last executing test programs:

2.871716209s ago: executing program 1 (id=3328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x20008855)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x28, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYBLOB="e3dc0814a2e318df51c9be17e26a805385bd89bbb55a385ba3e3c1f6e6d80d5ab5c114d3a5bfa85118ffac3b64359126ba66830c1399ebf20d16a85fe4a2035a010a47acf056120a0ca3407c11e3db446bc941e8f8391fd6c4386a2e0bb5"], 0xac}, 0x1, 0x0, 0x0, 0x2000c0c3}, 0x48004)
r4 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000000240), 0x67)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)

2.871302443s ago: executing program 1 (id=3329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0xec}}, 0x44081)

2.787075086s ago: executing program 1 (id=3330):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000010000003f000000400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000010000003f000000400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=<r6=>0xffffffffffffffff], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000100)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8=r8, @ANYRES16=r4, @ANYRESDEC=r6, @ANYRESOCT=r5, @ANYRES16=r3, @ANYBLOB="da30e07657bf64dfc742d1fec6d6512bbc181e463dc0293f4be496af2f9f780a489d7b21d7c3432202a5d2f6223ab5247d7fe1bfe87389a4edefe642eb38f98155eaf13405b7406b028c145ff96de3c7b502dc02be517d6c5bb76f2bee"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8=r8, @ANYRES16=r4, @ANYRESDEC=r6, @ANYRESOCT=r5, @ANYRES16=r3, @ANYBLOB="da30e07657bf64dfc742d1fec6d6512bbc181e463dc0293f4be496af2f9f780a489d7b21d7c3432202a5d2f6223ab5247d7fe1bfe87389a4edefe642eb38f98155eaf13405b7406b028c145ff96de3c7b502dc02be517d6c5bb76f2bee"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x4c, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080000000400000004000000090019f48a710000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffff8546}, 0x4, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r3, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffff8546}, 0x4, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r3, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x6, 0xfffffffb}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000800000062000000ad000000950080008639cfc84a00200000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0x22, 0x0, &(0x7f0000000000)="01", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x200040c0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x200040c0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.369299407s ago: executing program 0 (id=3331):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0x800)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)

1.159821942s ago: executing program 1 (id=3332):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0x3, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5005943196505ca1d6d00002020640500000000002020207b1af8fe00000000bf853b368555d2c32ac60b270d7df8ef8ea100000000000007010000f8ffffffb702000008000000b70300000200000085000000b300000095bf8587e5eb87bbd458c2cafd03a75621e356e5273213f3d510088a781cebaa29bedd227494a4e725b4f2949ef79d55f189c6d48a9cf8cbccbbb73b6e927590f342df6344b3076915c94e"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020500020e00000000000000070000000500060000000e000a004e217ffbfffffee700000000000000000000000000aa040000000000000002000100000004d4008100000100008005000500000000000a"], 0x70}, 0x1, 0x400000000000000}, 0x20000000) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x8000, r1}, 0x18) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="190000000400000008e4ffff0700004000000022af96766479360cd3b875d100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x34, &(0x7f0000000200)=""/39, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x4b, 0x10, &(0x7f0000000280)={0x4, 0x9, 0xcdd, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff, r3, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x4, 0x3, 0x1, 0x1}, {0x0, 0x3, 0xf, 0x9}, {0x200004, 0x2, 0x6, 0x8}, {0x4, 0x2, 0xb, 0x7}], 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='cachefiles_vol_coherency\x00', r5, 0x0, 0x7}, 0x18) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) (async)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00'}, 0x18) (async)
r6 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r6, &(0x7f0000000880)={&(0x7f0000000740)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/123, 0x7b}], 0x1, &(0x7f0000000840)=""/56, 0x38}, 0x2) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf82000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x300, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x7, 0x0, &(0x7f0000000000)="259a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="d8000000320081054e81f782db44b904021d080005000200e8fe55e1180015000600142603600e120900210000000401a8001600a40001fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970107f5d89c84c2f74b", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)

1.158511261s ago: executing program 1 (id=3333):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f00000002c0)='FROZEN\x00', 0x7)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r3 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000000035bd0f00000000000000", @ANYRESHEX=r1, @ANYRES8=0x0, @ANYBLOB="040000000000000000000000fdffffffffffffff0000000000000000"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94)
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)

1.097657393s ago: executing program 0 (id=3334):
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e000000400002007a17d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc0000000300000006"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000100), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014008000008080002"], 0x1ec}}, 0x0)

1.078865027s ago: executing program 0 (id=3335):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080)='\x9dc#y@\xf5\xf1\x98\x1b\x93c\xa6?\x83m=\xe74\xb1\xc3\xa8/Y1\xaa\x94\xbb\xefz\xfe`\xaf\xa5\x19<\x8a\x00\x00\'3{\xac\xdb\xa3R\t \xde\x05\xf1\xfe\a\x00\x00:4\xd4\x8e\xf6`\xd8\x12\x00\x04\x00\x00\x00\x00\x00\x00\x19\xf5;\x13\xabm\x92\xb9\xebA\\\xb4\xf5&P\xb3\xf9\x97%\x9a[$\xf1\xe3\xbd\xd8\xf5\x00\xa8\x8d\xd8p\xbd\xe2\x17\xb5#/\xa0\xcd\xf3\xb9+\t\x80\x88\xb3!\x7f\x97\xbb2\x04Q\x1c\xc9S|\xa6\x16[^\x94\xff\x0e\xd8\b\xc7\xd3\x8ek/\xbbm\xceh\xe4\x17\xb7`\xc9\xa5\xaf\xf4!\xd4[\xb7\xfac\xa96\x85\x97\xba\xda\xca\x8ee<\t\xf7\xfcR\xf4l\xfb{\xdd\xba\xd3\x11 \"\xe4\xad\xdd\xa0Ut2\xad\xc0\xd7\r')
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r6, r5, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff3, 0x0, 0x1}}, 0x40) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x30c, 0x6, 0x13b, 0x1, r3, 0x10001, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffff0f00}]}}, 0x0, 0x2a}, 0x28) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async)
r7 = socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r8)
socket$kcm(0x10, 0x2, 0x4)
ioctl$SIOCSIFHWADDR(r8, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) (async)
sendmsg$inet(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100))

1.047946375s ago: executing program 2 (id=3294):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
socket(0x2a, 0xa, 0x8)

955.499933ms ago: executing program 1 (id=3336):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0655865e0050200000000000277fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000f00)={0x0, 0x80, 0x8, 0x3, 0x9, 0x4, 0x0, 0x4, 0x8202, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffff000, 0x0, @perf_config_ext={0x800, 0x5}, 0x2f04, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x71f, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, r2, 0x10b, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000fc0)='fsi_master_gpio_out\x00'}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0x30, 0x80, 0x5, 0xfffff034}, {0x6, 0x0, 0x0, 0x361}]})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200000000000000000007000000"], 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x400c841)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa0000000080a05000000000000000000050000060c001c4000000000000000020900010073797a310000000074000480100001800a000100726564697200000050000180080001006e61740044000280080004400000000c0800034000000003080002400000000208000440000000000800054000000010080002600000000a08000240000000020800024000000002100001800a00010071356f7461000000140000001100010000000000000000000000000a7f58b826aa2f165069581d2367b1125bf9a94e"], 0xc8}, 0x1, 0x0, 0x0, 0x4000002}, 0x4004801)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000f80)={'bridge_slave_0\x00', 0x2002})
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272})
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x14}, 0x44000)

890.267047ms ago: executing program 0 (id=3337):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x200c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1d, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bff13f3dd27950ecc7021219022cb8bee320000008000000b7040000000000048500000003000000950000000000000046b1060aedc2627da0e3d631cabc5d4a5c43da77a6b6849ac922b2391d86a0459389c1db7b3b4a64d0a3c2d549cbb317acabf2009d6f9fe771392138b08d4ef71eb7907d495e6016e6f4e6ac42977c9c44"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e06800000011"], 0x68}, 0x20000000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26)
mkdir(0x0, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="2ca1542b", 0x4}], 0x1}, 0x40000000)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, &(0x7f0000000240)=""/11, 0x9, 0x0, 0x2d, 0x0, &(0x7f0000000280)="46dd93d7664b1e9ef768b98547d6f370ef25cce57ed07b689648aa2cfb778ed954f5e95c4cffc54212f3109b77", 0x0, 0x1, 0x0, 0x4}, 0x50)
r6 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)

720.51263ms ago: executing program 0 (id=3338):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
close(0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="180000002400010325c87000fff8fd2515000000040021"], 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0xc084)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x10, 0x0, 0x0, 0x2, 0x5}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @float={0x9, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0]}}, &(0x7f0000001480)=""/4096, 0x3f, 0x1000, 0x1, 0x1}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r5, 0x6, 0x19, &(0x7f0000000440)=r4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080))

718.739804ms ago: executing program 2 (id=3339):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x140f, 0x8, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x8001)

660.996122ms ago: executing program 2 (id=3340):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001480)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @mark={0xc, 0x15, {0x35075c, 0x3}}]}, 0xcc}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711263000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

595.673809ms ago: executing program 2 (id=3341):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001780080001800400", @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x802, 0x2, 0x8, 0x0, 0x9, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYBLOB="00e8ff0000000000000000000000000000000000cbc9cf880fbf0447eb5c8433923389f0b3b0831bcecbe8e5d91c0fafce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ac000000fee9070b340000ff0000000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0}, 0x90)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080))
sendmsg$inet(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8040)

67.830955ms ago: executing program 2 (id=3342):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40140}, 0x10)
r2 = socket$kcm(0x29, 0x5, 0x0)
syz_clone(0x20140000, &(0x7f0000000240)="52a39c3f740f29291b48e26931282acfbd06ccf67ff568d74a2c069f29aa9d51e9c9e9a63146b677efc3abc86d8ef7fa855cfbd0eb075c93d77c63bde38386f5091863bcb3ba34cc051404dbd9f111014a0d78a5f27d678e599af1f36364a3b7bce6e1e312681f31611672e21e722185ed7df47914b15abb6b6251533318a9ae606fa08474a0b643682649e215d4d2df6fe8909f5c9053a7d385296b9abed95d5df9a049a76c53a318", 0xa9, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="71bf32cea7e2d1be4b39645b1a19b9994d826c9591c948c4541aba8dba9f3476e731414134f9e8237787604eb36761d4db6cc179ecd0d4f091ac45983c9275e18bc4dad9a8ace7c56fddddfc2b4f71309ea07a521b77ccdee7fa25acdfc46b1efc9fba8238d57747993b15843ca15c2803b7e13106c4fc81fa84aece555a974f7f475efbe17bd04af1b7c7b46729cd79bdff66b06879b4538183dafb8aeee02890e156bd87dada64b6d8036cf3c1bc9c5b472f88c91f6ef3")
sendmsg$netlink(r1, &(0x7f0000000cc0)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)=[{&(0x7f0000000480)={0x2ac, 0x2a, 0x1, 0x70bd25, 0x25dfdbfd, "", [@nested={0x8, 0x5f, 0x0, 0x1, [@nested={0x4, 0x17}]}, @typed={0xc, 0x128, 0x0, 0x0, @u64}, @typed={0x8, 0x135, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x4f, 0x0, 0x0, @uid}, @generic="c852a8af8a42c30272be6b6afb25de5c4dbd9b13d96effeab1771bce42aef0414e403f60604724cddd4052048b034e8c8393b6f95d5eccd8dee4c258b7fb451e0db821158ab199982102", @generic="ed9707e6b70ca0673d6a1ced47b7e2cbf92fd8a4762e5c0fcf51d2832e76f6a091e6d7f9b5576e77fc28307c90b6a4d1e385f2fcfbea", @generic="20e5d525eae66c194dfc7e4915d7cad22bf2da9e3c56232b016f631bd80db373a8639342d3a596d45e9972958ca2b51341286f797d9b0917693b7b7aa670151cb8dfce9bc4babbbfe0340b8c9600734b9662030e2320a0a09401ae8a93b5b4e57c8db5e8250519ab4f6e433ebc1c2f01e6fbd49dbf6a04eb3e91619e2585e660e54e6f57ccd3abfbca24e925e3fc565ec7ec6d0c7c44c8591f7fa6f52aeeb6f1b04c19bf2f8c8e747c97241fff8b99c4a33ee697daa086f899df55cc570a1417eb8778125aa989f93d7a17f5db989debff4c", @nested={0x8, 0x4e, 0x0, 0x1, [@nested={0x4, 0x12b}]}, @generic="9d39eccb7c21f45e15971be4024ec5933e699da807f4e8aeb2438c66bdc87342843fa3575c87324dee9e4d4a54c17bca105b79a0814c72edbc9e81", @nested={0xdd, 0xa4, 0x0, 0x1, [@generic="90a5fd85c61327e80e268f0ecc1750a10d7d5fd4f11655de5d481888aca08a372001eb47aa54797f1dff5e860bf4bce06558275c7e9205c6179a6cb151d263847507b74df9f3895ff8e2f4b37cf5eab1cdbbdcaa057e9de73b29c053a622171241a76861643d820ad5f9c76e72abeaf660f3e82496ab3c78ae54d1c47a00fd52ee5e083ea5a3e693951043460ee5a7ed656f78d5c464246e50c918a42d7f79dee68c1e4406ccc0a466da60ed710b6bedd361a454b34173cd820d4c", @generic="cb316af197e72119c5ec9ce55ebaa9bd74f9e918e5a7679504bef19c3675"]}]}, 0x2ac}, {&(0x7f0000000740)={0x288, 0x3e, 0x800, 0x70bd2c, 0x25dfdbff, "", [@nested={0x1ac, 0xa7, 0x0, 0x1, [@nested={0x4, 0x2b}, @typed={0xe, 0x126, 0x0, 0x0, @binary="4ebf8b5ccdf473f10352"}, @generic="68fe5dd18a70a3394fe7c6f46a514aef2a5061a9301203915996c09a6a13798a42cf4493a5091a4a6651bf8e7f2b15", @nested={0x4, 0x65}, @typed={0xd6, 0x6c, 0x0, 0x0, @binary="ce01889d6cf1d3837d208f297281ce0a970187e9d3203ff22c93d15f796225036c9aad7782e46002c296f73f1baca412f251ad0a376389aa55b1ae6713844c4d8ae256422e2bafbcfbc5a24d5a7e87b0b52c8024faa96c628474bd99b0464e57c0df6d2f0c4118518661899da141971580e1b2c4fc33ed0fd20887bded994660ca60eb04c169528226b835253bfb3623507b41ba2debb46c69df236d46f1f247fc5f88a6e05895b6ca6265936e9f9c19f076068e22430fa8fffdb256b4740b8038ff58c11a442f85970f86c586901e790ff0"}, @nested={0x4, 0x92}, @generic="b83d80f3ff34d8f4b2525da64f36ae17cf2c64e6778d51a41bf1357397800419b8162e7b5d825515e08e40ab7907d3b94932f1e671f182dca79b1e2e613462be5e067bd8e7568d99442331dde69b0a24e7a66a0b4459e5b74a7434055d72cecefcb388d44ac5d3150454892b968ef4f244bb7fb13585b5c23315f94575e8a39d5117cf3721"]}, @nested={0x5d, 0x150, 0x0, 0x1, [@nested={0x4, 0x14d}, @nested={0x4, 0x6b}, @generic="67782dece9a4f1d1810db85c86a5a630a6e90a85f4d0f5fca1b83679b676aa8c11235d389347aabfa544329c281c0e50e3998532d51e6e232702004535", @nested={0x4, 0x102}, @nested={0x4, 0x106}, @typed={0x9, 0xee, 0x0, 0x0, @str='%-.}\x00'}]}, @nested={0x6c, 0x35, 0x0, 0x1, [@generic="0a72076c89032fd4c9b1be143e60ca1c1c4023a110275c37bbe1ac2d08454e4064c6bc541ea0e6eb61e1cf6889b7d6e600e57075a735ea3759650ad46d69a68b1856f3e62232ade2471db6b425966ffd658f7c8fb1ac5334b3a545eca596c74f0ce92b8724380e2a"]}]}, 0x288}, {&(0x7f0000000a00)={0x248, 0x38, 0x400, 0x70bd26, 0x25dfdbfc, "", [@nested={0x22f, 0x24, 0x0, 0x1, [@generic="7dffd30025b8579f36", @nested={0x4, 0x75}, @generic="69e33ca6c353ebd8f6cb9426c6bd50e8f81967e49a1ba21136d509ccf260d389cb80d11ac56a348986f3b5f09585fa5b926b1e96ff749f63e3c7d0ece1a00f67e924b02b24c0dc2d504ed73282affd2c7bef225fc80e91b8787bd44bf7181b5983a009cac886cd32b46bd838839bce7f442b0dc4c64a52e6d7e57f7158cadbdc3bf1ea7ff9d512a01ac4559422c630070d9518b59dda8eac7889fd81fb09e000278f310f0a149e902f375dfe44f4d10f76d01ed9af81971d44b68f4ce10ad4f7fcb1ca473202fd1f65b7e7f2ace68f805abb29bf09aaac3b8cda4e", @generic="c8a29a29ef4ae58ac325789f0df3dbdbebd018a9f554feab845305f4cbb114cc459aa0fa3c881ce802c082bb93e36ee9d489181fab5bb99645c0855895", @generic="067fe57d111f5bc33c454e0ec0b68130c84cb6b869760c96ec4242e3795b97c52ce3651760ef8bfb16589a5d7d47966eb133c422b8f7d5e465215fec77f441d39396b2adc540ceec36", @typed={0x8, 0x99, 0x0, 0x0, @u32=0xffffffff}, @nested={0x4, 0x51}, @generic="d8a058d990ce6c032ddd6fca03906f9615e8b396f2b2282fb265cf040246aa0b83102a6228490c490a99979d980d44725ae1f6723ca5bfed2bb7f4bfe9d6decfd92563bc542659145cc36d1f65d3e9e9804787507b64bd7680402c9f663e95e394f2e523fb37e454baf11cd66d1837a56c9655c219714be835a8258505abfeb806ab3ab757ab9494a68926c3ad54f72d0e2f44489508a8848eef82ebfcb1c93a57cab29efe027261a033af140d3676083d"]}, @typed={0x5, 0x135, 0x0, 0x0, @str='\x00'}]}, 0x248}], 0x3}, 0x5)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x10, 0x3f5, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x240008c0}, 0x800)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xc, [@var={0xa, 0x0, 0x0, 0xe, 0x2}, @float={0xd, 0x0, 0x0, 0x10, 0x4}, @const={0x3, 0x0, 0x0, 0xa, 0x2}, @struct={0xf, 0x2, 0x0, 0x4, 0x0, 0x1, [{0x6, 0x5, 0x83}, {0x2, 0x4, 0xa}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x1}}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f, 0x5f, 0x2e, 0x30, 0x5f, 0x61, 0x0]}}, &(0x7f0000000ec0)=""/209, 0x88, 0xd1, 0x0, 0xcb8, 0x10000, @value=r1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003040)={r4, 0x20, &(0x7f0000003000)={&(0x7f0000001000)=""/4096, 0x1000, 0x0, &(0x7f0000002000)=""/4096, 0x1000}}, 0x10)
r5 = syz_clone(0x8000000, &(0x7f0000003080)="de77ef011dac5be15b09da869150e41593844927b8e0379de05bff146d424bc6f960af016f69ba56512217f3469c898df431cbed95560d32278bf3343073751045f7650e89ec616dcd5b3edb1e30db9ef81024006e1d97f59c2a392542a57b899a332f7e0248d43cd03f76d7ac7aad146babe46da269d3514c411b40fe54b491362bb094f4a36b469d55ed9b09446c5815cb2a8c8148fac854b7c01a5ffea766ebadd676c885fe0d4be13b4bc17c4bc820a53f8583c859cfc9a1af35fea8a583d18d58eaf9161a72bd0b5fc79f51bcad5933dccbd8", 0xd5, &(0x7f0000003180), &(0x7f00000031c0), &(0x7f0000003200)="202ed4f91ab0d4b8d5472499a0f48a113cf0c78eecf440024e5b03d535598ed6559bb5b5599904d12eeae5cff808b995c45eaaf246e9fb415c209f334ced11bf9994edc46636abe344710481b68f7b6adb45391e4e65090e72e4c4ebc18f54ca2bff8326b44787")
r6 = syz_open_procfs$namespace(r5, &(0x7f0000003280)='ns/net\x00')
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000003400)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x59f0499aa65e76f1}, 0xc, &(0x7f00000033c0)={&(0x7f0000003300)={0x9c, 0xa, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7dda06da}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
close(r3)
r7 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000003440)={<r8=>r2})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003740)={0xffffffffffffffff, 0xe0, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003480)=[0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000034c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003500)=[0x0, 0x0, 0x0], 0x0, 0x45, &(0x7f0000003540)=[{}], 0x8, 0x10, &(0x7f0000003580), &(0x7f00000035c0), 0x8, 0x92, 0x8, 0x8, &(0x7f0000003600)}}, 0x10)
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003780)={r8, r9, 0x25, 0x19, @void}, 0x10)
r11 = bpf$ITER_CREATE(0x21, &(0x7f00000037c0)={r10}, 0x8)
openat$cgroup_int(r11, &(0x7f0000003800)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000003900)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_CMD={0x5, 0x1, 0x9150ba0145ecc3d4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0xc5)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003c00)={r11, 0x58, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000003cc0)={0x0, 0x1d, &(0x7f0000003940)=@raw=[@exit, @jmp={0x5, 0x1, 0x8, 0x3, 0x3, 0xc, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2c3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0x3, 0x6, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0xb, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0xe23}], &(0x7f0000003a40)='GPL\x00', 0xffffffff, 0xf8, &(0x7f0000003a80)=""/248, 0x41100, 0x20, '\x00', r12, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000003c40)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r11, 0x0, &(0x7f0000003c80)=[0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94)
r13 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r13, &(0x7f0000005540)={&(0x7f0000003d80)=@x25, 0x80, &(0x7f00000052c0)=[{&(0x7f0000003e00)="f4ee14c42239939fb30b3255fda06df9799b475a5e6c84ec078bbc46bb4a3ceaf9b91a9f9d2d6c399e300dc70ab51b2ad8832422093b4dcb64725be88b844a48e4fb3909495d73ca13785f03fef198e0d629cb1fa660d0277f13ea67d9fb7627c9596cda6aaf8a96d84b68fa447b279ae3fef90cdd7a4d77b0fedb69efee711e64524d295ee92e0b04", 0x89}, {&(0x7f0000003ec0)="91e29b583be8199ae87994e8ca786957b631a7343f7e371474103b708236df075f741bf251f6f625c02e450033a78113f1782deefc18bf90bc6b40c0f989f99c1c78aaa90e0ba911b94a4ad5dd5656454a8565203e6d898ada7ff4f7f51f7ba5a521858df79beeda54d8fdd5e5e262be9a0b40bafa38bda0f04876b8", 0x7c}, {&(0x7f0000003f40)="cc728dd2be963b3a1c2789d7a97c100caef8cc4f72b528db11ca7dde8f688568b6dea4dc06b6e15eb8437794c7e0dc89bebe553215ac4112948824a3fb058d4086de8c2ff9a027f11f4887ff46a26ce6d7ef0515c3276317fb97be8f03bbba3e8cd30d27fe60cf7bf98b4fce0f4cdce66df5f9513b7d74e6e75c446fc7eec72256f8699fb362f6ecf5be90a7884e1f8da943b902", 0x94}, {&(0x7f0000004000)="2ba5d0808faa1bacec314e5d89a47212f70f03502649f522facf082786cb93f932e22f6bab64d3129f74d147b6c0d8cc6139ca8e63a64973df7c3691227c37f582c1d7f6fe49cb4a729e5780d3b32b2ac6cd15d5de7080206c03046ed1d84cd0ea81fa76212216c68de4df64b2c77032eff98b7fd085dc29748c02c316b698bd1b4a59eeee7bd5588fdde8081ef391324badd17edecd09", 0x97}, {&(0x7f00000040c0)="2c77433dbfbbd5a6397bb5037988622671d7d48f8c94929efa6845b0e9930483ca541623e8b5eb1358db26b252d4c2e3775dfe8f5e6fbd75671cab978f7800f9d60ff820b77b6f1827f8896c3f59a3f023112429bfa297ef22aa0fd43a4aafaedb42b183af9b003653315aba00ae228b9adb9ad8575cb7d206a1a70ebd0513c52dc58453fedfec61bf8ee7ff955d1d", 0x8f}, {&(0x7f0000004180)="c169c98d06105c7ce35c63af7c8e6243661b1225f6bf22f89a6865f0f0705fd2ea5d65518f6a3b6bdfc8c135a129cfff", 0x30}, {&(0x7f00000041c0)="623f3bdd514660a65f28cb78206122ce43f5aaaf3f7754ca98d97e5d0d53aedf30c3ac64cb40ca0fd5c59105ac6c25c142", 0x31}, {&(0x7f0000004200)="a4c3ccd12b9ed9624d285c601abd252cc676d3ed8403a6b1b1043ad8ae96297e36519ae6dc46fc32b191cfc84a3583e670206b0b7e5f76119d13ac5f23d2139c3085a3c35f83baafc6d0b4b73a8187f346ab131cf82ede9eb316af021634b290bcc06948c91862465526d16bd2372014c5a615617ad08d3a0b3c52aba0ba48bd5278fc27e7851290b09ec13c6f584f9195a563c9fc", 0x95}, {&(0x7f00000042c0)="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", 0x1000}], 0x9, &(0x7f0000005380)=[{0xf8, 0x6, 0x4, "3b4c57421ef40e5bf1a193083678aa8ee4face64b80608b0858620688f3f077767b88b32938530a9e4e6440081be1c32a6e6b8c0ce905c7bb018ba7679526a16edb9096427937292515847ea741e1547f3a06c3eeb347394664cb4dcf3e4dd60c4b10d0a7afe0c97ba49c3eb35672b1943c7a82fbf2e5c37671af9b995953ecc942c006d89a5a2e3e98191d1cb4e336df0e0416845b27f258a5e534b1e68464b8e8f24e23d601bb9a167b2b23e6288410c95d0f7e9d8406809c65e9472d617cd394cd1f08cad9267d13b6c4257ebd2eeccd50711c6681d3c0c92acad50b6ea7a4c2f"}, {0x98, 0x29, 0x4, "4eeb443b0ba00437ab592ca876817fe53134355cec666885572a7fcfdaef1b19e40a08731189d00fa0dfb5221f60e8e8de9f8c681d58c2d40c27ce20d93ac5ce3a2b6fddd21d18a2d0914cf57b1e9080f1f0e308efc23f9d50f693ccdab669b7872c84f8ffc35c1073ccfad017e987acad51d979f4a58c166b158de71dee075411"}], 0x190}, 0x10)
sendmsg$AUDIT_USER_AVC(r11, &(0x7f0000005640)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005600)={&(0x7f00000055c0)={0x10, 0x453, 0x800, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x80c0)
recvmsg$qrtr(r8, &(0x7f0000005e80)={&(0x7f0000005680), 0xc, &(0x7f0000005ac0)=[{&(0x7f00000056c0)=""/183, 0xb7}, {&(0x7f0000005780)=""/162, 0xa2}, {&(0x7f0000005840)=""/13, 0xd}, {&(0x7f0000005880)}, {&(0x7f00000058c0)=""/233, 0xe9}, {&(0x7f00000059c0)=""/33, 0x21}, {&(0x7f0000005a00)=""/191, 0xbf}], 0x7, &(0x7f0000005b40)=[{0x108, 0x0, 0x0, ""/241}, {0xd0, 0x0, 0x0, ""/188}, {0x40, 0x0, 0x0, ""/41}, {0x28, 0x0, 0x0, ""/24}, {0xd0, 0x0, 0x0, ""/189}], 0x310, 0x62}, 0x38, 0x1121)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000006040)={r11, &(0x7f0000005ec0)="832f180d9fc89b33980e70ef404d186f054cbc062518bdcfc23e25ee91fbace2bc38091b6b0fc04557067a048128ec72aaf2bd2457dfbe73c20a441c74c5126d3e5796941890d76ffe92217f094072728a026182c3cf19d01cc57023", &(0x7f0000005f40)=""/209}, 0x20)
write$cgroup_type(r11, &(0x7f0000006080), 0x9)

