last executing test programs:

3m17.56810008s ago: executing program 0 (id=31):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x283, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)

3m17.339524212s ago: executing program 0 (id=36):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000e"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3m17.279770503s ago: executing program 2 (id=38):
r0 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0)

3m17.216853026s ago: executing program 2 (id=40):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080)

3m17.139045111s ago: executing program 0 (id=43):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0xfe33)

3m17.138776469s ago: executing program 2 (id=44):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x20000000)

3m17.014371262s ago: executing program 0 (id=46):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010)

3m17.014002583s ago: executing program 2 (id=47):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000340), 0x0}, 0x20)

3m16.904313298s ago: executing program 2 (id=49):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000161421"], 0x20}, 0x1, 0xffffffffffffffd7}, 0x0)

3m16.903857254s ago: executing program 0 (id=50):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m16.328819186s ago: executing program 0 (id=51):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d000000000000008300000000faffff44"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

3m16.198815937s ago: executing program 32 (id=51):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d000000000000008300000000faffff44"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

3m15.759534975s ago: executing program 2 (id=54):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x120)

3m15.504340158s ago: executing program 33 (id=54):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x120)

4.130988119s ago: executing program 3 (id=2077):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688810046", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4000}, 0x1)

930.890684ms ago: executing program 3 (id=2082):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1a, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

858.66938ms ago: executing program 3 (id=2083):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x5}, 0x0, 0x0, 0x0, 0x1, 0x8, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xe813, 0x0, r0, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50)
r2 = socket$inet(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000280), &(0x7f0000000100)=@udp6=r3, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
socket$kcm(0xf, 0x3, 0x2)

741.452512ms ago: executing program 3 (id=2088):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xa938f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="6800000001010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c00028005000100"], 0x68}}, 0x0)

670.412809ms ago: executing program 4 (id=2091):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x140, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)

589.294461ms ago: executing program 4 (id=2094):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x3, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x6, 0xfffffffe}]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1}, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x14}, {0x6}]})

588.927418ms ago: executing program 3 (id=2095):
socket$kcm(0x2, 0x1, 0x84)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x103462, 0x4, 0xacd, 0x0, 0x7, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

377.34866ms ago: executing program 1 (id=2098):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x2, 0x922000000001, 0x106)
ioctl$SIOCSIFHWADDR(r0, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="86ffb7b8252c"})

375.702476ms ago: executing program 4 (id=2099):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x54)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80)

375.58069ms ago: executing program 1 (id=2100):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)

298.374864ms ago: executing program 4 (id=2101):
close(0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000ff850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
sendmsg$inet(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)="2206b49bbd253c5028678f113393db4525511468432c99c1b198fa9bdd61a7b491c5f0725de0d5dad57a75fd350a40403d86d5514323ee373192744a9105ce01f2deee3ace168a695b14456bf249fee7db53", 0x52}], 0x1}, 0x4008041)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

298.164611ms ago: executing program 1 (id=2102):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

297.787872ms ago: executing program 3 (id=2103):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x44, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
close(0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007000c00028008000140ac1414280c000180080001400b010102050014000200000005000500020000e60400010006000000b96e11371882d3177ab4d4915df07e00f8a1ad85f55ff64ff538ee4d082647308de8cd6faa824f3f25d0fdaa7fdc9dde4ef4c30ff9067c401b734509010b92f7ace65dfab0ad9f778d7ed51dd3903b6155474b48cb2661862a3a2eab20e4bcab72c7513104959200"], 0x6c}}, 0x0)

188.14325ms ago: executing program 1 (id=2104):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8484300ffa15e140602200000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0)

99.194098ms ago: executing program 1 (id=2105):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}}, 0x40)

98.874241ms ago: executing program 4 (id=2106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="280000003e00070100000000017800000457a8f9600001800400028008000a"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)

304.876µs ago: executing program 4 (id=2107):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000015036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e000000000000000000000000000000004a", 0xd8}], 0x1}, 0x0)

