last executing test programs:

3m19.239466838s ago: executing program 2 (id=1775):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

3m19.238842694s ago: executing program 2 (id=1777):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001114010027bd7000fcdbdf2508004b001300000008004f00000000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4)

3m19.150043622s ago: executing program 2 (id=1782):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

3m19.080667422s ago: executing program 2 (id=1784):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000))

3m18.98799472s ago: executing program 2 (id=1787):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

3m18.987512503s ago: executing program 2 (id=1789):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000006e40)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)

3m3.76723918s ago: executing program 32 (id=1789):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000006e40)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)

1m55.900124601s ago: executing program 3 (id=3332):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xa, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0x1218, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x1, 0xfffffffc, 0x6, 0x8, 0x5, 0x806, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000440)="a2", 0x1}], 0x1}, 0x20000000)
setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8)

1m55.058836951s ago: executing program 3 (id=3358):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10)
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8)
close(r0)
r4 = socket$kcm(0x11, 0x2, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8)

1m54.929981836s ago: executing program 3 (id=3362):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000040002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m54.929551173s ago: executing program 3 (id=3364):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x6, &(0x7f0000000280)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x0, 0x0, 0x0, 0x5, 0x1, 0xfffffffffffffff0, 0xffffffffffffffff}], 0x0, 0x2, 0x1, &(0x7f0000000340)=""/1, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x1, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4, 0xffffffffffffffff], &(0x7f0000000640)}, 0x94)

1m54.799005482s ago: executing program 3 (id=3368):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a0000000760000000000000027007fffffff00009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfffffffffffffeee}, 0x23)

1m54.579598561s ago: executing program 3 (id=3369):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

1m54.451488599s ago: executing program 33 (id=3369):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

1m49.609254389s ago: executing program 1 (id=3443):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0000050900010073797a3100000000540004802c000180090001007866726d000000001c00028005000300010000000800024000000001080001400000001210000180090001006d61737100000000140001800e000100627974656f726465720000000900020073797a32"], 0xe0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

1m49.538986122s ago: executing program 1 (id=3446):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r2 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r2, 0x0, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x12)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x9a)

1m49.011945802s ago: executing program 1 (id=3455):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="110000001e007f109e", 0x9}, {&(0x7f0000000140)="78cafb73fc020107", 0x8}], 0x2}, 0x0)

1m48.909394695s ago: executing program 1 (id=3456):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000080)={'wlan1\x00'})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
socket$kcm(0xa, 0x2, 0x3a)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, 0x0, 0xfe33)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b2000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m48.5807741s ago: executing program 1 (id=3460):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})

1m48.189184451s ago: executing program 1 (id=3468):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000006e40)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)

1m33.16243558s ago: executing program 34 (id=3468):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000006e40)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)

17.158239323s ago: executing program 0 (id=4875):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x20, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x40}]}]}, 0x20}}, 0x4010)

17.157139124s ago: executing program 0 (id=4879):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x44}}, 0x20000040)

17.082824183s ago: executing program 0 (id=4882):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

16.57745962s ago: executing program 4 (id=4890):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003000b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0)

16.577149459s ago: executing program 4 (id=4891):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400009, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={r1})

16.571936635s ago: executing program 4 (id=4893):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

16.499374726s ago: executing program 4 (id=4894):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.448524768s ago: executing program 4 (id=4896):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
socket$kcm(0x2, 0x1000000000000002, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
sendmsg(0xffffffffffffffff, 0x0, 0x4004004)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0)
sendmsg(r0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000013c0)=""/4, 0x4}, {&(0x7f0000001400)=""/11, 0xb}, {0x0}, {&(0x7f0000001800)=""/14, 0xe}, {0x0}, {0x0}, {&(0x7f00000018c0)=""/94, 0x5e}], 0x7}, 0x1)

16.319190873s ago: executing program 5 (id=4900):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102)

16.209432853s ago: executing program 0 (id=4901):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x28)

15.945205782s ago: executing program 5 (id=4902):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000000000003"], 0x50)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r3)