884.357µs ago: executing program 0 (id=3343):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x29)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000001c0)="ca7e1403996985ef51cff9f7579e5d575f7f8fde80accf90ce840c1b6971be373fe152563dd4a3c6b1f72006d77b9277ff0f6ca0a357b8dfbb2dc8adc9d0edeff5f6f5ddb369852188bc62e54da4b3c59a5262de5d0e5e492b60bc3ea36be2528ad921c36c3575bd1bcc61c39878b0c0def6e80f4fe7db547182a033167df63ba50046d77d1651178f0d9a04019e4589036657187b9423209ffef78d22c6d4ba61ecd940281a19a50f160a6a5dd99858015b1eedd6f8f206772785dade816cf9c6283f10562cc7ba156afb4624fa3ae59d5e4f4ee0f74e3397f155f78e7af84e026eb12537db18d677c7a366", &(0x7f00000002c0)=""/73, &(0x7f0000000340)="f7", &(0x7f0000000380)="c2f2644175dc448ede10771c5c227e79992a88cf3c288249f56916a3e35f4ca751418af6b70b2f3f97cd57653dd90895f34f9b35a34211e4cb44dae110710738ab04ebe969568428be02586797610d070aa1dcc904b200c993aff11a4d90b61c85a4f1ca228d5adfe2dc", 0xfffffffe, r3, 0x4}, 0x38)
recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0xfdef}], 0x1}, 0x80)
r5 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(0x0, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x100})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))

0s ago: executing program 2 (id=3344):
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=<r0=>0xffffffffffffffff, 0x37, 0x1, 0x5, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x9, <r3=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=r2, 0xffffffffffffffff, 0x15, 0x3a, 0xffffffffffffffff, @void, @void, @void, @value=r3, r1}, 0x20)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = syz_clone(0x200000, &(0x7f00000002c0)="378369ed37f932e785585081174c1950203a5eb0baef3c52a48e80622a805dd7b606eb1f54ba23963e2105ff6e04efd34a9a54696ab13767fc10d09a2e", 0x3d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="80152e4dc76c667d184268a8e8bf474e710277fcbc5e0e9dc2e440ddd6613cd265f60d426bf85f508cad427e67de77fb32bf33")
r6 = syz_open_procfs$namespace(r5, &(0x7f00000003c0)='ns/pid\x00')
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback=r2, r0, 0x35, 0x2050, r0, @value=r7, @void, @void, @void, r1}, 0x20)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0x4}, 0x8)
ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f00000004c0)=""/40)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000500)=@phonet={0x23, 0xa, 0x2, 0x1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)="5c16d0f2a648c761cfdfadb1ae7b7a0db035d8e79eb2548ff4ab1eed34d01e182757f3d76b2441df8aae1fcd3fce69d4dd83489ae7d9fb0b3203261f669d4cc48260044e88bc69ab", 0x48}, {&(0x7f0000000600)="2e0066e459fa0dea259f81c3763adfa9ef0a62cf9d366c19be3db4ba8740cdaf888caf0aa0d0d85e1a0d359c78951847418cb6c667e06d6c5f548f2338c4fe91daf323fb1971d312d2de8621cbecf877f3cedb2d9db6055f1fde62414d32aa4d41ed46c9782e16c1701af078eb40c95e257463b9e9d1", 0x76}, {&(0x7f0000000680)="dfe9c4f8edc236af8ac6cf2634ffba60b4aeb352ed8b2beeed0013e1455040ad4e85dcfa27de904af3663ec4bc71415e962f11bfd2de", 0x36}], 0x3}, 0x200c0880)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x54081, 0x0)
ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0)
perf_event_open(&(0x7f0000000780)={0x3, 0x80, 0x80, 0x8, 0x18, 0xff, 0x0, 0x8, 0x8004, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4a70, 0x4, @perf_config_ext={0x7fff, 0x81f}, 0x4000, 0x3, 0x5, 0x7, 0x7, 0xbe, 0xffd5, 0x0, 0x5, 0x0, 0xc02d}, r5, 0xffffffffffffffff, r0, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000800)='\'\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], <r10=>0x0, 0x73, &(0x7f0000000900)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x74, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000b40)={'vlan1\x00', @random="18d17be22a7f"})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b80)={<r11=>0xffffffffffffffff})
r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10, r11}, 0x18)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@fallback=r6, r0, 0x12, 0x1c, r0, @void, @value=r12, @void, @void, r1}, 0x20)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x41, '\x00', r9, r0, 0x1, 0x4, 0x4}, 0x50)
r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x1f, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='syzkaller\x00', 0x7, 0x8d, &(0x7f0000000e40)=""/141, 0x41000, 0x10, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f00)={0x0, 0xd, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000f40)=[r0, r0, r13], &(0x7f0000000f80)=[{0x1, 0x1, 0x1, 0x2}, {0x1, 0x4, 0xc, 0xc}, {0x1, 0x1, 0xb, 0x1}, {0x0, 0x4, 0x1, 0x3}, {0x1, 0x1, 0xa, 0xc}, {0x0, 0x5, 0x2, 0xa}], 0x10, 0x3}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000010c0)={r14, r0, 0x1, 0x0, @val=@target_btf_id=r10}, 0x14)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001240)={r2, &(0x7f0000001100)="5e477344ac7cb38b30b8f2030b2b558048adfcf17b154f82608470c3b6061fe7724d20be18f8f0f14a726bc9adb6c6a1154d06e05168b6270b2a9acb718ff86a1ff85b7393af7a07e628f2e30b454819f8076009a024d7791a1b3d3969a477a8e7d3f694c2b99de654731e066e59e58479b9aced1d1a0272c54b72e68c05a217d8387b0ca5eae657bea2861c92fe0060311f6dcbb47488e3c3e160857b5a618ae7e14ca365d2769c0e22773058addc37cda89d3ca4a6ad580e49321f5159308c0726ad8d01ec73c35feb5025dda54aab9e0b5a2f7b193fda0e0542ee1e5b0c20a3c91d199bc60e", &(0x7f0000001200)=""/50}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001280)={0x551}, 0x8)
r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002440)={0x6, 0x2, &(0x7f00000012c0)=@raw=[@ldst={0x3, 0x3, 0x2, 0xb, 0x2, 0xffffffffffffffff, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x9e}], &(0x7f0000001300)='GPL\x00', 0x1, 0x1000, &(0x7f0000001340)=""/4096, 0x41100, 0x4c, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000002340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000002380)={0x1, 0xb, 0xfffffc58, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000023c0)=[r0, r0], &(0x7f0000002400)=[{0x2, 0x4, 0xc, 0xc}], 0x10, 0x5}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002500)={r15, r9, 0x25, 0x10, @void}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x11, 0x18, &(0x7f0000002540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @ldst={0x0, 0x2, 0x2, 0x8, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @exit, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @printk={@i}]}, &(0x7f0000002600)='syzkaller\x00', 0xe29, 0xb3, &(0x7f0000002640)=""/179, 0x41100, 0x6, '\x00', r9, 0x0, r0, 0x8, &(0x7f0000002700)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000002740)={0x2, 0xb, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

kernel console output (not intermixed with test programs):

