last executing test programs:

1m51.200045921s ago: executing program 2 (id=928):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0)

1m51.15746134s ago: executing program 2 (id=929):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f8d90000004f0c0400010000000062d95800000000000101871edd0000a69d35a2ff7f4708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a0300", 0x4c}], 0x1}, 0x0)

1m51.071518163s ago: executing program 2 (id=931):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

1m50.997411838s ago: executing program 2 (id=936):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r7, &(0x7f0000000140), 0x12)

1m50.997250429s ago: executing program 0 (id=937):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
setsockopt$sock_attach_bpf(r1, 0x1, 0x2000, &(0x7f0000000040), 0x3b)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x7, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8404}, 0x8001)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x14, &(0x7f0000000500), 0x4)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1m50.791995323s ago: executing program 0 (id=939):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x84, 0x2}], 0x10}, 0x0)

1m50.752706982s ago: executing program 0 (id=941):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

1m50.68174006s ago: executing program 0 (id=942):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48)

1m50.681387334s ago: executing program 2 (id=943):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0xd, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r3, r1, 0x0, r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m50.681239105s ago: executing program 0 (id=944):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
close(r0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x81, 0x1, 0xb, 0x0, 0x6, 0x24051, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x18, 0xba, 0x8, 0x2, 0x7, 0x2, 0x3, 0x0, 0x344, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x43}, 0x40002020)

1m50.571162278s ago: executing program 0 (id=945):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x58}}, 0x200000d4)

1m50.4722508s ago: executing program 32 (id=945):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x58}}, 0x200000d4)

1m50.290581175s ago: executing program 2 (id=947):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x20, 0x38, 0x0, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

1m50.289578252s ago: executing program 33 (id=947):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x20, 0x38, 0x0, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

2.937997392s ago: executing program 3 (id=2665):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)

2.879522255s ago: executing program 3 (id=2666):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}, 0xd0a0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000280), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e46558"], 0xe)
socketpair(0x2c, 0xa, 0x5c, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x0, 0xfffffffc}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5b20e8487938", 0x6}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003200b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0)

1.223371521s ago: executing program 4 (id=2673):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300), 0x100000000000032c}, 0x20000080)
r0 = gettid()
syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/uts\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000001240)="b9ff", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x11, &(0x7f0000001080)=ANY=[], 0x0, 0x4, 0x66, &(0x7f0000001280)=""/102, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001180)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001340)=[{0x1, 0x3, 0x6, 0x1}, {0x3, 0x1, 0x5, 0x8}], 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x25, 0x1, 0x1, &(0x7f00000000c0))
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3}, {0x1, 0x0, 0x0, 0xc}]}, 0x94)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x7c, &(0x7f0000000000)=r7, 0x8)

1.20574156s ago: executing program 3 (id=2674):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r1, 0x0, 0x0)

1.125732091s ago: executing program 4 (id=2675):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001600811e4e81f782db44b9040a1d0802a6cdda08040000a1180002461a1a39738c1e541208010f0100814401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x4050)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000080))

1.048847106s ago: executing program 3 (id=2676):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x103442, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r3 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="0de548b6a3ae0e", 0x7}], 0x1, &(0x7f0000000000)=[{0x18, 0x10d, 0x1000, "438e3e"}, {0x10, 0x10e, 0x6488}], 0x28}, 0x40)
close(r1)

1.048314995s ago: executing program 1 (id=2677):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delsa={0x28, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {@in6=@rand_addr=' \x01\x00', 0x4d5, 0xa, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4004000)

1.048165282s ago: executing program 1 (id=2678):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8911, &(0x7f0000000080))

966.681192ms ago: executing program 1 (id=2679):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x28)

966.493818ms ago: executing program 1 (id=2680):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x10, 0x1, 0xc}], 0x10}, 0x800)

840.943005ms ago: executing program 1 (id=2681):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f089e", 0x9}, {&(0x7f0000000180)="68ca8abd0058fc0a1d6b689866f0", 0xe}], 0x2}, 0x0)

840.455943ms ago: executing program 1 (id=2682):
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a80), 0x18}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r4, &(0x7f0000000480), &(0x7f0000000600)=""/251, 0x4}, 0x20)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0xfff, 0x28}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c0000007a006bcd9e3fe3dc6e08000007aa0004000000007ea60864162cf36504005425198bc3488bc3a0e69e94003651f668c366682fb6e27bbfa83b5cae0300c9fcd1938037e786a62ce84f2ecfa528f15d9fa966f796c172b4f6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x1, 0xc, 0x8000, 0x3}, 0x10, 0x2ba3c, r5, 0x0, &(0x7f0000000900), 0x0, 0x10, 0x8}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{}, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)

350.276672ms ago: executing program 4 (id=2683):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)

233.221693ms ago: executing program 4 (id=2684):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000071108c000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

229.228506ms ago: executing program 3 (id=2685):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)

92.907308ms ago: executing program 4 (id=2686):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90)

92.650052ms ago: executing program 3 (id=2687):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x28)
setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x11589, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r7, 0x8)