15.944740318s ago: executing program 5 (id=4903):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x3}, 0x42, 0xc8, 0x0, 0x5, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef)

15.497708079s ago: executing program 0 (id=4904):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000400000007010000080720007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94)

15.497140434s ago: executing program 5 (id=4905):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x33, 0x9, 0xfffffffc, 0x25dfdbfb, {0x3}}, 0x14}}, 0x0)

15.449149702s ago: executing program 4 (id=4906):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0)

15.448989014s ago: executing program 5 (id=4907):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f20000000000000005000000b7080000000000007b0bf8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)

14.628653859s ago: executing program 0 (id=4908):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba830a6fda79cabe8eb53e6e00"/43], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x21, 0x800, 0x6, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc)
getpid()
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440))

14.628400682s ago: executing program 5 (id=4909):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r1}, 0x10)

124.489155ms ago: executing program 35 (id=4908):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba830a6fda79cabe8eb53e6e00"/43], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x21, 0x800, 0x6, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc)
getpid()
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440))

47.340638ms ago: executing program 36 (id=4909):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r1}, 0x10)

0s ago: executing program 37 (id=4906):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0)

kernel console output (not intermixed with test programs):

cess `syz.1.217'.
[   69.818771][ T6432] netlink: 'syz.0.238': attribute type 13 has an invalid length.
[   70.028449][ T6451] netlink: 'syz.0.247': attribute type 21 has an invalid length.
[   70.317161][ T6476] openvswitch: netlink: Geneve option length err (len 612, max 255).
[   70.421531][ T5234] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4
[   70.449580][ T6498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.546791][ T6506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.273'.
[   70.550508][ T6506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.273'.
[   70.554078][ T6506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.273'.
[   70.563707][ T6504] netlink: 176 bytes leftover after parsing attributes in process `syz.2.271'.
[   70.603462][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'.
[   70.717960][ T6523] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.281'.
[   71.032134][ T6544] netlink: 'syz.2.296': attribute type 2 has an invalid length.
[   71.037667][ T6544] netlink: 85376 bytes leftover after parsing attributes in process `syz.2.296'.
[   71.038962][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.044059][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.082466][ T6547] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.291'.
[   71.132282][ T6555] Illegal XDP return value 4294967274 on prog  (id 78) dev N/A, expect packet loss!
[   71.246428][ T6564] delete_channel: no stack
[   71.660909][ T6597] netlink: 'syz.0.315': attribute type 10 has an invalid length.
[   71.712601][ T6599] netlink: 'syz.2.316': attribute type 10 has an invalid length.
[   72.273840][ T6599] geneve0: entered promiscuous mode
[   72.282119][ T6599] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   72.658312][ T6625] syzkaller0: entered promiscuous mode
[   72.660162][ T6625] syzkaller0: entered allmulticast mode
[   72.741982][ T6633] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[   72.863468][ T6642] netlink: 'syz.0.336': attribute type 40 has an invalid length.
[   74.008512][ T6694] netlink: 'syz.2.360': attribute type 13 has an invalid length.
[   74.011339][ T6694] netlink: 'syz.2.360': attribute type 17 has an invalid length.
[   74.056154][ T6694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.307702][ T6721] __nla_validate_parse: 6 callbacks suppressed
[   74.307716][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'.
[   74.313034][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'.
[   74.498162][ T6729] netlink: 'syz.1.375': attribute type 10 has an invalid length.
[   74.509564][ T6729] geneve0: entered promiscuous mode
[   74.560926][ T6729] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   74.669859][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'.
