last executing test programs:

5m4.089567315s ago: executing program 1 (id=73):
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

5m3.900620855s ago: executing program 1 (id=78):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400970000007000fcffffff110000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x11, 0xa, 0x300)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x5, 0x9, 0x0, 0x8209, 0x200, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe55e, 0x2, @perf_bp={&(0x7f0000000040), 0xb}, 0x11020, 0xfffffffffffffffc, 0x55f, 0x0, 0x1, 0x8, 0x7, 0x0, 0x2, 0x0, 0x9}, r2, 0xd, 0xffffffffffffffff, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffe, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)

5m3.780588303s ago: executing program 0 (id=80):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

5m3.780264699s ago: executing program 0 (id=82):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m3.689214556s ago: executing program 1 (id=83):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcffff605d0000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000100), 0x5000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = syz_clone(0x20a22000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x10000}, 0x28)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$kcm(0x29, 0x7, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20044080)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x73c4, 0x6}, 0x2018, 0x800, 0x0, 0x3, 0x0, 0xfffffffc, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9031a0400", 0x14}], 0x1}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0b000000ff000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=<r10=>0xffffffffffffffff], 0x48)
ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x40)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r9, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x41}, 0x80, &(0x7f0000000140)}, 0x448d0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYRES8=r10, @ANYRESDEC=r4, @ANYRES16=r2], 0xe0}}, 0x0)

5m3.57535785s ago: executing program 0 (id=85):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000440), 0x3d)

5m3.279044969s ago: executing program 1 (id=89):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
r2 = socket$kcm(0x2b, 0x1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000840000000700000044140823e000000200000002e00000010000100000000000dc00000000000000000000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000380), 0x4)
close(r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x541b, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60000000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x50)

5m3.230397s ago: executing program 0 (id=90):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x8, 0x0, 0x9, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0xf, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x7fffffff, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0xec19, 0x7, 0x5, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0x3, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x9, 0x1, 0x80000000, 0x4, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x79, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x9, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0x0, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x3, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x4f7, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x100, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x101, 0x800, 0x101, 0x5, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0x6, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x8001, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0xcfe0f6cd7cd6d6c2}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

5m3.155640845s ago: executing program 1 (id=91):
r0 = socket$kcm(0x2a, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000380), 0x4)

5m3.155470457s ago: executing program 0 (id=92):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f80000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000c0018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa}, 0x94)

5m2.780940349s ago: executing program 0 (id=93):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0)

5m2.683507224s ago: executing program 32 (id=93):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0)

5m2.629837635s ago: executing program 1 (id=95):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000c2)

5m2.549947806s ago: executing program 33 (id=95):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000c2)

4m53.146376829s ago: executing program 4 (id=175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)

4m52.759168313s ago: executing program 4 (id=177):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xade}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0)

4m52.501189919s ago: executing program 4 (id=181):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x2, 0x0, 0x0, 0x3318, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

4m52.411095139s ago: executing program 4 (id=183):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd85}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

4m52.340769772s ago: executing program 4 (id=184):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

4m50.998884743s ago: executing program 4 (id=197):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)={0x14, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4001040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x24dfdbf6, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20000050)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x3a, 0x0, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

4m36.001178556s ago: executing program 34 (id=197):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)={0x14, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4001040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x24dfdbf6, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20000050)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x3a, 0x0, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

2.42790433s ago: executing program 2 (id=2918):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, 0x2b, 0xb, 0x0, 0x0, {0x6}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="6cc4fe11"]}]}, 0x24}}, 0x8000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000012008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b001c000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ba000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48)

2.425874181s ago: executing program 2 (id=2919):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r0}, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x100000001}, 0x0, 0x2, 0xfffffffe}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x80)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0xd000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r6, 0x8b28, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
socket$inet_icmp(0x2, 0x2, 0x1)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594b41fde1b60", 0x14}], 0x1}, 0x0)
socket$inet(0x2, 0x1, 0x7)

2.178083846s ago: executing program 5 (id=2923):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, 0x0, 0x46)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f17"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3000}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x3, 0x4000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10)
r4 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r8, 0x400454cd, 0x6)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x18b)

2.009912195s ago: executing program 5 (id=2925):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x24004004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000540)="d80000001a0081044e81f782db4cb9040a1de5007b490d4f1e81f8d815000100fd05142603600e12080005007a010401a80016002000034004035c0461c902006f94007134732325c12e875fab7cb6cec6cf6efb8000a0277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b020193c034e653fe8efe7c9f8775670d16a4683f5aeb4edbb57a50262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d83452a92954b43370ed8862ffd5ab1a8f295000000000000000000", 0xd9}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
syz_clone(0x100000, &(0x7f0000000340)="cd6380abcf29ce3ae539635093ea3149df766bd797241970bf166c5ab728e31f58bef00095148f596f7d75ffe32a8b647c357a2a193fa4132ae65eaac1e1ab6e29083be858d62600d182a61651f30f4a5782855dc14aa2a2944c5ee2dc6a0e6889454d3049b9dbe18be81a840739212946e7a062e91a56011e9c6b9fb1988436e9701b1e3ffe46fcc98f674e3dd38755abff7dc34f072357a4f208d3722ab0003f12d609efd97ba0f18677137e41f8e8e136cbdcb7d700503b2f3e3595b7d91ed6627e1af88c404604dc8046a2e27f2028c38d86f5af1624f7636a1b46c195a9de2e782c04", 0xe5, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000640)="e386efe312ff5d7840edd09beb29c2a8c8efbd4d6849b4be894987e8ec4fc5acd0c402b26b684594a3c3f2201cd2ccf1734f786370efd62f663d889ce6a75ad93bcc2acbc6b81545b0d13c66f86671f0f4b3edb14c198431402d0cc58e33f52ac23cfedd7d0c74951325abab116ee9df9b3054696abc24901db60f3807d57b1e057d8b46f1789b1a6f5f098a34fa329456fe40e54e8c81b9b4ec958e0bba7983183cdeb4a77bfd878fb0027cb014a48348d4ca9dea7bf63fdd4416dbef53e179878957efb0836599eb4cc5")
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x4008054)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080))

1.578388618s ago: executing program 5 (id=2930):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000001c0)=""/171, 0xab, <r0=>0x0, &(0x7f0000000000)=""/11, 0xb}}, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000000000000006b112300002294c089b1000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000850000000800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000008c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000cba10000e100000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000d400000010000000350000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94)

1.577941725s ago: executing program 3 (id=2931):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071114c00000000008510000002000000850000008b00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111670000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
socket$kcm(0x29, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071114c00000000008510000002000000850000008b00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111670000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)
socket$kcm(0x29, 0x3, 0x0) (async)

1.520100422s ago: executing program 3 (id=2932):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8709000, 0x1}, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000206030000000000000000000500ffff0c0073797a32000000000500040000000000050005000a00000005000100060000000d000300686173683a6e657400000000"], 0x54}}, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d00", 0x6}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r0], 0x4394)
r1 = socket$kcm(0x10, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000fab3a050aff3f83f908eb38648cbba400", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000b40000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010122d292271ded492488b600000800030047"], 0x1c}}, 0x800)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1c1)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

1.519427502s ago: executing program 5 (id=2933):
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff6f)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async, rerun: 64)
r1 = socket$kcm(0xa, 0x1, 0x0) (async, rerun: 64)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000200), 0x4) (async)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 64)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xe, 0x9}, 0x118d2a, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000002bace4a0010000000f3ff17925c4d0095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (rerun: 64)
socket$kcm(0x11, 0xa, 0x300) (async)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
socket$kcm(0x18, 0x0, 0x2) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r5=>0x0}, 0x8)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r5, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r6, r3, 0x4, r3}, 0x10)

1.400393582s ago: executing program 2 (id=2934):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)=r1}, 0x20) (rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r2, 0x4) (async)
r4 = socket$kcm(0x1e, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000040)="1e0000002d000be9e501", 0xa}, {&(0x7f0000001340)="e22ca3c1e8138340e224087b931393139b9afa87", 0x14}], 0x2}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e0, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xe232}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7) (async, rerun: 64)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64)
write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd63"], 0xfdef)

1.400052609s ago: executing program 3 (id=2935):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x36)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b"], 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00')
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x38, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xc9, 0x10, 0x0, 0x0, 0x0, 0x6, 0x7013a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x4}, 0x105738, 0x0, 0x4000001, 0x3, 0x3f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000020a010400000000000000000a0000070900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000"], 0x1c8}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

1.220178481s ago: executing program 2 (id=2936):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.stat\x00', 0x60ff, 0x8cffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5) (async)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x4004743b, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523c7000000000000006422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
socketpair$unix(0x2d, 0x2, 0x88, &(0x7f0000000580)) (async)
socketpair$unix(0x2d, 0x2, 0x88, &(0x7f0000000580))
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a400030062726964", @ANYRESOCT=r0], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x240408d0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a400030062726964", @ANYRESOCT=r0], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x240408d0)

708.838132ms ago: executing program 2 (id=2937):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

574.314579ms ago: executing program 2 (id=2938):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095", @ANYRES8=r2, @ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x20}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

573.235357ms ago: executing program 5 (id=2939):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x0, &(0x7f0000011c00)='./file0\x00', &(0x7f0000011c40), 0x15, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, r2, 0x7}, 0x14)
write$cgroup_type(r1, &(0x7f0000000080), 0x9)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94)

436.330239ms ago: executing program 5 (id=2940):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730140000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

198.604423ms ago: executing program 3 (id=2941):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x5, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2b, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40012004)

70.385098ms ago: executing program 3 (id=2942):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="8d6be2ebd44b8fbd77c6e7030000000400000004000000cdfb60f748367c3d1566124d0a00000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x110e22fff2)
write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x4, '\x00', 0x0, r2, 0x0, 0x2, 0x1}, 0x50)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000884)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000010101080000000000002cfb010000010c00170080000001000000060600124000030000"], 0x28}, 0x1, 0x0, 0x0, 0x8400}, 0x800)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, 0x0}, 0x24000008)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a100000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90)

0s ago: executing program 3 (id=2943):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000), 0x8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x9, 0x1, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88000000000000e6ffffffffffff00fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff02000000000000000000000000000100000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="680100001a000100feffffff0001000000000000000000000000ffffe0000002fe8800000000000000000000000001010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000008001f0003"], 0x168}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000840), 0x1}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
close(r8)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x0, 0x0)
socket$inet(0x2, 0x1, 0xfffffffc)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203330800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef)

kernel console output (not intermixed with test programs):