nk: 'syz.0.1300': attribute type 27 has an invalid length.
[  179.411445][T10582] raw_sendmsg: syz.0.1303 forgot to set AF_INET. Fix it!
[  179.522639][T10594] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  179.781547][T10622] netlink: 'syz.0.1312': attribute type 4 has an invalid length.
[  179.784792][T10622] __nla_validate_parse: 8 callbacks suppressed
[  179.784802][T10622] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1312'.
[  179.812309][T10623] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1312'.
[  180.409788][ T5849] Bluetooth: hci1: command tx timeout
[  180.468694][T10639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1317'.
[  180.563943][ T5844] Bluetooth: hci0: command 0x0406 tx timeout
[  180.633834][T10646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1320'.
[  180.686822][T10655] netlink: 'syz.1.1323': attribute type 1 has an invalid length.
[  180.767272][T10664] syz.1.1327: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  180.773661][T10664] CPU: 0 UID: 0 PID: 10664 Comm: syz.1.1327 Not tainted syzkaller #0 PREEMPT(full) 
[  180.773673][T10664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.773679][T10664] Call Trace:
[  180.773682][T10664]  <TASK>
[  180.773686][T10664]  dump_stack_lvl+0x189/0x250
[  180.773702][T10664]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.773752][T10664]  ? __pfx__printk+0x10/0x10
[  180.773764][T10664]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  180.773773][T10664]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  180.773782][T10664]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  180.773791][T10664]  warn_alloc+0x214/0x310
[  180.773805][T10664]  ? stack_depot_save_flags+0x41b/0x860
[  180.773815][T10664]  ? __pfx_warn_alloc+0x10/0x10
[  180.773825][T10664]  ? kasan_save_track+0x4f/0x80
[  180.773835][T10664]  ? xskq_create+0x56/0x170
[  180.773845][T10664]  ? xsk_init_queue+0xb0/0x110
[  180.773852][T10664]  ? xsk_setsockopt+0x57b/0x8d0
[  180.773861][T10664]  ? do_sock_setsockopt+0x17c/0x1b0
[  180.773872][T10664]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  180.773877][T10664]  ? do_syscall_64+0xfa/0x3b0
[  180.773886][T10664]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.773895][T10664]  __vmalloc_node_range_noprof+0x125/0x12f0
[  180.773917][T10664]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  180.773928][T10664]  ? __kasan_kmalloc+0x93/0xb0
[  180.773940][T10664]  vmalloc_user_noprof+0xad/0xf0
[  180.773951][T10664]  ? xskq_create+0xbf/0x170
[  180.773966][T10664]  xskq_create+0xbf/0x170
[  180.773996][T10664]  xsk_init_queue+0xb0/0x110
[  180.774007][T10664]  xsk_setsockopt+0x57b/0x8d0
[  180.774016][T10664]  ? __pfx_xsk_setsockopt+0x10/0x10
[  180.774026][T10664]  ? __pfx_aa_sk_perm+0x10/0x10
[  180.774039][T10664]  ? __fget_files+0x2a/0x420
[  180.774044][T10664]  ? aa_sock_opt_perm+0xff/0x1b0
[  180.774052][T10664]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  180.774060][T10664]  ? __pfx_xsk_setsockopt+0x10/0x10
[  180.774068][T10664]  do_sock_setsockopt+0x17c/0x1b0
[  180.774081][T10664]  __x64_sys_setsockopt+0x13f/0x1b0
[  180.774090][T10664]  do_syscall_64+0xfa/0x3b0
[  180.774100][T10664]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.774109][T10664]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.774115][T10664]  ? exc_page_fault+0x9f/0xf0
[  180.774124][T10664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.774131][T10664] RIP: 0033:0x7f56a298ebe9
[  180.774139][T10664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.774144][T10664] RSP: 002b:00007f56a3860038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  180.774152][T10664] RAX: ffffffffffffffda RBX: 00007f56a2bb5fa0 RCX: 00007f56a298ebe9
[  180.774157][T10664] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b
[  180.774161][T10664] RBP: 00007f56a2a11e19 R08: 0000000000000004 R09: 0000000000000000
[  180.774165][T10664] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  180.774169][T10664] R13: 00007f56a2bb6038 R14: 00007f56a2bb5fa0 R15: 00007ffd241217f8
[  180.774180][T10664]  </TASK>
[  180.774307][T10664] Mem-Info:
[  180.894874][T10664] active_anon:17440 inactive_anon:0 isolated_anon:0
[  180.894874][T10664]  active_file:14786 inactive_file:38260 isolated_file:0
[  180.894874][T10664]  unevictable:1768 dirty:52 writeback:0
[  180.894874][T10664]  slab_reclaimable:9776 slab_unreclaimable:53130
[  180.894874][T10664]  mapped:18059 shmem:2419 pagetables:975
[  180.894874][T10664]  sec_pagetables:0 bounce:0
[  180.894874][T10664]  kernel_misc_reclaimable:0
[  180.894874][T10664]  free:266968 free_pcp:23623 free_cma:0
[  180.912492][T10664] Node 0 active_anon:41196kB inactive_anon:0kB active_file:19824kB inactive_file:133624kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30260kB dirty:136kB writeback:0kB shmem:4792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3684kB pagetables:1868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  180.923451][T10664] Node 1 active_anon:28496kB inactive_anon:0kB active_file:39320kB inactive_file:19416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41976kB dirty:72kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8028kB pagetables:2032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  180.936173][T10664] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  180.947314][T10664] lowmem_reserve[]: 0 811 811 811 811
[  180.949637][T10664] Node 0 DMA32 free:225216kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41196kB inactive_anon:0kB active_file:19824kB inactive_file:133624kB unevictable:3536kB writepending:136kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:56760kB local_pcp:38816kB free_cma:0kB
[  180.961677][T10664] lowmem_reserve[]: 0 0 0 0 0
[  180.963655][T10664] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  180.975300][T10664] lowmem_reserve[]: 0 0 854 854 854
[  180.977388][T10664] Node 1 Normal free:368804kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28496kB inactive_anon:0kB active_file:39320kB inactive_file:19416kB unevictable:3536kB writepending:72kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37416kB local_pcp:21132kB free_cma:0kB
[  180.989426][T10664] lowmem_reserve[]: 0 0 0 0 0
[  180.991380][T10664] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  180.996285][T10664] Node 0 DMA32: 97*4kB (UM) 72*8kB (UME) 147*16kB (UME) 973*32kB (UME) 358*64kB (UME) 81*128kB (UME) 39*256kB (UME) 8*512kB (UM) 6*1024kB (UE) 5*2048kB (UM) 31*4096kB (UM) = 225172kB
[  181.003890][T10664] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  181.010293][T10664] Node 1 Normal: 373*4kB (UM) 481*8kB (UME) 168*16kB (UME) 126*32kB (UME) 61*64kB (UME) 99*128kB (UME) 117*256kB (UME) 80*512kB (UME) 39*1024kB (UM) 12*2048kB (UM) 50*4096kB (UM) = 368860kB
[  181.017270][T10664] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  181.021357][T10664] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  181.025580][T10664] 55465 total pagecache pages
[  181.027960][T10664] 0 pages in swap cache
[  181.029909][T10664] Free swap  = 124996kB
[  181.031900][T10664] Total swap = 124996kB
[  181.033919][T10664] 786301 pages RAM
[  181.035744][T10664] 0 pages HighMem/MovableOnly
[  181.038312][T10664] 241329 pages reserved
[  181.040614][T10664] 0 pages cma reserved
[  181.503297][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'.
[  181.629905][T10685] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1335'.
[  181.892319][T10701] netlink: 495 bytes leftover after parsing attributes in process `syz.2.1339'.
[  181.896896][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'.
[  181.978381][T10707] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1341'.
[  182.696656][T10768] netlink: 'syz.0.1358': attribute type 1 has an invalid length.
[  182.779381][T10776] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1360'.
[  182.794592][ T5849] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  182.820445][T10776] can: request_module (can-proto-3) failed.
[  183.287944][T10811] netlink: 'syz.2.1373': attribute type 46 has an invalid length.
[  183.306935][T10808] syzkaller0: entered promiscuous mode
[  183.309026][T10808] syzkaller0: entered allmulticast mode
[  184.454767][T10827] macsec0: entered promiscuous mode
[  184.456692][T10827] macsec0: entered allmulticast mode
[  184.459023][T10827] veth1_macvtap: entered allmulticast mode
[  184.678097][T10827] netlink: 'syz.2.1376': attribute type 10 has an invalid length.
[  184.686095][T10827] bond0: (slave bond_slave_0): Releasing backup interface
[  184.843163][T10824] wlan1 speed is unknown, defaulting to 1000
[  184.856442][T10845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.092617][T10850] netlink: 'syz.0.1382': attribute type 1 has an invalid length.
[  185.093797][T10847] __nla_validate_parse: 4 callbacks suppressed
[  185.093871][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'.
[  185.329210][T10859] netlink: 165128 bytes leftover after parsing attributes in process `syz.0.1384'.
[  185.594271][T10879] netlink: 'syz.0.1389': attribute type 21 has an invalid length.
[  185.619481][T10879] netlink: 6361 bytes leftover after parsing attributes in process `syz.0.1389'.
[  185.637606][T10886] netlink: 'syz.2.1392': attribute type 5 has an invalid length.
[  185.699125][T10888] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1393'.
[  185.705322][T10888] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1393'.
[  185.760180][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1395'.
[  185.787464][T10898] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1391'.
[  185.795245][T10898] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  185.800908][T10898] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  185.939456][T10904] netlink: 'syz.1.1399': attribute type 10 has an invalid length.
[  185.942521][T10904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1399'.
[  185.946207][T10904] dummy0: entered promiscuous mode
[  186.820934][T10931] netlink: 'syz.2.1406': attribute type 21 has an invalid length.
[  186.875423][T10928] delete_channel: no stack
[  187.046595][T10950] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1411'.
[  187.055000][T10950] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1411'.
[  187.262473][T10968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.280779][T10972] netlink: 'syz.2.1417': attribute type 5 has an invalid length.
[  187.305187][T10975] netlink: 'syz.2.1418': attribute type 1 has an invalid length.
[  187.366568][T10975] unsupported nlmsg_type 40
[  187.515694][T10975] net veth1_virt_wifi : renamed from virt_wifi0
[  187.737496][T10995] netlink: 'syz.1.1424': attribute type 1 has an invalid length.
[  187.852020][T11006] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  188.250043][T11018] netlink: 'syz.0.1433': attribute type 2 has an invalid length.
[  188.252740][T11018] netlink: 'syz.0.1433': attribute type 8 has an invalid length.
[  188.653007][T11036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.662148][T11036] netlink: 'syz.1.1441': attribute type 11 has an invalid length.
[  188.844500][T11053] netlink: 'syz.1.1445': attribute type 1 has an invalid length.
[  189.333940][T11055] cgroup: fork rejected by pids controller in /syz1
[  189.397098][T11096] veth1_macvtap: left allmulticast mode
[  189.399604][T11096] veth1_macvtap: left promiscuous mode
[  189.401696][T11096] macsec0: left allmulticast mode
[  189.419526][T11094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.706891][T11126] netlink: 'syz.2.1455': attribute type 30 has an invalid length.
[  189.804255][T11130] netlink: 'syz.2.1458': attribute type 10 has an invalid length.
[  189.946759][T11134] netlink: 'syz.0.1459': attribute type 10 has an invalid length.
[  189.952952][T11134] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  189.959481][T11134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.279404][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.538909][T11186] netlink: 'syz.2.1473': attribute type 29 has an invalid length.
[  191.542030][T11186] netlink: 'syz.2.1473': attribute type 29 has an invalid length.
[  191.564761][T11187] __nla_validate_parse: 21 callbacks suppressed
[  191.564772][T11187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1470'.
[  191.602208][T11188] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1473'.
[  191.614757][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1470'.
[  192.799618][T11228] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1485'.
[  192.805116][T11228] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1485'.
[  193.397410][T11254] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1493'.
[  193.557121][T11260] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  193.565737][T11260] validate_nla: 1 callbacks suppressed
[  193.565744][T11260] netlink: 'syz.0.1494': attribute type 2 has an invalid length.
[  193.991051][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.994834][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  196.478207][T11269] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1497'.
[  196.481311][T11269] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  196.485818][T11271] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1497'.
[  196.491004][T11271] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  196.579470][T11284] lo speed is unknown, defaulting to 1000
[  196.580915][T11280] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1501'.
[  196.581470][T11284] lo speed is unknown, defaulting to 1000
[  196.581811][T11284] lo speed is unknown, defaulting to 1000
[  196.595277][T11284] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  196.601527][T11280] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1501'.
[  196.621399][T11284] lo speed is unknown, defaulting to 1000
[  196.624050][T11284] lo speed is unknown, defaulting to 1000
[  196.626663][T11284] lo speed is unknown, defaulting to 1000
[  196.645616][T11291] netlink: 'syz.1.1503': attribute type 41 has an invalid length.
[  196.650994][T11293] netlink: 'syz.1.1503': attribute type 41 has an invalid length.
[  196.703202][T11300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1506'.
[  196.709998][T11300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1506'.
[  196.713596][T11300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1506'.
[  196.818222][ T5849] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  196.841458][T11310] netlink: 'syz.1.1509': attribute type 1 has an invalid length.
[  196.846120][T11310] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1509'.
[  197.015551][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'.
[  197.021207][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'.
[  197.032154][T11319] netlink: 'syz.1.1512': attribute type 3 has an invalid length.
[  197.035528][T11319] netlink: 'syz.1.1512': attribute type 1 has an invalid length.
[  197.040338][T11319] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1512'.
[  197.973645][T11339] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.1519'.
[  198.748552][T11389] C: renamed from team_slave_0 (while UP)
[  198.751561][T11389] netlink: 'syz.0.1535': attribute type 8 has an invalid length.
[  198.754499][T11389] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  198.761921][T11391] netlink: 'syz.0.1535': attribute type 8 has an invalid length.
[  198.764918][T11391] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  199.614901][T11436] netlink: 'syz.0.1551': attribute type 21 has an invalid length.
[  200.796408][T11486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.294443][T11501] netlink: 'syz.2.1573': attribute type 41 has an invalid length.
[  201.827207][T11513] __nla_validate_parse: 15 callbacks suppressed
[  201.827221][T11513] netlink: 142 bytes leftover after parsing attributes in process `syz.0.1576'.
[  201.967662][T11527] netlink: 11382 bytes leftover after parsing attributes in process `syz.1.1580'.
[  202.023696][T11533] : entered promiscuous mode
[  202.655800][T11555] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  202.848931][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'.
[  202.853924][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'.
[  202.857116][T11564] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1593'.
[  202.870040][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1592'.
[  202.910029][T11573] netlink: 'syz.1.1595': attribute type 4 has an invalid length.
[  202.912871][T11573] netlink: 'syz.1.1595': attribute type 1 has an invalid length.
[  202.915458][T11573] netlink: 'syz.1.1595': attribute type 2 has an invalid length.
[  202.922539][T11573] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.1595'.
[  202.940574][T11580] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1596'.
[  203.061477][T11599] netlink: 'syz.2.1603': attribute type 5 has an invalid length.
[  203.209718][T11612] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1606'.
[  203.566801][T11617] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1609'.
[  206.049758][T11646] tun0: tun_chr_ioctl cmd 1074025677
[  206.055715][T11646] tun0: linktype set to 270
[  206.085738][T11648] netlink: 'syz.2.1620': attribute type 5 has an invalid length.
[  206.422916][T11665] netlink: 'syz.1.1626': attribute type 1 has an invalid length.
[  206.426247][T11665] netlink: 'syz.1.1626': attribute type 3 has an invalid length.
[  206.577177][T11684] netlink: 'syz.2.1632': attribute type 41 has an invalid length.
[  206.693553][T11699] netlink: 'syz.1.1636': attribute type 21 has an invalid length.
[  207.286834][T11727] __nla_validate_parse: 18 callbacks suppressed
[  207.286850][T11727] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.1646'.
[  207.304362][T11727] netlink: 61827 bytes leftover after parsing attributes in process `syz.2.1646'.
[  207.387293][T11743] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'.
[  207.390773][T11741] netlink: 'syz.2.1649': attribute type 10 has an invalid length.
[  207.394167][T11740] netlink: 'syz.2.1649': attribute type 10 has an invalid length.
[  207.735030][T11770] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1650'.
[  207.740200][T11770] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1650'.
[  207.744094][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1650'.
[  207.793931][T11773] netlink: 11382 bytes leftover after parsing attributes in process `syz.1.1651'.
[  207.799149][T11773] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1651'.
[  208.138910][T11797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1658'.
[  208.186489][T11802] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1660'.
[  208.246440][T11802] netlink: zone id is out of range
[  208.249885][T11802] netlink: zone id is out of range
[  208.252352][T11802] netlink: zone id is out of range
[  208.254802][T11802] netlink: zone id is out of range
[  208.257212][T11802] netlink: zone id is out of range
[  208.278454][T11802] netlink: zone id is out of range
[  208.280823][T11802] netlink: zone id is out of range
[  208.283036][T11802] netlink: zone id is out of range
[  208.285171][T11802] netlink: zone id is out of range
[  208.287402][T11802] netlink: zone id is out of range
[  208.418582][T11824] delete_channel: no stack
[  208.420682][T11824] delete_channel: no stack
[  209.034228][T11829] netlink: 'syz.1.1667': attribute type 1 has an invalid length.
[  209.291658][T11835] veth1_to_bond: entered allmulticast mode
[  209.397623][ T5849] Bluetooth: hci2: ISO packet for unknown connection handle 6
[  209.470569][T11851] netlink: 'syz.0.1675': attribute type 4 has an invalid length.
[  209.473675][T11851] netlink: 'syz.0.1675': attribute type 3 has an invalid length.
[  210.314985][   T33] audit: type=1107 audit(1755617193.402:4): pid=11876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  211.585605][T11937] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  211.589758][T11937] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  211.725992][T11948] validate_nla: 2 callbacks suppressed
[  211.726008][T11948] netlink: 'syz.1.1704': attribute type 21 has an invalid length.
[  211.746596][T11948] netlink: 'syz.1.1704': attribute type 1 has an invalid length.
[  211.905816][T11961] netlink: 'syz.0.1708': attribute type 1 has an invalid length.
[  212.052891][T11971] syzkaller0: entered promiscuous mode
[  212.055302][T11971] syzkaller0: entered allmulticast mode
[  212.636503][T11975] netlink: 'syz.2.1712': attribute type 21 has an invalid length.
[  213.099397][T11981] syzkaller0: entered promiscuous mode
[  213.101632][T11981] syzkaller0: entered allmulticast mode
[  213.215195][T11974] infiniband syz1: set active
[  213.217959][T11974] infiniband syz1: added bond0
[  213.263764][T11974] RDS/IB: syz1: added
[  213.265756][T11974] smc: adding ib device syz1 with port count 1
[  213.268110][T11974] smc:    ib device syz1 port 1 has pnetid 
[  213.322400][T11990] netlink: 'syz.0.1715': attribute type 1 has an invalid length.
[  213.380670][T11991] __nla_validate_parse: 47 callbacks suppressed
[  213.380688][T11991] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1715'.
[  214.115560][T11993] netlink: 'syz.0.1716': attribute type 3 has an invalid length.
[  214.128697][T11993] netlink: 'syz.0.1716': attribute type 1 has an invalid length.
[  214.138147][T11993] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1716'.
[  214.374059][T12007] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1719'.
