804'.
[  124.848642][ T8470] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  124.925224][   T13] tipc: Subscription rejected, illegal request
[  125.017432][ T8490] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  125.021777][ T8490] CPU: 1 UID: 0 PID: 8490 Comm: syz.1.812 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  125.021795][ T8490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.021803][ T8490] Call Trace:
[  125.021808][ T8490]  <TASK>
[  125.021814][ T8490]  dump_stack_lvl+0x189/0x250
[  125.021836][ T8490]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.021853][ T8490]  ? __pfx__printk+0x10/0x10
[  125.021876][ T8490]  ? kernfs_path_from_node+0x2f/0x290
[  125.021890][ T8490]  ? kernfs_path_from_node+0x250/0x290
[  125.021902][ T8490]  ? kernfs_path_from_node+0x2f/0x290
[  125.021946][ T8490]  sysfs_warn_dup+0x8e/0xa0
[  125.021960][ T8490]  sysfs_do_create_link_sd+0xc0/0x110
[  125.021975][ T8490]  device_add_class_symlinks+0x1cf/0x240
[  125.021993][ T8490]  device_add+0x475/0xb50
[  125.022009][ T8490]  wiphy_register+0x1ba6/0x28d0
[  125.022040][ T8490]  ? __pfx_wiphy_register+0x10/0x10
[  125.022057][ T8490]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  125.022076][ T8490]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  125.022101][ T8490]  ieee80211_register_hw+0x3425/0x4080
[  125.022128][ T8490]  ? ieee80211_register_hw+0x1441/0x4080
[  125.022149][ T8490]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  125.022165][ T8490]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  125.022187][ T8490]  ? __hrtimer_setup+0x187/0x210
[  125.022227][ T8490]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  125.022250][ T8490]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  125.022290][ T8490]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  125.022306][ T8490]  ? trace_kmalloc+0x1f/0xd0
[  125.022321][ T8490]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  125.022338][ T8490]  ? kstrndup+0xbf/0x160
[  125.022361][ T8490]  hwsim_new_radio_nl+0xea4/0x1b10
[  125.022378][ T8490]  ? __pfx___nla_validate_parse+0x10/0x10
[  125.022408][ T8490]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  125.022433][ T8490]  ? __nla_parse+0x40/0x60
[  125.022454][ T8490]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  125.022476][ T8490]  genl_family_rcv_msg_doit+0x215/0x300
[  125.022495][ T8490]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  125.022526][ T8490]  ? bpf_lsm_capable+0x9/0x20
[  125.022543][ T8490]  ? security_capable+0x7e/0x2e0
[  125.022568][ T8490]  genl_rcv_msg+0x60e/0x790
[  125.022587][ T8490]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.022601][ T8490]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  125.022619][ T8490]  ? __asan_memcpy+0x40/0x70
[  125.022634][ T8490]  ? __pfx_ref_tracker_free+0x10/0x10
[  125.022659][ T8490]  netlink_rcv_skb+0x208/0x470
[  125.022675][ T8490]  ? __lock_acquire+0xab9/0xd20
[  125.022694][ T8490]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.022709][ T8490]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.022741][ T8490]  ? down_read+0x1ad/0x2e0
[  125.022761][ T8490]  genl_rcv+0x28/0x40
[  125.022772][ T8490]  netlink_unicast+0x82f/0x9e0
[  125.022795][ T8490]  ? __pfx_netlink_unicast+0x10/0x10
[  125.022813][ T8490]  ? netlink_sendmsg+0x642/0xb30
[  125.022828][ T8490]  ? skb_put+0x11b/0x210
[  125.022842][ T8490]  netlink_sendmsg+0x805/0xb30
[  125.022868][ T8490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.022888][ T8490]  ? aa_sock_msg_perm+0xf1/0x1d0
[  125.022909][ T8490]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  125.022922][ T8490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.022941][ T8490]  __sock_sendmsg+0x21c/0x270
[  125.022960][ T8490]  ____sys_sendmsg+0x505/0x830
[  125.022978][ T8490]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.022998][ T8490]  ? import_iovec+0x74/0xa0
[  125.023015][ T8490]  ___sys_sendmsg+0x21f/0x2a0
[  125.023030][ T8490]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.023070][ T8490]  ? __fget_files+0x2a/0x420
[  125.023081][ T8490]  ? __fget_files+0x3a0/0x420
[  125.023101][ T8490]  __x64_sys_sendmsg+0x19b/0x260
[  125.023116][ T8490]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  125.023137][ T8490]  ? rcu_is_watching+0x15/0xb0
[  125.023155][ T8490]  ? do_syscall_64+0xbe/0x3b0
[  125.023175][ T8490]  do_syscall_64+0xfa/0x3b0
[  125.023191][ T8490]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.023237][ T8490]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.023251][ T8490]  ? exc_page_fault+0x9f/0xf0
[  125.023269][ T8490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.023281][ T8490] RIP: 0033:0x7f962358ebe9
[  125.023295][ T8490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.023305][ T8490] RSP: 002b:00007f96244d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.023320][ T8490] RAX: ffffffffffffffda RBX: 00007f96237b5fa0 RCX: 00007f962358ebe9
[  125.023330][ T8490] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[  125.023338][ T8490] RBP: 00007f9623611e19 R08: 0000000000000000 R09: 0000000000000000
[  125.023345][ T8490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.023353][ T8490] R13: 00007f96237b6038 R14: 00007f96237b5fa0 R15: 00007fff7fd532d8
[  125.023375][ T8490]  </TASK>
[  125.038244][ T8485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.092786][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'.