 0
[   98.545712][ T6214] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.576958][ T6949] chnl_net:caif_netlink_parms(): no params data found
[   98.595987][ T6214] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.670069][ T6214] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.693689][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.696887][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.700682][ T6949] bridge_slave_0: entered allmulticast mode
[   98.704811][ T6949] bridge_slave_0: entered promiscuous mode
[   98.709727][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.713426][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.716756][ T6949] bridge_slave_1: entered allmulticast mode
[   98.721476][ T6949] bridge_slave_1: entered promiscuous mode
[   98.756694][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.778074][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.830478][ T6949] team0: Port device team_slave_0 added
[   98.846475][ T6949] team0: Port device team_slave_1 added
[   98.864980][ T6214] bridge_slave_1: left allmulticast mode
[   98.867393][ T6214] bridge_slave_1: left promiscuous mode
[   98.870818][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.875635][ T6214] bridge_slave_0: left allmulticast mode
[   98.877998][ T6214] bridge_slave_0: left promiscuous mode
[   98.881412][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.294300][ T6214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.298967][ T6214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.309103][ T6214] bond0 (unregistering): Released all slaves
[   99.352769][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.355276][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.370989][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.376608][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.384905][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.393536][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.455597][ T6949] hsr_slave_0: entered promiscuous mode
[   99.459006][ T6949] hsr_slave_1: entered promiscuous mode
[  100.037513][ T6214] hsr_slave_0: left promiscuous mode
[  100.051224][ T6214] hsr_slave_1: left promiscuous mode
[  100.054171][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.057293][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.068102][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.071893][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.087859][ T6214] veth1_macvtap: left promiscuous mode
[  100.090571][ T6214] veth0_macvtap: left promiscuous mode
[  100.093558][ T6214] veth1_vlan: left promiscuous mode
[  100.100947][ T6214] veth0_vlan: left promiscuous mode
[  100.241249][ T5855] Bluetooth: hci3: command tx timeout
[  100.373850][ T6214] team0 (unregistering): Port device 26 removed
[  100.408183][ T6214] team0 (unregistering): Port device team_slave_0 removed
[  100.716750][ T6995] : renamed from wg2 (while UP)
[  100.901815][ T6949] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  100.949587][ T6949] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  101.002707][ T7010] netlink: 'syz.3.400': attribute type 22 has an invalid length.
[  101.006035][ T6949] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  101.017329][ T6949] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  101.213508][ T7022] netlink: 220 bytes leftover after parsing attributes in process `syz.3.401'.
[  101.249593][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.276688][ T6949] 8021q: adding VLAN 0 to HW filter on device team0
[  101.296621][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.299280][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.310150][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.312711][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.382101][ T6949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.490954][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.739434][ T6949] veth0_vlan: entered promiscuous mode
[  101.780097][ T6949] veth1_vlan: entered promiscuous mode
[  101.811256][ T6949] veth0_macvtap: entered promiscuous mode
[  101.818047][ T6949] veth1_macvtap: entered promiscuous mode
[  101.836032][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.847532][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.859668][ T6214] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.869697][ T6214] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.294268][ T6214] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.313409][ T6214] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.320432][ T5855] Bluetooth: hci3: command tx timeout
[  102.438958][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.445859][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.504963][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.517522][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.385377][ T7129] netlink: 'syz.3.433': attribute type 3 has an invalid length.
[  104.388844][ T7129] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.433'.
[  104.400797][ T5855] Bluetooth: hci3: command tx timeout
[  104.653458][ T7134] netlink: 'syz.3.435': attribute type 10 has an invalid length.
[  104.732170][ T7134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.766930][ T7134] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  105.304753][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.449'.
[  105.309557][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.449'.
[  105.314778][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.449'.
[  105.355098][ T7169] openvswitch: netlink: Missing valid actions attribute.
[  105.364804][ T7169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.535346][ T7177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  105.617136][ T7178] bridge_slave_1: left allmulticast mode
[  105.619759][ T7178] bridge_slave_1: left promiscuous mode
[  105.623570][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.636475][ T7183] delete_channel: no stack
[  105.677468][ T7178] bridge_slave_0: left allmulticast mode
[  105.681481][ T7178] bridge_slave_0: left promiscuous mode
[  105.684205][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.762927][ T7179] delete_channel: no stack
[  105.980430][ T7199] netlink: 'syz.3.462': attribute type 21 has an invalid length.
[  105.983488][ T7199] netlink: 'syz.3.462': attribute type 15 has an invalid length.
[  105.986555][ T7199] netlink: 156 bytes leftover after parsing attributes in process `syz.3.462'.
[  106.002891][ T7199] IPv6: NLM_F_CREATE should be specified when creating new route
[  106.010367][ T7199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.013407][ T7199] IPv6: NLM_F_CREATE should be set when creating new route
[  106.016447][ T7199] IPv6: NLM_F_CREATE should be set when creating new route
[  106.019511][ T7199] IPv6: NLM_F_CREATE should be set when creating new route
[  106.166245][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'.
[  106.480075][ T5855] Bluetooth: hci3: command tx timeout
[  106.529396][ T7204] netlink: 'syz.5.465': attribute type 13 has an invalid length.
[  106.534037][ T7204] netlink: 'syz.5.465': attribute type 17 has an invalid length.
[  106.834989][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.474'.
[  107.014436][ T7204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.444885][ T7251] netlink: 'syz.2.488': attribute type 8 has an invalid length.
[  107.448424][ T7251] netlink: 'syz.2.488': attribute type 3 has an invalid length.
[  107.454661][ T7251] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.488'.
[  108.247644][ T7264] netlink: 132 bytes leftover after parsing attributes in process `syz.5.493'.
[  109.968128][ T7353] netlink: 211 bytes leftover after parsing attributes in process `syz.5.527'.
[  110.154072][ T7356] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  110.165534][ T7356] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  110.198012][    C1] Illegal XDP return value 16128 on prog  (id 214) dev veth1_to_team, expect packet loss!
[  110.958728][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.546'.
[  111.086773][ T7406] netlink: 'syz.2.550': attribute type 11 has an invalid length.
[  111.377528][ T7412] erspan0 speed is unknown, defaulting to 1000
[  112.536577][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'.
[  113.349441][ T7473] syzkaller0: entered promiscuous mode
[  113.362028][ T7473] syzkaller0: entered allmulticast mode
[  115.238205][ T7513] netlink: 'syz.5.589': attribute type 3 has an invalid length.
[  115.248801][ T7513] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.589'.
[  115.979287][ T7554] netlink: 'syz.3.600': attribute type 10 has an invalid length.
[  116.653152][ T7573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.608'.
[  116.703976][ T7577] netlink: 71 bytes leftover after parsing attributes in process `syz.3.611'.
[  116.765981][ T7583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.823490][ T7555] delete_channel: no stack
[  116.825694][ T7587] netlink: 'syz.3.615': attribute type 3 has an invalid length.
[  116.832375][ T7587] netlink: 152 bytes leftover after parsing attributes in process `syz.3.615'.
[  116.842826][ T7587] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  117.250516][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'.
[  117.294228][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.5.630'.
[  117.298514][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.5.630'.
[  117.535412][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.636'.
[  117.598585][ T7656] openvswitch: netlink: Message has 4 unknown bytes.
[  117.935702][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.649'.
[  117.939542][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.649'.
[  118.344581][ T7680] netlink: 'syz.2.653': attribute type 9 has an invalid length.
[  118.349802][ T7680] netlink: 211924 bytes leftover after parsing attributes in process `syz.2.653'.
[  118.485064][ T7694] Y4`Ҙ: renamed from lo (while UP)
[  118.502226][ T7692] netlink: 64 bytes leftover after parsing attributes in process `syz.3.656'.
[  119.027584][ T5855] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6
[  119.317736][ T7721] netlink: 'syz.3.672': attribute type 21 has an invalid length.
[  119.564407][ T7741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'.
[  119.792171][ T7743] netlink: 'syz.2.683': attribute type 1 has an invalid length.
[  119.795024][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'.
[  120.066672][ T7769] netlink: 208252 bytes leftover after parsing attributes in process `syz.5.691'.
[  120.066920][ T7766] GPL: port 1(gretap0) entered blocking state
[  120.073834][ T7766] GPL: port 1(gretap0) entered disabled state
[  120.074754][ T7769] netlink: 'syz.5.691': attribute type 1 has an invalid length.
[  120.076717][ T7766] gretap0: entered allmulticast mode
[  120.079356][ T7769] netlink: 'syz.5.691': attribute type 2 has an invalid length.
[  120.084686][ T7766] gretap0: entered promiscuous mode
[  120.086508][ T7769] netlink: 'syz.5.691': attribute type 3 has an invalid length.
[  120.092785][ T7769] netlink: 'syz.5.691': attribute type 4 has an invalid length.
[  120.645116][ T7784] netlink: 'syz.3.699': attribute type 21 has an invalid length.
[  120.649399][ T7784] netlink: 132 bytes leftover after parsing attributes in process `syz.3.699'.
[  120.709306][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.700'.
[  121.773638][ T7810] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.709'.
[  121.984125][ T7826] netlink: 'syz.3.717': attribute type 10 has an invalid length.
[  121.988528][ T7826] vlan0: entered allmulticast mode
[  121.993767][ T7826] veth0_vlan: entered allmulticast mode
[  122.006788][ T7826] team0: Port device vlan0 added
[  122.148496][ T7833] netlink: 'syz.2.721': attribute type 2 has an invalid length.
[  122.325736][ T7836] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.340980][ T7836] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.937647][ T7851] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  122.980536][ T7853] netlink: zone id is out of range
[  122.982778][ T7853] netlink: del zone limit has 8 unknown bytes
[  123.273419][ T7872] netlink: 'syz.5.738': attribute type 13 has an invalid length.
[  123.277281][ T7872] __nla_validate_parse: 3 callbacks suppressed
[  123.277290][ T7872] netlink: 160 bytes leftover after parsing attributes in process `syz.5.738'.
[  123.303180][ T7872] erspan0: refused to change device tx_queue_len
[  123.310028][ T7872] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  123.463447][ T7888] netlink: 'syz.3.747': attribute type 3 has an invalid length.
[  123.466601][ T7888] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  123.492363][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'.
[  123.521980][ T7895] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.750'.
[  123.528777][ T7893] erspan0 speed is unknown, defaulting to 1000
[  123.546537][ T7893] erspan0 speed is unknown, defaulting to 1000
[  123.552570][ T7893] erspan0 speed is unknown, defaulting to 1000
[  124.313177][ T7900] openvswitch: netlink: IP tunnel dst address not specified
[  124.379260][ T7893] infiniband syz2: set down
[  124.381353][ T5914] erspan0 speed is unknown, defaulting to 1000
[  124.383813][ T7893] infiniband syz2: added erspan0
[  124.421620][ T7893] RDS/IB: syz2: added
[  124.423425][ T7893] smc: adding ib device syz2 with port count 1
[  124.480036][ T7893] smc:    ib device syz2 port 1 has pnetid 
[  124.483146][ T5314] erspan0 speed is unknown, defaulting to 1000
[  124.486769][ T7893] erspan0 speed is unknown, defaulting to 1000
[  124.603347][ T7906] netlink: 'syz.3.753': attribute type 1 has an invalid length.
[  124.606547][ T7906] netlink: 'syz.3.753': attribute type 2 has an invalid length.
[  124.756164][ T7893] erspan0 speed is unknown, defaulting to 1000
[  124.992327][ T7923] netlink: 'syz.3.758': attribute type 10 has an invalid length.
[  124.995505][ T7923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.758'.
[  125.032317][ T7923] ipvlan1: entered promiscuous mode
[  125.042788][ T7923] ipvlan1: entered allmulticast mode
[  125.062004][ T7923] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  125.088545][ T7893] erspan0 speed is unknown, defaulting to 1000
[  125.200866][ T5855] Bluetooth: hci2: ACL packet too small
[  125.335688][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[  125.641934][ T7946] netlink: 60 bytes leftover after parsing attributes in process `syz.2.771'.
[  125.646154][ T7946] unsupported nlmsg_type 40
[  125.696960][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'.
[  125.702045][ T7948] netlink: 33 bytes leftover after parsing attributes in process `syz.2.772'.
[  125.706650][ T7948] netlink: 33 bytes leftover after parsing attributes in process `syz.2.772'.
[  125.861204][ T7960] netlink: 'syz.2.778': attribute type 10 has an invalid length.
[  126.119800][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.784'.
[  127.319857][ T7998] netlink: 'syz.5.795': attribute type 4 has an invalid length.
[  127.418395][ T7998] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  128.592245][ T8028] netlink: 'syz.2.809': attribute type 9 has an invalid length.
[  128.595565][ T8028] __nla_validate_parse: 3 callbacks suppressed
[  128.595575][ T8028] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.809'.
[  128.604399][ T8031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.805810][ T8036] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.812'.
[  129.287544][ T8057] netlink: 'syz.5.818': attribute type 10 has an invalid length.
[  129.308583][ T8057] bond0: (slave bond_slave_0): Releasing backup interface
[  129.528281][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'.
[  130.572837][ T8100] netlink: 'syz.3.839': attribute type 39 has an invalid length.
[  131.305293][ T8124] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.851'.
[  132.651902][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.656970][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.857370][ T8153] netlink: 'syz.2.861': attribute type 1 has an invalid length.
[  132.860720][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'.
[  133.029725][ T8161] sctp: [Deprecated]: syz.2.865 (pid 8161) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.029725][ T8161] Use struct sctp_sack_info instead
[  133.486074][ T8172] netlink: 'syz.3.869': attribute type 12 has an invalid length.
[  133.489465][ T8172] netlink: 132 bytes leftover after parsing attributes in process `syz.3.869'.
[  133.573809][ T8175] netlink: 156 bytes leftover after parsing attributes in process `syz.3.870'.
[  134.508793][ T8211] netlink: 104 bytes leftover after parsing attributes in process `syz.2.884'.
[  134.565324][ T8211] netlink: 'syz.2.884': attribute type 11 has an invalid length.
[  134.568304][ T8211] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.884'.
[  134.574174][ T8210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.729275][ T5855] Bluetooth: hci2: unexpected event 0x31 length: 82 > 6
[  134.851720][ T8232] rdma_rxe: rxe_newlink: failed to add erspan0
[  135.036473][   T33] audit: type=1107 audit(1758070294.659:3): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  135.251784][ T8250] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.903'.
[  135.598710][ T8274] netlink: 132 bytes leftover after parsing attributes in process `syz.3.914'.
[  135.647410][ T8278] syzkaller0: entered promiscuous mode
[  135.649839][ T8278] syzkaller0: entered allmulticast mode