0s ago: executing program 1 (id=2108):
r0 = socket$kcm(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000080), 0x4)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42777' (ED25519) to the list of known hosts.
syzkaller login: [   62.534473][ T5837] cgroup: Unknown subsys name 'net'
[   62.683845][ T5837] cgroup: Unknown subsys name 'cpuset'
[   62.688392][ T5837] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   64.441460][ T5837] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.186254][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.191241][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.195333][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.199380][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.203288][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.250994][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.256898][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.262631][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.267236][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.273765][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.343422][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.347320][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.352132][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.357622][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.362246][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.674089][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   70.819253][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   70.828362][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.832272][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.834858][ T5864] bridge_slave_0: entered allmulticast mode
[   70.838150][ T5864] bridge_slave_0: entered promiscuous mode
[   70.855014][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   70.864453][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.867462][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.870980][ T5864] bridge_slave_1: entered allmulticast mode
[   70.873940][ T5864] bridge_slave_1: entered promiscuous mode
[   70.947831][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.956027][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.025384][ T5864] team0: Port device team_slave_0 added
[   71.048655][ T5864] team0: Port device team_slave_1 added
[   71.092694][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.095620][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.098112][ T5867] bridge_slave_0: entered allmulticast mode
[   71.102207][ T5867] bridge_slave_0: entered promiscuous mode
[   71.134670][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.137640][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.140453][ T5867] bridge_slave_1: entered allmulticast mode
[   71.145926][ T5867] bridge_slave_1: entered promiscuous mode
[   71.163225][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.165899][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.168670][ T5869] bridge_slave_0: entered allmulticast mode
[   71.172672][ T5869] bridge_slave_0: entered promiscuous mode
[   71.177624][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.180364][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.190982][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.210136][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.214330][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.217028][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.219366][ T5869] bridge_slave_1: entered allmulticast mode
[   71.223082][ T5869] bridge_slave_1: entered promiscuous mode
[   71.226141][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.228860][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.241141][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.252140][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.316615][ T5867] team0: Port device team_slave_0 added
[   71.321650][ T5867] team0: Port device team_slave_1 added
[   71.326613][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.368386][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.376123][ T5864] hsr_slave_0: entered promiscuous mode
[   71.378930][ T5864] hsr_slave_1: entered promiscuous mode
[   71.384959][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.387991][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.397246][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.427456][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.430108][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.441103][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.453149][ T5869] team0: Port device team_slave_0 added
[   71.471460][ T5869] team0: Port device team_slave_1 added
[   71.524727][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.527006][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.563226][ T5867] hsr_slave_0: entered promiscuous mode
[   71.567118][ T5867] hsr_slave_1: entered promiscuous mode
[   71.569771][ T5867] debugfs: 'hsr0' already exists in 'hsr'
[   71.572812][ T5867] Cannot create hsr debugfs directory
[   71.592159][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.594580][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.604379][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.609627][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.612877][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.621769][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.775321][ T5869] hsr_slave_0: entered promiscuous mode
[   71.778205][ T5869] hsr_slave_1: entered promiscuous mode
[   71.781442][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   71.783994][ T5869] Cannot create hsr debugfs directory
[   71.893461][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.917621][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.938685][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.953974][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.064559][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.073799][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.082623][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.093209][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.178743][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.189773][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.207128][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.222674][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.241726][   T54] Bluetooth: hci0: command tx timeout
[   72.297030][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.321582][   T54] Bluetooth: hci1: command tx timeout
[   72.348117][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   72.356421][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.373138][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.376378][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.402076][   T54] Bluetooth: hci2: command tx timeout
[   72.412678][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.415394][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.444625][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   72.465491][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.468371][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.491809][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.494057][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.520420][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.578250][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   72.592994][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.595962][ T4667] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.614471][ T4667] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.617108][ T4667] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.786325][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.813325][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.879006][ T5864] veth0_vlan: entered promiscuous mode
[   72.912798][ T5864] veth1_vlan: entered promiscuous mode
[   72.920108][ T5867] veth0_vlan: entered promiscuous mode
[   72.944674][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.949662][ T5867] veth1_vlan: entered promiscuous mode
[   72.990224][ T5864] veth0_macvtap: entered promiscuous mode
[   73.005964][ T5864] veth1_macvtap: entered promiscuous mode
[   73.027962][ T5867] veth0_macvtap: entered promiscuous mode
[   73.045050][ T5867] veth1_macvtap: entered promiscuous mode
[   73.051863][ T5869] veth0_vlan: entered promiscuous mode
[   73.064854][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.075235][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.088099][ T5869] veth1_vlan: entered promiscuous mode
[   73.108324][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.114557][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.127089][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.133231][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.142288][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.157021][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.187827][ T5863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.193461][ T5863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.196952][ T5863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.223660][ T5869] veth0_macvtap: entered promiscuous mode
[   73.227841][ T5863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.249145][ T5869] veth1_macvtap: entered promiscuous mode
[   73.286123][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.320221][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.323573][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.329327][ T5923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.339660][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.365365][ T5923] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.378864][ T5923] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.388028][ T5923] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.389009][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.411019][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.449745][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.462989][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.506267][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.535550][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.543526][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.588085][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.595826][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.608028][ T5927] netlink: 'syz.2.9': attribute type 7 has an invalid length.
[   73.637192][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.640379][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.832282][ T5933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8'.
[   74.323868][   T54] Bluetooth: hci0: command tx timeout
[   74.410756][   T54] Bluetooth: hci1: command tx timeout
[   74.440366][ T5962] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22'.
[   74.491250][   T54] Bluetooth: hci2: command tx timeout
[   74.544689][ T5967] netlink: 'syz.1.24': attribute type 2 has an invalid length.
[   74.559096][ T5968] syzkaller0: tun_chr_ioctl cmd 35111
[   74.616756][ T5972] netlink: 176 bytes leftover after parsing attributes in process `syz.2.27'.
