last executing test programs:

3m24.732778248s ago: executing program 0 (id=228):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x2010e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_bp={0x0, 0x5}, 0x14406, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00088900db5b6861589bcfe8875a060300000023000020000000000000000000ac1414aa3a"], 0xfdef)

3m24.731722127s ago: executing program 0 (id=229):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000024d200"/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x9, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0x7feb, 0x1080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x7, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x0)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x11, 0x2, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r10], 0x12)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
socket$nl_rdma(0x10, 0x3, 0x14)

3m24.423461014s ago: executing program 0 (id=232):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdd4, 0x5}, 0x11d547, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000069114a00000000008510000002000000850000000500000095000000000000009500a50500000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000010006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400120038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x41, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310)
r3 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640), 0x4) (async, rerun: 32)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x4e0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000000b010400000000000000000300000a0822624000000001080003400000000108000340000000015c7df748e6fb7f3a73a8c9670f0baab4e74541f3ee2e72290aac39f40d76ee0158852f71df0a78538169681c18df2cbbca06c86093bf3d3a49682ae7ccd15400be0a513eca088a"], 0x2c}, 0x1, 0x0, 0x0, 0x40020}, 0xabc172a60b72801)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040045}, 0x20000840)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800b00010065787468647200001c000280080007400000000a08000140000000010800064076010004140000001100010000000000000000000a00000a"], 0x84}, 0x1, 0x0, 0x0, 0x8c1}, 0x48004) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff00, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82420, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x10, 0x0, 0x9, 0x2612, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x1}, 0x5c0d, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff}) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, 0x0) (async)
ioctl$TUNATTACHFILTER(r6, 0x401054d5, 0x0)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) (async, rerun: 64)
socketpair(0x28, 0x1, 0x28, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m24.01796024s ago: executing program 0 (id=234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, 0x9, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xebf4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xaa6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20005}, 0x4000894)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x68, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x14}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x810)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000d0601040000000000000000010000090d000300686173683a6d616300000000120003006269746d61703a69702c6d6163000000050001"], 0x48}, 0x1, 0x0, 0x0, 0x4000045}, 0x80)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000380)=0xfffffffffffffffd)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x90}, 0x1, 0x7}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYRES16=r1], 0x98}}, 0x4048010)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0f0400000000000000000a00fffd0900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000808000140000000010900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

3m23.620935262s ago: executing program 0 (id=238):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
r0 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000300)='cgroup\x00'}, 0x17)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000084000000040000000400000064000000", @ANYRES32, @ANYBLOB="000000000000000000000000eeffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000000000800000000006000000000000000000000000000000ac1e0001000000000000000000000000fc01000000000000000000000000000105000500000000000a00000000000000fc0000000000000000000000000000000000000000000000070019"], 0xd8}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a800160020000140", 0x38}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc34101b79a19ef61293", 0xa0}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))

3m23.118623037s ago: executing program 0 (id=245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x3800000000000000, 0x4064450}, 0x0)

3m23.055241487s ago: executing program 32 (id=245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x3800000000000000, 0x4064450}, 0x0)

2.256801496s ago: executing program 3 (id=2512):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160400000000000000000000c008934382c9c442b324b67fbdc2935a70838d89fc5d6ba4fec4dbfd766ba4aed0b20f75cb9dd5710500904a27dc77d8452de3d0590bd0eb97e08872d221845e5281e9875ff674800b52a81548b1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRES8=<r1=>r0], 0x0, 0x34}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0x101}, 0x15974, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0x101}, 0x15974, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) (async)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4)
sendmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20000800)
recvmsg$unix(r4, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2102)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="ef9c499905bb6a21b9cdfea242dce4cee6909a049298703d4a51a303db37e93e6db15aba7568d057238146f557123a979c9e3d63b5ddab44bf37f4d19204a4cbcd5882612d58b8ab116f4412996d8ba24d04756f335fd22c38f87b88218721d4f2087ddd9817a7b8b4a2d8473bc3e872065545e59d021deabd87d9db4fb8bd8eeae050eb3cd18a0f72a62b2f5b08bc72cda51450a67e971391aef3814fc8c25a1e5c4ebdf66f1f5cca8e63e41b2d303accb2f3ff0ef7075ec018d2066fb867c0067b9896d3d209c4f8cf4c47a4fd4f8426283468cd2cdf0171d11e984fb103a705808318ac9e0af97318eedb72b62a378f92c5ea3c4903b1d2fb9347069db5d37f30f90f933c6839d7c37021c4a19695efe60bd2c6c257dd2b03253828df7f1a33863b59f96d3b0f8e4ea03a356d62e72e3751bf7c4b63fd6a754ed859693fb300ab83a18f81d5a925c42987cf8a594b8276829691974c3b4e4e5a188a413ec313d7f113a0873feb7bf0778266387068bbf7d8f4a31dcc6aaaaee50eda6887a20e6f4817179f0ab12d3f509e1d03dd740ea7a2e445ad5517986e0496d359cc976f4310b9fe7730a7f65d4cc8f355c853a44539c5963c9c022d249933cfb30eb8ad9ed4785d6178f0e51f0e47867b0b0fd64e2d55a27bf93221677661bc18dad65f713fd56fe075703045ea1e69b4409ee9f1cf5713756652939f1e3b3745fc7ba3293e6c9a36f1f0366c3f4d861eb19c812259fbf8e57807600da855619a24e7a5fb80f75214f2b43e53b1366b7b6489b0b16a97f3abb20d22005e79aba5634d305840db2723b594d3b3582a088d36117d42e464c62d6b323a48757c50debb48e8cc108751fbb906084df19cf56e102554addc84ac11c5893d1ff353ba4f76de1a16b24e5d7475efebf0a33c2114ff23404cd2fef5c3e3c9e82210e3a3c2ceaacd9009cf3cfe596686dd809d035ffc1a9ce5b24419d0a4699f72e66d50152aba5c2222d2dd3df451a5066bd5f7b825150ef384717b7a4c3578bffa5e004409f6ef273a6a262c8b6bd84d96d169788aa87b74c1e65407f4071f23c73ae72b0f5efb37aec6c632d231e1f7833a696880c82d97294d63a195b1080972ae06eedeb8171ab92ccd02a970d7ac554d52b11f4b10d9634d23311563865cec01e86f226a0a34ca1735fda5262511dbd030d6dcf3dff6437c242ad5879066fa5fc8be60b542775177a02f6643f5ab6a3a1de774ab2ff49fd649a9d8e4092e851a7b748844ab8f07d5f1e72054d8dd5a28c01c37a5166bd62f9ac172df6539c9fca561c700cec3ed627fcb6c098e11a9e06dfc0e51214f279a678939a7b5e0f60adf42230ff18ef952cb58bc1f5a17f44ca6c07de5b23517c6efa9a79eff8a14453d7e5a3484570a9b11862c7a74c85e1861ddb8189d920b80177b4424dadce36a2b3610faeb8c2ebf5e85afea646becba8fb07eb4a335fd44026335ff557b2b53ed77202e66020f87afdb927bd01750f92912fdb507446f5ba7c634cbd84d0d11652d877fbd4fafd32e99a246a9717b55b5280d0c5bda8bdd8d9c5039c5434d13162c51801d1d62ddb3151b0bf4cfb4817d795ae2d89b724a5c1937c6509e00cbd442cf19a6afecf1eb3b5d1738bb65f195e0fe38f61626fa81a4f44354365606cd246967fd5646fd524f564693be64d189dc724443b327b48febfda752038dfabe2844f71e32d67895208f42f4a77deb79f06877bccd13a56391e2f93f4d6aaf9c1c9f98fb6583753b6499938ea3c7355a3da29a805655ff5ef550149c85ac01da308885a8a762477e71e1cb015b79e7c92750acdf9dd1479002ef4f5c4ad93dd0b96bdad7c607da81f6b5db05c050220b138c2f21eb748b02fb110b3acb75503d3308eddc41ae958833320d186e1f7789efd503f47e3503db22a1c16a70ab6281c586094309a052105fcd3130487eb67b96f47f17466ac57f48c62415677dbb6f5c3272fd91c73f4d058a0e73a6eb537df48ddff30afd0f23019ee47425bc4d61b84b086dc02e5cf726ca1a55300787dcaa17495e40d36b2728d7e6ad8e1d2c90ea91b4bc942ac8e4f62ef352bd3dabe232d374ebbd081f216e0599717ac1f95f01341306c4a3058d84e5bad799762bcbd3c2b503d1941e37ad44fecd58a06c96223d715e6eb8d5cacbfede2646651afde882aad4d041c9d0b71897acf8655929ed36423bd8f09da04d22496751977ffd4e9f1d0fef8df7842995b56519058da1664711862b8685112e7586d498e4d72ef54ba67fe7c1c611cc570ce9fbd94aad99eac190233e93898a0d052d572b3b130079293e414ea3b6465e22ad5b9c6b2d9cc55b8126cd19a112c3973b6560a7ce6d1139b66ced6f0682d1625b81b7508104734a2ea2dd2ba9c5484856ef7b72756fc4a6e2f99dbbf9485f8f5ea3431eb32e2a3566c01e87804334cbb661109ba6eacd6a502edf87e11bbd7f91538912eeb14c7a24d7aff45a7f863d54d66c57da5d3a2a2a2dbe24a981c83af12ea0434f353bbf0c4acfe66e8ef4d8bd312a294909678024862348c0c87251e2b340244342dfa1dcaa48d7ea5ff90d3e29e3df499164f30f4e7e542e82476196d200339c9de69b829365c85b1ebc24582c4f60ca4401c868dc2be57a6142110c809abf08b67af44de22e4037f297596763e2a272fe46c95e616bcf9678da6a500694fbf47eda51f0451cd09a6b2163e3fd7ea87fbacbe646f6b2cf15b31dfe63b1b69edbd65bed7b650275a2388fe9d17bf84140570868c964a6b94e4a86b3b90252fc37fb7808b0834bae1ac67990d8dc59bfb5a8ae417bd1869dd047674932331d80f7d85ccafb176e2c8d6c2931257ca606067c903f8421e7d2f5f964fa621123cd102566a7ea588ab54b749c1e6af9b57dee677e9900e0b6f70f4575a166da5eba14dbbe23154f4e073fefbbc50e1f5f225716b6cb5ee5c96a46eff96a88002242e17da56bb7b3540bd9143d1efb0cfdcc075f53e96d16b29c76a01d897cf899e68208b55f3720b1f6b179406857719a97a78b614fc58eabfef7508a4351cdbd0c90a94082a24ffe0b1cb8c141bce7869249939cea407d3ca1f92f21877de98a200ec7cb5111cd7bc3fd8a39f1974789e493277ddbd43d2c1342f94579e4aac6a6db2a18988b08f82f435b50b30be43d65fcb125b64afe2602f478e926ec7448875b7a03306849eb28af93dfa2af92dbebed09111337e88775ae5ece85b2ddcd270b7ac6bfe2624d90973d42bae9dd84983cd4cb48a0881383fdab03fac1ad1769ab189ce55a1e67363a43102b03777605a4e1450e51f5d73022fc6e4c1898324dd4a391daa20ed924eacc2d4e40f457fca01ba8d09976d7fd8da14e2f4d9b504d01431e5f343cfd202a6a78dabba622e2efe988d9e65a6972be24cb221c9896ddda872c3df90d66965ef15ec86d35ac069ef59c4fd121a32d8e64195813bd1b2330302e1e7da54698bfb65479b3cd495564108f332d3db3f625409b46723106929b0e1ccabd037d6406da53acddc74d38a422f476faf6d78ea71dc5a0ba9fe032e3d70315fc67cec16e16dccc246a1dc74226604a261a1900dbcd9243546631b6c249f68d793a5e29ae3e479f00aa1f0d7e13e29023881b9bda1ef0fbbd3cdabb93b4dd7cccec362e4a773bdcd61a6ccd115a5a18b6e1bc377ea28d425f20f76ddd01ab4026c021649c4c2d94c9be9e39c964e316fc8ae0cf1e4ec6905f64c2672106c39228242c237129bfb82802183fb480dd1f3fea330d65a00bdfb51a6036beae0c9e283461a96179e9da427cbbedf491538b23c378ac86585ce6c890778d8443605403252c7c42cb82156411892382831a9b352f42bd39dc3fd0724db3cb5d1970c654df33647065a9f3b70dc9ae1dfc5de159690274b4911ea57a9ad3dde1e4a496c6f902f446685f828841322ac680c143923908c8f18f9d5ab6af8a2b8e0d787218a2de168a15be298bdd4bc4dd3f24cbcaa54ea023f3b72c4ac650fb3896ac6e981cb85ff62ad2fbdffaa1d76db96b277af2ee2ba7349e27511ea2c847158bc261a1096ccb5e443cd53a0ce577ef14e229ad35d0c36bd1e07296e6a9b39023c578491a780d6009b06de3fcfe3ced4f641a3ca729ce75248166406cc4575165383ea7216e5076cb0e562b1f051703bd5e93ff6584a6d0c6027274ca8f91866cf699fce86278b3a69ddb208d18a92c13facadb22ba1e90fad0b0b55e8b67a1e24ed833506d27b1b6fb779430a3b5e6f25620be51f2893b88c58b4eeaa436493a57eebfff616613598bda26a171d27e3475b86927905860c0723fa464635af49e3fe9d9d2c77e45085127ff04ef3c1d41a6afcb980457265b305b926fe6d3f90ae1cf470a547b76a095f397fff51d2c0da76470aa607dbccb8c9bc02c85ae71ce678e49b45c418301c2926ee6e4eea75fb1dd7aa2e5395da299a206f1ce2e6e7c8e1c88d7e40f0b0bd18b91a465bd9621474e94e4f596fe5bc6ec489f90b219691b51516af2a10952fb9cd30d7d1fb1691b19fadea010ddb92a2f4e99fd06c344e41eb56402d0d4658fc110ad94f4749c68807acc06b03f4405019d87ae1f6dbe3c1ef6fe94e4de4923d3c9f4130b44c122390c40b50d33906b15d8cbee51c1851b8a8267b36c7215ca42463bdf358ad55d1a676b86b9c2fa221b52b425b533d3379ae4e5695bdb752583c8c7e7e67490d46f2b960ba3be157a9edacb6208ace49685e330086a0019133d25418de331db634bd1bcbfe6991c1a2fc775e1d9c1c3d3a06765f1c8dc3e54ceceeaf30570b461a19711a5ebdedeb7721d9a74f2661a7854bb912cfbf8872d76edcbcf0e533a46336a29fad7c7385598db8cdcfb6a05b96307f3db2068fa3bc18e1f0d491e41e40e407d11264031a31a3e9b5493aa74cbbd2366aaff551a8f653c3310ed1ba66e915486286da1b4d725a7ba6124173a15b19af3d966baf0b2e9fd9bc39c6fd1d978c620cc0a085fb0633f8e4c65707cffca5b7a912cd842e79635dde2f10f20181bf0060d833275873e0cd6cd66a1806f5a02c9e43a5f60d542a86a5d51c92e9d12bd9f04fa56ab26dbe2542e89c9c36908bf99bebc5ab98d0fce7d8049fb020555d6d5b944f2c5a56228c978d61e88ca234b3322d23f25f641d038485f0d377b3dc8f7bd51894f7df8323145e7a4af9e3a735e8feaf42f05b6760cd692340cc944ecc0e8535729e3bfe6d49fc91834098e3ebfa471785c2bed98d1aa090911692a0e677097ebf595fbee13ce7e1886d02dc29dbe952703c31200238afcf35c51455f08a007a1eebc96560a627e69a9c3f66938953378733f69c90c77f7465f89a9968f89d7c280dcfa898e4edd068b232be3b9c2d55c03fb8470bcadfece8c95faa8fb8b6ee50372353032e4a636f33fcd80f2d6e1e8c13698eba0ca41020900e927097a237e656173ca578aca10054c94105284e244797eefd0f65f734aecfc754974a6f24dc6cf65dabdcf42ce168d87bd89422c5abc07eb9d08fe02ac7ca3318ed1ece5cc624148f5f6ed7b3345d16023315399c6afd346c01a18b978791ecad17e024d006fcee081d9148376cb91ad74f52ae86c6b67080173b8d0a47c7fdb4afda53d8d938cf26379aa6ccddcb2d18fff304dd63fc364e6e1193e337927673f67899d73df75e0ac7415f0166bb00dd68c04988fcf65aa622519b5b8b0dd2d1f63105c6cce0c1bf6a608e1fcffc2909c71aff2d1fe426b1a96d76d1eeb9963a8f5df0207ff1d3a20c5505772994a", @ANYBLOB="fbe0897468ae69401fff4ca4849354a85f7896bfe7de524cc5e17c17bb9add00703414304f5f0f8ef4f99cea7e13b5dd5c8c41f5ddbe7e1d5bd0ef49b657efdaa07f35355c0442bdafde62e6327d8ecb0d74a1", @ANYRES8=r1, @ANYRES8=r3, @ANYBLOB="d7a6fa730c4c45a2a4eab35347b7a9d0578f00272caa45ed8bb59a", @ANYRESOCT=0x0, @ANYRES8=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r8], 0xc4}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080))

2.019155925s ago: executing program 1 (id=2518):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x4d}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400c0b80c6b6e9df9131e7d354a5eb300000324000480200001800b000100dd85f57a400a13b2898e6c6f6f6b75700000100002800900010073797a30000000000900010073797a30000000000900020069797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x4, 0x2, 0x0, 0xede, 0x100, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, @perf_config_ext={0x10001, 0x6}, 0x10ea, 0xffffffffffff7fff, 0x2, 0x7, 0x10000, 0x400, 0x8, 0x0, 0x7})
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, r1, 0x26, 0x0, @void}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800110000000000000000000000ca6c9500000000000000ffdb360734076d08000d0ba8897489c522ba66c5439753d3e0c9b47bef3c2879fc55ce1649fcc6cff6b7eddc1ae3947efadabc0399ee4099902841e1c394783c541a69c0b2af1dcd8598b5c388992876d8e7858aed8e2f5308e47d9b93e38f092f022e25a098b85645ea1b65d5b5e38355cb7d53cb83ed9d6bc2756c81b8692e12b1b572660c0d83d23e57f5ffa19bad8b1feca88786116725e92d6d6e399a37a38899d361337c02c04a0dbda849dc41b918a60e7830677446f3280e"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000004c0)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r8 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000001340)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000002540)}, 0x0)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r9, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x3, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102}}}], 0x20}, 0x0)
sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