[  125.130137][ T8486] netlink: 56 bytes leftover after parsing attributes in process `syz.2.810'.
[  125.852584][ T5842] Bluetooth: hci1: command tx timeout
[  126.358936][ T8509] netlink: 60 bytes leftover after parsing attributes in process `syz.2.817'.
[  126.416269][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'.
[  126.427242][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.821'.
[  126.477325][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'.
[  126.701352][ T8538] syzkaller0: entered promiscuous mode
[  126.704948][ T8538] syzkaller0: entered allmulticast mode
[  126.852985][ T8549] netlink: 164 bytes leftover after parsing attributes in process `syz.2.831'.
[  127.848916][ T8556] netlink: 'syz.2.833': attribute type 10 has an invalid length.
[  128.265865][ T8566] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  128.268907][ T8566] CPU: 1 UID: 0 PID: 8566 Comm: syz.1.836 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  128.268923][ T8566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.268930][ T8566] Call Trace:
[  128.268935][ T8566]  <TASK>
[  128.268942][ T8566]  dump_stack_lvl+0x189/0x250
[  128.268962][ T8566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.268979][ T8566]  ? __pfx__printk+0x10/0x10
[  128.269000][ T8566]  ? kernfs_path_from_node+0x2f/0x290
[  128.269014][ T8566]  ? kernfs_path_from_node+0x250/0x290
[  128.269026][ T8566]  ? kernfs_path_from_node+0x2f/0x290
[  128.269042][ T8566]  sysfs_warn_dup+0x8e/0xa0
[  128.269054][ T8566]  sysfs_do_create_link_sd+0xc0/0x110
[  128.269070][ T8566]  device_add_class_symlinks+0x1cf/0x240
[  128.269086][ T8566]  device_add+0x475/0xb50
[  128.269101][ T8566]  wiphy_register+0x1ba6/0x28d0
[  128.269129][ T8566]  ? __pfx_wiphy_register+0x10/0x10
[  128.269146][ T8566]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  128.269203][ T8566]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  128.269227][ T8566]  ieee80211_register_hw+0x3425/0x4080
[  128.269251][ T8566]  ? ieee80211_register_hw+0x1441/0x4080
[  128.269270][ T8566]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  128.269288][ T8566]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.269309][ T8566]  ? __hrtimer_setup+0x187/0x210
[  128.269320][ T8566]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  128.269339][ T8566]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  128.269374][ T8566]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  128.269388][ T8566]  ? trace_kmalloc+0x1f/0xd0
[  128.269402][ T8566]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  128.269419][ T8566]  ? kstrndup+0xbf/0x160
[  128.269440][ T8566]  hwsim_new_radio_nl+0xea4/0x1b10
[  128.269458][ T8566]  ? __pfx___nla_validate_parse+0x10/0x10
[  128.269485][ T8566]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  128.269508][ T8566]  ? __nla_parse+0x40/0x60
[  128.269528][ T8566]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  128.269548][ T8566]  genl_family_rcv_msg_doit+0x215/0x300
[  128.269573][ T8566]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  128.269595][ T8566]  ? bpf_lsm_capable+0x9/0x20
[  128.269612][ T8566]  ? security_capable+0x7e/0x2e0
[  128.269634][ T8566]  genl_rcv_msg+0x60e/0x790
[  128.269653][ T8566]  ? __pfx_genl_rcv_msg+0x10/0x10
[  128.269667][ T8566]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  128.269682][ T8566]  ? __asan_memcpy+0x40/0x70
[  128.269698][ T8566]  ? __pfx_ref_tracker_free+0x10/0x10
[  128.269718][ T8566]  netlink_rcv_skb+0x208/0x470
[  128.269733][ T8566]  ? __lock_acquire+0xab9/0xd20
[  128.269751][ T8566]  ? __pfx_genl_rcv_msg+0x10/0x10
[  128.269765][ T8566]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  128.269793][ T8566]  ? down_read+0x1ad/0x2e0
[  128.269814][ T8566]  genl_rcv+0x28/0x40
[  128.269825][ T8566]  netlink_unicast+0x82f/0x9e0