[  135.946272][ T8302] netlink: 'syz.2.927': attribute type 10 has an invalid length.
[  136.013990][ T8307] netlink: 180 bytes leftover after parsing attributes in process `syz.2.929'.
[  138.952919][ T8336] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  139.560060][ T8372] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.953'.
[  139.617016][ T8373] netlink: 'syz.3.953': attribute type 2 has an invalid length.
[  140.252616][ T8389] netlink: 'syz.3.959': attribute type 2 has an invalid length.
[  140.255475][ T8389] netlink: 'syz.3.959': attribute type 1 has an invalid length.
[  140.259565][ T8389] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.959'.
[  140.267474][ T8393] netlink: 'syz.5.961': attribute type 2 has an invalid length.
[  140.267527][ T8389] block nbd5: not configured, cannot reconfigure
[  140.271844][ T8393] netlink: 'syz.5.961': attribute type 8 has an invalid length.
[  140.275959][ T8393] netlink: 132 bytes leftover after parsing attributes in process `syz.5.961'.
[  140.309400][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'.
[  140.349218][ T8391] netlink: 180 bytes leftover after parsing attributes in process `syz.2.960'.
[  140.368774][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'.
[  140.598612][ T8410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'.
[  140.603151][ T8410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'.
[  140.606105][ T8410] netlink: 'syz.2.967': attribute type 4 has an invalid length.
[  141.357189][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'.
[  141.360648][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'.
[  141.363742][ T8417] netlink: 'syz.2.967': attribute type 4 has an invalid length.
[  141.576794][ T8432] syzkaller0: tun_chr_ioctl cmd 1074025677
[  141.579476][ T8432] syzkaller0: linktype set to 768
[  142.043060][ T8454] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  142.295098][ T8456] syzkaller0: entered promiscuous mode
[  142.296973][ T8456] syzkaller0: entered allmulticast mode
[  142.388875][ T8465] netlink: 'syz.2.981': attribute type 10 has an invalid length.
[  143.353017][ T8482] bond_slave_0: entered promiscuous mode
[  143.356084][ T8482] bond_slave_1: entered promiscuous mode
[  143.358559][ T8482] batadv0: entered promiscuous mode
[  143.799547][ T8498] sctp: [Deprecated]: syz.5.991 (pid 8498) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.799547][ T8498] Use struct sctp_sack_info instead
[  144.045327][ T8504] netlink: 'syz.3.995': attribute type 21 has an invalid length.
[  144.083132][ T8489] erspan0 speed is unknown, defaulting to 1000
[  144.307849][ T8489] erspan0 speed is unknown, defaulting to 1000
[  145.004164][ T8529] netlink: 'syz.5.1002': attribute type 2 has an invalid length.
[  145.007534][ T8529] netlink: 'syz.5.1002': attribute type 8 has an invalid length.
[  145.010995][ T8529] __nla_validate_parse: 15 callbacks suppressed
[  145.011012][ T8529] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1002'.
[  145.580987][ T5914] erspan0 speed is unknown, defaulting to 1000
[  147.079532][ T8563] netlink: 'syz.2.1011': attribute type 11 has an invalid length.
[  147.643096][ T8579] netlink: 'syz.2.1016': attribute type 32 has an invalid length.
[  148.241991][ T8585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.527387][ T8595] netlink: 'syz.2.1021': attribute type 16 has an invalid length.
[  148.534185][ T8595] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1021'.
[  149.223763][ T8604] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  151.233754][ T8608] netlink: 'syz.2.1025': attribute type 1 has an invalid length.
[  151.527358][ T8634] netlink: 'syz.2.1030': attribute type 10 has an invalid length.
[  151.531211][ T8634] macvlan0: entered promiscuous mode
[  151.532979][ T8634] macvlan0: entered allmulticast mode
[  151.539191][ T8634] veth1_vlan: entered allmulticast mode
[  151.544403][ T8634] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  152.063349][ T8658] netlink: 'syz.2.1037': attribute type 1 has an invalid length.
[  152.066999][ T8658] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1037'.
[  153.672447][ T8665] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1040'.
[  154.843252][ T8696] netlink: 'syz.2.1048': attribute type 9 has an invalid length.
[  154.846530][ T8696] netlink: 'syz.2.1048': attribute type 11 has an invalid length.
[  154.849781][ T8696] netlink: 147436 bytes leftover after parsing attributes in process `syz.2.1048'.
[  155.215535][ T8715] ksmbd: Unknown IPC event: 3, ignore.
[  155.304142][ T8716] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1054'.
[  155.311523][ T8715] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1054'.
[  155.315847][ T8716] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1054'.
[  155.695470][ T8719] netlink: 'syz.2.1055': attribute type 3 has an invalid length.
[  155.697678][ T8723] netlink: 'syz.3.1056': attribute type 2 has an invalid length.
[  155.698912][ T8719] netlink: 'syz.2.1055': attribute type 1 has an invalid length.
[  155.706338][ T8719] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1055'.
[  155.706843][ T8723] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1056'.
[  155.714457][ T8723] nbd: must specify a device to reconfigure
[  155.819257][ T8726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1057'.
[  155.860064][ T8729] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.1058'.
[  155.872638][ T8729] debugfs: '`]Iq!>s*!)' already exists in 'ieee80211'
[  155.903771][ T8729] netlink: 'syz.5.1058': attribute type 2 has an invalid length.
[  156.585895][ T8762] netdevsim netdevsim2 : renamed from netdevsim0
[  156.586381][ T8766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.674446][ T8766] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  156.707927][ T8772] netlink: 'syz.2.1070': attribute type 21 has an invalid length.
[  157.239619][ T8801] __nla_validate_parse: 5 callbacks suppressed
[  157.239636][ T8801] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1075'.
[  157.371886][ T8803] netlink: 'syz.5.1077': attribute type 10 has an invalid length.
[  157.491294][ T8803] macvlan0: entered promiscuous mode
[  157.493668][ T8803] macvlan0: entered allmulticast mode
[  157.501898][ T8803] veth1_vlan: entered allmulticast mode
[  157.505629][ T8803] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  158.002535][ T8820] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1081'.
[  158.005613][ T8820] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1081'.
[  158.039494][ T8816] netlink: 'syz.5.1080': attribute type 1 has an invalid length.
[  158.399720][ T8825] netlink: 116572 bytes leftover after parsing attributes in process `syz.2.1083'.
[  159.427471][ T8863] netlink: 'syz.5.1093': attribute type 39 has an invalid length.
[  159.794865][ T8868] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  159.817410][ T8867] netlink: set zone limit has 4 unknown bytes
[  160.546110][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'.
[  160.841547][ T8920] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1110'.
[  160.874284][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1110'.
[  160.877493][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1110'.
[  160.996446][ T8921] netlink: 'syz.3.1108': attribute type 10 has an invalid length.
[  161.000046][ T8921] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1108'.
[  161.003920][ T8921] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  161.168059][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1112'.
[  161.313511][ T8942] netlink: 'syz.5.1115': attribute type 21 has an invalid length.
[  161.407989][ T8951] netlink: 'syz.5.1118': attribute type 29 has an invalid length.
[  161.415074][ T8951] netlink: 'syz.5.1118': attribute type 29 has an invalid length.
[  161.418893][ T8951] netlink: 'syz.5.1118': attribute type 29 has an invalid length.
[  161.425181][ T8951] netlink: 'syz.5.1118': attribute type 29 has an invalid length.
[  161.502949][ T8955] erspan0 speed is unknown, defaulting to 1000
[  161.553150][ T8960] openvswitch: netlink: Flow actions attr not present in new flow.
[  161.563658][ T8961] openvswitch: netlink: Flow actions attr not present in new flow.
[  161.612917][ T8955] erspan0 speed is unknown, defaulting to 1000
[  161.713812][ T8915] syz.3.1108 (8915) used greatest stack depth: 18992 bytes left
[  161.784455][ T8963] siw: device registration error -23
[  162.027447][ T8970] erspan0 speed is unknown, defaulting to 1000
[  162.104878][ T8974] sctp: [Deprecated]: syz.2.1125 (pid 8974) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.104878][ T8974] Use struct sctp_sack_info instead
[  162.231317][ T8975] veth0_vlan: left promiscuous mode
[  162.234671][ T8975] veth0_vlan: entered promiscuous mode
[  162.317169][ T8970] erspan0 speed is unknown, defaulting to 1000
[  162.461915][ T8988] netlink: 'syz.3.1129': attribute type 21 has an invalid length.
[  162.464510][ T8988] __nla_validate_parse: 5 callbacks suppressed
[  162.464517][ T8988] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1129'.
[  162.478861][ T8988] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1129'.
[  163.153382][ T9018] netlink: 'syz.2.1138': attribute type 10 has an invalid length.
[  163.200167][ T9018] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  163.560993][ T9023] netlink: 'syz.5.1139': attribute type 9 has an invalid length.
[  163.567175][ T9023] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.1139'.
[  163.783370][ T9029] netlink: 'syz.5.1142': attribute type 10 has an invalid length.
[  163.805542][ T9029] 8021q: adding VLAN 0 to HW filter on device team0
[  163.810914][ T9029] bond0: (slave team0): Enslaving as an active interface with an up link
[  163.893147][ T9032] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1140'.
[  165.082704][ T9035] netlink: 'syz.2.1143': attribute type 29 has an invalid length.
[  165.839297][ T9058] netlink: 'syz.2.1151': attribute type 40 has an invalid length.
[  165.988554][ T9075] netlink: 4856 bytes leftover after parsing attributes in process `syz.5.1156'.
[  166.061203][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.087553][ T9075] openvswitch: netlink: Message has 5588 unknown bytes.
[  166.095286][ T9075] openvswitch: netlink: Actions may not be safe on all matching packets
[  166.172614][ T9079] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1157'.
[  166.234901][ T9082] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1158'.
[  166.866529][ T9099] netlink: 'syz.5.1164': attribute type 10 has an invalid length.
[  166.869766][ T9099] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1164'.
[  166.874125][ T9099] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  167.478738][ T9117] netlink: 'syz.2.1169': attribute type 1 has an invalid length.
[  168.918583][ T9145] netlink: 'syz.2.1175': attribute type 12 has an invalid length.
[  168.921454][ T9145] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1175'.
[  169.102829][ T9151] bridge_slave_0: entered promiscuous mode
[  169.105413][ T9151] bridge_slave_0: entered allmulticast mode
[  169.252719][ T9155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1178'.
[  169.305719][ T9160] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.1179'.
[  169.316958][ T9160] sysfs: cannot create duplicate filename '/class/ieee80211/`]Iq!>s*!)'
[  169.318143][ T5855] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  169.322128][ T9160] CPU: 0 UID: 0 PID: 9160 Comm: syz.5.1179 Not tainted syzkaller #0 PREEMPT(full) 
[  169.322145][ T9160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.322154][ T9160] Call Trace:
[  169.322159][ T9160]  <TASK>
[  169.322166][ T9160]  dump_stack_lvl+0x189/0x250
[  169.322187][ T9160]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.322203][ T9160]  ? __pfx__printk+0x10/0x10
[  169.322225][ T9160]  ? kernfs_path_from_node+0x2f/0x290
[  169.322239][ T9160]  ? kernfs_path_from_node+0x250/0x290
[  169.322252][ T9160]  ? kernfs_path_from_node+0x2f/0x290
[  169.322270][ T9160]  sysfs_warn_dup+0x8e/0xa0
[  169.322286][ T9160]  sysfs_do_create_link_sd+0xc0/0x110
[  169.322302][ T9160]  device_add_class_symlinks+0x1cf/0x240
[  169.322321][ T9160]  device_add+0x475/0xb50
[  169.322339][ T9160]  wiphy_register+0x1ba6/0x28d0
[  169.322364][ T9160]  ? __pfx_wiphy_register+0x10/0x10
[  169.322377][ T9160]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  169.322398][ T9160]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  169.322419][ T9160]  ieee80211_register_hw+0x3484/0x4100
[  169.322446][ T9160]  ? ieee80211_register_hw+0x1481/0x4100
[  169.322471][ T9160]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  169.322490][ T9160]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  169.322509][ T9160]  ? __hrtimer_setup+0x187/0x210
[  169.322521][ T9160]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  169.322536][ T9160]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  169.322579][ T9160]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  169.322599][ T9160]  ? trace_kmalloc+0x1f/0xd0
[  169.322615][ T9160]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  169.322632][ T9160]  ? kstrndup+0xbf/0x160
[  169.322654][ T9160]  hwsim_new_radio_nl+0xea4/0x1b10
[  169.322675][ T9160]  ? __pfx___nla_validate_parse+0x10/0x10
[  169.322700][ T9160]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  169.322728][ T9160]  ? __nla_parse+0x40/0x60
[  169.322744][ T9160]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  169.322769][ T9160]  genl_family_rcv_msg_doit+0x215/0x300
[  169.322790][ T9160]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  169.322825][ T9160]  ? bpf_lsm_capable+0x9/0x20
[  169.322843][ T9160]  ? security_capable+0x7e/0x2e0
[  169.322860][ T9160]  genl_rcv_msg+0x60e/0x790
[  169.322882][ T9160]  ? __pfx_genl_rcv_msg+0x10/0x10
[  169.322899][ T9160]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  169.322921][ T9160]  ? __asan_memcpy+0x40/0x70
[  169.322934][ T9160]  ? __pfx_ref_tracker_free+0x10/0x10
[  169.322953][ T9160]  netlink_rcv_skb+0x208/0x470
[  169.322965][ T9160]  ? __lock_acquire+0xab9/0xd20
[  169.322983][ T9160]  ? __pfx_genl_rcv_msg+0x10/0x10
[  169.322999][ T9160]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  169.323027][ T9160]  ? down_read+0x1ad/0x2e0
[  169.323045][ T9160]  genl_rcv+0x28/0x40
[  169.323084][ T9160]  netlink_unicast+0x82f/0x9e0
[  169.323106][ T9160]  ? __pfx_netlink_unicast+0x10/0x10
[  169.323121][ T9160]  ? netlink_sendmsg+0x642/0xb30
[  169.323135][ T9160]  ? skb_put+0x11b/0x210
[  169.323155][ T9160]  netlink_sendmsg+0x805/0xb30
[  169.323176][ T9160]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.323195][ T9160]  ? aa_sock_msg_perm+0xf1/0x1d0
[  169.323209][ T9160]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.323224][ T9160]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.323237][ T9160]  __sock_sendmsg+0x21c/0x270
[  169.323253][ T9160]  ____sys_sendmsg+0x505/0x830
[  169.323272][ T9160]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.323296][ T9160]  ? import_iovec+0x74/0xa0
[  169.323316][ T9160]  ___sys_sendmsg+0x21f/0x2a0
[  169.323333][ T9160]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.323375][ T9160]  ? __fget_files+0x2a/0x420
[  169.323387][ T9160]  ? __fget_files+0x3a0/0x420
[  169.323406][ T9160]  __x64_sys_sendmsg+0x19b/0x260
[  169.323424][ T9160]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.323449][ T9160]  ? rcu_is_watching+0x15/0xb0
[  169.323465][ T9160]  ? do_syscall_64+0xbe/0x3b0
[  169.323482][ T9160]  do_syscall_64+0xfa/0x3b0
[  169.323495][ T9160]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.323508][ T9160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.323519][ T9160]  ? exc_page_fault+0x9f/0xf0
[  169.323534][ T9160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.323545][ T9160] RIP: 0033:0x7f26c9d8eba9
[  169.323557][ T9160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.323566][ T9160] RSP: 002b:00007f26c7ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.323579][ T9160] RAX: ffffffffffffffda RBX: 00007f26c9fd5fa0 RCX: 00007f26c9d8eba9
[  169.323589][ T9160] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008
[  169.323598][ T9160] RBP: 00007f26c9e11e19 R08: 0000000000000000 R09: 0000000000000000
[  169.323605][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.323612][ T9160] R13: 00007f26c9fd6038 R14: 00007f26c9fd5fa0 R15: 00007ffe4735fcf8
[  169.323634][ T9160]  </TASK>
[  169.662689][ T9174] netlink: 'syz.5.1184': attribute type 6 has an invalid length.
[  169.666673][ T9174] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1184'.
[  169.831432][ T9184] netlink: 'syz.5.1187': attribute type 10 has an invalid length.
[  169.887950][ T9184] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  170.000618][ T9195] netlink: 'syz.3.1189': attribute type 39 has an invalid length.
[  170.246725][ T5855] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  170.246749][ T5855] Bluetooth: unknown link type 110
[  170.251580][ T5855] Bluetooth: hci3: connection err: -111
[  170.498633][ T9237] : renamed from gre0 (while UP)
[  170.744647][ T9246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'.
[  171.169983][ T9253] netlink: 'syz.2.1207': attribute type 3 has an invalid length.
[  171.172734][ T9253] netlink: 'syz.2.1207': attribute type 1 has an invalid length.
[  171.175459][ T9253] netlink: 'syz.2.1207': attribute type 2 has an invalid length.
[  171.178713][ T9253] netlink: 'syz.2.1207': attribute type 8 has an invalid length.