1.820707603s ago: executing program 2 (id=2522):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x100e64, 0xc75, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000010000003f000000400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r2, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRES16=r0, @ANYBLOB="da30e07657bf64dfc742d1fec6d6512bbc181e463dc0293f4be496af2f9f780a489d7b21d7c3432202a5d2f6223ab5247d7fe1bfe87389a4edefe642eb38f98155eaf13405b7406b028c145ff96de3c7b502dc02be517d6c5bb76f2bee"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r6, 0xc040ff0b, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x4010}, 0x18)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r12, &(0x7f0000000c80)="d470550b8e9114de4485679368eea7d47d5462d9b68a30b570ca00bcaf897d71f5d95f82b1b5271551aece8b98d3809c2bfa30036bc1c0de1465dce4f64ef526e9b5bee4e3b18a2e856fad7fd9a51a38e90c6adc86ea1bc05254e0ad5e8d123f36bf2be30df8368137fa9112a4425144a71895983dd1b24e5f5d7173e1b8", &(0x7f0000000300)=@udp=r6, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000e80)=ANY=[@ANYBLOB="18010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000182b0000", @ANYRES32, @ANYRESHEX=r12], &(0x7f0000000840)='GPL\x00', 0x2, 0x42, &(0x7f0000000880)=""/66, 0x41100, 0x10, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000000900)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[r7, r8, 0xffffffffffffffff, r9, r12], &(0x7f0000000ac0)=[{0x0, 0x5, 0x2000c, 0x6}, {0x3, 0x4, 0x7, 0xb}, {0x1, 0x1, 0xd, 0x1}, {0x1, 0x3, 0x8, 0xc}], 0x10, 0x5}, 0x94)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r13, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000009ebd000000070000009500000000007a4dc873d221e27c443c5c44b779bde97ee7b8636ebfe8b55a30771279048a06ea89fbd94ad62c77c5eaee5d58cd94a659d242864b8aec01b52ffa57957f283f27200e69ddf036308481dad73aa63c3f34f0b51ff17b50b9c938db7fcb22ba69d109276458294775f0a49209624e5bd4edba09e0f5ffee9c5aebd3ef2a67b32e17104bda621c38b40c8aed72cfcf26deae72012898a600c1ac619b40eae3b2ea6a6ffee5b809"], &(0x7f0000000240)='GPL\x00', 0x83b3, 0x0, 0x0, 0x0, 0x40, '\x00', r14, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000afa31ba1ffdf97d4cf426030de94d1dccff0644960e0dd3d04dd13a7e85b11b8326e038aedbe00f6d906a3006227842377de154671e377825d87a0069dcaf64325cdad23c5a52e5fd26c5dcb87c8be7e9a376e06573425fcefa822848c60add11c"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1e00000005000000fbffffff0300000000000100", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r14, @ANYRES32, @ANYBLOB="0000000004000000010000000300"/24, @ANYRES32=r4, @ANYBLOB="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"], 0x50)
r15 = socket$unix(0x1, 0x1, 0x0)
recvmsg$unix(r15, &(0x7f0000000600)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/205, 0xcd}, {&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000001000)=""/150, 0x96}, {&(0x7f0000000440)=""/249, 0xf9}], 0x6, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10023)

1.350876065s ago: executing program 3 (id=2523):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8912, &(0x7f0000000040)={'veth0_to_batadv\x00', @remote})
r2 = socket(0x1e, 0xa, 0x4)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001040)={r1, r3, 0x0, 0x0, @void}, 0x10)
sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20202200}, 0xc, &(0x7f0000001640)={0x0}}, 0x4c041)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001900eb054e81f783db4cb9040a1d080006007c09e8f655a10a0015000600142603600e1208001e00060004012800090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
close(r4)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000700)="000000c9000000000000009418a2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000001280)='GPL\x00', <r7=>0x0}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@map, 0xffffffffffffffff, 0x2e, 0x20, 0x0, @void, @void, @void, @value=r7}, 0x20)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000700110000000a600e41b0000900ac00060411000000160005000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x22c0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={&(0x7f0000001080), 0x5}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0xa)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8=r10], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
setsockopt$sock_attach_bpf(r0, 0x29, 0x11, 0x0, 0x0)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r11, &(0x7f0000001700)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c0000007b006bcd9e3fe3dc4e48aa31086b8703130000001f034102fc1fc0d0cf000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x48080)

1.25859251s ago: executing program 3 (id=2524):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x7]}}]}, 0x158}}, 0x24000058)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}})
sendmsg$AUDIT_USER(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x130}}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}}}]}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x1410, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

1.210716937s ago: executing program 3 (id=2525):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x8, 0x3}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x88, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x850b6c960d9c9e2b, 0xffffff00, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x1, 0x3, 0x7}, 0x3, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x100000000000000)

1.210143294s ago: executing program 3 (id=2526):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0x1000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) (async)
socket$kcm(0xa, 0x3, 0x73) (async, rerun: 64)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}) (rerun: 64)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10) (async)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0x6}]}, {0x0, [0x5f, 0x51, 0x2e]}}, &(0x7f00000004c0)=""/141, 0x29, 0x8d, 0x0, 0x0, 0x10000}, 0x28) (async, rerun: 32)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)='%pB    \x00'}, 0x20) (async, rerun: 32)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x10}, 0x18) (async)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000000000000000"], 0x50) (async, rerun: 64)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 64)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="58010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000800000000000200050000000000000000000000000200000000000000000000000200000dcd000000000000001c00170000000000fdffffff2abd7000000000002cbd7000000000004c0014"], 0x158}}, 0x800) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, <r14=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, <r15=>0xffffffffffffffff}, 0x4)
r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000300"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x13, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000000)='GPL\x00', 0xc, 0xc6, &(0x7f00000002c0)=""/198, 0x41100, 0xd, '\x00', r7, 0x25, r8, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x2b9a48d0, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a40)=[0xffffffffffffffff, r9, r10, r11, r13, r14, r15, 0x1, r16], &(0x7f0000000a80)=[{0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0x4, 0x3}, {0x1, 0x3, 0xf, 0x6}, {0x4, 0x1, 0x7, 0x1}], 0x10, 0x2}, 0x94) (rerun: 32)

1.065366354s ago: executing program 1 (id=2527):
socket$kcm(0x2, 0x922000000001, 0x106) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4) (async)
r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x9, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x101809, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x24004800) (async, rerun: 32)
recvmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x37, &(0x7f00000006c0)}, 0x2040) (rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x9a) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
setsockopt$sock_attach_bpf(r2, 0x6, 0x11, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x7}, 0x8014)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/296], 0x128}}, 0x4044000) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, 0x0}, 0x20) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000001200)=ANY=[@ANYRESOCT=r9], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r9}, 0x94)

837.364686ms ago: executing program 1 (id=2528):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
close(r0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20)
socket$kcm(0x2a, 0x2, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900001304000000e746c60a0094ad7100000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff86)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))

833.445759ms ago: executing program 2 (id=2529):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@gettaction={0x1c8, 0x32, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4983}}]}, @action_gd=@TCA_ACT_TAB={0xa4, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20c}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20040800}, 0x4080)
r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0xb, 0x5, 0x4, 0x3, 0x0, 0x1e2e, 0x203, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xbc5b, 0x0, @perf_config_ext={0x786580000, 0x4}, 0x4000, 0x47, 0x2, 0x5, 0x8001, 0x5, 0x10, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='police\x00') (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='ipt\x00')
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_type(r2, &(0x7f0000000400), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000440), 0x9) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x74e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2d}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x894}, 0x4000040)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x140f, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x240040d0) (async)
sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x453, 0x200, 0x70bd29, 0x25dfdbfc, "9c82cc1b54ca1f96419b5c40f60e514c", ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x2c008084) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x8, 0x4, 0xd66a, 0x40000, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x4, 0x100, 0x4, 0x1}, 0x50)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000008c0)=r4, 0x4)
socket$kcm(0x29, 0x2, 0x0) (async)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000900)=0x10000) (async)
recvmsg$can_j1939(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/195, 0xc3}], 0x1, &(0x7f0000000a80)}, 0x2100) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@cgroup=<r6=>r5, 0x1f, 0x0, 0x4, &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0]}, 0x40) (async)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbfc, {0x1, 0x58dfffde1f33df9e, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000085}, 0x20048008) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
r7 = socket$caif_stream(0x25, 0x1, 0x3)
recvmsg(r7, &(0x7f00000024c0)={&(0x7f0000000d80)=@nl=@proc, 0x80, &(0x7f0000002380)=[{&(0x7f0000000e00)=""/173, 0xad}, {&(0x7f0000000ec0)=""/100, 0x64}, {&(0x7f0000000f40)=""/204, 0xcc}, {&(0x7f0000001040)=""/29, 0x1d}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/68, 0x44}, {&(0x7f0000002100)=""/6, 0x6}, {&(0x7f0000002140)=""/123, 0x7b}, {&(0x7f00000021c0)=""/243, 0xf3}, {&(0x7f00000022c0)=""/134, 0x86}], 0xa, &(0x7f0000002440)=""/121, 0x79}, 0x1) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000029c0)={r2, 0xe0, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000002740)=[0x0], &(0x7f0000002780)=[0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f00000027c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002800), &(0x7f0000002840), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000002880)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x1e, 0x17, &(0x7f0000002500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x9, 0x4, 0x2, 0x9, 0x8}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000025c0)='syzkaller\x00', 0x5, 0xd5, &(0x7f0000002600)=""/213, 0x40f00, 0x28, '\x00', r8, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000002a00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002a40)={0x2, 0x10, 0x401, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2, 0xa, &(0x7f0000002a80)=[r4], &(0x7f0000002ac0)=[{0x4, 0x4, 0x5, 0x8}, {0x5, 0x5, 0xd, 0x2}, {0x0, 0x2, 0x9, 0x1}, {0x0, 0x1, 0x5}, {0x2, 0x3, 0x4, 0x3}, {0x1, 0x3, 0x5, 0xc}, {0x4, 0x1, 0xc, 0xa}, {0x5, 0x3, 0x5, 0xb}, {0x3, 0x3, 0xc, 0xb}, {0x2, 0x3, 0xc, 0x4}], 0x10, 0x4}, 0x94) (async)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000002c40)={r2}, 0x8)
openat$cgroup_ro(r9, &(0x7f0000002c80)='pids.events\x00', 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000002cc0)=@base={0x3, 0x1, 0x4, 0xffe000, 0x2414, r2, 0x1, '\x00', r8, r9, 0x4}, 0x50) (async)
sendmsg$nl_netfilter(r9, &(0x7f0000002f40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002f00)={&(0x7f0000002d80)={0x16c, 0xe, 0x8, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x3}, [@typed={0xc, 0x91, 0x0, 0x0, @u64=0x1}, @generic="27728b8961529af1f58b917e45cf213ef0e04b749428a745097482280f65424a5107ee2ef281ed1411fb51883acada71e980435d9144dda7c036ca9dc40233fdca6bbbefb61831164da3b7426769b82d239c55ff24b9", @typed={0x46, 0x10b, 0x0, 0x0, @binary="59042076dacd5a9a713e557b27122564b8fe083048c58faf89d03a90f46f789fad85611a76783a5bb682f5bdf916066fd11ce1c43b2385b249405a6619c10fb60ae6"}, @typed={0x5, 0x77, 0x0, 0x0, @str='\x00'}, @generic="55953c255c1dc105e0972887376d7228844cb6fe5b2d24cca770b5ba5a0652ff983ec2a4f36341b1e16ccbff375f267da5225d0794fc347f14fa73ad89e0908648e9cecd794cc35a7b326764ccb2062988f6024e018164bb024ef0c924222838afb8b099125a2e93e354ad76258740248e219162ea8f4ab9295f88c571f6d04a5ba842ef1fe07f5bbeff433551f1928b27f5bda22d1a4a0a4486d08b089f9c432e12609c01"]}, 0x16c}, 0x1, 0x0, 0x0, 0x404c003}, 0x20048040)
openat$cgroup_ro(r6, &(0x7f0000002f80)='blkio.bfq.io_queued\x00', 0x0, 0x0)

215.52584ms ago: executing program 2 (id=2530):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x20, 0x2b, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001280)={@map=<r3=>0xffffffffffffffff, 0x7, 0x0, 0x9, &(0x7f0000001140)=[0x0], 0x1, 0x0, &(0x7f00000011c0)=[0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0], <r4=>0x0}, 0x40) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x2, 0x5, 0x84) (async)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16}, 0x94) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) (async)
socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000012c0)={@map=r5, r2, 0x2c, 0x10, r0, @void, @value=r7, @void, @void, r4}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={r7, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001340)=[0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000001400)=[{}], 0x8, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0xf0, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x12, 0x31ff, 0x6, 0x7, 0x400, r3, 0xc7b, '\x00', r8, r7, 0x4, 0x0, 0x2}, 0x50) (async)
fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$TUNSETGROUP(r7, 0x400454ce, r9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000711203000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

215.168284ms ago: executing program 3 (id=2531):
r0 = socket$kcm(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x806}}], 0x18}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x806}}], 0x18}, 0x0)

149.522605ms ago: executing program 2 (id=2532):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000e00), 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x18, 0x3, 0x401, 0x1, 0x4403, r1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800)

149.201949ms ago: executing program 2 (id=2533):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xe0, 0x4, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xbd, 0xc, "20d9772aecd7dce347252296b7e11fc1c0a755034033768ce882cf763861e758ab84626203bae95a04b7d892b715feb27cfdac76b2d67a81563fc4d293c1dab944dd455170a0c224abb5bd1a68ca5916bc8630403469f41362d8f7a6c7e467225f4ee7320250c51a71771714d07b664de1bfb99885af4891df8a31a94fd3448e18df51e74712721ddfa5d02f2b1a690a239e2b24b6d5eda9421f28fa9b39097ecef2b50c54b8f8f1945e512290a735ff2e24ea1329853f80c9"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x4008000)

89.587328ms ago: executing program 2 (id=2534):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140080310000a0446e3988239fcdcca99181e247c9101955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a209f27fff3429b367bfd5", 0x89}], 0x1}, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, <r2=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@cgroup=r0, r0, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r2}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x10}, 0xc)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0xb, &(0x7f0000000c00)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x63, &(0x7f00000005c0)=""/99, 0x41100, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0xe7ca, 0x3d}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000006c0)=[{0x0, 0x2, 0xd}, {0x5, 0x1, 0x7, 0x8}, {0x4, 0x5, 0x7, 0x7}, {0x0, 0x5, 0xb, 0xb}, {0x2, 0x2, 0xf, 0x90dce4833f2c6f5d}, {0x5, 0x4, 0xa, 0xc}, {0x0, 0x1, 0x8, 0x1}, {0x5, 0x3, 0x0, 0x8}], 0x10, 0xfffffff8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r8, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', r10, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
r12 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff})
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000005000080850000007d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r14}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x50)
r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x45)
recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r16=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r12, 0x84, 0x6e, &(0x7f0000000000)=r16, 0xe0)
ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f00000004c0)={'geneve1\x00', 0x4000})
r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x2, 0x6, 0xe, 0x78100, 0xffffffffffffffff, 0xe69, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x9}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xea14, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x6d48c3e9e42a0ef5}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xd4, &(0x7f00000003c0)=""/212, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x6a3c, 0x1}, 0x10, 0x2a2fd, r9, 0x2, &(0x7f0000000900)=[r11, r16, 0x1, r17], &(0x7f0000000940)=[{0x3, 0x3, 0xd, 0x5}, {0x1, 0x4, 0xf, 0x8}], 0x10, 0x7fff}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000000000000500000008000b40000000002c0004802800018008000100667764001c00028008e902400000000d080001400000000008000340000000020900010073797a3000000000140000001100010000000000000000000000000a0000000000000000"], 0xc8}}, 0x0)

52.452755ms ago: executing program 1 (id=2535):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x555)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080008400000009c08000640d5fffff905000100060000000900020073797a3200000000050004000000000011000300686173683a69702c6d61726b000000000500050002000000"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0)

419.797µs ago: executing program 1 (id=2536):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) (async)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb}, 0x94) (async)

0s ago: executing program 1 (id=2537):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r2, &(0x7f0000000140), 0x12)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000340)={'vlan1\x00', @random="26bd0148c555"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xa}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5feb}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x28000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0xb, 0x2cdc3e57283e5772, 0x9, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e0000000040a01030000fb0000000000010000080900030073797a3100000000bd000c0020d9772aecd7dce347252296b7e11f768ce882cf763861e758ab84626203bae95a04b7d892b715feb27cfdf1e5b2d67a81563fc4d293c1dab944dd45518f331cc7249c7cd012d73e70a0c224abb5bd1a68ca5916bc8630403469f41362d8f7a6c7e467225f4ee7320250c51a71771714d07b664de1bfb99885af4891df8a31a94fd3448e18df51e74712721ddfa5d02f2b1a690a239e2b24b6d5eda9421f28fa9b39097ecef2b50c54b8f8f1945e512290a735ff2e"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x4008000)

kernel console output (not intermixed with test programs):

