last executing test programs:

1m10.818955815s ago: executing program 1 (id=1359):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1410, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000d0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
unlink(0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b500f8ffff9000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)

1m9.847825813s ago: executing program 1 (id=1380):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x14, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

1m9.757714601s ago: executing program 1 (id=1382):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)

1m9.678603475s ago: executing program 1 (id=1384):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd}, 0x94)

1m9.678504325s ago: executing program 1 (id=1385):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

1m9.619570456s ago: executing program 1 (id=1386):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x7, 0x0, 0x0)

54.636682406s ago: executing program 32 (id=1386):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x7, 0x0, 0x0)

29.34787406s ago: executing program 3 (id=1938):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x28}, {0x0, 0x4b}], 0x2}, 0x20000884)

29.347691235s ago: executing program 3 (id=1939):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

29.248391415s ago: executing program 3 (id=1940):
syz_clone(0x41001000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)

28.200406911s ago: executing program 2 (id=1954):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0xc800)

27.780403787s ago: executing program 2 (id=1955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)

27.77986388s ago: executing program 2 (id=1956):
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x118}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

27.669662753s ago: executing program 3 (id=1957):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10100, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff60)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x6000}, 0x72f1c90e0ff3f2df)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x48041)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001280)}, {0x0}], 0x2}, 0x0)

27.56449733s ago: executing program 2 (id=1961):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000b80)}, 0x8000044)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0xa, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}})
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x407ffb, 0x20000000aea}, 0x0, 0x2e, 0xfffffbfe, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x8}, 0x8, 0x0, 0xffffffff, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(r1, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='i2c_write\x00', r3}, 0x10)

27.408930718s ago: executing program 3 (id=1964):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000100)
close(r1)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x5, 0x0, &(0x7f0000000180)="0005000000", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x9a)

27.200002882s ago: executing program 2 (id=1965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x9}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

27.199809259s ago: executing program 2 (id=1966):
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf879ce145214a535)

27.087067161s ago: executing program 33 (id=1966):
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf879ce145214a535)

27.037130146s ago: executing program 3 (id=1968):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7406, 0x0, &(0x7f00000003c0)="452846938cebbd031f4d", 0x0, 0x7406, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

26.948117202s ago: executing program 34 (id=1968):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7406, 0x0, &(0x7f00000003c0)="452846938cebbd031f4d", 0x0, 0x7406, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.939759683s ago: executing program 0 (id=2205):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800300002060108000000000000000000000003"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20048000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
write$cgroup_type(r1, &(0x7f0000000180), 0x40001)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040))

2.805106244s ago: executing program 0 (id=2208):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x1024, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

2.569760733s ago: executing program 0 (id=2211):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x18, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r2, 0x0, 0x19, 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x20044000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)

1.890074836s ago: executing program 4 (id=2220):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)

1.889885996s ago: executing program 4 (id=2221):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x5}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8902, &(0x7f0000000040))

1.759648122s ago: executing program 5 (id=2223):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000fc0)="1400000028000b05d25a7c8d1c6394f9050100ee", 0x14}], 0x1}, 0x4044050)

1.759448018s ago: executing program 5 (id=2224):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40001)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0xfff, 0xffff, 0xd, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040))

1.708371994s ago: executing program 4 (id=2225):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xfffffffa}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"})
close(r0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7ffffff}, 0x3000c085)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x14, 0x24, 0x6, 0x6, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd29, 0x3501}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}]}, 0x30}}, 0x40000)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0)=0x3, 0x12)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x541b, 0x20000000)

1.655384284s ago: executing program 0 (id=2226):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)

1.655074022s ago: executing program 5 (id=2227):
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000007c0)="78032bf0f42dc23e04d279117e58be4dbab3b75205deffff5950956fa01b3d384a8b535f19c2ee8f29b9874dcd0800258a5e79c43f16", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x18, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x1, 0x1000, &(0x7f0000000ac0)=""/4096, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x14, r0, 0x8, &(0x7f0000001ac0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001b80), 0x10, 0x6}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r1, &(0x7f0000000780)}, 0x20)
close(0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12)

1.455827494s ago: executing program 5 (id=2228):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xb6257bae381e2d0f, 0x0)

1.455524776s ago: executing program 0 (id=2229):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0xffffffffffff0001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='\xaa\xaa\xaa\xaa\xaa')
r1 = socket$xdp(0x2c, 0x3, 0x0)
socket(0x1, 0x6, 0x5)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$can_raw(r2, 0x0, 0x8001)
sendmsg$xdp(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xc804}, 0x20040010)

195.067461ms ago: executing program 4 (id=2230):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40088)

194.815339ms ago: executing program 5 (id=2231):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffe, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

147.244936ms ago: executing program 4 (id=2232):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='tlb_flush\x00', r1, 0x0, 0x9}, 0x18)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

146.905359ms ago: executing program 0 (id=2233):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0xa, 0x5, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x46025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x1, 0x1, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x18)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20)

271.324µs ago: executing program 4 (id=2234):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