0s ago: executing program 4 (id=2688):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xb4, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:8315' (ED25519) to the list of known hosts.
syzkaller login: [   48.978882][ T5773] cgroup: Unknown subsys name 'net'
[   49.064806][ T5773] cgroup: Unknown subsys name 'cpuset'
[   49.070614][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.481056][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.062424][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.068722][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.072909][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.076514][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.080020][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.170134][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.561808][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.565710][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.569339][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.580957][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.584587][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.591687][ T5891] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.599844][ T5891] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.603170][ T5895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.624320][ T5890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.628232][ T5895] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.629460][ T5890] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.634782][ T5895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.634901][ T5890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.651254][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.656322][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.848918][ T5887] chnl_net:caif_netlink_parms(): no params data found
[   58.986796][ T5888] chnl_net:caif_netlink_parms(): no params data found
[   59.024280][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.027943][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.031617][ T5887] bridge_slave_0: entered allmulticast mode
[   59.035565][ T5887] bridge_slave_0: entered promiscuous mode
[   59.048945][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.052840][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.055873][ T5887] bridge_slave_1: entered allmulticast mode
[   59.059717][ T5887] bridge_slave_1: entered promiscuous mode
[   59.106545][ T5892] chnl_net:caif_netlink_parms(): no params data found
[   59.115111][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.126519][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.178411][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.182490][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.185406][ T5888] bridge_slave_0: entered allmulticast mode
[   59.189076][ T5888] bridge_slave_0: entered promiscuous mode
[   59.211932][ T5887] team0: Port device team_slave_0 added
[   59.219966][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.223571][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.226458][ T5888] bridge_slave_1: entered allmulticast mode
[   59.231217][ T5888] bridge_slave_1: entered promiscuous mode
[   59.235390][ T5887] team0: Port device team_slave_1 added
[   59.301036][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.330893][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.333783][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.344089][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.353712][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.357666][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.362343][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.365432][ T5892] bridge_slave_0: entered allmulticast mode
[   59.369389][ T5892] bridge_slave_0: entered promiscuous mode
[   59.376263][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.378991][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.388372][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.408236][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.413125][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.415530][ T5892] bridge_slave_1: entered allmulticast mode
[   59.418668][ T5892] bridge_slave_1: entered promiscuous mode
[   59.438592][ T5888] team0: Port device team_slave_0 added
[   59.460994][ T5888] team0: Port device team_slave_1 added
[   59.465042][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.487131][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.502540][ T5887] hsr_slave_0: entered promiscuous mode
[   59.504981][ T5887] hsr_slave_1: entered promiscuous mode
[   59.536359][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.538989][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.548808][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.566110][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.568485][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.577228][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.582373][ T5892] team0: Port device team_slave_0 added
[   59.601334][ T5892] team0: Port device team_slave_1 added
[   59.660875][ T5888] hsr_slave_0: entered promiscuous mode
[   59.663283][ T5888] hsr_slave_1: entered promiscuous mode
[   59.665792][ T5888] debugfs: 'hsr0' already exists in 'hsr'
[   59.667723][ T5888] Cannot create hsr debugfs directory
[   59.670090][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.673772][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.682424][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.696637][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.699159][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.708433][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.811878][ T5892] hsr_slave_0: entered promiscuous mode
[   59.814397][ T5892] hsr_slave_1: entered promiscuous mode
[   59.816832][ T5892] debugfs: 'hsr0' already exists in 'hsr'
[   59.819029][ T5892] Cannot create hsr debugfs directory
[   59.953854][ T5887] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.983495][ T5887] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.000697][ T5887] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.018370][ T5887] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.047699][ T5888] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.062344][ T5888] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.082418][ T5888] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.092198][ T5888] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.139653][ T5892] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.145648][ T5892] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.163612][ T5892] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.170071][ T5892] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.224294][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.252115][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[   60.268036][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.271247][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.292264][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.295212][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.301792][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.334002][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[   60.348055][  T607] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.350471][  T607] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.363728][  T607] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.366099][  T607] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.385856][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.410115][ T5892] 8021q: adding VLAN 0 to HW filter on device team0
[   60.418692][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.421220][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.438964][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.441312][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.578235][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.657069][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.665812][ T5887] veth0_vlan: entered promiscuous mode
[   60.672217][ T5890] Bluetooth: hci1: command tx timeout
[   60.674783][ T5890] Bluetooth: hci2: command tx timeout
[   60.677339][ T5890] Bluetooth: hci0: command tx timeout
[   60.690940][ T5887] veth1_vlan: entered promiscuous mode
[   60.736549][ T5888] veth0_vlan: entered promiscuous mode
[   60.742110][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.754827][ T5888] veth1_vlan: entered promiscuous mode
[   60.759486][ T5887] veth0_macvtap: entered promiscuous mode
[   60.772982][ T5887] veth1_macvtap: entered promiscuous mode
[   60.798516][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.809705][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.827963][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.833132][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.836299][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.839598][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.845998][ T5888] veth0_macvtap: entered promiscuous mode
[   60.864470][ T5888] veth1_macvtap: entered promiscuous mode
[   60.875147][ T5892] veth0_vlan: entered promiscuous mode
[   60.893063][ T5892] veth1_vlan: entered promiscuous mode
[   60.916775][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.929805][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.959314][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.965927][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.982055][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.985730][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.998319][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.004188][ T5892] veth0_macvtap: entered promiscuous mode
[   61.013428][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.022604][ T5892] veth1_macvtap: entered promiscuous mode
[   61.067774][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.071526][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.077885][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.099033][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.104020][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.114749][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.127774][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.139279][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.156851][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.161959][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.189313][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.207781][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.296008][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.299286][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.348505][ T5955] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12'.
[   61.356752][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.360870][   T54] Bluetooth: hci0: Dropping invalid advertising data
[   61.364236][   T54] Bluetooth: hci0: unknown advertising packet type: 0xff
[   61.364258][   T54] Bluetooth: hci0: Malformed LE Event: 0x02
[   61.372901][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.803038][ T5987] openvswitch: netlink: Actions may not be safe on all matching packets
[   62.408717][ T6020] netlink: 124 bytes leftover after parsing attributes in process `syz.1.47'.
[   62.506562][ T6028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.50'.
[   62.683581][ T6035] syzkaller0: entered promiscuous mode
[   62.685821][ T6035] syzkaller0: entered allmulticast mode
[   62.752122][   T54] Bluetooth: hci0: command tx timeout
[   62.754334][   T54] Bluetooth: hci2: command tx timeout
[   62.756518][   T54] Bluetooth: hci1: command tx timeout
[   62.811888][ T6046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.904328][ T6048] netlink: 'syz.0.59': attribute type 2 has an invalid length.
[   62.913098][ T6048] netlink: 'syz.0.59': attribute type 1 has an invalid length.
[   62.916417][ T6048] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.59'.
[   62.956029][ T6052] netlink: 188 bytes leftover after parsing attributes in process `syz.1.61'.
[   63.808313][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'.
[   64.136641][ T6087] C: renamed from team_slave_0 (while UP)
[   64.142051][ T6087] netlink: 'syz.0.78': attribute type 3 has an invalid length.
[   64.145169][ T6087] netlink: 152 bytes leftover after parsing attributes in process `syz.0.78'.
[   64.149398][ T6087] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   64.310139][ T6105] netlink: 7 bytes leftover after parsing attributes in process `syz.2.85'.
[   64.318566][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'.
[   64.484588][    C0] hrtimer: interrupt took 43759 ns
[   64.492804][ T6115] Zero length message leads to an empty skb
[   64.915621][ T5890] Bluetooth: hci1: command tx timeout
[   64.918706][ T5890] Bluetooth: hci2: command tx timeout
[   64.921693][ T5890] Bluetooth: hci0: command tx timeout
[   65.147106][ T6129] netlink: 'syz.0.95': attribute type 11 has an invalid length.
[   65.150103][ T6129] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.95'.
[   65.171435][ T6128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.407431][ T6146] syzkaller0: entered promiscuous mode
[   66.440879][ T6146] syzkaller0: entered allmulticast mode
[   67.004473][   T54] Bluetooth: hci0: command tx timeout
[   67.006827][   T54] Bluetooth: hci2: command tx timeout
[   67.009249][ T5890] Bluetooth: hci1: command tx timeout
[   67.275144][ T6179] delete_channel: no stack
[   68.398927][ T6191] netlink: 'syz.0.120': attribute type 1 has an invalid length.
[   68.402199][ T6191] netlink: 'syz.0.120': attribute type 2 has an invalid length.
[   68.457813][ T6193] netlink: 'syz.0.121': attribute type 39 has an invalid length.
[   68.469232][ T6170] netlink: 68 bytes leftover after parsing attributes in process `syz.2.111'.
[   68.477226][ T6170] netlink: 68 bytes leftover after parsing attributes in process `syz.2.111'.
[   68.561981][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'.
[   68.672487][ T6203] netlink: 51563 bytes leftover after parsing attributes in process `syz.1.126'.
[   68.938961][ T6222] warning: `syz.2.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.511795][ T6258] netlink: 'syz.0.151': attribute type 10 has an invalid length.
[   69.556062][ T6258] batman_adv: batadv0: Adding interface: netdevsim0
[   69.559069][ T6258] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.571008][ T6258] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   69.868535][ T6268] delete_channel: no stack
[   70.212921][ T6277] netlink: 180 bytes leftover after parsing attributes in process `syz.2.161'.
[   70.222738][ T6277] netlink: 'syz.2.161': attribute type 2 has an invalid length.
[   70.226765][ T6277] netlink: 164 bytes leftover after parsing attributes in process `syz.2.161'.
[   70.246923][ T6277] netlink: 'syz.2.161': attribute type 2 has an invalid length.
[   70.249816][ T5890] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[   70.250797][ T6277] netlink: 164 bytes leftover after parsing attributes in process `syz.2.161'.
[   70.407277][ T6287] netlink: 'syz.1.164': attribute type 1 has an invalid length.
[   70.414134][ T6287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.614777][ T6306] syzkaller0: entered promiscuous mode
[   70.616596][ T6306] syzkaller0: entered allmulticast mode
[   70.857884][ T6323] netlink: 'syz.1.182': attribute type 23 has an invalid length.
[   70.940990][ T6326] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.183'.
[   71.256627][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.259215][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.437586][ T6343] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.191'.
[   71.668802][ T6353] netlink: 'syz.0.196': attribute type 21 has an invalid length.
[   71.672051][ T6353] netlink: 128 bytes leftover after parsing attributes in process `syz.0.196'.
[   72.407438][ T6382] netlink: 'syz.0.207': attribute type 21 has an invalid length.
[   72.841159][ T6391] syzkaller0: entered promiscuous mode
[   72.843589][ T6391] syzkaller0: entered allmulticast mode
[   72.853007][ T6391] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   73.202879][ T6422] syz.0.227 uses obsolete (PF_INET,SOCK_PACKET)
[   73.604795][ T6444] __nla_validate_parse: 3 callbacks suppressed
[   73.604812][ T6444] netlink: 10 bytes leftover after parsing attributes in process `syz.1.234'.
[   74.123100][ T6462] netlink: 'syz.0.240': attribute type 1 has an invalid length.
[   74.125675][ T6462] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.240'.
[   74.158998][ T6464] netlink: 10 bytes leftover after parsing attributes in process `syz.1.243'.
[   74.346114][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'.
[   75.174540][ T6498] netlink: 'syz.1.257': attribute type 21 has an invalid length.
[   75.989061][ T6511] netlink: 104 bytes leftover after parsing attributes in process `syz.0.260'.