] type 2 family 0 port 6081 - 0
[   57.574466][ T5847] Bluetooth: hci1: command tx timeout
[   57.577328][ T5847] Bluetooth: hci2: command tx timeout
[   57.609057][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.615087][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.669265][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.672169][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.693967][ T5850] veth0_vlan: entered promiscuous mode
[   57.714551][ T5843] veth0_vlan: entered promiscuous mode
[   57.720320][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.721124][ T5850] veth1_vlan: entered promiscuous mode
[   57.726367][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.730288][ T5843] veth1_vlan: entered promiscuous mode
[   57.760274][ T5850] veth0_macvtap: entered promiscuous mode
[   57.770139][ T5850] veth1_macvtap: entered promiscuous mode
[   57.791921][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.800715][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.804088][ T5843] veth0_macvtap: entered promiscuous mode
[   57.811079][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.812453][ T5714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.826946][ T5714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.845546][ T5843] veth1_macvtap: entered promiscuous mode
[   57.852351][ T5714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.869564][ T5714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.877415][ T5909] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.903588][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.911265][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.923786][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.927462][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.940743][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.945089][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.951628][ T3634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.956273][ T3634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.000585][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.012786][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.054868][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.057912][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.105361][ T5917] netlink: 'syz.2.3': attribute type 21 has an invalid length.
[   58.120215][  T577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.125468][  T577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.234390][ T5927] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6'.
[   58.294148][    C0] Illegal XDP return value 16128 on prog  (id 2) dev hsr_slave_1, expect packet loss!
[   58.332374][    C1] hrtimer: interrupt took 23651 ns
[   58.390564][ T5936] netlink: 'syz.2.10': attribute type 29 has an invalid length.
[   58.405522][ T5936] netlink: 'syz.2.10': attribute type 29 has an invalid length.
[   58.743737][ T5956] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   58.752337][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.797209][ T5956] netlink: 'syz.2.16': attribute type 10 has an invalid length.
[   58.806885][ T5956] 8021q: adding VLAN 0 to HW filter on device team0
[   58.816019][ T5956] bond0: (slave team0): Enslaving as an active interface with an up link
[   58.951650][ T5962] netlink: 'syz.2.19': attribute type 21 has an invalid length.
[   58.956753][ T5962] netlink: 'syz.2.19': attribute type 5 has an invalid length.
[   59.090108][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'.
[   59.519359][ T5968] syzkaller0: entered promiscuous mode
[   59.521728][ T5968] syzkaller0: entered allmulticast mode
[   59.572803][ T5847] Bluetooth: hci0: command tx timeout
[   59.656062][ T5847] Bluetooth: hci1: command tx timeout
[   59.664792][ T5847] Bluetooth: hci2: command tx timeout
[   59.689944][ T5977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.883436][ T5988] Zero length message leads to an empty skb
[   60.141947][ T5996] netlink: 'syz.1.29': attribute type 10 has an invalid length.
[   61.152617][ T6012] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   61.163640][ T6012] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   61.274560][ T6022] netlink: 'syz.2.38': attribute type 7 has an invalid length.
[   61.388566][ T6027] syzkaller0: entered promiscuous mode
[   61.391243][ T6027] syzkaller0: entered allmulticast mode
[   61.421189][ T6031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.663076][ T5847] Bluetooth: hci0: command tx timeout
[   61.732813][ T5847] Bluetooth: hci2: command tx timeout
[   61.733168][ T5852] Bluetooth: hci1: command tx timeout
[   62.211588][  T791] cfg80211: failed to load regulatory.db
[   62.344526][ T6038] netlink: 830 bytes leftover after parsing attributes in process `syz.1.44'.
[   62.347687][ T6038] bond_slave_0: entered promiscuous mode
[   62.349730][ T6038] bond_slave_1: entered promiscuous mode
[   62.581820][ T6059] netlink: 5 bytes leftover after parsing attributes in process `syz.1.52'.
[   62.676762][ T6057] netlink: 'syz.0.50': attribute type 10 has an invalid length.
[   62.942932][ T6057] team0 (unregistering): Port device team_slave_0 removed
[   62.970054][ T6057] team0 (unregistering): Port device team_slave_1 removed
[   63.021699][ T6089] netlink: 56 bytes leftover after parsing attributes in process `syz.1.57'.
[   63.026094][ T6089] netlink: 'syz.1.57': attribute type 21 has an invalid length.
[   63.161684][ T6090] syzkaller0: entered promiscuous mode
[   63.164314][ T6090] syzkaller0: entered allmulticast mode
[   63.734441][ T5852] Bluetooth: hci0: command tx timeout
[   63.814240][ T5852] Bluetooth: hci1: command tx timeout
[   63.822577][ T5852] Bluetooth: hci2: command tx timeout
[   63.853935][ T6105] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   63.885418][ T6095] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   63.889920][ T6095] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   63.907061][ T6104] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.60'.
[   63.911154][ T6104] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.60'.
[   63.915936][ T6105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.60'.
[   64.065733][ T6117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.62'.
[   64.079212][ T6117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.62'.
[   64.137226][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'.
[   64.669239][ T6149] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   64.672056][ T6149] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   64.688988][ T6124] cgroup: fork rejected by pids controller in /syz2
[   64.716295][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'.
[   64.917519][ T6175] netlink: 'syz.0.73': attribute type 10 has an invalid length.
[   64.927416][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.930829][ T6175] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   65.046627][ T6192] batadv0: entered promiscuous mode
[   65.048491][ T6192] batadv0: entered allmulticast mode
[   65.361718][ T6199] : renamed from vlan0 (while UP)
[   65.387795][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'.
[   65.411826][ T6204] netlink: 180 bytes leftover after parsing attributes in process `syz.2.81'.
[   65.469458][ T6208] netlink: 'syz.2.83': attribute type 2 has an invalid length.
[   65.472054][ T6208] netlink: 'syz.2.83': attribute type 1 has an invalid length.
[   65.476388][ T6206] netlink: 5 bytes leftover after parsing attributes in process `syz.0.82'.
[   65.480279][ T6208] netlink: 'syz.2.83': attribute type 1 has an invalid length.
[   65.484706][ T6211] netlink: 'syz.1.84': attribute type 27 has an invalid length.
[   66.657211][ T6238] syzkaller0: entered promiscuous mode
[   66.671246][ T6238] syzkaller0: entered allmulticast mode
[   67.396687][ T6253] netlink: 'syz.1.96': attribute type 1 has an invalid length.
[   67.399312][ T6253] netlink: 'syz.1.96': attribute type 1 has an invalid length.
[   67.403968][ T6253] netlink: 'syz.1.96': attribute type 2 has an invalid length.
[   67.406942][ T6253] netlink: 'syz.1.96': attribute type 2 has an invalid length.
[   68.264425][ T6294] veth1_vlan: entered allmulticast mode
[   68.269458][ T6294] team0: Device veth1_vlan failed to register rx_handler
[   69.905249][ T6339] __nla_validate_parse: 10 callbacks suppressed
[   69.905260][ T6339] netlink: 5 bytes leftover after parsing attributes in process `syz.2.124'.
[   70.733765][ T6364] validate_nla: 2 callbacks suppressed
[   70.733781][ T6364] netlink: 'syz.2.132': attribute type 10 has an invalid length.
[   70.734185][ T6362] lo speed is unknown, defaulting to 1000
[   70.737756][ T6364] veth1_macvtap: entered allmulticast mode
[   70.747519][ T6362] lo speed is unknown, defaulting to 1000
[   70.751208][ T6362] lo speed is unknown, defaulting to 1000
[   70.871587][ T5893] lo speed is unknown, defaulting to 1000
[   70.875191][ T6362] infiniband syz1: set active
[   70.877343][ T6362] infiniband syz1: added lo
[   70.913075][ T6362] RDS/IB: syz1: added
[   70.915142][ T6362] smc: adding ib device syz1 with port count 1
[   70.917413][ T6362] smc:    ib device syz1 port 1 has pnetid 
[   70.920167][ T5893] lo speed is unknown, defaulting to 1000
[   70.927299][ T6362] lo speed is unknown, defaulting to 1000
[   70.931116][ T6375] netlink: 400 bytes leftover after parsing attributes in process `syz.2.136'.
[   71.010132][ T6384] netlink: 'syz.2.139': attribute type 2 has an invalid length.
[   71.018181][ T6384] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   71.020743][ T6384] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.139'.
[   71.026058][ T6384] nbd: couldn't find device at index 65542
[   71.030015][ T6384] netlink: 'syz.2.139': attribute type 21 has an invalid length.
[   71.034121][ T6384] netlink: 128 bytes leftover after parsing attributes in process `syz.2.139'.
[   71.037204][ T6384] netlink: 'syz.2.139': attribute type 4 has an invalid length.
[   71.043529][ T6362] lo speed is unknown, defaulting to 1000
[   71.177286][ T6362] lo speed is unknown, defaulting to 1000
[   71.190861][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.193211][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.417731][ T6401] netlink: 'syz.1.147': attribute type 10 has an invalid length.
[   71.422345][ T6401] veth1_macvtap: entered allmulticast mode
[   71.480692][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'.
[   71.589678][ T6419] netlink: 104 bytes leftover after parsing attributes in process `syz.2.155'.
[   71.597918][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.153'.
[   71.780443][ T6427] lo speed is unknown, defaulting to 1000
[   71.791819][ T6427] lo speed is unknown, defaulting to 1000
[   71.807419][ T6427] lo speed is unknown, defaulting to 1000
[   71.878239][ T6438] netlink: 168 bytes leftover after parsing attributes in process `syz.0.160'.
[   71.886845][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'.
[   71.899834][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'.
[   71.906518][ T6427] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.939939][ T6440] netlink: 'syz.0.161': attribute type 10 has an invalid length.
[   71.945146][ T6440] veth1_macvtap: entered allmulticast mode
[   71.995527][ T6427] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   72.183168][ T6427] lo speed is unknown, defaulting to 1000
[   72.204866][ T6427] lo speed is unknown, defaulting to 1000
[   72.221412][ T6427] lo speed is unknown, defaulting to 1000
[   72.351219][ T6467] netlink: 'syz.2.169': attribute type 10 has an invalid length.
[   72.351758][ T6464] netlink: 'syz.0.168': attribute type 21 has an invalid length.
[   72.356686][ T6467] batadv0: entered promiscuous mode
[   72.356697][ T6467] batadv0: entered allmulticast mode
[   72.357091][ T6467] bridge0: port 3(batadv0) entered blocking state
[   72.357175][ T6467] bridge0: port 3(batadv0) entered disabled state
[   72.358471][ T6467] bridge0: port 3(batadv0) entered blocking state
[   72.358535][ T6467] bridge0: port 3(batadv0) entered forwarding state
[   72.694460][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   72.697883][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   72.893343][ T6507] openvswitch: netlink: Key type 1044 is out of range max 32
[   72.947047][ T6509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.236828][ T6561] netlink: 'syz.0.192': attribute type 4 has an invalid length.
[   75.403711][ T6633] __nla_validate_parse: 10 callbacks suppressed
[   75.403722][ T6633] netlink: 277 bytes leftover after parsing attributes in process `syz.1.214'.
[   75.913826][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'.
[   75.962791][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'.
[   76.028220][ T6654] netlink: 'syz.2.222': attribute type 2 has an invalid length.
[   76.031419][ T6654] netlink: 'syz.2.222': attribute type 8 has an invalid length.
[   76.036187][ T6654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.222'.
[   76.041297][ T6654] netlink: 6615 bytes leftover after parsing attributes in process `syz.2.222'.
[   76.231110][ T5852] Bluetooth: hci0: ISO packet for unknown connection handle 32
[   76.602150][ T6686] netlink: 'syz.2.233': attribute type 1 has an invalid length.
[   76.604814][ T6686] netlink: 'syz.2.233': attribute type 4 has an invalid length.
[   76.607368][ T6686] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.233'.
[   76.871628][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'.
[   77.725066][ T6724] netlink: 'syz.2.241': attribute type 19 has an invalid length.
[   78.150404][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.158695][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.162029][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.166679][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.169988][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.225133][ T6728] lo speed is unknown, defaulting to 1000
[   78.321756][ T6728] lo speed is unknown, defaulting to 1000
[   78.478200][ T6746] netlink: 14 bytes leftover after parsing attributes in process `syz.2.252'.
[   78.536974][ T6728] chnl_net:caif_netlink_parms(): no params data found
[   78.720916][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.723701][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.726290][ T6728] bridge_slave_0: entered allmulticast mode
[   78.729195][ T6728] bridge_slave_0: entered promiscuous mode
[   78.734472][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.737355][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.740443][ T6728] bridge_slave_1: entered allmulticast mode
[   78.744971][ T6728] bridge_slave_1: entered promiscuous mode
[   78.786218][ T6728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.793465][ T6728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.828886][ T6728] team0: Port device team_slave_0 added
[   78.835791][ T6728] team0: Port device team_slave_1 added
[   79.120222][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.123391][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.135250][ T6728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.140380][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.143209][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.153265][ T6728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.218566][ T6728] hsr_slave_0: entered promiscuous mode
[   79.221717][ T6728] hsr_slave_1: entered promiscuous mode
[   79.226404][ T6728] debugfs: 'hsr0' already exists in 'hsr'
[   79.228825][ T6728] Cannot create hsr debugfs directory
[   79.429148][ T6728] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.438714][ T6728] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.453141][ T6728] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.460958][ T6728] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.476503][ T6764] netlink: 'syz.2.257': attribute type 1 has an invalid length.
[   79.596331][ T6728] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.632347][ T6728] 8021q: adding VLAN 0 to HW filter on device team0
[   79.645049][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.648081][  T993] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.680240][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.683332][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.908847][ T6728] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.964338][ T6728] veth0_vlan: entered promiscuous mode
[   79.993363][ T6728] veth1_vlan: entered promiscuous mode
[   80.055652][ T6728] veth0_macvtap: entered promiscuous mode
[   80.095970][ T6728] veth1_macvtap: entered promiscuous mode
[   80.131694][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.163614][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.181368][ T5714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.191808][ T5714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.203962][ T5714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.302579][ T5852] Bluetooth: hci0: command tx timeout
[   80.419000][ T5714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.426950][ T6787] netlink: 36 bytes leftover after parsing attributes in process `syz.2.260'.
[   80.482608][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.485362][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.522880][  T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.525748][  T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.956579][ T6806] netlink: 'syz.3.265': attribute type 11 has an invalid length.
[   81.049576][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.268'.
[   81.063049][ T6814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.268'.
[   81.532174][ T6850] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.273'.
[   81.599107][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.275'.
[   81.633198][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.275'.
[   81.636573][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.275'.
[   81.852169][ T6863] netlink: 'syz.1.278': attribute type 21 has an invalid length.
[   81.856468][ T6863] netlink: 14532 bytes leftover after parsing attributes in process `syz.1.278'.
[   81.886747][ T6863] syzkaller0: entered promiscuous mode
[   81.889016][ T6863] syzkaller0: entered allmulticast mode
[   81.903765][ T6861] netlink: 'syz.3.277': attribute type 39 has an invalid length.
[   82.374524][ T5852] Bluetooth: hci0: command tx timeout
[   82.884034][ T6870] netlink: 'syz.1.281': attribute type 21 has an invalid length.
[   82.898186][ T6870] netlink: 'syz.1.281': attribute type 21 has an invalid length.
[   83.095904][ T6885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.287'.
[   83.100639][ T6886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.287'.
[   83.614795][ T6893] netlink: 'syz.2.288': attribute type 29 has an invalid length.
[   83.620737][ T6900] netlink: 'syz.2.288': attribute type 29 has an invalid length.
[   83.887037][ T6911] netlink: 'syz.3.293': attribute type 10 has an invalid length.
[   83.909289][ T6911] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   84.019963][ T6915] lo speed is unknown, defaulting to 1000
[   84.268775][ T6914] lo speed is unknown, defaulting to 1000
[   84.277413][ T6915] lo speed is unknown, defaulting to 1000
[   84.282771][ T6928] netlink: zone id is out of range
[   84.284918][ T6928] netlink: zone id is out of range
[   84.287133][ T6928] netlink: zone id is out of range
[   84.289268][ T6928] netlink: get zone limit has 8 unknown bytes
[   84.335637][ T6915] tipc: can't start tipc send workqueue
[   84.452790][ T5852] Bluetooth: hci0: command tx timeout
[   84.645502][ T6914] lo speed is unknown, defaulting to 1000
[   84.908143][ T5852] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[   86.321287][ T6989] lo: entered allmulticast mode
[   86.330739][   T24] lo speed is unknown, defaulting to 1000
[   86.335547][   T24] syz1: Port: 1 Link DOWN
[   86.338562][   T24] lo speed is unknown, defaulting to 1000
[   86.353837][ T6985] syz.3.320 (6985) used greatest stack depth: 19704 bytes left
[   86.409976][ T6992] lo: entered promiscuous mode
[   86.411811][ T6992] lo: left allmulticast mode
[   86.425017][ T5893] lo speed is unknown, defaulting to 1000
[   86.429464][ T5893] syz1: Port: 1 Link ACTIVE
[   86.431449][ T5893] lo speed is unknown, defaulting to 1000
[   86.546829][ T5852] Bluetooth: hci0: command tx timeout
[   86.688475][ T7010] netlink: 'syz.3.328': attribute type 10 has an invalid length.
[   86.692911][ T7010] veth1_macvtap: entered allmulticast mode
[   87.691935][ T7030] __nla_validate_parse: 8 callbacks suppressed
[   87.691951][ T7030] netlink: 64 bytes leftover after parsing attributes in process `syz.3.335'.
[   87.977769][ T7033] netlink: 124 bytes leftover after parsing attributes in process `syz.1.336'.
[   91.018921][ T7049] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[   91.022138][ T7049] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[   91.025652][ T7049] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[   91.030759][ T7049] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[   91.034116][ T7049] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[   91.040279][ T7049] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[   91.055099][ T7049] netlink: 'syz.1.341': attribute type 2 has an invalid length.
[   91.060012][ T7049] netlink: 'syz.1.341': attribute type 2 has an invalid length.
[   91.066496][ T7049] netlink: 'syz.1.341': attribute type 2 has an invalid length.
[   91.528276][ T7062] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[   91.531162][ T7062] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[   94.650259][ T7082] netlink: 5 bytes leftover after parsing attributes in process `syz.2.352'.
[   94.935399][ T7099] netlink: 'syz.1.356': attribute type 4 has an invalid length.
[   96.373722][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'.
[   96.536932][ T7149] netlink: 'syz.3.371': attribute type 3 has an invalid length.
[   96.540204][ T7149] netlink: 'syz.3.371': attribute type 2 has an invalid length.
[   96.543946][ T7149] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.371'.
[   96.709233][ T7165] netlink: 'syz.1.377': attribute type 21 has an invalid length.
[   96.715189][ T7165] netlink: 128 bytes leftover after parsing attributes in process `syz.1.377'.
[   96.724014][ T7165] netlink: 'syz.1.377': attribute type 4 has an invalid length.
[   96.727357][ T7165] netlink: 'syz.1.377': attribute type 5 has an invalid length.
[   96.730342][ T7165] netlink: 3 bytes leftover after parsing attributes in process `syz.1.377'.
[   96.752252][ T7167] lo speed is unknown, defaulting to 1000
[   96.789796][ T7174] netlink: 14 bytes leftover after parsing attributes in process `syz.2.381'.
[   96.804958][ T7174] hsr0: entered promiscuous mode
[   96.809017][ T7174] hsr0: entered allmulticast mode
[   96.810860][ T7174] hsr_slave_0: entered allmulticast mode
[   96.832679][ T7174] hsr_slave_1: entered allmulticast mode
[   96.966132][ T7178] netlink: 'syz.1.380': attribute type 10 has an invalid length.
[   96.972955][ T7178] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   97.171488][ T7167] lo speed is unknown, defaulting to 1000
[   97.273021][ T7186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.383'.
[   97.308220][ T7191] netlink: 'syz.2.385': attribute type 10 has an invalid length.
[   97.458380][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.387'.
[   97.531075][ T7204] openvswitch: netlink: Key type 1044 is out of range max 32
[   97.786172][ T7213] netlink: 'syz.2.392': attribute type 10 has an invalid length.
[   97.789459][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.392'.
[   97.958389][ T7219] delete_channel: no stack
[   97.959984][ T7219] delete_channel: no stack
[   97.979177][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'.
[   98.255666][ T7230] delete_channel: no stack
[   98.332147][ T7238] delete_channel: no stack
[   98.721433][ T7270] netlink: 'syz.2.410': attribute type 13 has an invalid length.
[   98.755013][ T7270] netlink: 'syz.2.410': attribute type 13 has an invalid length.
[   99.384164][ T7316] openvswitch: netlink: Key type 1044 is out of range max 32
[   99.673906][ T7318] __nla_validate_parse: 42 callbacks suppressed
[   99.673918][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'.
[   99.834142][ T5852] Bluetooth: hci0: ISO packet too small
[   99.933180][ T7345] IPv6: NLM_F_CREATE should be specified when creating new route
[   99.941636][ T7347] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   99.945606][ T7345] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.435'.
[   99.963335][ T7348] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.436'.
[  100.061714][ T7353] netlink: 22 bytes leftover after parsing attributes in process `syz.1.434'.
[  101.262940][ T7395] openvswitch: netlink: Key type 1044 is out of range max 32
[  101.426228][ T7413] netlink: 17 bytes leftover after parsing attributes in process `syz.1.455'.
[  101.430311][ T7413] netlink: zone id is out of range
[  101.435592][ T7413] netlink: zone id is out of range
[  101.438989][ T7413] netlink: zone id is out of range
[  101.441740][ T7413] netlink: zone id is out of range
[  101.496170][ T7413] netlink: zone id is out of range
[  101.498459][ T7413] netlink: zone id is out of range
[  101.500970][ T7413] netlink: zone id is out of range
[  101.725133][ T7439] syz.3.459 uses obsolete (PF_INET,SOCK_PACKET)
[  101.788962][ T5852] Bluetooth: hci1: Malformed LE Event: 0x1b
[  102.111929][ T7448] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.463'.
[  102.309945][ T7453] validate_nla: 43 callbacks suppressed