[  128.269846][ T8566]  ? __pfx_netlink_unicast+0x10/0x10
[  128.269862][ T8566]  ? netlink_sendmsg+0x642/0xb30
[  128.269878][ T8566]  ? skb_put+0x11b/0x210
[  128.269892][ T8566]  netlink_sendmsg+0x805/0xb30
[  128.269915][ T8566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.269934][ T8566]  ? aa_sock_msg_perm+0xf1/0x1d0
[  128.269953][ T8566]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  128.269965][ T8566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.269983][ T8566]  __sock_sendmsg+0x21c/0x270
[  128.270001][ T8566]  ____sys_sendmsg+0x505/0x830
[  128.270016][ T8566]  ? __pfx_____sys_sendmsg+0x10/0x10
[  128.270036][ T8566]  ? import_iovec+0x74/0xa0
[  128.270053][ T8566]  ___sys_sendmsg+0x21f/0x2a0
[  128.270067][ T8566]  ? __pfx____sys_sendmsg+0x10/0x10
[  128.270104][ T8566]  ? __fget_files+0x2a/0x420
[  128.270116][ T8566]  ? __fget_files+0x3a0/0x420
[  128.270133][ T8566]  __x64_sys_sendmsg+0x19b/0x260
[  128.270147][ T8566]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  128.270191][ T8566]  ? rcu_is_watching+0x15/0xb0
[  128.270208][ T8566]  ? do_syscall_64+0xbe/0x3b0
[  128.270230][ T8566]  do_syscall_64+0xfa/0x3b0
[  128.270247][ T8566]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.270262][ T8566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.270274][ T8566]  ? exc_page_fault+0x9f/0xf0
[  128.270292][ T8566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.270305][ T8566] RIP: 0033:0x7f962358ebe9
[  128.270316][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.270325][ T8566] RSP: 002b:00007f96244d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.270339][ T8566] RAX: ffffffffffffffda RBX: 00007f96237b5fa0 RCX: 00007f962358ebe9
[  128.270348][ T8566] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[  128.270355][ T8566] RBP: 00007f9623611e19 R08: 0000000000000000 R09: 0000000000000000
[  128.270363][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.270371][ T8566] R13: 00007f96237b6038 R14: 00007f96237b5fa0 R15: 00007fff7fd532d8
[  128.270392][ T8566]  </TASK>
[  128.697870][ T8578] netlink: 'syz.0.841': attribute type 21 has an invalid length.
[  128.708878][ T8580] netlink: 'syz.1.842': attribute type 11 has an invalid length.
[  128.708938][ T8581] netlink: 'syz.1.842': attribute type 11 has an invalid length.
[  129.220995][ T8600] openvswitch: netlink: Actions may not be safe on all matching packets
[  129.488416][ T8612] netlink: 'syz.2.853': attribute type 12 has an invalid length.
[  129.504018][ T8612] __nla_validate_parse: 7 callbacks suppressed
[  129.504029][ T8612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.853'.
[  129.618888][ T8616] netlink: 202232 bytes leftover after parsing attributes in process `syz.2.854'.
[  129.628134][ T8616] netlink: zone id is out of range
[  129.630018][ T8616] netlink: zone id is out of range
[  129.635778][ T8616] netlink: zone id is out of range
[  129.637686][ T8616] netlink: zone id is out of range
[  129.639780][ T8616] netlink: zone id is out of range
[  129.654877][ T8616] netlink: zone id is out of range
[  129.658915][ T8616] netlink: zone id is out of range
[  129.669808][ T8621] net veth1_virt_wifi : renamed from virt_wifi0
[  129.808391][ T8622] netlink: 'syz.0.856': attribute type 4 has an invalid length.
[  129.906508][ T8628] C: renamed from team_slave_0
[  130.540754][ T8628] netlink: 'syz.2.858': attribute type 4 has an invalid length.
[  130.547924][ T8628] netlink: 116 bytes leftover after parsing attributes in process `syz.2.858'.
[  130.551505][ T8628] net_ratelimit: 8 callbacks suppressed
[  130.551515][ T8628] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  131.025929][ T8653] netlink: 140 bytes leftover after parsing attributes in process `syz.0.865'.
[  131.029881][ T8653] netlink: 6 bytes leftover after parsing attributes in process `syz.0.865'.