[   76.473793][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'.
[   76.637937][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'.
[   76.834618][ T6549] netlink: 'syz.0.278': attribute type 27 has an invalid length.
[   76.837206][ T6549] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.278'.
[   77.027007][ T6557] netlink: 'syz.2.282': attribute type 4 has an invalid length.
[   77.030380][ T6557] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.282'.
[   77.387761][ T6575] netlink: 14 bytes leftover after parsing attributes in process `syz.2.290'.
[   77.400401][ T6575] hsr0: entered promiscuous mode
[   77.405245][ T6575] hsr0: entered allmulticast mode
[   77.407397][ T6575] hsr_slave_0: entered allmulticast mode
[   77.416357][ T6575] hsr_slave_1: entered allmulticast mode
[   77.620989][ T6569] delete_channel: no stack
[   79.053486][ T6601] netlink: 'syz.0.300': attribute type 29 has an invalid length.
[   79.056164][ T6601] __nla_validate_parse: 1 callbacks suppressed
[   79.056171][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'.
[   79.155204][ T6608] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.302'.
[   79.160762][ T6605] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.302'.
[   79.265153][ T6612] syzkaller0: entered promiscuous mode
[   79.267661][ T6612] syzkaller0: entered allmulticast mode
[   80.155297][ T6631] netlink: 'syz.1.314': attribute type 3 has an invalid length.
[   80.158303][ T6631] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.314'.
[   80.265304][ T6635] netlink: 188 bytes leftover after parsing attributes in process `syz.1.315'.
[   80.396804][ T6640] cgroup: fork rejected by pids controller in /syz2
[   81.026947][  T792] cfg80211: failed to load regulatory.db
[   81.066106][ T6644] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.320'.
[   81.226328][ T6654] macvtap0: refused to change device tx_queue_len
[   81.287196][ T5897] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.355885][ T5897] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.441755][ T5897] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.521950][ T5897] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.572083][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.575147][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.579842][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.587479][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.594624][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.699852][ T5897] bridge_slave_1: left allmulticast mode
[   81.715568][ T5897] bridge_slave_1: left promiscuous mode
[   81.718859][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.734564][ T6674] netlink: 40 bytes leftover after parsing attributes in process `syz.1.333'.
[   81.746832][ T5897] bridge_slave_0: left allmulticast mode
[   81.749323][ T5897] bridge_slave_0: left promiscuous mode
[   81.761457][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.041538][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.048612][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.054453][ T5897] bond0 (unregistering): Released all slaves
[   82.336244][ T6667] chnl_net:caif_netlink_parms(): no params data found
[   82.478845][ T5897] hsr_slave_0: left promiscuous mode
[   82.485870][ T5897] hsr_slave_1: left promiscuous mode
[   82.489558][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.493991][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.498207][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.508195][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.527361][ T6711] netlink: 'syz.0.341': attribute type 21 has an invalid length.
[   82.540670][ T5897] veth1_macvtap: left promiscuous mode
[   82.543581][ T5897] veth0_macvtap: left promiscuous mode
[   82.545906][ T5897] veth1_vlan: left promiscuous mode
[   82.551982][ T5897] veth0_vlan: left promiscuous mode
[   82.583286][ T6715] netlink: 'syz.0.341': attribute type 10 has an invalid length.
[   82.587204][ T6715] netlink: 55 bytes leftover after parsing attributes in process `syz.0.341'.
[   82.986096][ T5897] team0 (unregistering): Port device team_slave_1 removed
[   83.020805][ T5897] team0 (unregistering): Port device team_slave_0 removed
[   83.425654][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.428387][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.431605][ T6667] bridge_slave_0: entered allmulticast mode
[   83.434492][ T6667] bridge_slave_0: entered promiscuous mode
[   83.437616][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.441814][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.444641][ T6667] bridge_slave_1: entered allmulticast mode
[   83.448239][ T6667] bridge_slave_1: entered promiscuous mode
[   83.494531][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.508442][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.630992][ T5890] Bluetooth: hci2: command tx timeout
[   83.689317][ T6667] team0: Port device team_slave_0 added
[   83.716299][ T6667] team0: Port device team_slave_1 added
[   83.837635][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.841921][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.855222][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.866314][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.869667][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.886721][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.975484][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'.
[   83.979575][ T6737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.349'.
[   83.981863][ T6667] hsr_slave_0: entered promiscuous mode
[   83.986053][ T6667] hsr_slave_1: entered promiscuous mode
[   83.989095][ T6667] debugfs: 'hsr0' already exists in 'hsr'
[   83.993983][ T6667] Cannot create hsr debugfs directory
[   84.190691][ T6748] netlink: 'syz.1.351': attribute type 21 has an invalid length.
[   84.215626][ T6748] netlink: 'syz.1.351': attribute type 10 has an invalid length.
[   84.223219][ T6748] netlink: 55 bytes leftover after parsing attributes in process `syz.1.351'.
[   84.474382][ T6755] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.352'.
[   84.478293][ T6755] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.352'.
[   84.486246][ T6755] netlink: 2 bytes leftover after parsing attributes in process `syz.0.352'.
[   85.125699][ T6667] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.463508][ T6667] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.491268][ T6667] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.504782][ T6667] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.720127][ T5890] Bluetooth: hci2: command tx timeout
[   85.803805][ T6667] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.823665][ T6667] 8021q: adding VLAN 0 to HW filter on device team0
[   85.843554][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.846612][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.850939][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.853648][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.454651][ T6823] netlink: 56 bytes leftover after parsing attributes in process `syz.1.365'.
[   86.549560][ T6667] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.612218][ T6667] veth0_vlan: entered promiscuous mode
[   86.624020][ T6667] veth1_vlan: entered promiscuous mode
[   86.675273][ T6667] veth0_macvtap: entered promiscuous mode
[   86.684897][ T6667] veth1_macvtap: entered promiscuous mode
[   86.706263][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.734075][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.823832][ T5708] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.827560][ T5708] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.833186][ T6838] netlink: 1018 bytes leftover after parsing attributes in process `syz.1.369'.
[   86.843952][ T5708] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.848431][ T5708] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.887681][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.373'.
[   87.009154][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.015958][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.056436][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.060751][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.155863][ T6850] netlink: 'syz.2.327': attribute type 21 has an invalid length.
[   87.159282][ T6850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.327'.
[   87.201450][ T6852] netlink: 'syz.2.376': attribute type 10 has an invalid length.
[   87.212727][ T6852] team0: Device veth1_macvtap failed to register rx_handler
[   87.244064][ T6852] syz.2.376 (6852) used greatest stack depth: 20024 bytes left
[   87.793709][ T5890] Bluetooth: hci2: command tx timeout
[   88.397292][ T6918] netlink: 'syz.2.406': attribute type 1 has an invalid length.
[   88.762513][ T6940] netlink: 'syz.0.415': attribute type 39 has an invalid length.
[   89.403259][ T6969] netlink: 830 bytes leftover after parsing attributes in process `syz.0.428'.
[   89.869404][ T5890] Bluetooth: hci1: ACL packet for unknown connection handle 0
[   89.873334][ T5890] Bluetooth: hci2: command tx timeout
[   90.281825][ T7016] netlink: 324 bytes leftover after parsing attributes in process `syz.0.447'.
[   90.592863][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'.
[   90.597182][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'.
[   91.159798][ T7047] netlink: 'syz.2.462': attribute type 10 has an invalid length.
[   91.163233][ T7047] netlink: 2 bytes leftover after parsing attributes in process `syz.2.462'.
[   91.166828][ T7047] bond0: entered promiscuous mode
[   91.168680][ T7047] bond_slave_0: entered promiscuous mode
[   91.172458][ T7047] bond_slave_1: entered promiscuous mode
[   91.175604][ T7047] bridge0: port 3(bond0) entered blocking state
[   91.177926][ T7047] bridge0: port 3(bond0) entered disabled state
[   91.181003][ T7047] bond0: entered allmulticast mode
[   91.182971][ T7047] bond_slave_0: entered allmulticast mode
[   91.185071][ T7047] bond_slave_1: entered allmulticast mode
[   91.189613][ T7047] bridge0: port 3(bond0) entered blocking state
[   91.192325][ T7047] bridge0: port 3(bond0) entered forwarding state
[   91.282633][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.464'.
[   91.341798][ T7052] netlink: 763 bytes leftover after parsing attributes in process `syz.0.465'.
[   92.493453][ T7064] netlink: 128 bytes leftover after parsing attributes in process `syz.2.471'.
[   92.497296][ T7064] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   92.565477][ T7071] Driver unsupported XDP return value 0 on prog  (id 171) dev N/A, expect packet loss!
[   92.665144][ T7079] Dead loop on virtual device ip6_vti0, fix it urgently!
[   92.717178][ T7081] netlink: 'syz.2.480': attribute type 21 has an invalid length.
[   92.721741][ T7081] netlink: 156 bytes leftover after parsing attributes in process `syz.2.480'.
[   93.362720][ T7101] netlink: 'syz.1.485': attribute type 10 has an invalid length.
[   93.365525][ T7101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.485'.
[   93.369278][ T7101] dummy0: entered promiscuous mode
[   93.378609][ T7101] bridge0: port 3(dummy0) entered blocking state
[   93.386979][ T7101] bridge0: port 3(dummy0) entered disabled state
[   93.390940][ T7101] dummy0: entered allmulticast mode
[   93.419629][ T7101] bridge0: port 3(dummy0) entered blocking state
[   93.427360][ T7101] bridge0: port 3(dummy0) entered forwarding state
[   93.452197][ T7107] netlink: 'syz.2.489': attribute type 22 has an invalid length.
[   94.822584][ T7133] __nla_validate_parse: 2 callbacks suppressed
[   94.822600][ T7133] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.501'.
[   94.829418][ T7133] netlink: zone id is out of range
[   94.832024][ T7133] netlink: zone id is out of range
[   94.834470][ T7133] netlink: get zone limit has 8 unknown bytes
[   95.645217][ T7125] netlink: 'syz.1.498': attribute type 29 has an invalid length.
[   96.064770][ T7172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.171475][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'.
[   96.426841][ T7188] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   96.432509][ T7188] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   96.519044][ T7192] netlink: 'syz.0.528': attribute type 3 has an invalid length.
[   96.534004][ T7192] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.528'.
[   96.692490][ T7195] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[   97.049963][ T7206] : renamed from gre0 (while UP)
[   97.669444][ T7217] sctp: [Deprecated]: syz.1.538 (pid 7217) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.669444][ T7217] Use struct sctp_sack_info instead
[   97.747971][ T7222] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.541'.
[   99.494776][ T7238] syzkaller1: tun_chr_ioctl cmd 1074812118
[   99.497184][ T7242] netlink: 'syz.2.545': attribute type 3 has an invalid length.
[   99.517426][ T7242] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.545'.
[   99.574943][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'.
[   99.674510][ T7255] netlink: 'syz.0.551': attribute type 4 has an invalid length.
[   99.677928][ T7255] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.551'.
[   99.852491][ T7259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.554'.
[   99.941257][ T7250] syz.0.551 (7250) used greatest stack depth: 18696 bytes left
[  100.204807][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'.
[  100.209162][ T7275] netlink: 'syz.1.560': attribute type 2 has an invalid length.
[  100.770391][ T7288] cgroup: fork rejected by pids controller in /syz1
[  101.007047][ T7292] netlink: 56 bytes leftover after parsing attributes in process `syz.2.567'.
[  101.011635][ T7292] netlink: 56 bytes leftover after parsing attributes in process `syz.2.567'.
[  101.067729][ T5708] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.144449][ T5708] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.255528][ T5708] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.263693][ T7297] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode
[  101.267668][ T7297] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  101.337152][ T5708] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.434697][ T5890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  101.438538][ T5890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  101.443410][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  101.450695][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  101.453550][ T5890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  101.555882][ T5708] dummy0: left allmulticast mode
[  101.557818][ T5708] bridge0: port 3(dummy0) entered disabled state
[  101.566804][ T5708] bridge_slave_1: left allmulticast mode
[  101.568776][ T5708] bridge_slave_1: left promiscuous mode
[  101.572959][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.579394][ T5708] bridge_slave_0: left promiscuous mode
[  101.581933][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.977415][ T7327] netlink: 'syz.2.579': attribute type 28 has an invalid length.
[  101.984851][ T7327] netlink: 'syz.2.579': attribute type 4 has an invalid length.
[  101.988362][ T7327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.579'.
[  102.130804][ T5890] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  102.408366][ T5708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.415960][ T5708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.420193][ T5708] bond0 (unregistering): Released all slaves
[  102.467777][ T7330] @: renamed from bond_slave_0 (while UP)
[  102.559167][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'.
[  102.674558][ T7343] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  102.818924][ T7308] chnl_net:caif_netlink_parms(): no params data found
[  102.928584][ T5708] hsr_slave_0: left promiscuous mode
[  102.932609][ T5708] hsr_slave_1: left promiscuous mode
[  102.934686][ T5708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.937490][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.944371][ T5708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.947597][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.956344][ T5708] veth1_macvtap: left promiscuous mode
[  102.958731][ T5708] veth0_macvtap: left promiscuous mode
[  103.195190][ T5708] team0 (unregistering): Port device team_slave_1 removed
[  103.242294][ T5708] team0 (unregistering): Port device team_slave_0 removed
[  103.473339][ T5890] Bluetooth: hci0: command tx timeout
[  103.655373][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.662797][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.675564][ T7308] bridge_slave_0: entered allmulticast mode
[  103.685434][ T7308] bridge_slave_0: entered promiscuous mode
[  103.698943][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.719472][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.728409][ T7308] bridge_slave_1: entered allmulticast mode
[  103.742190][ T7308] bridge_slave_1: entered promiscuous mode