[   74.755850][ T5981] netlink: 'syz.2.30': attribute type 21 has an invalid length.
[   74.765057][ T5981] netlink: 'syz.2.30': attribute type 6 has an invalid length.
[   74.768197][ T5981] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30'.
[   74.806603][ T5980] tap0: tun_chr_ioctl cmd 1074025677
[   74.813786][ T5980] tap0: linktype set to 804
[   74.939409][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'.
[   74.952996][ T5987] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   74.956362][ T5987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.997279][ T5991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.025397][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'.
[   75.118530][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.41'.
[   75.128340][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'.
[   75.981790][ T5923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.039083][ T5923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.124180][ T5923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.187597][ T5923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.316696][ T5923] bridge_slave_1: left allmulticast mode
[   76.319153][ T5923] bridge_slave_1: left promiscuous mode
[   76.323722][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.334318][ T5923] bridge_slave_0: left allmulticast mode
[   76.336697][ T5923] bridge_slave_0: left promiscuous mode
[   76.339359][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.561997][   T54] Bluetooth: hci2: command tx timeout
[   76.821639][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.828912][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.847600][ T5923] bond0 (unregistering): Released all slaves
[   76.876907][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.881685][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.887238][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.894127][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.897979][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.964692][ T6037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.56'.
[   76.968179][ T6035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.56'.
[   77.145232][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.151977][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.155602][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.160798][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.163919][ T5236] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   77.166383][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.404803][ T6033] chnl_net:caif_netlink_parms(): no params data found
[   77.496153][ T5923] hsr_slave_0: left promiscuous mode
[   77.499116][ T5923] hsr_slave_1: left promiscuous mode
[   77.502149][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.504635][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.630528][    C0] hrtimer: interrupt took 31894 ns
[   78.307711][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.313749][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.355265][ T5923] veth1_macvtap: left promiscuous mode
[   78.358168][ T5923] veth0_macvtap: left promiscuous mode
[   78.363072][ T5923] veth1_vlan: left promiscuous mode
[   78.365497][ T5923] veth0_vlan: left promiscuous mode
[   78.645445][ T5236] Bluetooth: hci2: command tx timeout
[   78.973786][ T5236] Bluetooth: hci0: command tx timeout
[   79.216246][ T5236] Bluetooth: hci1: command tx timeout
[   79.296519][ T5923] team0 (unregistering): Port device team_slave_1 removed
[   79.375445][ T5923] team0 (unregistering): Port device team_slave_0 removed
[   79.893334][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.896245][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.899101][ T6033] bridge_slave_0: entered allmulticast mode
[   79.922311][ T6033] bridge_slave_0: entered promiscuous mode
[   79.934004][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.937169][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.943201][ T6033] bridge_slave_1: entered allmulticast mode
[   79.957293][ T6033] bridge_slave_1: entered promiscuous mode
[   80.019891][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.036611][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.099162][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   80.139381][ T6033] team0: Port device team_slave_0 added
[   80.160326][ T6033] team0: Port device team_slave_1 added
[   80.372871][ T6084] __nla_validate_parse: 1 callbacks suppressed
[   80.372932][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'.
[   80.392697][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.395488][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.407392][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.756938][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.759743][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.771276][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.884886][ T6043] chnl_net:caif_netlink_parms(): no params data found
[   81.044580][ T5236] Bluetooth: hci0: command tx timeout
[   81.290966][ T5236] Bluetooth: hci1: command tx timeout
[   82.045875][ T6033] hsr_slave_0: entered promiscuous mode
[   82.049375][ T6033] hsr_slave_1: entered promiscuous mode
[   82.052682][ T6033] debugfs: 'hsr0' already exists in 'hsr'
[   82.055031][ T6033] Cannot create hsr debugfs directory
[   82.145030][ T5923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.479290][ T5923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.666593][ T5923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.695453][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.700963][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.703908][ T6043] bridge_slave_0: entered allmulticast mode
[   82.707816][ T6043] bridge_slave_0: entered promiscuous mode
[   82.734263][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.739859][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.745084][ T6043] bridge_slave_1: entered allmulticast mode
[   82.750005][ T6043] bridge_slave_1: entered promiscuous mode
[   82.783629][ T5923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.892770][ T6043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.899978][ T6043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.954440][ T6043] team0: Port device team_slave_0 added
[   82.958855][ T6043] team0: Port device team_slave_1 added
[   83.033452][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.036620][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.047413][ T6043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.056771][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.060418][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.072585][ T6043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.121035][ T5236] Bluetooth: hci0: command tx timeout
[   83.244619][ T5923] bridge_slave_1: left allmulticast mode
[   83.247091][ T5923] bridge_slave_1: left promiscuous mode
[   83.249660][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.256891][ T5923] bridge_slave_0: left allmulticast mode
[   83.260103][ T5923] bridge_slave_0: left promiscuous mode
[   83.264812][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.367254][ T5236] Bluetooth: hci1: command tx timeout
[   83.605886][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.612979][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.618095][ T5923] bond0 (unregistering): Released all slaves
[   83.656087][ T6043] hsr_slave_0: entered promiscuous mode
[   83.658739][ T6043] hsr_slave_1: entered promiscuous mode
[   83.663338][ T6043] debugfs: 'hsr0' already exists in 'hsr'
[   83.665375][ T6043] Cannot create hsr debugfs directory
[   83.828688][ T6033] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.852973][ T6033] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.892542][ T6033] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.918574][ T6033] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.093259][ T5923] hsr_slave_0: left promiscuous mode
[   84.096154][ T5923] hsr_slave_1: left promiscuous mode
[   84.098922][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.112885][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.125640][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.133018][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.154941][ T5923] veth1_macvtap: left promiscuous mode
[   84.156873][ T5923] veth0_macvtap: left promiscuous mode
[   84.158984][ T5923] veth1_vlan: left promiscuous mode
[   84.161409][ T5923] veth0_vlan: left promiscuous mode
[   84.200387][ T6139] netlink: 17 bytes leftover after parsing attributes in process `syz.1.75'.
[   84.205793][ T6139] netlink: zone id is out of range
[   84.209790][ T6139] netlink: zone id is out of range
[   84.212132][ T6139] netlink: zone id is out of range
[   84.213951][ T6139] netlink: zone id is out of range
[   84.216106][ T6139] netlink: zone id is out of range
[   84.218496][ T6139] netlink: zone id is out of range
[   84.221408][ T6139] netlink: zone id is out of range
[   84.224425][ T6139] netlink: zone id is out of range
[   84.226761][ T6139] netlink: zone id is out of range
[   84.229137][ T6139] netlink: zone id is out of range
[   84.743105][ T5923] team0 (unregistering): Port device team_slave_1 removed
[   84.774369][ T5923] team0 (unregistering): Port device team_slave_0 removed
[   85.200883][ T5236] Bluetooth: hci0: command tx timeout
[   85.262063][ T6043] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   85.283224][ T6043] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   85.341433][ T6043] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   85.374184][ T6043] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   85.441550][ T5236] Bluetooth: hci1: command tx timeout
[   85.466990][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.535621][ T6033] 8021q: adding VLAN 0 to HW filter on device team0
[   85.554230][  T499] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.557618][  T499] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.588852][  T499] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.591893][  T499] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.644846][ T6043] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.718609][ T6033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   85.750456][ T6043] 8021q: adding VLAN 0 to HW filter on device team0
[   85.767765][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.771969][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.806140][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.809242][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.061717][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.199831][ T6043] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.202486][ T6189] =======================================================
[   86.202486][ T6189] WARNING: The mand mount option has been deprecated and
[   86.202486][ T6189]          and is ignored by this kernel. Remove the mand
[   86.202486][ T6189]          option from the mount to silence this warning.
[   86.202486][ T6189] =======================================================
[   86.206785][ T6033] veth0_vlan: entered promiscuous mode
[   86.247263][ T6033] veth1_vlan: entered promiscuous mode