[   75.390796][ T6757] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.387'.
[   75.837868][ T6719] Set syz1 is full, maxelem 65536 reached
[   75.979857][ T6793] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.405'.
[   75.991909][ T5234] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[   76.266025][ T6806] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320
[   77.717026][ T6837] netlink: 'syz.1.425': attribute type 29 has an invalid length.
[   77.721573][ T6837] netlink: 'syz.1.425': attribute type 29 has an invalid length.
[   77.726631][ T6837] netlink: 'syz.1.425': attribute type 29 has an invalid length.
[   78.119484][ T6847] openvswitch: netlink: Missing key (keys=40, expected=100)
[   79.645269][ T5234] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10
[   79.891350][ T6903] netlink: 'syz.1.449': attribute type 1 has an invalid length.
[   79.896523][ T6903] netlink: 376 bytes leftover after parsing attributes in process `syz.1.449'.
[   80.072768][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'.
[   80.356551][ T6919] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   80.667188][ T6923] netlink: 14 bytes leftover after parsing attributes in process `syz.1.456'.
[   80.774253][ T6923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.780128][ T6923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.786555][ T6923] bond0 (unregistering): (slave geneve0): Releasing backup interface
[   80.791586][ T6923] bond0 (unregistering): Released all slaves
[   81.128132][ T6956] netlink: 'syz.2.473': attribute type 10 has an invalid length.
[   81.231142][ T6966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.478'.
[   81.265556][   T51] cfg80211: failed to load regulatory.db
[   81.363546][ T6980] netlink: 'syz.0.483': attribute type 9 has an invalid length.
[   81.630659][ T6999] netlink: 92 bytes leftover after parsing attributes in process `syz.0.492'.
[   81.636058][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'.
[   81.640039][ T6999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.492'.
[   81.675131][ T5234] Bluetooth: hci0: command tx timeout
[   81.742741][ T7008] netlink: 14 bytes leftover after parsing attributes in process `syz.0.496'.
[   81.783906][ T7011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.498'.
[   81.837055][ T7008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.841935][ T7008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.846977][ T7008] bond0 (unregistering): Released all slaves
[   81.860154][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.873832][ T7011] bridge_slave_0 (unregistering): left allmulticast mode
[   81.877058][ T7011] bridge_slave_0 (unregistering): left promiscuous mode
[   81.880699][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.940400][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[   82.686896][ T7019] netlink: 'syz.0.500': attribute type 2 has an invalid length.
[   82.691368][ T7019] netlink: 'syz.0.500': attribute type 23 has an invalid length.
[   83.473231][ T7084] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[   84.269589][ T7079] delete_channel: no stack
[   84.859931][ T7100] netlink: 'syz.1.534': attribute type 29 has an invalid length.
[   84.933526][ T7100] netlink: 'syz.1.534': attribute type 29 has an invalid length.
[   84.972554][ T7100] netlink: 'syz.1.534': attribute type 29 has an invalid length.
[   85.000938][ T7100] netlink: 'syz.1.534': attribute type 29 has an invalid length.
[   85.205522][ T7107] __nla_validate_parse: 5 callbacks suppressed
[   85.205532][ T7107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.535'.
[   85.433360][ T7126] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   85.499880][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'.
[   85.523879][ T7129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.526488][ T7129] IPv6: NLM_F_CREATE should be set when creating new route
[   85.529252][ T7129] IPv6: NLM_F_CREATE should be set when creating new route
[   85.531800][ T7129] IPv6: NLM_F_CREATE should be set when creating new route
[   85.812691][ T5234] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   86.317599][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'.
[   86.925586][ T7180] netlink: 'syz.1.571': attribute type 10 has an invalid length.
[   87.264142][ T7173] netlink: 763 bytes leftover after parsing attributes in process `syz.2.568'.
[   87.419469][ T7190] netlink: 'syz.0.577': attribute type 10 has an invalid length.
[   87.422550][ T7190] netlink: 55 bytes leftover after parsing attributes in process `syz.0.577'.
[   87.766900][ T7213] netlink: 176 bytes leftover after parsing attributes in process `syz.1.585'.