0s ago: executing program 5 (id=2235):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000200), 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100000001, 0x400}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x9, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43103' (ED25519) to the list of known hosts.
syzkaller login: [   49.648463][ T5786] cgroup: Unknown subsys name 'net'
[   49.773092][ T5786] cgroup: Unknown subsys name 'cpuset'
[   49.777251][ T5786] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.319118][ T5786] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.009139][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.012644][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.015531][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.018639][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.030907][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.070483][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.073940][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.077308][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.081203][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.084640][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.112346][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.115873][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.120862][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.131359][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.134007][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.231996][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.351876][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.355089][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.358407][ T5845] bridge_slave_0: entered allmulticast mode
[   55.363838][ T5845] bridge_slave_0: entered promiscuous mode
[   55.368349][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   55.391865][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.394962][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.398120][ T5845] bridge_slave_1: entered allmulticast mode
[   55.402935][ T5845] bridge_slave_1: entered promiscuous mode
[   55.452373][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.461042][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.488768][ T5845] team0: Port device team_slave_0 added
[   55.508702][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   55.516757][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.519960][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.523979][ T5850] bridge_slave_0: entered allmulticast mode
[   55.527907][ T5850] bridge_slave_0: entered promiscuous mode
[   55.533836][ T5845] team0: Port device team_slave_1 added
[   55.548314][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.551747][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.554793][ T5850] bridge_slave_1: entered allmulticast mode
[   55.558741][ T5850] bridge_slave_1: entered promiscuous mode
[   55.627924][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.631170][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.640360][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.653695][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.657896][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.660832][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.672648][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.678489][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.718299][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.721007][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.723942][ T5852] bridge_slave_0: entered allmulticast mode
[   55.727026][ T5852] bridge_slave_0: entered promiscuous mode
[   55.732453][ T5850] team0: Port device team_slave_0 added
[   55.735322][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.738249][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.741521][ T5852] bridge_slave_1: entered allmulticast mode
[   55.744243][ T5852] bridge_slave_1: entered promiscuous mode
[   55.748098][ T5850] team0: Port device team_slave_1 added
[   55.800096][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.804891][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.817852][ T5845] hsr_slave_0: entered promiscuous mode
[   55.820739][ T5845] hsr_slave_1: entered promiscuous mode
[   55.823730][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.826158][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.834900][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.851725][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.854082][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.865388][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.871034][ T5852] team0: Port device team_slave_0 added
[   55.884343][ T5852] team0: Port device team_slave_1 added
[   55.935966][ T5850] hsr_slave_0: entered promiscuous mode
[   55.938326][ T5850] hsr_slave_1: entered promiscuous mode
[   55.940955][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   55.942946][ T5850] Cannot create hsr debugfs directory
[   55.948533][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.951900][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.963057][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.967467][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.969965][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.981236][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.077059][ T5852] hsr_slave_0: entered promiscuous mode
[   56.080148][ T5852] hsr_slave_1: entered promiscuous mode
[   56.083854][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   56.086303][ T5852] Cannot create hsr debugfs directory
[   56.204786][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.212293][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.222792][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.246371][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.287342][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.308302][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.325280][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.332064][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.362415][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.368205][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.373446][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.387124][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.484173][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.504790][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.515091][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.517565][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.528644][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.533608][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.536088][ T4454] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.552394][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.556428][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   56.570267][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.573308][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.587739][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.595761][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.598780][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.616101][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   56.641687][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.644859][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.659685][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.662947][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.703197][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.707749][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.737793][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.775291][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.848363][ T5845] veth0_vlan: entered promiscuous mode
[   56.860206][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.865627][ T5845] veth1_vlan: entered promiscuous mode
[   56.876773][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.905674][ T5845] veth0_macvtap: entered promiscuous mode
[   56.915754][ T5845] veth1_macvtap: entered promiscuous mode
[   56.933288][ T5852] veth0_vlan: entered promiscuous mode
[   56.935745][ T5850] veth0_vlan: entered promiscuous mode
[   56.947539][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.951566][ T5852] veth1_vlan: entered promiscuous mode
[   56.958838][ T5850] veth1_vlan: entered promiscuous mode
[   56.966851][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.985900][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.990273][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.004865][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.015964][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.019821][ T5852] veth0_macvtap: entered promiscuous mode
[   57.050028][ T5850] veth0_macvtap: entered promiscuous mode
[   57.056327][ T5852] veth1_macvtap: entered promiscuous mode
[   57.069366][ T5850] veth1_macvtap: entered promiscuous mode
[   57.081792][   T55] Bluetooth: hci0: command tx timeout
[   57.102589][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.112087][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.115522][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.121891][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.134349][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.147249][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.153068][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.161573][   T55] Bluetooth: hci2: command tx timeout
[   57.164278][   T55] Bluetooth: hci1: command tx timeout
[   57.169296][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.173447][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.176717][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.194068][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.196637][ T5907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.197306][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.212775][ T5907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.216928][ T5907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.225586][ T5907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.265055][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.301457][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.304253][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.378696][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.389132][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.398917][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.404569][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.415900][ T4454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.419566][ T4454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.505164][ T5914] netlink: 'syz.0.5': attribute type 29 has an invalid length.
[   57.529279][ T5914] netlink: 'syz.0.5': attribute type 29 has an invalid length.
[   57.537523][ T5914] netlink: 'syz.0.5': attribute type 29 has an invalid length.
[   57.541588][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.667210][ T5923] netlink: 'syz.0.7': attribute type 10 has an invalid length.
[   57.675539][ T5923] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7'.
[   57.679974][ T5923] bond0: entered promiscuous mode
[   57.685596][ T5923] bond_slave_0: entered promiscuous mode
[   57.690212][ T5923] bond_slave_1: entered promiscuous mode
[   57.699084][ T5923] bridge0: port 3(bond0) entered blocking state
[   57.704031][ T5923] bridge0: port 3(bond0) entered disabled state
[   57.709074][ T5923] bond0: entered allmulticast mode
[   57.712267][ T5923] bond_slave_0: entered allmulticast mode
[   57.715399][ T5923] bond_slave_1: entered allmulticast mode
[   57.758916][ T5923] bridge0: port 3(bond0) entered blocking state
[   57.762917][ T5923] bridge0: port 3(bond0) entered forwarding state
[   57.786045][    C1] hrtimer: interrupt took 31918 ns
[   57.990974][ T5926] netlink: 'syz.2.9': attribute type 3 has an invalid length.
[   57.994107][ T5926] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9'.
[   58.010757][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.058293][ T5930] xt_HMARK: proto mask must be zero with L3 mode
[   58.298919][ T5848] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12
[   58.416792][ T5955] nbd: must specify an index to disconnect
[   58.905952][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'.
[   58.913455][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'.