[   86.310410][ T6033] veth0_macvtap: entered promiscuous mode
[   86.317530][ T6033] veth1_macvtap: entered promiscuous mode
[   86.355375][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.383161][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.415740][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.420010][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.436939][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.464440][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.589359][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.602344][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.649206][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.655561][ T6043] veth0_vlan: entered promiscuous mode
[   86.661347][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.685296][ T6043] veth1_vlan: entered promiscuous mode
[   86.761944][ T6205] : renamed from vlan0 (while UP)
[   86.799621][ T6208] netlink: 'syz.3.52': attribute type 4 has an invalid length.
[   86.803897][ T6208] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.52'.
[   86.815457][ T6043] veth0_macvtap: entered promiscuous mode
[   86.823940][ T6043] veth1_macvtap: entered promiscuous mode
[   86.841746][ T6043] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.863210][ T6043] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.873249][ T5923] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.876848][ T5863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.879876][ T5923] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.902338][ T5923] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.902511][  T793] cfg80211: failed to load regulatory.db
[   87.100912][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.114023][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.202489][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.233665][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.372148][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'.
[   87.399405][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'.
[   87.435191][ T6232] netlink: 32 bytes leftover after parsing attributes in process `syz.3.93'.
[   87.873802][ T6245] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.98'.
[   87.880063][ T6245] tc_dump_action: action bad kind
[   88.196477][ T6260] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.101'.
[   88.358734][ T6262] wg2: entered promiscuous mode
[   88.370703][ T6262] wg2: entered allmulticast mode
[   89.286157][ T6282] net_ratelimit: 75 callbacks suppressed
[   89.286191][ T6282] openvswitch: netlink: IP tunnel dst address not specified
[   89.397556][ T6285] netlink: 148 bytes leftover after parsing attributes in process `syz.3.112'.
[   90.447898][ T6300] netlink: 'syz.1.118': attribute type 13 has an invalid length.
[   90.451848][ T6300] netlink: 'syz.1.118': attribute type 17 has an invalid length.
[   90.820962][ T6300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.908282][ T6309] netlink: 211 bytes leftover after parsing attributes in process `syz.1.123'.
[   91.532449][ T6326] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.129'.
[   91.536021][ T6326] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.129'.
[   91.967486][ T6339] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.134'.
[   91.987507][ T5236] Bluetooth: hci2: Malformed LE Event: 0x0d
[   92.592525][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'.
[   93.150471][ T6272] Set syz1 is full, maxelem 65536 reached
[   94.223395][ T6400] netlink: 176 bytes leftover after parsing attributes in process `syz.3.159'.
[   94.255897][ T6402] warning: `syz.1.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.318951][ T6406] Illegal XDP return value 3986972351 on prog  (id 54) dev N/A, expect packet loss!
[   94.818199][ T6414] netlink: 60 bytes leftover after parsing attributes in process `syz.4.165'.
[   96.796082][ T6425] netlink: 'syz.4.168': attribute type 33 has an invalid length.
[   96.799442][ T6425] netlink: 152 bytes leftover after parsing attributes in process `syz.4.168'.
[   97.334113][ T6443] veth0_vlan: entered allmulticast mode
[   97.524807][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.177'.
[   97.552464][ T6443] veth0_vlan: left promiscuous mode
[   97.558198][ T6443] veth0_vlan: entered promiscuous mode
[  100.320588][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1349684275 wd_nsec: 1349683954
[  100.794019][ T6526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.874648][ T6530] Zero length message leads to an empty skb
[  100.938507][ T6530] netlink: 'syz.3.194': attribute type 1 has an invalid length.
[  100.949806][ T6525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.955401][ T6525] IPv6: NLM_F_CREATE should be set when creating new route
[  100.959923][ T6525] IPv6: NLM_F_CREATE should be set when creating new route
[  100.964192][ T6530] netlink: 17 bytes leftover after parsing attributes in process `syz.3.194'.
[  102.285157][ T6548] raw_sendmsg: syz.1.199 forgot to set AF_INET. Fix it!
[  102.476408][ T6556] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.203'.
[  102.563722][ T6561] netlink: 26 bytes leftover after parsing attributes in process `syz.3.205'.
[  102.685215][ T6568] sit0: entered allmulticast mode
[  102.698450][ T6568] sit0: entered promiscuous mode
[  103.001786][ T6579] netlink: 'syz.1.214': attribute type 12 has an invalid length.
[  103.005220][ T6579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.214'.
[  103.579295][ T6590] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.218'.
[  104.207798][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'.
[  104.570093][ T6602] netlink: 60 bytes leftover after parsing attributes in process `syz.3.224'.
[  104.586634][ T6602] unsupported nlmsg_type 40
[  104.707063][ T6608] netlink: 'syz.3.227': attribute type 10 has an invalid length.
[  104.717488][ T6608] netlink: 40 bytes leftover after parsing attributes in process `syz.3.227'.
[  104.726027][ T6608] dummy0: entered promiscuous mode
[  104.738309][ T6608] bridge0: port 3(dummy0) entered blocking state
[  104.742411][ T6608] bridge0: port 3(dummy0) entered disabled state
[  104.745043][ T6608] dummy0: entered allmulticast mode
[  104.749749][ T6608] bridge0: port 3(dummy0) entered blocking state
[  104.753206][ T6608] bridge0: port 3(dummy0) entered forwarding state
[  105.917791][ T6654] netlink: 'syz.4.243': attribute type 3 has an invalid length.
[  105.920431][ T6654] netlink: 132 bytes leftover after parsing attributes in process `syz.4.243'.
[  106.466744][ T6689] netlink: 'syz.4.260': attribute type 7 has an invalid length.
[  106.470201][ T6689] netlink: 140 bytes leftover after parsing attributes in process `syz.4.260'.
[  107.068842][ T6721] netlink: 763 bytes leftover after parsing attributes in process `syz.4.273'.
[  107.129512][ T5236] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  107.292611][ T6730] veth1_to_bond: entered allmulticast mode
[  107.334971][ T6735] netlink: 'syz.4.279': attribute type 29 has an invalid length.
[  107.350171][ T6735] netlink: 'syz.4.279': attribute type 29 has an invalid length.
[  107.355807][ T6735] netlink: 500 bytes leftover after parsing attributes in process `syz.4.279'.
[  107.359206][ T6735] unsupported nla_type 58
[  108.043481][ T6767] netlink: 'syz.3.294': attribute type 10 has an invalid length.
[  108.046940][ T6767] netlink: 55 bytes leftover after parsing attributes in process `syz.3.294'.
[  109.081257][ T6783] netlink: 'syz.3.301': attribute type 5 has an invalid length.
[  109.133032][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'.
[  109.360828][   T54] Bluetooth: hci0: command tx timeout
[  109.827841][ T6810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.310'.
[  109.846402][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'.
[  109.932455][ T6814] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.131513][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3300483315 wd_nsec: 3300483291
[  122.922790][   T54] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  123.141592][ T6845] xt_limit: Overflow, try lower: 271964/0
[  123.295753][   T33] audit: type=1107 audit(1758474002.099:2): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  123.624054][ T6871] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.337'.
[  123.659432][ T6872] netlink: 'syz.4.336': attribute type 10 has an invalid length.
[  123.677362][ T6872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.336'.
[  124.156683][ T6901] sit0: entered allmulticast mode
[  124.178416][ T6901] sit0: entered promiscuous mode
[  125.312938][ T6920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.358'.
[  125.339509][ T6920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.358'.
[  125.495731][ T6926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.804119][ T6940] wg2: entered allmulticast mode
[  125.827442][ T6940] wg2: entered promiscuous mode
[  126.039037][ T6942] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  126.874675][ T6969] netlink: 'syz.4.382': attribute type 4 has an invalid length.
[  127.211072][ T6974] netlink: 72 bytes leftover after parsing attributes in process `syz.4.384'.
[  127.214008][ T6974] netlink: 72 bytes leftover after parsing attributes in process `syz.4.384'.
[  127.571528][ T6989] netlink: 104 bytes leftover after parsing attributes in process `syz.4.390'.
[  127.690258][ T6997] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.392'.
[  127.924080][ T7009] netlink: 'syz.3.396': attribute type 31 has an invalid length.
[  128.227099][ T7017] netlink: 'syz.3.397': attribute type 10 has an invalid length.
[  128.265903][ T7016] netlink: 'syz.4.398': attribute type 16 has an invalid length.
[  128.273152][ T7016] netlink: 48 bytes leftover after parsing attributes in process `syz.4.398'.
[  128.923579][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.442623][ T7044] netlink: 220 bytes leftover after parsing attributes in process `syz.3.410'.
[  129.453774][ T7044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.410'.
[  130.823191][ T7042] netlink: 'syz.3.410': attribute type 28 has an invalid length.
[  130.827795][ T7042] netlink: 2 bytes leftover after parsing attributes in process `syz.3.410'.
[  131.825953][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.905510][ T7044] bridge_slave_0 (unregistering): left allmulticast mode
[  131.909624][ T7044] bridge_slave_0 (unregistering): left promiscuous mode
[  131.917730][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.162902][ T7069] netlink: 'syz.1.420': attribute type 1 has an invalid length.
[  132.505248][ T7080] netlink: 277 bytes leftover after parsing attributes in process `syz.1.424'.
[  132.981219][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.983299][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.130086][ T7111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.439'.
[  133.146036][ T7111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.439'.
[  133.151473][ T7111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.439'.
[  133.189970][ T7117] syz.3.442 uses obsolete (PF_INET,SOCK_PACKET)
[  133.728278][ T7135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.497115][ T7173] delete_channel: no stack
[  134.499654][ T7173] delete_channel: no stack