[   87.824555][ T5234] Bluetooth: hci2: command tx timeout
[   87.962917][ T7226] netlink: 'syz.2.593': attribute type 28 has an invalid length.
[   88.006296][ T7230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.595'.
[   88.023180][ T7230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.595'.
[   88.045572][ T7230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.595'.
[   88.072951][ T7234] openvswitch: netlink: Missing valid actions attribute.
[   88.084548][ T7234] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.290967][ T7252] netlink: 'syz.1.606': attribute type 2 has an invalid length.
[   88.294300][ T7252] netlink: 'syz.1.606': attribute type 1 has an invalid length.
[   88.301055][ T7252] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.606'.
[   88.336927][ T7257] netlink: 'syz.0.608': attribute type 1 has an invalid length.
[   88.340370][ T7257] netlink: 'syz.0.608': attribute type 1 has an invalid length.
[   88.384000][ T7263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.596146][ T7269] batman_adv: batadv0: Adding interface: netdevsim0
[   88.598562][ T7269] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.607398][ T7269] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   88.846729][ T5234] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   89.124219][ T5855] cgroup: fork rejected by pids controller in /syz2
[   89.779357][ T5674] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.868461][ T5674] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.919470][ T5674] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.028909][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.043148][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.049926][ T5674] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.054697][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.059878][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.065130][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.163296][ T7329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   90.166802][ T7329] IPv6: NLM_F_CREATE should be set when creating new route
[   90.170221][ T7329] IPv6: NLM_F_CREATE should be set when creating new route
[   90.223969][ T5674] bridge_slave_1: left allmulticast mode
[   90.227805][ T5674] bridge_slave_1: left promiscuous mode
[   90.230854][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.240058][ T5674] bridge_slave_0: left allmulticast mode
[   90.242384][ T5674] bridge_slave_0: left promiscuous mode
[   90.249550][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.416996][ T5674] bond0 (unregistering): (slave geneve0): Releasing backup interface
[   90.428501][ T5674] bond0 (unregistering): (slave bridge0): Releasing backup interface
[   90.501099][ T5674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.506815][ T5674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.511327][ T5674] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[   90.515252][ T5674] veth1_vlan: left allmulticast mode
[   90.518145][ T5674] bond0 (unregistering): Released all slaves
[   90.527953][ T7321] chnl_net:caif_netlink_parms(): no params data found
[   90.535657][ T7341] __nla_validate_parse: 5 callbacks suppressed
[   90.535671][ T7341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.644'.
[   90.553957][ T7342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.644'.
[   90.567893][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.644'.
[   90.642893][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.646426][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.648854][ T7321] bridge_slave_0: entered allmulticast mode
[   90.652345][ T7321] bridge_slave_0: entered promiscuous mode
[   90.657682][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.660124][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.662718][ T7321] bridge_slave_1: entered allmulticast mode
[   90.667318][ T7321] bridge_slave_1: entered promiscuous mode
[   90.689382][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'.
[   90.691150][ T7321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.708116][ T7321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.755756][ T7321] team0: Port device team_slave_0 added
[   90.760874][ T7321] team0: Port device team_slave_1 added
[   90.818375][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.822300][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.830867][ T7321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.836783][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.839255][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.849438][ T7321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.859244][ T7356] tc_dump_action: action bad kind