[  103.826764][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.846444][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.967434][ T7308] team0: Port device team_slave_0 added
[  103.977214][ T7308] team0: Port device team_slave_1 added
[  104.016241][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.019006][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.036471][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.071427][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.078057][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.111206][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.176627][ T7308] hsr_slave_0: entered promiscuous mode
[  104.179249][ T7308] hsr_slave_1: entered promiscuous mode
[  104.325906][ T7410] netlink: 22 bytes leftover after parsing attributes in process `syz.0.600'.
[  105.550395][ T5890] Bluetooth: hci0: command tx timeout
[  105.880346][ T7308] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  105.885849][ T7308] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  105.892667][ T7308] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  105.903697][ T7308] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  106.046826][ T7448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'.
[  106.067089][ T7308] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.096138][ T7448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'.
[  106.117421][ T7308] 8021q: adding VLAN 0 to HW filter on device team0
[  106.160811][  T607] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.164043][  T607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.195262][  T607] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.198783][  T607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.894994][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.936311][ T7308] veth0_vlan: entered promiscuous mode
[  106.947731][ T7308] veth1_vlan: entered promiscuous mode
[  106.982289][ T7308] veth0_macvtap: entered promiscuous mode
[  106.991244][ T7308] veth1_macvtap: entered promiscuous mode
[  107.003209][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.009657][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.027512][ T5708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.031602][ T5708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.034768][ T5708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.037916][ T5708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.154760][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.157976][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.223854][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.226597][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.413065][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'.
[  107.416994][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'.
[  107.641712][ T5890] Bluetooth: hci0: command tx timeout
[  108.165371][ T7538] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[  108.205236][ T7540] netlink: 'syz.1.632': attribute type 10 has an invalid length.
[  108.257763][ T7542] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.633'.
[  108.265290][ T7544] netlink: 92 bytes leftover after parsing attributes in process `syz.1.634'.
[  108.430055][ T7551] netlink: 'syz.2.636': attribute type 21 has an invalid length.
[  108.438167][ T7551] netlink: 128 bytes leftover after parsing attributes in process `syz.2.636'.
[  108.443357][ T7551] netlink: 'syz.2.636': attribute type 4 has an invalid length.
[  108.446730][ T7551] netlink: 'syz.2.636': attribute type 5 has an invalid length.
[  108.451886][ T7551] netlink: 3 bytes leftover after parsing attributes in process `syz.2.636'.
[  108.528735][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[  108.971506][ T7567] netlink: 'syz.0.645': attribute type 1 has an invalid length.
[  109.721649][ T5890] Bluetooth: hci0: command tx timeout
[  112.175854][ T7654] __nla_validate_parse: 4 callbacks suppressed
[  112.175864][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'.
[  112.243545][ T7657] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.686'.
[  112.294304][ T7660] netlink: 144 bytes leftover after parsing attributes in process `syz.1.688'.
[  113.131574][ T5890] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  113.187954][ T7725] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.717'.
[  113.452460][ T7747] netlink: 'syz.2.728': attribute type 4 has an invalid length.
[  113.455818][ T7747] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.728'.
[  113.483725][ T7744] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.727'.
[  113.597457][ T7749] netlink: 220 bytes leftover after parsing attributes in process `syz.2.729'.
[  113.642698][ T7755] netlink: 277 bytes leftover after parsing attributes in process `syz.2.731'.
[  113.678816][ T7757] netlink: 'syz.2.732': attribute type 10 has an invalid length.
[  113.713767][ T7757] batman_adv: batadv0: Adding interface: team0
[  113.716366][ T7757] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.725443][ T7757] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  114.285412][ T7772] netlink: 'syz.2.739': attribute type 10 has an invalid length.
[  114.288271][ T7772] netlink: 55 bytes leftover after parsing attributes in process `syz.2.739'.
[  114.802417][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz.1.751'.
[  115.905280][ T7866] IPv6: Can't replace route, no match found
[  117.405705][ T7958] netlink: 'syz.2.819': attribute type 10 has an invalid length.
[  117.572322][ T7962] netlink: 'syz.2.821': attribute type 10 has an invalid length.
[  117.575862][ T7962] __nla_validate_parse: 5 callbacks suppressed
[  117.575873][ T7962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.821'.
[  117.668618][ T7966] netlink: 'syz.0.823': attribute type 21 has an invalid length.
[  117.672368][ T7966] netlink: 128 bytes leftover after parsing attributes in process `syz.0.823'.
[  117.677651][ T7966] netlink: 'syz.0.823': attribute type 4 has an invalid length.
[  117.842632][ T7982] netlink: 'syz.2.830': attribute type 3 has an invalid length.
[  117.846092][ T7982] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.830'.
[  117.897326][ T7985] netlink: 'syz.2.832': attribute type 10 has an invalid length.
[  118.196751][ T7997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.508971][ T8012] netlink: 'syz.1.844': attribute type 10 has an invalid length.
[  118.514921][ T8012] netlink: 55 bytes leftover after parsing attributes in process `syz.1.844'.
[  119.493892][ T8033] netlink: 8392 bytes leftover after parsing attributes in process `syz.2.853'.
[  119.629165][ T5890] Bluetooth: hci1: unexpected event 0x01 length: 151 > 1
[  119.676975][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'.
[  119.689425][ T8050] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  119.694402][ T8050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.724928][ T8054] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.861'.
[  119.825974][ T8059] netlink: 'syz.1.863': attribute type 1 has an invalid length.
[  119.829287][ T8059] netlink: 17 bytes leftover after parsing attributes in process `syz.1.863'.
[  120.570053][ T8087] syz.1.874 (8087) used obsolete PPPIOCDETACH ioctl
[  121.867401][ T8142] netlink: 'syz.0.899': attribute type 1 has an invalid length.
[  122.138209][ T8157] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.905'.
[  122.205593][ T8164] netlink: 'syz.0.909': attribute type 3 has an invalid length.
[  122.209205][ T8164] netlink: 4264 bytes leftover after parsing attributes in process `syz.0.909'.
[  122.216568][ T8164] netlink: 'syz.0.909': attribute type 3 has an invalid length.
[  122.241874][ T8165] netlink: 'syz.2.910': attribute type 10 has an invalid length.
[  122.285753][ T8168] netlink: 'syz.1.912': attribute type 21 has an invalid length.
[  122.288917][ T8168] IPv6: NLM_F_CREATE should be specified when creating new route
[  122.305215][ T8168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.308388][ T8168] IPv6: NLM_F_CREATE should be set when creating new route
[  122.311715][ T8168] IPv6: NLM_F_CREATE should be set when creating new route
[  122.314891][ T8168] IPv6: NLM_F_CREATE should be set when creating new route
[  122.338404][ T8171] netlink: 'syz.0.913': attribute type 11 has an invalid length.
[  122.396195][ T8170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.537538][ T8183] netlink: 'syz.1.919': attribute type 10 has an invalid length.
[  122.543028][ T8183] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  122.549164][ T8183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.666184][ T8191] __nla_validate_parse: 5 callbacks suppressed
[  122.666201][ T8191] netlink: 277 bytes leftover after parsing attributes in process `syz.0.923'.
[  122.772753][ T8201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.834119][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'.
[  122.849702][ T8209] netlink: 'syz.2.931': attribute type 39 has an invalid length.
[  123.044085][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'.
[  125.089426][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  125.093906][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  125.097040][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  125.103501][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  125.107296][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  125.214014][ T8265] chnl_net:caif_netlink_parms(): no params data found
[  125.289918][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.293138][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.297251][ T8265] bridge_slave_0: entered allmulticast mode
[  125.301191][ T8265] bridge_slave_0: entered promiscuous mode
[  125.306556][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.309694][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.313301][ T8265] bridge_slave_1: entered allmulticast mode
[  125.317094][ T8265] bridge_slave_1: entered promiscuous mode
[  125.337543][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.342697][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.361828][ T8265] team0: Port device team_slave_0 added
[  125.365369][ T8265] team0: Port device team_slave_1 added
[  125.382600][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.384848][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.393041][ T8265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.398563][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.401088][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.409580][ T8265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.435069][ T8265] hsr_slave_0: entered promiscuous mode
[  125.437357][ T8265] hsr_slave_1: entered promiscuous mode
[  125.439540][ T8265] debugfs: 'hsr0' already exists in 'hsr'
[  125.442125][ T8265] Cannot create hsr debugfs directory
[  125.532718][ T8265] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  125.536927][ T8265] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  125.541302][ T8265] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  125.546722][ T8265] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  125.568649][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.571503][ T8265] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.574433][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.577005][ T8265] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.631797][ T8265] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.663675][  T607] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.667557][  T607] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.686369][ T8265] 8021q: adding VLAN 0 to HW filter on device team0
[  125.700111][  T607] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.703205][  T607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.712549][  T607] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.715532][  T607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.836079][ T5890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  125.842286][ T5890] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  125.846189][ T5890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  125.852104][ T5890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  125.859466][ T5890] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  125.963884][ T8265] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.086385][ T8265] veth0_vlan: entered promiscuous mode
[  126.103651][ T8288] chnl_net:caif_netlink_parms(): no params data found
[  126.113703][ T8265] veth1_vlan: entered promiscuous mode
[  126.214472][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.218404][ T8288] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.221653][ T8288] bridge_slave_0: entered allmulticast mode
[  126.225643][ T8288] bridge_slave_0: entered promiscuous mode
[  126.236978][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.240012][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.243388][ T8288] bridge_slave_1: entered allmulticast mode
[  126.247399][ T8288] bridge_slave_1: entered promiscuous mode
[  126.289038][ T8288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.297469][ T8288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.342328][ T8265] veth0_macvtap: entered promiscuous mode
[  126.348041][ T8288] team0: Port device team_slave_0 added
[  126.354123][ T8288] team0: Port device team_slave_1 added
[  126.386157][ T8265] veth1_macvtap: entered promiscuous mode
[  126.392986][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.395927][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.406797][ T8288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.414396][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.417339][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.428775][ T8288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.483733][ T8288] hsr_slave_0: entered promiscuous mode
[  126.487123][ T8288] hsr_slave_1: entered promiscuous mode
[  126.490670][ T8288] debugfs: 'hsr0' already exists in 'hsr'
[  126.492997][ T8288] Cannot create hsr debugfs directory
[  126.499670][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.553398][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.630688][ T5897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.646419][ T5897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.650067][ T5897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.667176][ T5897] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.753542][ T8300] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  126.801933][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.805179][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.843930][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.844222][ T8288] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  126.847219][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.859185][ T8288] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  126.872021][ T8288] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  126.883445][ T8288] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  127.049544][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.069458][ T8288] 8021q: adding VLAN 0 to HW filter on device team0
[  127.150800][ T5890] Bluetooth: hci1: command tx timeout
[  127.725022][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.727569][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.024073][ T5890] Bluetooth: hci2: command tx timeout
[  128.045900][ T8288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.053268][ T8288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.167161][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.170358][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.229274][ T8288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.544275][ T8288] veth0_vlan: entered promiscuous mode
[  128.552916][ T8288] veth1_vlan: entered promiscuous mode
[  128.585626][ T8288] veth0_macvtap: entered promiscuous mode
[  128.619681][ T8288] veth1_macvtap: entered promiscuous mode
[  128.633963][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.640194][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.070584][ T5947] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.081302][ T5947] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.085409][ T5947] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.155660][ T5947] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.229000][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.232602][ T5890] Bluetooth: hci1: command tx timeout
[  129.244589][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.305565][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.308905][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.512615][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.970'.
[  129.534223][ T8371] netlink: 208128 bytes leftover after parsing attributes in process `syz.4.973'.
[  129.538244][ T8371] openvswitch: netlink: Message has 4 unknown bytes.
[  129.706512][ T8375] netlink: 'syz.1.975': attribute type 2 has an invalid length.