[  131.075050][ T8655] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  131.078264][ T8655] CPU: 1 UID: 0 PID: 8655 Comm: syz.2.866 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  131.078282][ T8655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.078290][ T8655] Call Trace:
[  131.078295][ T8655]  <TASK>
[  131.078301][ T8655]  dump_stack_lvl+0x189/0x250
[  131.078325][ T8655]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.078342][ T8655]  ? __pfx__printk+0x10/0x10
[  131.078364][ T8655]  ? kernfs_path_from_node+0x2f/0x290
[  131.078379][ T8655]  ? kernfs_path_from_node+0x250/0x290
[  131.078393][ T8655]  ? kernfs_path_from_node+0x2f/0x290
[  131.078409][ T8655]  sysfs_warn_dup+0x8e/0xa0
[  131.078423][ T8655]  sysfs_do_create_link_sd+0xc0/0x110
[  131.078439][ T8655]  device_add_class_symlinks+0x1cf/0x240
[  131.078456][ T8655]  device_add+0x475/0xb50
[  131.078474][ T8655]  wiphy_register+0x1ba6/0x28d0
[  131.078506][ T8655]  ? __pfx_wiphy_register+0x10/0x10
[  131.078522][ T8655]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  131.078542][ T8655]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  131.078565][ T8655]  ieee80211_register_hw+0x3425/0x4080
[  131.078591][ T8655]  ? ieee80211_register_hw+0x1441/0x4080
[  131.078610][ T8655]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  131.078627][ T8655]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  131.078649][ T8655]  ? __hrtimer_setup+0x187/0x210
[  131.078660][ T8655]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  131.078681][ T8655]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  131.078725][ T8655]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  131.078739][ T8655]  ? trace_kmalloc+0x1f/0xd0
[  131.078755][ T8655]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  131.078773][ T8655]  ? kstrndup+0xbf/0x160
[  131.078793][ T8655]  hwsim_new_radio_nl+0xea4/0x1b10
[  131.078812][ T8655]  ? __pfx___nla_validate_parse+0x10/0x10
[  131.078843][ T8655]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  131.078870][ T8655]  ? __nla_parse+0x40/0x60
[  131.078893][ T8655]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  131.078914][ T8655]  genl_family_rcv_msg_doit+0x215/0x300
[  131.078933][ T8655]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  131.078957][ T8655]  ? bpf_lsm_capable+0x9/0x20
[  131.078973][ T8655]  ? security_capable+0x7e/0x2e0
[  131.078999][ T8655]  genl_rcv_msg+0x60e/0x790
[  131.079025][ T8655]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.079038][ T8655]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  131.079055][ T8655]  ? __asan_memcpy+0x40/0x70
[  131.079069][ T8655]  ? __pfx_ref_tracker_free+0x10/0x10
[  131.079092][ T8655]  netlink_rcv_skb+0x208/0x470
[  131.079109][ T8655]  ? __lock_acquire+0xab9/0xd20
[  131.079155][ T8655]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.079172][ T8655]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  131.079204][ T8655]  ? down_read+0x1ad/0x2e0
[  131.079226][ T8655]  genl_rcv+0x28/0x40
[  131.079239][ T8655]  netlink_unicast+0x82f/0x9e0
[  131.079262][ T8655]  ? __pfx_netlink_unicast+0x10/0x10
[  131.079280][ T8655]  ? netlink_sendmsg+0x642/0xb30
[  131.079296][ T8655]  ? skb_put+0x11b/0x210
[  131.079311][ T8655]  netlink_sendmsg+0x805/0xb30
[  131.079337][ T8655]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.079357][ T8655]  ? aa_sock_msg_perm+0xf1/0x1d0
[  131.079378][ T8655]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  131.079391][ T8655]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.079410][ T8655]  __sock_sendmsg+0x21c/0x270
[  131.079429][ T8655]  ____sys_sendmsg+0x505/0x830
[  131.079447][ T8655]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.079466][ T8655]  ? import_iovec+0x74/0xa0
[  131.079484][ T8655]  ___sys_sendmsg+0x21f/0x2a0
[  131.079499][ T8655]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.079559][ T8655]  ? __fget_files+0x2a/0x420
[  131.079571][ T8655]  ? __fget_files+0x3a0/0x420
[  131.079592][ T8655]  __x64_sys_sendmsg+0x19b/0x260
[  131.079607][ T8655]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  131.079629][ T8655]  ? rcu_is_watching+0x15/0xb0
[  131.079649][ T8655]  ? do_syscall_64+0xbe/0x3b0
[  131.079672][ T8655]  do_syscall_64+0xfa/0x3b0
[  131.079688][ T8655]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.079710][ T8655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.079724][ T8655]  ? exc_page_fault+0x9f/0xf0
[  131.079741][ T8655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.079755][ T8655] RIP: 0033:0x7f29d0d8ebe9
[  131.079767][ T8655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.079786][ T8655] RSP: 002b:00007f29d1cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.079799][ T8655] RAX: ffffffffffffffda RBX: 00007f29d0fb5fa0 RCX: 00007f29d0d8ebe9
[  131.079811][ T8655] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[  131.079818][ T8655] RBP: 00007f29d0e11e19 R08: 0000000000000000 R09: 0000000000000000
[  131.079827][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.079834][ T8655] R13: 00007f29d0fb6038 R14: 00007f29d0fb5fa0 R15: 00007ffc4adb0058
[  131.079856][ T8655]  </TASK>
[  131.280678][ T8656] netlink: 'syz.0.865': attribute type 7 has an invalid length.