[  134.596486][ T7174] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  134.847449][ T7181] netlink: 'syz.4.468': attribute type 39 has an invalid length.
[  134.914930][ T7178] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.949819][ T7178] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.635584][ T7199] netlink: 'syz.3.476': attribute type 29 has an invalid length.
[  135.693287][ T7208] sit0: left promiscuous mode
[  135.728295][ T7208] sit0: entered promiscuous mode
[  135.879762][ T7213] netlink: 'syz.4.482': attribute type 2 has an invalid length.
[  136.116686][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.487'.
[  136.673767][ T7230] netlink: 'syz.4.488': attribute type 10 has an invalid length.
[  136.688131][ T7230] 8021q: adding VLAN 0 to HW filter on device team0
[  136.693783][ T7230] bond0: (slave team0): Enslaving as an active interface with an up link
[  136.834204][ T7238] netlink: 'syz.1.491': attribute type 13 has an invalid length.
[  136.869293][ T7232] netlink: 'syz.3.489': attribute type 10 has an invalid length.
[  136.877223][ T7239] netlink: 'syz.4.492': attribute type 4 has an invalid length.
[  136.955915][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.959603][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.064074][ T7238] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.076494][ T7238] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.529341][ T7232] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  137.539767][ T5873] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.547121][ T5873] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.560935][ T5873] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.564626][ T5873] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.467713][ T7338] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.536'.
[  139.475143][ T7338] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.536'.
[  139.995412][ T7352] netlink: 'syz.1.542': attribute type 12 has an invalid length.
[  139.998677][ T7352] netlink: 132 bytes leftover after parsing attributes in process `syz.1.542'.
[  141.662052][ T7388] netlink: 798 bytes leftover after parsing attributes in process `syz.4.558'.
[  142.056800][ T7383] : entered promiscuous mode
[  142.357006][ T7403] netlink: 'syz.3.564': attribute type 21 has an invalid length.
[  142.362896][ T7403] netlink: 144 bytes leftover after parsing attributes in process `syz.3.564'.
[  142.527681][ T7411] netlink: 64 bytes leftover after parsing attributes in process `syz.3.568'.
[  142.679047][ T7419] netlink: 'syz.1.572': attribute type 10 has an invalid length.
[  142.683807][ T7419] netlink: 2 bytes leftover after parsing attributes in process `syz.1.572'.
[  142.689259][ T7419] bond0: entered promiscuous mode
[  142.692500][ T7419] bond_slave_0: entered promiscuous mode
[  142.704426][ T7419] bond_slave_1: entered promiscuous mode
[  142.762799][ T7419] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.785618][ T7419] bridge0: port 3(bond0) entered blocking state
[  142.799442][ T7425] netlink: 220 bytes leftover after parsing attributes in process `syz.4.573'.
[  142.804752][ T7419] bridge0: port 3(bond0) entered disabled state
[  142.809812][ T7419] bond0: entered allmulticast mode
[  142.821213][ T7419] bond_slave_0: entered allmulticast mode
[  142.841082][ T7419] bond_slave_1: entered allmulticast mode
[  144.297850][ T7456] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.588'.
[  144.658233][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'.
[  144.899992][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.597'.
[  144.904909][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'.
[  144.909000][ T7475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.595'.
[  146.035520][ T7525] bridge0: port 3(ip6gretap0) entered blocking state
[  146.038205][ T7525] bridge0: port 3(ip6gretap0) entered disabled state
[  146.045021][ T7525] ip6gretap0: entered allmulticast mode
[  146.049359][ T7525] ip6gretap0: entered promiscuous mode
[  146.052395][ T7525] bridge0: port 3(ip6gretap0) entered blocking state
[  146.055483][ T7525] bridge0: port 3(ip6gretap0) entered forwarding state
[  148.126701][ T7584] sctp: [Deprecated]: syz.1.641 (pid 7584) Use of int in max_burst socket option deprecated.
[  148.126701][ T7584] Use struct sctp_assoc_value instead
[  148.183877][ T7589] netlink: 'syz.1.643': attribute type 1 has an invalid length.
[  148.233225][ T7591] netlink: 'syz.1.644': attribute type 21 has an invalid length.
[  148.284382][ T7595] __nla_validate_parse: 3 callbacks suppressed
[  148.284394][ T7595] netlink: 294 bytes leftover after parsing attributes in process `syz.3.646'.
[  148.575897][ T7603] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  148.578887][ T7603] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  148.879139][ T7636] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  149.300166][ T7654] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  149.386293][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'.
[  149.792306][ T7669] netlink: 'syz.1.672': attribute type 7 has an invalid length.
[  150.239532][ T5873] syzkaller0: tun_net_xmit 76
[  150.243297][ T5873] syzkaller0: tun_net_xmit 48
[  150.261013][    T9] syzkaller0: tun_net_xmit 76
[  150.277000][ T7679] syzkaller0: tun_chr_ioctl cmd 1074025677
[  150.280293][ T7679] syzkaller0: Linktype set failed because interface is up
[  150.297294][  T793] syzkaller0: tun_net_xmit 76
[  150.376526][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'.
[  150.611739][    T9] syzkaller0: tun_net_xmit 76
[  150.691259][ T7689] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  151.092137][ T7689] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  151.121325][  T793] syzkaller0: tun_net_xmit 76
[  151.256581][ T7701] netlink: 'syz.3.686': attribute type 9 has an invalid length.
[  152.908774][   T54] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  153.055770][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'.
[  153.097334][ T7721] netlink: 'syz.1.695': attribute type 1 has an invalid length.
[  153.100263][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'.
[  153.660019][ T7746] netlink: 64 bytes leftover after parsing attributes in process `syz.3.705'.
[  153.676836][ T7746] netlink: 'syz.3.705': attribute type 2 has an invalid length.
[  153.684825][ T7746] netlink: 'syz.3.705': attribute type 8 has an invalid length.
[  153.688374][ T7746] netlink: 132 bytes leftover after parsing attributes in process `syz.3.705'.
[  153.842567][ T7754] netlink: 'syz.3.709': attribute type 13 has an invalid length.
[  154.757051][ T7802] netlink: 'syz.3.731': attribute type 33 has an invalid length.
[  154.770951][ T7802] netlink: 152 bytes leftover after parsing attributes in process `syz.3.731'.
[  156.495617][ T7844] netlink: 'syz.1.748': attribute type 11 has an invalid length.
[  156.499260][ T7844] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.748'.
[  156.693103][ T7849] netlink: 'syz.3.750': attribute type 10 has an invalid length.
[  156.741502][ T7850] netlink: 'syz.3.750': attribute type 11 has an invalid length.
[  156.744657][ T7850] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.750'.
[  157.265813][ T7842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.488010][ T7848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.923716][ T7849] team0: Port device wlan1 added
[  158.262347][ T7865] netlink: 'syz.1.755': attribute type 10 has an invalid length.
[  158.272038][ T7865] netlink: 55 bytes leftover after parsing attributes in process `syz.1.755'.
[  158.340091][ T7870] delete_channel: no stack
[  158.542886][ T7868] netlink: 10 bytes leftover after parsing attributes in process `syz.3.752'.
[  158.864069][ T7877] netlink: 'syz.3.761': attribute type 3 has an invalid length.
[  158.867251][ T7877] netlink: 'syz.3.761': attribute type 2 has an invalid length.
[  158.870248][ T7877] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.761'.
[  159.032180][ T7881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.046984][ T7879] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.762'.
[  159.120412][   T54] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  159.266458][ T7886] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.765'.
[  159.929497][ T7915] netlink: 'syz.3.777': attribute type 23 has an invalid length.
[  160.352143][ T7920] netlink: 'syz.1.779': attribute type 10 has an invalid length.
[  160.480267][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'.
[  160.517107][ T7923] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.779'.
[  160.554712][ T7920] team0 (unregistering): Port device team_slave_0 removed
[  160.559322][ T7920] team0 (unregistering): Port device team_slave_1 removed
[  160.779711][ T7941] netlink: 'syz.1.789': attribute type 3 has an invalid length.
[  160.788731][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'.
[  160.847350][ T7945] netlink: 'syz.4.791': attribute type 1 has an invalid length.
[  161.002031][ T7952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.794'.
[  161.008803][ T7952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.794'.
[  161.141298][ T7962] netlink: 'syz.4.800': attribute type 3 has an invalid length.
[  161.144791][ T7962] netlink: 'syz.4.800': attribute type 3 has an invalid length.
[  161.148219][ T7962] netlink: 130500 bytes leftover after parsing attributes in process `syz.4.800'.
[  161.257999][ T7969] netlink: 'syz.4.802': attribute type 1 has an invalid length.
[  161.974172][ T7985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'.
[  162.340870][ T8004] sctp: [Deprecated]: syz.3.819 (pid 8004) Use of int in maxseg socket option.
[  162.340870][ T8004] Use struct sctp_assoc_value instead
[  162.384274][ T7991] netlink: 'syz.1.813': attribute type 9 has an invalid length.
[  163.201837][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  163.205481][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  163.209530][   T54] Bluetooth: hci0: hardware error 0x00
[  165.184433][ T8053] __nla_validate_parse: 6 callbacks suppressed
[  165.184501][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'.
[  165.522759][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  166.029004][ T8057] netlink: zone id is out of range
[  166.048090][ T8063] netlink: del zone limit has 4 unknown bytes
[  166.098426][ T8057] netlink: zone id is out of range
[  166.112721][ T8057] netlink: zone id is out of range
[  166.418016][ T8057] netlink: set zone limit has 4 unknown bytes
[  166.550344][ T8072] netlink: 'syz.4.844': attribute type 29 has an invalid length.
[  166.555944][ T8072] netlink: 'syz.4.844': attribute type 3 has an invalid length.
[  166.559554][ T8072] netlink: 132 bytes leftover after parsing attributes in process `syz.4.844'.
[  166.568191][ T8068] netlink: 'syz.1.842': attribute type 39 has an invalid length.
[  168.625965][ T8141] netlink: 'syz.1.874': attribute type 3 has an invalid length.
[  168.629361][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'.
[  168.634407][ T8141] netlink: 'syz.1.874': attribute type 3 has an invalid length.
[  168.637997][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'.
[  168.645804][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'.