[  129.709953][ T8375] netlink: 'syz.1.975': attribute type 8 has an invalid length.
[  129.724898][ T8375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.975'.
[  129.872389][ T8379] netlink: 201660 bytes leftover after parsing attributes in process `syz.4.977'.
[  130.030447][ T5890] Bluetooth: hci2: command tx timeout
[  130.897401][ T8431] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1001'.
[  131.045595][ T8441] netlink: 'syz.3.1005': attribute type 33 has an invalid length.
[  131.049176][ T8441] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1005'.
[  131.057492][ T8441] mac80211_hwsim hwsim16 : renamed from wlan1 (while UP)
[  131.091950][ T8441] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  131.311129][ T5890] Bluetooth: hci1: command tx timeout
[  132.391869][ T5890] Bluetooth: hci2: command tx timeout
[  132.673829][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.676414][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.706747][ T8490] netlink: 'syz.4.1025': attribute type 10 has an invalid length.
[  132.706848][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'.
[  132.727777][ T8490] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  132.793159][ T8498] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1029'.
[  132.935926][ T8510] netlink: 'syz.4.1036': attribute type 29 has an invalid length.
[  132.939886][ T8510] netlink: 'syz.4.1036': attribute type 29 has an invalid length.
[  132.949756][ T8510] netlink: 'syz.4.1036': attribute type 29 has an invalid length.
[  132.993147][ T8516] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1037'.
[  132.998509][ T8515] netlink: 'syz.1.1038': attribute type 1 has an invalid length.
[  133.004043][ T8515] netlink: 'syz.1.1038': attribute type 2 has an invalid length.
[  133.006811][ T8515] netlink: 12374 bytes leftover after parsing attributes in process `syz.1.1038'.
[  133.281107][   T33] audit: type=1107 audit(1755291253.640:2): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  133.401073][ T5890] Bluetooth: hci1: command tx timeout
[  133.421772][ T8554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.457777][ T8552] bond_slave_0: entered promiscuous mode
[  133.460838][ T8552] bond_slave_1: entered promiscuous mode
[  133.767445][ T8576] netlink: 'syz.4.1067': attribute type 11 has an invalid length.
[  133.785351][ T8573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.451045][ T5890] Bluetooth: hci2: command tx timeout
[  134.647147][ T8586] __nla_validate_parse: 8 callbacks suppressed
[  134.647160][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1070'.
[  134.655091][ T8586] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  135.382059][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'.
[  136.838250][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'.
[  136.842587][ T8609] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1077'.
[  136.846756][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'.
[  136.849810][ T8609] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1077'.
[  137.182264][ T8647] tun0: tun_chr_ioctl cmd 1074025677
[  137.184737][ T8647] tun0: linktype set to 774
[  137.243021][ T8651] openvswitch: netlink: Message has 4 unknown bytes.
[  137.383311][ T8659] netlink: 'syz.1.1101': attribute type 3 has an invalid length.
[  137.386488][ T8659] netlink: 'syz.1.1101': attribute type 1 has an invalid length.
[  137.389553][ T8659] netlink: 191264 bytes leftover after parsing attributes in process `syz.1.1101'.
[  137.535521][ T8665] netlink: 'syz.3.1104': attribute type 21 has an invalid length.
[  137.538786][ T8665] netlink: 'syz.3.1104': attribute type 1 has an invalid length.
[  137.548872][ T8665] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1104'.
[  138.004188][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'.
[  139.582712][ T8732] netlink: 'syz.4.1136': attribute type 21 has an invalid length.
[  139.585837][ T8732] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1136'.
[  139.826965][ T8745] netlink: 'syz.4.1141': attribute type 2 has an invalid length.
[  139.829645][ T8745] netlink: 'syz.4.1141': attribute type 5 has an invalid length.
[  139.834727][ T8745] netlink: 'syz.4.1141': attribute type 6 has an invalid length.
[  139.838744][ T8745] netlink: 'syz.4.1141': attribute type 7 has an invalid length.
[  139.842854][ T8745] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1141'.
[  139.846664][ T8745] netlink: 130080 bytes leftover after parsing attributes in process `syz.4.1141'.
[  139.850171][ T8745] netlink: 'syz.4.1141': attribute type 2 has an invalid length.
[  139.861752][ T8745] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1141'.
[  141.683878][ T8777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1155'.
[  141.688755][ T8777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1155'.
[  141.700978][ T8777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1155'.
[  141.796770][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1157'.
[  141.808356][ T8785] dummy0: entered promiscuous mode
[  141.812167][ T8785] bridge0: port 3(dummy0) entered blocking state
[  141.815811][ T8785] bridge0: port 3(dummy0) entered disabled state
[  141.819167][ T8785] dummy0: entered allmulticast mode
[  141.825932][ T8785] bridge0: port 3(dummy0) entered blocking state
[  141.829239][ T8785] bridge0: port 3(dummy0) entered forwarding state
[  141.977673][ T8796] nr0: tun_chr_ioctl cmd 1074025677
[  141.980109][ T8796] nr0: linktype set to 778
[  142.430197][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.434893][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.453692][ T8818] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1168'.
[  142.585854][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.596729][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.710155][ T8816] pim6reg1: entered allmulticast mode
[  142.714115][ T8818] hsr_slave_0: left promiscuous mode
[  142.717192][ T8818] hsr_slave_1: left promiscuous mode
[  142.735703][ T8820] pim6reg1: left allmulticast mode
[  142.743834][ T5708] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.747402][ T5708] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.776141][ T5708] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.780104][ T5708] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.900036][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'.
[  142.904203][ T8827] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1171'.
[  143.406730][ T8841] openvswitch: netlink: IP tunnel dst address not specified
[  143.877003][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1196526921 wd_nsec: 1196526946
[  145.108745][ T5897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.180909][ T5897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.283303][ T5897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.392660][ T5897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.636069][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  145.641429][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  145.648052][ T5897] dummy0: left allmulticast mode
[  145.653287][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  145.657829][ T5897] bridge0: port 3(dummy0) entered disabled state
[  145.662932][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  145.671648][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  145.678681][ T5897] bridge_slave_1: left allmulticast mode
[  145.695921][ T5897] bridge_slave_1: left promiscuous mode
[  145.701666][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.721390][ T5897] bridge_slave_0: left promiscuous mode
[  145.724102][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.741688][ T5897] bond_slave_0: left promiscuous mode
[  145.744473][ T5897] bond_slave_1: left promiscuous mode
[  146.095724][ T8908] validate_nla: 6 callbacks suppressed
[  146.095784][ T8908] netlink: 'syz.4.1204': attribute type 13 has an invalid length.
[  146.101716][ T8908] netlink: 'syz.4.1204': attribute type 17 has an invalid length.
[  146.194248][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.199167][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.205517][ T5897] bond0 (unregistering): Released all slaves
[  146.207015][ T8913] __nla_validate_parse: 1 callbacks suppressed
[  146.207027][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'.
[  146.217943][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'.
[  146.487646][ T8908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.700001][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.708411][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.718245][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.726916][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.757397][ T5897] veth1_macvtap: left promiscuous mode
[  146.764217][ T5897] veth0_macvtap: left promiscuous mode
[  147.257100][ T8943] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1215'.
[  147.435060][ T5897] team0 (unregistering): Port device team_slave_1 removed
[  147.488127][ T5897] team0 (unregistering): Port device team_slave_0 removed
[  147.713182][ T5890] Bluetooth: hci0: command tx timeout
[  147.796459][ T8971] netlink: 'syz.3.1229': attribute type 64 has an invalid length.
[  147.907789][ T8977] delete_channel: no stack
[  148.056346][ T8892] chnl_net:caif_netlink_parms(): no params data found
[  148.233985][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.240592][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.243739][ T8892] bridge_slave_0: entered allmulticast mode
[  148.247644][ T8892] bridge_slave_0: entered promiscuous mode
[  148.254166][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.257313][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.262325][ T8892] bridge_slave_1: entered allmulticast mode
[  148.267925][ T8892] bridge_slave_1: entered promiscuous mode
[  148.317376][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.328641][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.397915][ T8892] team0: Port device team_slave_0 added
[  148.423421][ T8892] team0: Port device team_slave_1 added
[  148.487452][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.492920][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.520367][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.526346][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.529369][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.540923][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.671794][ T8892] hsr_slave_0: entered promiscuous mode
[  148.674892][ T8892] hsr_slave_1: entered promiscuous mode
[  149.143219][ T9030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1249'.
[  149.346033][ T8892] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  149.353709][ T8892] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  149.367810][ T8892] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  149.377941][ T8892] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  149.513571][ T9045] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1252'.
[  149.518858][ T9045] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  149.531305][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.544463][ T8892] 8021q: adding VLAN 0 to HW filter on device team0
[  149.566653][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.569716][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.583053][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.586064][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.633626][ T8892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  149.638110][ T8892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.679686][ T9055] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1254'.
[  149.791376][ T5890] Bluetooth: hci0: command tx timeout
[  149.851347][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.905321][ T8892] veth0_vlan: entered promiscuous mode
[  149.911460][ T8892] veth1_vlan: entered promiscuous mode
[  149.925631][ T9075] netlink: 'syz.4.1260': attribute type 13 has an invalid length.
[  149.928305][ T9075] netlink: 'syz.4.1260': attribute type 58 has an invalid length.
[  149.940292][ T8892] veth0_macvtap: entered promiscuous mode
[  149.949572][ T9075] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1260'.
[  149.955279][ T8892] veth1_macvtap: entered promiscuous mode
[  149.982465][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.026450][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.042084][ T5947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.081349][ T5897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.084992][ T5897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.320971][ T9098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1266'.
[  151.205690][ T5897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.333110][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.336382][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.401735][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.408132][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.581214][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'.
[  151.585798][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1197'.
[  151.740743][ T9143] netlink: 'syz.4.1276': attribute type 21 has an invalid length.
[  151.743837][ T9143] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1276'.
[  151.814293][ T9147] netlink: set zone limit has 4 unknown bytes
[  151.872824][ T5890] Bluetooth: hci0: command tx timeout
[  151.921709][ T9154] netlink: 'syz.4.1281': attribute type 4 has an invalid length.
[  151.985072][ T9161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1284'.
[  152.031664][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'.
[  152.404944][ T9180] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1290'.
[  152.414959][ T9180] netlink: 'syz.3.1290': attribute type 10 has an invalid length.
[  152.418718][ T9180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1290'.
[  152.424819][ T9180] team0: entered promiscuous mode
[  152.427007][ T9180] team_slave_0: entered promiscuous mode
[  152.434562][ T9180] team_slave_1: entered promiscuous mode
[  152.439543][ T9180] team0: entered allmulticast mode
[  152.447123][ T9180] team_slave_0: entered allmulticast mode
[  152.449541][ T9180] team_slave_1: entered allmulticast mode
[  153.123373][ T9180] 8021q: adding VLAN 0 to HW filter on device team0
[  153.126786][ T9180] bridge0: port 3(team0) entered blocking state
[  153.129563][ T9180] bridge0: port 3(team0) entered disabled state
[  153.309939][ T9208] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1303'.
[  153.315011][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'.
[  153.319843][ T9208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1303'.
[  153.951924][ T5890] Bluetooth: hci0: command tx timeout
[  154.068916][ T9233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.072019][ T9233] IPv6: NLM_F_CREATE should be set when creating new route
[  154.076844][ T9233] IPv6: NLM_F_CREATE should be set when creating new route
[  154.368374][ T9247] netlink: 'syz.3.1322': attribute type 39 has an invalid length.
[  155.233159][ T9256] netlink: 'syz.4.1325': attribute type 39 has an invalid length.
[  155.736026][ T9262] netlink: 'syz.3.1327': attribute type 1 has an invalid length.
[  156.716245][ T9277] __nla_validate_parse: 5 callbacks suppressed
[  156.716260][ T9277] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1333'.
[  156.891810][ T9284] netlink: 'syz.4.1334': attribute type 10 has an invalid length.
[  156.936072][ T9284] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  157.203285][ T9311] netlink: 'syz.4.1348': attribute type 41 has an invalid length.
[  157.408775][ T9332] netlink: 'syz.4.1358': attribute type 46 has an invalid length.
[  157.439165][ T9334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1359'.
[  157.508664][ T9340] netlink: 'syz.1.1362': attribute type 29 has an invalid length.
[  157.533724][ T9340] netlink: 'syz.1.1362': attribute type 29 has an invalid length.
[  157.559840][ T9342] syzkaller0: entered promiscuous mode
[  157.809662][ T9349] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1366'.
[  158.469511][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1374'.
[  158.506741][ T9379] netlink: 'syz.4.1376': attribute type 16 has an invalid length.
[  158.516131][ T9379] netlink: 'syz.4.1376': attribute type 3 has an invalid length.
[  158.522631][ T9379] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1376'.
[  158.611605][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'.
[  159.411985][ T9414] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1392'.
[  159.464989][ T9416] lo speed is unknown, defaulting to 1000
[  159.468783][ T9416] lo speed is unknown, defaulting to 1000
[  159.477042][ T9416] lo speed is unknown, defaulting to 1000
[  159.597523][ T9416] infiniband syz1: set active
[  159.601071][  T123] lo speed is unknown, defaulting to 1000