[  131.283887][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'.
[  132.264229][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'.
[  132.623559][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.626229][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.358530][ T8682] netlink: 148 bytes leftover after parsing attributes in process `syz.1.876'.
[  133.402506][ T8684] netlink: 388 bytes leftover after parsing attributes in process `syz.2.877'.
[  134.297905][ T8701] netlink: 'syz.1.883': attribute type 1 has an invalid length.
[  134.309345][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.883'.
[  134.317240][ T8701] netlink: 'syz.1.883': attribute type 4 has an invalid length.
[  134.546482][ T8711] netlink: 'syz.1.886': attribute type 1 has an invalid length.
[  134.647429][ T8718] __nla_validate_parse: 1 callbacks suppressed
[  134.647542][ T8718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.889'.
[  134.654784][ T8718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.889'.
[  134.919413][ T8740] netlink: 2 bytes leftover after parsing attributes in process `syz.1.897'.
[  135.033959][ T8748] netlink: 388 bytes leftover after parsing attributes in process `syz.1.899'.
[  135.091759][ T8748] lo speed is unknown, defaulting to 1000
[  135.233579][ T8761] syzkaller0: entered promiscuous mode
[  135.235364][ T8761] syzkaller0: entered allmulticast mode
[  135.290895][ T8749] lo speed is unknown, defaulting to 1000
[  135.500192][ T8766] netlink: 'syz.2.903': attribute type 3 has an invalid length.
[  135.506314][ T8766] netlink: 152 bytes leftover after parsing attributes in process `syz.2.903'.
[  135.622754][ T8768] delete_channel: no stack
[  135.646776][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.904'.
[  135.933122][ T8778] netlink: 'syz.2.907': attribute type 46 has an invalid length.
[  135.937166][ T8778] netlink: 55 bytes leftover after parsing attributes in process `syz.2.907'.
[  135.953534][ T8781] netlink: 132 bytes leftover after parsing attributes in process `syz.1.909'.
[  136.020577][ T8782] netlink: 48 bytes leftover after parsing attributes in process `syz.0.908'.
[  136.098448][ T8784] netlink: 'syz.1.910': attribute type 2 has an invalid length.
[  136.102086][ T8784] netlink: 132 bytes leftover after parsing attributes in process `syz.1.910'.
[  138.604966][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2692243512 wd_nsec: 2692243317
[  153.374245][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  153.521259][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  153.525304][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  153.529222][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  153.533496][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  153.536035][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  153.539460][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  153.542253][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  153.545525][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  153.549167][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  153.553618][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  153.556858][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  153.559249][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  153.562371][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  153.565212][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  153.591241][ T8795] lo speed is unknown, defaulting to 1000
[  153.658402][ T8799] lo speed is unknown, defaulting to 1000
[  153.696626][ T8802] lo speed is unknown, defaulting to 1000
[  153.781935][    C0] sched: DL replenish lagged too much
[  153.974468][ T8799] chnl_net:caif_netlink_parms(): no params data found
[  155.713254][ T5845] Bluetooth: hci3: command tx timeout
[  155.716937][ T5845] Bluetooth: hci4: command tx timeout
[  155.719476][ T5845] Bluetooth: hci5: command tx timeout
[  157.774133][ T5845] Bluetooth: hci4: command tx timeout
[  157.776543][ T5845] Bluetooth: hci3: command tx timeout
[  157.780184][ T5842] Bluetooth: hci5: command tx timeout
[  159.852242][ T5842] Bluetooth: hci3: command tx timeout
[  159.854555][ T5842] Bluetooth: hci4: command tx timeout
[  159.856862][   T54] Bluetooth: hci5: command tx timeout
[  161.932228][ T5845] Bluetooth: hci4: command tx timeout
[  161.934635][ T5845] Bluetooth: hci3: command tx timeout
[  161.936938][   T54] Bluetooth: hci5: command tx timeout
[  180.665856][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  193.924449][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.926484][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  199.174509][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 25601662933 wd_nsec: 25601663838