[  102.309957][ T7453] netlink: 'syz.1.465': attribute type 29 has an invalid length.
[  102.345015][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'.
[  102.355845][ T7453] netlink: 'syz.1.465': attribute type 29 has an invalid length.
[  102.693704][ T7457] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.466'.
[  104.813920][ T7463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.468'.
[  104.848107][ T7463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.468'.
[  104.982189][ T7472] netlink: 'syz.1.468': attribute type 21 has an invalid length.
[  105.021618][ T7475] netlink: 'syz.3.472': attribute type 1 has an invalid length.
[  105.024504][ T7472] netlink: 128 bytes leftover after parsing attributes in process `syz.1.468'.
[  105.027474][ T7472] netlink: 'syz.1.468': attribute type 4 has an invalid length.
[  105.030168][ T7472] netlink: 'syz.1.468': attribute type 5 has an invalid length.
[  105.038334][ T7475] netlink: 368 bytes leftover after parsing attributes in process `syz.3.472'.
[  105.068744][ T7472] netlink: 3 bytes leftover after parsing attributes in process `syz.1.468'.
[  105.816559][ T7488] netlink: 68 bytes leftover after parsing attributes in process `syz.3.476'.
[  106.279900][ T7508] netlink: 348 bytes leftover after parsing attributes in process `syz.3.481'.
[  106.471613][ T7513] netlink: 'syz.1.482': attribute type 13 has an invalid length.
[  106.478948][ T7513] netlink: 'syz.1.482': attribute type 17 has an invalid length.
[  106.491197][ T7513] lo: left promiscuous mode
[  106.506823][ T7515] netlink: 'syz.2.483': attribute type 13 has an invalid length.
[  106.510482][ T7515] netlink: 'syz.2.483': attribute type 17 has an invalid length.
[  106.815530][ T7513] net_ratelimit: 78 callbacks suppressed
[  106.815538][ T7513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.055835][ T7515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.066538][ T5893] lo speed is unknown, defaulting to 1000
[  107.679285][ T7544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.492'.
[  107.924843][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[  107.925044][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[  107.991636][ T7533] lo speed is unknown, defaulting to 1000
[  108.049603][ T7563] netlink: 'syz.2.499': attribute type 6 has an invalid length.
[  108.054532][ T7563] netlink: 'syz.2.499': attribute type 1 has an invalid length.
[  108.092325][ T7533] lo speed is unknown, defaulting to 1000
[  108.132931][ T7565] can: request_module (can-proto-0) failed.
[  108.195676][ T7575] netlink: 'syz.2.500': attribute type 1 has an invalid length.
[  108.221723][ T7578] netlink: 'syz.3.503': attribute type 5 has an invalid length.
[  108.229032][ T7577] netlink: 'syz.3.503': attribute type 5 has an invalid length.
[  111.779693][ T7609] netlink: 'syz.1.512': attribute type 10 has an invalid length.
[  111.979391][ T7625] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  111.982837][ T7627] netlink: 'syz.1.517': attribute type 9 has an invalid length.
[  111.985402][ T7627] __nla_validate_parse: 4 callbacks suppressed
[  111.985408][ T7627] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.517'.
[  111.991481][ T7627] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  112.040363][ T7627] netlink: 'syz.1.517': attribute type 9 has an invalid length.
[  112.060210][ T7627] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.517'.
[  112.098774][ T7636] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  112.157165][ T7641] netlink: 14 bytes leftover after parsing attributes in process `syz.1.520'.
[  112.266269][ T7650] netlink: 88 bytes leftover after parsing attributes in process `syz.1.523'.
[  112.371864][ T7658] netlink: 824 bytes leftover after parsing attributes in process `syz.2.526'.
[  112.409579][ T7660] openvswitch: netlink: Key type 1044 is out of range max 32
[  112.490963][ T7662] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.528'.
[  112.495085][ T7662] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  112.498764][ T7662] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  112.559532][ T7662] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.528'.
[  112.568456][ T7662] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  112.574960][ T7662] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  112.965206][ T7693] netlink: 'syz.3.538': attribute type 13 has an invalid length.
[  112.969084][ T7693] netlink: 'syz.3.538': attribute type 17 has an invalid length.
[  113.206368][ T7693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.459770][ T7700] netlink: 176 bytes leftover after parsing attributes in process `syz.3.541'.
[  113.466334][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.541'.
[  113.471337][ T7700] netlink: 176 bytes leftover after parsing attributes in process `syz.3.541'.
[  113.742880][ T7718] netlink: 'syz.2.546': attribute type 1 has an invalid length.
[  113.782989][ T7722] netlink: 'syz.2.548': attribute type 2 has an invalid length.
[  113.815594][ T7724] netlink: 'syz.2.549': attribute type 10 has an invalid length.
[  113.960584][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.966785][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.976234][ T7716] bridge0: entered allmulticast mode
[  114.137230][ T7729] netlink: 'syz.3.551': attribute type 10 has an invalid length.
[  114.495840][ T7729] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  114.517093][ T7733] sit0: entered allmulticast mode
[  114.530642][ T7734] sit0: entered promiscuous mode
[  114.906659][   T33] audit: type=1107 audit(1755613389.901:2): pid=7747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  115.647659][ T7759] lo speed is unknown, defaulting to 1000
[  115.777694][ T7759] lo speed is unknown, defaulting to 1000
[  115.801623][ T7764] netlink: 'syz.2.562': attribute type 1 has an invalid length.
[  116.481932][ T7785] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  116.494489][ T7785] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.339421][ T7794] netlink: 'syz.1.570': attribute type 4 has an invalid length.
[  117.361928][ T7792] netlink: 'syz.2.569': attribute type 1 has an invalid length.
[  117.419749][ T7796] netlink: 'syz.1.571': attribute type 29 has an invalid length.
[  117.424661][ T7796] netlink: 'syz.1.571': attribute type 29 has an invalid length.
[  117.429227][ T7796] netlink: 'syz.1.571': attribute type 29 has an invalid length.
[  117.523505][ T7791] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  117.776280][ T7818] openvswitch: netlink: Key type 1044 is out of range max 32
[  117.939653][ T7827] __nla_validate_parse: 4 callbacks suppressed
[  117.939715][ T7827] netlink: 68 bytes leftover after parsing attributes in process `syz.3.581'.
[  117.999420][ T7820] netlink: 48 bytes leftover after parsing attributes in process `syz.3.581'.
[  118.069531][ T7832] delete_channel: no stack
[  118.071203][ T7832] delete_channel: no stack
[  118.075534][ T7831] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.585'.
[  118.080063][ T7831] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  118.085772][ T7831] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  118.269592][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'.
[  118.820628][ T7894] openvswitch: netlink: Key type 1044 is out of range max 32
[  118.955748][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'.
[  119.007672][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'.
[  119.017998][ T7909] validate_nla: 6 callbacks suppressed
[  119.018010][ T7909] netlink: 'syz.3.601': attribute type 4 has an invalid length.
[  119.064504][ T7914] netlink: set zone limit has 8 unknown bytes
[  119.097248][ T7920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.605'.
[  119.110651][ T7923] netlink: 'syz.3.607': attribute type 29 has an invalid length.
[  119.114062][ T7923] netlink: 'syz.3.607': attribute type 29 has an invalid length.
[  119.117789][ T7923] netlink: 3850 bytes leftover after parsing attributes in process `syz.3.607'.
[  119.235406][ T7920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.605'.
[  119.415413][ T7925] netlink: 44 bytes leftover after parsing attributes in process `syz.3.608'.
[  119.418621][ T7925] netlink: 'syz.3.608': attribute type 5 has an invalid length.
[  121.535315][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1422871434 wd_nsec: 1422871392
[  121.777677][ T7964] netlink: 'syz.1.615': attribute type 10 has an invalid length.
[  122.178348][ T7981] netlink: 'syz.1.623': attribute type 2 has an invalid length.
[  122.181212][ T7981] netlink: 'syz.1.623': attribute type 9 has an invalid length.
[  122.655743][ T8004] netlink: 'syz.2.630': attribute type 3 has an invalid length.
[  122.659699][ T8004] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[  122.949463][ T8014] __nla_validate_parse: 6 callbacks suppressed
[  122.949473][ T8014] netlink: 152 bytes leftover after parsing attributes in process `syz.2.635'.
[  122.955093][ T8014] netlink: 6 bytes leftover after parsing attributes in process `syz.2.635'.
[  122.978807][ T8017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'.
[  122.990479][ T8019] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'.
[  123.766584][ T8044] netlink: 'syz.1.644': attribute type 1 has an invalid length.
[  123.770156][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'.
[  124.337705][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'.
[  124.344088][ T8069] openvswitch: netlink: Message has 4 unknown bytes.
[  124.419224][ T8077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'.
[  124.508521][ T8083] netlink: 'syz.3.661': attribute type 10 has an invalid length.
[  124.688962][ T8094] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.663'.
[  125.177560][ T8104] netlink: 'syz.3.668': attribute type 29 has an invalid length.
[  125.193171][ T8104] netlink: 'syz.3.668': attribute type 29 has an invalid length.
[  125.514571][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'.
[  125.687398][ T8130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.676'.
[  125.696007][ T8130] netlink: 'syz.1.676': attribute type 32 has an invalid length.
[  125.814432][ T8135] netlink: 'syz.1.677': attribute type 3 has an invalid length.
[  126.732870][ T8175] openvswitch: netlink: Key type 1044 is out of range max 32
[  127.022414][ T8195] netlink: 'syz.3.697': attribute type 13 has an invalid length.
[  127.025433][ T8195] netlink: 'syz.3.697': attribute type 17 has an invalid length.
[  127.094012][ T8198] netlink: 'syz.2.695': attribute type 10 has an invalid length.
[  127.099585][ T8195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.118330][ T8198] veth1_vlan: entered allmulticast mode
[  127.129524][ T8198] team0: Device veth1_vlan failed to register rx_handler
[  127.350136][ T8201] netlink: 'syz.2.698': attribute type 6 has an invalid length.
[  127.609048][ T8222] netlink: 'syz.1.705': attribute type 13 has an invalid length.
[  127.640881][ T8222] sit0: left promiscuous mode
[  127.644706][ T8222] sit0: left allmulticast mode
[  127.691681][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.695392][ T8222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.700937][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.704874][ T8222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.720194][ T8222] bridge0: left allmulticast mode
[  127.806190][ T8222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.999660][ T8243] __nla_validate_parse: 7 callbacks suppressed
[  127.999670][ T8243] netlink: 14 bytes leftover after parsing attributes in process `syz.3.712'.
[  128.328323][ T8243] bond0: (slave dummy0): Releasing backup interface
[  128.819663][ T8265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.719'.
[  128.985186][ T8276] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.724'.
[  129.144985][ T8276] : entered promiscuous mode
[  129.351276][ T8293] netlink: 'syz.1.729': attribute type 11 has an invalid length.
[  129.368829][ T8293] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.729'.
[  129.431365][ T8299] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.729'.
[  129.431634][ T8300] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.729'.
[  129.464758][ T8300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.660270][ T8304] validate_nla: 5 callbacks suppressed
[  129.660547][ T8304] netlink: 'syz.1.733': attribute type 13 has an invalid length.
[  129.668526][ T8304] netlink: 'syz.1.733': attribute type 17 has an invalid length.
[  129.725714][ T8304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.834741][ T8314] netlink: 'syz.1.737': attribute type 4 has an invalid length.
[  129.950140][ T8322] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.739'.
[  129.957773][ T8321] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.739'.
[  129.967982][ T8322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.968109][ T8325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.018493][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'.
[  131.141562][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'.
[  131.354679][ T8352] netlink: zone id is out of range
[  131.356878][ T8352] netlink: zone id is out of range
[  131.359267][ T8352] netlink: zone id is out of range
[  131.361404][ T8352] netlink: zone id is out of range
[  131.370481][ T8352] netlink: zone id is out of range
[  131.374141][ T8352] netlink: zone id is out of range
[  131.379241][ T8352] netlink: zone id is out of range
[  131.389879][ T8358] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[  131.397536][ T8359] netlink: 'syz.1.750': attribute type 39 has an invalid length.
[  132.212237][ T8347] syz.3.745 (8347) used greatest stack depth: 18232 bytes left
[  132.358022][ T8382] netlink: 'syz.1.756': attribute type 10 has an invalid length.
[  132.360640][ T8381] netlink: 'syz.1.756': attribute type 25 has an invalid length.
[  132.369309][ T8382] lo: entered promiscuous mode
[  132.381456][ T8382] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  132.386532][ T8381] netlink: 'syz.1.756': attribute type 25 has an invalid length.
[  132.389860][ T5907] lo speed is unknown, defaulting to 1000
[  132.389888][ T8381] netlink: 'syz.1.756': attribute type 25 has an invalid length.
[  132.390017][ T8381] netlink: 'syz.1.756': attribute type 25 has an invalid length.
[  132.395317][ T5907] syz1: Port: 1 Link DOWN
[  132.406374][ T5907] lo speed is unknown, defaulting to 1000
[  132.625798][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.628465][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.061406][ T8434] __nla_validate_parse: 9 callbacks suppressed
[  133.061418][ T8434] netlink: 830 bytes leftover after parsing attributes in process `syz.3.774'.
[  133.408120][ T8441] netlink: 152 bytes leftover after parsing attributes in process `syz.1.776'.
[  133.417780][ T8441] netlink: 751 bytes leftover after parsing attributes in process `syz.1.776'.
[  133.763662][ T8452] netlink: 752 bytes leftover after parsing attributes in process `syz.1.781'.
[  133.879199][ T8454] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.782'.
[  133.884235][ T8454] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.782'.
[  134.018527][ T8427] syz.2.772 (8427) used greatest stack depth: 17712 bytes left
[  134.252264][ T8475] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.789'.
[  134.267401][ T8475] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.789'.
[  134.275833][ T8475] netlink: 62227 bytes leftover after parsing attributes in process `syz.3.789'.
[  134.313145][ T8467] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.785'.
[  134.406206][ T8477] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.409497][ T8477] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.192277][ T8516] validate_nla: 33 callbacks suppressed
[  135.192291][ T8516] netlink: 'syz.2.799': attribute type 10 has an invalid length.
[  135.301127][ T8520] C: renamed from team_slave_0
[  135.562248][ T8524] netlink: 'syz.1.801': attribute type 10 has an invalid length.
[  135.693761][ T8520] netlink: 'syz.2.800': attribute type 3 has an invalid length.
[  135.783294][ T8532] net_ratelimit: 78 callbacks suppressed
[  135.783308][ T8532] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  135.881449][ T8543] netlink: 'syz.1.807': attribute type 1 has an invalid length.
[  135.886132][ T8544] netlink: 'syz.1.807': attribute type 2 has an invalid length.
[  135.889183][ T8544] netlink: 'syz.1.807': attribute type 1 has an invalid length.
[  135.904008][ T8543] netlink: 'syz.1.807': attribute type 4 has an invalid length.
[  136.201746][ T8570] C: renamed from team_slave_0 (while UP)
[  136.209734][ T8570] netlink: 'syz.1.813': attribute type 2 has an invalid length.
[  136.213009][ T8570] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  136.249556][ T8572] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  136.561874][ T8584] lo speed is unknown, defaulting to 1000
[  136.585284][ T8585] lo speed is unknown, defaulting to 1000
[  136.771634][ T8588] netlink: 'syz.1.820': attribute type 10 has an invalid length.
[  136.973460][ T8598] syzkaller0: entered promiscuous mode
[  136.975611][ T8598] syzkaller0: entered allmulticast mode
[  137.483750][ T8616] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  137.609778][ T8618] netlink: 'syz.3.827': attribute type 3 has an invalid length.
[  138.948104][ T8649] __nla_validate_parse: 16 callbacks suppressed
[  138.948121][ T8649] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.837'.
[  139.151958][ T5852] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  139.779810][ T8667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.843'.
[  139.794370][ T8663] netlink: 60 bytes leftover after parsing attributes in process `syz.3.843'.
[  139.863160][ T8668] netlink: 9 bytes leftover after parsing attributes in process `syz.1.844'.
[  139.879405][ T8668] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.844'.
[  139.892481][ T8668] netlink: 9 bytes leftover after parsing attributes in process `syz.1.844'.
[  140.394360][ T8675] netlink: 65019 bytes leftover after parsing attributes in process `syz.1.846'.
[  140.704819][ T8680] validate_nla: 7 callbacks suppressed
[  140.704831][ T8680] netlink: 'syz.1.848': attribute type 3 has an invalid length.
[  140.723006][ T8680] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[  140.725770][ T8680] netlink: 116 bytes leftover after parsing attributes in process `syz.1.848'.
[  140.729232][ T8680] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.742341][ T8685] netlink: 'syz.1.848': attribute type 3 has an invalid length.
[  140.782439][ T8685] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[  140.785176][ T8685] netlink: 116 bytes leftover after parsing attributes in process `syz.1.848'.
[  140.789315][ T8685] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.816365][ T8686] sit0: entered allmulticast mode
[  140.850331][ T8693] netlink: 'syz.2.851': attribute type 4 has an invalid length.
[  140.979057][ T8697] netlink: 'syz.1.854': attribute type 3 has an invalid length.
[  140.983585][ T8697] netlink: 4264 bytes leftover after parsing attributes in process `syz.1.854'.
[  140.987273][ T8697] netlink: 'syz.1.854': attribute type 3 has an invalid length.
[  141.018026][ T8704] netlink: 'syz.3.853': attribute type 10 has an invalid length.
[  141.030955][ T8704] netlink: 'syz.3.853': attribute type 19 has an invalid length.
[  141.124861][ T8706] netlink: 'syz.2.855': attribute type 5 has an invalid length.
[  141.444398][ T8730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.448439][ T8731] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  141.451595][ T8731] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.579317][ T8746] openvswitch: netlink: Key type 31 is not supported
[  144.788203][ T8765] __nla_validate_parse: 8 callbacks suppressed
[  144.788213][ T8765] netlink: 809 bytes leftover after parsing attributes in process `syz.3.872'.
[  144.794289][ T8765] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.872'.
[  145.489048][ T8791] openvswitch: netlink: Message has 16 unknown bytes.
[  145.695255][ T8797] netlink: 140 bytes leftover after parsing attributes in process `syz.1.880'.
[  146.344576][ T8816] validate_nla: 4 callbacks suppressed
[  146.344588][ T8816] netlink: 'syz.3.887': attribute type 21 has an invalid length.
[  146.349965][ T8816] netlink: 100 bytes leftover after parsing attributes in process `syz.3.887'.
[  146.811250][ T8823] netlink: 'syz.2.889': attribute type 1 has an invalid length.
[  146.833275][ T8823] debugfs: '!' already exists in 'ieee80211'
[  146.950255][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'.
[  147.051562][ T8831] netlink: 'syz.2.891': attribute type 10 has an invalid length.
[  147.062492][ T8831] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.891'.
[  147.223192][ T8833] netlink: 'syz.2.891': attribute type 39 has an invalid length.
[  147.385701][ T8833] hsr_slave_0 (unregistering): left promiscuous mode
[  147.410434][ T8841] netlink: 'syz.3.893': attribute type 4 has an invalid length.
[  147.512001][ T8846] openvswitch: netlink: Message has 16 unknown bytes.
[  147.876466][ T8863] netlink: 'syz.3.901': attribute type 1 has an invalid length.
[  147.888447][ T8865] netlink: 60 bytes leftover after parsing attributes in process `syz.1.902'.
[  147.914678][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.1.902'.
[  147.919130][ T8865] netlink: 60 bytes leftover after parsing attributes in process `syz.1.902'.
[  147.922560][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.1.902'.
[  148.975368][ T8891] netlink: 'syz.3.908': attribute type 1 has an invalid length.
[  149.174682][ T8902] netlink: 'syz.2.912': attribute type 4 has an invalid length.
[  149.258525][ T8908] netlink: 'syz.2.915': attribute type 1 has an invalid length.
[  149.635431][ T8922] netlink: 'syz.1.921': attribute type 4 has an invalid length.
[  149.905013][ T8928] !: renamed from bond_slave_0 (while UP)
[  151.477824][ T8968] netlink: 'syz.2.930': attribute type 4 has an invalid length.
[  151.481133][ T8968] __nla_validate_parse: 4 callbacks suppressed
[  151.481144][ T8968] netlink: 152 bytes leftover after parsing attributes in process `syz.2.930'.
[  151.508050][ T8971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.935'.
[  151.513494][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.935'.
[  151.517614][ T8971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.935'.
[  151.522987][ T8971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.935'.
[  151.531764][ T8968] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  151.531923][ T8972] netlink: 'syz.2.930': attribute type 10 has an invalid length.
[  152.019128][ T8980] delete_channel: no stack
[  152.138980][ T8988] netlink: 'syz.3.940': attribute type 4 has an invalid length.
[  152.407200][ T9021] netlink: 'syz.2.950': attribute type 4 has an invalid length.
[  152.539716][ T9032] netlink: 752 bytes leftover after parsing attributes in process `syz.3.955'.
[  152.700493][ T9039] netlink: 17 bytes leftover after parsing attributes in process `syz.1.957'.
[  152.706872][ T9039] netlink: zone id is out of range
[  152.709075][ T9039] netlink: zone id is out of range
[  152.711340][ T9039] netlink: zone id is out of range
[  152.715284][ T9039] netlink: zone id is out of range
[  152.717665][ T9039] netlink: zone id is out of range
[  152.720103][ T9039] netlink: zone id is out of range
[  152.722103][ T9039] netlink: zone id is out of range
[  152.726105][ T9039] netlink: zone id is out of range
[  152.727821][ T9039] netlink: zone id is out of range
[  152.729512][ T9039] netlink: zone id is out of range
[  152.780735][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'.
[  152.806704][ T9043] netlink: 'syz.3.958': attribute type 4 has an invalid length.
[  152.813043][ T9043] netlink: 132 bytes leftover after parsing attributes in process `syz.3.958'.
[  153.019260][ T9049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.960'.
[  153.504303][ T9057] netlink: 'syz.2.962': attribute type 29 has an invalid length.
[  153.507856][ T9057] netlink: 'syz.2.962': attribute type 29 has an invalid length.
[  153.855217][ T9077] netlink: 'syz.3.968': attribute type 9 has an invalid length.
[  154.574266][ T9124] netlink: 'syz.3.983': attribute type 13 has an invalid length.
[  154.578138][ T9124] syz_tun: refused to change device tx_queue_len
[  155.525269][ T9157] netlink: 'syz.3.994': attribute type 1 has an invalid length.
[  156.760196][ T9221] __nla_validate_parse: 14 callbacks suppressed
[  156.760210][ T9221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1016'.
[  156.857184][ T9231] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1019'.
[  157.278262][ T9249] validate_nla: 1 callbacks suppressed
[  157.278278][ T9249] netlink: 'syz.3.1023': attribute type 33 has an invalid length.
[  157.284679][ T9249] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1023'.
[  157.288302][ T9249] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP)
[  157.694268][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'.
[  157.698701][ T9272] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1031'.
[  157.720638][ T9274] netlink: 'syz.2.1032': attribute type 4 has an invalid length.
[  157.749395][ T9276] netlink: 'syz.1.1033': attribute type 21 has an invalid length.
[  157.756355][ T9276] netlink: 'syz.1.1033': attribute type 5 has an invalid length.
[  157.941292][ T9296] netlink: 'syz.1.1041': attribute type 4 has an invalid length.
[  158.105837][ T9311] net_ratelimit: 78 callbacks suppressed