[  159.606651][ T9416] infiniband syz1: added lo
[  159.650033][ T9416] RDS/IB: syz1: added
[  159.652200][ T9416] smc: adding ib device syz1 with port count 1
[  159.654846][ T9416] smc:    ib device syz1 port 1 has pnetid 
[  159.658287][  T123] lo speed is unknown, defaulting to 1000
[  159.662601][ T9416] lo speed is unknown, defaulting to 1000
[  159.790692][ T9416] lo speed is unknown, defaulting to 1000
[  159.891776][ T9416] lo speed is unknown, defaulting to 1000
[  160.065034][ T9416] lo speed is unknown, defaulting to 1000
[  160.178450][ T9416] lo speed is unknown, defaulting to 1000
[  160.206214][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1410'.
[  160.425480][ T9477] netlink: 'syz.3.1418': attribute type 7 has an invalid length.
[  160.560429][ T9487] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1425'.
[  160.564719][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'.
[  160.572601][   T33] audit: type=1107 audit(1755291280.940:3): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  160.572601][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  160.572601][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[  160.572601][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[  161.256971][ T9515] netlink: 'syz.4.1439': attribute type 29 has an invalid length.
[  161.356311][ T9517] netlink: 'syz.4.1439': attribute type 29 has an invalid length.
[  161.967770][ T9564] __nla_validate_parse: 3 callbacks suppressed
[  161.967779][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1461'.
[  162.897927][ T9586] validate_nla: 1 callbacks suppressed
[  162.897937][ T9586] netlink: 'syz.3.1470': attribute type 4 has an invalid length.
[  163.050927][ T9599] netlink: 'syz.3.1475': attribute type 10 has an invalid length.
[  163.053996][ T9599] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.058495][ T9599] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  164.297580][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'.
[  164.304119][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'.
[  164.744010][ T9667] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1505'.
[  165.059324][ T9692] netlink: 'syz.4.1514': attribute type 39 has an invalid length.
[  165.650545][ T9708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1522'.
[  165.655867][ T9708] unsupported nlmsg_type 40
[  165.822683][ T9716] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1523'.
[  166.349744][ T9714] pim6reg1: entered allmulticast mode
[  166.363086][ T9716] veth1_macvtap: entered allmulticast mode
[  166.769874][ T9733] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1533'.
[  166.999144][ T9733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.005994][ T9733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.012149][ T9733] bond0 (unregistering): Released all slaves
[  167.033872][ T9738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1535'.
[  167.091412][ T9746] netlink: 'syz.3.1539': attribute type 29 has an invalid length.
[  167.094801][ T9746] netlink: 'syz.3.1539': attribute type 29 has an invalid length.
[  167.654148][ T9788] netlink: 'syz.1.1558': attribute type 11 has an invalid length.
[  167.657931][ T9788] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1558'.
[  167.987438][ T9826] netlink: 'syz.4.1575': attribute type 49 has an invalid length.
[  168.089752][ T9836] netlink: 'syz.3.1581': attribute type 2 has an invalid length.
[  168.092743][ T9836] netlink: 'syz.3.1581': attribute type 1 has an invalid length.
[  168.095246][ T9836] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1581'.
[  168.131532][ T9844] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1584'.
[  168.266629][ T9855] netlink: 'syz.4.1590': attribute type 1 has an invalid length.
[  168.289881][ T9857] netlink: 'syz.3.1591': attribute type 33 has an invalid length.
[  168.539737][ T9877] netlink: 'syz.3.1601': attribute type 10 has an invalid length.
[  168.588525][ T9877] team0: left allmulticast mode
[  168.599078][ T9877] team_slave_0: left allmulticast mode
[  168.622455][ T9877] team_slave_1: left allmulticast mode
[  168.636586][ T9877] team0: left promiscuous mode
[  168.638581][ T9877] team_slave_0: left promiscuous mode
[  168.655282][ T9877] team_slave_1: left promiscuous mode
[  168.667448][ T9877] bridge0: port 3(team0) entered disabled state
[  168.679123][ T9877] 8021q: adding VLAN 0 to HW filter on device team0
[  168.695003][ T9877] bond0: (slave team0): Enslaving as an active interface with an up link
[  168.699352][ T9880] netdevsim netdevsim3 : renamed from netdevsim0
[  168.759385][ T9877] can: request_module (can-proto-0) failed.
[  169.247589][ T9935] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1626'.
[  169.457681][ T9953] netlink: 'syz.3.1634': attribute type 4 has an invalid length.
[  169.466831][ T9953] netlink: 211448 bytes leftover after parsing attributes in process `syz.3.1634'.
[  169.658663][ T5890] Bluetooth: hci2: Malformed LE Event: 0x0b
[  169.926931][ T9987] : port 1(vlan0) entered blocking state
[  169.929790][ T9987] : port 1(vlan0) entered disabled state
[  169.933631][ T9987] vlan0: entered allmulticast mode
[  169.935825][ T9987] veth0_vlan: entered allmulticast mode
[  169.939342][ T9987] vlan0: entered promiscuous mode
[  170.009127][ T9979] : port 1(vlan0) entered blocking state
[  170.012202][ T9979] : port 1(vlan0) entered forwarding state
[  170.157861][T10003] lo speed is unknown, defaulting to 1000
[  170.176219][T10005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1657'.
[  170.267560][T10013] netlink: 'syz.1.1661': attribute type 2 has an invalid length.
[  170.273861][T10013] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1661'.
[  170.279169][T10013] nbd: must specify a device to reconfigure
[  170.376145][T10017] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1664'.
[  170.440453][T10024] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  171.864881][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'.
[  172.708675][T10096] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1698'.
[  173.036003][T10110] netlink: 'syz.4.1704': attribute type 6 has an invalid length.
[  173.038920][T10110] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1704'.
[  173.497070][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'.
[  173.507158][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'.
[  173.683428][T10134] netlink: 'syz.4.1715': attribute type 29 has an invalid length.
[  173.687443][T10134] netlink: 'syz.4.1715': attribute type 29 has an invalid length.
[  173.720370][T10136] netlink: 'syz.3.1716': attribute type 10 has an invalid length.
[  173.724465][T10136] batman_adv: batadv0: Adding interface: 
[  173.740395][T10136] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.757670][T10136] batman_adv: batadv0: Not using interface  (retrying later): interface not active
[  173.781142][T10140] netlink: 'syz.4.1717': attribute type 29 has an invalid length.
[  173.791622][T10140] netlink: 'syz.4.1717': attribute type 29 has an invalid length.
[  173.824601][T10142] unsupported nla_type 256
[  173.997013][ T5890] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  174.001102][ T5890] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  174.159401][T10157] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1725'.
[  174.524479][T10164] netlink: 'syz.4.1728': attribute type 11 has an invalid length.
[  175.583587][T10178] delete_channel: no stack
[  175.895994][T10206] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.1748'.
[  175.903184][T10206] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1748'.
[  176.124556][T10219] netlink: 'syz.1.1754': attribute type 5 has an invalid length.
[  176.286128][T10228] netlink: 'syz.1.1758': attribute type 2 has an invalid length.
[  176.402747][T10234] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1761'.
[  176.495946][T10241] netlink: 'syz.1.1762': attribute type 10 has an invalid length.
[  176.628973][T10241] team0: Port device geneve1 added
[  177.502437][T10311] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1768'.
[  177.660866][T10313] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1770'.
[  178.115055][T10342] syz1: rxe_newlink: already configured on lo
[  178.156814][T10340] bpf: Bad value for 'gid'
[  178.627352][T10372] validate_nla: 3 callbacks suppressed
[  178.627366][T10372] netlink: 'syz.1.1798': attribute type 21 has an invalid length.
[  178.636218][T10372] __nla_validate_parse: 1 callbacks suppressed
[  178.636231][T10372] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1798'.
[  178.673895][T10375] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1797'.
[  178.729861][T10375] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1797'.
[  179.048798][T10394] raw_sendmsg: syz.3.1808 forgot to set AF_INET. Fix it!
[  179.054060][T10375] lo speed is unknown, defaulting to 1000
[  179.184302][T10400] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1810'.
[  179.577486][T10413] netlink: 'syz.1.1817': attribute type 29 has an invalid length.
[  179.592850][T10413] netlink: 'syz.1.1817': attribute type 29 has an invalid length.
[  179.604343][T10413] netlink: 'syz.1.1817': attribute type 29 has an invalid length.
[  179.623753][T10413] netlink: 'syz.1.1817': attribute type 29 has an invalid length.
[  179.717001][T10420] pim6reg1: entered allmulticast mode
[  179.812471][T10426] netlink: 202232 bytes leftover after parsing attributes in process `syz.1.1823'.
[  179.817504][T10426] netlink: zone id is out of range
[  179.845240][T10426] netlink: zone id is out of range
[  180.106888][T10445] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1833'.
[  180.185904][T10451] netlink: 'syz.3.1834': attribute type 21 has an invalid length.
[  181.559252][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'.
[  181.672853][T10501] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.1857'.
[  181.683345][T10495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  181.766730][T10509] netlink: 'syz.4.1861': attribute type 29 has an invalid length.
[  181.806723][T10509] netlink: 'syz.4.1861': attribute type 29 has an invalid length.
[  181.811810][T10509] netlink: 'syz.4.1861': attribute type 29 has an invalid length.
[  181.816477][T10509] netlink: 'syz.4.1861': attribute type 29 has an invalid length.
[  183.358922][T10542] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1876'.
[  183.626002][T10562] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1886'.
[  183.651012][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'.
[  183.653993][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'.
[  183.668586][T10564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.744707][T10569] lo speed is unknown, defaulting to 1000
[  183.834544][T10579] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1889'.
[  183.846253][ T5890] Bluetooth: hci2: ISO packet for unknown connection handle 3327
[  183.850662][ T5890] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  184.332624][T10612] netlink: 'syz.1.1908': attribute type 3 has an invalid length.
[  184.351456][T10615] netlink: 'syz.4.1909': attribute type 21 has an invalid length.
[  184.354569][T10615] netlink: 'syz.4.1909': attribute type 1 has an invalid length.
[  184.514363][T10625] netlink: 495 bytes leftover after parsing attributes in process `syz.3.1914'.
[  184.647942][T10632] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1917'.
[  184.767857][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1922'.
[  185.065555][T10660] netlink: 'syz.3.1930': attribute type 1 has an invalid length.
[  185.121776][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'.
[  185.262501][T10674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1936'.
[  185.266460][T10674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1936'.
[  185.283618][T10676] netlink: 'syz.4.1937': attribute type 21 has an invalid length.
[  185.596228][T10699] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1948'.
[  185.649994][T10703] netlink: 'syz.3.1950': attribute type 3 has an invalid length.
[  186.301282][T10742] netlink: 'syz.1.1968': attribute type 10 has an invalid length.
[  186.411150][T10739] tap0: tun_chr_ioctl cmd 1074025675
[  186.413383][T10739] tap0: persist enabled
[  186.415595][T10739] tap0: tun_chr_ioctl cmd 1074025675
[  186.417525][T10739] tap0: persist enabled
[  187.126685][T10762] netlink: 'syz.1.1976': attribute type 10 has an invalid length.
[  187.205807][T10762] team0: Port device wlan1 added
[  187.333274][T10771] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  187.513218][T10789] lo speed is unknown, defaulting to 1000
[  187.516039][T10789] lo speed is unknown, defaulting to 1000
[  187.521653][T10789] lo speed is unknown, defaulting to 1000
[  187.527476][T10789] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  187.535856][T10789] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  187.555473][T10789] lo speed is unknown, defaulting to 1000
[  187.560722][T10789] lo speed is unknown, defaulting to 1000
[  187.571715][T10789] lo speed is unknown, defaulting to 1000
[  187.576147][T10789] lo speed is unknown, defaulting to 1000
[  187.579198][T10789] lo speed is unknown, defaulting to 1000
[  187.616744][T10789] smc: removing ib device syz1
[  188.087554][ T5890] Bluetooth: hci2: Malformed Event: 0x13
[  188.925898][T10845] netlink: 'syz.1.2015': attribute type 10 has an invalid length.
[  189.316746][T10871] __nla_validate_parse: 7 callbacks suppressed
[  189.316755][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'.
[  189.336175][T10871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2027'.
[  189.379546][T10875] netlink: 'syz.3.2029': attribute type 2 has an invalid length.
[  189.385056][T10875] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.2029'.
[  190.316437][T10917] netlink: 'syz.1.2047': attribute type 13 has an invalid length.
[  190.324921][T10917] netlink: 'syz.1.2047': attribute type 17 has an invalid length.
[  190.745429][T10917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  190.753149][ T5948] lo speed is unknown, defaulting to 1000
[  190.980035][T10946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2061'.
[  191.198619][T10948] delete_channel: no stack
[  191.425659][T10971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2071'.
[  191.436753][T10971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2071'.
[  191.475473][ T5890] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  191.589651][T10985] netlink: 'syz.4.2078': attribute type 1 has an invalid length.
[  191.593733][T10985] netlink: 'syz.4.2078': attribute type 4 has an invalid length.
[  191.597026][T10985] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2078'.
[  191.603506][T10985] netlink: 'syz.4.2078': attribute type 1 has an invalid length.
[  191.606112][T10985] netlink: 'syz.4.2078': attribute type 4 has an invalid length.
[  191.608650][T10985] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2078'.
[  194.114442][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.118131][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.712170][T11056] nbd: must specify an index to disconnect
[  195.897217][T11075] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2118'.
[  195.912128][T11075] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2118'.
[  197.508515][T11120] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2138'.
[  197.956798][T11147] netlink: 'syz.3.2149': attribute type 10 has an invalid length.
[  197.959882][T11147] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2149'.
[  199.360394][T11156] netlink: 'syz.3.2152': attribute type 10 has an invalid length.
[  199.374340][T11156] veth0_vlan: left promiscuous mode
[  199.386892][T11156] veth0_vlan: entered promiscuous mode
[  199.390082][T11156] team0: Device veth0_vlan failed to register rx_handler
[  199.947457][T11189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2167'.
[  201.897310][T11282] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2204'.
[  202.116312][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2211'.
[  202.252805][ T5890] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  202.360920][T11314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'.
[  202.368173][T11314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'.
[  202.375339][T11314] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2222'.
[  202.753632][T11331] netlink: 'syz.1.2228': attribute type 10 has an invalid length.
[  202.837250][T11331] macvlan0: entered allmulticast mode
[  203.163365][T11341] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2233'.
[  203.383992][T11352] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2238'.
[  203.904221][T11367] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2243'.
[  203.927161][T11367] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2243'.
[  204.300852][T11393] netlink: 'syz.3.2253': attribute type 10 has an invalid length.
[  204.310681][T11393] team0: Device bond0 is already an upper device of the team interface