[  202.814842][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  214.819127][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  214.836195][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  214.841563][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  214.873077][ T5852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  214.876877][ T5852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  214.879696][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  214.888984][ T5852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  214.891880][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  214.897624][ T5852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  214.913700][ T5852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  214.978278][ T5848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  214.982127][ T5848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  214.995681][ T5848] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  214.999608][ T5848] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  215.003043][ T5848] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  255.294581][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.297345][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  271.031916][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  271.034675][    C1] rcu: 	1-....: (10468 ticks this GP) idle=8914/1/0x4000000000000000 softirq=25863/25864 fqs=4398
[  271.040965][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  271.044021][    C1] rcu: 	 number:   918427          0            0
[  271.047056][    C1] rcu: 	cputime:    34589      17900           51   ==> 52490(ms)
[  271.050301][    C1] rcu: 	(t=10500 jiffies g=20561 q=2114 ncpus=2)
[  271.052731][    C1] CPU: 1 UID: 0 PID: 8784 Comm: syz.1.910 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  271.052740][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.052745][    C1] RIP: 0010:unwind_next_frame+0x130e/0x2390
[  271.052757][    C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49
[  271.052763][    C1] RSP: 0018:ffffc900001dfd38 EFLAGS: 00000a03
[  271.052770][    C1] RAX: 0000000000000000 RBX: ffffffff8fba1fd8 RCX: dffffc0000000000
[  271.052775][    C1] RDX: ffffffff8fba1fb0 RSI: ffffffff9037799e RDI: ffffffff8be332a0
[  271.052780][    C1] RBP: ffffffff8fba1fb0 R08: 000000000000000b R09: ffffffff8172c195
[  271.052785][    C1] R10: ffffc900001dfe58 R11: ffffffff81ac3890 R12: ffffffff81aa3ef4
[  271.052790][    C1] R13: ffffffff8fba1fb0 R14: ffffc900001dfe08 R15: ffffffff8fba1fc4
[  271.052795][    C1] FS:  00007f96244d46c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  271.052800][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  271.052805][    C1] CR2: 00007f96244b2fc8 CR3: 0000000041bd4000 CR4: 00000000000006f0
[  271.052830][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  271.052836][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000f0602
[  271.052840][    C1] Call Trace:
[  271.052844][    C1]  <IRQ>
[  271.052850][    C1]  ? unwind_next_frame+0xa5/0x2390
[  271.052859][    C1]  ? exit_to_user_mode_loop+0x75/0x110
[  271.052870][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  271.052879][    C1]  arch_stack_walk+0x11c/0x150
[  271.052889][    C1]  ? exit_to_user_mode_loop+0x75/0x110
[  271.052900][    C1]  stack_trace_save+0x9c/0xe0
[  271.052908][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  271.052916][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  271.052930][    C1]  ? sched_clock_cpu+0x74/0x430
[  271.052941][    C1]  ? lapic_next_event+0x11/0x20
[  271.052948][    C1]  ? clockevents_program_event+0x24d/0x360
[  271.052958][    C1]  kasan_save_track+0x3e/0x80
[  271.052967][    C1]  ? kasan_save_track+0x3e/0x80
[  271.052974][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  271.052982][    C1]  ? __kmalloc_noprof+0x27a/0x4f0
[  271.052991][    C1]  ? cfg80211_inform_single_bss_data+0x905/0x1ac0
[  271.052999][    C1]  ? cfg80211_inform_bss_data+0x1fb/0x3b30
[  271.053006][    C1]  ? cfg80211_inform_bss_frame_data+0x3d7/0x730
[  271.053012][    C1]  ? ieee80211_bss_info_update+0x746/0x9e0
[  271.053020][    C1]  ? ieee80211_scan_rx+0x593/0xa20
[  271.053027][    C1]  ? ieee80211_rx_list+0x201c/0x2a90
[  271.053035][    C1]  ? ieee80211_rx_napi+0x1a8/0x3d0
[  271.053042][    C1]  ? ieee80211_handle_queued_frames+0xe8/0x1f0
[  271.053049][    C1]  ? tasklet_action_common+0x36c/0x580
[  271.053056][    C1]  ? handle_softirqs+0x286/0x870
[  271.053062][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  271.053068][    C1]  ? irq_exit_rcu+0x9/0x30
[  271.053073][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  271.053081][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.053088][    C1]  ? __schedule+0x1b3/0x4cc0
[  271.053096][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  271.053103][    C1]  ? irqentry_exit+0x6f/0x90
[  271.053111][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.053117][    C1]  ? lock_release+0x2b5/0x3e0
[  271.053126][    C1]  ? task_mm_cid_work+0x21a/0x760
[  271.053133][    C1]  ? task_work_run+0x1d4/0x260
[  271.053141][    C1]  ? get_signal+0x11ed/0x1340