[  171.182617][ T9253] netlink: 'syz.2.1207': attribute type 10 has an invalid length.
[  171.186723][ T9253] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.1207'.
[  172.716602][ T9295] xt_HMARK: spi-set and port-set can't be combined
[  173.398328][ T9333] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1222'.
[  173.678527][ T9339] syzkaller1: tun_chr_ioctl cmd 1074812117
[  174.901283][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'.
[  174.925084][ T9362] rdma_rxe: rxe_newlink: failed to add lo
[  176.245179][ T9396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.247933][ T9396] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.259259][ T9396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.271026][ T9396] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.806021][ T9416] validate_nla: 1 callbacks suppressed
[  176.806072][ T9416] netlink: 'syz.2.1245': attribute type 21 has an invalid length.
[  176.835163][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'.
[  176.996748][ T9423] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1247'.
[  177.108547][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1249'.
[  177.124194][ T9437] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1251'.
[  177.159530][ T9436] delete_channel: no stack
[  177.283467][ T9453] netlink: 'syz.5.1256': attribute type 33 has an invalid length.
[  177.286293][ T9453] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1256'.
[  177.289794][ T9453] `: renamed from team0 (while UP)
[  178.300599][ T9490] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1261'.
[  179.336821][ T9505] netlink: 'syz.5.1269': attribute type 29 has an invalid length.
[  179.343066][ T9505] netlink: 'syz.5.1269': attribute type 29 has an invalid length.
[  179.464303][ T9520] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1271'.
[  179.585921][ T9525] syzkaller0: entered promiscuous mode
[  179.587872][ T9525] syzkaller0: entered allmulticast mode
[  180.016835][ T9537] netlink: 'syz.5.1278': attribute type 21 has an invalid length.
[  180.413321][ T9542] netlink: 'syz.3.1279': attribute type 1 has an invalid length.
[  180.416070][ T9542] netlink: 'syz.3.1279': attribute type 4 has an invalid length.
[  180.418734][ T9542] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1279'.
[  180.911861][ T9537] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1278'.
[  181.128863][ T5855] Bluetooth: hci1: command 0x0406 tx timeout
[  181.806386][ T9565] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1286'.
[  182.031651][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'.
[  182.053122][ T9571] : entered promiscuous mode
[  182.153877][ T9569] syzkaller0: entered promiscuous mode
[  182.155870][ T9569] syzkaller0: entered allmulticast mode
[  182.254473][ T9576] netlink: 'syz.3.1289': attribute type 10 has an invalid length.
[  182.798074][ T9587] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1290'.
[  183.396496][ T9576] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  183.404776][ T9576] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  183.477076][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'.
[  183.570710][ T9598] netlink: 'syz.5.1293': attribute type 29 has an invalid length.
[  183.574303][ T9598] netlink: 'syz.5.1293': attribute type 29 has an invalid length.
[  183.582137][ T9598] netlink: 'syz.5.1293': attribute type 29 has an invalid length.
[  183.593367][ T9598] netlink: 'syz.5.1293': attribute type 29 has an invalid length.
[  183.599062][ T9601] netlink: 'syz.2.1294': attribute type 29 has an invalid length.
[  183.781453][ T9601] netlink: 'syz.2.1294': attribute type 29 has an invalid length.
[  183.785304][ T9604] netlink: 'syz.2.1294': attribute type 29 has an invalid length.
[  183.789425][ T9605] netlink: 'syz.2.1294': attribute type 29 has an invalid length.
[  184.059397][ T9621] erspan0 speed is unknown, defaulting to 1000
[  184.173093][ T9621] erspan0 speed is unknown, defaulting to 1000
[  184.270559][ T9630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1300'.
[  184.273965][ T9625] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1300'.
[  184.277147][ T9630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1300'.
[  184.349787][ T9630] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1300'.
[  184.413108][ T9634] netlink: 'syz.3.1302': attribute type 29 has an invalid length.
[  184.862961][ T9660] IPv6: : Disabled Multicast RS
[  186.447535][ T9694] __nla_validate_parse: 6 callbacks suppressed
[  186.447591][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'.
[  186.468439][ T9684] netlink: 146936 bytes leftover after parsing attributes in process `syz.5.1319'.
[  186.472721][ T9684] openvswitch: netlink: Message has 6 unknown bytes.
[  186.642635][ T9701] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1324'.
[  186.690300][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'.
[  186.727276][ T9701] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1324'.
[  188.683982][ T9714] validate_nla: 7 callbacks suppressed
[  188.684076][ T9714] netlink: 'syz.2.1328': attribute type 21 has an invalid length.
[  189.465170][ T9740] netlink: 'syz.2.1335': attribute type 29 has an invalid length.
[  189.588192][ T9740] netlink: 'syz.2.1335': attribute type 29 has an invalid length.
[  189.742313][ T9743] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  189.746047][ T9743] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  189.817678][ T9746] netlink: 'syz.5.1337': attribute type 2 has an invalid length.
[  189.828361][ T9746] k*: entered promiscuous mode
[  189.933798][ T9754] syzkaller1: tun_chr_ioctl cmd 1074025677
[  189.936698][ T9754] syzkaller1: linktype set to 780
[  189.943289][ T9754] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1339'.
[  189.948955][ T9754] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1339'.
[  189.953501][ T9754] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1339'.
[  190.103689][ T9759] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1342'.
[  190.112355][ T9759] sysfs: cannot create duplicate filename '/class/ieee80211/`]Iq!>s*!)'
[  190.117041][ T9759] CPU: 0 UID: 0 PID: 9759 Comm: syz.3.1342 Not tainted syzkaller #0 PREEMPT(full) 
[  190.117058][ T9759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.117067][ T9759] Call Trace:
[  190.117073][ T9759]  <TASK>
[  190.117079][ T9759]  dump_stack_lvl+0x189/0x250
[  190.117106][ T9759]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.117123][ T9759]  ? __pfx__printk+0x10/0x10
[  190.117155][ T9759]  ? kernfs_path_from_node+0x2f/0x290
[  190.117174][ T9759]  ? kernfs_path_from_node+0x250/0x290
[  190.117189][ T9759]  ? kernfs_path_from_node+0x2f/0x290
[  190.117210][ T9759]  sysfs_warn_dup+0x8e/0xa0
[  190.117227][ T9759]  sysfs_do_create_link_sd+0xc0/0x110
[  190.117247][ T9759]  device_add_class_symlinks+0x1cf/0x240
[  190.117268][ T9759]  device_add+0x475/0xb50
[  190.117289][ T9759]  wiphy_register+0x1ba6/0x28d0
[  190.117318][ T9759]  ? __pfx_wiphy_register+0x10/0x10
[  190.117333][ T9759]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  190.117360][ T9759]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  190.117381][ T9759]  ieee80211_register_hw+0x3484/0x4100
[  190.117411][ T9759]  ? ieee80211_register_hw+0x1481/0x4100
[  190.117437][ T9759]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  190.117459][ T9759]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  190.117479][ T9759]  ? __hrtimer_setup+0x187/0x210
[  190.117491][ T9759]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  190.117509][ T9759]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  190.117554][ T9759]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  190.117574][ T9759]  ? trace_kmalloc+0x1f/0xd0
[  190.117594][ T9759]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  190.117614][ T9759]  ? kstrndup+0xbf/0x160
[  190.117637][ T9759]  hwsim_new_radio_nl+0xea4/0x1b10
[  190.117659][ T9759]  ? __pfx___nla_validate_parse+0x10/0x10
[  190.117686][ T9759]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  190.117717][ T9759]  ? __nla_parse+0x40/0x60
[  190.117735][ T9759]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  190.117762][ T9759]  genl_family_rcv_msg_doit+0x215/0x300
[  190.117786][ T9759]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  190.117816][ T9759]  ? bpf_lsm_capable+0x9/0x20
[  190.117835][ T9759]  ? security_capable+0x7e/0x2e0
[  190.117854][ T9759]  genl_rcv_msg+0x60e/0x790
[  190.117878][ T9759]  ? __pfx_genl_rcv_msg+0x10/0x10
[  190.117895][ T9759]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  190.117937][ T9759]  ? __asan_memcpy+0x40/0x70
[  190.117954][ T9759]  ? __pfx_ref_tracker_free+0x10/0x10
[  190.117974][ T9759]  netlink_rcv_skb+0x208/0x470
[  190.117988][ T9759]  ? __lock_acquire+0xab9/0xd20
[  190.118038][ T9759]  ? __pfx_genl_rcv_msg+0x10/0x10
[  190.118059][ T9759]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  190.118091][ T9759]  ? down_read+0x1ad/0x2e0
[  190.118112][ T9759]  genl_rcv+0x28/0x40
[  190.118136][ T9759]  netlink_unicast+0x82f/0x9e0
[  190.118155][ T9759]  ? __pfx_netlink_unicast+0x10/0x10
[  190.118171][ T9759]  ? netlink_sendmsg+0x642/0xb30
[  190.118184][ T9759]  ? skb_put+0x11b/0x210
[  190.118203][ T9759]  netlink_sendmsg+0x805/0xb30
[  190.118223][ T9759]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.118238][ T9759]  ? aa_sock_msg_perm+0xf1/0x1d0
[  190.118253][ T9759]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  190.118267][ T9759]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.118281][ T9759]  __sock_sendmsg+0x21c/0x270
[  190.118294][ T9759]  ____sys_sendmsg+0x505/0x830
[  190.118312][ T9759]  ? __pfx_____sys_sendmsg+0x10/0x10
[  190.118334][ T9759]  ? import_iovec+0x74/0xa0
[  190.118351][ T9759]  ___sys_sendmsg+0x21f/0x2a0
[  190.118367][ T9759]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.118403][ T9759]  ? __fget_files+0x2a/0x420
[  190.118413][ T9759]  ? __fget_files+0x3a0/0x420
[  190.118431][ T9759]  __x64_sys_sendmsg+0x19b/0x260
[  190.118469][ T9759]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  190.118493][ T9759]  ? rcu_is_watching+0x15/0xb0
[  190.118510][ T9759]  ? do_syscall_64+0xbe/0x3b0
[  190.118527][ T9759]  do_syscall_64+0xfa/0x3b0
[  190.118541][ T9759]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.118554][ T9759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.118568][ T9759]  ? exc_page_fault+0x9f/0xf0
[  190.118583][ T9759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.118595][ T9759] RIP: 0033:0x7f22d7f8eba9
[  190.118608][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.118618][ T9759] RSP: 002b:00007f22d8eab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.118633][ T9759] RAX: ffffffffffffffda RBX: 00007f22d81d5fa0 RCX: 00007f22d7f8eba9
[  190.118641][ T9759] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000009
[  190.118650][ T9759] RBP: 00007f22d8011e19 R08: 0000000000000000 R09: 0000000000000000
[  190.118657][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.118665][ T9759] R13: 00007f22d81d6038 R14: 00007f22d81d5fa0 R15: 00007fff2e818528
[  190.118688][ T9759]  </TASK>
[  190.329183][ T9763] netlink: 'syz.3.1342': attribute type 2 has an invalid length.
[  190.335354][ T9760] netlink: 'syz.5.1341': attribute type 9 has an invalid length.
[  190.338841][ T9760] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.1341'.
[  190.993184][ T9792] netlink: 'syz.3.1350': attribute type 21 has an invalid length.
[  190.997248][ T9792] siw: device registration error -23
[  191.003819][ T9792] netlink: 'syz.3.1350': attribute type 21 has an invalid length.
[  191.562797][ T9813] __nla_validate_parse: 7 callbacks suppressed
[  191.562816][ T9813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1354'.
[  191.572856][ T9813] caif0: entered promiscuous mode
[  191.575605][ T9813] caif0: entered allmulticast mode
[  191.579475][ T9813] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1354'.
[  191.699849][ T9819] netlink: 'syz.3.1356': attribute type 29 has an invalid length.
[  191.755909][ T9820] netlink: 'syz.3.1356': attribute type 29 has an invalid length.
[  191.759610][ T9820] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1356'.
[  191.763721][ T9820] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1356'.
[  193.012308][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.062823][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.136470][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.204551][   T12] bond0: (slave netdevsim0): Releasing backup interface
[  193.209049][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.312147][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.315599][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.319141][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.322316][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.325569][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.023874][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.027666][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.057636][ T9841] erspan0 speed is unknown, defaulting to 1000
[  194.298816][   T12] bridge_slave_1: left allmulticast mode
[  194.303996][   T12] bridge_slave_1: left promiscuous mode
[  194.306031][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.331053][   T12] bridge_slave_0: left allmulticast mode
[  194.333401][   T12] bridge_slave_0: left promiscuous mode
[  194.339662][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.449593][ T9873] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  194.867700][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.873713][   T12] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  194.876874][   T12] veth1_vlan: left allmulticast mode
[  194.883277][   T12] bond0 (unregistering): (slave `): Releasing backup interface
[  194.894876][   T12] bond0 (unregistering): Released all slaves
[  194.951200][ T9875] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.1370'.
[  194.954452][ T9841] erspan0 speed is unknown, defaulting to 1000
[  194.976941][ T5314] erspan0 speed is unknown, defaulting to 1000
[  195.128162][  T289] smc: removing ib device syz2
[  195.203780][ T9890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1371'.
[  195.360796][ T5855] Bluetooth: hci0: command tx timeout
[  195.408113][ T9841] chnl_net:caif_netlink_parms(): no params data found
[  195.739849][ T9841] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.749421][ T9841] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.752267][ T9841] bridge_slave_0: entered allmulticast mode
[  195.763340][ T9841] bridge_slave_0: entered promiscuous mode
[  195.771016][ T9841] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.779520][ T9841] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.788203][ T9841] bridge_slave_1: entered allmulticast mode
[  195.799016][ T9841] bridge_slave_1: entered promiscuous mode
[  195.827676][ T9931] bpf: Bad value for 'uid'
[  195.844169][ T9841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.883505][ T9841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.898518][ T9935] netlink: 'syz.2.1379': attribute type 2 has an invalid length.
[  195.909996][ T9935] netlink: 'syz.2.1379': attribute type 1 has an invalid length.
[  195.978443][   T12] k*: left promiscuous mode
[  196.072592][ T9841] team0: Port device team_slave_0 added
[  196.077532][ T9841] team0: Port device team_slave_1 added
[  196.090627][ T5855] Bluetooth: hci2: command 0x0406 tx timeout
[  196.134668][ T9841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.137725][ T9841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.150925][ T9841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.163197][ T9841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.166284][ T9841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.177862][ T9841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.297456][ T9841] hsr_slave_0: entered promiscuous mode
[  196.302807][ T9841] hsr_slave_1: entered promiscuous mode
[  196.306022][ T9841] debugfs: 'hsr0' already exists in 'hsr'
[  196.308555][ T9841] Cannot create hsr debugfs directory
[  196.342235][ T9949] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1382'.
[  196.505940][ T9955] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1383'.
[  196.522931][ T9955] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1383'.
[  196.541256][ T9960] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1384'.
[  196.894139][ T9976] -1: renamed from syzkaller0
[  197.254659][   T12] hsr_slave_0: left promiscuous mode
[  197.257619][   T12] hsr_slave_1: left promiscuous mode
[  197.268727][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.283243][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.286602][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.289122][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.305593][   T12] veth1_macvtap: left promiscuous mode
[  197.307630][   T12] veth0_macvtap: left promiscuous mode
[  197.309765][   T12] veth1_vlan: left promiscuous mode
[  197.330169][   T12] veth0_vlan: left promiscuous mode
[  197.440059][ T5856] Bluetooth: hci0: command tx timeout
[  198.228568][ T9996] netlink: 'syz.3.1391': attribute type 1 has an invalid length.
[  198.247237][ T9996] netlink: 'syz.3.1391': attribute type 2 has an invalid length.
[  198.495750][T10001] netlink: 'syz.3.1393': attribute type 9 has an invalid length.
[  198.505511][T10001] netlink: 178448 bytes leftover after parsing attributes in process `syz.3.1393'.