[  158.105851][ T9311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.160727][ T9315] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1050'.
[  158.871272][ T9338] netlink: 'syz.3.1056': attribute type 29 has an invalid length.
[  158.875919][ T9338] netlink: 'syz.3.1056': attribute type 29 has an invalid length.
[  158.944585][ T9341] netlink: 11382 bytes leftover after parsing attributes in process `syz.1.1057'.
[  158.956773][ T9341] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1057'.
[  158.963276][ T9341] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1057'.
[  159.020643][ T9343] netlink: 'syz.3.1056': attribute type 29 has an invalid length.
[  159.136865][ T9347] openvswitch: netlink: Key type 16130 is out of range max 32
[  159.278264][ T9349] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1059'.
[  159.290668][ T9349] netlink: 'syz.2.1059': attribute type 12 has an invalid length.
[  159.562238][ T9355] netlink: 'syz.2.1062': attribute type 10 has an invalid length.
[  159.602729][ T9355] bridge0: port 3(batadv0) entered disabled state
[  159.614686][ T9355] batadv0: left allmulticast mode
[  159.616650][ T9355] batadv0: left promiscuous mode
[  159.619858][ T9355] bridge0: port 3(batadv0) entered disabled state
[  159.654670][ T9355] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.667915][ T9355] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  159.999903][ T9383] ipvlan1: entered promiscuous mode
[  160.004672][ T9383] ipvlan1: entered allmulticast mode
[  160.006686][ T9383] veth0_vlan: entered allmulticast mode
[  160.010154][ T9383] bridge0: port 3(ipvlan1) entered blocking state
[  160.015264][ T9383] bridge0: port 3(ipvlan1) entered disabled state
[  160.019728][ T9383] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  160.027358][ T9384] bridge0: port 3(ipvlan1) entered blocking state
[  160.029978][ T9384] bridge0: port 3(ipvlan1) entered disabled state
[  160.034861][ T9384] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  160.061067][ T9383] ksmbd: Unknown IPC event: 3, ignore.
[  160.200668][ T9391] xt_time: unknown flags 0xf4
[  160.670552][ T9407] bridge_slave_1: left allmulticast mode
[  160.685351][ T9407] bridge_slave_1: left promiscuous mode
[  160.721973][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.866013][ T9407] bridge_slave_0: left allmulticast mode
[  160.895657][ T9407] bridge_slave_0: left promiscuous mode
[  160.897894][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.037990][ T9415] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  161.483153][ T9444] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  162.117096][ T9455] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  162.287468][ T9463] openvswitch: netlink: Key type 1044 is out of range max 32
[  163.085740][ T9488] __nla_validate_parse: 11 callbacks suppressed
[  163.085754][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'.
[  163.091390][ T9488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1101'.
[  163.098776][ T9488] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1101'.
[  163.149559][ T9494] netlink: 103 bytes leftover after parsing attributes in process `syz.3.1103'.
[  163.415744][ T9513] validate_nla: 9 callbacks suppressed
[  163.415758][ T9513] netlink: 'syz.2.1109': attribute type 4 has an invalid length.
[  163.461016][ T9515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1110'.
[  163.554029][ T9528] netlink: 'syz.2.1113': attribute type 2 has an invalid length.
[  163.559033][ T9530] netlink: 'syz.2.1113': attribute type 2 has an invalid length.
[  163.595877][ T9529] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1114'.
[  163.598977][ T9529] netlink: zone id is out of range
[  163.600749][ T9529] netlink: zone id is out of range
[  163.607498][ T9529] netlink: zone id is out of range
[  163.609217][ T9529] netlink: zone id is out of range
[  163.611208][ T9529] netlink: zone id is out of range
[  163.614031][ T9529] netlink: zone id is out of range
[  163.615777][ T9529] netlink: zone id is out of range
[  163.617482][ T9529] netlink: zone id is out of range
[  163.619335][ T9529] netlink: zone id is out of range
[  163.621898][ T9529] netlink: zone id is out of range
[  163.650179][ T9533] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1115'.
[  163.819858][ T9537] netlink: 'syz.1.1116': attribute type 4 has an invalid length.
[  163.822430][ T9537] netlink: 'syz.1.1116': attribute type 2 has an invalid length.
[  163.825104][ T9537] netlink: 199288 bytes leftover after parsing attributes in process `syz.1.1116'.
[  163.851145][ T9542] netlink: 'syz.2.1117': attribute type 4 has an invalid length.
[  164.091705][ T9555] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1121'.
[  164.103027][ T9555] netlink: 'syz.3.1121': attribute type 13 has an invalid length.
[  165.046744][ T9564] netlink: 'syz.1.1124': attribute type 4 has an invalid length.
[  165.107376][ T9565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.110835][ T9565] IPv6: NLM_F_CREATE should be set when creating new route
[  165.114156][ T9565] IPv6: NLM_F_CREATE should be set when creating new route
[  165.166519][ T9570] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  165.169783][ T9570] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  166.064876][ T9592] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1135'.
[  169.329924][ T9618] __nla_validate_parse: 5 callbacks suppressed
[  169.330008][ T9618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1142'.
[  169.341650][ T9618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1142'.
[  169.346657][ T9618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1142'.
[  169.419863][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'.
[  169.499466][ T9636] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1148'.
[  169.532003][ T9644] raw_sendmsg: syz.1.1151 forgot to set AF_INET. Fix it!
[  169.645990][ T9656] validate_nla: 7 callbacks suppressed
[  169.646004][ T9656] netlink: 'syz.3.1155': attribute type 21 has an invalid length.
[  169.651901][ T9656] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1155'.
[  169.739292][ T9660] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1156'.
[  170.753870][ T9683] netlink: 'syz.1.1165': attribute type 4 has an invalid length.
[  170.758064][ T9683] netlink: 'syz.1.1165': attribute type 10 has an invalid length.
[  170.778161][ T9683] team0: Port device dummy0 added
[  170.979705][ T9694] netlink: 'syz.3.1169': attribute type 13 has an invalid length.
[  170.984329][ T9694] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.1169'.
[  171.157809][ T9698] netlink: 'syz.3.1170': attribute type 39 has an invalid length.
[  171.165640][ T9698] netlink: 'syz.3.1170': attribute type 12 has an invalid length.
[  171.168326][ T9698] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1170'.
[  171.174227][ T9699] netlink: 'syz.3.1170': attribute type 39 has an invalid length.
[  171.480509][ T9724] netlink: 'syz.1.1178': attribute type 4 has an invalid length.
[  172.113398][ T9743] syzkaller0: entered promiscuous mode
[  172.113645][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'.
[  172.115686][ T9743] syzkaller0: entered allmulticast mode
[  172.121336][ T9745] net_ratelimit: 21 callbacks suppressed
[  172.121345][ T9745] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  172.129689][ T9745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.220405][ T9747] unsupported nlmsg_type 40
[  172.665656][ T9768] netlink: 'syz.2.1193': attribute type 10 has an invalid length.
[  173.417711][ T9768] bond0: (slave team0): Releasing backup interface
[  173.420629][ T9768] team0: Cannot enslave team device to itself
[  173.539867][ T9780] netlink: 'syz.2.1197': attribute type 3 has an invalid length.
[  174.188484][ T9851] openvswitch: netlink: Key type 1044 is out of range max 32
[  174.290963][ T9858] bond0: entered promiscuous mode
[  174.294567][ T9858] bond_slave_0: entered promiscuous mode
[  174.301067][ T9858] bond_slave_1: entered promiscuous mode
[  174.306951][ T9858] batadv0: entered promiscuous mode
[  174.309227][ T9858] bridge0: port 3(bond0) entered blocking state
[  174.318223][ T9858] bridge0: port 3(bond0) entered disabled state
[  174.320959][ T9858] bond0: entered allmulticast mode
[  174.325846][ T9858] bond_slave_0: entered allmulticast mode
[  174.328901][ T9858] bond_slave_1: entered allmulticast mode
[  174.331924][ T9858] batadv0: entered allmulticast mode
[  174.338644][ T9858] bridge0: port 3(bond0) entered blocking state
[  174.341502][ T9858] bridge0: port 3(bond0) entered forwarding state
[  174.389264][ T9864] lo speed is unknown, defaulting to 1000
[  174.573477][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  174.577412][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  174.610085][ T9864] lo speed is unknown, defaulting to 1000
[  175.553890][ T9893] __nla_validate_parse: 11 callbacks suppressed
[  175.553903][ T9893] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1234'.
[  175.715648][ T9893] bridge0: port 3(bond0) entered disabled state
[  176.119279][ T9893] bond0 (unregistering): left allmulticast mode
[  176.122201][ T9893] bond_slave_0: left allmulticast mode
[  176.125025][ T9893] bond_slave_1: left allmulticast mode
[  176.127408][ T9893] batadv0: left allmulticast mode
[  176.129623][ T9893] bridge0: port 3(bond0) entered disabled state
[  176.139042][ T9893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.145671][ T9893] bond_slave_0: left promiscuous mode
[  176.154858][ T9893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.162200][ T9893] bond_slave_1: left promiscuous mode
[  176.171442][ T9893] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  176.176148][ T9893] batadv0: left promiscuous mode
[  176.178820][ T9909] openvswitch: netlink: IP tunnel TTL not specified.
[  176.182853][ T9893] bond0 (unregistering): Released all slaves
[  176.259379][ T9913] validate_nla: 6 callbacks suppressed
[  176.259390][ T9913] netlink: 'syz.3.1242': attribute type 2 has an invalid length.
[  176.269676][ T9913] netlink: 'syz.3.1242': attribute type 1 has an invalid length.
[  176.273313][ T9913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1242'.
[  176.394691][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'.
[  176.399458][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'.
[  176.526560][ T9934] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1249'.
[  176.564147][ T9934] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1249'.
[  176.701225][ T9946] netlink: 'syz.1.1250': attribute type 40 has an invalid length.
[  176.709871][ T9946] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.917920][ T9957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1254'.
[  179.962459][ T9966] lo: left promiscuous mode
[  179.964691][ T9966] lo: entered allmulticast mode
[  180.119543][ T9974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1258'.
[  180.219933][ T8247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.736106][ T9976] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  180.774567][ T5848] Bluetooth: hci2: command 0x0406 tx timeout
[  180.776676][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  180.936505][ T8247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.040426][ T8247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.194667][T10041] sctp: [Deprecated]: syz.3.1269 (pid 10041) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.194667][T10041] Use struct sctp_sack_info instead
[  181.206777][ T8247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.323115][ T8247] bridge_slave_1: left allmulticast mode
[  181.325136][ T8247] bridge_slave_1: left promiscuous mode
[  181.327717][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.374140][ T8247] bridge_slave_0: left allmulticast mode
[  181.381934][ T8247] bridge_slave_0: left promiscuous mode
[  181.390458][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.519965][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'.
[  181.651218][T10080] netlink: 'syz.3.1277': attribute type 9 has an invalid length.
[  181.711462][ T8247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.720931][ T8247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.731229][ T8247] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  181.739848][ T8247] bond0 (unregistering): Released all slaves
[  181.750329][T10058] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1272'.
[  181.786259][T10055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1272'.
[  181.846205][T10064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1272'.
[  181.977742][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'.
[  181.981626][T10088] openvswitch: netlink: Missing key (keys=40, expected=80)
[  182.284236][T10098] sit0: entered allmulticast mode
[  182.380175][T10092] sit0: entered promiscuous mode
[  182.520629][T10110] netlink: 'syz.3.1286': attribute type 16 has an invalid length.
[  182.532609][T10110] netlink: 'syz.3.1286': attribute type 3 has an invalid length.
[  182.536475][T10110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1286'.
[  182.595723][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'.
[  182.599038][T10114] openvswitch: netlink: Missing key (keys=40, expected=80)
[  182.843118][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'.
[  182.929037][ T8247] hsr_slave_0: left promiscuous mode
[  182.933272][ T8247] hsr_slave_1: left promiscuous mode
[  182.936557][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.940267][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.950431][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'.
[  182.976316][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.979294][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.995521][ T8247] veth0_macvtap: left promiscuous mode
[  183.000727][ T8247] veth1_vlan: left promiscuous mode
[  183.003102][ T8247] veth0_vlan: left promiscuous mode
[  183.308543][T10135] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1294'.
[  184.318361][T10176] lo speed is unknown, defaulting to 1000
[  184.458012][T10176] lo speed is unknown, defaulting to 1000
[  186.650012][T10360] __nla_validate_parse: 3 callbacks suppressed
[  186.650022][T10360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1351'.
[  186.658870][T10360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1351'.
[  186.744483][T10370] =======================================================
[  186.744483][T10370] WARNING: The mand mount option has been deprecated and
[  186.744483][T10370]          and is ignored by this kernel. Remove the mand
[  186.744483][T10370]          option from the mount to silence this warning.
[  186.744483][T10370] =======================================================
[  186.786963][T10375] openvswitch: netlink: Key type 1044 is out of range max 32
[  186.938321][T10377] netlink: 'syz.2.1356': attribute type 27 has an invalid length.
[  186.950843][T10377] netlink: 'syz.2.1356': attribute type 1 has an invalid length.
[  186.977528][T10377] bridge0: port 1(bridge_slave_0) entered learning state
[  187.354195][T10386] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  187.363163][T10383] netlink: 'syz.1.1358': attribute type 41 has an invalid length.
[  187.365706][T10383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1358'.
[  187.505358][T10390] lo speed is unknown, defaulting to 1000
[  187.585698][T10398] openvswitch: netlink: Key type 1044 is out of range max 32
[  187.597747][T10390] lo speed is unknown, defaulting to 1000
[  187.780943][T10413] netlink: 'syz.3.1366': attribute type 29 has an invalid length.
[  187.796652][T10413] netlink: 'syz.3.1366': attribute type 29 has an invalid length.
[  187.814285][T10413] netlink: 'syz.3.1366': attribute type 29 has an invalid length.
[  187.862181][T10420] netlink: 'syz.2.1369': attribute type 29 has an invalid length.
[  187.905266][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'.
[  187.909089][T10425] openvswitch: netlink: Missing key (keys=40, expected=80)
[  187.948762][T10427] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1371'.
[  188.437639][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'.
[  188.441102][T10453] openvswitch: netlink: Missing key (keys=40, expected=80)
[  188.808924][T10465] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  188.860454][T10478] openvswitch: netlink: Key type 1044 is out of range max 32
[  188.939225][T10488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.026122][T10499] netlink: 'syz.3.1396': attribute type 2 has an invalid length.
[  189.031650][T10499] netlink: 'syz.3.1396': attribute type 1 has an invalid length.
[  189.035335][T10499] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1396'.
[  189.039065][T10499] netlink: 125920 bytes leftover after parsing attributes in process `syz.3.1396'.
[  189.042214][T10499] netlink: 'syz.3.1396': attribute type 1 has an invalid length.
[  189.046318][T10499] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1396'.
[  189.065029][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'.
[  189.068055][T10503] openvswitch: netlink: Missing key (keys=40, expected=80)
[  190.301869][T10531] openvswitch: netlink: Missing key (keys=40, expected=80)
[  190.739606][T10563] netlink: zone id is out of range
[  191.565960][T10638] nbd: illegal input index 65540
[  191.656568][T10652] syzkaller0: create flow: hash 1707888846 index 1
[  191.702552][T10650] syzkaller0: delete flow: hash 1707888846 index 1
[  191.902316][T10659] __nla_validate_parse: 8 callbacks suppressed
[  191.902327][T10659] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1438'.
[  192.618407][T10658] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1438'.
[  192.622137][T10658] bond_slave_0: entered promiscuous mode
[  192.624728][T10658] bond_slave_1: entered promiscuous mode
[  192.627164][T10658] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  192.636645][T10664] : entered promiscuous mode
[  192.667425][T10668] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1440'.
[  192.739429][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1442'.
[  192.746011][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'.
[  192.749526][T10678] net_ratelimit: 86 callbacks suppressed
[  192.749534][T10678] openvswitch: netlink: Missing key (keys=40, expected=80)
[  192.751952][T10673] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1442'.
[  192.761479][T10680] validate_nla: 3 callbacks suppressed
[  192.761487][T10680] netlink: 'syz.1.1444': attribute type 3 has an invalid length.
[  192.767172][T10680] netlink: 'syz.1.1444': attribute type 1 has an invalid length.
[  192.770825][T10680] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1444'.
[  192.856716][T10690] netlink: 'syz.1.1449': attribute type 28 has an invalid length.
[  192.859372][T10690] netlink: 'syz.1.1449': attribute type 29 has an invalid length.
[  192.861971][T10690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1449'.
[  192.891717][T10693] netlink: 'syz.1.1450': attribute type 1 has an invalid length.
[  192.953076][T10697] netlink: 'syz.1.1452': attribute type 27 has an invalid length.
[  193.020459][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'.
[  193.184890][T10701] openvswitch: netlink: Key type 1044 is out of range max 32
[  193.259210][T10705] netlink: 'syz.1.1454': attribute type 30 has an invalid length.
[  193.297784][T10709] netlink: 'syz.1.1456': attribute type 29 has an invalid length.
[  193.318245][T10709] netlink: 'syz.1.1456': attribute type 29 has an invalid length.
[  193.442676][T10709] netlink: 'syz.1.1456': attribute type 29 has an invalid length.
[  193.575296][T10718] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode
[  193.578301][T10718] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode
[  194.058374][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.061314][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.166326][T10740] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1466'.
[  194.206926][T10756] lo speed is unknown, defaulting to 1000
[  194.366427][T10756] lo speed is unknown, defaulting to 1000
[  194.669717][T10804] syzkaller0: tun_chr_ioctl cmd 1074025677
[  194.672212][T10804] syzkaller0: linktype set to 801
[  196.560717][T10840] netlink: zone id is out of range
[  196.568224][T10840] netlink: zone id is out of range
[  196.570123][T10840] netlink: zone id is out of range
[  196.571979][T10840] netlink: zone id is out of range
[  196.577887][T10840] netlink: zone id is out of range
[  196.582080][T10840] netlink: zone id is out of range
[  196.588972][T10840] netlink: zone id is out of range
[  196.590872][T10840] netlink: zone id is out of range
[  196.933052][T10861] __nla_validate_parse: 6 callbacks suppressed
[  196.933071][T10861] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1499'.
[  197.694161][T10891] bridge0: port 3(syz_tun) entered blocking state
[  197.697443][T10891] bridge0: port 3(syz_tun) entered disabled state
[  197.700418][T10891] syz_tun: entered allmulticast mode
[  197.713412][T10891] syz_tun: entered promiscuous mode
[  197.722531][T10891] bridge0: port 3(syz_tun) entered blocking state
[  197.725653][T10891] bridge0: port 3(syz_tun) entered forwarding state
[  197.734575][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1507'.
[  197.737644][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1507'.
[  197.820537][T10895] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1507'.
[  197.867041][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'.
[  197.870419][T10905] net_ratelimit: 8 callbacks suppressed
[  197.870426][T10905] openvswitch: netlink: Missing key (keys=40, expected=80)
[  197.900059][T10906] validate_nla: 10 callbacks suppressed
[  197.900074][T10906] netlink: 'syz.1.1510': attribute type 2 has an invalid length.
[  197.945606][T10911] netlink: 'syz.3.1511': attribute type 13 has an invalid length.
[  197.948179][T10911] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1511'.
[  197.958616][T10911] erspan0: refused to change device tx_queue_len
[  197.961043][T10911] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  198.227108][T10928] netlink: 'syz.2.1515': attribute type 10 has an invalid length.
[  198.232629][T10928] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.246977][T10928] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.496143][T10944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1519'.
[  198.922425][T10960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.945480][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  199.127537][T10980] netlink: 'syz.3.1529': attribute type 10 has an invalid length.
[  199.138902][T10980] 8021q: adding VLAN 0 to HW filter on device team0
[  199.143841][T10980] team_slave_0: entered promiscuous mode
[  199.146230][T10980] team_slave_1: entered promiscuous mode
[  199.156976][T10980] bond0: (slave team0): Enslaving as an active interface with an up link
[  199.165867][T10974] netlink: 'syz.3.1529': attribute type 3 has an invalid length.
[  199.168317][T10974] netlink: 'syz.3.1529': attribute type 1 has an invalid length.
[  199.170831][T10974] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1529'.
[  199.570804][T10989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1531'.
[  200.829856][T11016] netlink: 'syz.1.1542': attribute type 29 has an invalid length.
[  200.834027][T11016] netlink: 'syz.1.1542': attribute type 29 has an invalid length.
[  200.839380][T11016] netlink: 'syz.1.1542': attribute type 29 has an invalid length.
[  201.252626][ T5852] Bluetooth: hci0: command 0x0406 tx timeout
[  201.587870][T11083] openvswitch: netlink: Missing key (keys=40, expected=80)
[  201.826408][T11097] netlink: 'syz.3.1572': attribute type 1 has an invalid length.
[  201.925070][T11099] openvswitch: netlink: Missing key (keys=40, expected=80)
[  202.110250][T11104] __nla_validate_parse: 8 callbacks suppressed
[  202.110270][T11104] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1575'.
[  202.111224][T11103] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1575'.
[  202.139941][T11104] .`: renamed from bond0 (while UP)
[  202.147830][T11104] bond_slave_0: left promiscuous mode
[  202.150586][T11104] bond_slave_1: left promiscuous mode
[  202.153902][T11104] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  202.157383][T11104] team_slave_1: left promiscuous mode
[  202.203909][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1577'.
[  202.205833][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'.
[  202.211205][T11108] openvswitch: netlink: Missing key (keys=40, expected=80)
[  202.326584][T11122] openvswitch: netlink: Key type 1044 is out of range max 32
[  202.555918][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'.
[  202.560544][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'.
[  203.277805][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1585'.
[  203.285143][T11134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1585'.
[  203.368966][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'.
[  203.371957][T11139] openvswitch: netlink: Missing key (keys=40, expected=80)
[  203.764873][T11147] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1589'.
[  203.771714][ T5847] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  203.900532][T11159] openvswitch: netlink: Key type 1044 is out of range max 32
[  203.947263][T11162] openvswitch: netlink: Missing key (keys=40, expected=80)
[  204.451702][T11213] openvswitch: netlink: Missing key (keys=40, expected=80)
[  204.612960][T11222] netlink: 'syz.2.1620': attribute type 11 has an invalid length.
[  205.522968][T11272] netlink: zone id is out of range
[  205.524760][T11272] netlink: zone id is out of range