[  214.377400][T12007] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1719'.
[  214.382885][T12007] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1719'.
[  214.386328][T12007] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1719'.
[  214.391487][T12007] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1719'.
[  214.394924][T12007] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1719'.
[  214.399493][T12007] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1719'.
[  214.403738][T12007] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1719'.
[  214.623107][T12023] netlink: 'syz.2.1725': attribute type 10 has an invalid length.
[  215.359730][T12047] netlink: 'syz.1.1734': attribute type 7 has an invalid length.
[  215.367807][T12047] netlink: 'syz.1.1734': attribute type 8 has an invalid length.
[  218.315263][T12104] netlink: 'syz.1.1751': attribute type 27 has an invalid length.
[  218.412218][T12120] netlink: 'syz.2.1752': attribute type 13 has an invalid length.
[  218.511993][T12120] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.514710][T12120] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.619509][T12120] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.627436][T12120] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.728436][ T5907] lo speed is unknown, defaulting to 1000
[  218.731924][ T5907] syz2: Port: 1 Link DOWN
[  218.736247][ T5856] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.742426][ T5856] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.745570][ T5856] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.750116][ T5856] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.889712][T12146] __nla_validate_parse: 31 callbacks suppressed
[  218.889733][T12146] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1763'.
[  218.925699][T12151] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1765'.
[  218.990702][T12155] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1767'.
[  219.015571][T12155] netlink: 'syz.0.1767': attribute type 21 has an invalid length.
[  219.019209][T12155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1767'.
[  219.026502][T12155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1767'.
[  219.065979][T12155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1767'.
[  219.143491][T12161] netlink: 'syz.0.1770': attribute type 11 has an invalid length.
[  219.146577][T12161] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1770'.
[  219.289756][T12176] sctp: [Deprecated]: syz.2.1776 (pid 12176) Use of int in maxseg socket option.
[  219.289756][T12176] Use struct sctp_assoc_value instead
[  219.303935][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'.
[  219.307683][T12178] netlink: 'syz.1.1777': attribute type 13 has an invalid length.
[  219.312765][T12176] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1776'.
[  219.351886][T12178] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.355916][T12178] 8021q: adding VLAN 0 to HW filter on device team0
[  219.362446][T12178] net_ratelimit: 67 callbacks suppressed
[  219.362452][T12178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.383620][T12185] netlink: 'syz.2.1776': attribute type 9 has an invalid length.
[  219.386207][T12185] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1776'.
[  219.392216][T12176] netlink: 'syz.2.1776': attribute type 10 has an invalid length.
[  220.020198][T12212] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  220.231924][T12214] netlink: 'syz.0.1789': attribute type 1 has an invalid length.
[  220.736479][T12221] netlink: 'syz.2.1792': attribute type 8 has an invalid length.
[  220.801306][T12225] netlink: 'syz.2.1794': attribute type 27 has an invalid length.
[  220.991744][T12235] debugfs: '!' already exists in 'ieee80211'
[  221.097022][T12234] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  221.101712][T12234] CPU: 0 UID: 0 PID: 12234 Comm: syz.1.1797 Not tainted syzkaller #0 PREEMPT(full) 
[  221.101724][T12234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.101729][T12234] Call Trace:
[  221.101733][T12234]  <TASK>
[  221.101737][T12234]  dump_stack_lvl+0x189/0x250
[  221.101753][T12234]  ? kernfs_path_from_node+0x2f/0x290
[  221.101765][T12234]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.101774][T12234]  ? __pfx__printk+0x10/0x10
[  221.101791][T12234]  ? kernfs_path_from_node+0x2f/0x290
[  221.101799][T12234]  ? kernfs_path_from_node+0x250/0x290
[  221.101806][T12234]  ? kernfs_path_from_node+0x2f/0x290
[  221.101818][T12234]  sysfs_warn_dup+0x8e/0xa0
[  221.101828][T12234]  sysfs_do_create_link_sd+0xc0/0x110
[  221.101839][T12234]  device_add_class_symlinks+0x1cf/0x240
[  221.101852][T12234]  device_add+0x475/0xb50
[  221.101865][T12234]  wiphy_register+0x1ba6/0x28d0
[  221.101894][T12234]  ? __pfx_wiphy_register+0x10/0x10
[  221.101904][T12234]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  221.101921][T12234]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  221.101939][T12234]  ieee80211_register_hw+0x3425/0x4080
[  221.101964][T12234]  ? ieee80211_register_hw+0x1471/0x4080
[  221.101980][T12234]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  221.101992][T12234]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  221.102011][T12234]  ? __hrtimer_setup+0x187/0x210
[  221.102018][T12234]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  221.102033][T12234]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  221.102072][T12234]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  221.102080][T12234]  ? trace_kmalloc+0x1f/0xd0
[  221.102090][T12234]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  221.102099][T12234]  ? kstrndup+0xbf/0x160
[  221.102138][T12234]  hwsim_new_radio_nl+0xea4/0x1b10
[  221.102153][T12234]  ? __pfx___nla_validate_parse+0x10/0x10
[  221.102179][T12234]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.102202][T12234]  ? __nla_parse+0x40/0x60
[  221.102217][T12234]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  221.102234][T12234]  genl_family_rcv_msg_doit+0x215/0x300
[  221.102250][T12234]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  221.102272][T12234]  ? bpf_lsm_capable+0x9/0x20
[  221.102281][T12234]  ? security_capable+0x7e/0x2e0
[  221.102300][T12234]  genl_rcv_msg+0x60e/0x790
[  221.102315][T12234]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.102323][T12234]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.102341][T12234]  ? perf_trace_preemptirq_template+0x280/0x340
[  221.102362][T12234]  netlink_rcv_skb+0x208/0x470
[  221.102371][T12234]  ? __lock_acquire+0xab9/0xd20
[  221.102383][T12234]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.102393][T12234]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  221.102423][T12234]  ? down_read+0x1ad/0x2e0
[  221.102436][T12234]  genl_rcv+0x28/0x40
[  221.102443][T12234]  netlink_unicast+0x82f/0x9e0
[  221.102462][T12234]  ? __pfx_netlink_unicast+0x10/0x10
[  221.102474][T12234]  ? netlink_sendmsg+0x642/0xb30
[  221.102482][T12234]  ? skb_put+0x11b/0x210
[  221.102498][T12234]  netlink_sendmsg+0x805/0xb30
[  221.102518][T12234]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.102532][T12234]  ? aa_sock_msg_perm+0xf1/0x1d0
[  221.102546][T12234]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  221.102555][T12234]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.102566][T12234]  __sock_sendmsg+0x21c/0x270
[  221.102580][T12234]  ____sys_sendmsg+0x505/0x830
[  221.102594][T12234]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.102613][T12234]  ? import_iovec+0x74/0xa0
[  221.102626][T12234]  ___sys_sendmsg+0x21f/0x2a0
[  221.102637][T12234]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.102667][T12234]  ? __fget_files+0x2a/0x420
[  221.102689][T12234]  ? __fget_files+0x2a/0x420
[  221.102695][T12234]  ? __fget_files+0x3a0/0x420
[  221.102713][T12234]  __x64_sys_sendmsg+0x19b/0x260
[  221.102719][T12234]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  221.102730][T12234]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  221.102757][T12234]  ? do_syscall_64+0xbe/0x3b0
[  221.102772][T12234]  do_syscall_64+0xfa/0x3b0
[  221.102783][T12234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.102789][T12234]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.102801][T12234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.102808][T12234] RIP: 0033:0x7f56a298ebe9
[  221.102817][T12234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.102823][T12234] RSP: 002b:00007f56a3860038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.102832][T12234] RAX: ffffffffffffffda RBX: 00007f56a2bb5fa0 RCX: 00007f56a298ebe9
[  221.102837][T12234] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000010
[  221.102841][T12234] RBP: 00007f56a2a11e19 R08: 0000000000000000 R09: 0000000000000000
[  221.102845][T12234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.102849][T12234] R13: 00007f56a2bb6038 R14: 00007f56a2bb5fa0 R15: 00007ffd241217f8
[  221.102871][T12234]  </TASK>
[  221.198044][ T5844] Bluetooth: hci0: command 0x0406 tx timeout
[  221.202252][ T5849] Bluetooth: hci0: Opcode 0x206a failed: -110
[  221.416284][T12246] : entered promiscuous mode
[  221.418394][T12246] bond_slave_1: entered promiscuous mode
[  221.649820][T12262] lo: entered allmulticast mode
[  221.743824][T12272] syzkaller0: entered promiscuous mode
[  221.746270][T12272] syzkaller0: entered allmulticast mode
[  223.732595][T12308] validate_nla: 2 callbacks suppressed
[  223.732615][T12308] netlink: 'syz.2.1816': attribute type 29 has an invalid length.
[  223.875879][ T5849] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9
[  224.498435][T12327] __nla_validate_parse: 28 callbacks suppressed
[  224.498448][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1821'.
[  224.522140][T12329] netlink: 'syz.1.1822': attribute type 10 has an invalid length.
[  224.525588][T12329] veth1_macvtap: entered allmulticast mode
[  224.540954][T12329] netlink: 'syz.1.1822': attribute type 21 has an invalid length.
[  224.543751][T12329] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1822'.
[  224.596889][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1823'.
[  224.601814][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1823'.
[  224.846600][T12346] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1827'.
[  224.921202][T12347] netlink: 1380 bytes leftover after parsing attributes in process `syz.1.1827'.
[  224.925269][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1827'.
[  225.012257][T12354] netlink: 'syz.0.1829': attribute type 2 has an invalid length.
[  225.015844][T12354] netlink: 'syz.0.1829': attribute type 1 has an invalid length.
[  225.019928][T12354] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1829'.
[  225.023837][T12354] nbd: couldn't find device at index 65542
[  225.027097][T12353] netlink: 'syz.0.1829': attribute type 2 has an invalid length.
[  225.031855][T12353] netlink: 'syz.0.1829': attribute type 1 has an invalid length.
[  225.034528][T12353] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1829'.
[  225.041296][T12353] nbd: couldn't find device at index 65542
[  225.901953][T12361] openvswitch: netlink: Message has 4 unknown bytes.
[  226.020615][T12372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.061013][T12374] netlink: 'syz.0.1833': attribute type 10 has an invalid length.
[  226.084161][T12374] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  226.090773][T12374] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  226.114197][T12373] wlan1 speed is unknown, defaulting to 1000
[  226.130614][T12373] lo speed is unknown, defaulting to 1000
[  226.197857][T12381] netlink: 'syz.1.1834': attribute type 1 has an invalid length.
[  226.454300][T12399] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1839'.
[  227.278218][T12439] netlink: 'syz.0.1852': attribute type 29 has an invalid length.
[  227.308542][ T5849] Bluetooth: hci2: ISO packet for unknown connection handle 44
[  227.660394][T12452] veth0_macvtap: left promiscuous mode
[  228.130618][T12469] syzkaller0: entered allmulticast mode
[  228.321733][T12486] geneve0: entered promiscuous mode
[  228.325662][T12486] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  228.328953][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.331916][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.334759][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.338404][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.794407][T12514] validate_nla: 6 callbacks suppressed
[  228.794418][T12514] netlink: 'syz.1.1872': attribute type 10 has an invalid length.
[  229.056373][T12521] netlink: 'syz.1.1876': attribute type 25 has an invalid length.
[  229.060127][T12521] netlink: 'syz.1.1876': attribute type 3 has an invalid length.
[  229.454255][T12535] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  229.457412][T12535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.015846][T12550] netlink: 'syz.1.1885': attribute type 29 has an invalid length.
[  230.136074][T12557] __nla_validate_parse: 11 callbacks suppressed
[  230.136099][T12557] netlink: 56429 bytes leftover after parsing attributes in process `syz.2.1887'.
[  230.158484][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'.
[  230.163236][T12555] netlink: 'syz.1.1886': attribute type 2 has an invalid length.
[  230.166559][T12555] netlink: 'syz.1.1886': attribute type 1 has an invalid length.
[  230.210609][T12559] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  230.234747][T12562] netlink: 492 bytes leftover after parsing attributes in process `syz.2.1889'.
[  230.782716][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'.
[  230.786532][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'.
[  232.818842][T12599] netlink: 'syz.1.1902': attribute type 10 has an invalid length.
[  232.829981][T12599] bond0: (slave c@): Releasing backup interface
[  232.833246][T12599] @: left promiscuous mode
[  232.944180][T12616] netlink: 'syz.1.1909': attribute type 29 has an invalid length.
[  232.954795][T12616] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1909'.
[  232.971390][T12619] netlink: 'syz.2.1910': attribute type 37 has an invalid length.
[  233.059577][T12626] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1912'.
[  233.100761][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'.
[  233.175309][T12626] : entered promiscuous mode
[  233.848751][T12658] nft_compat: unsupported protocol 1
[  233.859808][T12660] nft_compat: unsupported protocol 1
[  233.875172][T12656] wlan1 speed is unknown, defaulting to 1000
[  233.879283][T12656] lo speed is unknown, defaulting to 1000
[  233.915766][T12664] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1924'.
[  233.924059][T12664] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  233.926790][T12664] openvswitch: netlink: Key type 256 is out of range max 32
[  233.953445][T12664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1924'.
[  234.144432][T12676] validate_nla: 1 callbacks suppressed
[  234.144443][T12676] netlink: 'syz.1.1927': attribute type 21 has an invalid length.
[  234.167238][T12683] netlink: 'syz.0.1929': attribute type 9 has an invalid length.
[  234.175705][T12676] netlink: 'syz.1.1927': attribute type 1 has an invalid length.
[  234.242680][T12688] syzkaller0: entered promiscuous mode
[  234.244942][T12688] syzkaller0: entered allmulticast mode
[  234.649731][T12709] netlink: 'syz.1.1936': attribute type 3 has an invalid length.
[  235.139609][T12716] __nla_validate_parse: 6 callbacks suppressed
[  235.139621][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1938'.
[  235.144694][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1938'.
[  235.148641][T12716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1938'.
[  235.230818][T12726] netlink: 'syz.2.1941': attribute type 33 has an invalid length.
[  235.233574][T12726] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1941'.
[  235.236667][T12726] `: renamed from team0
[  235.264545][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1942'.
[  235.320408][T12733] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  235.571987][T12749] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1950'.
[  235.653340][T12749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.656697][T12749] bond_slave_1: left promiscuous mode
[  235.661556][T12749] bond0 (unregistering): Released all slaves
[  235.836618][T12776] netlink: 'syz.1.1958': attribute type 5 has an invalid length.
[  235.919156][T12779] lo: entered promiscuous mode
[  235.923074][  T792] lo speed is unknown, defaulting to 1000
[  235.926399][  T792] syz2: Port: 1 Link ACTIVE
[  236.470234][T12793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1964'.
[  236.475142][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'.
[  236.479318][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'.
[  236.671787][T12805] netlink: 'syz.1.1968': attribute type 13 has an invalid length.
[  236.674513][T12805] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1968'.
[  236.677646][T12805] : renamed from syz_tun (while UP)
[  236.683341][T12805] : refused to change device tx_queue_len
[  236.686507][T12805] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  236.775961][T12808] netlink: 'syz.0.1969': attribute type 1 has an invalid length.
[  236.787480][T12808] netlink: 'syz.0.1969': attribute type 4 has an invalid length.
[  236.892066][T12818] syzkaller1: tun_chr_ioctl cmd 1074025677
[  236.894151][T12818] syzkaller1: linktype set to 1
[  237.809839][T12841] syzkaller0: entered promiscuous mode
[  237.812182][T12841] syzkaller0: entered allmulticast mode
[  237.954498][T12846] netlink: 'syz.0.1978': attribute type 10 has an invalid length.
[  239.813565][T12846] dummy0: entered promiscuous mode
[  239.816425][T12846] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  239.917028][T12859] netlink: 'syz.1.1982': attribute type 4 has an invalid length.
[  241.212584][T12903] wlan1 speed is unknown, defaulting to 1000
[  241.219720][T12903] lo speed is unknown, defaulting to 1000
[  241.384862][T12915] __nla_validate_parse: 4 callbacks suppressed
[  241.384875][T12915] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1993'.
[  244.647965][T12927] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1996'.
[  244.690020][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'.
[  244.746363][T12932] veth1_vlan: left promiscuous mode
[  244.750652][T12932] netlink: 'syz.2.1999': attribute type 10 has an invalid length.
[  244.753288][T12932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1999'.
[  244.757545][T12932] batman_adv: batadv0: Adding interface: hsr_slave_1
[  244.760638][T12932] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.770691][T12932] batman_adv: batadv0: Interface activated: hsr_slave_1
[  244.782799][T12934] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1998'.
[  244.907061][T12941] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2001'.
[  244.933566][T12944] netlink: 'syz.2.2002': attribute type 2 has an invalid length.
[  244.936331][T12944] netlink: 'syz.2.2002': attribute type 8 has an invalid length.
[  244.948363][T12944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2002'.
[  244.987133][T12949] netlink: 'syz.2.2004': attribute type 29 has an invalid length.
[  244.996528][T12949] netlink: 'syz.2.2004': attribute type 29 has an invalid length.
[  245.004709][T12949] netlink: 'syz.2.2004': attribute type 29 has an invalid length.
[  245.010185][T12949] netlink: 'syz.2.2004': attribute type 29 has an invalid length.
[  245.568825][ T5849] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[  245.906684][T12974] netlink: 'syz.2.2011': attribute type 29 has an invalid length.
[  245.917392][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'.
[  246.033984][T12976] C: renamed from team_slave_0
[  246.037652][T12976] netlink: 'syz.2.2012': attribute type 3 has an invalid length.
[  246.047116][T12976] netlink: 'syz.2.2012': attribute type 1 has an invalid length.
[  246.057612][T12976] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2012'.
[  246.073410][T12976] netlink: 'syz.2.2012': attribute type 3 has an invalid length.
[  246.096082][T12976] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2012'.
[  246.484483][ T5849] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  246.683109][T13035] __nla_validate_parse: 3 callbacks suppressed
[  246.683166][T13035] netlink: 495 bytes leftover after parsing attributes in process `syz.0.2030'.
[  246.690587][T13042] netlink: 495 bytes leftover after parsing attributes in process `syz.0.2030'.
[  246.903450][T13057] openvswitch: netlink: IP tunnel dst address not specified
[  247.403203][T13065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2039'.
[  247.489175][T13071] wlan1 speed is unknown, defaulting to 1000
[  247.492688][T13071] lo speed is unknown, defaulting to 1000
[  247.664458][T13077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2042'.
[  247.881563][T13082] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.2044'.
[  247.986205][T13090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2046'.
[  248.438598][T13101] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.2049'.
[  248.483210][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2050'.
[  248.486395][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2050'.
[  249.109457][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2062'.
[  251.055117][T13176] wlan1 speed is unknown, defaulting to 1000