[   59.160776][ T5848] Bluetooth: hci0: command tx timeout
[   59.240955][ T5848] Bluetooth: hci1: command tx timeout
[   59.243353][ T5848] Bluetooth: hci2: command tx timeout
[   59.334760][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   59.595779][ T5996] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET)
[   59.600266][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   59.659085][ T5848] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10
[   59.817271][ T6006] netlink: 'syz.1.42': attribute type 3 has an invalid length.
[   59.831498][ T6006] netlink: 'syz.1.42': attribute type 3 has an invalid length.
[   59.834950][ T6006] netlink: 130500 bytes leftover after parsing attributes in process `syz.1.42'.
[   59.951369][ T6013] Zero length message leads to an empty skb
[   59.963043][ T6013] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.44'.
[   59.972650][ T6013] netlink: 5 bytes leftover after parsing attributes in process `syz.2.44'.
[   60.128659][ T6022] netlink: 'syz.1.49': attribute type 8 has an invalid length.
[   60.250891][ T6031] netlink: 'syz.1.54': attribute type 29 has an invalid length.
[   60.255436][ T6031] netlink: 'syz.1.54': attribute type 29 has an invalid length.
[   60.507542][ T6047] =======================================================
[   60.507542][ T6047] WARNING: The mand mount option has been deprecated and
[   60.507542][ T6047]          and is ignored by this kernel. Remove the mand
[   60.507542][ T6047]          option from the mount to silence this warning.
[   60.507542][ T6047] =======================================================
[   60.948911][ T6063] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   60.995078][ T6076] bridge: RTM_NEWNEIGH with invalid state 0x1
[   61.242937][ T5848] Bluetooth: hci0: command tx timeout
[   61.260499][ T6094] tmpfs: Bad value for 'uid'
[   61.262205][ T6094] tmpfs: Bad value for 'uid'
[   61.409073][ T5848] Bluetooth: hci2: command tx timeout
[   61.410733][   T55] Bluetooth: hci1: command tx timeout
[   62.668349][ T6124] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   62.761745][ T6132] __nla_validate_parse: 10 callbacks suppressed
[   62.761754][ T6132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.97'.
[   62.884309][ T6137] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.98'.
[   63.162360][ T6146] validate_nla: 1 callbacks suppressed
[   63.162370][ T6146] netlink: 'syz.1.102': attribute type 10 has an invalid length.
[   63.321272][   T55] Bluetooth: hci0: command tx timeout
[   63.377455][ T6148] GPL: port 1(gretap0) entered blocking state
[   63.379652][ T6148] GPL: port 1(gretap0) entered disabled state
[   63.386476][ T6148] gretap0: entered allmulticast mode
[   63.391066][ T6148] gretap0: entered promiscuous mode
[   63.446304][ T6159] netlink: 56 bytes leftover after parsing attributes in process `syz.1.108'.
[   63.450193][ T6159] netlink: 56 bytes leftover after parsing attributes in process `syz.1.108'.
[   63.482387][   T55] Bluetooth: hci2: command tx timeout
[   63.483835][ T5848] Bluetooth: hci1: command tx timeout
[   63.857942][ T6170] netlink: 'syz.0.113': attribute type 9 has an invalid length.
[   63.862419][ T6170] netlink: 211924 bytes leftover after parsing attributes in process `syz.0.113'.
[   64.026065][ T6183] netlink: 'syz.2.118': attribute type 1 has an invalid length.
[   64.029833][ T6183] netlink: 'syz.2.118': attribute type 3 has an invalid length.
[   64.158736][ T6183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.118'.
[   64.437775][ T6211] Illegal XDP return value 4294967274 on prog  (id 43) dev N/A, expect packet loss!
[   64.799380][ T6223] netlink: 'syz.1.134': attribute type 12 has an invalid length.
[   64.802435][ T6223] netlink: 132 bytes leftover after parsing attributes in process `syz.1.134'.
[   64.977561][ T6235] netlink: 'syz.2.141': attribute type 4 has an invalid length.
[   64.984991][ T5848] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[   64.988138][ T5848] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff
[   65.069548][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'.
[   65.252982][ T6250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.550277][ T6265] hsr0: entered promiscuous mode
[   65.563887][   T55] Bluetooth: hci1: command tx timeout
[   65.837113][ T6278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.162'.
[   65.844185][ T6278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.162'.
[   65.997882][ T6285] netlink: 'syz.0.165': attribute type 27 has an invalid length.
[   66.003366][ T6285] netlink: 'syz.0.165': attribute type 4 has an invalid length.
[   66.354571][ T6295] netlink: 'syz.1.168': attribute type 3 has an invalid length.
[   66.827925][   T55] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[   66.951933][ T6321] netlink: 'syz.2.180': attribute type 4 has an invalid length.
[   67.353499][ T6335] sit0: entered allmulticast mode
[   67.359759][ T6335] sit0: entered promiscuous mode
[   70.096553][   T55] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   70.193464][ T6356] __nla_validate_parse: 8 callbacks suppressed
[   70.193482][ T6356] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.197'.
[   70.398370][ T6362] validate_nla: 3 callbacks suppressed
[   70.398390][ T6362] netlink: 'syz.1.199': attribute type 2 has an invalid length.
[   71.018453][ T6370] netlink: 'syz.2.202': attribute type 10 has an invalid length.
[   71.043776][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.047064][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.057295][ T6370] macvlan0: entered promiscuous mode
[   71.065744][ T6370] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   71.316346][ T6387] warning: `syz.1.210' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.364687][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'.
[   71.370785][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'.
[   71.532295][ T6397] netlink: 802 bytes leftover after parsing attributes in process `syz.0.214'.
[   71.784867][ T6419] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   71.787557][ T6419] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   71.867443][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.230'.
[   71.874576][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.230'.
[   71.879669][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.230'.
[   71.909873][ T6426] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.228'.
[   71.957208][ T6435] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.232'.
[   72.126668][ T5848] Bluetooth: hci2: command tx timeout
[   72.162757][ T6447] netlink: 'syz.0.238': attribute type 29 has an invalid length.
[   72.167619][ T6447] netlink: 'syz.0.238': attribute type 29 has an invalid length.
[   72.584081][ T6456] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.241'.
[   72.657635][ T6479] netlink: 'syz.1.246': attribute type 13 has an invalid length.
[   73.448863][ T6521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.496224][ T6523] _Z`Ԁ@S: entered promiscuous mode
[   73.686812][ T6535] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[   73.940499][ T6548] netlink: 'syz.2.277': attribute type 40 has an invalid length.
[   74.017829][ T5848] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[   74.282138][ T6569] openvswitch: netlink: IP tunnel TTL not specified.
[   75.178636][ T6629] netlink: 'syz.1.315': attribute type 3 has an invalid length.
[   75.185315][ T6629] netlink: 'syz.1.315': attribute type 1 has an invalid length.
[   75.344611][ T6637] __nla_validate_parse: 6 callbacks suppressed
[   75.344630][ T6637] netlink: 13 bytes leftover after parsing attributes in process `syz.1.318'.
[   75.527046][ T6643] netlink: 'syz.1.321': attribute type 10 has an invalid length.
[   75.577537][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.618168][ T6643] team0: Port device bond0 added
[   75.748979][ T6651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.324'.
[   76.041068][ T5848] Bluetooth: hci1: command tx timeout
[   76.430355][ T6697] netlink: 763 bytes leftover after parsing attributes in process `syz.0.342'.
[   76.454699][ T6701] netlink: 'syz.1.343': attribute type 29 has an invalid length.
[   76.458052][ T6701] netlink: 'syz.1.343': attribute type 29 has an invalid length.
[   77.000465][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.359'.
[   77.261001][ T6750] netlink: 'syz.2.367': attribute type 1 has an invalid length.
[   77.297003][ T6752] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.368'.
[   77.396646][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'.
[   77.399622][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'.
[   77.403807][ T6756] netlink: 33 bytes leftover after parsing attributes in process `syz.2.370'.
[   77.407392][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'.
[   77.411460][ T6756] netlink: 33 bytes leftover after parsing attributes in process `syz.2.370'.
[   78.255281][ T6798] netlink: 'syz.0.385': attribute type 10 has an invalid length.
[   78.258212][ T6798] team0: entered promiscuous mode
[   78.260105][ T6798] team_slave_0: entered promiscuous mode
[   78.281776][ T6798] team_slave_1: entered promiscuous mode
[   78.284894][ T6798] team0: entered allmulticast mode
[   78.298176][ T6798] team_slave_0: entered allmulticast mode
[   78.300440][ T6798] team_slave_1: entered allmulticast mode
[   78.323151][ T6798] bridge0: port 4(team0) entered blocking state
[   78.333760][ T6798] bridge0: port 4(team0) entered disabled state
[   78.388633][ T6798] bridge0: port 4(team0) entered blocking state
[   78.392956][ T6798] bridge0: port 4(team0) entered forwarding state
[   80.041128][ T6875] netlink: 'syz.0.419': attribute type 210 has an invalid length.
[   80.467776][ T6903] __nla_validate_parse: 15 callbacks suppressed
[   80.467791][ T6903] netlink: 100 bytes leftover after parsing attributes in process `syz.2.431'.
[   80.566974][ T6906] netlink: 'syz.1.432': attribute type 2 has an invalid length.
[   80.570471][ T6906] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.432'.
[   80.792847][ T6918] netlink: 'syz.1.438': attribute type 13 has an invalid length.
[   80.799505][ T6918] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.438'.
[   80.892828][ T6924] netlink: 'syz.2.441': attribute type 29 has an invalid length.
[   80.901769][ T6924] netlink: 'syz.2.441': attribute type 29 has an invalid length.
[   80.911419][ T6924] netlink: 'syz.2.441': attribute type 29 has an invalid length.
[   80.916479][ T6924] netlink: 'syz.2.441': attribute type 29 has an invalid length.
[   80.955486][ T6933] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[   80.999840][ T6934] netlink: 'syz.2.441': attribute type 2 has an invalid length.
[   81.009494][ T6934] netlink: 'syz.2.441': attribute type 9 has an invalid length.
[   81.016570][ T6934] netlink: 132 bytes leftover after parsing attributes in process `syz.2.441'.
[   81.036090][ T6938] tun0: tun_chr_ioctl cmd 1074025677
[   81.038018][ T6938] tun0: linktype set to 270
[   81.242044][    T9] cfg80211: failed to load regulatory.db
[   81.628060][ T6969] netlink: 56 bytes leftover after parsing attributes in process `syz.0.462'.
[   81.665927][ T6971] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.463'.
[   81.775103][ T6977] netlink: 'syz.2.467': attribute type 7 has an invalid length.
[   81.832367][ T6984] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   83.236315][ T7034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.491'.
[   83.257290][ T7035] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.490'.
[   83.270928][ T7032] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.490'.
[   83.279271][ T7032] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.490'.
[   83.438986][ T7044] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[   86.077362][ T7183] __nla_validate_parse: 3 callbacks suppressed
[   86.077376][ T7183] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.557'.
[   86.096208][ T7179] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.557'.
[   86.111351][ T7183] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.557'.
[   86.309518][ T7195] netlink: 22 bytes leftover after parsing attributes in process `syz.2.564'.
[   86.625326][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'.
[   86.667268][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'.
[   86.942536][ T7213] validate_nla: 3 callbacks suppressed
[   86.942551][ T7213] netlink: 'syz.1.570': attribute type 1 has an invalid length.