[  205.526473][T11272] netlink: get zone limit has 8 unknown bytes
[  205.769622][T11294] validate_nla: 5 callbacks suppressed
[  205.769638][T11294] netlink: 'syz.2.1647': attribute type 2 has an invalid length.
[  206.378912][T11323] mac80211_hwsim hwsim3 O3c: renamed from wlan1 (while UP)
[  207.547885][T11348] __nla_validate_parse: 10 callbacks suppressed
[  207.547902][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'.
[  207.558754][T11348] openvswitch: netlink: Missing key (keys=40, expected=80)
[  207.607881][T11350] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1666'.
[  207.931042][T11373] netlink: 'syz.1.1672': attribute type 2 has an invalid length.
[  207.934653][T11373] netlink: 'syz.1.1672': attribute type 2 has an invalid length.
[  207.937979][T11373] netlink: 'syz.1.1672': attribute type 2 has an invalid length.
[  207.941211][T11373] netlink: 'syz.1.1672': attribute type 2 has an invalid length.
[  207.947067][T11373] netlink: 'syz.1.1672': attribute type 2 has an invalid length.
[  207.950961][T11373] netlink: 'syz.1.1672': attribute type 2 has an invalid length.
[  207.999748][T11378] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1674'.
[  208.230514][T11391] macsec0: entered promiscuous mode
[  208.234809][T11391] macsec0: entered allmulticast mode
[  208.362202][T11398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.575766][ T5847] Bluetooth: hci0: ISO packet for unknown connection handle 3868
[  208.622782][T11407] netlink: 'syz.2.1683': attribute type 29 has an invalid length.
[  208.626876][T11407] netlink: 'syz.2.1683': attribute type 29 has an invalid length.
[  208.827338][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'.
[  208.831324][T11416] openvswitch: netlink: Missing key (keys=40, expected=80)
[  209.125466][T11420] openvswitch: netlink: Key type 1044 is out of range max 32
[  209.239499][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'.
[  209.243338][T11424] openvswitch: netlink: Missing key (keys=40, expected=80)
[  209.478441][T11442] netlink: 'syz.3.1695': attribute type 22 has an invalid length.
[  209.481080][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'.
[  209.825255][T11460] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1702'.
[  209.849488][T11460] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1702'.
[  209.862543][T11460] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1702'.
[  209.869841][T11460] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1702'.
[  211.166220][T11506] netlink: 'syz.2.1717': attribute type 11 has an invalid length.
[  211.561961][T11540] netlink: zone id is out of range
[  211.586802][T11540] netlink: zone id is out of range
[  211.590007][T11540] netlink: zone id is out of range
[  211.654484][T11540] netlink: zone id is out of range
[  211.656910][T11540] netlink: zone id is out of range
[  211.658737][T11540] netlink: zone id is out of range
[  211.660508][T11540] netlink: zone id is out of range
[  211.688680][T11544] C: renamed from team_slave_0
[  211.719426][T11550] netlink: 'syz.2.1730': attribute type 11 has an invalid length.
[  211.734347][T11544] validate_nla: 4 callbacks suppressed
[  211.734406][T11544] netlink: 'syz.3.1727': attribute type 3 has an invalid length.
[  212.644108][T11606] netlink: 'syz.1.1751': attribute type 29 has an invalid length.
[  212.647327][T11606] netlink: 'syz.1.1751': attribute type 29 has an invalid length.
[  212.651336][T11606] netlink: 'syz.1.1751': attribute type 29 has an invalid length.
[  212.736068][T11608] netlink: 'syz.3.1750': attribute type 2 has an invalid length.
[  212.792907][T11612] __nla_validate_parse: 16 callbacks suppressed
[  212.792925][T11612] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1752'.
[  212.801830][T11612] hsr_slave_0: left promiscuous mode
[  212.805846][T11612] hsr_slave_1: left promiscuous mode
[  213.504825][T11617] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1754'.
[  213.658341][T11635] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1758'.
[  213.975777][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1761'.
[  213.980775][T11642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1761'.
[  213.985254][T11643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1761'.
[  214.150700][T11645] netlink: 'syz.3.1762': attribute type 2 has an invalid length.
[  214.157060][T11645] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1762'.
[  214.736758][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1770'.
[  214.835075][T11666] netlink: 'syz.1.1772': attribute type 13 has an invalid length.
[  214.837815][T11666] netlink: 'syz.1.1772': attribute type 17 has an invalid length.
[  214.841979][T11666] lo: left allmulticast mode
[  214.897260][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1773'.
[  214.936294][T11666] sit0: left promiscuous mode
[  214.938933][T11666] sit0: left allmulticast mode
[  214.998684][T11666] net_ratelimit: 73 callbacks suppressed
[  214.998753][T11666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.007895][ T5907] lo speed is unknown, defaulting to 1000
[  215.010111][ T5907] syz1: Port: 1 Link ACTIVE
[  215.023483][ T5907] lo speed is unknown, defaulting to 1000
[  215.124306][T11674] netlink: 'syz.3.1774': attribute type 10 has an invalid length.
[  215.127327][T11674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1774'.
[  215.132001][T11674] ipvlan1: entered promiscuous mode
[  215.136728][T11674] ipvlan1: entered allmulticast mode
[  215.139118][T11674] veth0_vlan: entered allmulticast mode
[  215.205073][T11674] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  215.541596][T11705] netlink: 'syz.2.1786': attribute type 10 has an invalid length.
[  215.548102][T11705] bridge0: port 3(ipvlan1) entered blocking state
[  215.551591][T11705] bridge0: port 3(ipvlan1) entered disabled state
[  215.556907][T11705] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  215.608375][T11709] : entered promiscuous mode
[  215.851254][T11725] openvswitch: netlink: Missing key (keys=40, expected=80)
[  215.861257][T11725] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  217.137207][T11787] validate_nla: 1 callbacks suppressed
[  217.137275][T11787] netlink: 'syz.2.1813': attribute type 10 has an invalid length.
[  217.560219][T11806] netlink: 'syz.2.1820': attribute type 1 has an invalid length.
[  217.766651][T11862] GPL: port 1(gretap0) entered blocking state
[  217.769341][T11862] GPL: port 1(gretap0) entered disabled state
[  217.771870][T11862] gretap0: entered allmulticast mode
[  217.778998][T11862] gretap0: entered promiscuous mode
[  217.893329][T11872] ref_ctr_offset mismatch. inode: 0xc19 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  218.076119][T11882] openvswitch: netlink: IP tunnel dst address not specified
[  220.946184][T11926] netlink: 'syz.1.1833': attribute type 4 has an invalid length.
[  221.081882][T11934] __nla_validate_parse: 12 callbacks suppressed
[  221.081894][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1834'.
[  221.088992][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1834'.
[  221.307055][T11952] lo speed is unknown, defaulting to 1000
[  221.416869][T11966] netlink: 'syz.1.1844': attribute type 29 has an invalid length.
[  221.420024][T11966] netlink: 'syz.1.1844': attribute type 29 has an invalid length.
[  221.423230][T11966] netlink: 'syz.1.1844': attribute type 29 has an invalid length.
[  221.480147][T11952] lo speed is unknown, defaulting to 1000
[  221.756730][T11976] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1847'.
[  223.305244][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'.
[  223.409881][T12036] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1864'.
[  223.628525][T12054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.480693][T12074] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1874'.
[  225.620790][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'.
[  225.675858][T12113] netlink: 'syz.1.1886': attribute type 4 has an invalid length.
[  225.864847][T12127] netlink: 'syz.2.1892': attribute type 10 has an invalid length.
[  225.868059][T12127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1892'.
[  225.871761][T12127] batadv0: entered promiscuous mode
[  225.880685][T12127] batadv0: entered allmulticast mode
[  225.884036][T12127] bridge0: port 3(batadv0) entered blocking state
[  225.887116][T12127] bridge0: port 3(batadv0) entered disabled state
[  226.023207][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  226.026926][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  226.048747][T12134] netlink: 'syz.2.1895': attribute type 4 has an invalid length.
[  226.127543][T12146] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1897'.
[  226.289853][T12155] netlink: 'syz.1.1899': attribute type 2 has an invalid length.
[  226.301631][T12155] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1899'.
[  226.391804][T12167] netlink: 'syz.2.1904': attribute type 4 has an invalid length.
[  226.425220][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'.
[  226.431880][T12168] netlink: 'syz.3.1905': attribute type 21 has an invalid length.
[  226.434844][T12168] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1905'.
[  226.438931][T12168] netlink: 'syz.3.1905': attribute type 4 has an invalid length.
[  226.442253][T12168] netlink: 'syz.3.1905': attribute type 5 has an invalid length.
[  226.455920][T12168] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1905'.
[  226.561749][T12182] netlink: 'syz.3.1911': attribute type 4 has an invalid length.
[  226.568037][T12182] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1911'.
[  226.627292][T12188] netlink: 'syz.3.1913': attribute type 4 has an invalid length.
[  226.839402][T12205] sit0: entered promiscuous mode
[  227.160839][T12218] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  228.051750][T12237] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1930'.
[  229.120817][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1935'.
[  229.124276][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1935'.
[  229.304581][T12252] lo speed is unknown, defaulting to 1000
[  229.775024][T12252] lo speed is unknown, defaulting to 1000
[  230.228927][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1948'.
[  230.811497][T12326] validate_nla: 5 callbacks suppressed
[  230.811512][T12326] netlink: 'syz.3.1955': attribute type 10 has an invalid length.
[  231.488048][T12359] __nla_validate_parse: 3 callbacks suppressed
[  231.488059][T12359] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1965'.
[  231.516892][T12364] netlink: 'syz.1.1967': attribute type 10 has an invalid length.
[  231.519964][T12364] lo: entered promiscuous mode
[  231.526410][T12364] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  231.530361][ T5897] lo speed is unknown, defaulting to 1000
[  231.532804][ T5897] syz1: Port: 1 Link DOWN
[  231.534909][ T5897] lo speed is unknown, defaulting to 1000
[  231.640495][T12374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1969'.
[  231.934319][T12388] netlink: 'syz.3.1975': attribute type 21 has an invalid length.
[  232.841063][T12398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1979'.
[  233.334449][T12423] netlink: 'syz.2.1986': attribute type 4 has an invalid length.
[  233.970973][T12438] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1990'.
[  234.310003][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'.
[  235.095620][T12486] netlink: 'syz.1.2006': attribute type 21 has an invalid length.
[  235.189053][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'.
[  235.203699][T12492] netlink: 'syz.1.2009': attribute type 21 has an invalid length.
[  235.419115][T12505] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2015'.
[  235.424803][T12505] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2015'.
[  235.614023][T12514] netlink: 'syz.2.2018': attribute type 27 has an invalid length.
[  235.617295][T12514] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2018'.
[  235.621476][T12514] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  235.819507][T12520] netlink: 51563 bytes leftover after parsing attributes in process `syz.2.2019'.
[  236.331307][T12530] netlink: 'syz.2.2022': attribute type 4 has an invalid length.
[  237.361398][T12566] __nla_validate_parse: 2 callbacks suppressed
[  237.361409][T12566] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2034'.
[  237.685744][T12595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2036'.
[  238.115976][T12607] netlink: 'syz.1.2045': attribute type 4 has an invalid length.
[  238.286549][T12615] syzkaller0: entered promiscuous mode
[  238.288663][T12615] syzkaller0: entered allmulticast mode
[  238.369528][T12622] netlink: 'syz.3.2047': attribute type 10 has an invalid length.
[  239.416284][T12641] netlink: 'syz.1.2055': attribute type 13 has an invalid length.
[  239.419831][T12641] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2055'.
[  239.577047][T12641] erspan0: refused to change device tx_queue_len
[  239.579177][T12641] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  239.660606][T12648] netlink: 'syz.1.2057': attribute type 4 has an invalid length.
[  239.780777][T12662] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2063'.
[  239.800312][T12665] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2064'.
[  240.570577][T12671] syzkaller0: entered promiscuous mode
[  240.573768][T12671] syzkaller0: entered allmulticast mode
[  240.577213][T12671] netlink: 'syz.2.2067': attribute type 2 has an invalid length.
[  240.617661][T12678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2070'.
[  240.631042][T12678] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.651209][T12678] bridge_slave_0 (unregistering): left allmulticast mode
[  240.653724][T12678] bridge_slave_0 (unregistering): left promiscuous mode
[  240.656280][T12678] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.679485][T12682] netlink: 'syz.1.2070': attribute type 10 has an invalid length.
[  240.944727][T12688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.167294][T12701] netlink: 'syz.3.2079': attribute type 1 has an invalid length.
[  241.170726][T12701] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2079'.
[  241.177777][T12701] netlink: 125920 bytes leftover after parsing attributes in process `syz.3.2079'.
[  241.181813][T12701] netlink: 'syz.3.2079': attribute type 1 has an invalid length.
[  241.185482][T12701] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2079'.
[  241.231695][T12705] netlink: 'syz.3.2081': attribute type 4 has an invalid length.
[  241.355424][T12711] netlink: 'syz.3.2083': attribute type 21 has an invalid length.
[  241.358288][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'.
[  241.652063][T12728] netlink: 'syz.1.2088': attribute type 2 has an invalid length.
[  241.687978][T12732] netlink: 'syz.3.2090': attribute type 21 has an invalid length.
[  241.906991][T12741] netlink: 'syz.1.2093': attribute type 41 has an invalid length.
[  242.033048][ T5847] Bluetooth: hci1: ISO packet for unknown connection handle 55
[  242.334169][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.387291][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.467779][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.553670][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.624217][T12764] __nla_validate_parse: 3 callbacks suppressed
[  242.624233][T12764] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2101'.
[  242.667677][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  242.671767][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  242.678146][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  242.682211][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  242.688194][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  242.739223][   T13] bridge0: port 3(batadv0) entered disabled state
[  242.749434][   T13] bridge_slave_1: left allmulticast mode
[  242.751820][   T13] bridge_slave_1: left promiscuous mode
[  242.762646][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.773229][   T13] bridge_slave_0: left allmulticast mode
[  242.778842][   T13] bridge_slave_0: left promiscuous mode
[  242.780785][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.942033][T12789] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2106'.
[  242.945854][T12789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2106'.
[  243.164471][T12766] lo speed is unknown, defaulting to 1000
[  243.219413][   T13] : left promiscuous mode
[  243.325205][T12766] lo speed is unknown, defaulting to 1000
[  243.461523][T12808] openvswitch: netlink: Flow actions attr not present in new flow.
[  243.558029][T12766] chnl_net:caif_netlink_parms(): no params data found
[  243.662228][T12766] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.666752][T12766] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.669333][T12766] bridge_slave_0: entered allmulticast mode
[  243.672470][T12766] bridge_slave_0: entered promiscuous mode
[  243.694809][T12766] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.697304][T12766] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.700275][T12766] bridge_slave_1: entered allmulticast mode
[  243.704123][T12766] bridge_slave_1: entered promiscuous mode
[  243.727139][T12766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.731864][T12766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.776413][T12766] team0: Port device team_slave_0 added
[  243.797559][T12766] team0: Port device team_slave_1 added
[  243.837910][T12766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.850900][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.872436][T12766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.880864][T12766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.885842][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.895642][T12766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.033960][   T13] hsr_slave_1: left promiscuous mode
[  244.036858][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.040009][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.049412][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.052729][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.064874][   T13] veth0_macvtap: left promiscuous mode
[  244.067552][   T13] veth0_vlan: left promiscuous mode
[  244.424198][   T13] team0 (unregistering): Port device team_slave_1 removed
[  244.450115][   T13] team0 (unregistering): Port device C removed
[  244.748136][T12766] hsr_slave_0: entered promiscuous mode
[  244.751314][T12766] hsr_slave_1: entered promiscuous mode
[  244.772772][ T5852] Bluetooth: hci2: command tx timeout
[  244.795882][  T792] infiniband syz0: ib_query_port failed (-19)
[  244.798584][ T5897] lo speed is unknown, defaulting to 1000
[  244.813868][T12833] netlink: 'syz.3.2113': attribute type 10 has an invalid length.
[  244.819049][T12832] netlink: 'syz.3.2113': attribute type 10 has an invalid length.
[  244.822585][ T5897] infiniband syz2: ib_query_port failed (-19)
[  244.851846][T12833] mac80211_hwsim hwsim11 : left promiscuous mode
[  244.870283][T12833] mac80211_hwsim hwsim11 : left allmulticast mode
[  245.179440][T12857] openvswitch: netlink: Key type 1044 is out of range max 32
[  245.468805][T12864] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2118'.
[  245.821006][T12766] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  245.827291][T12766] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  245.841210][T12766] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  245.852957][T12766] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  245.981287][T12766] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.009980][T12766] 8021q: adding VLAN 0 to HW filter on device team0
[  246.017491][T10030] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.020285][T10030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.034294][T10030] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.036730][T10030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.305886][T12766] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.381115][T12766] veth0_vlan: entered promiscuous mode
[  246.397441][T12766] veth1_vlan: entered promiscuous mode
[  246.407230][T12903] netlink: 'syz.1.2122': attribute type 13 has an invalid length.
[  246.516591][T12913] netlink: 'syz.3.2124': attribute type 4 has an invalid length.
[  246.530395][T12903] bridge0: port 3(syz_tun) entered disabled state
[  246.552272][T12903] !: left promiscuous mode
[  246.558976][T12903] bond_slave_1: left promiscuous mode
[  246.605628][T12917] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2124'.
[  246.677701][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.689358][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.830473][T12917] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2124'.
[  246.840947][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.845167][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.853019][ T5852] Bluetooth: hci2: command tx timeout
[  246.860154][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.865721][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.870339][T12766] veth0_macvtap: entered promiscuous mode
[  246.878644][T12766] veth1_macvtap: entered promiscuous mode
[  246.894918][T12766] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.906335][T12766] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.921283][ T8247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.927319][ T8247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.932350][ T8247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.941300][ T8247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.000927][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.007077][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.026651][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.030030][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.381818][T12942] netlink: 'syz.1.2130': attribute type 29 has an invalid length.
[  247.382989][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'.
[  247.388593][T12943] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  247.391966][T12943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.595825][T12955] netlink: 'syz.3.2134': attribute type 3 has an invalid length.
[  247.598514][T12955] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2134'.
[  247.670712][T12964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2136'.
[  247.670729][T12963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2136'.
[  247.695122][T12966] netlink: 'syz.2.2137': attribute type 13 has an invalid length.
[  247.703197][T12966] netlink: 'syz.2.2137': attribute type 3 has an invalid length.
[  247.705903][T12966] netlink: 'syz.2.2137': attribute type 1 has an invalid length.
[  247.708906][T12966] netlink: 201352 bytes leftover after parsing attributes in process `syz.2.2137'.
[  247.718281][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'.
[  247.844397][T12981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2143'.
[  247.985561][T12991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2147'.
[  248.017995][T12996] netlink: 'syz.2.2146': attribute type 21 has an invalid length.
[  248.246604][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'.
[  248.405838][T13000] netlink: 'syz.3.2149': attribute type 6 has an invalid length.
[  248.408701][T13000] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2149'.
[  248.935534][ T5852] Bluetooth: hci2: command tx timeout
[  249.224246][T13044] netlink: 'syz.3.2160': attribute type 39 has an invalid length.
[  249.589742][T13074] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2171'.
[  249.595869][T13074] netlink: zone id is out of range
[  249.598187][T13074] netlink: zone id is out of range
[  249.600569][T13074] netlink: zone id is out of range
[  249.603583][T13074] netlink: zone id is out of range
[  249.605873][T13074] netlink: zone id is out of range
[  249.608133][T13074] netlink: zone id is out of range
[  249.610418][T13074] netlink: zone id is out of range
[  249.613156][T13074] netlink: zone id is out of range
[  249.870229][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'.
[  251.012701][ T5852] Bluetooth: hci2: command tx timeout
[  251.670863][T13142] validate_nla: 4 callbacks suppressed
[  251.670880][T13142] netlink: 'syz.1.2191': attribute type 27 has an invalid length.
[  251.692511][T13142] netlink: 'syz.1.2191': attribute type 3 has an invalid length.
[  251.751711][T13148] netlink: 'syz.1.2192': attribute type 21 has an invalid length.
[  252.016691][T13161] netlink: 'syz.1.2196': attribute type 13 has an invalid length.
[  252.758023][T13189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.777537][T13189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.795488][T13189] bond0 (unregistering): Released all slaves
[  253.241367][T13217] __nla_validate_parse: 7 callbacks suppressed
[  253.241431][T13217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2211'.
[  253.267844][T13217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2211'.
[  253.280910][T13217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2211'.
[  253.592579][T13232] xt_time: invalid argument - start or stop time greater than 23:59:59
[  253.895869][T13249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2220'.
[  253.909630][T13249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2220'.
[  253.989430][T13255] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.2221'.
[  254.222914][T13264] netlink: 'syz.3.2224': attribute type 2 has an invalid length.
[  254.688871][T13273] tun0: tun_chr_ioctl cmd 1074025675
[  254.691174][T13273] tun0: persist enabled