[  251.165249][T13176] lo speed is unknown, defaulting to 1000
[  253.396509][T13213] validate_nla: 6 callbacks suppressed
[  253.396522][T13213] netlink: 'syz.0.2082': attribute type 1 has an invalid length.
[  253.813435][T13219] __nla_validate_parse: 3 callbacks suppressed
[  253.813510][T13219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2085'.
[  254.241515][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'.
[  254.434823][T13238] syzkaller0: entered promiscuous mode
[  254.436699][T13238] syzkaller0: entered allmulticast mode
[  254.508221][T13243] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2093'.
[  254.512013][T13242] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2093'.
[  254.515279][T13244] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2093'.
[  254.607918][T13248] netlink: 'syz.0.2095': attribute type 21 has an invalid length.
[  254.611309][T13248] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.2095'.
[  254.806890][T13258] netlink: 'syz.1.2099': attribute type 21 has an invalid length.
[  254.885302][T13271] netlink: 'syz.1.2103': attribute type 10 has an invalid length.
[  254.914676][T13271] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2103'.
[  255.516006][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.519294][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.840484][T13286] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  255.844250][T13286] CPU: 1 UID: 0 PID: 13286 Comm: syz.1.2106 Not tainted syzkaller #0 PREEMPT(full) 
[  255.844263][T13286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.844269][T13286] Call Trace:
[  255.844274][T13286]  <TASK>
[  255.844278][T13286]  dump_stack_lvl+0x189/0x250
[  255.844298][T13286]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.844310][T13286]  ? __pfx__printk+0x10/0x10
[  255.844327][T13286]  ? kernfs_path_from_node+0x2f/0x290
[  255.844339][T13286]  ? kernfs_path_from_node+0x250/0x290
[  255.844348][T13286]  ? kernfs_path_from_node+0x2f/0x290
[  255.844361][T13286]  sysfs_warn_dup+0x8e/0xa0
[  255.844372][T13286]  sysfs_do_create_link_sd+0xc0/0x110
[  255.844384][T13286]  device_add_class_symlinks+0x1cf/0x240
[  255.844398][T13286]  device_add+0x475/0xb50
[  255.844410][T13286]  wiphy_register+0x1ba6/0x28d0
[  255.844435][T13286]  ? __pfx_wiphy_register+0x10/0x10
[  255.844447][T13286]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  255.844463][T13286]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  255.844482][T13286]  ieee80211_register_hw+0x3425/0x4080
[  255.844504][T13286]  ? ieee80211_register_hw+0x1471/0x4080
[  255.844520][T13286]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  255.844533][T13286]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  255.844551][T13286]  ? __hrtimer_setup+0x187/0x210
[  255.844560][T13286]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  255.844576][T13286]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  255.844635][T13286]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  255.844647][T13286]  ? trace_kmalloc+0x1f/0xd0
[  255.844659][T13286]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  255.844671][T13286]  ? kstrndup+0xbf/0x160
[  255.844689][T13286]  hwsim_new_radio_nl+0xea4/0x1b10
[  255.844703][T13286]  ? __pfx___nla_validate_parse+0x10/0x10
[  255.844727][T13286]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  255.844747][T13286]  ? __nla_parse+0x40/0x60
[  255.844764][T13286]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  255.844781][T13286]  genl_family_rcv_msg_doit+0x215/0x300
[  255.844797][T13286]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  255.844816][T13286]  ? bpf_lsm_capable+0x9/0x20
[  255.844829][T13286]  ? security_capable+0x7e/0x2e0
[  255.844848][T13286]  genl_rcv_msg+0x60e/0x790
[  255.844863][T13286]  ? __pfx_genl_rcv_msg+0x10/0x10
[  255.844873][T13286]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  255.844885][T13286]  ? __asan_memcpy+0x40/0x70
[  255.844897][T13286]  ? __pfx_ref_tracker_free+0x10/0x10
[  255.844915][T13286]  netlink_rcv_skb+0x208/0x470
[  255.844927][T13286]  ? __lock_acquire+0xab9/0xd20
[  255.844941][T13286]  ? __pfx_genl_rcv_msg+0x10/0x10
[  255.844958][T13286]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  255.844984][T13286]  ? down_read+0x1ad/0x2e0
[  255.844999][T13286]  genl_rcv+0x28/0x40
[  255.845009][T13286]  netlink_unicast+0x82f/0x9e0
[  255.845027][T13286]  ? __pfx_netlink_unicast+0x10/0x10
[  255.845041][T13286]  ? netlink_sendmsg+0x642/0xb30
[  255.845053][T13286]  ? skb_put+0x11b/0x210
[  255.845070][T13286]  netlink_sendmsg+0x805/0xb30
[  255.845089][T13286]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.845105][T13286]  ? aa_sock_msg_perm+0xf1/0x1d0
[  255.845122][T13286]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  255.845132][T13286]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.845146][T13286]  __sock_sendmsg+0x21c/0x270
[  255.845161][T13286]  ____sys_sendmsg+0x505/0x830
[  255.845175][T13286]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.845191][T13286]  ? import_iovec+0x74/0xa0
[  255.845206][T13286]  ___sys_sendmsg+0x21f/0x2a0
[  255.845217][T13286]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.845252][T13286]  ? __fget_files+0x2a/0x420
[  255.845260][T13286]  ? __fget_files+0x3a0/0x420
[  255.845276][T13286]  __x64_sys_sendmsg+0x19b/0x260
[  255.845288][T13286]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  255.845305][T13286]  ? rcu_is_watching+0x15/0xb0
[  255.845319][T13286]  ? do_syscall_64+0xbe/0x3b0
[  255.845336][T13286]  do_syscall_64+0xfa/0x3b0
[  255.845348][T13286]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.845360][T13286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.845370][T13286]  ? exc_page_fault+0x9f/0xf0
[  255.845383][T13286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.845392][T13286] RIP: 0033:0x7f56a298ebe9
[  255.845403][T13286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.845411][T13286] RSP: 002b:00007f56a383f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  255.845423][T13286] RAX: ffffffffffffffda RBX: 00007f56a2bb6090 RCX: 00007f56a298ebe9
[  255.845430][T13286] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004
[  255.845436][T13286] RBP: 00007f56a2a11e19 R08: 0000000000000000 R09: 0000000000000000
[  255.845442][T13286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.845447][T13286] R13: 00007f56a2bb6128 R14: 00007f56a2bb6090 R15: 00007ffd241217f8
[  255.845465][T13286]  </TASK>
[  256.125644][T13292] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2109'.
[  256.534882][T13307] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2112'.
[  256.551903][T13307] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2112'.
[  256.586186][T13309] netlink: 'syz.2.2113': attribute type 29 has an invalid length.
[  256.591123][T13310] netlink: 'syz.2.2113': attribute type 29 has an invalid length.
[  256.594414][T13309] netlink: 'syz.2.2113': attribute type 29 has an invalid length.
[  256.597316][T13310] netlink: 'syz.2.2113': attribute type 29 has an invalid length.
[  256.601558][T13309] netlink: 'syz.2.2113': attribute type 29 has an invalid length.
[  256.730996][T13326] netlink: 'syz.2.2118': attribute type 10 has an invalid length.
[  257.639151][T13361] nft_compat: unsupported protocol 0
[  258.474371][T13428] validate_nla: 5 callbacks suppressed
[  258.474425][T13428] netlink: 'syz.2.2145': attribute type 40 has an invalid length.
[  258.548513][T13430] sit0: entered promiscuous mode
[  258.550728][T13430] sit0: entered allmulticast mode
[  258.657061][   T33] audit: type=1107 audit(1755617241.732:5): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='po?`)-ILEك|YKeFf?bry
[  258.657061][   T33] -lRkB0jBy`j4Cgf(kPJI@W@hn@x'
[  258.856906][T13439] netlink: 'syz.1.2152': attribute type 40 has an invalid length.
[  258.890232][T13439] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.019321][T13446] wlan1 speed is unknown, defaulting to 1000
[  259.022987][T13446] lo speed is unknown, defaulting to 1000
[  259.357238][T13471] __nla_validate_parse: 10 callbacks suppressed
[  259.357248][T13471] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2160'.
[  259.634235][T13500] netlink: 'syz.1.2169': attribute type 2 has an invalid length.
[  259.637516][T13500] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2169'.
[  259.953401][T13519] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2172'.
[  259.955650][T13521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2172'.
[  259.963292][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2172'.
[  259.967094][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2172'.
[  260.091526][T13544] netlink: 'syz.1.2173': attribute type 21 has an invalid length.
[  260.447298][T13549] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2174'.
[  260.498049][T13551] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.2175'.
[  260.505404][T13551] netlink: 'syz.2.2175': attribute type 1 has an invalid length.
[  260.508591][T13551] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2175'.
[  260.512050][T13551] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  260.678856][T13555] netlink: 'syz.0.2177': attribute type 13 has an invalid length.
[  260.903960][T13562] netlink: 'syz.0.2179': attribute type 4 has an invalid length.
[  262.477872][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  263.886028][T13574] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2182'.
[  263.994283][T13582] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  263.997460][T13582] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  264.007146][T13584] netlink: 'syz.2.2186': attribute type 21 has an invalid length.
[  264.014199][T13586] netlink: 'syz.0.2187': attribute type 10 has an invalid length.
[  264.240884][T13609] netlink: 'syz.2.2193': attribute type 17 has an invalid length.
[  264.243606][T13609] netlink: 'syz.2.2193': attribute type 16 has an invalid length.
[  264.248252][T13609] netlink: 'syz.2.2193': attribute type 21 has an invalid length.
[  264.255868][T13609] netlink: 'syz.2.2193': attribute type 16 has an invalid length.
[  264.269230][T13609] netlink: 'syz.2.2193': attribute type 11 has an invalid length.
[  264.274336][T13609] netlink: 'syz.2.2193': attribute type 11 has an invalid length.
[  264.279612][T13608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.304029][T13611] netlink: 'syz.1.2194': attribute type 8 has an invalid length.
[  264.306752][T13611] netlink: 'syz.1.2194': attribute type 6 has an invalid length.
[  264.351894][T13616] netlink: 'syz.1.2196': attribute type 2 has an invalid length.
[  264.354628][T13616] netlink: 'syz.1.2196': attribute type 1 has an invalid length.
[  264.413172][T13614] __nla_validate_parse: 8 callbacks suppressed
[  264.413182][T13614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2195'.
[  264.428051][T13614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2195'.
[  264.573854][T13621] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2198'.
[  264.789319][T13626] mac80211_hwsim hwsim17 O3c: renamed from wlan1 (while UP)
[  265.048926][T13632] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2202'.
[  265.405072][T13641] : left promiscuous mode
[  265.407285][T13641] bond_slave_1: left promiscuous mode
[  265.415224][T13641] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  265.424479][T13641] : entered promiscuous mode
[  265.426698][T13641] bond_slave_1: entered promiscuous mode
[  265.429297][T13641] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  265.436774][T13641] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.441763][T13641] team0: Port device bond0 added
[  265.453200][T13635] : left promiscuous mode
[  265.455889][T13635] bond_slave_1: left promiscuous mode
[  265.481918][T13635] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  265.556735][T13647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2207'.
[  265.661941][T13647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2207'.
[  265.666684][T13647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2207'.
[  266.554402][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2214'.
[  267.837968][T13699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2221'.
[  267.959674][T13701] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2221'.
[  268.735329][T13715] batman_adv: batadv0: Adding interface: netdevsim0
[  268.737657][T13715] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.775469][T13715] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  269.157128][T13744] validate_nla: 14 callbacks suppressed
[  269.157142][T13744] netlink: 'syz.0.2234': attribute type 21 has an invalid length.
[  269.801638][T13766] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  269.918641][T13770] netlink: 137972 bytes leftover after parsing attributes in process `syz.1.2242'.
[  269.921861][T13770] nbd: must specify at least one socket
[  270.254432][T13775] netlink: 'syz.0.2245': attribute type 10 has an invalid length.
[  270.282260][T13777] nft_compat: unsupported protocol 0
[  270.304888][T13777] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2246'.
[  270.351092][T13787] netlink: 'syz.1.2250': attribute type 1 has an invalid length.
[  270.355881][T13787] netlink: 'syz.1.2250': attribute type 1 has an invalid length.
[  270.602712][T13800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2255'.
[  270.746637][T13807] netlink: 'syz.1.2257': attribute type 4 has an invalid length.
[  270.750025][T13807] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2257'.
[  271.629112][T13811] netlink: 'syz.2.2259': attribute type 10 has an invalid length.
[  271.641901][T13811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2259'.
[  271.645863][T13811] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  271.658746][T13809] netlink: 'syz.0.2258': attribute type 29 has an invalid length.
[  271.667163][T13809] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  271.744702][T13822] netlink: 'syz.0.2262': attribute type 21 has an invalid length.
[  271.758909][T13824] netlink: 'syz.2.2263': attribute type 10 has an invalid length.
[  271.758920][T13824] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2263'.
[  271.818033][T13827] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2263'.
[  272.078837][T13835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2266'.
[  272.099866][T13837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2267'.
[  272.132857][T13842] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  272.472286][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'.
[  273.179892][T13862] bpf: Bad value for 'uid'
[  274.197465][ T5906] syzkaller0: tun_net_xmit 76
[  274.200889][ T5906] syzkaller0: tun_net_xmit 48
[  274.218618][ T5907] syzkaller0: tun_net_xmit 76
[  274.352058][T13889] syzkaller0: tun_chr_ioctl cmd 2147767520
[  274.355023][T13889] syzkaller0: tun_net_xmit 1280
[  275.666656][T13930] __nla_validate_parse: 4 callbacks suppressed
[  275.666668][T13930] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2288'.
[  275.704732][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2296'.
[  275.712893][T13926] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2294'.
[  275.717389][T13926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2294'.
[  275.960940][T13936] validate_nla: 5 callbacks suppressed
[  275.960950][T13936] netlink: 'syz.0.2297': attribute type 30 has an invalid length.
[  275.999155][T13940] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2298'.
[  276.001516][T13939] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2298'.
[  276.088726][T13948] netlink: 'syz.0.2301': attribute type 39 has an invalid length.
[  276.230879][T13956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2303'.
[  276.234554][T13956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2303'.
[  276.354084][T13958] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2304'.
[  276.394914][T13961] netlink: 'syz.0.2305': attribute type 39 has an invalid length.
[  276.483497][T13967] netlink: 'syz.1.2307': attribute type 10 has an invalid length.
[  276.592596][T13971] netlink: 'syz.0.2305': attribute type 10 has an invalid length.
[  276.615731][T13971] team0: Port device bond0 removed
[  276.705528][T13973] netlink: 'syz.1.2308': attribute type 21 has an invalid length.
[  276.757627][ T5849] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  276.760608][ T5849] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x01
[  276.832338][T13981] netlink: 'syz.1.2311': attribute type 2 has an invalid length.
[  276.835656][T13981] netlink: 'syz.1.2311': attribute type 4 has an invalid length.
[  276.838900][T13981] netlink: 'syz.1.2311': attribute type 8 has an invalid length.
[  276.841940][T13981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2311'.
[  276.872911][T13983] netlink: 'syz.1.2312': attribute type 21 has an invalid length.
[  277.942314][T14000] delete_channel: no stack
[  278.601373][T14062] =======================================================
[  278.601373][T14062] WARNING: The mand mount option has been deprecated and
[  278.601373][T14062]          and is ignored by this kernel. Remove the mand
[  278.601373][T14062]          option from the mount to silence this warning.
[  278.601373][T14062] =======================================================
[  279.311678][T14102] syzkaller0: entered promiscuous mode
[  279.314026][T14102] syzkaller0: entered allmulticast mode
[  279.916431][T14136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  279.919539][T14136] IPv6: NLM_F_CREATE should be set when creating new route
[  279.922598][T14136] IPv6: NLM_F_CREATE should be set when creating new route
[  280.885126][T14154] syzkaller0: entered promiscuous mode
[  280.886946][T14154] syzkaller0: entered allmulticast mode
[  281.970822][T14174] __nla_validate_parse: 14 callbacks suppressed
[  281.970831][T14174] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2362'.
[  282.182350][ T5849] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  282.182553][ T5849] Bluetooth: hci0: connection err: -111
[  283.342558][T14196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2369'.
[  283.346257][T14196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2369'.
[  283.489451][T14205] validate_nla: 5 callbacks suppressed
[  283.489461][T14205] netlink: 'syz.0.2372': attribute type 23 has an invalid length.
[  283.531905][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'.
[  283.572770][T14211] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.2375'.
[  283.901667][T14227] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  283.905453][T14227] CPU: 0 UID: 0 PID: 14227 Comm: syz.2.2380 Not tainted syzkaller #0 PREEMPT(full) 
[  283.905470][T14227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  283.905479][T14227] Call Trace:
[  283.905485][T14227]  <TASK>
[  283.905491][T14227]  dump_stack_lvl+0x189/0x250
[  283.905513][T14227]  ? kernfs_path_from_node+0x2f/0x290
[  283.905531][T14227]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.905548][T14227]  ? __pfx__printk+0x10/0x10
[  283.905571][T14227]  ? kernfs_path_from_node+0x2f/0x290
[  283.905584][T14227]  ? kernfs_path_from_node+0x250/0x290
[  283.905596][T14227]  ? kernfs_path_from_node+0x2f/0x290
[  283.905615][T14227]  sysfs_warn_dup+0x8e/0xa0
[  283.905629][T14227]  sysfs_do_create_link_sd+0xc0/0x110
[  283.905645][T14227]  device_add_class_symlinks+0x1cf/0x240
[  283.905663][T14227]  device_add+0x475/0xb50
[  283.905680][T14227]  wiphy_register+0x1ba6/0x28d0
[  283.905715][T14227]  ? __pfx_wiphy_register+0x10/0x10
[  283.905731][T14227]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  283.905753][T14227]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  283.905781][T14227]  ieee80211_register_hw+0x3425/0x4080
[  283.905811][T14227]  ? ieee80211_register_hw+0x1471/0x4080
[  283.905833][T14227]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  283.905852][T14227]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  283.905877][T14227]  ? __hrtimer_setup+0x187/0x210
[  283.905888][T14227]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  283.905909][T14227]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  283.905955][T14227]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  283.905968][T14227]  ? trace_kmalloc+0x1f/0xd0
[  283.905982][T14227]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  283.905998][T14227]  ? kstrndup+0xbf/0x160
[  283.906020][T14227]  hwsim_new_radio_nl+0xea4/0x1b10
[  283.906038][T14227]  ? __pfx___nla_validate_parse+0x10/0x10
[  283.906069][T14227]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  283.906095][T14227]  ? __nla_parse+0x40/0x60
[  283.906139][T14227]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  283.906164][T14227]  genl_family_rcv_msg_doit+0x215/0x300
[  283.906213][T14227]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  283.906241][T14227]  ? bpf_lsm_capable+0x9/0x20
[  283.906258][T14227]  ? security_capable+0x7e/0x2e0
[  283.906283][T14227]  genl_rcv_msg+0x60e/0x790
[  283.906302][T14227]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.906322][T14227]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  283.906355][T14227]  netlink_rcv_skb+0x208/0x470
[  283.906371][T14227]  ? __lock_acquire+0xab9/0xd20
[  283.906389][T14227]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.906405][T14227]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.906440][T14227]  ? down_read+0x1ad/0x2e0