[   86.949185][ T7213] netlink: 'syz.1.570': attribute type 2 has an invalid length.
[   88.076387][ T7233] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.579'.
[   88.518301][ T7252] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[   88.552386][ T7254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.589'.
[   90.738085][ T7309] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.614'.
[   90.747995][ T7309] netlink: zone id is out of range
[   90.749797][ T7309] netlink: zone id is out of range
[   90.754083][ T7309] netlink: get zone limit has 8 unknown bytes
[   90.902984][ T7322] netlink: 80 bytes leftover after parsing attributes in process `syz.1.621'.
[   93.206181][ T7380] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.647'.
[   93.210109][ T7380] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   93.213629][ T7380] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[   93.678681][ T5848] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[   93.924328][ T7400] netlink: 'syz.1.657': attribute type 10 has an invalid length.
[   93.930381][ T7400] netlink: 55 bytes leftover after parsing attributes in process `syz.1.657'.
[   94.029467][ T7409] delete_channel: no stack
[   95.101150][ T7436] netlink: 'syz.2.673': attribute type 2 has an invalid length.
[   95.103995][ T7436] netlink: 85376 bytes leftover after parsing attributes in process `syz.2.673'.
[   95.448575][ T7464] proc: Unknown parameter 'uid>00000000000000000000'
[   95.789363][ T7470] netlink: 'syz.0.685': attribute type 5 has an invalid length.
[   95.855008][ T7474] netlink: 64 bytes leftover after parsing attributes in process `syz.0.687'.
[   95.958044][ T7480] netlink: 44 bytes leftover after parsing attributes in process `syz.0.689'.
[   96.102727][ T7490] netlink: 196 bytes leftover after parsing attributes in process `syz.0.692'.
[   96.157366][ T7499] netlink: 'syz.0.698': attribute type 21 has an invalid length.
[   96.159956][ T7499] netlink: 'syz.0.698': attribute type 15 has an invalid length.
[   96.163156][ T7499] netlink: 156 bytes leftover after parsing attributes in process `syz.0.698'.
[   96.166325][ T7499] IPv6: NLM_F_CREATE should be specified when creating new route
[   96.169676][ T7499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.172640][ T7499] IPv6: NLM_F_CREATE should be set when creating new route
[   96.175255][ T7499] IPv6: NLM_F_CREATE should be set when creating new route
[   96.177885][ T7499] IPv6: NLM_F_CREATE should be set when creating new route
[   97.151343][ T7525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.708'.
[   97.154875][ T7525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.708'.
[   97.158540][ T7525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.708'.
[   97.202061][ T7528] netlink: 'syz.1.711': attribute type 21 has an invalid length.
[   97.250189][ T7532] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   97.405272][ T7544] netlink: 'syz.2.719': attribute type 10 has an invalid length.
[   97.574224][ T7544] bond0: (slave macvlan0): Releasing backup interface
[   97.930013][ T7583] netlink: 'syz.2.734': attribute type 22 has an invalid length.
[   97.985442][ T7584] netlink: 'syz.1.737': attribute type 1 has an invalid length.
[   97.990101][ T7584] netlink: 'syz.1.737': attribute type 4 has an invalid length.
[   98.770195][ T7623] __nla_validate_parse: 8 callbacks suppressed
[   98.770212][ T7623] netlink: 14 bytes leftover after parsing attributes in process `syz.1.754'.
[   98.902044][ T7630] netlink: 160 bytes leftover after parsing attributes in process `syz.2.757'.
[   98.998896][ T7630] validate_nla: 1 callbacks suppressed
[   98.999029][ T7630] netlink: 'syz.2.757': attribute type 10 has an invalid length.
[   99.068841][ T7630] batman_adv: batadv0: Adding interface: netdevsim0
[   99.074376][ T7630] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.085570][ T7630] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   99.144372][ T7641] netlink: 'syz.1.761': attribute type 10 has an invalid length.
[   99.147585][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.157721][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.176974][ T7641] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   99.282557][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'.
[   99.370837][ T7658] netlink: 'syz.2.769': attribute type 32 has an invalid length.
[   99.371419][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.768'.
[   99.585206][ T7677] netlink: 'syz.1.775': attribute type 4 has an invalid length.
[   99.588282][ T7677] netlink: 140 bytes leftover after parsing attributes in process `syz.1.775'.
[   99.770029][ T7699] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.783'.
[   99.778351][ T7699] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.783'.
[   99.924182][ T7705] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.930355][ T7705] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.466550][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'.
[  101.033905][ T7764] netlink: 'syz.1.803': attribute type 10 has an invalid length.
[  101.175894][ T7764] bond0: (slave bond_slave_0): Releasing backup interface
[  101.312057][ T7783] delete_channel: no stack
[  101.313713][ T7783] delete_channel: no stack
[  101.420049][ T7791] netlink: 'syz.1.819': attribute type 19 has an invalid length.
[  101.424804][ T7791] netlink: 40 bytes leftover after parsing attributes in process `syz.1.819'.
[  102.327447][ T7850] C: renamed from team_slave_0 (while UP)
[  102.335117][ T7850] netlink: 'syz.0.842': attribute type 3 has an invalid length.
[  102.338308][ T7850] netlink: 'syz.0.842': attribute type 1 has an invalid length.
[  102.341877][ T7850] netlink: 116 bytes leftover after parsing attributes in process `syz.0.842'.
[  102.546543][ T7863] erspan0 speed is unknown, defaulting to 1000
[  102.548999][ T7863] erspan0 speed is unknown, defaulting to 1000
[  102.554165][ T7863] erspan0 speed is unknown, defaulting to 1000
[  102.569224][ T7865] netlink: 'syz.1.849': attribute type 10 has an invalid length.
[  102.574113][ T7863] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  102.587123][ T7863] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  102.625761][ T7863] erspan0 speed is unknown, defaulting to 1000
[  102.628862][ T7863] erspan0 speed is unknown, defaulting to 1000
[  102.632407][ T7863] erspan0 speed is unknown, defaulting to 1000
[  102.667577][ T7871] x_tables: ip_tables: udp match: only valid for protocol 17
[  102.816456][ T7884] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  103.360727][ T7915] bridge_slave_1: left allmulticast mode
[  103.362922][ T7915] bridge_slave_1: left promiscuous mode
[  103.365659][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.386924][ T7915] bridge_slave_0: left promiscuous mode
[  103.388869][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.849923][ T7942] __nla_validate_parse: 5 callbacks suppressed
[  103.849945][ T7942] netlink: 180 bytes leftover after parsing attributes in process `syz.0.885'.
[  103.987358][ T7945] netlink: 'syz.0.886': attribute type 2 has an invalid length.
[  103.990943][ T7945] netlink: 85 bytes leftover after parsing attributes in process `syz.0.886'.
[  103.994982][ T7945] netlink: 130140 bytes leftover after parsing attributes in process `syz.0.886'.
[  103.998974][ T7945] netlink: 85 bytes leftover after parsing attributes in process `syz.0.886'.
[  104.214687][ T7947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.887'.
[  104.218573][ T7947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.887'.
[  105.002134][ T7981] validate_nla: 3 callbacks suppressed
[  105.002145][ T7981] netlink: 'syz.2.903': attribute type 41 has an invalid length.
[  105.006482][ T7981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.903'.
[  105.152929][ T7995] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  105.155638][ T7995] netlink: 'syz.1.910': attribute type 3 has an invalid length.
[  105.158254][ T7995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.910'.
[  105.253670][ T8009] netlink: 'syz.1.917': attribute type 1 has an invalid length.
[  105.739597][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.931'.
[  105.994847][ T8062] delete_channel: no stack
[  106.024017][ T8062] delete_channel: no stack
[  106.069558][ T8062] netlink: 'syz.1.935': attribute type 6 has an invalid length.
[  106.078231][ T8062] netlink: 164 bytes leftover after parsing attributes in process `syz.1.935'.
[  106.137267][ T8065] netlink: 'syz.2.936': attribute type 2 has an invalid length.
[  106.414551][ T8085] netlink: 'syz.0.945': attribute type 6 has an invalid length.
[  106.417320][ T8085] netlink: 'syz.0.945': attribute type 5 has an invalid length.
[  106.493535][ T8091] netlink: 'syz.0.947': attribute type 29 has an invalid length.
[  106.512255][ T8091] netlink: 'syz.0.947': attribute type 29 has an invalid length.
[  107.270844][ T5848] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  107.903220][ T8124] rdma_rxe: rxe_newlink: failed to add lo
[  108.739740][ T8177] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  109.261654][ T8194] __nla_validate_parse: 8 callbacks suppressed
[  109.261731][ T8194] netlink: 96 bytes leftover after parsing attributes in process `syz.2.994'.
[  109.308944][ T8196] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.995'.
[  109.353747][ T8197] netlink: 55 bytes leftover after parsing attributes in process `syz.2.994'.
[  109.747447][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.1.998'.
[  109.752071][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.998'.
[  109.756158][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.998'.
[  110.773048][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1018'.
[  111.197365][ T8263] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1024'.
[  111.202652][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1024'.
[  111.236895][ T8265] tmpfs: Bad value for 'gid'
[  111.238773][ T8265] tmpfs: Bad value for 'gid'
[  111.324974][ T8271] xt_limit: Overflow, try lower: 324382443/4200216956
[  111.367363][ T8273] validate_nla: 3 callbacks suppressed
[  111.367379][ T8273] netlink: 'syz.0.1029': attribute type 2 has an invalid length.
[  111.377398][ T8273] netlink: 'syz.0.1029': attribute type 1 has an invalid length.
[  111.382883][ T8273] netlink: 'syz.0.1029': attribute type 1 has an invalid length.
[  111.548546][ T8281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1032'.
[  111.884030][ T8299] IPv6: NLM_F_CREATE should be specified when creating new route
[  115.247137][ T8459] __nla_validate_parse: 5 callbacks suppressed
[  115.247151][ T8459] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1090'.
[  115.265755][ T8459] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1090'.
[  115.269528][ T8459] netlink: 'syz.1.1090': attribute type 5 has an invalid length.
[  115.273214][ T8459] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1090'.
[  115.522031][ T5848] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[  115.662604][ T8499] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1107'.
[  115.787671][ T8510] netlink: 'syz.1.1114': attribute type 12 has an invalid length.
[  115.791327][ T8510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1114'.
[  115.967756][ T8526] netlink: 'syz.0.1121': attribute type 11 has an invalid length.
[  115.980864][ T8526] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.1121'.
[  115.985474][ T8528] netlink: 'syz.2.1122': attribute type 5 has an invalid length.
[  116.039362][ T8531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.009744][ T8542] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1126'.
[  117.013777][ T8542] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1126'.
[  117.137700][ T8556] netlink: 'syz.0.1133': attribute type 1 has an invalid length.
[  117.653493][ T8574] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1140'.
[  117.735496][ T8573] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1141'.
[  117.826939][ T8579] netlink: 'syz.2.1143': attribute type 29 has an invalid length.
[  117.832946][ T8579] netlink: 'syz.2.1143': attribute type 29 has an invalid length.
[  117.837871][ T8579] netlink: 'syz.2.1143': attribute type 29 has an invalid length.
[  118.076897][ T8600] netlink: 'syz.0.1153': attribute type 3 has an invalid length.
[  118.228523][ T8610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.518047][ T8620] netlink: 'syz.2.1163': attribute type 11 has an invalid length.