[  198.569372][   T12] ` (unregistering): Port device team_slave_1 removed
[  198.594317][   T12] ` (unregistering): Port device team_slave_0 removed
[  198.895063][ T9841] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  198.912112][ T9841] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  198.934890][ T9841] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  198.971416][ T9841] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  199.089450][ T9841] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.114008][ T9841] 8021q: adding VLAN 0 to HW filter on device team0
[  199.131069][  T470] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.133383][  T470] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.146229][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.149227][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.336386][ T9841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.530699][ T5856] Bluetooth: hci0: command tx timeout
[  199.583345][ T9841] veth0_vlan: entered promiscuous mode
[  199.592093][ T9841] veth1_vlan: entered promiscuous mode
[  199.618814][ T9841] veth0_macvtap: entered promiscuous mode
[  199.625879][ T9841] veth1_macvtap: entered promiscuous mode
[  199.647049][ T9841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.662280][ T9841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.684004][ T6214] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.687988][ T6214] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.694083][ T6214] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.698112][ T6214] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.786988][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.791957][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.841194][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.844449][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.977300][T10054] netlink: 40227 bytes leftover after parsing attributes in process `syz.5.1401'.
[  201.195149][T10085] netlink: 'syz.5.1407': attribute type 39 has an invalid length.
[  201.638304][ T5856] Bluetooth: hci0: command tx timeout
[  201.738991][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'.
[  201.767983][T10101] erspan0 speed is unknown, defaulting to 1000
[  202.470207][T10145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1425'.
[  202.476599][T10145] openvswitch: netlink: Flow actions attr not present in new flow.
[  202.543182][T10148] netlink: 763 bytes leftover after parsing attributes in process `syz.5.1424'.
[  203.489639][T10186] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1436'.
[  203.547737][T10185] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1436'.
[  204.279007][T10194] netlink: 'syz.2.1439': attribute type 1 has an invalid length.
[  204.283661][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'.
[  204.393085][T10194] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1439'.
[  204.412942][T10197] netlink: 'syz.5.1440': attribute type 21 has an invalid length.
[  205.195084][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1451'.
[  205.198538][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1451'.
[  205.202623][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1451'.
[  206.229022][T10237] netlink: 'syz.3.1453': attribute type 11 has an invalid length.
[  206.239858][T10237] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.1453'.
[  206.348524][T10234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.616068][T10252] dummy0: entered promiscuous mode
[  206.625312][T10252] dummy0: entered allmulticast mode
[  206.632772][T10258] netlink: 'syz.3.1459': attribute type 29 has an invalid length.
[  206.639351][T10257] netlink: 'syz.3.1459': attribute type 29 has an invalid length.
[  206.661259][T10257] netlink: 'syz.3.1459': attribute type 29 has an invalid length.
[  206.680941][T10257] netlink: 'syz.3.1459': attribute type 29 has an invalid length.
[  206.728456][T10247] delete_channel: no stack
[  206.736808][T10247] delete_channel: no stack
[  206.791661][T10262] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1461'.
[  207.506182][T10292] netlink: 'syz.5.1469': attribute type 25 has an invalid length.
[  207.558463][T10292] netlink: 'syz.5.1469': attribute type 39 has an invalid length.
[  208.430720][T10317] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1477'.
[  208.488093][T10318] sctp: [Deprecated]: syz.3.1476 (pid 10318) Use of int in maxseg socket option.
[  208.488093][T10318] Use struct sctp_assoc_value instead
[  209.295713][T10336] netlink: 'syz.3.1481': attribute type 10 has an invalid length.
[  209.299226][T10336] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1481'.
[  209.776061][T10363] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1490'.
[  210.298411][T10374] netlink: 'syz.3.1492': attribute type 10 has an invalid length.
[  210.598950][T10382] netlink: 'syz.5.1495': attribute type 10 has an invalid length.
[  210.735974][T10374] bond0: (slave wlan1): Releasing backup interface
[  210.965416][T10394] netlink: 'syz.2.1498': attribute type 29 has an invalid length.
[  211.158207][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1501'.
[  211.166303][T10405] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  211.169738][T10405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.977579][T10440] validate_nla: 3 callbacks suppressed
[  212.977595][T10440] netlink: 'syz.3.1514': attribute type 29 has an invalid length.
[  212.991489][T10440] netlink: 'syz.3.1514': attribute type 29 has an invalid length.
[  212.997775][T10440] netlink: 'syz.3.1514': attribute type 29 has an invalid length.
[  213.002345][T10440] netlink: 'syz.3.1514': attribute type 29 has an invalid length.
[  213.212632][T10462] erspan0 speed is unknown, defaulting to 1000
[  213.724516][ T5856] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  214.135772][T10498] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1529'.
[  214.182089][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'.
[  214.465075][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'.
[  214.489211][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'.
[  214.646444][T10525] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1538'.
[  215.418267][T10543] netlink: 294 bytes leftover after parsing attributes in process `syz.2.1543'.
[  215.422887][T10542] netlink: 294 bytes leftover after parsing attributes in process `syz.2.1543'.
[  215.602643][T10553] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1545'.
[  215.632369][ T5856] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  216.598672][T10572] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1551'.
[  216.693365][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'.
[  216.837987][T10585] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1556'.
[  216.882122][T10588] netlink: 'syz.2.1557': attribute type 4 has an invalid length.
[  216.885289][T10588] netlink: 'syz.2.1557': attribute type 16 has an invalid length.
[  216.888456][T10588] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1557'.
[  217.188623][T10603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.195130][T10604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.252614][T10604] netlink: 'syz.3.1560': attribute type 46 has an invalid length.
[  217.329230][ T5855] Bluetooth: hci0: ISO packet for unknown connection handle 4
[  217.680042][ T5855] Bluetooth: hci0: command tx timeout
[  219.403536][T10653] netlink: 'syz.5.1574': attribute type 10 has an invalid length.
[  219.409717][T10653] bond0: (slave bond_slave_0): Releasing backup interface
[  220.273612][T10672] __nla_validate_parse: 9 callbacks suppressed
[  220.273632][T10672] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1582'.
[  220.395034][T10674] netlink: 'syz.2.1583': attribute type 9 has an invalid length.
[  220.398385][T10674] netlink: 'syz.2.1583': attribute type 8 has an invalid length.
[  220.403146][T10674] netlink: 143452 bytes leftover after parsing attributes in process `syz.2.1583'.
[  220.427953][T10674] netlink: 'syz.2.1583': attribute type 21 has an invalid length.
[  220.435138][T10674] IPv6: NLM_F_CREATE should be specified when creating new route
[  220.532977][T10679] netlink: 'syz.3.1585': attribute type 28 has an invalid length.
[  220.536458][T10679] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1585'.
[  220.645132][T10683] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1586'.
[  220.686899][ T5855] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  220.726800][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1588'.
[  220.830673][T10691] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1589'.
[  220.838670][T10691] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1589'.
[  220.843840][T10691] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1589'.
[  221.025563][T10695] netlink: 'syz.5.1591': attribute type 12 has an invalid length.
[  221.028360][T10695] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1591'.
[  221.048192][T10700] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1592'.
[  221.704564][T10730] netlink: 'syz.3.1601': attribute type 21 has an invalid length.
[  224.333791][T10772] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  224.337170][T10772] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  225.028626][T10804] netlink: 'syz.3.1621': attribute type 3 has an invalid length.
[  225.457600][T10826] netlink: 'syz.2.1628': attribute type 46 has an invalid length.
[  225.492497][T10829] netlink: 'syz.5.1629': attribute type 11 has an invalid length.
[  225.529401][T10824] __nla_validate_parse: 10 callbacks suppressed
[  225.529416][T10824] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1627'.
[  225.677848][T10835] netlink: 'syz.3.1631': attribute type 2 has an invalid length.
[  225.681958][T10835] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.1631'.
[  225.686402][T10835] nbd: must specify at least one socket
[  225.723472][T10835] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  225.730644][T10835] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  227.597041][T10878] !: renamed from bond_slave_0 (while UP)
[  227.820095][T10889] netlink: 'syz.3.1646': attribute type 29 has an invalid length.
[  227.824128][T10889] netlink: 'syz.3.1646': attribute type 29 has an invalid length.
[  227.828063][T10889] netlink: 'syz.3.1646': attribute type 29 has an invalid length.
[  227.834471][T10889] netlink: 'syz.3.1646': attribute type 29 has an invalid length.
[  228.100344][T10900] netlink: 'syz.5.1650': attribute type 2 has an invalid length.
[  228.168096][T10903] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1651'.
[  228.182644][T10902] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1651'.
[  228.192745][T10903] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1651'.
[  229.128573][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'.
[  229.138767][T10912] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1652'.
[  229.309072][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'.
[  229.729767][T10922] netlink: 'syz.5.1657': attribute type 21 has an invalid length.
[  229.737495][T10922] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1657'.
[  229.960706][T10928] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1658'.
[  229.966258][T10928] bond_slave_1: entered promiscuous mode
[  230.459825][T10949] veth1_to_bond: entered allmulticast mode
[  231.041012][T10967] __nla_validate_parse: 1 callbacks suppressed
[  231.041031][T10967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1671'.
[  231.047677][T10967] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  231.184413][T10983] netlink: 'syz.5.1675': attribute type 10 has an invalid length.
[  231.187918][T10983] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.1675'.
[  231.636400][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1679'.
[  231.834288][T11006] netlink: 'syz.5.1680': attribute type 29 has an invalid length.
[  232.375081][ T5855] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  232.423816][T11021] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  233.225496][T11032] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1690'.
[  233.229070][T11032] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1690'.
[  233.233933][T11032] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1690'.
[  233.275658][T11037] netlink: 'syz.2.1691': attribute type 11 has an invalid length.
[  233.288651][T11037] netlink: 'syz.2.1691': attribute type 11 has an invalid length.
[  233.292741][T11037] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1691'.
[  233.495669][T11063] netlink: 'syz.2.1699': attribute type 21 has an invalid length.
[  233.499123][T11063] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1699'.
[  233.504405][T11063] netlink: 'syz.2.1699': attribute type 6 has an invalid length.
[  233.507433][T11063] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1699'.
[  233.521000][T11066] netlink: 'syz.5.1700': attribute type 29 has an invalid length.
[  233.539199][T11066] netlink: 'syz.5.1700': attribute type 29 has an invalid length.
[  233.551911][T11066] netlink: 'syz.5.1700': attribute type 29 has an invalid length.
[  233.557995][T11066] netlink: 'syz.5.1700': attribute type 29 has an invalid length.
[  233.702448][T11072] netlink: 'syz.5.1702': attribute type 29 has an invalid length.
[  233.705324][T11072] netlink: 'syz.5.1702': attribute type 29 has an invalid length.
[  233.951793][T11083] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  233.956373][T11083] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  233.962939][T11083] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  234.412582][T11116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1712'.
[  234.423556][ T5856] Bluetooth: hci1: command 0x0406 tx timeout
[  234.834152][T11122] openvswitch: netlink: Message has 4 unknown bytes.
[  235.803557][ T5856] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  236.128946][T11164] IPv6: Can't replace route, no match found
[  236.797522][T11171] validate_nla: 10 callbacks suppressed
[  236.797531][T11171] netlink: 'syz.2.1731': attribute type 10 has an invalid length.
[  236.994481][T11175] : renamed from gre0 (while UP)
[  237.515101][T11173] erspan0 speed is unknown, defaulting to 1000
[  237.850052][ T5855] Bluetooth: hci2: command 0x0406 tx timeout
[  238.150700][T11199] xt_policy: neither incoming nor outgoing policy selected
[  238.207270][T11202] __nla_validate_parse: 7 callbacks suppressed
[  238.207285][T11202] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1739'.
[  238.215122][T11202] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1739'.
[  238.219654][T11203] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1740'.
[  238.226170][T11201] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1739'.
[  238.427973][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1743'.
[  238.593252][T11221] netlink: 'syz.2.1746': attribute type 1 has an invalid length.
[  238.732090][ T5855] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  238.734695][ T5855] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  238.853577][T11238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1752'.
[  238.864708][T11232] syzkaller1: tun_chr_ioctl cmd 1074025677
[  238.885344][T11232] syzkaller1: linktype set to 823
[  239.100813][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1754'.
[  239.322197][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1756'.
[  239.409382][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'.
[  239.590230][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1758'.
[  239.951258][T11274] delete_channel: no stack
[  240.118967][T11282] netlink: 'syz.5.1765': attribute type 2 has an invalid length.
[  241.877412][ T5856] Bluetooth: hci2: ISO packet for unknown connection handle 770
[  242.697911][T11328] netlink: 'syz.2.1782': attribute type 11 has an invalid length.
[  243.567884][T11343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.990906][T11350] __nla_validate_parse: 9 callbacks suppressed
[  243.990922][T11350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1788'.
[  244.474626][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'.
[  244.742744][T11376] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1794'.
[  244.752640][T11377] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.1794'.
[  244.757194][T11376] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.1794'.
[  244.857985][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  244.917188][T11387] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1797'.
[  244.969023][ T5856] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  244.971803][ T5856] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  244.998577][T11400] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1801'.
[  245.051281][T11402] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1802'.
[  245.057035][T11402] netlink: 'syz.2.1802': attribute type 29 has an invalid length.
[  245.057606][T11396] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1800'.
[  245.063125][T11402] netlink: 'syz.2.1802': attribute type 29 has an invalid length.
[  245.068258][T11402] netlink: 'syz.2.1802': attribute type 29 has an invalid length.
[  245.073083][T11402] netlink: 'syz.2.1802': attribute type 29 has an invalid length.
[  246.912345][T11426] netlink: 'syz.5.1807': attribute type 3 has an invalid length.
[  246.915271][T11426] netlink: 'syz.5.1807': attribute type 1 has an invalid length.
[  249.236186][T11479] : renamed from vlan0 (while UP)