[  283.906461][T14227]  genl_rcv+0x28/0x40
[  283.906472][T14227]  netlink_unicast+0x82f/0x9e0
[  283.906496][T14227]  ? __pfx_netlink_unicast+0x10/0x10
[  283.906514][T14227]  ? netlink_sendmsg+0x642/0xb30
[  283.906529][T14227]  ? skb_put+0x11b/0x210
[  283.906551][T14227]  netlink_sendmsg+0x805/0xb30
[  283.906576][T14227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.906596][T14227]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.906616][T14227]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.906628][T14227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.906645][T14227]  __sock_sendmsg+0x21c/0x270
[  283.906663][T14227]  ____sys_sendmsg+0x505/0x830
[  283.906678][T14227]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.906695][T14227]  ? import_iovec+0x74/0xa0
[  283.906712][T14227]  ___sys_sendmsg+0x21f/0x2a0
[  283.906726][T14227]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.906758][T14227]  ? __fget_files+0x2a/0x420
[  283.906781][T14227]  ? __fget_files+0x2a/0x420
[  283.906792][T14227]  ? __fget_files+0x3a0/0x420
[  283.906811][T14227]  __x64_sys_sendmsg+0x19b/0x260
[  283.906827][T14227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.906849][T14227]  ? rcu_is_watching+0x15/0xb0
[  283.906865][T14227]  ? do_syscall_64+0xbe/0x3b0
[  283.906885][T14227]  do_syscall_64+0xfa/0x3b0
[  283.906898][T14227]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.906914][T14227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.906924][T14227]  ? exc_page_fault+0x9f/0xf0
[  283.906942][T14227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.906954][T14227] RIP: 0033:0x7fb021b8ebe9
[  283.906967][T14227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.906976][T14227] RSP: 002b:00007fb022994038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.906990][T14227] RAX: ffffffffffffffda RBX: 00007fb021db5fa0 RCX: 00007fb021b8ebe9
[  283.906998][T14227] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004
[  283.907006][T14227] RBP: 00007fb021c11e19 R08: 0000000000000000 R09: 0000000000000000
[  283.907015][T14227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.907023][T14227] R13: 00007fb021db6038 R14: 00007fb021db5fa0 R15: 00007ffe6a123578
[  283.907047][T14227]  </TASK>
[  284.184160][T14232] netlink: 'syz.1.2381': attribute type 13 has an invalid length.
[  284.187528][T14232] netlink: 'syz.1.2381': attribute type 58 has an invalid length.
[  284.191713][T14232] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2381'.
[  284.312707][T14234] netlink: 'syz.1.2382': attribute type 29 has an invalid length.
[  284.322574][T14234] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.327393][T14234] netlink: 'syz.1.2382': attribute type 29 has an invalid length.
[  284.871980][T14244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2385'.
[  285.257033][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'.
[  285.280207][T14255] netlink: 'syz.1.2389': attribute type 23 has an invalid length.
[  285.533083][T14263] netlink: 'syz.2.2392': attribute type 1 has an invalid length.
[  285.544014][T14263] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2392'.
[  285.809889][T14276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2393'.
[  286.617105][T14282] netlink: 'syz.0.2398': attribute type 3 has an invalid length.
[  286.865063][T14299] pim6reg1: entered allmulticast mode
[  287.088800][T14325] netlink: 'syz.0.2413': attribute type 7 has an invalid length.
[  287.091413][T14325] __nla_validate_parse: 2 callbacks suppressed
[  287.091419][T14325] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2413'.
[  287.133183][T14329] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2414'.
[  287.669240][T14360] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2424'.
[  287.957111][T14367] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  287.962437][T14364] netlink: 'syz.1.2425': attribute type 2 has an invalid length.
[  287.965864][T14364] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2425'.
[  287.973878][ T5849] Bluetooth: hci1: ISO packet too small
[  289.039213][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'.
[  289.042460][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'.
[  289.136523][T14435] sock: sock_set_timeout: `syz.1.2446' (pid 14435) tries to set negative timeout
[  289.245893][T14437] netlink: 'syz.0.2448': attribute type 29 has an invalid length.
[  289.249793][T14437] netlink: 'syz.0.2448': attribute type 29 has an invalid length.
[  289.252931][T14437] netlink: 'syz.0.2448': attribute type 29 has an invalid length.
[  289.262535][T14437] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2448'.
[  289.270992][T14446] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2451'.
[  289.321171][T14450] netlink: 'syz.0.2453': attribute type 46 has an invalid length.
[  289.427057][T14457] syzkaller0: entered promiscuous mode
[  289.429883][T14457] syzkaller0: entered allmulticast mode
[  289.584164][T14461] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2456'.
[  289.656185][T14465] netlink: 'syz.0.2458': attribute type 10 has an invalid length.
[  290.539579][T14481] netlink: 'syz.1.2463': attribute type 2 has an invalid length.
[  290.543176][T14481] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2463'.
[  290.715901][T14484] netlink: 'syz.1.2463': attribute type 2 has an invalid length.
[  290.835151][T14488] netlink: zone id is out of range
[  290.837660][T14488] netlink: zone id is out of range
[  290.841416][T14488] netlink: zone id is out of range
[  290.843406][T14488] netlink: zone id is out of range
[  290.845486][T14488] netlink: zone id is out of range
[  290.847493][T14488] netlink: zone id is out of range
[  290.854171][T14488] netlink: zone id is out of range
[  290.856417][T14488] netlink: zone id is out of range
[  290.858891][T14488] netlink: zone id is out of range
[  290.863994][T14488] netlink: zone id is out of range
[  291.169449][T14492] netlink: 'syz.0.2466': attribute type 10 has an invalid length.
[  291.392408][T14502] delete_channel: no stack
[  291.394117][T14502] delete_channel: no stack
[  292.270299][ T5849] Bluetooth: hci2: ISO packet for unknown connection handle 3
[  292.450696][T14549] __nla_validate_parse: 6 callbacks suppressed
[  292.450713][T14549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2482'.
[  292.459791][   T33] audit: type=1107 audit(1755617275.552:6): pid=14548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='%O(Co>1KqWE'q)R?8_>@L'
[  292.483155][T14549] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.2482'.
[  292.487184][T14549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2482'.
[  292.591807][T14564] netlink: 'syz.1.2487': attribute type 10 has an invalid length.
[  292.869492][T14570] netlink: 'syz.0.2488': attribute type 4 has an invalid length.
[  293.001947][T14572] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2489'.
[  293.158252][T14580] wlan1 speed is unknown, defaulting to 1000
[  293.161316][T14580] lo speed is unknown, defaulting to 1000
[  293.299481][ T5856] tipc: Subscription rejected, illegal request
[  294.107374][T14598] siw: device registration error -23
[  294.133951][T14599] netlink: 16370 bytes leftover after parsing attributes in process `syz.1.2492'.
[  294.261327][T14608] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2495'.
[  294.323939][ T5849] Bluetooth: hci2: ISO packet for unknown connection handle 16
[  294.350158][T14612] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2497'.
[  295.673552][T14630] netlink: 'syz.1.2500': attribute type 1 has an invalid length.
[  296.373513][T14644] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode
[  296.376663][T14644] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode
[  296.654735][T14669] netlink: 'syz.0.2513': attribute type 21 has an invalid length.
[  296.682411][T14669] netlink: 'syz.0.2513': attribute type 21 has an invalid length.
[  296.709535][T14669] netlink: 'syz.0.2513': attribute type 21 has an invalid length.
[  296.737574][T14669] netlink: 'syz.0.2513': attribute type 21 has an invalid length.
[  296.764433][T14669] netlink: 'syz.0.2513': attribute type 21 has an invalid length.
[  296.790283][T14669] netlink: 'syz.0.2513': attribute type 21 has an invalid length.
[  296.820827][T14669] netlink: 'syz.0.2513': attribute type 21 has an invalid length.
[  296.847461][T14669] netlink: 'syz.0.2513': attribute type 21 has an invalid length.
[  296.876857][T14669] netlink: 'syz.0.2513': attribute type 21 has an invalid length.
[  297.570085][T14726] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2520'.
[  297.899625][T14731] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2522'.
[  297.988395][T14741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2527'.
[  297.990567][T14739] netlink: 8196 bytes leftover after parsing attributes in process `syz.0.2526'.
[  298.070106][T14747] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2527'.
[  298.126428][T14755] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2531'.
[  298.130750][T14755] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2531'.
[  298.134204][T14755] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2531'.
[  298.137281][T14755] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2531'.
[  298.140728][T14755] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2531'.
[  298.318695][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  300.104220][T14814] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  300.107402][T14814] CPU: 0 UID: 0 PID: 14814 Comm: syz.2.2549 Not tainted syzkaller #0 PREEMPT(full) 
[  300.107416][T14814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.107424][T14814] Call Trace:
[  300.107432][T14814]  <TASK>
[  300.107441][T14814]  dump_stack_lvl+0x189/0x250
[  300.107466][T14814]  ? kernfs_path_from_node+0x2f/0x290
[  300.107488][T14814]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.107509][T14814]  ? __pfx__printk+0x10/0x10
[  300.107541][T14814]  ? __rcu_read_unlock+0x84/0xe0
[  300.107564][T14814]  ? kernfs_path_from_node+0x2f/0x290
[  300.107579][T14814]  ? kernfs_path_from_node+0x250/0x290
[  300.107590][T14814]  ? kernfs_path_from_node+0x2f/0x290
[  300.107623][T14814]  sysfs_warn_dup+0x8e/0xa0
[  300.107644][T14814]  sysfs_do_create_link_sd+0xc0/0x110
[  300.107671][T14814]  device_add_class_symlinks+0x1cf/0x240
[  300.107721][T14814]  device_add+0x475/0xb50
[  300.107759][T14814]  wiphy_register+0x1ba6/0x28d0
[  300.107838][T14814]  ? __pfx_wiphy_register+0x10/0x10
[  300.107858][T14814]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  300.107903][T14814]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  300.107969][T14814]  ieee80211_register_hw+0x3425/0x4080
[  300.108043][T14814]  ? ieee80211_register_hw+0x1471/0x4080
[  300.108095][T14814]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  300.108127][T14814]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  300.108173][T14814]  ? __hrtimer_setup+0x187/0x210
[  300.108187][T14814]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  300.108221][T14814]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  300.108344][T14814]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  300.108360][T14814]  ? trace_kmalloc+0x1f/0xd0
[  300.108374][T14814]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  300.108392][T14814]  ? kstrndup+0xbf/0x160
[  300.108445][T14814]  hwsim_new_radio_nl+0xea4/0x1b10
[  300.108477][T14814]  ? __pfx___nla_validate_parse+0x10/0x10
[  300.108548][T14814]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  300.108616][T14814]  ? __nla_parse+0x40/0x60
[  300.108653][T14814]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  300.108698][T14814]  genl_family_rcv_msg_doit+0x215/0x300
[  300.108740][T14814]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  300.108805][T14814]  ? bpf_lsm_capable+0x9/0x20
[  300.108819][T14814]  ? security_capable+0x7e/0x2e0
[  300.108866][T14814]  genl_rcv_msg+0x60e/0x790
[  300.108910][T14814]  ? __pfx_genl_rcv_msg+0x10/0x10
[  300.108928][T14814]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  300.108980][T14814]  ? perf_trace_lock_acquire+0xf5/0x410
[  300.108992][T14814]  ? perf_trace_run_bpf_submit+0x100/0x170
[  300.109045][T14814]  netlink_rcv_skb+0x208/0x470
[  300.109061][T14814]  ? __lock_acquire+0xab9/0xd20
[  300.109090][T14814]  ? __pfx_genl_rcv_msg+0x10/0x10
[  300.109116][T14814]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  300.109207][T14814]  ? down_read+0x1ad/0x2e0
[  300.109241][T14814]  genl_rcv+0x28/0x40
[  300.109257][T14814]  netlink_unicast+0x82f/0x9e0
[  300.109311][T14814]  ? __pfx_netlink_unicast+0x10/0x10
[  300.109343][T14814]  ? netlink_sendmsg+0x642/0xb30
[  300.109356][T14814]  ? skb_put+0x11b/0x210
[  300.109395][T14814]  netlink_sendmsg+0x805/0xb30
[  300.109452][T14814]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.109482][T14814]  ? perf_trace_run_bpf_submit+0x100/0x170
[  300.109497][T14814]  ? aa_sock_msg_perm+0xf1/0x1d0
[  300.109527][T14814]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  300.109543][T14814]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.109568][T14814]  __sock_sendmsg+0x21c/0x270
[  300.109603][T14814]  ____sys_sendmsg+0x505/0x830
[  300.109644][T14814]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.109698][T14814]  ? import_iovec+0x74/0xa0
[  300.109733][T14814]  ___sys_sendmsg+0x21f/0x2a0
[  300.109762][T14814]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.109857][T14814]  ? __fget_files+0x2a/0x420
[  300.109918][T14814]  ? __fget_files+0x2a/0x420
[  300.109968][T14814]  ? __fget_files+0x3a0/0x420
[  300.110023][T14814]  __x64_sys_sendmsg+0x19b/0x260
[  300.110054][T14814]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  300.110116][T14814]  ? rcu_is_watching+0x15/0xb0
[  300.110154][T14814]  ? do_syscall_64+0xbe/0x3b0
[  300.110191][T14814]  do_syscall_64+0xfa/0x3b0
[  300.110207][T14814]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.110226][T14814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.110240][T14814]  ? exc_page_fault+0x9f/0xf0
[  300.110270][T14814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.110282][T14814] RIP: 0033:0x7fb021b8ebe9
[  300.110299][T14814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.110310][T14814] RSP: 002b:00007fb022952038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.110321][T14814] RAX: ffffffffffffffda RBX: 00007fb021db6180 RCX: 00007fb021b8ebe9
[  300.110330][T14814] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006
[  300.110337][T14814] RBP: 00007fb021c11e19 R08: 0000000000000000 R09: 0000000000000000
[  300.110343][T14814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.110349][T14814] R13: 00007fb021db6218 R14: 00007fb021db6180 R15: 00007ffe6a123578
[  300.110418][T14814]  </TASK>
[  300.919919][T14844] mac80211_hwsim hwsim25 O3c: renamed from wlan1 (while UP)
[  301.637485][T14876] -1: renamed from syzkaller0
[  301.853003][T14887] net_ratelimit: 15 callbacks suppressed
[  301.853016][T14887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  301.900709][T14849] delete_channel: no stack
[  302.286137][T14925] bpf: Bad value for 'mode'
[  302.345951][T14926] validate_nla: 34 callbacks suppressed
[  302.345967][T14926] netlink: 'syz.0.2585': attribute type 21 has an invalid length.
[  302.357266][T14926] netlink: 'syz.0.2585': attribute type 20 has an invalid length.
[  302.366881][T14926] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  302.499513][T14935] netlink: 'syz.2.2588': attribute type 21 has an invalid length.
[  302.680964][T14941] __nla_validate_parse: 78 callbacks suppressed
[  302.680974][T14941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2590'.
[  302.833138][T14944] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2591'.
[  302.845755][T14944] tc_dump_action: action bad kind
[  303.389187][T14981] netlink: 'syz.0.2601': attribute type 12 has an invalid length.
[  303.394155][T14981] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2601'.
[  303.476061][T14988] siw: device registration error -23
[  303.753769][T15003] netlink: 'syz.0.2607': attribute type 29 has an invalid length.
[  303.760918][T15003] netlink: 'syz.0.2607': attribute type 29 has an invalid length.
[  303.767415][T15003] netlink: 'syz.0.2607': attribute type 29 has an invalid length.
[  303.773016][T15003] netlink: 'syz.0.2607': attribute type 29 has an invalid length.
[  303.797599][T15003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2607'.
[  304.103604][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'.
[  304.284762][T15042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.579172][T15045] delete_channel: no stack
[  304.881315][T15062] netlink: 'syz.0.2624': attribute type 3 has an invalid length.
[  305.026722][T15077] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2628'.
[  305.032431][T15077] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2628'.
[  305.103452][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'.
[  305.116917][T15083] openvswitch: netlink: nsh attribute has 8 unknown bytes.
[  305.360563][T15091] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2633'.
[  305.684901][T15122] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2641'.
[  305.703358][T15122] bridge: RTM_NEWNEIGH with invalid state 0x1
[  306.215013][T15130] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  306.327328][T15134] netlink: 'syz.2.2644': attribute type 39 has an invalid length.
[  306.815280][T15147] netlink: 'syz.2.2648': attribute type 11 has an invalid length.
[  307.006308][T15156] syzkaller0: entered promiscuous mode
[  307.015031][T15156] syzkaller0: entered allmulticast mode
[  307.297041][T15172] wlan1 speed is unknown, defaulting to 1000
[  307.301090][T15172] lo speed is unknown, defaulting to 1000
[  307.375297][T15185] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  307.425427][T15187] netlink: 'syz.2.2661': attribute type 12 has an invalid length.
[  307.494480][T15191] netlink: 'syz.0.2662': attribute type 29 has an invalid length.
[  307.509008][T15191] netlink: 'syz.0.2662': attribute type 29 has an invalid length.
[  307.740240][T15210] __nla_validate_parse: 6 callbacks suppressed
[  307.740254][T15210] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2667'.
[  308.349460][T15220] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2671'.
[  308.549610][T15224] netlink: 'syz.0.2673': attribute type 21 has an invalid length.
[  308.552878][T15224] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2673'.
[  308.565349][T15224] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2673'.
[  308.571208][T15224] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  308.632043][T15229] netlink: 825 bytes leftover after parsing attributes in process `syz.0.2673'.
[  308.635134][T15229] netlink: 130144 bytes leftover after parsing attributes in process `syz.0.2673'.
[  308.818327][T15237] syzkaller0: entered promiscuous mode
[  308.820326][T15237] syzkaller0: entered allmulticast mode
[  309.577638][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2680'.
[  309.888959][T15251] netlink: 'syz.2.2681': attribute type 19 has an invalid length.
[  310.051062][T15261] netlink: 'syz.2.2683': attribute type 29 has an invalid length.
[  310.340639][T15263] syzkaller0: entered promiscuous mode
[  310.342640][T15263] syzkaller0: entered allmulticast mode
[  310.355384][T15264] : renamed from pim6reg1
[  310.359896][T15261] netlink: 'syz.2.2683': attribute type 29 has an invalid length.
[  310.363362][T15269] netlink: 'syz.2.2683': attribute type 29 has an invalid length.
[  310.367059][T15270] netlink: 'syz.0.2684': attribute type 14 has an invalid length.
[  312.983247][T15331] openvswitch: netlink: Message has 240 unknown bytes.
[  313.091124][T15337] netlink: 'syz.1.2703': attribute type 13 has an invalid length.
[  313.093779][T15337] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.2703'.
[  313.516171][T15340] netlink: 'syz.2.2705': attribute type 21 has an invalid length.
[  313.680699][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2708'.
[  313.883631][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'.
[  313.887287][T15366] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2713'.
[  314.149704][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'.
[  314.327602][T15395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2720'.
[  315.003144][T15460] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2739'.
[  315.115266][T15461] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2740'.
[  315.182802][T15465] syzkaller0: entered promiscuous mode
[  315.184838][T15465] syzkaller0: entered allmulticast mode
[  316.720895][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.723503][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.794099][T15496] netlink: 'syz.2.2751': attribute type 3 has an invalid length.
[  316.797398][T15496] netlink: 'syz.2.2751': attribute type 2 has an invalid length.
[  316.801456][T15496] netlink: 130500 bytes leftover after parsing attributes in process `syz.2.2751'.
[  317.748450][T15524] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2758'.
[  318.256975][T15531] netlink: 'syz.0.2761': attribute type 2 has an invalid length.
[  318.265904][T15531] netlink: 'syz.0.2761': attribute type 1 has an invalid length.
[  318.273103][T15531] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2761'.
[  318.284006][T15531] nbd: couldn't find a device at index 149