[   90.882033][ T5674] hsr_slave_0: left promiscuous mode
[   90.887210][ T5674] hsr_slave_1: left promiscuous mode
[   90.890022][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.892621][ T5674] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.896517][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.899223][ T5674] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.912300][ T5674] veth1_macvtap: left promiscuous mode
[   90.920169][ T5674] veth0_macvtap: left promiscuous mode
[   90.922191][ T5674] veth1_vlan: left promiscuous mode
[   90.924692][ T5674] veth0_vlan: left promiscuous mode
[   91.274296][ T5674] team0 (unregistering): Port device team_slave_1 removed
[   91.301677][ T5674] team0 (unregistering): Port device team_slave_0 removed
[   91.726291][ T7321] hsr_slave_0: entered promiscuous mode
[   91.736313][ T7321] hsr_slave_1: entered promiscuous mode
[   91.739313][ T7321] debugfs: 'hsr0' already exists in 'hsr'
[   91.741797][ T7321] Cannot create hsr debugfs directory
[   92.145998][ T5234] Bluetooth: hci2: command tx timeout
[   92.248298][ T7321] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.258477][ T7321] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.269933][ T7321] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.281916][ T7321] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.394835][ T7321] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.426886][ T7321] 8021q: adding VLAN 0 to HW filter on device team0
[   92.435580][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.438630][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.463248][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.466447][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.661681][ T7321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.709080][ T7321] veth0_vlan: entered promiscuous mode
[   92.719798][ T7321] veth1_vlan: entered promiscuous mode
[   92.749979][ T7321] veth0_macvtap: entered promiscuous mode
[   92.756880][ T7321] veth1_macvtap: entered promiscuous mode
[   92.772690][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.784703][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.798027][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.802461][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.815221][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.819583][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.879814][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.885497][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.908371][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.912680][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.672566][ T7413] validate_nla: 8 callbacks suppressed
[   93.672582][ T7413] netlink: 'syz.0.669': attribute type 27 has an invalid length.
[   93.682860][ T7413] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.669'.
[   94.224624][ T5234] Bluetooth: hci2: command tx timeout
[   94.457353][ T7452] netlink: 14 bytes leftover after parsing attributes in process `syz.1.688'.
[   94.503352][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'.
[   95.084104][ T7474] infiniband syz!: set active
[   95.087889][ T7474] infiniband syz!: added team_slave_0
[   95.120622][ T7474] RDS/IB: syz!: added
[   95.122503][ T7474] smc: adding ib device syz! with port count 1
[   95.124925][ T7474] smc:    ib device syz! port 1 has pnetid 
[   95.792075][ T7500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.709'.
[   96.130766][ T7510] nft_compat: unsupported protocol 0
[   96.131276][ T5234] Bluetooth: hci1: Malformed LE Event: 0x0d
[   96.305955][ T5234] Bluetooth: hci2: command tx timeout
[   96.331576][ T7530] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.723'.
[   96.529982][ T7547] openvswitch: netlink: Flow actions attr not present in new flow.
[   96.536841][ T7553] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.734'.
[   96.542456][ T7547] syzkaller0: entered promiscuous mode
[   97.076599][ T7577] netlink: 124 bytes leftover after parsing attributes in process `syz.2.745'.
[   97.081456][ T7577] netlink: 124 bytes leftover after parsing attributes in process `syz.2.745'.
[   97.822144][ T7617] netlink: 10 bytes leftover after parsing attributes in process `syz.2.764'.
[   98.384560][ T5234] Bluetooth: hci2: command tx timeout
[   98.537008][ T7650] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.778'.
[   99.111187][ T7658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.782'.
[   99.260636][ T7669] netlink: 172 bytes leftover after parsing attributes in process `syz.1.786'.
[   99.772960][ T7717] netlink: 48 bytes leftover after parsing attributes in process `syz.1.808'.