[  254.697355][T13270] tun0: tun_chr_ioctl cmd 1074025675
[  254.700003][T13270] tun0: persist disabled
[  255.238096][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2230'.
[  255.369072][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2234'.
[  255.373353][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2234'.
[  255.379048][T13299] netlink: 'syz.3.2234': attribute type 3 has an invalid length.
[  255.388053][T13299] netlink: 'syz.3.2234': attribute type 1 has an invalid length.
[  255.391482][T13299] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2234'.
[  255.511014][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.514311][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.560562][T13313] net_ratelimit: 79 callbacks suppressed
[  255.560578][T13313] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  255.952507][T13332] netlink: 'syz.1.2246': attribute type 23 has an invalid length.
[  256.095559][T13347] IPv6: NLM_F_CREATE should be specified when creating new route
[  256.303329][T13354] C: renamed from team_slave_0 (while UP)
[  256.325079][T13354] netlink: 'syz.2.2253': attribute type 3 has an invalid length.
[  256.328279][T13354] netlink: 'syz.2.2253': attribute type 1 has an invalid length.
[  256.489747][T13363] lo speed is unknown, defaulting to 1000
[  256.715283][T13372] hsr_slave_0: left promiscuous mode
[  256.719144][T13372] hsr_slave_1: left promiscuous mode
[  256.767056][T13375] netlink: 'syz.3.2258': attribute type 41 has an invalid length.
[  257.510448][T13430] netlink: 'syz.3.2276': attribute type 3 has an invalid length.
[  257.916698][T13443] sctp: [Deprecated]: syz.3.2280 (pid 13443) Use of int in max_burst socket option deprecated.
[  257.916698][T13443] Use struct sctp_assoc_value instead
[  258.114897][T13447] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  258.120957][T13447] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  258.127397][T13447] .` (unregistering): (slave ): Releasing backup interface
[  258.130966][T13447] .` (unregistering): (slave team0): Releasing backup interface
[  258.138774][T13447] .` (unregistering): Released all slaves
[  258.283902][T13454] __nla_validate_parse: 12 callbacks suppressed
[  258.283912][T13454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2282'.
[  258.297742][T13447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2282'.
[  258.305479][T13454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2282'.
[  258.460770][T13476] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2289'.
[  258.470533][T13476] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2289'.
[  258.477319][T13469] sit0: entered allmulticast mode
[  258.480168][T13469] sit0: entered promiscuous mode
[  258.707990][T13487] netlink: 'syz.2.2293': attribute type 21 has an invalid length.
[  258.967196][T13511] netlink: 'syz.2.2301': attribute type 21 has an invalid length.
[  258.970232][T13511] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2301'.
[  259.052062][T13526] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2305'.
[  259.163054][T13526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2305'.
[  259.177563][T13526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.186525][T13532] @: renamed from bond_slave_0
[  259.921061][T13562] netlink: 'syz.3.2318': attribute type 41 has an invalid length.
[  259.925543][T13562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2318'.
[  260.067565][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'.
[  260.374566][T13577] netlink: 'syz.2.2323': attribute type 29 has an invalid length.
[  260.403945][T13577] netlink: 'syz.2.2323': attribute type 29 has an invalid length.
[  262.675101][T13642] netlink: 'syz.1.2341': attribute type 2 has an invalid length.
[  262.677865][T13642] nbd: must specify a device to reconfigure
[  263.914165][T13667] netlink: 'syz.1.2348': attribute type 10 has an invalid length.
[  263.917568][T13667] __nla_validate_parse: 8 callbacks suppressed
[  263.917581][T13667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2348'.
[  263.925562][T13667] lo: left promiscuous mode
[  263.929468][T13667] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  263.934396][T13667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.940646][ T5897] lo speed is unknown, defaulting to 1000
[  263.944822][ T5897] syz1: Port: 1 Link ACTIVE
[  263.948605][ T5897] lo speed is unknown, defaulting to 1000
[  264.003542][T13671] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.006888][T13671] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.760222][T13681] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.2352'.
[  264.874572][T13683] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2352'.
[  265.250412][T13687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.658295][T13692] netlink: 'syz.2.2355': attribute type 4 has an invalid length.
[  266.272041][   T33] audit: type=1107 audit(1755613541.261:3): pid=13705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='r`jS6@]%#TQQ^pvb]4gw2o-@V<g*lTQ}t@T9[57y@*C+4g @ͅmwXb<?Q_(/)Z3:pH)]y'
[  266.353536][T13710] netlink: 'syz.2.2362': attribute type 1 has an invalid length.
[  266.356741][T13710] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2362'.
[  266.361963][T13710] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2362'.
[  266.366441][T13710] netlink: zone id is out of range
[  266.368807][T13710] netlink: get zone limit has 8 unknown bytes
[  266.496055][T13720] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2363'.
[  266.588452][T13720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2363'.
[  266.829491][T13733] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2366'.
[  266.833897][T13733] netlink: zone id is out of range
[  266.836143][T13733] netlink: zone id is out of range
[  266.838393][T13733] netlink: zone id is out of range
[  266.840815][T13733] netlink: zone id is out of range
[  266.844989][T13733] netlink: zone id is out of range
[  266.847270][T13733] netlink: zone id is out of range
[  267.218724][T13735] netlink: 'syz.2.2367': attribute type 4 has an invalid length.
[  268.201291][T13767] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2376'.
[  268.679344][T13780] netlink: 'syz.1.2379': attribute type 23 has an invalid length.
[  268.889170][T13791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2381'.
[  269.059660][T13794] netlink: 'syz.2.2382': attribute type 4 has an invalid length.
[  269.103870][T13790] netlink: 'syz.1.2381': attribute type 4 has an invalid length.
[  269.721232][T13817] netlink: 'syz.2.2389': attribute type 4 has an invalid length.
[  269.833981][T13839] netlink: 'syz.2.2395': attribute type 10 has an invalid length.
[  269.849598][T13839] geneve0: entered promiscuous mode
[  269.919364][T13841] syzkaller0: entered promiscuous mode
[  269.921311][T13841] syzkaller0: entered allmulticast mode
[  269.967009][T13852] netlink: 'syz.3.2399': attribute type 21 has an invalid length.
[  271.059937][T13855] netlink: 'syz.2.2400': attribute type 4 has an invalid length.
[  271.139055][T13866] net_ratelimit: 18 callbacks suppressed
[  271.139073][T13866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.442576][T13879] netlink: 'syz.1.2410': attribute type 4 has an invalid length.
[  271.490858][T13888] __nla_validate_parse: 4 callbacks suppressed
[  271.490867][T13888] netlink: 495 bytes leftover after parsing attributes in process `syz.1.2413'.
[  271.500489][T13889] netlink: 495 bytes leftover after parsing attributes in process `syz.1.2413'.
[  272.022624][T13904] netlink: 'syz.2.2419': attribute type 4 has an invalid length.
[  272.292437][T13924] openvswitch: netlink: Key type 1044 is out of range max 32
[  272.439530][T13930] netlink: 'syz.3.2428': attribute type 4 has an invalid length.
[  273.206938][T13946] openvswitch: netlink: Key type 1044 is out of range max 32
[  273.489264][T13957] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  273.593215][T13965] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2437'.
[  273.854208][T13980] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2444'.
[  273.963109][T13978] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode
[  273.966159][T13978] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode
[  274.324947][T14004] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.328837][T14004] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.424545][T14012] validate_nla: 2 callbacks suppressed
[  274.424561][T14012] netlink: 'syz.2.2452': attribute type 25 has an invalid length.
[  274.580743][T14018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2457'.
[  275.527528][T14035] netlink: 'syz.2.2460': attribute type 1 has an invalid length.
[  275.727665][T14042] netlink: 'syz.3.2463': attribute type 10 has an invalid length.
[  275.730505][T14042] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2463'.
[  275.834913][T14053] netlink: 'syz.1.2465': attribute type 3 has an invalid length.
[  275.840682][T14053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2465'.
[  275.996659][T14060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2467'.
[  276.000005][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2467'.
[  276.057365][T14069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.085275][ T5873] syzkaller0: tun_net_xmit 76
[  276.087465][ T5873] syzkaller0: tun_net_xmit 48
[  276.087840][T14069] syzkaller0: create flow: hash 1707888846 index 1
[  276.109066][T14069] syzkaller0: delete flow: hash 1707888846 index 1
[  276.263828][T14079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.198986][T14112] netlink: 'syz.3.2485': attribute type 33 has an invalid length.
[  277.202233][T14112] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2485'.
[  277.334484][T14130] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.2491'.
[  277.338202][T14130] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.2491'.
[  277.342348][T14130] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.2491'.
[  277.551501][T14144] lo: entered allmulticast mode
[  277.717651][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'.
[  277.721820][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'.
[  277.726447][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'.
[  277.730357][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'.
[  277.736162][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'.
[  277.739946][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'.
[  277.992180][T14157] netlink: 'syz.1.2501': attribute type 13 has an invalid length.
[  277.995553][T14157] netlink: 'syz.1.2501': attribute type 17 has an invalid length.
[  278.101287][T14157] sit0: left promiscuous mode
[  278.115350][T14157] sit0: left allmulticast mode
[  278.207923][T14157] bridge0: port 3(syz_tun) entered blocking state
[  278.211768][T14157] bridge0: port 3(syz_tun) entered forwarding state
[  278.265410][T14157] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.275742][T14157] 8021q: adding VLAN 0 to HW filter on device team0
[  278.277909][T14164] netlink: 'syz.3.2504': attribute type 2 has an invalid length.
[  278.322201][T14157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.477632][T14178] openvswitch: netlink: Key type 1044 is out of range max 32
[  279.489669][T14217] netlink: 'syz.3.2523': attribute type 21 has an invalid length.
[  279.497287][T14217] netlink: 'syz.3.2523': attribute type 7 has an invalid length.
[  279.659101][T14221] netlink: 'syz.3.2525': attribute type 4 has an invalid length.
[  280.051798][T14266] netlink: 'syz.1.2528': attribute type 6 has an invalid length.
[  280.092308][T14225] cgroup: fork rejected by pids controller in /syz3
[  280.678996][T14378] netlink: 'syz.2.2530': attribute type 1 has an invalid length.
[  280.973525][T14403] ==================================================================
[  280.977092][T14403] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  280.980563][T14403] Read of size 2 at addr ffff88802042c142 by task syz.1.2538/14403
[  280.984925][T14403] 
[  280.985993][T14403] CPU: 1 UID: 0 PID: 14403 Comm: syz.1.2538 Not tainted syzkaller #0 PREEMPT(full) 
[  280.986011][T14403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.986019][T14403] Call Trace:
[  280.986026][T14403]  <TASK>
[  280.986032][T14403]  dump_stack_lvl+0x189/0x250
[  280.986052][T14403]  ? __kasan_check_byte+0x12/0x40
[  280.986072][T14403]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.986087][T14403]  ? lock_release+0x4b/0x3e0
[  280.986106][T14403]  ? __virt_addr_valid+0x4a5/0x5c0
[  280.986121][T14403]  print_report+0xca/0x240
[  280.986133][T14403]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  280.986151][T14403]  kasan_report+0x118/0x150
[  280.986166][T14403]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  280.986184][T14403]  __xfrm_state_lookup+0x6ad/0x8d0
[  280.986201][T14403]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  280.986218][T14403]  xfrm_state_add+0x27d/0xc40
[  280.986229][T14403]  xfrm_add_sa+0x35a1/0x4070
[  280.986242][T14403]  ? __pfx_xfrm_add_sa+0x10/0x10
[  280.986253][T14403]  ? apparmor_capable+0x137/0x1b0
[  280.986268][T14403]  ? __nla_parse+0x40/0x60
[  280.986287][T14403]  xfrm_user_rcv_msg+0x7a3/0xab0
[  280.986302][T14403]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  280.986324][T14403]  ? __pfx___mutex_trylock_common+0x10/0x10
[  280.986338][T14403]  ? rcu_is_watching+0x15/0xb0
[  280.986351][T14403]  ? trace_contention_end+0x39/0x120
[  280.986362][T14403]  ? __mutex_lock+0x335/0x1360
[  280.986382][T14403]  netlink_rcv_skb+0x208/0x470
[  280.986401][T14403]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  280.986417][T14403]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.986439][T14403]  ? netlink_deliver_tap+0x2e/0x1b0
[  280.986458][T14403]  ? netlink_deliver_tap+0x2e/0x1b0
[  280.986474][T14403]  xfrm_netlink_rcv+0x79/0x90
[  280.986488][T14403]  netlink_unicast+0x82f/0x9e0
[  280.986506][T14403]  ? __pfx_netlink_unicast+0x10/0x10
[  280.986521][T14403]  ? netlink_sendmsg+0x642/0xb30
[  280.986568][T14403]  ? skb_put+0x11b/0x210
[  280.986588][T14403]  netlink_sendmsg+0x805/0xb30
[  280.986609][T14403]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.986625][T14403]  ? aa_sock_msg_perm+0xf1/0x1d0
[  280.986643][T14403]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.986656][T14403]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.986673][T14403]  __sock_sendmsg+0x21c/0x270
[  280.986689][T14403]  ____sys_sendmsg+0x505/0x830
[  280.986702][T14403]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.986716][T14403]  ? import_iovec+0x74/0xa0
[  280.986731][T14403]  ___sys_sendmsg+0x21f/0x2a0
[  280.986744][T14403]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.986766][T14403]  ? __fget_files+0x2a/0x420
[  280.986776][T14403]  ? __fget_files+0x3a0/0x420
[  280.986790][T14403]  __x64_sys_sendmsg+0x19b/0x260
[  280.986802][T14403]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.986819][T14403]  ? do_syscall_64+0xbe/0x3b0
[  280.986837][T14403]  do_syscall_64+0xfa/0x3b0
[  280.986853][T14403]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.986868][T14403]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.986889][T14403]  ? exc_page_fault+0x9f/0xf0
[  280.986904][T14403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.986916][T14403] RIP: 0033:0x7f9fc3b8ebe9
[  280.986929][T14403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.986941][T14403] RSP: 002b:00007f9fc49bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.986957][T14403] RAX: ffffffffffffffda RBX: 00007f9fc3db5fa0 RCX: 00007f9fc3b8ebe9
[  280.986966][T14403] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  280.986976][T14403] RBP: 00007f9fc3c11e19 R08: 0000000000000000 R09: 0000000000000000
[  280.986984][T14403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.986992][T14403] R13: 00007f9fc3db6038 R14: 00007f9fc3db5fa0 R15: 00007ffefc5bf3c8
[  280.987007][T14403]  </TASK>
[  280.987012][T14403] 
[  281.141819][T14403] Allocated by task 14087:
[  281.143790][T14403]  kasan_save_track+0x3e/0x80
[  281.145848][T14403]  __kasan_slab_alloc+0x6c/0x80
[  281.147943][T14403]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  281.150288][T14403]  xfrm_state_alloc+0x24/0x2f0
[  281.152363][T14403]  xfrm_add_sa+0x17d1/0x4070
[  281.154338][T14403]  xfrm_user_rcv_msg+0x7a3/0xab0
[  281.156486][T14403]  netlink_rcv_skb+0x208/0x470
[  281.158385][T14403]  xfrm_netlink_rcv+0x79/0x90
[  281.160318][T14403]  netlink_unicast+0x82f/0x9e0
[  281.162306][T14403]  netlink_sendmsg+0x805/0xb30
[  281.164459][T14403]  __sock_sendmsg+0x21c/0x270
[  281.166440][T14403]  ____sys_sendmsg+0x505/0x830
[  281.168418][T14403]  ___sys_sendmsg+0x21f/0x2a0
[  281.170352][T14403]  __x64_sys_sendmsg+0x19b/0x260
[  281.172448][T14403]  do_syscall_64+0xfa/0x3b0
[  281.174382][T14403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.176834][T14403] 
[  281.177738][T14403] Freed by task 5907:
[  281.179033][T14403]  kasan_save_track+0x3e/0x80
[  281.180698][T14403]  kasan_save_free_info+0x46/0x50
[  281.182709][T14403]  __kasan_slab_free+0x5b/0x80
[  281.184458][T14403]  kmem_cache_free+0x18f/0x400
[  281.186068][T14403]  xfrm_state_gc_task+0x52d/0x6b0
[  281.187753][T14403]  process_scheduled_works+0xae1/0x17b0
[  281.189742][T14403]  worker_thread+0x8a0/0xda0
[  281.191271][T14403]  kthread+0x711/0x8a0
[  281.192654][T14403]  ret_from_fork+0x3fc/0x770
[  281.194136][T14403]  ret_from_fork_asm+0x1a/0x30
[  281.195789][T14403] 
[  281.196588][T14403] The buggy address belongs to the object at ffff88802042c000
[  281.196588][T14403]  which belongs to the cache xfrm_state of size 928
[  281.201106][T14403] The buggy address is located 322 bytes inside of
[  281.201106][T14403]  freed 928-byte region [ffff88802042c000, ffff88802042c3a0)
[  281.205920][T14403] 
[  281.206798][T14403] The buggy address belongs to the physical page:
[  281.208884][T14403] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802042f600 pfn:0x2042c
[  281.212461][T14403] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  281.215848][T14403] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  281.219033][T14403] page_type: f5(slab)
[  281.220674][T14403] raw: 00fff00000000040 ffff8881053733c0 0000000000000000 0000000000000001
[  281.224134][T14403] raw: ffff88802042f600 00000000000e000c 00000000f5000000 0000000000000000
[  281.227351][T14403] head: 00fff00000000040 ffff8881053733c0 0000000000000000 0000000000000001
[  281.230209][T14403] head: ffff88802042f600 00000000000e000c 00000000f5000000 0000000000000000
[  281.233129][T14403] head: 00fff00000000002 ffffea0000810b01 00000000ffffffff 00000000ffffffff
[  281.236017][T14403] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  281.238992][T14403] page dumped because: kasan: bad access detected
[  281.241312][T14403] page_owner tracks the page as allocated
[  281.243149][T14403] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6342, tgid 6333 (syz.1.123), ts 69953783762, free_ts 68579048708
[  281.250464][T14403]  post_alloc_hook+0x240/0x2a0
[  281.252411][T14403]  get_page_from_freelist+0x21e4/0x22c0
[  281.254656][T14403]  __alloc_frozen_pages_noprof+0x181/0x370
[  281.256982][T14403]  alloc_pages_mpol+0x232/0x4a0
[  281.258920][T14403]  allocate_slab+0x8a/0x370
[  281.260758][T14403]  ___slab_alloc+0xbeb/0x1410
[  281.262678][T14403]  kmem_cache_alloc_noprof+0x283/0x3c0
[  281.264745][T14403]  xfrm_state_alloc+0x24/0x2f0
[  281.266605][T14403]  xfrm_add_sa+0x17d1/0x4070
[  281.268435][T14403]  xfrm_user_rcv_msg+0x7a3/0xab0
[  281.270142][T14403]  netlink_rcv_skb+0x208/0x470
[  281.271766][T14403]  xfrm_netlink_rcv+0x79/0x90
[  281.273488][T14403]  netlink_unicast+0x82f/0x9e0
[  281.275112][T14403]  netlink_sendmsg+0x805/0xb30
[  281.276719][T14403]  __sock_sendmsg+0x21c/0x270
[  281.278240][T14403]  ____sys_sendmsg+0x505/0x830
[  281.279715][T14403] page last free pid 6308 tgid 6308 stack trace:
[  281.281825][T14403]  __free_frozen_pages+0xbc4/0xd30
[  281.283470][T14403]  free_large_kmalloc+0x13a/0x1f0
[  281.285080][T14403]  free_netdev+0x3e2/0x700
[  281.286709][T14403]  netdev_run_todo+0xd0c/0xea0
[  281.288367][T14403]  tun_chr_close+0x13c/0x1c0
[  281.289933][T14403]  __fput+0x44c/0xa70
[  281.291260][T14403]  task_work_run+0x1d4/0x260
[  281.292820][T14403]  exit_to_user_mode_loop+0xec/0x110
[  281.294583][T14403]  do_syscall_64+0x2bd/0x3b0
[  281.296084][T14403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.298046][T14403] 
[  281.298863][T14403] Memory state around the buggy address:
[  281.300753][T14403]  ffff88802042c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  281.303584][T14403]  ffff88802042c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  281.306343][T14403] >ffff88802042c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  281.308996][T14403]                                            ^
[  281.311145][T14403]  ffff88802042c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  281.314086][T14403]  ffff88802042c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  281.316848][T14403] ==================================================================
[  281.319669][T14403] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  281.322035][T14403] CPU: 1 UID: 0 PID: 14403 Comm: syz.1.2538 Not tainted syzkaller #0 PREEMPT(full) 
[  281.325082][T14403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.328407][T14403] Call Trace:
[  281.329548][T14403]  <TASK>
[  281.330505][T14403]  dump_stack_lvl+0x99/0x250
[  281.332252][T14403]  ? __asan_memcpy+0x40/0x70
[  281.334079][T14403]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.335975][T14403]  ? __pfx__printk+0x10/0x10
[  281.337545][T14403]  vpanic+0x281/0x750
[  281.338900][T14403]  ? __pfx_vpanic+0x10/0x10
[  281.340446][T14403]  ? irqentry_exit+0x74/0x90
[  281.342012][T14403]  panic+0xb9/0xc0
[  281.343287][T14403]  ? __pfx_panic+0x10/0x10
[  281.344795][T14403]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  281.346770][T14403]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  281.348773][T14403]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  281.350545][T14403]  check_panic_on_warn+0x89/0xb0
[  281.352205][T14403]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  281.354185][T14403]  end_report+0x78/0x160
[  281.355670][T14403]  kasan_report+0x129/0x150
[  281.357209][T14403]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  281.358977][T14403]  __xfrm_state_lookup+0x6ad/0x8d0
[  281.360686][T14403]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  281.362567][T14403]  xfrm_state_add+0x27d/0xc40
[  281.364198][T14403]  xfrm_add_sa+0x35a1/0x4070
[  281.365791][T14403]  ? __pfx_xfrm_add_sa+0x10/0x10
[  281.367548][T14403]  ? apparmor_capable+0x137/0x1b0
[  281.369400][T14403]  ? __nla_parse+0x40/0x60
[  281.371008][T14403]  xfrm_user_rcv_msg+0x7a3/0xab0
[  281.372778][T14403]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  281.374921][T14403]  ? __pfx___mutex_trylock_common+0x10/0x10
[  281.377027][T14403]  ? rcu_is_watching+0x15/0xb0
[  281.378641][T14403]  ? trace_contention_end+0x39/0x120
[  281.380408][T14403]  ? __mutex_lock+0x335/0x1360
[  281.382029][T14403]  netlink_rcv_skb+0x208/0x470
[  281.383742][T14403]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  281.385551][T14403]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  281.387311][T14403]  ? netlink_deliver_tap+0x2e/0x1b0
[  281.389099][T14403]  ? netlink_deliver_tap+0x2e/0x1b0
[  281.390833][T14403]  xfrm_netlink_rcv+0x79/0x90
[  281.392580][T14403]  netlink_unicast+0x82f/0x9e0
[  281.394566][T14403]  ? __pfx_netlink_unicast+0x10/0x10
[  281.396743][T14403]  ? netlink_sendmsg+0x642/0xb30
[  281.398461][T14403]  ? skb_put+0x11b/0x210
[  281.399903][T14403]  netlink_sendmsg+0x805/0xb30
[  281.401520][T14403]  ? __pfx_netlink_sendmsg+0x10/0x10
[  281.403321][T14403]  ? aa_sock_msg_perm+0xf1/0x1d0
[  281.404983][T14403]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  281.406713][T14403]  ? __pfx_netlink_sendmsg+0x10/0x10
[  281.408440][T14403]  __sock_sendmsg+0x21c/0x270
[  281.410026][T14403]  ____sys_sendmsg+0x505/0x830
[  281.411605][T14403]  ? __pfx_____sys_sendmsg+0x10/0x10
[  281.413348][T14403]  ? import_iovec+0x74/0xa0
[  281.414871][T14403]  ___sys_sendmsg+0x21f/0x2a0
[  281.416425][T14403]  ? __pfx____sys_sendmsg+0x10/0x10
[  281.418111][T14403]  ? __fget_files+0x2a/0x420
[  281.419742][T14403]  ? __fget_files+0x3a0/0x420
[  281.421362][T14403]  __x64_sys_sendmsg+0x19b/0x260
[  281.422996][T14403]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  281.424769][T14403]  ? do_syscall_64+0xbe/0x3b0
[  281.426368][T14403]  do_syscall_64+0xfa/0x3b0
[  281.427924][T14403]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.429696][T14403]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.431746][T14403]  ? exc_page_fault+0x9f/0xf0
[  281.433335][T14403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.435316][T14403] RIP: 0033:0x7f9fc3b8ebe9
[  281.436843][T14403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.443244][T14403] RSP: 002b:00007f9fc49bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  281.446028][T14403] RAX: ffffffffffffffda RBX: 00007f9fc3db5fa0 RCX: 00007f9fc3b8ebe9
[  281.448824][T14403] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  281.452058][T14403] RBP: 00007f9fc3c11e19 R08: 0000000000000000 R09: 0000000000000000
[  281.455407][T14403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.458804][T14403] R13: 00007f9fc3db6038 R14: 00007f9fc3db5fa0 R15: 00007ffefc5bf3c8
[  281.462060][T14403]  </TASK>
[  281.464020][T14403] Kernel Offset: disabled
[  281.465796][T14403] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:25:56  Registers:
info registers vcpu 0