[  118.695909][ T8630] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  118.776901][ T8638] netlink: 'syz.2.1171': attribute type 1 has an invalid length.
[  118.826731][ T8641] netlink: 'syz.2.1172': attribute type 10 has an invalid length.
[  118.830121][ T8641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.834026][ T8641] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.563700][ T5848] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  119.567797][ T5848] Bluetooth: hci1: Injecting HCI hardware error event
[  119.572080][ T5848] Bluetooth: hci1: hardware error 0x00
[  120.207396][   T55] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10
[  120.469889][ T8699] __nla_validate_parse: 8 callbacks suppressed
[  120.469901][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'.
[  121.640649][ T5848] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  122.600789][   T55] Bluetooth: hci0: Opcode 0x206a failed: -110
[  122.600795][ T5848] Bluetooth: hci0: command 0x206a tx timeout
[  123.132119][ T8714] netlink: 'syz.1.1204': attribute type 2 has an invalid length.
[  123.241130][ T8716] syzkaller1: entered promiscuous mode
[  123.243530][ T8716] syzkaller1: entered allmulticast mode
[  123.877409][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1212'.
[  123.882704][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1212'.
[  124.185182][ T8770] netlink: 'syz.1.1225': attribute type 10 has an invalid length.
[  124.202413][ T8770] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  124.829274][ T8794] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1236'.
[  124.915069][ T8801] netlink: 'syz.2.1239': attribute type 10 has an invalid length.
[  124.966096][ T8806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1242'.
[  124.969328][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1242'.
[  124.972748][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  125.954709][ T8820] netlink: 'syz.2.1249': attribute type 9 has an invalid length.
[  125.957497][ T8820] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.1249'.
[  126.040134][ T8831] netlink: 'syz.2.1254': attribute type 4 has an invalid length.
[  126.046654][ T8831] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1254'.
[  126.228568][ T8845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1261'.
[  127.487393][ T8920] syzkaller0: entered promiscuous mode
[  127.489495][ T8920] syzkaller0: entered allmulticast mode
[  127.779972][ T8939] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1303'.
[  127.790069][ T8939] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1303'.
[  127.868676][ T8950] openvswitch: netlink: Duplicate or invalid key (type 0).
[  127.872326][ T8950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.117920][ T8972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.319407][ T8980] netlink: 'syz.2.1322': attribute type 21 has an invalid length.
[  128.322732][ T8980] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1322'.
[  128.359747][ T8975] syzkaller0: entered promiscuous mode
[  128.362006][ T8975] syzkaller0: entered allmulticast mode
[  128.489492][   T33] audit: type=1107 audit(1757890191.637:2): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lJ$'
[  129.405601][ T8994] netlink: 'syz.0.1328': attribute type 29 has an invalid length.
[  129.411122][ T8995] netlink: 'syz.0.1328': attribute type 29 has an invalid length.
[  129.415440][ T8996] netlink: 'syz.0.1328': attribute type 29 has an invalid length.
[  129.685974][ T9006] C: renamed from team_slave_0 (while UP)
[  130.320078][ T9006] netlink: 'syz.2.1333': attribute type 2 has an invalid length.
[  130.327541][ T9006] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  130.515264][ T9015] netlink: 'syz.2.1336': attribute type 3 has an invalid length.
[  130.518833][ T9015] netlink: 'syz.2.1336': attribute type 2 has an invalid length.
[  130.523386][ T9015] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.1336'.
[  130.639958][ T9020] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1339'.
[  131.360817][ T9027] netlink: 1018 bytes leftover after parsing attributes in process `syz.2.1342'.
[  131.539266][ T9043] netlink: 'syz.0.1350': attribute type 4 has an invalid length.
[  131.596477][ T9048] netlink: 'syz.0.1352': attribute type 4 has an invalid length.
[  131.625686][ T9050] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1353'.
[  131.655842][ T9054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.718742][ T9064] netlink: 'syz.2.1358': attribute type 29 has an invalid length.
[  131.761255][ T9068] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1361'.
[  132.473513][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.476521][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.848774][ T9115] sysfs: Unknown parameter 'subj_type'
[  132.878000][ T9116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'.
[  136.299042][ T9136] tap0: tun_chr_ioctl cmd 1074025678
[  136.307783][ T9136] tap0: group set to 0
[  138.861078][ T9182] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.1414'.
[  140.805727][ T9262] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1450'.
[  140.811997][ T9262] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1450'.
[  140.888444][ T9270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1454'.
[  140.923655][ T9273] validate_nla: 4 callbacks suppressed
[  140.923663][ T9273] netlink: 'syz.2.1455': attribute type 2 has an invalid length.
[  140.928650][ T9273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1455'.
[  140.962838][ T9266] netlink: 'syz.0.1452': attribute type 9 has an invalid length.
[  140.965617][ T9266] netlink: 211924 bytes leftover after parsing attributes in process `syz.0.1452'.
[  142.572311][ T9305] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1470'.
[  142.595046][ T9308] netlink: 'syz.2.1471': attribute type 10 has an invalid length.
[  143.745599][ T9321] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1477'.
[  143.752465][ T9321] hsr_slave_0: left promiscuous mode
[  143.755860][ T9321] hsr_slave_1: left promiscuous mode
[  143.839944][ T9324] netlink: 'syz.2.1478': attribute type 4 has an invalid length.
[  143.853581][ T9324] netlink: 'syz.2.1478': attribute type 10 has an invalid length.
[  143.979547][ T9326] netlink: 'syz.0.1479': attribute type 3 has an invalid length.
[  144.690948][ T9338] ip6tnl0: mtu less than device minimum
[  144.708407][ T9338] netlink: 24051 bytes leftover after parsing attributes in process `syz.0.1485'.
[  144.955665][ T9347] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1489'.
[  146.693979][ T9373] netlink: 'syz.2.1501': attribute type 13 has an invalid length.
[  146.703415][ T9373] netlink: 'syz.2.1501': attribute type 17 has an invalid length.
[  146.931068][ T9373] sit0: left promiscuous mode
[  146.933483][ T9373] sit0: left allmulticast mode
[  147.032692][ T9373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.407224][ T9393] siw: device registration error -23
[  147.555479][ T9397] netlink: 'syz.0.1513': attribute type 10 has an invalid length.
[  147.558810][ T9397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1513'.
[  147.759997][ T9407] netlink: 'syz.0.1516': attribute type 10 has an invalid length.
[  147.767711][ T9407] bridge0: port 4(team0) entered disabled state
[  147.770976][ T9407] bridge0: port 3(bond0) entered disabled state
[  147.775378][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.778989][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.789425][ T9407] bridge0: port 4(team0) entered blocking state
[  147.792358][ T9407] bridge0: port 4(team0) entered forwarding state
[  147.795510][ T9407] bridge0: port 3(bond0) entered blocking state
[  147.798408][ T9407] bridge0: port 3(bond0) entered forwarding state
[  147.801528][ T9407] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.804652][ T9407] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.808027][ T9407] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.811226][ T9407] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.823479][ T9407] bridge0: port 4(team0) entered disabled state
[  147.826488][ T9407] bridge0: port 3(bond0) entered disabled state
[  147.829361][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.832636][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.841068][ T9409] netlink: 'syz.2.1517': attribute type 12 has an invalid length.
[  147.844526][ T9409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1517'.
[  148.197187][ T9429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.205491][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  148.209378][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  148.213202][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  148.217495][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  148.224373][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  148.266751][ T9430] erspan0 speed is unknown, defaulting to 1000
[  148.369885][ T9430] chnl_net:caif_netlink_parms(): no params data found
[  148.383231][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'.
[  148.907669][ T9430] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.910080][ T9430] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.920325][ T9430] bridge_slave_0: entered allmulticast mode
[  148.924642][ T9430] bridge_slave_0: entered promiscuous mode
[  148.928960][ T9451] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1532'.
[  148.937525][ T9453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1533'.
[  148.951452][ T9430] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.960380][ T9430] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.971125][ T9430] bridge_slave_1: entered allmulticast mode
[  148.977612][ T9430] bridge_slave_1: entered promiscuous mode
[  148.985300][ T9453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1533'.
[  149.011469][ T9453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1533'.
[  149.037856][ T9430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.044732][ T9430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.094058][ T9430] team0: Port device team_slave_0 added
[  149.098753][ T9430] team0: Port device team_slave_1 added
[  149.153026][ T9430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.155552][ T9430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.166404][ T9430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.175174][ T9430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.177870][ T9430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.200704][ T9430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.205506][ T9462] @: renamed from bond_slave_0 (while UP)
[  149.274733][ T9430] hsr_slave_0: entered promiscuous mode
[  149.277916][ T9430] hsr_slave_1: entered promiscuous mode
[  149.473236][   T55] Bluetooth: hci0: Malformed LE Event: 0x1d
[  149.728523][ T9482] netlink: 'syz.0.1547': attribute type 21 has an invalid length.
[  150.281727][   T55] Bluetooth: hci2: command tx timeout
[  150.461728][ T9430] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  150.466614][ T9430] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  150.475876][ T9430] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  150.487589][ T9430] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  150.588185][ T9430] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.612330][ T9430] 8021q: adding VLAN 0 to HW filter on device team0
[  150.620648][ T8447] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.623795][ T8447] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.637079][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.639648][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.783119][ T9512] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1556'.
[  150.786826][ T9430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.869270][ T9430] veth0_vlan: entered promiscuous mode
[  150.880130][ T9430] veth1_vlan: entered promiscuous mode
[  150.920473][ T9430] veth0_macvtap: entered promiscuous mode
[  150.935730][ T9430] veth1_macvtap: entered promiscuous mode
[  150.960488][ T9430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.979317][ T9430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.997665][ T5907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.013027][ T5907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.045037][ T5907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.051427][ T5907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.082668][ T9513] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1556'.