[  100.650586][ T7780] pim6reg1: tun_chr_ioctl cmd 1074025680
[  100.845277][ T7796] __nla_validate_parse: 3 callbacks suppressed
[  100.845287][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'.
[  101.260752][ T7815] netlink: 'syz.2.854': attribute type 29 has an invalid length.
[  101.280443][ T7815] netlink: 'syz.2.854': attribute type 29 has an invalid length.
[  101.356346][ T7824] netlink: 'syz.2.854': attribute type 29 has an invalid length.
[  101.360012][ T7821] sit0: entered allmulticast mode
[  101.369634][ T7823] sit0: entered promiscuous mode
[  101.387137][ T7815] netlink: 'syz.2.854': attribute type 29 has an invalid length.
[  101.918814][ T7838] netlink: 'syz.2.862': attribute type 21 has an invalid length.
[  102.091535][ T7844] netlink: 'syz.2.866': attribute type 10 has an invalid length.
[  102.221175][ T7844] team0 (unregistering): Port device team_slave_0 removed
[  102.231562][ T7844] team0 (unregistering): Port device team_slave_1 removed
[  102.251407][ T7854] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.871'.
[  102.347528][ T7860] netlink: 10 bytes leftover after parsing attributes in process `syz.1.874'.
[  102.441887][ T7868] netlink: 'syz.0.877': attribute type 1 has an invalid length.
[  102.453029][ T7868] netlink: 'syz.0.877': attribute type 2 has an invalid length.
[  102.459193][ T7868] netlink: 'syz.0.877': attribute type 7 has an invalid length.
[  102.541323][ T7868] netlink: 21 bytes leftover after parsing attributes in process `syz.0.877'.
[  102.555509][ T7868] netlink: 101636 bytes leftover after parsing attributes in process `syz.0.877'.
[  102.561223][ T7868] netlink: 'syz.0.877': attribute type 1 has an invalid length.
[  102.608481][ T7868] netlink: 21 bytes leftover after parsing attributes in process `syz.0.877'.
[  102.802806][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.883'.
[  103.158289][ T7903] netlink: 26 bytes leftover after parsing attributes in process `syz.2.894'.
[  103.341323][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'.
[  103.345835][ T7913] netlink: 125 bytes leftover after parsing attributes in process `syz.2.894'.
[  103.668836][ T7948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.977052][ T8031] delete_channel: no stack
[  106.437786][ T8066] syzkaller0: entered promiscuous mode
[  106.444822][ T8066] syzkaller0: entered allmulticast mode
[  106.591604][ T8080] validate_nla: 9 callbacks suppressed
[  106.591619][ T8080] netlink: 'syz.0.967': attribute type 21 has an invalid length.
[  106.601455][ T8080] __nla_validate_parse: 19 callbacks suppressed
[  106.601468][ T8080] netlink: 128 bytes leftover after parsing attributes in process `syz.0.967'.
[  106.610513][ T8080] netlink: 'syz.0.967': attribute type 4 has an invalid length.
[  106.727543][ T8086] netlink: 'syz.1.970': attribute type 1 has an invalid length.
[  106.730349][ T8086] netlink: 'syz.1.970': attribute type 4 has an invalid length.
[  106.733503][ T8086] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.970'.
[  106.854676][ T8101] netlink: 'syz.1.977': attribute type 46 has an invalid length.
[  106.880961][ T8105] netlink: 10 bytes leftover after parsing attributes in process `syz.1.979'.
[  107.227440][ T8121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.982'.
[  107.261722][ T8121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.499109][ T8163] netlink: 'syz.0.1003': attribute type 2 has an invalid length.
[  108.719306][ T8174] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1008'.
[  109.093329][ T8191] tun0: tun_chr_ioctl cmd 1074025677
[  109.095733][ T8191] tun0: linktype set to 270
[  109.105569][ T8193] netlink: 202232 bytes leftover after parsing attributes in process `syz.0.1017'.
[  109.110484][ T8193] netlink: zone id is out of range
[  109.113507][ T8193] netlink: zone id is out of range
[  109.203502][ T8203] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1022'.
[  109.207792][ T8203] hsr0: entered promiscuous mode
[  109.209565][ T8203] hsr0: entered allmulticast mode
[  109.211448][ T8203] hsr_slave_0: entered allmulticast mode
[  109.213474][ T8203] hsr_slave_1: entered allmulticast mode
[  109.270540][ T8211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1026'.
[  109.323526][ T8209] netlink: 'syz.0.1024': attribute type 4 has an invalid length.
[  109.332933][ T8209] netlink: 211448 bytes leftover after parsing attributes in process `syz.0.1024'.
[  109.993177][ T8248] netlink: 'syz.0.1043': attribute type 7 has an invalid length.
[  110.120700][ T8266] : renamed from hsr0 (while UP)
[  111.229039][ T8340] netlink: 'syz.1.1086': attribute type 21 has an invalid length.