[  204.687625][T11410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2261'.
[  205.660804][T11451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.249451][T11487] __nla_validate_parse: 1 callbacks suppressed
[  207.249467][T11487] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2297'.
[  207.308799][T11493] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2300'.
[  207.313404][T11493] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2300'.
[  207.340045][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2301'.
[  207.343422][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2301'.
[  207.420828][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2304'.
[  207.463486][T11503] veth1_macvtap: left promiscuous mode
[  207.465361][T11503] macsec0: entered promiscuous mode
[  207.519569][T11508] syzkaller0: tun_chr_ioctl cmd 2147767506
[  207.784695][T11518] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2309'.
[  208.025930][T11520] netlink: 'syz.3.2310': attribute type 10 has an invalid length.
[  208.029280][T11520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2310'.
[  208.035289][T11520] team0: entered promiscuous mode
[  208.037956][T11520] team_slave_0: entered promiscuous mode
[  208.042153][T11520] team_slave_1: entered promiscuous mode
[  208.045596][T11520] team0: entered allmulticast mode
[  208.047818][T11520] team_slave_0: entered allmulticast mode
[  208.049816][T11520] team_slave_1: entered allmulticast mode
[  208.069830][T11520] bond0: (slave team0): Releasing backup interface
[  208.119041][T11520] bridge0: port 3(team0) entered blocking state
[  208.125920][T11520] bridge0: port 3(team0) entered disabled state
[  208.219679][T11522] delete_channel: no stack
[  208.271414][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'.
[  208.424829][T11538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2319'.
[  208.753684][ T5890] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  208.753829][ T5890] Bluetooth: hci2: connection err: -111
[  211.027935][T11595] netlink: 'syz.3.2342': attribute type 12 has an invalid length.
[  211.236172][T11609] netlink: 'syz.4.2348': attribute type 10 has an invalid length.
[  211.239597][T11609] batadv0: entered promiscuous mode
[  211.254555][T11609] batadv0: entered allmulticast mode
[  211.262916][T11609] bridge0: port 3(batadv0) entered blocking state
[  211.266459][T11609] bridge0: port 3(batadv0) entered disabled state
[  211.385799][T11609] bridge0: port 3(batadv0) entered blocking state
[  211.389783][T11609] bridge0: port 3(batadv0) entered forwarding state
[  211.516458][T11630] netlink: 'syz.3.2357': attribute type 5 has an invalid length.
[  211.770526][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  211.773945][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  213.150150][T11699] __nla_validate_parse: 8 callbacks suppressed
[  213.150167][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2388'.
[  213.524975][T11723] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2399'.
[  214.346223][T11737] syzkaller0: entered promiscuous mode
[  214.348770][T11737] syzkaller0: entered allmulticast mode
[  215.037233][T11757] netlink: 'syz.4.2414': attribute type 1 has an invalid length.
[  215.185724][T11766] netlink: 'syz.3.2416': attribute type 21 has an invalid length.
[  215.511328][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2420'.
[  215.515046][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2420'.
[  216.052759][T11777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2422'.
[  216.227605][T11786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.473159][T11804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.871734][T11819] netlink: 'syz.1.2441': attribute type 10 has an invalid length.
[  216.888855][T11819] team0: Port device dummy0 added
[  217.411957][T11835] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2447'.
[  218.057902][T11873] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2457'.
[  218.114389][T11876] netlink: 182 bytes leftover after parsing attributes in process `syz.3.2459'.
[  218.144689][T11878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2460'.
[  218.148074][T11878] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2460'.
[  218.275152][T11892] netlink: 'syz.4.2467': attribute type 8 has an invalid length.
[  218.288918][T11892] netlink: 'syz.4.2467': attribute type 6 has an invalid length.
[  218.292316][T11892] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.2467'.
[  220.368886][T11978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2503'.
[  220.423099][T11984] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2507'.
[  220.475346][T11988] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  220.548962][T11995] netlink: 'syz.3.2512': attribute type 21 has an invalid length.
[  220.554157][T11995] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2512'.
[  220.574477][T11995] netlink: 'syz.3.2512': attribute type 4 has an invalid length.
[  220.577292][T11995] netlink: 'syz.3.2512': attribute type 5 has an invalid length.
[  220.580182][T11995] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2512'.
[  220.696990][ T5890] Bluetooth: hci1: adv larger than maximum supported
[  220.902246][T12012] netlink: 'syz.1.2521': attribute type 2 has an invalid length.
[  220.908566][T12012] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2521'.
[  220.928066][T12012] nbd: must specify at least one socket
[  221.043537][T12017] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2523'.
[  222.335695][T12054] netlink: 'syz.3.2538': attribute type 2 has an invalid length.
[  222.349213][T12054] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.2538'.
[  222.559544][T12064] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2539'.
[  222.825478][T12066] syzkaller0: tun_chr_ioctl cmd 1074025677
[  222.827684][T12066] syzkaller0: Linktype set failed because interface is up
[  222.838970][ T5947] syzkaller0: tun_net_xmit 76
[  222.846598][ T5947] syzkaller0: tun_net_xmit 48
[  222.860761][    T9] syzkaller0: tun_net_xmit 76
[  222.980545][  T123] syzkaller0: tun_net_xmit 76
[  223.560558][  T123] syzkaller0: tun_net_xmit 76
[  224.133470][T12089] netlink: 'syz.4.2550': attribute type 1 has an invalid length.
[  225.237919][T12107] netlink: 'syz.1.2558': attribute type 13 has an invalid length.
[  225.243853][T12107] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2558'.
[  225.399444][T12118] netlink: 'syz.4.2563': attribute type 16 has an invalid length.
[  225.403306][T12118] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2563'.
[  225.765126][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'.
[  225.768193][T12152] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2579'.
[  225.980192][T12161] netlink: set zone limit has 4 unknown bytes
[  225.989516][T12161] netlink: del zone limit has 4 unknown bytes
[  226.118100][T12173] netlink: 'syz.3.2589': attribute type 2 has an invalid length.
[  226.122342][T12173] netlink: 'syz.3.2589': attribute type 1 has an invalid length.
[  226.125707][T12173] netlink: 'syz.3.2589': attribute type 1 has an invalid length.
[  227.794528][T12232] C: renamed from team_slave_0
[  227.799297][T12232] netlink: 'syz.3.2614': attribute type 8 has an invalid length.
[  227.803638][T12232] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  227.920959][T12246] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2617'.
[  227.924558][T12240] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2617'.
[  227.933262][T12240] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2617'.
[  228.071534][T12259] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2627'.
[  228.075041][T12259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2627'.
[  228.550193][ T5890] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  228.649113][T12287] netlink: 'syz.1.2638': attribute type 46 has an invalid length.
[  229.294366][T12308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2647'.
[  230.092767][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.116580][T12320] netlink: 'syz.3.2650': attribute type 14 has an invalid length.
[  230.188681][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.303105][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.529051][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.570856][T12332] netlink: 'syz.1.2656': attribute type 10 has an invalid length.
[  230.703688][T12339] netlink: 'syz.4.2659': attribute type 21 has an invalid length.
[  230.707063][T12339] __nla_validate_parse: 1 callbacks suppressed
[  230.707073][T12339] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.2659'.
[  230.742438][   T13] bond0: left allmulticast mode
[  230.744657][   T13] @: left allmulticast mode
[  230.746741][   T13] bond_slave_1: left allmulticast mode
[  230.749231][   T13] bridge0: port 3(bond0) entered disabled state
[  230.769751][T12342] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2660'.
[  230.784980][   T13] bridge_slave_1: left allmulticast mode
[  230.787870][   T13] bridge_slave_1: left promiscuous mode
[  230.798457][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.811545][   T13] bridge_slave_0: left allmulticast mode
[  230.814053][   T13] bridge_slave_0: left promiscuous mode
[  230.816603][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.844800][T12348] netlink: 'syz.3.2663': attribute type 2 has an invalid length.
[  230.848049][T12348] netlink: 'syz.3.2663': attribute type 1 has an invalid length.
[  231.235195][   T13] bond0 (unregistering): (slave c@): Releasing backup interface
[  231.241350][   T13] @: left promiscuous mode
[  231.246297][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.256181][   T13] bond_slave_1: left promiscuous mode
[  231.259757][   T13] bond0 (unregistering): Released all slaves
[  232.814909][   T13] hsr_slave_0: left promiscuous mode
[  232.818397][   T13] hsr_slave_1: left promiscuous mode
[  232.821746][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.825019][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.832220][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.835345][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.853828][   T13] batman_adv: batadv0: Removing interface: team0
[  232.865575][   T13] veth0_macvtap: left promiscuous mode
[  233.216868][   T13] team0 (unregistering): Port device team_slave_1 removed
[  233.249745][   T13] team0 (unregistering): Port device team_slave_0 removed
[  233.979655][   T13] ------------[ cut here ]------------
[  233.982646][   T13] WARNING: CPU: 1 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  233.986705][   T13] Modules linked in:
[  233.990358][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  233.996783][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.001490][   T13] Workqueue: netns cleanup_net
[  234.003528][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  234.006072][   T13] Code: 65 a1 df f7 4b 83 3c 2c 00 75 19 e8 09 2f 7c f7 49 81 fd f8 07 00 00 74 1d e8 fb 2e 7c f7 49 83 c5 08 eb c9 e8 f0 2e 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  234.014650][   T13] RSP: 0000:ffffc900001078b0 EFLAGS: 00010293
[  234.017288][   T13] RAX: ffffffff8a437cc0 RBX: ffff88810f044000 RCX: ffff88801c6c0000
[  234.021355][   T13] RDX: 0000000000000000 RSI: ffffffff8dba6014 RDI: ffff88810f0447e8
[  234.025258][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  234.028970][   T13] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88810f044000
[  234.032666][   T13] R13: 00000000000007e8 R14: ffff88811b6f4880 R15: dffffc0000000000
[  234.035989][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  234.039737][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.042703][   T13] CR2: 0000001b32922ff8 CR3: 00000001191be000 CR4: 00000000000006f0
[  234.046376][   T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  234.049792][   T13] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  234.053578][   T13] Call Trace:
[  234.055079][   T13]  <TASK>
[  234.056396][   T13]  ops_undo_list+0x49a/0x990
[  234.058321][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  234.060796][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  234.063282][   T13]  cleanup_net+0x4c5/0x800
[  234.065253][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  234.067448][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.069735][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  234.072469][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  234.074931][   T13]  process_scheduled_works+0xae1/0x17b0
[  234.077549][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  234.080193][   T13]  worker_thread+0x8a0/0xda0
[  234.082466][   T13]  kthread+0x711/0x8a0
[  234.084223][   T13]  ? __pfx_worker_thread+0x10/0x10
[  234.086476][   T13]  ? __pfx_kthread+0x10/0x10
[  234.088459][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.090816][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.093005][   T13]  ? __pfx_kthread+0x10/0x10
[  234.094957][   T13]  ret_from_fork+0x3fc/0x770
[  234.096845][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  234.098957][   T13]  ? __switch_to_asm+0x39/0x70
[  234.101148][   T13]  ? __switch_to_asm+0x33/0x70
[  234.103246][   T13]  ? __pfx_kthread+0x10/0x10
[  234.105262][   T13]  ret_from_fork_asm+0x1a/0x30
[  234.107406][   T13]  </TASK>
[  234.108772][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  234.111913][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  234.117026][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.121342][   T13] Workqueue: netns cleanup_net
[  234.123474][   T13] Call Trace:
[  234.124967][   T13]  <TASK>
[  234.126316][   T13]  dump_stack_lvl+0x99/0x250
[  234.128381][   T13]  ? __asan_memcpy+0x40/0x70
[  234.130309][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.132580][   T13]  ? __pfx__printk+0x10/0x10
[  234.134658][   T13]  vpanic+0x281/0x750
[  234.136412][   T13]  ? __pfx__printk+0x10/0x10
[  234.138445][   T13]  ? __pfx_vpanic+0x10/0x10
[  234.140434][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  234.142780][   T13]  panic+0xb9/0xc0
[  234.144429][   T13]  ? __pfx_panic+0x10/0x10
[  234.146441][   T13]  __warn+0x31b/0x4b0
[  234.148221][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  234.150554][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  234.152835][   T13]  report_bug+0x2be/0x4f0
[  234.154713][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  234.156990][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  234.159257][   T13]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  234.161539][   T13]  handle_bug+0x84/0x160
[  234.163377][   T13]  exc_invalid_op+0x1a/0x50
[  234.165371][   T13]  asm_exc_invalid_op+0x1a/0x20
[  234.167160][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  234.169229][   T13] Code: 65 a1 df f7 4b 83 3c 2c 00 75 19 e8 09 2f 7c f7 49 81 fd f8 07 00 00 74 1d e8 fb 2e 7c f7 49 83 c5 08 eb c9 e8 f0 2e 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  234.177063][   T13] RSP: 0000:ffffc900001078b0 EFLAGS: 00010293
[  234.179443][   T13] RAX: ffffffff8a437cc0 RBX: ffff88810f044000 RCX: ffff88801c6c0000
[  234.182456][   T13] RDX: 0000000000000000 RSI: ffffffff8dba6014 RDI: ffff88810f0447e8
[  234.185831][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  234.188506][   T13] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88810f044000
[  234.191389][   T13] R13: 00000000000007e8 R14: ffff88811b6f4880 R15: dffffc0000000000
[  234.194127][   T13]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  234.196016][   T13]  ops_undo_list+0x49a/0x990
[  234.197573][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  234.199555][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  234.201686][   T13]  cleanup_net+0x4c5/0x800
[  234.203614][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  234.205729][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.207686][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  234.209657][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  234.211547][   T13]  process_scheduled_works+0xae1/0x17b0
[  234.213402][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  234.215420][   T13]  worker_thread+0x8a0/0xda0
[  234.217000][   T13]  kthread+0x711/0x8a0
[  234.218425][   T13]  ? __pfx_worker_thread+0x10/0x10
[  234.220483][   T13]  ? __pfx_kthread+0x10/0x10
[  234.222442][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.224650][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.226852][   T13]  ? __pfx_kthread+0x10/0x10
[  234.228819][   T13]  ret_from_fork+0x3fc/0x770
[  234.230715][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  234.232666][   T13]  ? __switch_to_asm+0x39/0x70
[  234.234677][   T13]  ? __switch_to_asm+0x33/0x70
[  234.236676][   T13]  ? __pfx_kthread+0x10/0x10
[  234.238616][   T13]  ret_from_fork_asm+0x1a/0x30
[  234.240301][   T13]  </TASK>
[  234.242152][   T13] Kernel Offset: disabled
[  234.243769][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:55:54  Registers:
info registers vcpu 0