[  151.184396][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.187422][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.218855][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.226517][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.360803][   T55] Bluetooth: hci2: command tx timeout
[  153.463092][ T9533] netlink: 'syz.0.1565': attribute type 10 has an invalid length.
[  153.465577][ T9533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1565'.
[  153.473103][ T9533] batman_adv: batadv0: Adding interface: hsr_slave_1
[  153.475323][ T9533] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.496635][ T9533] batman_adv: batadv0: Interface activated: hsr_slave_1
[  153.656742][ T9555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1574'.
[  153.670742][ T9555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1574'.
[  153.865585][ T9574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.974995][ T9582] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1586'.
[  154.101356][ T9590] : renamed from pim6reg1
[  154.139307][ T9594] netlink: 'syz.3.1592': attribute type 32 has an invalid length.
[  154.441310][   T55] Bluetooth: hci2: command tx timeout
[  154.830084][ T9632] netlink: 'syz.3.1610': attribute type 10 has an invalid length.
[  154.845866][ T9632] bond0: (slave bond_slave_0): Releasing backup interface
[  155.022476][ T9638] xt_time: invalid argument - start or stop time greater than 23:59:59
[  155.111349][ T9646] netlink: 'syz.3.1617': attribute type 1 has an invalid length.
[  155.114709][ T9646] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1617'.
[  155.159937][ T9649] openvswitch: netlink: Flow actions attr not present in new flow.
[  155.286874][ T9660] netlink: 'syz.0.1624': attribute type 13 has an invalid length.
[  155.328648][ T9666] netlink: 'syz.0.1627': attribute type 8 has an invalid length.
[  155.352854][ T9666] netlink: 'syz.0.1627': attribute type 3 has an invalid length.
[  155.360037][ T9666] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.1627'.
[  156.293159][ T9687] netlink: 'syz.0.1636': attribute type 3 has an invalid length.
[  156.522413][   T55] Bluetooth: hci2: command tx timeout
[  156.604131][ T9714] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1649'.
[  156.685013][ T9719] netlink: 'syz.0.1652': attribute type 5 has an invalid length.
[  156.812071][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1653'.
[  157.379273][ T9740] delete_channel: no stack
[  158.362033][ T9754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.429395][ T9759] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1669'.
[  158.465904][ T9761] netlink: 'syz.0.1671': attribute type 1 has an invalid length.
[  158.835143][ T9774] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1677'.
[  159.428500][ T9819] netlink: 'syz.3.1698': attribute type 1 has an invalid length.
[  159.442737][ T9819] netlink: 376 bytes leftover after parsing attributes in process `syz.3.1698'.
[  159.597693][ T9837] netlink: 'syz.3.1705': attribute type 9 has an invalid length.
[  159.607165][ T9837] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.1705'.
[  159.853718][ T9864] netlink: 'syz.3.1718': attribute type 1 has an invalid length.
[  159.857160][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1718'.
[  160.087814][ T9870] syzkaller0: entered promiscuous mode
[  160.090266][ T9870] syzkaller0: entered allmulticast mode
[  160.287516][ T9884] netlink: 'syz.2.1727': attribute type 21 has an invalid length.
[  161.165533][ T9898] openvswitch: netlink: IP tunnel dst address not specified
[  161.195752][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1736'.
[  161.525064][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1741'.
[  161.613507][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'.
[  161.743780][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'.
[  161.844589][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1751'.
[  161.933766][ T9941] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1750'.
[  161.938718][ T9941] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1750'.
[  161.942981][ T9941] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  162.245119][ T9947] syzkaller1: tun_chr_ioctl cmd 1074025677
[  162.250826][ T9947] syzkaller1: linktype set to 776
[  162.447422][ T9957] syzkaller0: entered promiscuous mode
[  162.449767][ T9957] syzkaller0: entered allmulticast mode
[  163.355582][ T9966] netlink: 'syz.3.1764': attribute type 33 has an invalid length.
[  163.365192][ T9966] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1764'.
[  163.368842][ T9966] `: renamed from team0 (while UP)
[  163.968590][ T9992] netlink: 'syz.2.1777': attribute type 2 has an invalid length.
[  163.975449][ T9992] netlink: 110008 bytes leftover after parsing attributes in process `syz.2.1777'.
[  164.434733][T10005] netlink: 'syz.3.1783': attribute type 22 has an invalid length.
[  164.447352][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'.
[  164.452704][T10007] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  164.489820][T10011] netlink: 'syz.0.1786': attribute type 6 has an invalid length.
[  164.788739][   T55] Bluetooth: hci2: unexpected event 0x17 length: 15 > 6
[  164.858495][T10030] netlink: 'syz.2.1795': attribute type 21 has an invalid length.
[  164.879979][T10030] IPv6: NLM_F_CREATE should be specified when creating new route
[  165.553874][T10048] netlink: 'syz.3.1802': attribute type 4 has an invalid length.
[  166.120485][T10090] syzkaller1: tun_chr_ioctl cmd 1074025677
[  166.124922][T10090] syzkaller1: linktype set to 780
[  166.169876][T10090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1822'.
[  166.174833][T10090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1822'.
[  166.214621][   T55] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  166.369546][T10111] netlink: 'syz.2.1833': attribute type 1 has an invalid length.
[  166.400007][T10117] netlink: zone id is out of range
[  166.406977][T10117] netlink: zone id is out of range
[  166.409226][T10117] netlink: get zone limit has 8 unknown bytes
[  167.271525][T10143] netlink: 'syz.0.1847': attribute type 11 has an invalid length.
[  167.274763][T10143] __nla_validate_parse: 1 callbacks suppressed
[  167.274774][T10143] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1847'.
[  167.551756][T10156] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.555789][T10156] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  168.094271][T10193] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1870'.
[  168.105931][T10193] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  168.422884][   T55] Bluetooth: hci0: command 0x206a tx timeout
[  169.068930][T10205] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1876'.
[  169.128295][T10212] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.567066][T10221] netlink: 'syz.0.1882': attribute type 2 has an invalid length.
[  169.581980][T10221] netlink: 'syz.0.1882': attribute type 5 has an invalid length.
[  169.585592][T10221] netlink: 'syz.0.1882': attribute type 6 has an invalid length.
[  169.589240][T10221] netlink: 'syz.0.1882': attribute type 7 has an invalid length.
[  169.596230][T10221] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1882'.
[  169.600074][T10221] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.1882'.
[  169.605390][T10221] netlink: 'syz.0.1882': attribute type 2 has an invalid length.
[  169.609090][T10221] netlink: 'syz.0.1882': attribute type 5 has an invalid length.
[  169.612977][T10221] netlink: 'syz.0.1882': attribute type 6 has an invalid length.
[  169.617024][T10221] netlink: 'syz.0.1882': attribute type 7 has an invalid length.
[  169.621400][T10221] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1882'.
[  169.677245][T10226] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1884'.
[  169.938708][T10244] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1891'.
[  169.988726][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1895'.
[  170.014415][T10250] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1895'.
[  171.805087][T10299] erspan0 speed is unknown, defaulting to 1000
[  172.810361][T10343] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  172.813452][T10343] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  172.870293][T10347] __nla_validate_parse: 5 callbacks suppressed
[  172.870312][T10347] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1936'.
[  172.877157][T10347] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1936'.
[  173.803631][T10374] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1948'.
[  173.807274][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1948'.
[  174.123599][T10358] erspan0 speed is unknown, defaulting to 1000
[  174.247124][T10381] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1951'.
[  174.306482][T10381] netlink: 'syz.0.1951': attribute type 11 has an invalid length.
[  174.309329][T10381] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.1951'.
[  174.695704][T10380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.485929][ T5907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.578431][ T5907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.635645][ T5907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.699698][ T5907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.783997][ T5907] bridge_slave_1: left allmulticast mode
[  175.787594][ T5907] bridge_slave_1: left promiscuous mode
[  175.790989][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.797656][ T5907] bridge_slave_0: left allmulticast mode
[  175.800294][ T5907] bridge_slave_0: left promiscuous mode
[  175.803684][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.096203][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.100375][ T5907] bond0 (unregistering): Released all slaves
[  176.347569][ T5907] hsr_slave_0: left promiscuous mode
[  176.350055][ T5907] hsr_slave_1: left promiscuous mode
[  176.352604][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.355263][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.358240][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.361313][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.372016][ T5907] veth1_macvtap: left promiscuous mode
[  176.374316][ T5907] veth0_macvtap: left promiscuous mode
[  176.377247][ T5907] veth1_vlan: left promiscuous mode
[  176.379596][ T5907] veth0_vlan: left promiscuous mode
[  176.658456][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.663484][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.667250][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.693937][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.704435][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.719468][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.756653][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.763231][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.767282][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.770394][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.802175][ T5907] ` (unregistering): Port device team_slave_1 removed
[  176.829212][ T5907] ` (unregistering): Port device team_slave_0 removed
[  177.108217][T10432] erspan0 speed is unknown, defaulting to 1000
[  177.125050][T10434] erspan0 speed is unknown, defaulting to 1000
[  177.347780][T10432] chnl_net:caif_netlink_parms(): no params data found
[  177.427544][T10434] chnl_net:caif_netlink_parms(): no params data found
[  177.518230][T10432] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.521626][T10432] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.524774][T10432] bridge_slave_0: entered allmulticast mode
[  177.528666][T10432] bridge_slave_0: entered promiscuous mode
[  177.564137][T10432] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.567335][T10432] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.570498][T10432] bridge_slave_1: entered allmulticast mode
[  177.577842][T10432] bridge_slave_1: entered promiscuous mode
[  177.614293][T10456] netlink: 'syz.0.1975': attribute type 2 has an invalid length.
[  177.617935][T10456] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1975'.
[  177.658045][T10432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.669186][T10432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.767423][T10434] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.770858][T10434] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.773986][T10434] bridge_slave_0: entered allmulticast mode