[  318.841319][T15541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2765'.
[  318.848679][T15541] netlink: 'syz.0.2765': attribute type 29 has an invalid length.
[  318.855915][T15541] netlink: 'syz.0.2765': attribute type 29 has an invalid length.
[  319.164257][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2770'.
[  319.167200][T15556] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2770'.
[  319.174182][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2770'.
[  319.191527][T15556] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2770'.
[  319.194801][T15556] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2770'.
[  319.479928][ T5849] Bluetooth: hci2: ISO packet for unknown connection handle 5
[  319.488005][T15560] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  319.490601][T15560] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  319.605829][T15568] syzkaller0: entered promiscuous mode
[  319.609363][T15568] syzkaller0: entered allmulticast mode
[  319.637323][T15568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2774'.
[  319.674791][T15566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2775'.
[  319.678464][T15566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2775'.
[  320.008141][T15593] netlink: 'syz.2.2782': attribute type 10 has an invalid length.
[  320.168716][T15600] netlink: 'syz.0.2784': attribute type 4 has an invalid length.
[  320.664428][T15628] sctp: [Deprecated]: syz.0.2792 (pid 15628) Use of int in maxseg socket option.
[  320.664428][T15628] Use struct sctp_assoc_value instead
[  320.743532][T15635] netlink: 'syz.2.2795': attribute type 21 has an invalid length.
[  321.066215][T15648] netlink: 'syz.2.2798': attribute type 10 has an invalid length.
[  321.078479][T15648] `: Device ipvlan1 failed to register rx_handler
[  322.638905][T15682] netlink: 'syz.1.2811': attribute type 21 has an invalid length.
[  322.642229][T15682] netlink: 'syz.1.2811': attribute type 6 has an invalid length.
[  323.099090][T15707] nbd: must specify an index to disconnect
[  323.385026][T15726] __nla_validate_parse: 15 callbacks suppressed
[  323.385035][T15726] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2826'.
[  323.401979][T15726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2826'.
[  323.405414][T15726] validate_nla: 4 callbacks suppressed
[  323.405421][T15726] netlink: 'syz.0.2826': attribute type 1 has an invalid length.
[  323.575874][T15733] netlink: 202232 bytes leftover after parsing attributes in process `syz.2.2829'.
[  323.579445][T15733] netlink: zone id is out of range
[  323.581204][T15733] netlink: zone id is out of range
[  323.585056][T15733] netlink: zone id is out of range
[  323.590057][T15733] netlink: zone id is out of range
[  323.944495][T15752] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2832'.
[  323.947947][T15751] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2832'.
[  323.964090][T15750] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2834'.
[  324.522103][T15766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.093088][T15798] netlink: 'syz.0.2846': attribute type 10 has an invalid length.
[  325.095996][T15798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2846'.
[  325.108378][T15798] team0: entered promiscuous mode
[  325.119602][T15798] C: entered promiscuous mode
[  325.122630][T15798] team_slave_1: entered promiscuous mode
[  325.125271][T15798] team0: entered allmulticast mode
[  325.127049][T15798] C: entered allmulticast mode
[  325.133279][T15798] team_slave_1: entered allmulticast mode
[  325.146883][T15798] 8021q: adding VLAN 0 to HW filter on device team0
[  325.151556][T15798] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  325.290139][T15807] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2851'.
[  325.310131][T15807] netlink: 41407 bytes leftover after parsing attributes in process `syz.1.2851'.
[  325.782650][T15818] netlink: 'syz.2.2854': attribute type 2 has an invalid length.
[  325.786132][T15818] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2854'.
[  325.791465][T15818] D`: renamed from hsr_slave_1 (while UP)
[  325.853647][T15826] netlink: 'syz.0.2856': attribute type 33 has an invalid length.
[  325.885113][T15830] netlink: 'syz.0.2857': attribute type 1 has an invalid length.
[  326.371157][T15864] netlink: 'syz.0.2868': attribute type 1 has an invalid length.
[  326.521253][T15874] netlink: 'syz.1.2869': attribute type 1 has an invalid length.
[  326.523942][T15874] netlink: 'syz.1.2869': attribute type 4 has an invalid length.
[  327.270528][T15897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.567237][T15915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.725576][T15917] netlink: 'syz.2.2882': attribute type 10 has an invalid length.
[  327.859609][T15919] netlink: 'syz.2.2883': attribute type 17 has an invalid length.
[  328.032329][T15929] wlan1 speed is unknown, defaulting to 1000
[  328.038498][T15929] lo speed is unknown, defaulting to 1000
[  328.051698][T15930] delete_channel: no stack
[  328.353902][T15944] sctp: [Deprecated]: syz.1.2891 (pid 15944) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.353902][T15944] Use struct sctp_sack_info instead
[  329.092944][T15956] __nla_validate_parse: 16 callbacks suppressed
[  329.092959][T15956] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2894'.
[  329.101438][T15956] netlink: zone id is out of range
[  329.103310][T15956] netlink: zone id is out of range
[  329.105144][T15956] netlink: zone id is out of range
[  329.107050][T15956] netlink: zone id is out of range
[  329.109894][T15956] netlink: zone id is out of range
[  329.112183][T15956] netlink: zone id is out of range
[  329.114414][T15956] netlink: zone id is out of range
[  331.049626][T16022] net_ratelimit: 75 callbacks suppressed
[  331.049638][T16022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.355363][T16038] validate_nla: 9 callbacks suppressed
[  331.355378][T16038] netlink: 'syz.1.2919': attribute type 1 has an invalid length.
[  331.364748][T16039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2919'.
[  331.370951][T16039] netlink: 'syz.1.2919': attribute type 1 has an invalid length.
[  331.374281][T16038] netlink: 588 bytes leftover after parsing attributes in process `syz.1.2919'.
[  331.380042][T16039] netlink: 'syz.1.2919': attribute type 2 has an invalid length.
[  331.540418][T16051] netlink: 'syz.0.2922': attribute type 64 has an invalid length.
[  331.711998][T16057] siw: device registration error -23
[  332.173986][T16069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2930'.
[  332.211355][T16069] netlink: 'syz.2.2930': attribute type 10 has an invalid length.
[  332.215202][T16069] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2930'.
[  332.257379][T16069] netlink: 'syz.2.2930': attribute type 1 has an invalid length.
[  332.494573][T16087] openvswitch: netlink: Missing valid actions attribute.
[  332.497053][T16087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.620877][T16095] netlink: 'syz.1.2937': attribute type 13 has an invalid length.
[  332.623956][T16095] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2937'.
[  332.628551][T16095] : refused to change device tx_queue_len
[  332.631184][T16095] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  332.702219][T16101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2940'.
[  332.871611][T16099] netlink: 208344 bytes leftover after parsing attributes in process `syz.2.2938'.
[  332.874855][T16099] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  332.878160][T16099] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  332.886028][T16099] netlink: 'syz.2.2938': attribute type 3 has an invalid length.
[  332.889444][T16099] netlink: 'syz.2.2938': attribute type 1 has an invalid length.
[  332.892767][T16099] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2938'.
[  332.965711][T16113] : entered promiscuous mode
[  332.967827][T16113] bond_slave_1: entered promiscuous mode
[  332.970017][T16113] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  332.973494][T16113] bond0: entered promiscuous mode
[  332.976117][T16113] bond0: entered allmulticast mode
[  332.987253][T16113] : entered allmulticast mode
[  332.989532][T16113] bond_slave_1: entered allmulticast mode
[  332.991545][T16113] geneve0: entered allmulticast mode
[  332.993399][T16113] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  332.997252][T16113] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.257845][T16125] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2945'.
[  333.444320][T16131] netlink: 'syz.1.2948': attribute type 2 has an invalid length.
[  334.584826][T16141] __nla_validate_parse: 2 callbacks suppressed
[  334.584885][T16141] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2950'.
[  334.592918][T16145] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2952'.
[  334.625017][T16141] netlink: zone id is out of range
[  334.627075][T16141] netlink: zone id is out of range
[  334.629090][T16141] netlink: zone id is out of range
[  334.631322][T16141] netlink: zone id is out of range
[  334.712987][T16155] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2956'.
[  334.816906][T16159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2957'.
[  334.820931][T16159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2957'.
[  334.938167][T16171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2962'.
[  334.973993][T16173] delete_channel: no stack
[  335.179931][ T5906] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.189678][ T5906] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.192753][ T5906] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.195972][ T5906] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.509459][T16198] Can't find ip_set type bitmap:ip,mac
[  335.656372][T16207] : renamed from bond0 (while UP)
[  335.665301][T16207] : left promiscuous mode
[  335.667424][T16207] : left promiscuous mode
[  335.672614][T16207] bond_slave_1: left promiscuous mode
[  335.675284][T16207] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  335.680489][T16207] : left allmulticast mode
[  335.683128][T16207] : left allmulticast mode
[  335.685113][T16207] bond_slave_1: left allmulticast mode
[  335.687251][T16207] geneve0: left allmulticast mode
[  335.689512][T16207] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  335.722895][T16212] netlink: 103 bytes leftover after parsing attributes in process `syz.1.2973'.
[  335.781862][T16215] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2974'.
[  336.068903][T16232] tap0: tun_chr_ioctl cmd 1074025672
[  336.071632][T16232] tap0: ignored: set checksum enabled
[  336.502675][T16242] sit0: entered promiscuous mode
[  336.692562][T16254] validate_nla: 7 callbacks suppressed
[  336.692582][T16254] netlink: 'syz.1.2984': attribute type 10 has an invalid length.
[  336.699283][T16249] netlink: 'syz.1.2984': attribute type 10 has an invalid length.
[  336.765236][T16261] netlink: 'syz.2.2987': attribute type 13 has an invalid length.
[  336.768734][T16261] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2987'.
[  336.888344][T16266] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2988'.
[  336.981359][T16277] nftables ruleset with unbound chain
[  337.052154][T16285] netlink: 'syz.1.2991': attribute type 2 has an invalid length.
[  337.088106][T16292] netlink: 'syz.0.2993': attribute type 3 has an invalid length.
[  337.091310][T16292] net_ratelimit: 80 callbacks suppressed
[  337.091320][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.100370][T16292] netlink: 'syz.0.2993': attribute type 3 has an invalid length.
[  337.103600][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.109893][T16292] netlink: 'syz.0.2993': attribute type 3 has an invalid length.
[  337.113599][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.115297][T16285] netlink: 'syz.1.2991': attribute type 1 has an invalid length.
[  337.121229][T16292] netlink: 'syz.0.2993': attribute type 3 has an invalid length.
[  337.125637][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.132124][T16292] netlink: 'syz.0.2993': attribute type 3 has an invalid length.
[  337.135121][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.141916][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.150155][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.156199][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.162788][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.168965][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  338.659188][T16377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  342.589066][T16449] validate_nla: 70 callbacks suppressed
[  342.589083][T16449] netlink: 'syz.1.3044': attribute type 21 has an invalid length.
[  342.594771][T16449] __nla_validate_parse: 96 callbacks suppressed
[  342.594788][T16449] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3044'.
[  342.601378][T16451] netlink: 731 bytes leftover after parsing attributes in process `syz.0.3043'.
[  343.378995][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'.
[  343.677259][T16502] netlink: 'syz.2.3059': attribute type 4 has an invalid length.
[  343.724854][T16509] net_ratelimit: 57 callbacks suppressed
[  343.724871][T16509] netlink: del zone limit has 4 unknown bytes
[  343.785684][T16513] netlink: 'syz.2.3062': attribute type 10 has an invalid length.
[  343.790024][T16513] 8021q: adding VLAN 0 to HW filter on device `
[  343.793238][T16513] bond0: (slave `): Enslaving as an active interface with an up link
[  343.889367][T16522] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3065'.
[  343.974094][T16533] netlink: 'syz.1.3068': attribute type 29 has an invalid length.
[  343.980153][T16533] netlink: 'syz.1.3068': attribute type 29 has an invalid length.
[  344.242187][T16540] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3070'.
[  344.444367][T16552] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.3074'.
[  344.547484][T16555] netlink: 'syz.1.3075': attribute type 10 has an invalid length.
[  344.550195][T16555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3075'.
[  344.671947][T16559] netlink: 'syz.1.3076': attribute type 10 has an invalid length.
[  344.679042][T16559] team0: Port device  added
[  344.804664][T16561] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3077'.
[  345.500329][T16570] netlink: 'syz.2.3080': attribute type 29 has an invalid length.
[  345.503475][T16570] netlink: 'syz.2.3080': attribute type 29 has an invalid length.
[  345.534572][T16570] netlink: 4200 bytes leftover after parsing attributes in process `syz.2.3080'.
[  345.563716][T16572] netlink: 'syz.0.3081': attribute type 1 has an invalid length.
[  345.566350][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3081'.
[  345.594538][T16572] veth1_macvtap: left allmulticast mode
[  345.597086][T16572] veth1_macvtap: left promiscuous mode
[  345.940207][T16608] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  345.942996][T16608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.292000][T16635] debugfs: '!' already exists in 'ieee80211'
[  346.766025][T16647] syzkaller0: entered promiscuous mode
[  346.770197][T16647] syzkaller0: entered allmulticast mode
[  347.982147][T16700] __nla_validate_parse: 18 callbacks suppressed
[  347.982259][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3116'.
[  347.997204][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3116'.
[  348.095270][T16705] validate_nla: 5 callbacks suppressed
[  348.095286][T16705] netlink: 'syz.0.3118': attribute type 10 has an invalid length.
[  348.101769][T16705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3118'.
[  348.106367][T16705] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  348.637274][T16713] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3120'.
[  348.817553][T16730] netlink: 'syz.0.3125': attribute type 21 has an invalid length.
[  348.821878][T16730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3125'.
[  348.930930][T16737] netlink: 'syz.0.3128': attribute type 4 has an invalid length.
[  348.937509][T16737] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3128'.
[  348.981204][T16739] netlink: 'syz.0.3129': attribute type 10 has an invalid length.
[  348.983820][T16739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3129'.
[  348.987899][T16739] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  349.609605][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'.
[  349.613337][T16766] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  349.616151][T16766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.874630][T16785] rdma_rxe: rxe_newlink: failed to add vcan0
[  349.938137][T16785] netlink: 'syz.2.3140': attribute type 21 has an invalid length.
[  349.941101][T16785] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3140'.
[  350.195120][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'.
[  350.199346][T16798] netlink: 'syz.0.3144': attribute type 2 has an invalid length.
[  350.201973][T16798] netlink: 'syz.0.3144': attribute type 2 has an invalid length.
[  350.204508][T16798] netlink: 'syz.0.3144': attribute type 3 has an invalid length.
[  352.237065][T16861] macsec0: entered promiscuous mode
[  352.240977][T16861] macsec0: entered allmulticast mode
[  352.252676][T16862] netlink: 'syz.2.3159': attribute type 29 has an invalid length.
[  352.261597][T16862] netlink: 'syz.2.3159': attribute type 29 has an invalid length.
[  353.065728][T16886] syzkaller0: tun_chr_ioctl cmd 1074812117
[  353.258378][T16903] __nla_validate_parse: 9 callbacks suppressed
[  353.258393][T16903] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3172'.
[  353.348813][T16915] sock: sock_set_timeout: `syz.1.3175' (pid 16915) tries to set negative timeout
[  353.386957][T16916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  353.396559][T16918] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3178'.
[  353.422550][T16915] validate_nla: 1 callbacks suppressed
[  353.422565][T16915] netlink: 'syz.1.3175': attribute type 10 has an invalid length.
[  353.505401][T16923] netlink: 'syz.0.3179': attribute type 2 has an invalid length.
[  353.508581][T16923] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3179'.
[  353.767640][T16942] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3184'.
[  353.921401][T16959] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.3190'.
[  354.042106][ T5906] syzkaller0: tun_net_xmit 76
[  354.046329][ T5906] syzkaller0: tun_net_xmit 48
[  354.067993][ T5568] syzkaller0: tun_net_xmit 76
[  354.085648][T16965] syzkaller0: tun_chr_ioctl cmd 2147767520
[  354.089999][T16965] syzkaller0: tun_net_xmit 1280
[  354.407975][T16973] netlink: 'syz.1.3195': attribute type 10 has an invalid length.
[  354.749773][T16977] netlink: 'syz.0.3197': attribute type 39 has an invalid length.
[  355.218338][T16973] team0: Port device  removed
[  355.283508][T16981] netlink: 'syz.0.3198': attribute type 32 has an invalid length.
[  355.361468][T16984] netlink: 'syz.2.3200': attribute type 21 has an invalid length.
[  355.391484][T16984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3200'.
[  355.494093][T16992] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3202'.
[  355.661283][T17008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3208'.
[  355.694330][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3208'.
[  355.698034][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3208'.
[  356.462735][T17029] netlink: 'syz.1.3215': attribute type 10 has an invalid length.
[  357.556212][T17060] netlink: 'syz.0.3223': attribute type 3 has an invalid length.
[  357.560748][T17060] netlink: 'syz.0.3223': attribute type 3 has an invalid length.
[  357.564729][T17060] netlink: 'syz.0.3223': attribute type 3 has an invalid length.
[  359.352662][T17140] __nla_validate_parse: 77 callbacks suppressed
[  359.352675][T17140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3242'.
[  359.372817][T17140] bridge_slave_0 (unregistering): left allmulticast mode
[  359.374418][T17145] validate_nla: 65 callbacks suppressed
[  359.374430][T17145] netlink: 'syz.0.3243': attribute type 1 has an invalid length.
[  359.375267][T17140] bridge_slave_0 (unregistering): left promiscuous mode
[  359.388699][T17140] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.779038][T17160] mac80211_hwsim hwsim25 O3c: left promiscuous mode
[  359.783197][T17160] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3247'.
[  360.351431][T17163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3248'.
[  360.424942][T17165] netlink: 'syz.0.3249': attribute type 4 has an invalid length.
[  360.429420][T17165] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3249'.
[  360.480528][T17168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3248'.
[  360.702861][T17170] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.3250'.
[  360.763823][T17175] netlink: 'syz.0.3252': attribute type 13 has an invalid length.
[  360.771305][T17178] netlink: 'syz.1.3254': attribute type 21 has an invalid length.
[  360.774197][T17178] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3254'.
[  360.940965][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'.
[  360.944187][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'.
[  360.975900][T17218] netlink: 'syz.1.3262': attribute type 16 has an invalid length.
[  360.978748][T17218] netlink: 'syz.1.3262': attribute type 3 has an invalid length.
[  360.981423][T17218] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3262'.