[  249.403694][T11483] netlink: 'syz.2.1827': attribute type 29 has an invalid length.
[  249.420245][T11483] netlink: 'syz.2.1827': attribute type 29 has an invalid length.
[  249.423951][T11483] netlink: 'syz.2.1827': attribute type 29 has an invalid length.
[  249.431673][T11483] netlink: 'syz.2.1827': attribute type 29 has an invalid length.
[  250.463619][T11511] tap0: tun_chr_ioctl cmd 1074025680
[  250.469018][T11513] netlink: 'syz.2.1836': attribute type 29 has an invalid length.
[  250.472122][T11513] netlink: 'syz.2.1836': attribute type 29 has an invalid length.
[  250.475394][T11513] netlink: 'syz.2.1836': attribute type 29 has an invalid length.
[  250.479204][T11513] netlink: 'syz.2.1836': attribute type 29 has an invalid length.
[  250.565573][T11520] netlink: 'syz.2.1837': attribute type 6 has an invalid length.
[  250.574907][T11520] __nla_validate_parse: 8 callbacks suppressed
[  250.574917][T11520] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1837'.
[  250.603974][T11506] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1833'.
[  250.611241][T11506] netlink: 532 bytes leftover after parsing attributes in process `syz.3.1833'.
[  251.992507][T11572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1849'.
[  252.034560][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1849'.
[  252.792064][T11614] netlink: 'syz.3.1862': attribute type 2 has an invalid length.
[  252.798831][T11614] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1862'.
[  253.052095][T11623] netlink: 'syz.5.1866': attribute type 10 has an invalid length.
[  253.055419][T11623] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1866'.
[  253.071290][T11623] ipvlan1: entered promiscuous mode
[  253.073429][T11623] ipvlan1: entered allmulticast mode
[  253.075434][T11623] veth0_vlan: entered allmulticast mode
[  253.091286][T11623] bridge0: port 3(ipvlan1) entered blocking state
[  253.096322][T11623] bridge0: port 3(ipvlan1) entered disabled state
[  253.126380][T11623] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  253.414831][T11638] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1867'.
[  254.294246][ T5856] Bluetooth: hci2: ISO packet for unknown connection handle 531
[  254.547376][T11658] syzkaller0: entered promiscuous mode
[  254.549817][T11658] syzkaller0: entered allmulticast mode
[  255.235485][T11672] netlink: 'syz.3.1880': attribute type 3 has an invalid length.
[  255.238326][T11672] netlink: 199752 bytes leftover after parsing attributes in process `syz.3.1880'.
[  255.282203][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.283467][T11677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1881'.
[  255.284956][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.308349][T11677] netlink: 'syz.3.1881': attribute type 3 has an invalid length.
[  255.453349][T11679] netlink: 'syz.3.1881': attribute type 21 has an invalid length.
[  255.907969][T11684] __nla_validate_parse: 2 callbacks suppressed
[  255.907985][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1884'.
[  255.915577][T11684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1884'.
[  255.958461][T11686] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1883'.
[  256.550203][T11698] netlink: 'syz.3.1887': attribute type 29 has an invalid length.
[  257.239416][T11730] netlink: 'syz.5.1893': attribute type 10 has an invalid length.
[  257.426059][T11717] syzkaller0: entered promiscuous mode
[  257.428852][T11717] syzkaller0: entered allmulticast mode
[  257.438495][T11730] geneve0: entered promiscuous mode
[  257.446889][T11730] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  257.493993][T11733] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1897'.
[  258.534235][T11746] netlink: 'syz.2.1901': attribute type 21 has an invalid length.
[  258.631975][T11751] netlink: 'syz.5.1903': attribute type 2 has an invalid length.
[  258.839274][T11755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1905'.
[  258.844597][T11755] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1905'.
[  258.847684][T11755] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1905'.
[  258.855012][T11755] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1905'.
[  258.861191][T11756] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1905'.
[  258.865670][T11755] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1905'.
[  258.948853][T11761] netlink: 'syz.2.1907': attribute type 3 has an invalid length.
[  258.961097][T11761] netlink: 'syz.2.1907': attribute type 2 has an invalid length.
[  260.032683][T11800] netlink: 'syz.2.1918': attribute type 7 has an invalid length.
[  261.214186][T11827] netlink: 'syz.2.1927': attribute type 40 has an invalid length.
[  262.542685][T11851] netlink: 'syz.2.1932': attribute type 16 has an invalid length.
[  262.546205][T11851] __nla_validate_parse: 6 callbacks suppressed
[  262.546220][T11851] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1932'.
[  262.555808][T11851] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.072604][T11861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1937'.
[  263.626677][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1944'.
[  263.665696][T11891] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1945'.
[  263.669533][T11891] hsr0: entered promiscuous mode
[  263.672463][T11891] hsr0: entered allmulticast mode
[  263.674551][T11891] hsr_slave_0: entered allmulticast mode
[  263.676849][T11891] hsr_slave_1: entered allmulticast mode
[  263.688862][T11891] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1945'.
[  264.058351][T11902] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1949'.
[  264.101637][T11902] netlink: 'syz.5.1949': attribute type 10 has an invalid length.
[  264.105474][T11902] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1949'.
[  264.110320][T11902] bond0: entered promiscuous mode
[  264.120872][T11902] bridge0: port 3(bond0) entered blocking state
[  264.130722][T11902] bridge0: port 3(bond0) entered disabled state
[  264.134373][T11902] bond0: entered allmulticast mode
[  264.136400][T11902] bond_slave_1: entered allmulticast mode
[  264.138669][T11902] geneve0: entered allmulticast mode
[  264.161142][T11902] bridge0: port 3(bond0) entered blocking state
[  264.163525][T11902] bridge0: port 3(bond0) entered listening state
[  264.213337][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1951'.
[  265.485329][T11951] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1964'.
[  266.655478][T11961] netlink: 'syz.5.1967': attribute type 21 has an invalid length.
[  266.658879][T11961] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1967'.
[  267.088579][T11991] netlink: 'syz.5.1972': attribute type 10 has an invalid length.
[  267.093090][T11991] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  267.935548][T12041] __nla_validate_parse: 2 callbacks suppressed
[  267.935600][T12041] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1990'.
[  268.014684][T12044] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1992'.
[  268.017772][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'.
[  268.022159][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1992'.
[  269.467509][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'.
[  271.159428][T12068] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1998'.
[  271.209136][T12068] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.1998'.
[  271.214325][T12070] netlink: 'syz.2.1999': attribute type 10 has an invalid length.
[  271.221885][T12070] veth1_vlan: left allmulticast mode
[  271.350664][T12081] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  271.353590][T12081] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  271.462629][T12087] netlink: 'syz.2.2004': attribute type 2 has an invalid length.
[  271.465781][T12087] netlink: 'syz.2.2004': attribute type 4 has an invalid length.
[  271.468476][T12087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2004'.
[  271.473689][T12088] netlink: 'syz.3.2003': attribute type 2 has an invalid length.
[  271.478830][T12088] netlink: 'syz.3.2003': attribute type 4 has an invalid length.
[  271.483823][T12088] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2003'.
[  272.261923][T12128] netlink: 'syz.5.2015': attribute type 1 has an invalid length.
[  272.264650][T12128] netlink: 'syz.5.2015': attribute type 2 has an invalid length.
[  272.267749][T12128] netlink: 16134 bytes leftover after parsing attributes in process `syz.5.2015'.
[  272.272966][T12128] netlink: 'syz.5.2015': attribute type 1 has an invalid length.
[  272.275458][T12128] netlink: 'syz.5.2015': attribute type 2 has an invalid length.
[  272.333983][T12133] syzkaller0: entered promiscuous mode
[  272.335924][T12133] syzkaller0: entered allmulticast mode
[  273.061600][T12163] netlink: 'syz.3.2027': attribute type 39 has an invalid length.
[  273.715426][T12178] __nla_validate_parse: 4 callbacks suppressed
[  273.715485][T12178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2034'.
[  273.762172][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'.
[  273.818287][T12185] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2036'.
[  274.240255][T12194] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.2038'.
[  274.575904][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'.
[  274.655812][T12208] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2042'.
[  274.665426][T12212] netlink: 209804 bytes leftover after parsing attributes in process `syz.3.2042'.
[  274.726500][T12216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2043'.
[  274.729451][T12216] netlink: 46 bytes leftover after parsing attributes in process `syz.2.2043'.
[  274.747778][T12215] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2044'.
[  276.406160][T12296] validate_nla: 12 callbacks suppressed
[  276.406216][T12296] netlink: 'syz.5.2068': attribute type 39 has an invalid length.
[  279.618544][T12304] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  279.623088][T12304] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  279.656648][T12303] xt_time: unknown flags 0xf4
[  279.702504][T12309] __nla_validate_parse: 10 callbacks suppressed
[  279.702519][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'.
[  279.709092][T12309] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2072'.
[  279.714330][T12309] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2072'.
[  280.087096][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'.
[  280.551155][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'.
[  280.726387][T12346] netlink: 'syz.3.2083': attribute type 21 has an invalid length.
[  280.729836][T12346] IPv6: NLM_F_CREATE should be specified when creating new route
[  281.079863][T12352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2085'.
[  281.083643][T12352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2085'.
[  281.834516][T12368] rdma_rxe: rxe_newlink: failed to add erspan0
[  282.028611][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'.
[  282.031016][T12380] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  282.035977][T12377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.039089][T12377] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.056356][T12377] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.059157][T12377] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.087929][T12377] bond0: (slave batadv0): Releasing backup interface
[  282.532862][T12399] Can't find ip_set type 
[  282.534556][T12401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2097'.
[  286.222326][T12428] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2108'.
[  286.227968][T12428] netlink: 'syz.5.2108': attribute type 3 has an invalid length.
[  286.340739][T12441] netlink: 'syz.5.2110': attribute type 10 has an invalid length.
[  286.357027][T12444] netlink: 'syz.3.2111': attribute type 21 has an invalid length.
[  286.427417][T12441] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  286.432109][T12441] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  286.436020][T12441] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  286.447226][T12444] netlink: 'syz.3.2111': attribute type 12 has an invalid length.
[  286.458596][T12444] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2111'.
[  286.735740][T12456] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2114'.
[  286.745582][T12456] netlink: 'syz.3.2114': attribute type 13 has an invalid length.
[  286.748319][T12456] netlink: 'syz.3.2114': attribute type 17 has an invalid length.
[  286.864478][T12456] caif0: left promiscuous mode
[  286.866351][T12456] caif0: left allmulticast mode
[  286.868045][T12456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.875338][ T5898] erspan0 speed is unknown, defaulting to 1000
[  287.107160][T12459] erspan0 speed is unknown, defaulting to 1000
[  287.352664][T12467] netlink: 'syz.2.2117': attribute type 2 has an invalid length.
[  287.356119][T12467] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.2117'.
[  287.536172][T12473] netlink: 'syz.2.2119': attribute type 6 has an invalid length.
[  287.539095][T12473] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2119'.
[  287.635043][T12478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.686270][T12482] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2122'.
[  287.863356][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'.
[  287.942892][T12489] netlink: 376 bytes leftover after parsing attributes in process `syz.3.2123'.
[  287.946869][T12489] netlink: 376 bytes leftover after parsing attributes in process `syz.3.2123'.
[  288.415023][T12504] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2126'.
[  289.163316][T12540] netlink: 'syz.3.2141': attribute type 11 has an invalid length.
[  289.476377][T12539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.544884][T12558] netlink: 'syz.2.2143': attribute type 21 has an invalid length.
[  289.581440][T12561] netlink: 'syz.5.2144': attribute type 1 has an invalid length.
[  289.872005][T12595] syzkaller0: entered promiscuous mode
[  289.874489][T12595] syzkaller0: entered allmulticast mode
[  289.987657][T12602] netlink: 'syz.5.2150': attribute type 11 has an invalid length.
[  290.007200][T12602] netlink: 'syz.5.2150': attribute type 11 has an invalid length.
[  291.878484][T12630] __nla_validate_parse: 11 callbacks suppressed
[  291.878497][T12630] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2159'.
[  292.775165][T12670] validate_nla: 3 callbacks suppressed
[  292.775177][T12670] netlink: 'syz.2.2170': attribute type 39 has an invalid length.
[  292.779857][T12671] netlink: 'syz.2.2170': attribute type 39 has an invalid length.
[  293.283973][T12673] netlink: 'syz.3.2171': attribute type 7 has an invalid length.
[  293.368229][T12677] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2173'.
[  293.404390][T12677] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  293.419268][T12681] netlink: 'syz.2.2174': attribute type 1 has an invalid length.
[  293.423143][T12681] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2174'.
[  293.428457][T12681] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2174'.
[  293.442326][T12683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2175'.
[  293.445315][T12683] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2175'.
[  293.522228][T12685] syzkaller0: entered promiscuous mode
[  293.525202][T12685] syzkaller0: entered allmulticast mode
[  293.529738][T12683] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2175'.
[  293.774770][T12721] netlink: 'syz.5.2183': attribute type 10 has an invalid length.
[  293.779837][T12712] syzkaller0: entered promiscuous mode
[  293.783413][T12712] syzkaller0: entered allmulticast mode
[  293.786909][T12711] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  293.794509][T12721] bridge0: port 3(bond0) entered disabled state
[  293.796882][T12721] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.799541][T12721] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.807417][T12721] bridge0: port 3(bond0) entered blocking state
[  293.809551][T12721] bridge0: port 3(bond0) entered listening state
[  293.811958][T12721] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.814186][T12721] bridge0: port 2(bridge_slave_1) entered listening state
[  293.816800][T12721] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.819168][T12721] bridge0: port 1(bridge_slave_0) entered listening state
[  293.825112][T12721] bridge0: port 3(bond0) entered disabled state
[  293.827519][T12721] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.830242][T12721] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.370577][T12777] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2196'.
[  294.437946][T12778] netlink: 'syz.3.2196': attribute type 1 has an invalid length.
[  294.468399][T12778] netlink: 'syz.3.2196': attribute type 2 has an invalid length.
[  294.876465][T12780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2199'.
[  294.890015][T12780] openvswitch: netlink: Flow key attr not present in new flow.
[  296.129778][T12801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2205'.
[  296.673768][ T5856] Bluetooth: hci2: ISO packet for unknown connection handle 45
[  297.003866][T12837] __nla_validate_parse: 2 callbacks suppressed
[  297.003885][T12837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2217'.
[  297.982038][T12874] tap0: tun_chr_ioctl cmd 1074025675
[  297.984439][T12874] tap0: persist enabled
[  297.986716][T12874] tap0: tun_chr_ioctl cmd 1074025675
[  297.989068][T12874] tap0: persist enabled