[  169.129740][ T8154] netlink: 'syz.4.880': attribute type 29 has an invalid length.
[  169.135454][ T8154] netlink: 'syz.4.880': attribute type 29 has an invalid length.
[  169.374347][ T8167] netlink: 'syz.3.885': attribute type 1 has an invalid length.
[  169.379898][ T8167] netlink: 'syz.3.885': attribute type 2 has an invalid length.
[  173.289052][ T8188] netlink: 'syz.1.896': attribute type 21 has an invalid length.
[  173.486917][ T8201] netlink: 48 bytes leftover after parsing attributes in process `syz.4.902'.
[  173.529737][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.904'.
[  173.624249][ T8212] netlink: 52 bytes leftover after parsing attributes in process `syz.1.908'.
[  173.736475][ T8224] erspan0 speed is unknown, defaulting to 1000
[  173.739097][ T8224] erspan0 speed is unknown, defaulting to 1000
[  173.745027][ T8224] erspan0 speed is unknown, defaulting to 1000
[  173.755528][ T8224] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  173.828344][ T8226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.913'.
[  173.832117][ T8224] erspan0 speed is unknown, defaulting to 1000
[  173.843009][ T8224] erspan0 speed is unknown, defaulting to 1000
[  173.856695][ T8224] erspan0 speed is unknown, defaulting to 1000
[  173.913338][ T8232] netlink: 'syz.3.915': attribute type 1 has an invalid length.
[  175.779808][ T8273] netlink: 'syz.1.935': attribute type 10 has an invalid length.
[  175.877264][ T8273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.257261][ T8273] batadv0: entered promiscuous mode
[  176.266078][ T8273] batadv0: entered allmulticast mode
[  176.271161][ T5863] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  176.274459][ T5863] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  176.286488][ T8273] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  176.714854][ T8305] netlink: 'syz.1.946': attribute type 10 has an invalid length.
[  176.825967][ T8305] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  176.836758][ T8305] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  176.847401][ T8305] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  176.945974][ T8307] syzkaller0: entered promiscuous mode
[  176.948397][ T8307] syzkaller0: entered allmulticast mode
[  177.477159][ T8315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.951'.
[  178.541999][ T8313] netlink: 160 bytes leftover after parsing attributes in process `syz.4.950'.
[  178.883829][ T8338] netlink: 2451 bytes leftover after parsing attributes in process `syz.3.961'.
[  178.963230][ T8343] : renamed from team_slave_1 (while UP)
[  179.334308][ T8361] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  180.271804][ T8373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.383971][ T8378] netlink: 'syz.1.979': attribute type 13 has an invalid length.
[  180.387526][ T8378] netlink: 'syz.1.979': attribute type 17 has an invalid length.
[  180.816098][ T8378] sit0: left promiscuous mode
[  180.818313][ T8378] sit0: left allmulticast mode
[  180.943600][ T8378] bridge0: port 3(bond0) entered blocking state
[  180.947171][ T8378] bridge0: port 3(bond0) entered forwarding state
[  181.012005][ T8378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.025543][  T793] erspan0 speed is unknown, defaulting to 1000
[  181.031480][  T793] syz2: Port: 1 Link ACTIVE
[  181.064802][ T8378] syz.1.979 (8378) used greatest stack depth: 18616 bytes left
[  181.140992][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.984'.
[  181.344014][ T8409] netlink: 168 bytes leftover after parsing attributes in process `syz.4.990'.
[  181.876524][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.998'.
[  181.879525][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.998'.
[  182.013901][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  183.253420][ T8483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1023'.
[  183.265878][ T8483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1023'.
[  183.272334][ T8483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1023'.
[  183.392466][ T8494] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1028'.
[  183.628672][ T8511] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1036'.
[  183.678200][ T8513] netlink: 'syz.1.1037': attribute type 11 has an invalid length.
[  183.793420][ T8515] netlink: 'syz.4.1035': attribute type 10 has an invalid length.
[  184.422781][ T8537] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.1047'.
[  184.467739][ T8535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1046'.
[  184.486084][ T8535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1046'.
[  184.847139][   T54] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10
[  184.853596][ T8559] netlink: 'syz.4.1055': attribute type 10 has an invalid length.
[  184.866112][ T8559] team0: Device ipvlan1 failed to register rx_handler
[  184.966313][   T27] wlan1: Trigger new scan to find an IBSS to join
[  185.437833][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'.
[  185.596517][ T8602] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1075'.
[  185.600890][ T8602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1075'.
[  185.932894][ T8618] netlink: 'syz.3.1083': attribute type 2 has an invalid length.
[  185.938097][ T8618] netlink: 'syz.3.1083': attribute type 1 has an invalid length.
[  185.942498][ T8618] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1083'.
[  185.955011][ T8622] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1082'.
[  186.411855][ T8626] dummy0: left allmulticast mode
[  186.419524][ T8626] bridge0: port 3(dummy0) entered disabled state
[  187.291138][ T8626] bridge_slave_1: left allmulticast mode
[  187.294412][ T8626] bridge_slave_1: left promiscuous mode
[  187.296517][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.221622][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  190.912564][ T4664] wlan1: Creating new IBSS network, BSSID 26:ab:d3:ab:00:c2
[  191.185781][ T8654] netlink: 'syz.1.1097': attribute type 3 has an invalid length.
[  191.319038][ T8667] netlink: 'syz.1.1103': attribute type 39 has an invalid length.
[  192.452679][ T8688] netlink: 'syz.3.1108': attribute type 1 has an invalid length.
[  192.456067][ T8688] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1108'.
[  192.585193][ T8694] : port 1(veth0_to_bridge) entered blocking state
[  192.588398][ T8694] : port 1(veth0_to_bridge) entered disabled state
[  192.614993][ T8694] veth0_to_bridge: entered allmulticast mode
[  192.622571][ T8694] veth0_to_bridge: entered promiscuous mode
[  193.294843][ T8707] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  193.492213][ T8715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.337453][   T54] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  194.337788][   T54] Bluetooth: hci2: connection err: -111
[  194.470935][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.473329][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.754611][ T8753] xt_l2tp: unknown flags: 51
[  196.145589][ T8780] netlink: 'syz.4.1139': attribute type 16 has an invalid length.
[  196.148777][ T8780] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1139'.
[  196.265376][ T8786] netlink: zone id is out of range
[  196.269279][ T8786] netlink: zone id is out of range
[  196.293382][ T8786] netlink: zone id is out of range
[  196.323703][ T8786] netlink: set zone limit has 4 unknown bytes
[  196.361656][ T8773] netlink: del zone limit has 4 unknown bytes
[  196.486401][ T5236] Bluetooth: hci2: command 0x0406 tx timeout
[  196.975530][ T8794] netlink: 208252 bytes leftover after parsing attributes in process `syz.1.1143'.
[  196.982817][ T8794] netlink: 'syz.1.1143': attribute type 1 has an invalid length.
[  196.986397][ T8794] netlink: 'syz.1.1143': attribute type 2 has an invalid length.
[  196.990073][ T8794] netlink: 'syz.1.1143': attribute type 3 has an invalid length.
[  196.995267][ T8794] netlink: 'syz.1.1143': attribute type 4 has an invalid length.
[  197.338264][ T8805] : entered promiscuous mode
[  197.512840][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1144'.
[  198.024036][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1154'.
[  198.035724][ T8828] netlink: 'syz.3.1159': attribute type 2 has an invalid length.
[  198.039100][ T8828] netlink: 'syz.3.1159': attribute type 1 has an invalid length.
[  198.044475][ T8828] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1159'.
[  199.193682][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1173'.
[  199.485175][ T8885] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1182'.
[  199.580172][ T8891] syzkaller0: entered promiscuous mode
[  199.584771][ T8891] syzkaller0: entered allmulticast mode
[  199.770335][ T8889] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1181'.
[  201.289726][ T8929] netlink: 'syz.1.1201': attribute type 2 has an invalid length.
[  201.602893][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  202.384132][ T8975] netlink: 'syz.3.1221': attribute type 3 has an invalid length.
[  202.387434][ T8975] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.1221'.
[  202.898933][ T9002] : port 2(veth0_to_team) entered blocking state
[  202.906118][ T9002] : port 2(veth0_to_team) entered disabled state
[  202.909535][ T9002] veth0_to_team: entered allmulticast mode
[  202.916793][ T9002] veth0_to_team: entered promiscuous mode
[  204.587242][ T9056] netlink: 'syz.1.1254': attribute type 9 has an invalid length.
[  204.631289][ T9058] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1256'.
[  205.108198][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'.
[  205.220236][ T9077] netlink: 'syz.4.1265': attribute type 21 has an invalid length.
[  205.224996][ T9077] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1265'.
[  205.368124][ T9079] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1266'.
[  205.436225][ T9085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.502592][ T9090] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1271'.
[  205.979396][ T9120] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[  206.799875][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'.
[  206.805479][ T9148] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1296'.
[  207.252328][ T9166] syzkaller0: entered promiscuous mode
[  207.254624][ T9166] syzkaller0: entered allmulticast mode
[  207.376838][ T9173] netlink: 'syz.3.1307': attribute type 1 has an invalid length.
[  207.380765][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'.
[  208.227006][ T9193] netlink: 'syz.3.1317': attribute type 97 has an invalid length.
[  208.238129][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'.
[  208.242644][ T9193] netlink: 'syz.3.1317': attribute type 97 has an invalid length.
[  208.245597][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'.
[  208.778691][ T9203] xt_socket: unknown flags 0x6
[  210.378962][ T9270] netlink: 'syz.3.1352': attribute type 1 has an invalid length.
[  210.746458][ T9286] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  211.254252][ T9305] rdma_rxe: rxe_newlink: failed to add lo
[  211.297713][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'.
[  211.306549][ T9307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.129915][ T9345] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1386'.