[  271.053146][    C1]  ? arch_do_signal_or_restart+0x9a/0x750
[  271.053156][    C1]  ? exit_to_user_mode_loop+0x75/0x110
[  271.053178][    C1]  __kasan_kmalloc+0x93/0xb0
[  271.053188][    C1]  __kmalloc_noprof+0x27a/0x4f0
[  271.053196][    C1]  ? cfg80211_inform_single_bss_data+0x905/0x1ac0
[  271.053205][    C1]  cfg80211_inform_single_bss_data+0x905/0x1ac0
[  271.053216][    C1]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  271.053233][    C1]  ? cfg80211_inform_bss_data+0x1e8/0x3b30
[  271.053241][    C1]  cfg80211_inform_bss_data+0x1fb/0x3b30
[  271.053250][    C1]  ? ktime_get+0x3e/0x1f0
[  271.053257][    C1]  ? ktime_get+0x3e/0x1f0
[  271.053264][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  271.053272][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  271.053283][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  271.053291][    C1]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  271.053298][    C1]  ? sched_clock_cpu+0x74/0x430
[  271.053307][    C1]  ? lapic_next_event+0x11/0x20
[  271.053313][    C1]  ? clockevents_program_event+0x24d/0x360
[  271.053322][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  271.053331][    C1]  ? hrtimer_interrupt+0x889/0xaa0
[  271.053340][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  271.053349][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  271.053355][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  271.053369][    C1]  ? cfg80211_inform_bss_frame_data+0x2bd/0x730
[  271.053377][    C1]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  271.053386][    C1]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  271.053395][    C1]  ieee80211_bss_info_update+0x746/0x9e0
[  271.053404][    C1]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  271.053416][    C1]  ? ieee80211_scan_rx+0x292/0xa20
[  271.053423][    C1]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  271.053431][    C1]  ieee80211_scan_rx+0x593/0xa20
[  271.053441][    C1]  ieee80211_rx_list+0x201c/0x2a90
[  271.053448][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  271.053460][    C1]  ? lapic_next_event+0x11/0x20
[  271.053467][    C1]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  271.053478][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  271.053486][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  271.053498][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  271.053505][    C1]  ieee80211_rx_napi+0x1a8/0x3d0
[  271.053513][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  271.053557][    C1]  ? skb_dequeue+0x10e/0x150
[  271.053567][    C1]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  271.053577][    C1]  tasklet_action_common+0x36c/0x580
[  271.053586][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  271.053595][    C1]  ? workqueue_softirq_action+0x87/0x150
[  271.053603][    C1]  ? workqueue_softirq_action+0xd4/0x150
[  271.053611][    C1]  handle_softirqs+0x286/0x870
[  271.053619][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  271.053627][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  271.053635][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  271.053644][    C1]  __irq_exit_rcu+0xca/0x1f0
[  271.053650][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  271.053659][    C1]  irq_exit_rcu+0x9/0x30
[  271.053665][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  271.053673][    C1]  </IRQ>
[  271.053675][    C1]  <TASK>
[  271.053678][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.053685][    C1] RIP: 0010:__schedule+0x1b3/0x4cc0
[  271.053693][    C1] Code: f6 48 8b 1b 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 44 0e a9 f6 48 81 3b 9d 6e ac 57 <0f> 85 b7 18 00 00 45 85 ed 7f 54 49 8d 5e 18 48 89 d8 48 c1 e8 03
[  271.053698][    C1] RSP: 0018:ffffc90004d4f6e0 EFLAGS: 00000246
[  271.053705][    C1] RAX: 1ffff920009a9000 RBX: ffffc90004d48000 RCX: dffffc0000000000
[  271.053709][    C1] RDX: 0000000000000000 RSI: ffffffff8be332e0 RDI: ffffffff8be332a0
[  271.053714][    C1] RBP: ffffc90004d4f8f0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  271.053718][    C1] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff8881a3c1c000
[  271.053722][    C1] R13: 0000000000000001 R14: ffff888022395640 R15: 1ffff11026cc7551
[  271.053734][    C1]  ? irqentry_exit+0x74/0x90
[  271.053742][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.053756][    C1]  ? __pfx___schedule+0x10/0x10
[  271.053763][    C1]  ? irqentry_exit+0x74/0x90
[  271.053771][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.053786][    C1]  preempt_schedule_irq+0xb5/0x150
[  271.053794][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  271.053802][    C1]  ? __pfx___schedule+0x10/0x10
[  271.053812][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  271.053819][    C1]  irqentry_exit+0x6f/0x90
[  271.053827][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.053833][    C1] RIP: 0010:lock_release+0x2b5/0x3e0