[  297.992864][T12874] netlink: 825 bytes leftover after parsing attributes in process `syz.2.2228'.
[  297.996999][T12874] netlink: 130144 bytes leftover after parsing attributes in process `syz.2.2228'.
[  298.038179][T12874] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2228'.
[  298.047975][T12874] tap0: tun_chr_ioctl cmd 1074025688
[  298.107879][T12880] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2231'.
[  298.114885][T12881] netlink: 'syz.3.2231': attribute type 1 has an invalid length.
[  298.234726][T12888] netlink: 'syz.3.2233': attribute type 2 has an invalid length.
[  298.238215][T12888] netlink: 'syz.3.2233': attribute type 3 has an invalid length.
[  298.241919][T12888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2233'.
[  298.247260][T12888] netlink: 'syz.3.2233': attribute type 21 has an invalid length.
[  299.206797][T12908] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2240'.
[  299.757923][T12916] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2242'.
[  300.018780][T12918] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2243'.
[  300.058102][T12921] netlink: 'syz.5.2244': attribute type 237 has an invalid length.
[  300.251601][T12918] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2243'.
[  300.658396][T12967] IPv6: NLM_F_CREATE should be specified when creating new route
[  300.681070][T12969] netlink: ct family unspecified
[  300.683036][T12969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.775807][T12984] delete_channel: no stack
[  302.243926][T13045] __nla_validate_parse: 4 callbacks suppressed
[  302.243948][T13045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2278'.
[  302.255831][T13047] netlink: 'syz.3.2279': attribute type 21 has an invalid length.
[  302.259005][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'.
[  302.313251][T13046] delete_channel: no stack
[  302.324280][T13045] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.364566][T13045] bridge_slave_0 (unregistering): left promiscuous mode
[  302.367887][T13045] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.173829][T13092] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2288'.
[  303.514704][T13095] syzkaller0: create flow: hash 803351121 index 1
[  303.753715][T13093] syzkaller0: delete flow: hash 803351121 index 1
[  304.172404][T13106] netlink: 'syz.5.2293': attribute type 10 has an invalid length.
[  304.175768][T13106] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2293'.
[  304.721281][T13105] veth1_macvtap: left promiscuous mode
[  304.725957][T13105] macsec0: entered promiscuous mode
[  304.985738][T13113] syzkaller0: entered promiscuous mode
[  304.987958][T13113] syzkaller0: entered allmulticast mode
[  305.216243][T13123] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2298'.
[  305.256032][T13123] netlink: 'syz.5.2298': attribute type 11 has an invalid length.
[  305.258781][T13123] netlink: 149476 bytes leftover after parsing attributes in process `syz.5.2298'.
[  305.303542][T13135] netlink: 'syz.3.2302': attribute type 3 has an invalid length.
[  305.306900][T13135] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2302'.
[  305.316570][T13137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  305.584655][T13142] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2304'.
[  305.636439][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'.
[  305.862925][T13148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.170798][T13160] netlink: 'syz.2.2310': attribute type 27 has an invalid length.
[  306.174129][T13160] netlink: 'syz.2.2310': attribute type 3 has an invalid length.
[  306.179502][T13160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2310'.
[  306.235209][T13165] netlink: 'syz.2.2312': attribute type 12 has an invalid length.
[  307.187319][T13178] netlink: 'syz.2.2314': attribute type 29 has an invalid length.
[  307.197885][T13178] netlink: 'syz.2.2314': attribute type 29 has an invalid length.
[  307.204702][T13178] netlink: 'syz.2.2314': attribute type 29 has an invalid length.
[  307.230460][T13192] netlink: 'syz.5.2319': attribute type 21 has an invalid length.
[  307.317436][T13194] netlink: 'syz.2.2314': attribute type 2 has an invalid length.
[  307.317455][T13194] __nla_validate_parse: 2 callbacks suppressed
[  307.317463][T13194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2314'.
[  307.486678][T13192] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2319'.
[  307.608256][T13200] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2320'.
[  308.316505][T13218] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2326'.
[  308.395565][T13225] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2328'.
[  308.790922][T13239] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2332'.
[  309.021401][T13242] syzkaller1: tun_chr_ioctl cmd 1074025673
[  309.024203][T13242] syzkaller1: tun_chr_ioctl cmd 1074025673
[  309.026828][T13242] syzkaller1: tun_chr_ioctl cmd 1074025673
[  309.033252][T13242] syzkaller1: tun_chr_ioctl cmd 1074025673
[  309.536096][T13259] validate_nla: 5 callbacks suppressed
[  309.536117][T13259] netlink: 'syz.3.2339': attribute type 22 has an invalid length.
[  309.544071][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'.
[  309.624865][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'.
[  309.629246][T13265] openvswitch: netlink: Missing key (keys=40, expected=80)
[  309.673294][T13271] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2343'.
[  309.747213][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2340'.
[  311.041092][T13302] netlink: 'syz.2.2349': attribute type 4 has an invalid length.
[  312.448274][T13322] Unknown options in mask b7f2
[  312.584209][T13326] __nla_validate_parse: 4 callbacks suppressed
[  312.584227][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'.
[  314.216018][T13376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2373'.
[  314.225822][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2373'.
[  314.234394][T13376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2373'.
[  314.250043][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2373'.
[  314.356601][T13376] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  314.358800][T13376] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  314.429240][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2374'.
[  314.434558][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2374'.
[  314.485925][T13378] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2374'.
[  314.497714][T13379] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2374'.
[  315.028450][T13398] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.2380'.
[  315.044074][T13398] netlink: 'syz.5.2380': attribute type 4 has an invalid length.
[  315.153362][T13400] netlink: 'syz.3.2381': attribute type 11 has an invalid length.
[  315.533195][T13426] netlink: 'syz.3.2389': attribute type 17 has an invalid length.
[  315.567699][T13426] erspan0 speed is unknown, defaulting to 1000
[  316.724512][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.726645][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.988213][T13505] pim6reg0: tun_chr_ioctl cmd 1074025681
[  317.675325][T13524] erspan0 speed is unknown, defaulting to 1000
[  317.982013][T13553] delete_channel: no stack
[  318.057149][T13561] __nla_validate_parse: 10 callbacks suppressed
[  318.057159][T13561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2424'.
[  318.181235][T13563] netlink: 'syz.5.2422': attribute type 10 has an invalid length.
[  318.184641][T13563] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2422'.
[  318.251706][T13563] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  318.741010][T13573] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  318.745158][T13573] netlink: 'syz.3.2428': attribute type 1 has an invalid length.
[  318.748037][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2428'.
[  318.752932][T13573] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2428'.
[  318.801938][ T5855] Bluetooth: hci0: command 0x0406 tx timeout
[  319.149467][T13586] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2432'.
[  319.925785][T13613] netlink: 'syz.3.2442': attribute type 29 has an invalid length.
[  319.936425][T13613] netlink: 'syz.3.2442': attribute type 29 has an invalid length.
[  319.994703][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'.
[  320.019204][T13617] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2443'.
[  320.274491][T13625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.760684][T13642] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2452'.
[  321.130776][T13649] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2454'.
[  321.135394][T13650] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2454'.
[  321.712343][T13665] netlink: zone id is out of range
[  321.714675][T13665] netlink: zone id is out of range
[  321.717417][T13665] netlink: zone id is out of range
[  321.719702][T13665] netlink: zone id is out of range
[  321.728459][T13665] netlink: zone id is out of range
[  321.731382][T13665] netlink: zone id is out of range
[  321.733607][T13665] netlink: zone id is out of range
[  321.735476][T13665] netlink: zone id is out of range
[  321.737190][T13665] netlink: zone id is out of range
[  321.799858][T13673] raw_sendmsg: syz.3.2463 forgot to set AF_INET. Fix it!
[  321.811358][ T5856] Bluetooth: hci2: unexpected event 0x2c length: 15 < 17
[  321.814798][ T5856] Bluetooth: hci2: unexpected event 0x2c length: 15 < 17
[  324.327518][T13735] __nla_validate_parse: 4 callbacks suppressed
[  324.327529][T13735] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.2485'.
[  324.347093][T13735] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  324.351713][T13735] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  324.399704][T13741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2485'.
[  324.593638][T13744] siw: device registration error -23
[  324.725989][T13748] netlink: 'syz.2.2490': attribute type 10 has an invalid length.
[  324.728734][T13748] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2490'.
[  324.744220][T13748] bond0: entered promiscuous mode
[  324.761859][T13748] bond_slave_0: entered promiscuous mode
[  324.765377][T13748] bond_slave_1: entered promiscuous mode
[  324.775268][T13748] bridge0: port 1(bond0) entered blocking state
[  324.784093][T13748] bridge0: port 1(bond0) entered disabled state
[  324.790909][T13748] bond0: entered allmulticast mode
[  324.792946][T13748] bond_slave_0: entered allmulticast mode
[  324.795190][T13748] bond_slave_1: entered allmulticast mode
[  324.808673][T13748] bridge0: port 1(bond0) entered blocking state
[  324.811277][T13748] bridge0: port 1(bond0) entered forwarding state
[  325.213053][T13772] netlink: 'syz.2.2497': attribute type 10 has an invalid length.
[  325.641513][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'.
[  325.815426][T13794] netlink: 'syz.3.2503': attribute type 10 has an invalid length.
[  325.894620][T13795] _Z`Ԁ@S!!: entered promiscuous mode
[  326.319110][T13811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2507'.
[  327.078004][T13857] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2519'.
[  327.205651][T13863] net_ratelimit: 38 callbacks suppressed
[  327.205668][T13863] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  327.211276][T13863] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  327.445614][T13865] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2521'.
[  327.452715][T13865] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2521'.
[  327.677800][T13854] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2518'.
[  328.083666][T13884] netlink: 'syz.5.2529': attribute type 5 has an invalid length.
[  329.228261][T13919] netlink: 'syz.2.2542': attribute type 1 has an invalid length.
[  329.234700][T13919] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2542'.
[  329.356584][T13923] __nla_validate_parse: 3 callbacks suppressed
[  329.356599][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2544'.
[  329.363609][T13923] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2544'.
[  329.417882][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2547'.
[  329.607257][T13945] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2550'.
[  329.613630][T13945] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2550'.
[  330.061908][T13963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2556'.
[  330.261219][T13982] nft_compat: unsupported protocol 1
[  330.682936][T13996] netlink: 'syz.3.2565': attribute type 10 has an invalid length.
[  330.692213][T13995] netlink: 'syz.3.2565': attribute type 10 has an invalid length.
[  330.701821][T13996] geneve0: entered promiscuous mode
[  330.744576][T13996] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  330.855961][T13998] netlink: 'syz.3.2566': attribute type 29 has an invalid length.
[  330.860381][T13998] netlink: 'syz.3.2566': attribute type 29 has an invalid length.
[  330.864498][T13998] netlink: 'syz.3.2566': attribute type 29 has an invalid length.
[  331.330352][T14012] netdevsim netdevsim5 : renamed from netdevsim0 (while UP)
[  331.503422][T14024] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2575'.
[  331.550352][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2575'.
[  331.556543][T14028] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2578'.
[  331.584892][T14032] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2580'.
[  331.638647][T14035] netlink: 'syz.3.2581': attribute type 10 has an invalid length.
[  331.897790][T14041] netlink: 'syz.3.2583': attribute type 29 has an invalid length.
[  331.919648][T14041] netlink: 'syz.3.2583': attribute type 29 has an invalid length.
[  331.979112][T14053] netlink: 'syz.5.2587': attribute type 21 has an invalid length.
[  332.016208][T14055] netlink: 'syz.3.2588': attribute type 10 has an invalid length.
[  332.699457][T14075] C: renamed from team_slave_0 (while UP)
[  335.842107][T14088] __nla_validate_parse: 5 callbacks suppressed
[  335.842117][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'.
[  335.851188][T14088] : entered promiscuous mode
[  335.854469][T14088] validate_nla: 1 callbacks suppressed
[  335.854476][T14088] netlink: 'syz.2.2596': attribute type 29 has an invalid length.
[  335.859252][T14089] netlink: 'syz.2.2596': attribute type 29 has an invalid length.
[  335.939804][T14094] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2597'.
[  336.256472][T14112] netlink: 'syz.5.2603': attribute type 29 has an invalid length.
[  336.309338][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2604'.
[  336.312949][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2604'.
[  336.430310][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'.
[  336.438605][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'.
[  339.447664][T14126] syzkaller0: entered promiscuous mode
[  339.449589][T14126] syzkaller0: entered allmulticast mode
[  340.820609][T14161] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.2620'.
[  340.830577][T14161] netlink: 'syz.5.2620': attribute type 4 has an invalid length.
[  341.550475][T14209] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2633'.
[  341.564970][T14209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  342.738254][T14235] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2641'.
[  342.799496][T14237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  342.951541][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2643'.
[  342.962204][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2643'.
[  343.817845][T14264] netlink: 'syz.3.2651': attribute type 10 has an invalid length.
[  343.835929][T14267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'.
[  343.841160][T14267] netlink: 'syz.2.2650': attribute type 10 has an invalid length.
[  343.845631][T14267] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2650'.
[  343.994916][T14268] erspan0 speed is unknown, defaulting to 1000
[  345.284494][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2658'.
[  345.731367][T14299] netlink: 'syz.5.2660': attribute type 11 has an invalid length.
[  345.734528][T14299] netlink: 149476 bytes leftover after parsing attributes in process `syz.5.2660'.
[  345.953326][T14305] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2663'.
[  345.957790][T14305] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2663'.
[  346.374690][T14296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.145004][T14345] __nla_validate_parse: 11 callbacks suppressed
[  347.145025][T14345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2674'.
[  347.774794][T14359] netlink: 'syz.5.2679': attribute type 10 has an invalid length.
[  347.818332][T14359] veth0_vlan: left promiscuous mode
[  347.825736][T14359] veth0_vlan: entered promiscuous mode
[  347.846784][T14359] team0: Device veth0_vlan failed to register rx_handler
[  347.995413][T14359] syz.5.2679 (14359) used greatest stack depth: 18424 bytes left
[  348.061680][T14369] netlink: 182 bytes leftover after parsing attributes in process `syz.3.2681'.
[  348.076506][T14369] netlink: 'syz.3.2681': attribute type 10 has an invalid length.
[  348.085848][T14369] team0: Device veth0_vlan is already a lower device of the team interface
[  348.129820][T14369] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2681'.
[  348.168300][ T5856] Bluetooth: hci0: ISO packet for unknown connection handle 24
[  348.172984][T14374] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2682'.
[  348.412040][T14380] netlink: 'syz.2.2684': attribute type 21 has an invalid length.