[  177.784505][T10434] bridge_slave_0: entered promiscuous mode
[  177.789686][T10434] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.792685][T10434] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.795088][T10434] bridge_slave_1: entered allmulticast mode
[  177.797755][T10434] bridge_slave_1: entered promiscuous mode
[  177.804627][T10432] team0: Port device team_slave_0 added
[  177.824468][T10432] team0: Port device team_slave_1 added
[  177.826434][   T33] audit: type=1107 audit(1757890240.977:3): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  177.832640][T10434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.846529][T10434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.879691][T10432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.883351][T10432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.895140][T10432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.913162][T10432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.916913][T10432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.928993][T10432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.935322][T10434] team0: Port device team_slave_0 added
[  177.950323][T10434] team0: Port device team_slave_1 added
[  177.989259][T10434] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.994182][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.004376][T10434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.025322][T10434] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.028301][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.039375][T10434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.060425][T10432] hsr_slave_0: entered promiscuous mode
[  178.063684][T10432] hsr_slave_1: entered promiscuous mode
[  178.165241][T10434] hsr_slave_0: entered promiscuous mode
[  178.168383][T10434] hsr_slave_1: entered promiscuous mode
[  178.174781][T10434] debugfs: 'hsr0' already exists in 'hsr'
[  178.177310][T10434] Cannot create hsr debugfs directory
[  178.761403][   T55] Bluetooth: hci1: command tx timeout
[  178.840666][   T55] Bluetooth: hci2: command tx timeout
[  180.601133][   T55] Bluetooth: hci0: command 0x206a tx timeout
[  180.842407][   T55] Bluetooth: hci1: command tx timeout
[  180.920627][   T55] Bluetooth: hci2: command tx timeout
[  181.295912][T10432] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  181.306183][T10432] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  181.313023][T10432] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  181.337303][T10432] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  181.403560][T10434] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  181.413156][T10434] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  181.418679][T10434] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  181.424830][T10434] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  181.537138][T10434] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.570009][T10434] 8021q: adding VLAN 0 to HW filter on device team0
[  181.586863][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.589697][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.597704][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.600443][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.628471][T10432] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.678093][T10432] 8021q: adding VLAN 0 to HW filter on device team0
[  181.694180][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.697022][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.713415][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.716247][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.875221][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.940144][T10432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.103521][T10434] veth0_vlan: entered promiscuous mode
[  182.116565][T10434] veth1_vlan: entered promiscuous mode
[  182.149810][T10434] veth0_macvtap: entered promiscuous mode
[  182.165412][T10434] veth1_macvtap: entered promiscuous mode
[  182.178200][T10434] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.246727][T10434] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.259644][ T5855] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.263873][ T5855] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.267424][ T5855] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.277466][ T5855] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.366380][T10432] veth0_vlan: entered promiscuous mode
[  182.376689][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.379258][T10432] veth1_vlan: entered promiscuous mode
[  182.384778][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.430006][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.434756][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.445051][T10432] veth0_macvtap: entered promiscuous mode
[  182.453440][T10432] veth1_macvtap: entered promiscuous mode
[  182.479780][T10432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.503857][T10432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.515183][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.519638][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.531783][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.540142][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.612743][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.615341][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.623809][T10530] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1992'.
[  182.648869][ T4674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.660580][ T4674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.716232][T10537] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1967'.
[  182.933244][ T5848] Bluetooth: hci1: command tx timeout
[  183.011839][ T5848] Bluetooth: hci2: command tx timeout
[  184.141282][T10576] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2013'.
[  185.000650][ T5848] Bluetooth: hci1: command tx timeout
[  185.090666][ T5848] Bluetooth: hci2: command tx timeout
[  185.586768][T10598] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2021'.
[  187.009826][T10646] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  187.559721][T10662] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2050'.
[  189.270343][T10706] netlink: 'syz.4.2068': attribute type 1 has an invalid length.
[  189.378282][T10704] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  189.384200][T10704] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  189.481203][ T4674] wlan1: Trigger new scan to find an IBSS to join
[  190.268542][T10744] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2085'.
[  190.303311][T10744] netlink: zone id is out of range
[  190.306198][T10744] netlink: zone id is out of range
[  190.309134][T10744] netlink: zone id is out of range
[  190.319498][T10744] netlink: zone id is out of range
[  190.335935][T10744] netlink: zone id is out of range
[  190.338076][T10744] netlink: zone id is out of range
[  190.348698][T10744] netlink: zone id is out of range
[  190.353688][T10744] netlink: zone id is out of range
[  190.355768][T10744] netlink: zone id is out of range
[  190.363879][T10744] netlink: zone id is out of range
[  190.444325][T10756] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2088'.
[  190.907167][T10778] C: renamed from team_slave_0 (while UP)
[  190.912196][T10778] netlink: 'syz.4.2099': attribute type 3 has an invalid length.
[  191.098174][T10788] netlink: 'syz.4.2104': attribute type 3 has an invalid length.
[  191.101646][T10788] netlink: 199752 bytes leftover after parsing attributes in process `syz.4.2104'.
[  191.516636][T10807] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2113'.
[  191.520727][T10807] unsupported nla_type 65024
[  191.580137][T10811] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2115'.
[  191.705275][T10819] netlink: 'syz.4.2119': attribute type 16 has an invalid length.
[  191.708124][T10819] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2119'.
[  192.531292][   T26] wlan1: Trigger new scan to find an IBSS to join
[  192.551363][T10844] netlink: 'syz.5.2131': attribute type 10 has an invalid length.
[  192.558438][T10844] team0: Port device macvlan1 added
[  192.565646][T10844] netlink: 'syz.5.2131': attribute type 11 has an invalid length.
[  192.568374][T10844] netlink: 'syz.5.2131': attribute type 11 has an invalid length.
[  192.643024][T10845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2128'.
[  193.894187][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.903631][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.982221][ T5855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.025779][ T5848] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  194.117835][ T5855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.318754][ T5855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.461693][ T5855] batman_adv: batadv0: Removing interface: netdevsim0
[  194.470406][ T5855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.488530][T10900] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2154'.
[  195.480782][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  195.898127][ T5855] bond0 (unregistering): (slave c@): Releasing backup interface
[  195.903474][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.911493][ T5855] bond0 (unregistering): Released all slaves
[  195.931844][T10921] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2162'.
[  197.076773][ T4454] wlan1: Creating new IBSS network, BSSID 66:71:d1:75:e4:17
[  197.161271][ T5855] hsr_slave_0: left promiscuous mode
[  197.164195][ T5855] hsr_slave_1: left promiscuous mode
[  197.166843][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.170453][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.436203][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  197.468764][ T5855] team0 (unregistering): Port device C removed
[  197.770461][  T790] infiniband syz0: ib_query_port failed (-19)
[  197.815780][T10967] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  197.820070][T10967] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  198.039400][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'.
[  198.043581][T10983] netlink: 'syz.0.2188': attribute type 2 has an invalid length.
[  198.046236][T10983] netlink: 'syz.0.2188': attribute type 1 has an invalid length.
[  198.048827][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'.
[  198.102730][T10986] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2189'.
[  198.106656][ T5848] Bluetooth: hci1: Unable to find connection for big 0x00
[  198.532969][T10993] delete_channel: no stack
[  198.535176][T10993] delete_channel: no stack
[  198.678963][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2199'.
[  199.563666][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.645747][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.768308][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.844838][ T5855] bond0: (slave netdevsim0): Releasing backup interface
[  199.853765][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.891108][T11036] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  200.017963][ T5855] bridge_slave_1: left allmulticast mode
[  200.019951][ T5855] bridge_slave_1: left promiscuous mode
[  200.051756][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.076075][ T5855] bridge_slave_0: left allmulticast mode
[  200.100778][ T5855] bridge_slave_0: left promiscuous mode
[  200.102848][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.393589][ T5855] team0: Port device bond0 removed
[  200.396848][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.401601][ T5855] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  200.406020][ T5855] bond0 (unregistering): Released all slaves
[  200.416124][T11045] netlink: 'syz.5.2214': attribute type 12 has an invalid length.
[  200.419516][T11045] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2214'.
[  200.859698][ T5855] hsr_slave_0: left promiscuous mode
[  200.891769][ T5855] hsr_slave_1: left promiscuous mode
[  200.894742][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.897859][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.970239][ T5855] veth1_macvtap: left promiscuous mode
[  200.976347][ T5855] veth0_macvtap: left promiscuous mode
[  201.943159][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  201.976534][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  202.257351][T11068] sit0: entered promiscuous mode