[  271.053842][    C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 7b d1 02 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
[  271.053847][    C1] RSP: 0018:ffffc90004d4fa78 EFLAGS: 00000206
[  271.053852][    C1] RAX: e05fce2295fbb300 RBX: 0000000000000202 RCX: e05fce2295fbb300
[  271.053857][    C1] RDX: 0000000000000000 RSI: ffffffff8dba6014 RDI: ffffffff8be33300
[  271.053861][    C1] RBP: ffff888022396130 R08: 0000000000000000 R09: ffffffff8191c7ff
[  271.053865][    C1] R10: dffffc0000000000 R11: fffff520009a9f69 R12: 0000000000000000
[  271.053869][    C1] R13: 0000000000000000 R14: ffffffff8e139ee0 R15: ffff888022395640
[  271.053876][    C1]  ? task_mm_cid_work+0x30f/0x760
[  271.053886][    C1]  ? task_mm_cid_work+0x30f/0x760
[  271.053893][    C1]  ? task_mm_cid_work+0x30f/0x760
[  271.053900][    C1]  task_mm_cid_work+0x21a/0x760
[  271.053909][    C1]  ? __pfx_task_mm_cid_work+0x10/0x10
[  271.053916][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  271.053934][    C1]  task_work_run+0x1d4/0x260
[  271.053944][    C1]  ? __pfx_task_work_run+0x10/0x10
[  271.053952][    C1]  ? irqentry_exit+0x74/0x90
[  271.053963][    C1]  get_signal+0x11ed/0x1340
[  271.053976][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  271.053988][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  271.053997][    C1]  ? irqentry_exit+0x74/0x90
[  271.054012][    C1]  exit_to_user_mode_loop+0x75/0x110
[  271.054021][    C1]  do_syscall_64+0x2bd/0x3b0
[  271.054031][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.054037][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.054045][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.054051][    C1] RIP: 0033:0x7f962358ebe9
[  271.054058][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.054063][    C1] RSP: 002b:00007f96244d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  271.054070][    C1] RAX: 0000000000000001 RBX: 00007f96237b5fa8 RCX: 00007f962358ebe9
[  271.054074][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f96237b5fac
[  271.054078][    C1] RBP: 00007f96237b5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  271.054082][    C1] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000
[  271.054086][    C1] R13: 00007f96237b6038 R14: 00007fff7fd531f0 R15: 00007fff7fd532d8
[  271.054096][    C1]  </TASK>
[  275.184420][ T8845] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  275.189063][ T8845] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  275.207967][ T8845] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  275.231662][ T8845] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  275.242827][ T8845] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  275.249300][ T8846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  275.263331][ T8846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  275.266905][ T8846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  275.270581][ T8846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  275.274577][ T8846] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  275.278161][ T8846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  275.281646][ T8848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  275.285786][ T8848] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  275.289354][ T8848] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  275.295025][ T5851] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2

VM DIAGNOSIS:
09:25:24  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88801c2fb980 RCX=c88013a6d7e76500 RDX=0000000000000000
RSI=ffffffff8d9ca95b RDI=ffffffff8be33300 RBP=ffffc90000127b50 RSP=ffffc900001279e8
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88804b023d00 R13=0000000000000006 R14=0000000000000006 R15=ffff88803b899600
RIP=ffffffff8b795185 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f345e770bd0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f9040587d20
XMM02=000001ff00000025 ffffffdf00000000 XMM03=8003000000000000 0000000000000000
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000003bf12
XMM06=0fffffffffffff04 04c0030000000027 XMM07=0300080000000000 ffffffffffff0404
XMM08=a003000800049803 0108000400000026 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000068 RBX=0000000000000068 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df070
R8 =ffff888108068237 R9 =1ffff1102100d046 R10=dffffc0000000000 R11=ffffffff854ef730
R12=dffffc0000000000 R13=ffffffff99af98f4 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef7ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f96244d46c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f96244b2fc8 CR3=0000000041bd4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=00000000000f0602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000ff00000000 XMM05=0000000000000000 00007f9232212e53
XMM06=0000000000000000 00007f9232212e4d XMM07=0000000000000000 00007f9232212e61
XMM08=0000000000000000 00007f9232212ee7 XMM09=0000000000000000 00007f9232212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