[  360.985563][T17218] netlink: 'syz.1.3262': attribute type 16 has an invalid length.
[  360.995551][T17218] netlink: 'syz.1.3262': attribute type 3 has an invalid length.
[  361.035332][T17221] netlink: 'syz.2.3263': attribute type 10 has an invalid length.
[  361.166151][T17227] netlink: 'syz.0.3265': attribute type 4 has an invalid length.
[  361.788578][T17285] netlink: zone id is out of range
[  361.791141][T17285] netlink: zone id is out of range
[  361.793613][T17285] netlink: zone id is out of range
[  361.796122][T17285] netlink: zone id is out of range
[  361.799345][T17285] netlink: zone id is out of range
[  361.803925][T17285] netlink: zone id is out of range
[  361.806370][T17285] netlink: zone id is out of range
[  361.809127][T17285] netlink: zone id is out of range
[  361.812602][T17285] netlink: zone id is out of range
[  361.815234][T17285] netlink: zone id is out of range
[  362.073802][T17309] wlan1 speed is unknown, defaulting to 1000
[  362.078581][T17309] lo speed is unknown, defaulting to 1000
[  362.380159][T17324] veth1_macvtap: entered allmulticast mode
[  362.395758][T17324] : (slave veth1_macvtap): Enslaving as an active interface with an up link
[  362.917284][ T5869] batman_adv: batadv0: Removing interface: netdevsim0
[  363.082214][T17354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.085789][T17354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.089282][T17354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.092585][T17354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.096096][T17354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  363.137509][T17350] wlan1 speed is unknown, defaulting to 1000
[  363.162110][T17350] lo speed is unknown, defaulting to 1000
[  363.290094][ T5869] bridge_slave_1: left allmulticast mode
[  363.292474][ T5869] bridge_slave_1: left promiscuous mode
[  363.295342][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.614407][ T5869] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  363.756502][T13526] smc: removing ib device syz1
[  363.759443][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  363.764234][ T5869] bond0 (unregistering): (slave `): Releasing backup interface
[  363.771532][ T5869] bond0 (unregistering): Released all slaves
[  364.275677][T17350] chnl_net:caif_netlink_parms(): no params data found
[  364.644870][T17350] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.653350][T17350] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.660054][T17350] bridge_slave_0: entered allmulticast mode
[  364.669689][T17350] bridge_slave_0: entered promiscuous mode
[  364.704225][T17350] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.718757][T17350] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.721466][T17350] bridge_slave_1: entered allmulticast mode
[  364.740754][T17350] bridge_slave_1: entered promiscuous mode
[  364.761355][T17394] __nla_validate_parse: 13 callbacks suppressed
[  364.761368][T17394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3303'.
[  364.767682][T17394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3303'.
[  364.771823][T17394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3303'.
[  364.833125][T17350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.844504][T17350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.899517][T17396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3304'.
[  364.924516][T17350] team0: Port device team_slave_0 added
[  364.933449][T17350] team0: Port device team_slave_1 added
[  365.297985][ T5849] Bluetooth: hci1: command tx timeout
[  365.311006][T17350] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.313457][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.331144][T17350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.339782][ T5869] : left promiscuous mode
[  365.395263][T17350] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.401168][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.412243][T17350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.522065][T17350] hsr_slave_0: entered promiscuous mode
[  365.525202][T17350] hsr_slave_1: entered promiscuous mode
[  365.529170][T17350] debugfs: 'hsr0' already exists in 'hsr'
[  365.531451][T17350] Cannot create hsr debugfs directory
[  366.146729][T17437] wg2: entered promiscuous mode
[  366.148945][T17437] wg2: entered allmulticast mode
[  366.570399][T17350] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  367.358019][ T5849] Bluetooth: hci1: command tx timeout
[  367.464212][T17464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3319'.
[  367.492503][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3319'.
[  367.600582][T17350] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  367.609664][T17350] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  367.618660][T17466] validate_nla: 8 callbacks suppressed
[  367.618669][T17466] netlink: 'syz.1.3319': attribute type 1 has an invalid length.
[  367.624590][T17466] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3319'.
[  367.629590][T17350] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  367.683336][ T5849] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  367.802687][T17350] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.875343][T17350] 8021q: adding VLAN 0 to HW filter on device team0
[  367.913035][T13526] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.916129][T13526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.938009][T17488] netlink: 'syz.0.3323': attribute type 21 has an invalid length.
[  367.941343][T17488] netlink: 'syz.0.3323': attribute type 5 has an invalid length.
[  367.951204][T13525] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.953641][T13525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.162613][T17350] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.282093][T17350] veth0_vlan: entered promiscuous mode
[  368.311348][T17350] veth1_vlan: entered promiscuous mode
[  368.365140][T17516] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3327'.
[  368.380872][T17508] syzkaller0: entered promiscuous mode
[  368.382743][T17508] syzkaller0: entered allmulticast mode
[  368.433158][T17350] veth0_macvtap: entered promiscuous mode
[  368.445893][T17350] veth1_macvtap: entered promiscuous mode
[  368.496971][T17350] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.542396][T17350] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.441208][T17354] Bluetooth: hci1: command tx timeout
[  369.760597][T17354] Bluetooth: hci2: command 0x0406 tx timeout
[  369.931220][ T8885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.965013][ T8885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.970825][ T8885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.987596][ T8885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.009449][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3331'.
[  370.047480][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3331'.
[  370.103663][T13525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.106279][T13525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.194958][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'.
[  370.199798][T17554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3334'.
[  370.204245][T13537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.206955][T13537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.363703][T17558] tap0: tun_chr_ioctl cmd 1074025677
[  370.366418][T17558] tap0: linktype set to 6
[  370.626000][ T5869] hsr_slave_0: left promiscuous mode
[  370.640125][ T5869] D`: left promiscuous mode
[  370.643154][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.647181][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.662099][ T5869] batman_adv: batadv0: Interface deactivated: D`
[  370.665148][ T5869] batman_adv: batadv0: Removing interface: D`
[  370.705724][T17574] net_ratelimit: 73 callbacks suppressed
[  370.705738][T17574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.714256][T17574] netlink: 'syz.2.3341': attribute type 25 has an invalid length.
[  370.717559][T17574] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.3341'.
[  370.725793][T17574] netlink: 'syz.2.3341': attribute type 21 has an invalid length.
[  370.729240][T17574] netlink: 14045 bytes leftover after parsing attributes in process `syz.2.3341'.
[  370.837671][ T5869] ` (unregistering): Port device team_slave_1 removed
[  370.866603][ T5869] ` (unregistering): Port device C removed
[  371.140021][ T2202] lo speed is unknown, defaulting to 1000
[  371.144466][ T2202] infiniband syz2: ib_query_port failed (-19)
[  371.155001][T17576] : port 1(vlan0) entered blocking state
[  371.159315][T17576] : port 1(vlan0) entered disabled state
[  371.163275][T17576] vlan0: entered allmulticast mode
[  371.165607][T17576] veth0_vlan: entered allmulticast mode
[  371.169634][T17576] vlan0: entered promiscuous mode
[  371.470598][ T5869] ==================================================================
[  371.473712][ T5869] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  371.476757][ T5869] Write of size 8 at addr ffff888113af5228 by task kworker/u8:3/5869
[  371.480411][ T5869] 
[  371.481500][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  371.481510][ T5869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  371.481515][ T5869] Workqueue: netns cleanup_net
[  371.481530][ T5869] Call Trace:
[  371.481534][ T5869]  <TASK>
[  371.481538][ T5869]  dump_stack_lvl+0x189/0x250
[  371.481549][ T5869]  ? __kasan_check_byte+0x12/0x40
[  371.481560][ T5869]  ? __pfx_dump_stack_lvl+0x10/0x10
[  371.481567][ T5869]  ? lock_release+0x4b/0x3e0
[  371.481579][ T5869]  ? __virt_addr_valid+0x4a5/0x5c0
[  371.481588][ T5869]  print_report+0xca/0x240
[  371.481595][ T5869]  ? __xfrm_state_delete+0x666/0xca0
[  371.481605][ T5869]  kasan_report+0x118/0x150
[  371.481615][ T5869]  ? __xfrm_state_delete+0x666/0xca0
[  371.481624][ T5869]  __xfrm_state_delete+0x666/0xca0
[  371.481636][ T5869]  __xfrm_state_delete+0x87b/0xca0
[  371.481646][ T5869]  xfrm_state_flush+0x45f/0x770
[  371.481657][ T5869]  xfrm6_tunnel_net_exit+0x3f/0x100
[  371.481665][ T5869]  ops_undo_list+0x49a/0x990
[  371.481674][ T5869]  ? __pfx_ops_undo_list+0x10/0x10
[  371.481683][ T5869]  ? do_raw_spin_unlock+0x4d/0x240
[  371.481692][ T5869]  cleanup_net+0x4c5/0x800
[  371.481700][ T5869]  ? __pfx_cleanup_net+0x10/0x10
[  371.481709][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  371.481719][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  371.481726][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  371.481732][ T5869]  process_scheduled_works+0xae1/0x17b0
[  371.481743][ T5869]  ? __pfx_process_scheduled_works+0x10/0x10
[  371.481752][ T5869]  worker_thread+0x8a0/0xda0
[  371.481759][ T5869]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  371.481767][ T5869]  ? __kthread_parkme+0x7b/0x200
[  371.481776][ T5869]  kthread+0x711/0x8a0
[  371.481784][ T5869]  ? __pfx_worker_thread+0x10/0x10
[  371.481790][ T5869]  ? __pfx_kthread+0x10/0x10
[  371.481797][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  371.481805][ T5869]  ? lockdep_hardirqs_on+0x9c/0x150
[  371.481814][ T5869]  ? __pfx_kthread+0x10/0x10
[  371.481821][ T5869]  ret_from_fork+0x3fc/0x770
[  371.481829][ T5869]  ? __pfx_ret_from_fork+0x10/0x10
[  371.481837][ T5869]  ? __switch_to_asm+0x39/0x70
[  371.481844][ T5869]  ? __switch_to_asm+0x33/0x70
[  371.481852][ T5869]  ? __pfx_kthread+0x10/0x10
[  371.481859][ T5869]  ret_from_fork_asm+0x1a/0x30
[  371.481869][ T5869]  </TASK>
[  371.481891][ T5869] 
[  371.561018][ T5869] Allocated by task 16388:
[  371.562627][ T5869]  kasan_save_track+0x3e/0x80
[  371.564438][ T5869]  __kasan_slab_alloc+0x6c/0x80
[  371.566252][ T5869]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  371.568313][ T5869]  xfrm_state_alloc+0x24/0x2f0
[  371.570023][ T5869]  __find_acq_core+0x8a7/0x1c00
[  371.571651][ T5869]  xfrm_find_acq+0x78/0xa0
[  371.573133][ T5869]  xfrm_alloc_userspi+0x6b3/0xc90
[  371.574865][ T5869]  xfrm_user_rcv_msg+0x7a3/0xab0
[  371.576717][ T5869]  netlink_rcv_skb+0x208/0x470
[  371.578765][ T5869]  xfrm_netlink_rcv+0x79/0x90
[  371.580405][ T5869]  netlink_unicast+0x82f/0x9e0
[  371.582054][ T5869]  netlink_sendmsg+0x805/0xb30
[  371.583686][ T5869]  __sock_sendmsg+0x21c/0x270
[  371.585326][ T5869]  ____sys_sendmsg+0x505/0x830
[  371.586890][ T5869]  ___sys_sendmsg+0x21f/0x2a0
[  371.588520][ T5869]  __x64_sys_sendmsg+0x19b/0x260
[  371.590263][ T5869]  do_syscall_64+0xfa/0x3b0
[  371.591844][ T5869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.594063][ T5869] 
[  371.594985][ T5869] Freed by task 5568:
[  371.596422][ T5869]  kasan_save_track+0x3e/0x80
[  371.598243][ T5869]  kasan_save_free_info+0x46/0x50
[  371.600082][ T5869]  __kasan_slab_free+0x5b/0x80
[  371.601977][ T5869]  kmem_cache_free+0x18f/0x400
[  371.603826][ T5869]  xfrm_state_gc_task+0x52d/0x6b0
[  371.605575][ T5869]  process_scheduled_works+0xae1/0x17b0
[  371.607654][ T5869]  worker_thread+0x8a0/0xda0
[  371.609406][ T5869]  kthread+0x711/0x8a0
[  371.610817][ T5869]  ret_from_fork+0x3fc/0x770
[  371.612537][ T5869]  ret_from_fork_asm+0x1a/0x30
[  371.614270][ T5869] 
[  371.615055][ T5869] The buggy address belongs to the object at ffff888113af5200
[  371.615055][ T5869]  which belongs to the cache xfrm_state of size 928
[  371.620054][ T5869] The buggy address is located 40 bytes inside of
[  371.620054][ T5869]  freed 928-byte region [ffff888113af5200, ffff888113af55a0)
[  371.624926][ T5869] 
[  371.625714][ T5869] The buggy address belongs to the physical page:
[  371.627815][ T5869] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888113af5f80 pfn:0x113af4
[  371.631125][ T5869] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  371.634159][ T5869] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  371.636924][ T5869] page_type: f5(slab)
[  371.638364][ T5869] raw: 057ff00000000040 ffff888104bc2c80 dead000000000122 0000000000000000
[  371.641547][ T5869] raw: ffff888113af5f80 00000000800e000d 00000000f5000000 0000000000000000
[  371.644763][ T5869] head: 057ff00000000040 ffff888104bc2c80 dead000000000122 0000000000000000
[  371.647735][ T5869] head: ffff888113af5f80 00000000800e000d 00000000f5000000 0000000000000000
[  371.650898][ T5869] head: 057ff00000000002 ffffea00044ebd01 00000000ffffffff 00000000ffffffff
[  371.653982][ T5869] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  371.657186][ T5869] page dumped because: kasan: bad access detected
[  371.659424][ T5869] page_owner tracks the page as allocated
[  371.661581][ T5869] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8730, tgid 8729 (syz.2.811), ts 135681587786, free_ts 134342381610
[  371.668440][ T5869]  post_alloc_hook+0x240/0x2a0
[  371.670345][ T5869]  get_page_from_freelist+0x21e4/0x22c0
[  371.672491][ T5869]  __alloc_frozen_pages_noprof+0x181/0x370
[  371.674593][ T5869]  alloc_pages_mpol+0x232/0x4a0
[  371.676550][ T5869]  allocate_slab+0x8a/0x370
[  371.678176][ T5869]  ___slab_alloc+0xbeb/0x1410
[  371.680044][ T5869]  kmem_cache_alloc_noprof+0x283/0x3c0
[  371.682065][ T5869]  xfrm_state_alloc+0x24/0x2f0
[  371.683801][ T5869]  xfrm_add_sa+0x17d1/0x4070
[  371.685514][ T5869]  xfrm_user_rcv_msg+0x7a3/0xab0
[  371.687485][ T5869]  netlink_rcv_skb+0x208/0x470
[  371.689514][ T5869]  xfrm_netlink_rcv+0x79/0x90
[  371.691365][ T5869]  netlink_unicast+0x82f/0x9e0
[  371.693357][ T5869]  netlink_sendmsg+0x805/0xb30
[  371.695431][ T5869]  __sock_sendmsg+0x21c/0x270
[  371.697449][ T5869]  ____sys_sendmsg+0x505/0x830
[  371.699489][ T5869] page last free pid 8600 tgid 8599 stack trace:
[  371.702130][ T5869]  __free_frozen_pages+0xbc4/0xd30
[  371.704235][ T5869]  stack_depot_save_flags+0x436/0x860
[  371.706533][ T5869]  kasan_save_track+0x4f/0x80
[  371.708542][ T5869]  __kasan_kmalloc+0x93/0xb0
[  371.710505][ T5869]  __kmalloc_cache_noprof+0x230/0x3d0
[  371.712727][ T5869]  kobject_uevent_env+0x27c/0x8c0
[  371.714812][ T5869]  device_del+0x73a/0x8e0
[  371.716614][ T5869]  rdma_dev_exit_net+0x1e0/0x340
[  371.718776][ T5869]  ops_undo_list+0x49a/0x990
[  371.720747][ T5869]  setup_net+0x2d3/0x320
[  371.722597][ T5869]  copy_net_ns+0x31b/0x4d0
[  371.724528][ T5869]  create_new_namespaces+0x3f3/0x720
[  371.726827][ T5869]  copy_namespaces+0x438/0x4b0
[  371.728921][ T5869]  copy_process+0x1733/0x3c00
[  371.730979][ T5869]  kernel_clone+0x21e/0x840
[  371.732966][ T5869]  __x64_sys_clone+0x18b/0x1e0
[  371.734950][ T5869] 
[  371.735957][ T5869] Memory state around the buggy address:
[  371.738336][ T5869]  ffff888113af5100: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  371.741716][ T5869]  ffff888113af5180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  371.745125][ T5869] >ffff888113af5200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  371.748389][ T5869]                                   ^
[  371.750584][ T5869]  ffff888113af5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  371.753857][ T5869]  ffff888113af5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  371.757192][ T5869] ==================================================================
[  371.760563][ T5869] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  371.763369][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  371.766826][ T5869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  371.770822][ T5869] Workqueue: netns cleanup_net
[  371.772391][ T5869] Call Trace:
[  371.773625][ T5869]  <TASK>
[  371.774784][ T5869]  dump_stack_lvl+0x99/0x250
[  371.776550][ T5869]  ? __asan_memcpy+0x40/0x70
[  371.778082][ T5869]  ? __pfx_dump_stack_lvl+0x10/0x10
[  371.779764][ T5869]  ? __pfx__printk+0x10/0x10
[  371.781290][ T5869]  vpanic+0x281/0x750
[  371.782713][ T5869]  ? __pfx_vpanic+0x10/0x10
[  371.784439][ T5869]  ? irqentry_exit+0x74/0x90
[  371.785953][ T5869]  panic+0xb9/0xc0
[  371.787241][ T5869]  ? __pfx_panic+0x10/0x10
[  371.788780][ T5869]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  371.790963][ T5869]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  371.793331][ T5869]  ? __xfrm_state_delete+0x666/0xca0
[  371.795068][ T5869]  check_panic_on_warn+0x89/0xb0
[  371.796787][ T5869]  ? __xfrm_state_delete+0x666/0xca0
[  371.798575][ T5869]  end_report+0x78/0x160
[  371.800124][ T5869]  kasan_report+0x129/0x150
[  371.801974][ T5869]  ? __xfrm_state_delete+0x666/0xca0
[  371.803936][ T5869]  __xfrm_state_delete+0x666/0xca0
[  371.805775][ T5869]  __xfrm_state_delete+0x87b/0xca0
[  371.807780][ T5869]  xfrm_state_flush+0x45f/0x770
[  371.809733][ T5869]  xfrm6_tunnel_net_exit+0x3f/0x100
[  371.811743][ T5869]  ops_undo_list+0x49a/0x990
[  371.813423][ T5869]  ? __pfx_ops_undo_list+0x10/0x10
[  371.815133][ T5869]  ? do_raw_spin_unlock+0x4d/0x240
[  371.816983][ T5869]  cleanup_net+0x4c5/0x800
[  371.818808][ T5869]  ? __pfx_cleanup_net+0x10/0x10
[  371.820898][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  371.823090][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  371.825498][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  371.827805][ T5869]  process_scheduled_works+0xae1/0x17b0
[  371.829998][ T5869]  ? __pfx_process_scheduled_works+0x10/0x10
[  371.832420][ T5869]  worker_thread+0x8a0/0xda0
[  371.834174][ T5869]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  371.836194][ T5869]  ? __kthread_parkme+0x7b/0x200
[  371.838257][ T5869]  kthread+0x711/0x8a0
[  371.839970][ T5869]  ? __pfx_worker_thread+0x10/0x10
[  371.841958][ T5869]  ? __pfx_kthread+0x10/0x10
[  371.843562][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  371.845516][ T5869]  ? lockdep_hardirqs_on+0x9c/0x150
[  371.847538][ T5869]  ? __pfx_kthread+0x10/0x10
[  371.849356][ T5869]  ret_from_fork+0x3fc/0x770
[  371.851092][ T5869]  ? __pfx_ret_from_fork+0x10/0x10
[  371.852806][ T5869]  ? __switch_to_asm+0x39/0x70
[  371.854337][ T5869]  ? __switch_to_asm+0x33/0x70
[  371.856088][ T5869]  ? __pfx_kthread+0x10/0x10
[  371.857922][ T5869]  ret_from_fork_asm+0x1a/0x30
[  371.859662][ T5869]  </TASK>
[  371.861455][ T5869] Kernel Offset: disabled
[  371.862977][ T5869] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:29:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000408f010
R8 =ffff888106920237 R9 =1ffff11020d24046 R10=dffffc0000000000 R11=ffffffff854efa30
R12=dffffc0000000000 R13=ffffffff99af990e R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efaac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555652895c8 CR3=000000002af84000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2b97012e53
XMM06=0000000000000000 00007f2b97012e4d XMM07=0000000000000000 00007f2b97012e61
XMM08=0000000000000000 00007f2b97012ee7 XMM09=0000000000000000 00007f2b97012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff8fb74f20 RCX=ffffffff8fb74f24 RDX=ffffffff9033405c
RSI=ffffffff9033402c RDI=ffffffff8be332a0 RBP=dffffc0000000000 RSP=ffffc900071f7718
R8 =0000000000000009 R9 =ffffffff8172c195 R10=ffffc900071f7848 R11=fffff52000e3ef15
R12=ffffffff90334060 R13=ffffffff90334061 R14=ffffc900071f7848 R15=ffffffff8fb74f20
RIP=ffffffff8172c464 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555568d12500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00001ffffffffe80 CR3=000000002af84000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2b97012e53
XMM06=0000000000000000 00007f2b97012e4d XMM07=0000000000000000 00007f2b97012e61
XMM08=0000000000000000 00007f2b97012ee7 XMM09=0000000000000000 00007f2b97012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