[  202.259795][T11068] sit0: entered allmulticast mode
[  202.405492][T11085] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2231'.
[  202.664571][ T5855] ==================================================================
[  202.667431][ T5855] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  202.670426][ T5855] Write of size 8 at addr ffff8881126c9fa8 by task kworker/u8:2/5855
[  202.674983][ T5855] 
[  202.676061][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  202.676077][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.676086][ T5855] Workqueue: netns cleanup_net
[  202.676106][ T5855] Call Trace:
[  202.676112][ T5855]  <TASK>
[  202.676118][ T5855]  dump_stack_lvl+0x189/0x250
[  202.676135][ T5855]  ? __virt_addr_valid+0x1c8/0x5c0
[  202.676152][ T5855]  ? rcu_is_watching+0x15/0xb0
[  202.676164][ T5855]  ? __kasan_check_byte+0x12/0x40
[  202.676180][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.676192][ T5855]  ? rcu_is_watching+0x15/0xb0
[  202.676203][ T5855]  ? lock_release+0x4b/0x3e0
[  202.676222][ T5855]  ? __virt_addr_valid+0x1c8/0x5c0
[  202.676236][ T5855]  ? __virt_addr_valid+0x4a5/0x5c0
[  202.676251][ T5855]  print_report+0xca/0x240
[  202.676262][ T5855]  ? __xfrm_state_delete+0x666/0xca0
[  202.676278][ T5855]  kasan_report+0x118/0x150
[  202.676296][ T5855]  ? __xfrm_state_delete+0x666/0xca0
[  202.676311][ T5855]  __xfrm_state_delete+0x666/0xca0
[  202.676328][ T5855]  xfrm_state_flush+0x45f/0x770
[  202.676345][ T5855]  xfrm6_tunnel_net_exit+0x3c/0x100
[  202.676371][ T5855]  ops_undo_list+0x49a/0x990
[  202.676387][ T5855]  ? __pfx_ops_undo_list+0x10/0x10
[  202.676401][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  202.676416][ T5855]  cleanup_net+0x4c5/0x800
[  202.676429][ T5855]  ? __pfx_cleanup_net+0x10/0x10
[  202.676443][ T5855]  ? _raw_spin_unlock_irq+0x23/0x50
[  202.676456][ T5855]  ? process_scheduled_works+0x9ef/0x17b0
[  202.676467][ T5855]  ? process_scheduled_works+0x9ef/0x17b0
[  202.676478][ T5855]  process_scheduled_works+0xae1/0x17b0
[  202.676498][ T5855]  ? __pfx_process_scheduled_works+0x10/0x10
[  202.676514][ T5855]  worker_thread+0x8a0/0xda0
[  202.676526][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  202.676540][ T5855]  ? __kthread_parkme+0x7b/0x200
[  202.676555][ T5855]  kthread+0x711/0x8a0
[  202.676570][ T5855]  ? __pfx_worker_thread+0x10/0x10
[  202.676581][ T5855]  ? __pfx_kthread+0x10/0x10
[  202.676595][ T5855]  ? _raw_spin_unlock_irq+0x23/0x50
[  202.676606][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.676618][ T5855]  ? __pfx_kthread+0x10/0x10
[  202.676632][ T5855]  ret_from_fork+0x439/0x7d0
[  202.676646][ T5855]  ? __pfx_ret_from_fork+0x10/0x10
[  202.676659][ T5855]  ? __switch_to_asm+0x39/0x70
[  202.676673][ T5855]  ? __switch_to_asm+0x33/0x70
[  202.676686][ T5855]  ? __pfx_kthread+0x10/0x10
[  202.676699][ T5855]  ret_from_fork_asm+0x1a/0x30
[  202.676723][ T5855]  </TASK>
[  202.676727][ T5855] 
[  202.779446][ T5855] Allocated by task 8073:
[  202.781267][ T5855]  kasan_save_track+0x3e/0x80
[  202.783245][ T5855]  __kasan_slab_alloc+0x6c/0x80
[  202.785237][ T5855]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  202.787462][ T5855]  xfrm_state_alloc+0x24/0x2f0
[  202.789364][ T5855]  __find_acq_core+0x8a7/0x1c00
[  202.791008][ T5855]  xfrm_find_acq+0x78/0xa0
[  202.792561][ T5855]  xfrm_alloc_userspi+0x6b3/0xc90
[  202.794271][ T5855]  xfrm_user_rcv_msg+0x7a3/0xab0
[  202.795915][ T5855]  netlink_rcv_skb+0x208/0x470
[  202.797638][ T5855]  xfrm_netlink_rcv+0x79/0x90
[  202.799441][ T5855]  netlink_unicast+0x82f/0x9e0
[  202.801391][ T5855]  netlink_sendmsg+0x805/0xb30
[  202.803408][ T5855]  __sock_sendmsg+0x21c/0x270
[  202.805072][ T5855]  ____sys_sendmsg+0x505/0x830
[  202.806682][ T5855]  ___sys_sendmsg+0x21f/0x2a0
[  202.808416][ T5855]  __x64_sys_sendmsg+0x19b/0x260
[  202.810421][ T5855]  do_syscall_64+0xfa/0x3b0
[  202.812352][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.814794][ T5855] 
[  202.815807][ T5855] Freed by task 47:
[  202.817460][ T5855]  kasan_save_track+0x3e/0x80
[  202.819525][ T5855]  kasan_save_free_info+0x46/0x50
[  202.821762][ T5855]  __kasan_slab_free+0x5b/0x80
[  202.823894][ T5855]  kmem_cache_free+0x18f/0x400
[  202.826026][ T5855]  xfrm_state_gc_task+0x52d/0x6b0
[  202.828277][ T5855]  process_scheduled_works+0xae1/0x17b0
[  202.830705][ T5855]  worker_thread+0x8a0/0xda0
[  202.832685][ T5855]  kthread+0x711/0x8a0
[  202.834512][ T5855]  ret_from_fork+0x439/0x7d0
[  202.836564][ T5855]  ret_from_fork_asm+0x1a/0x30
[  202.838697][ T5855] 
[  202.839785][ T5855] The buggy address belongs to the object at ffff8881126c9f80
[  202.839785][ T5855]  which belongs to the cache xfrm_state of size 928
[  202.845796][ T5855] The buggy address is located 40 bytes inside of
[  202.845796][ T5855]  freed 928-byte region [ffff8881126c9f80, ffff8881126ca320)
[  202.850448][ T5855] 
[  202.851312][ T5855] The buggy address belongs to the physical page:
[  202.853542][ T5855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881126cad00 pfn:0x1126c8
[  202.857393][ T5855] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  202.860537][ T5855] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  202.863757][ T5855] page_type: f5(slab)
[  202.865439][ T5855] raw: 057ff00000000040 ffff888104e39280 dead000000000122 0000000000000000
[  202.868698][ T5855] raw: ffff8881126cad00 00000000800e0003 00000000f5000000 0000000000000000
[  202.871706][ T5855] head: 057ff00000000040 ffff888104e39280 dead000000000122 0000000000000000
[  202.875304][ T5855] head: ffff8881126cad00 00000000800e0003 00000000f5000000 0000000000000000
[  202.878982][ T5855] head: 057ff00000000002 ffffea000449b201 00000000ffffffff 00000000ffffffff
[  202.882607][ T5855] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  202.886289][ T5855] page dumped because: kasan: bad access detected
[  202.888951][ T5855] page_owner tracks the page as allocated
[  202.891391][ T5855] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6190, tgid 6189 (syz.1.121), ts 64094721537, free_ts 58876891846
[  202.899065][ T5855]  post_alloc_hook+0x240/0x2a0
[  202.900719][ T5855]  get_page_from_freelist+0x21e4/0x22c0
[  202.902987][ T5855]  __alloc_frozen_pages_noprof+0x181/0x370
[  202.905416][ T5855]  alloc_pages_mpol+0x232/0x4a0
[  202.907313][ T5855]  allocate_slab+0x8a/0x370
[  202.909293][ T5855]  ___slab_alloc+0xbeb/0x1420
[  202.911343][ T5855]  kmem_cache_alloc_noprof+0x283/0x3c0
[  202.913657][ T5855]  xfrm_state_alloc+0x24/0x2f0
[  202.915695][ T5855]  pfkey_add+0x6e4/0x2e00
[  202.917613][ T5855]  pfkey_sendmsg+0xbfe/0x1090
[  202.919668][ T5855]  __sock_sendmsg+0x21c/0x270
[  202.921632][ T5855]  ____sys_sendmsg+0x505/0x830
[  202.923658][ T5855]  ___sys_sendmsg+0x21f/0x2a0
[  202.925681][ T5855]  __x64_sys_sendmsg+0x19b/0x260
[  202.927770][ T5855]  do_syscall_64+0xfa/0x3b0
[  202.929688][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.932245][ T5855] page last free pid 5846 tgid 5846 stack trace:
[  202.934945][ T5855]  __free_frozen_pages+0xbc4/0xd30
[  202.937157][ T5855]  __slab_free+0x303/0x3c0
[  202.938896][ T5855]  qlist_free_all+0x97/0x140
[  202.940513][ T5855]  kasan_quarantine_reduce+0x148/0x160
[  202.942719][ T5855]  __kasan_slab_alloc+0x22/0x80
[  202.944504][ T5855]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  202.946382][ T5855]  getname_flags+0xb8/0x540
[  202.947969][ T5855]  user_path_at+0x24/0x60
[  202.949502][ T5855]  __se_sys_inotify_add_watch+0x182/0xf10
[  202.951523][ T5855]  do_syscall_64+0xfa/0x3b0
[  202.953362][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.955921][ T5855] 
[  202.957062][ T5855] Memory state around the buggy address:
[  202.959510][ T5855]  ffff8881126c9e80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  202.962982][ T5855]  ffff8881126c9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  202.966537][ T5855] >ffff8881126c9f80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.970021][ T5855]                                   ^
[  202.972319][ T5855]  ffff8881126ca000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.975640][ T5855]  ffff8881126ca080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.978975][ T5855] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  202.982516][ T5855] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  202.985833][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  202.989741][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.993913][ T5855] Workqueue: netns cleanup_net
[  202.995901][ T5855] Call Trace:
[  202.997374][ T5855]  <TASK>
[  202.998624][ T5855]  dump_stack_lvl+0x99/0x250
[  203.000612][ T5855]  ? __asan_memcpy+0x40/0x70
[  203.002618][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.004741][ T5855]  ? __pfx__printk+0x10/0x10
[  203.006699][ T5855]  vpanic+0x281/0x750
[  203.008443][ T5855]  ? __pfx_print_hex_dump+0x10/0x10
[  203.010645][ T5855]  ? __pfx_vpanic+0x10/0x10
[  203.012599][ T5855]  ? irqentry_exit+0x74/0x90
[  203.014589][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.016772][ T5855]  panic+0xb9/0xc0
[  203.018334][ T5855]  ? __pfx_panic+0x10/0x10
[  203.020234][ T5855]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  203.022718][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  203.025401][ T5855]  ? __xfrm_state_delete+0x666/0xca0
[  203.027651][ T5855]  check_panic_on_warn+0x89/0xb0
[  203.029776][ T5855]  ? __xfrm_state_delete+0x666/0xca0
[  203.032005][ T5855]  end_report+0x78/0x160
[  203.033802][ T5855]  kasan_report+0x129/0x150
[  203.035742][ T5855]  ? __xfrm_state_delete+0x666/0xca0
[  203.037957][ T5855]  __xfrm_state_delete+0x666/0xca0
[  203.040141][ T5855]  xfrm_state_flush+0x45f/0x770
[  203.042185][ T5855]  xfrm6_tunnel_net_exit+0x3c/0x100
[  203.044340][ T5855]  ops_undo_list+0x49a/0x990
[  203.046079][ T5855]  ? __pfx_ops_undo_list+0x10/0x10
[  203.048125][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  203.050258][ T5855]  cleanup_net+0x4c5/0x800
[  203.052161][ T5855]  ? __pfx_cleanup_net+0x10/0x10
[  203.054389][ T5855]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.056670][ T5855]  ? process_scheduled_works+0x9ef/0x17b0
[  203.059165][ T5855]  ? process_scheduled_works+0x9ef/0x17b0
[  203.061649][ T5855]  process_scheduled_works+0xae1/0x17b0
[  203.064069][ T5855]  ? __pfx_process_scheduled_works+0x10/0x10
[  203.066640][ T5855]  worker_thread+0x8a0/0xda0
[  203.068626][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  203.071326][ T5855]  ? __kthread_parkme+0x7b/0x200
[  203.073477][ T5855]  kthread+0x711/0x8a0
[  203.075286][ T5855]  ? __pfx_worker_thread+0x10/0x10
[  203.077500][ T5855]  ? __pfx_kthread+0x10/0x10
[  203.079511][ T5855]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.081774][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.083934][ T5855]  ? __pfx_kthread+0x10/0x10
[  203.085914][ T5855]  ret_from_fork+0x439/0x7d0
[  203.087883][ T5855]  ? __pfx_ret_from_fork+0x10/0x10
[  203.090064][ T5855]  ? __switch_to_asm+0x39/0x70
[  203.092098][ T5855]  ? __switch_to_asm+0x33/0x70
[  203.093953][ T5855]  ? __pfx_kthread+0x10/0x10
[  203.095801][ T5855]  ret_from_fork_asm+0x1a/0x30
[  203.097602][ T5855]  </TASK>
[  203.099486][ T5855] Kernel Offset: disabled
[  203.101205][ T5855] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:51:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900036ef090
R8 =ffff888020ff0237 R9 =1ffff110041fe046 R10=dffffc0000000000 R11=ffffffff854fab40
R12=dffffc0000000000 R13=ffffffff99b008ef R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854fabbc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=0000000115bac000 CR4=000006f0
DR0=0000000000000082 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8eb6ba7498 00007f8eb6ba7470 XMM03=00007f8eb6ba74a8 00007f8eb6ba74a0
XMM04=00007f8eb770d100 00007f8eb6ba7460 XMM05=00007f8eb6ba7478 00007f8eb6ba74c0
XMM06=00007f8eb6ba74b8 00007f8eb6ba74b0 XMM07=00007f8eb6ba74a8 00007f8eb6ba74a0
XMM08=2b7302812c3423cb ae48df7b56ef03a9 XMM09=0000000000000000 00007f8eb6a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=61c79c4c31289900 RDX=0000000000000000
RSI=ffffffff8d9cdca9 RDI=ffffffff8be33e00 RBP=ffffffff81ae7010 RSP=ffffc900001e0648
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff5200003c0e4
R12=0000000000000002 R13=ffffffff99b04388 R14=0000000000000001 R15=0000000000000046
RIP=ffffffff8b7a8197 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8eb77ca6c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8338bd7dac CR3=0000000115bac000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