[  216.151561][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'.
[  216.346819][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'.
[  216.451426][ T9361] openvswitch: netlink: Flow actions attr not present in new flow.
[  216.547343][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1397'.
[  216.601772][ T9367] netlink: 'syz.1.1397': attribute type 1 has an invalid length.
[  216.656152][ T9372] netlink: 'syz.4.1399': attribute type 6 has an invalid length.
[  216.659814][ T9372] netlink: 'syz.4.1399': attribute type 1 has an invalid length.
[  216.669977][ T9372] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1399'.
[  216.782710][ T9382] netlink: 'syz.3.1403': attribute type 10 has an invalid length.
[  216.786036][ T9382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1403'.
[  217.016262][ T9397] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1411'.
[  217.338156][ T9420] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.1422'.
[  217.341937][ T9420] netlink: 61827 bytes leftover after parsing attributes in process `syz.1.1422'.
[  218.302677][ T9461] openvswitch: netlink: Missing valid actions attribute.
[  218.305146][ T9461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.305859][ T9462] netlink: 'syz.4.1438': attribute type 21 has an invalid length.
[  218.311581][ T9462] netlink: 'syz.4.1438': attribute type 20 has an invalid length.
[  218.532512][ T9481] netlink: 'syz.3.1448': attribute type 29 has an invalid length.
[  218.536052][ T9481] netlink: 'syz.3.1448': attribute type 29 has an invalid length.
[  218.539015][ T9481] netlink: 'syz.3.1448': attribute type 29 has an invalid length.
[  218.570058][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'.
[  220.987496][   T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  221.223280][ T9521] netlink: 'syz.4.1467': attribute type 29 has an invalid length.
[  221.307737][ T9521] team0: Device bond0 is already an upper device of the team interface
[  221.520646][ T9544] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1476'.
[  221.525087][ T9541] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1476'.
[  221.532307][ T9541] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1476'.
[  221.679555][ T9552] : renamed from bond0
[  221.941686][ T9577] validate_nla: 1 callbacks suppressed
[  221.941725][ T9577] netlink: 'syz.1.1492': attribute type 2 has an invalid length.
[  221.965851][ T9581] netlink: 'syz.4.1494': attribute type 3 has an invalid length.
[  221.969421][ T9581] netlink: 199752 bytes leftover after parsing attributes in process `syz.4.1494'.
[  221.978250][ T9577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1492'.
[  222.135526][ T9591] netlink: 'syz.1.1499': attribute type 9 has an invalid length.
[  222.138501][ T9591] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.1499'.
[  222.240285][ T9597] netlink: 'syz.1.1502': attribute type 16 has an invalid length.
[  222.244370][ T9597] netlink: 'syz.1.1502': attribute type 3 has an invalid length.
[  222.248195][ T9597] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1502'.
[  222.526474][ T9607] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1506'.
[  223.404758][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'.
[  223.432203][ T9644] netlink: 'syz.1.1523': attribute type 10 has an invalid length.
[  223.436306][ T9644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1523'.
[  223.442546][ T9644] dummy0: entered promiscuous mode
[  223.470328][ T9644] bridge0: port 4(dummy0) entered blocking state
[  223.475760][ T9644] bridge0: port 4(dummy0) entered disabled state
[  223.480266][ T9644] dummy0: entered allmulticast mode
[  223.513730][ T9644] bridge0: port 4(dummy0) entered blocking state
[  223.516573][ T9644] bridge0: port 4(dummy0) entered forwarding state
[  224.188702][ T9659] netlink: 'syz.4.1530': attribute type 2 has an invalid length.
[  224.438578][ T9679] netlink: 'syz.1.1539': attribute type 21 has an invalid length.
[  224.442366][ T9679] netlink: 'syz.1.1539': attribute type 15 has an invalid length.
[  224.445672][ T9679] IPv6: NLM_F_CREATE should be specified when creating new route
[  224.456658][ T9679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.459642][ T9679] IPv6: NLM_F_CREATE should be set when creating new route
[  224.462950][ T9679] IPv6: NLM_F_CREATE should be set when creating new route
[  224.466038][ T9679] IPv6: NLM_F_CREATE should be set when creating new route
[  224.621670][ T9694] netlink: 'syz.3.1545': attribute type 10 has an invalid length.
[  224.627932][ T9694] bond0: (slave bond_slave_0): Releasing backup interface
[  224.724757][ T9699] delete_channel: no stack
[  225.427940][ T9723] openvswitch: netlink: Unknown key attributes 1
[  225.795810][ T9733] openvswitch: netlink: Missing key (keys=40, expected=80)
[  229.029159][ T9771] __nla_validate_parse: 4 callbacks suppressed
[  229.029174][ T9771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1580'.
[  229.038864][ T9771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1580'.
[  229.109799][ T9777] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1583'.
[  229.555757][ T9794] xt_time: unknown flags 0xf4
[  229.633935][ T9798] validate_nla: 2 callbacks suppressed
[  229.633953][ T9798] netlink: 'syz.1.1592': attribute type 10 has an invalid length.
[  229.703254][ T9799] netlink: 'syz.1.1592': attribute type 10 has an invalid length.
[  229.746464][ T9801] netlink: 'syz.4.1593': attribute type 5 has an invalid length.
[  229.886347][ T9803] netlink: 'syz.4.1594': attribute type 2 has an invalid length.
[  229.889895][ T9803] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1594'.
[  230.203280][ T9809] netlink: 'syz.1.1597': attribute type 10 has an invalid length.
[  230.513458][ T9815] netlink: 'syz.4.1599': attribute type 10 has an invalid length.
[  230.517063][ T9815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1599'.
[  230.555888][ T9809] bond0: (slave wlan1): Releasing backup interface
[  230.583069][ T9809] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  230.595076][ T9809] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  230.604942][ T9815] ipvlan1: entered promiscuous mode
[  230.606931][ T9815] ipvlan1: entered allmulticast mode
[  230.614206][ T9815] bridge0: port 4(ipvlan1) entered blocking state
[  230.616521][ T9815] bridge0: port 4(ipvlan1) entered disabled state
[  230.620370][ T9815] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  232.715091][ T9835] netlink: 'syz.4.1606': attribute type 6 has an invalid length.
[  232.719176][ T9835] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1606'.
[  232.913233][ T9837] erspan0 speed is unknown, defaulting to 1000
[  232.956701][ T9778] Set syz1 is full, maxelem 65536 reached
[  235.205833][ T9852] netlink: 'syz.1.1610': attribute type 7 has an invalid length.
[  236.067318][ T9867] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1615'.
[  236.215205][ T9877] netlink: 'syz.4.1619': attribute type 21 has an invalid length.
[  237.541180][ T9920] netlink: 376 bytes leftover after parsing attributes in process `syz.4.1637'.
[  237.544430][ T9920] netlink: 376 bytes leftover after parsing attributes in process `syz.4.1637'.
[  239.092969][ T9938] : entered promiscuous mode
[  239.152759][ T9936] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  239.159323][ T9936] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  239.633295][ T9966] netlink: 'syz.1.1648': attribute type 6 has an invalid length.
[  239.635906][ T9966] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1648'.
[  239.775505][ T9971] netlink: 'syz.4.1655': attribute type 12 has an invalid length.
[  239.797045][ T9971] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1655'.
[  240.033541][ T9976] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1657'.
[  240.381434][ T9988] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1662'.
[  240.386177][ T9986] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1662'.
[  240.391700][ T9986] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1662'.
[  240.463783][ T9992] netlink: 'syz.3.1664': attribute type 10 has an invalid length.
[  240.468581][ T9992] batman_adv: batadv0: Adding interface: netdevsim0
[  240.472412][ T9992] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.491813][ T9992] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  241.344717][T10014] netlink: 'syz.3.1672': attribute type 2 has an invalid length.
[  241.347822][T10014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1672'.
[  241.403845][T10018] netlink: 'syz.4.1675': attribute type 1 has an invalid length.
[  241.506471][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1678'.
[  241.836429][T10030] : entered promiscuous mode
[  242.027795][T10036] netlink: 'syz.4.1685': attribute type 2 has an invalid length.
[  242.044003][T10036] netlink: 'syz.4.1685': attribute type 1 has an invalid length.
[  242.262232][T10038] netlink: 'syz.1.1686': attribute type 1 has an invalid length.
[  242.265513][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'.
[  243.283118][T10083] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1706'.
[  245.082134][T10116] netlink: 'syz.1.1721': attribute type 3 has an invalid length.
[  245.085851][T10116] netlink: 'syz.1.1721': attribute type 1 has an invalid length.
[  245.089010][T10116] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1721'.
[  245.112027][T10116] netlink: 'syz.1.1721': attribute type 8 has an invalid length.
[  245.159925][T10122] netlink: 'syz.1.1724': attribute type 1 has an invalid length.
[  245.286895][T10134] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1731'.
[  245.514778][T10159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1742'.
[  245.588964][T10165] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1745'.
[  247.119167][T10189] openvswitch: netlink: Key type 29 is not supported
[  247.737071][T10205] erspan0 speed is unknown, defaulting to 1000
[  249.497354][T10233] delete_channel: no stack
[  250.221474][T10253] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1783'.
[  250.249756][T10256] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1784'.
[  250.473259][T10274] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1794'.
[  250.478004][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1791'.
[  250.482821][T10269] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1791'.
[  250.485918][   T54] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  250.967231][T10304] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1806'.
[  251.049378][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'.
[  251.074749][T10307] validate_nla: 5 callbacks suppressed
[  251.074805][T10307] netlink: 'syz.4.1807': attribute type 40 has an invalid length.
[  251.135150][T10307] siw: device registration error -23
[  251.446521][T10329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1818'.
[  251.449927][T10329] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1818'.
[  251.708524][T10350] netlink: 'syz.4.1828': attribute type 3 has an invalid length.
[  251.912893][ T4664] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  252.340410][T10377] syzkaller0: entered promiscuous mode
[  252.366166][T10377] syzkaller0: entered allmulticast mode