CPU#0
RAX=ffffc900075ef3dd RBX=0000000000000005 RCX=ffffffff8fb74d18 RDX=ffffffff90333db4
RSI=ffffffff90333db8 RDI=ffffffff8be332a0 RBP=dffffc0000000000 RSP=ffffc900075ef278
R8 =0000000000000009 R9 =ffffffff8172c195 R10=ffffc900075ef3a8 R11=fffff52000ebde81
R12=ffffffff90333db9 R13=ffffc900075ef3f8 R14=ffffc900075ef3a8 R15=ffffc900075ef3e0
RIP=ffffffff8172c73c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe5012f7380 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005625b4152b88 CR3=0000000041072000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=5a786dd290aaaa00 RDX=0000000000000000
RSI=ffffffff8dba6014 RDI=ffffffff8be33300 RBP=ffffffff8172c195 RSP=ffffc900001e0578
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc900001e0738 R11=ffffffff81ac3890
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff819d5c1c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32922ff8 CR3=00000001191be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff81d6f1e1 ffffffff81d6f1e1 XMM01=ffffffff81d6f1e1 ffffffff81d6f1e1
XMM02=ffffffff823c6c90 ffffffff81d6f1e1 XMM03=ffffffff823c62bd ffffffff823c623c
XMM04=00007f0eb12ed100 00007f0eb0787460 XMM05=00007f0eb0787478 00007f0eb07874c0
XMM06=00007f0eb07874b8 00007f0eb07874b0 XMM07=00007f0eb07874a8 00007f0eb07874a0
XMM08=29b1d8cfbcbb4b39 bdcd3ab24d76a7ea XMM09=0000000000000000 00007f0eb0612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