[  349.455270][T14419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.485838][T14438] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2698'.
[  350.495062][T14432] netlink: 'syz.3.2698': attribute type 13 has an invalid length.
[  350.498487][T14432] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2698'.
[  350.641376][T14440] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2699'.
[  351.342393][T14459] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.2703'.
[  351.345800][T14454] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.2703'.
[  351.351724][T14459] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.2703'.
[  351.446046][T14467] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.522079][T14466] netlink: 'syz.5.2707': attribute type 29 has an invalid length.
[  353.496304][T14543] netlink: 'syz.5.2724': attribute type 9 has an invalid length.
[  353.798421][T14560] netlink: 'syz.2.2730': attribute type 1 has an invalid length.
[  353.808164][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'.
[  353.824554][T14560] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2730'.
[  353.843628][T14560] netlink: 'syz.2.2730': attribute type 10 has an invalid length.
[  353.851479][T14560] veth1_macvtap: left promiscuous mode
[  354.316550][T14587] netlink: 'syz.2.2739': attribute type 39 has an invalid length.
[  354.433574][T14595] netlink: 'syz.2.2743': attribute type 29 has an invalid length.
[  354.441462][T14595] netlink: 'syz.2.2743': attribute type 29 has an invalid length.
[  354.446165][T14595] netlink: 'syz.2.2743': attribute type 29 has an invalid length.
[  354.501459][T14599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2745'.
[  354.505580][T14599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2745'.
[  354.554740][T14601] netlink: 'syz.3.2746': attribute type 5 has an invalid length.
[  354.577796][T14602] tap1: tun_chr_ioctl cmd 1074025680
[  354.785796][T14621] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.2753'.
[  354.791778][T14621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2753'.
[  354.795645][T14621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2753'.
[  354.876948][T14623] team0: Cannot enslave team device to itself
[  354.882140][T14623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2754'.
[  354.887660][T14623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2754'.
[  354.928047][T14625] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2755'.
[  355.756730][T14653] openvswitch: netlink: Missing key (keys=40, expected=100)
[  355.802128][T14660] validate_nla: 3 callbacks suppressed
[  355.802146][T14660] netlink: 'syz.5.2764': attribute type 2 has an invalid length.
[  355.815095][T14660] netlink: 'syz.5.2764': attribute type 8 has an invalid length.
[  358.026641][T14742] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  358.029607][T14742] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  359.724588][T14788] __nla_validate_parse: 6 callbacks suppressed
[  359.724598][T14788] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.2799'.
[  359.743095][T14788] syzkaller0: entered promiscuous mode
[  359.745298][T14788] syzkaller0: entered allmulticast mode
[  360.103045][T14800] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2803'.
[  360.107763][T14800] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2803'.
[  360.194131][T14805] can: request_module (can-proto-0) failed.
[  360.264349][T14817] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2808'.
[  360.389846][T14819] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2809'.
[  360.829458][T14845] netlink: 'syz.2.2815': attribute type 6 has an invalid length.
[  360.834254][T14845] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2815'.
[  360.841784][T14845] netlink: 'syz.2.2815': attribute type 6 has an invalid length.
[  360.845264][T14845] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2815'.
[  360.903135][T14852] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2817'.
[  360.955813][T14858] bond0: left allmulticast mode
[  360.958007][T14858] bond_slave_1: left allmulticast mode
[  360.963139][T14858] geneve0: left allmulticast mode
[  360.966035][T14858] netdevsim netdevsim5 : left allmulticast mode
[  360.974951][T14858] bridge0: port 3(bond0) entered disabled state
[  362.226655][T14882] netlink: 'syz.2.2826': attribute type 21 has an invalid length.
[  362.292745][T14885] netlink: 'syz.3.2827': attribute type 21 has an invalid length.
[  362.295776][T14885] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2827'.
[  362.326936][T14887] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2828'.
[  362.594715][T14895] netlink: 'syz.2.2831': attribute type 29 has an invalid length.
[  362.610632][T14895] netlink: 'syz.2.2831': attribute type 29 has an invalid length.
[  362.622179][T14895] netlink: 'syz.2.2831': attribute type 29 has an invalid length.
[  362.628056][T14895] netlink: 'syz.2.2831': attribute type 29 has an invalid length.
[  363.600980][T14936] netlink: 'syz.2.2840': attribute type 10 has an invalid length.
[  363.908973][T14936] team0: Port device geneve0 added
[  364.049296][T14949] netlink: 'syz.2.2843': attribute type 10 has an invalid length.
[  364.057333][T14949] ipvlan1: entered promiscuous mode
[  364.059808][T14949] ipvlan1: entered allmulticast mode
[  364.063063][T14949] veth0_vlan: entered allmulticast mode
[  364.236173][T14949] bridge0: port 4(ipvlan1) entered blocking state
[  364.249269][T14949] bridge0: port 4(ipvlan1) entered disabled state
[  364.486336][T14949] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  364.611334][T14971] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  364.622488][T14971] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  365.752687][T15005] __nla_validate_parse: 9 callbacks suppressed
[  365.752703][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'.
[  365.758711][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'.
[  365.766654][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2859'.
[  365.915892][T15021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.366250][T15118] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2879'.
[  367.370678][T15111] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2879'.
[  367.374531][T15111] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2879'.
[  367.382045][T15111] validate_nla: 4 callbacks suppressed
[  367.382056][T15111] netlink: 'syz.3.2879': attribute type 1 has an invalid length.
[  367.389132][T15111] netlink: 'syz.3.2879': attribute type 1 has an invalid length.
[  367.437503][T15120] netlink: 'syz.3.2881': attribute type 5 has an invalid length.
[  367.718430][T15127] netlink: 'syz.3.2882': attribute type 4 has an invalid length.
[  367.721886][T15127] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2882'.
[  367.864230][T15129] netlink: 'syz.3.2883': attribute type 13 has an invalid length.
[  367.931653][T15137] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2885'.
[  368.116458][T15140] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2886'.
[  368.622691][T15129] !: left promiscuous mode
[  368.624958][T15129] bond_slave_1: left promiscuous mode
[  368.847333][   T10] erspan0 speed is unknown, defaulting to 1000
[  368.850771][ T5858] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0
[  368.854538][   T10] syz0: Port: 1 Link DOWN
[  368.860258][ T6214] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.870108][  T793] erspan0 speed is unknown, defaulting to 1000
[  368.870143][ T6214] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.890660][ T6214] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.070372][T15151] netlink: 'syz.2.2890': attribute type 39 has an invalid length.
[  370.244531][T15188] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2901'.
[  370.398915][T15196] debugfs: '`]Iq!>s*!)' already exists in 'ieee80211'
[  370.623288][T15213] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  370.627573][T15213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.138358][T15222] netlink: 'syz.2.2910': attribute type 3 has an invalid length.
[  371.166574][T15224] __nla_validate_parse: 2 callbacks suppressed
[  371.166584][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'.
[  371.189635][T15224] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2911'.
[  371.366171][ T5856] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9
[  371.451109][T15250] netlink: 'syz.2.2918': attribute type 28 has an invalid length.
[  371.454235][T15250] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2918'.
[  371.497080][T15254] netlink: 'syz.3.2920': attribute type 21 has an invalid length.
[  371.510747][T15257] tap0: tun_chr_ioctl cmd 1074025678
[  371.512550][T15257] tap0: group set to 0
[  371.514039][T15256] tap0: tun_chr_ioctl cmd 1074025678
[  371.516140][T15256] tap0: group set to 0
[  371.918995][T15271] netlink: 'syz.5.2925': attribute type 3 has an invalid length.
[  371.927508][T15271] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.2925'.
[  371.944091][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2925'.
[  372.066283][T15273] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2926'.
[  372.354668][T15291] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2932'.
[  372.405665][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2933'.
[  372.703686][T15308] validate_nla: 3 callbacks suppressed
[  372.703698][T15308] netlink: 'syz.2.2936': attribute type 39 has an invalid length.
[  373.097699][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2935'.
[  373.939751][T15336] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  373.944906][T15336] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  373.949135][T15336] CPU: 0 UID: 0 PID: 15336 Comm: syz.3.2943 Not tainted syzkaller #0 PREEMPT(full) 
[  373.952458][T15336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  373.956004][T15336] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  373.958026][T15336] Code: 18 00 74 08 4c 89 ef e8 ed 8e 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ea 8d 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 c1 8e 01 f8 4d 89 2e 41 80 3c 1f 00
[  373.964567][T15336] RSP: 0018:ffffc900069b70e8 EFLAGS: 00010246
[  373.966607][T15336] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  373.969263][T15336] RDX: ffffc90026ede000 RSI: 0000000000000390 RDI: 0000000000000391
[  373.971982][T15336] RBP: ffff88803976e430 R08: ffff888020b90000 R09: 0000000000000002
[  373.974633][T15336] R10: 000000000000000a R11: 0000000000000002 R12: ffff8881163468a8
[  373.977452][T15336] R13: ffff88803976e428 R14: 0000000000000000 R15: 1ffff11022c68d16
[  373.980887][T15336] FS:  00007f22d8e8a6c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  373.984638][T15336] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  373.987489][T15336] CR2: 000000110c2b1ec8 CR3: 0000000120392000 CR4: 00000000000006f0
[  373.990908][T15336] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  373.994297][T15336] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  373.997751][T15336] Call Trace:
[  373.999205][T15336]  <TASK>
[  374.000529][T15336]  ? xfrm_state_insert+0x44/0x60
[  374.002694][T15336]  xfrm_state_insert+0x54/0x60
[  374.004809][T15336]  ipcomp4_init_state+0x673/0xb20
[  374.007016][T15336]  __xfrm_init_state+0xa76/0x13f0
[  374.009200][T15336]  ? __xfrm_init_state+0x7ef/0x13f0
[  374.011461][T15336]  xfrm_add_sa+0x2f5b/0x4070
[  374.013434][T15336]  ? __pfx_xfrm_add_sa+0x10/0x10
[  374.015609][T15336]  ? apparmor_capable+0x137/0x1b0
[  374.017817][T15336]  ? __nla_parse+0x40/0x60
[  374.019716][T15336]  xfrm_user_rcv_msg+0x7a3/0xab0
[  374.021475][T15336]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  374.023797][T15336]  ? __pfx___mutex_trylock_common+0x10/0x10
[  374.026185][T15336]  ? rcu_is_watching+0x15/0xb0
[  374.028112][T15336]  ? trace_contention_end+0x39/0x120
[  374.029979][T15336]  ? __mutex_lock+0x335/0x1350
[  374.031973][T15336]  netlink_rcv_skb+0x208/0x470
[  374.033812][T15336]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  374.035830][T15336]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  374.037563][T15336]  ? netlink_deliver_tap+0x2e/0x1b0
[  374.039728][T15336]  ? netlink_deliver_tap+0x2e/0x1b0
[  374.041884][T15336]  xfrm_netlink_rcv+0x79/0x90
[  374.043853][T15336]  netlink_unicast+0x82f/0x9e0
[  374.045983][T15336]  ? __pfx_netlink_unicast+0x10/0x10
[  374.048261][T15336]  ? netlink_sendmsg+0x642/0xb30
[  374.050193][T15336]  ? skb_put+0x11b/0x210
[  374.051821][T15336]  netlink_sendmsg+0x805/0xb30
[  374.053672][T15336]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.055784][T15336]  ? aa_sock_msg_perm+0xf1/0x1d0
[  374.057859][T15336]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  374.060190][T15336]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.062525][T15336]  __sock_sendmsg+0x21c/0x270
[  374.064509][T15336]  ____sys_sendmsg+0x505/0x830
[  374.066600][T15336]  ? __pfx_____sys_sendmsg+0x10/0x10
[  374.068896][T15336]  ? import_iovec+0x74/0xa0
[  374.070898][T15336]  ___sys_sendmsg+0x21f/0x2a0
[  374.072939][T15336]  ? __pfx____sys_sendmsg+0x10/0x10
[  374.075169][T15336]  ? __fget_files+0x2a/0x420
[  374.077105][T15336]  ? __fget_files+0x3a0/0x420
[  374.078645][T15336]  __x64_sys_sendmsg+0x19b/0x260
[  374.080542][T15336]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  374.082608][T15336]  ? rcu_is_watching+0x15/0xb0
[  374.084172][T15336]  ? do_syscall_64+0xbe/0x3b0
[  374.085803][T15336]  do_syscall_64+0xfa/0x3b0
[  374.087607][T15336]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.089620][T15336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.091649][T15336]  ? exc_page_fault+0x9f/0xf0
[  374.093250][T15336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.095306][T15336] RIP: 0033:0x7f22d7f8eba9
[  374.097184][T15336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.104885][T15336] RSP: 002b:00007f22d8e8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  374.108452][T15336] RAX: ffffffffffffffda RBX: 00007f22d81d6090 RCX: 00007f22d7f8eba9
[  374.111817][T15336] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  374.115175][T15336] RBP: 00007f22d8011e19 R08: 0000000000000000 R09: 0000000000000000
[  374.118455][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.121838][T15336] R13: 00007f22d81d6128 R14: 00007f22d81d6090 R15: 00007fff2e818528
[  374.125260][T15336]  </TASK>
[  374.126597][T15336] Modules linked in:
[  374.128390][T15336] ---[ end trace 0000000000000000 ]---
[  374.130599][T15336] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  374.132627][T15336] Code: 18 00 74 08 4c 89 ef e8 ed 8e 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ea 8d 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 c1 8e 01 f8 4d 89 2e 41 80 3c 1f 00
[  374.139187][T15336] RSP: 0018:ffffc900069b70e8 EFLAGS: 00010246
[  374.141316][T15336] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  374.143973][T15336] RDX: ffffc90026ede000 RSI: 0000000000000390 RDI: 0000000000000391
[  374.146628][T15336] RBP: ffff88803976e430 R08: ffff888020b90000 R09: 0000000000000002
[  374.149415][T15336] R10: 000000000000000a R11: 0000000000000002 R12: ffff8881163468a8
[  374.152472][T15336] R13: ffff88803976e428 R14: 0000000000000000 R15: 1ffff11022c68d16
[  374.155662][T15336] FS:  00007f22d8e8a6c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  374.159293][T15336] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  374.162067][T15336] CR2: 000000110c2b1ec8 CR3: 0000000120392000 CR4: 00000000000006f0
[  374.165262][T15336] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  374.168517][T15336] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  374.171881][T15336] Kernel panic - not syncing: Fatal exception in interrupt
[  374.175580][T15336] Kernel Offset: disabled
[  374.177302][T15336] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:55:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f75 RDI=0000000000000f76 RBP=00000000000003f8 RSP=ffffc900069b6910
R8 =ffff888020988237 R9 =1ffff11004131046 R10=dffffc0000000000 R11=ffffffff854fc840
R12=dffffc0000000000 R13=ffffffff99b02909 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fc8bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f22d8e8a6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b1ec8 CR3=0000000120392000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f22d81a7498 00007f22d81a7470 XMM03=00007f22d81a74a8 00007f22d81a74a0
XMM04=00007f22d8d0d100 00007f22d81a7460 XMM05=00007f22d81a7478 00007f22d81a74c0
XMM06=00007f22d81a74b8 00007f22d81a74b0 XMM07=00007f22d81a74a8 00007f22d81a74a0
XMM08=0000000000000000 00007f22d8012ee7 XMM09=0000000000000000 00007f22d8012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000001cc RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=00000000000001cc RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0748
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=ffffffff81704490
R12=000000000ffff441 R13=dffffc0000000000 R14=00000000000001cc R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f22d8eab6c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e123ffc CR3=0000000120392000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f22d81a7498 00007f22d81a7470 XMM03=00007f22d81a74a8 00007f22d81a74a0
XMM04=00007f22d8d0d100 00007f22d81a7460 XMM05=00007f22d81a7478 00007f22d81a74c0
XMM06=00007f22d81a74b8 00007f22d81a74b0 XMM07=00007f22d81a74a8 00007f22d81a74a0
XMM08=0000000000000000 00007f22d8012ee7 XMM09=0000000000000000 00007f22d8012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