[  252.560802][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  253.047074][T10390] netlink: 'syz.1.1845': attribute type 49 has an invalid length.
[  253.321932][T10397] nbd: must specify an index to disconnect
[  254.724677][T10406] x_tables: ip_tables: udp match: only valid for protocol 17
[  254.878175][T10413] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1852'.
[  255.281624][T10425] netlink: 'syz.3.1859': attribute type 2 has an invalid length.
[  255.284795][T10425] netlink: 'syz.3.1859': attribute type 1 has an invalid length.
[  255.289271][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1859'.
[  255.555792][T10440] netlink: 'syz.1.1866': attribute type 4 has an invalid length.
[  255.713756][T10447] : left promiscuous mode
[  255.893894][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.895999][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.093182][T10453] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1871'.
[  256.206528][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'.
[  256.783005][   T54] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  256.869994][T10477] erspan0 speed is unknown, defaulting to 1000
[  257.695254][T10504] netlink: 'syz.4.1893': attribute type 39 has an invalid length.
[  257.836045][T10504] hsr_slave_0 (unregistering): left promiscuous mode
[  257.845843][T10508] xt_l2tp: v2 tid > 0xffff: 327812
[  257.967064][T10512] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1898'.
[  257.997618][T10512] bridge0: port 4(dummy0) entered disabled state
[  258.059260][T10512] dummy0 (unregistering): left allmulticast mode
[  258.064001][T10512] bridge0: port 4(dummy0) entered disabled state
[  258.236920][T10529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1905'.
[  258.242211][T10529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1905'.
[  258.245960][T10529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1905'.
[  258.528805][T10541] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1910'.
[  258.593080][T10544] can: request_module (can-proto-5) failed.
[  258.646249][T10544] can: request_module (can-proto-3) failed.
[  258.911318][T10565] netlink: 'syz.4.1916': attribute type 10 has an invalid length.
[  258.915896][T10565] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1916'.
[  258.919627][T10565] team0: entered promiscuous mode
[  258.924472][T10565] team_slave_0: entered promiscuous mode
[  258.927280][T10565] team_slave_1: entered promiscuous mode
[  258.929640][T10565] team0: entered allmulticast mode
[  258.933752][T10565] team_slave_0: entered allmulticast mode
[  258.936208][T10565] team_slave_1: entered allmulticast mode
[  258.973842][T10565] : (slave team0): Releasing backup interface
[  259.064593][T10565] bridge0: port 4(team0) entered blocking state
[  259.074614][T10565] bridge0: port 4(team0) entered disabled state
[  259.128192][T10569] netlink: 'syz.1.1921': attribute type 12 has an invalid length.
[  259.148455][T10569] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1921'.
[  259.427069][   T54] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  260.212847][T10591] netlink: 'syz.3.1930': attribute type 39 has an invalid length.
[  260.294623][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'.
[  260.348010][T10602] netlink: 'syz.4.1936': attribute type 4 has an invalid length.
[  260.353638][T10602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1936'.
[  260.433023][T10606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.598584][T10619] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  260.734869][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'.
[  260.794560][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'.
[  260.887645][T10637] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.1952'.
[  260.957556][T10640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1954'.
[  260.974381][T10642] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1955'.
[  262.255669][T10658] netlink: 'syz.1.1961': attribute type 9 has an invalid length.
[  262.258763][T10658] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1961'.
[  262.381975][T10666] netlink: 'syz.1.1964': attribute type 21 has an invalid length.
[  262.385491][T10666] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1964'.
[  262.401138][T10669] netlink: 'syz.3.1966': attribute type 6 has an invalid length.
[  262.644469][T10682] netlink: 'syz.1.1972': attribute type 1 has an invalid length.
[  262.647866][T10682] netlink: 'syz.1.1972': attribute type 1 has an invalid length.
[  263.005926][T10710] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1981'.
[  263.017968][T10710] netlink: zone id is out of range
[  263.021350][T10710] netlink: zone id is out of range
[  263.024292][T10710] netlink: zone id is out of range
[  263.026780][T10710] netlink: zone id is out of range
[  263.029419][T10710] netlink: zone id is out of range
[  263.039554][T10710] netlink: zone id is out of range
[  263.044052][T10710] netlink: zone id is out of range
[  263.046462][T10710] netlink: zone id is out of range
[  263.049463][T10710] netlink: zone id is out of range
[  263.234936][T10710] syz.1.1981 (10710) used obsolete PPPIOCDETACH ioctl
[  263.863147][T10740] netlink: 'syz.4.1994': attribute type 29 has an invalid length.
[  263.868069][T10740] netlink: 'syz.4.1994': attribute type 29 has an invalid length.
[  263.998009][T10747] lo: entered allmulticast mode
[  264.016458][T10747] lo: entered promiscuous mode
[  264.073109][T10747] lo: left allmulticast mode
[  264.108495][T10749] netlink: 'syz.4.1995': attribute type 21 has an invalid length.
[  264.391957][T10765] delete_channel: no stack
[  264.477054][T10772] netlink: 'syz.1.2008': attribute type 6 has an invalid length.
[  265.724421][T10802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.728022][T10802] IPv6: NLM_F_CREATE should be set when creating new route
[  265.731484][T10802] IPv6: NLM_F_CREATE should be set when creating new route
[  266.246161][T10811] __nla_validate_parse: 1 callbacks suppressed
[  266.246177][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'.
[  266.381434][T10815] netlink: 'syz.3.2028': attribute type 10 has an invalid length.
[  266.411372][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.416153][T10815] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  266.433620][T10819] netlink: 'syz.4.2027': attribute type 12 has an invalid length.
[  266.436155][T10819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2027'.
[  266.834330][T10851] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  266.893211][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'.
[  266.998322][T10859] netlink: 'syz.4.2047': attribute type 11 has an invalid length.
[  267.003763][T10859] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2047'.
[  267.116500][T10858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.147066][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'.
[  267.153490][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'.
[  267.551401][T10873] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2053'.
[  267.617312][   T54] Bluetooth: hci2: Malformed Event: 0x2f
[  267.659173][T10883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2057'.
[  267.664395][T10883] net_ratelimit: 76 callbacks suppressed
[  267.664408][T10883] openvswitch: netlink: Missing key (keys=40, expected=100)
[  267.886852][   T54] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  271.539444][T10952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2087'.
[  271.624330][T10956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2088'.
[  271.804181][T10971] netlink: 'syz.3.2095': attribute type 1 has an invalid length.
[  271.807698][T10971] netlink: 'syz.3.2095': attribute type 4 has an invalid length.
[  271.819372][T10971] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2095'.
[  272.039052][T10987] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2102'.
[  272.045065][T10987] netlink: zone id is out of range
[  272.047314][T10987] netlink: get zone limit has 8 unknown bytes
[  272.121702][T11000] netlink: 'syz.1.2104': attribute type 10 has an invalid length.
[  272.220723][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'.
[  272.224134][T11014] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  272.257468][T10995] netlink: 'syz.3.2103': attribute type 1 has an invalid length.
[  272.400340][T11028] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2107'.
Connection to localhost closed by remote host.
[  273.080355][ T5873] bond0: left allmulticast mode
[  273.082334][ T5873] bond_slave_0: left allmulticast mode
[  273.084063][ T5873] bond_slave_1: left allmulticast mode
[  273.085910][ T5873] batadv0: left allmulticast mode
[  273.087588][ T5873] bond0: left promiscuous mode
[  273.089161][ T5873] bond_slave_0: left promiscuous mode
[  273.093975][ T5873] bond_slave_1: left promiscuous mode
[  273.096290][ T5873] batadv0: left promiscuous mode
[  273.098660][ T5873] bridge0: port 3(bond0) entered disabled state
[  273.105523][ T5873] bridge_slave_1: left allmulticast mode
[  273.107823][ T5873] bridge_slave_1: left promiscuous mode
[  273.110332][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.114547][ T5873] bridge_slave_0: left allmulticast mode
[  273.116428][ T5873] bridge_slave_0: left promiscuous mode
[  273.118375][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.125474][ T5873] veth0_to_team: left allmulticast mode
[  273.127301][ T5873] veth0_to_team: left promiscuous mode
[  273.129424][ T5873] : port 2(veth0_to_team) entered disabled state
[  273.134927][ T5873] veth0_to_bridge: left allmulticast mode
[  273.136806][ T5873] veth0_to_bridge: left promiscuous mode
[  273.138715][ T5873] : port 1(veth0_to_bridge) entered disabled state
[  273.479460][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  273.483870][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  273.487748][ T5873] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  273.492239][ T5873] bond0 (unregistering): Released all slaves
[  273.498751][ T5925] erspan0 speed is unknown, defaulting to 1000
[  273.501020][ T5925] infiniband syz2: ib_query_port failed (-19)
[  273.569359][ T5873] : left promiscuous mode
[  273.623420][ T5873] : left promiscuous mode
[  273.891945][ T5873] hsr_slave_0: left promiscuous mode
[  273.894253][ T5873] hsr_slave_1: left promiscuous mode
[  273.896293][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.899365][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1

VM DIAGNOSIS:
17:02:41  Registers:
info registers vcpu 0

CPU#0
RAX=96dfe824b3408e00 RBX=ffffffff819695f8 RCX=96dfe824b3408e00 RDX=0000000000000001
RSI=ffffffff8d9baa63 RDI=ffffffff8be34280 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3b230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7ad3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd3d5c6fe8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000400000067 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=391ced92d3ce6600 RBX=ffffffff819695f8 RCX=391ced92d3ce6600 RDX=0000000000000001
RSI=ffffffff8d9baa63 RDI=ffffffff8be34280 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3b230 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7ad3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564f6332fa30 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