CPU#0
RAX=9b12c3e1111f3600 RBX=ffffffff819683a8 RCX=9b12c3e1111f3600 RDX=0000000000000001
RSI=ffffffff8d9b6a0a RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c291031 CR3=000000003d9be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000540000 0000307a79730003
XMM02=002c00000000400b 0008000000050000 XMM03=001c006477660001 0008800100288004
XMM04=0000400100080d00 00004002e9088002 XMM05=0000000000000000 0a00000000000000
XMM06=0000000000010011 0000001400000000 XMM07=307a797300010009 0200000040030008
XMM08=0000000040010008 0d0000004002e908 XMM09=0000000000000000 00007feff6812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000169e RDI=000000000000169f RBP=00000000000003f8 RSP=ffffc900017ae9d0
R8 =ffff88801fd28237 R9 =1ffff11003fa5046 R10=dffffc0000000000 R11=ffffffff854efa30
R12=dffffc0000000000 R13=ffffffff99af9901 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efaac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9fc49bd6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9fc49bcfc8 CR3=000000003366e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9fc3d87498 00007f9fc3d87470 XMM03=00007f9fc3d874a8 00007f9fc3d874a0
XMM04=00007f9fc48ed100 00007f9fc3d87460 XMM05=00007f9fc3d87478 00007f9fc3d874c0
XMM06=00007f9fc3d874b8 00007f9fc3d874b0 XMM07=00007f9fc3d874a8 00007f9fc3d874a0
XMM08=0000000000000000 00007f9fc3c12ee7 XMM09=0000000000000000 00007f9fc3c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