[  111.711140][ T8366] mac80211_hwsim hwsim5 .3c: renamed from wlan1 (while UP)
[  111.811150][ T8377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1101'.
[  111.819342][ T8372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1101'.
[  111.856685][ T8379] netlink: 'syz.0.1104': attribute type 11 has an invalid length.
[  111.901600][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'.
[  111.916960][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'.
[  111.991915][ T8394] netlink: 'syz.1.1111': attribute type 2 has an invalid length.
[  111.994748][ T8394] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1111'.
[  112.179576][ T8406] netlink: 731 bytes leftover after parsing attributes in process `syz.2.1117'.
[  112.583596][ T8420] syzkaller0: entered promiscuous mode
[  112.586031][ T8420] syzkaller0: entered allmulticast mode
[  113.479124][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1125'.
[  113.484127][ T8429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1125'.
[  113.652966][ T8436] netlink: 'syz.1.1129': attribute type 12 has an invalid length.
[  113.657185][ T8436] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1129'.
[  113.764233][ T8441] netlink: 'syz.0.1131': attribute type 1 has an invalid length.
[  113.767753][ T8441] netlink: 'syz.0.1131': attribute type 3 has an invalid length.
[  113.771454][ T8441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1131'.
[  114.567269][ T8466] netlink: 'syz.2.1144': attribute type 1 has an invalid length.
[  114.570343][ T8466] netlink: 'syz.2.1144': attribute type 1 has an invalid length.
[  114.634162][ T5234] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  115.175231][ T8507] syzkaller0: entered promiscuous mode
[  115.179774][ T8507] syzkaller0: entered allmulticast mode
[  116.112012][ T8530] sit0: left promiscuous mode
[  116.184629][ T8534] sit0: entered promiscuous mode
[  116.710245][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  117.300238][   T54] Bluetooth: hci1: Malformed Event: 0x2f
[  117.361111][ T8563] IPv6: NLM_F_CREATE should be specified when creating new route
[  117.364049][ T8563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  117.366855][ T8563] IPv6: NLM_F_CREATE should be set when creating new route
[  117.409536][ T8565] __nla_validate_parse: 3 callbacks suppressed
[  117.409547][ T8565] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1187'.
[  117.511672][ T5234] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  117.778295][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1201'.
[  117.836034][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1201'.
[  117.922899][ T8598] netlink: 'syz.1.1202': attribute type 39 has an invalid length.
[  118.869341][ T8626] netlink: 'syz.2.1216': attribute type 29 has an invalid length.
[  118.882214][ T8626] netlink: 'syz.2.1216': attribute type 29 has an invalid length.
[  118.890649][ T8626] netlink: 'syz.2.1216': attribute type 29 has an invalid length.
[  118.979103][ T5234] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  118.979131][ T5234] Bluetooth: unknown link type 8
[  118.984611][ T5234] Bluetooth: hci0: connection err: -111
[  119.039476][ T8641] netlink: 'syz.2.1223': attribute type 21 has an invalid length.
[  119.042805][ T8641] IPv6: NLM_F_CREATE should be specified when creating new route
[  119.049055][ T8641] IPv6: Can't replace route, no match found
[  119.053737][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1224'.
[  119.057999][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1224'.
[  119.191261][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'.
[  120.061085][ T8663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.231408][ T8681] netlink: 'syz.1.1242': attribute type 40 has an invalid length.
[  120.626930][ T8710] netlink: 'syz.2.1256': attribute type 3 has an invalid length.
[  120.630245][ T8710] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1256'.
[  121.286664][ T8745] vcan0 speed is unknown, defaulting to 1000
[  121.289977][ T8745] vcan0 speed is unknown, defaulting to 1000
[  121.292360][ T8745] vcan0 speed is unknown, defaulting to 1000
[  121.395084][ T5915] vcan0 speed is unknown, defaulting to 1000
[  121.398233][ T8745] infiniband syz1: set active
[  121.400332][ T8745] infiniband syz1: added vcan0
[  121.422229][ T8745] RDS/IB: syz1: added
[  121.423743][ T8745] smc: adding ib device syz1 with port count 1
[  121.426264][ T8745] smc:    ib device syz1 port 1 has pnetid 
[  121.428360][ T5915] vcan0 speed is unknown, defaulting to 1000
[  121.432327][ T8745] vcan0 speed is unknown, defaulting to 1000
[  121.546185][ T8745] vcan0 speed is unknown, defaulting to 1000
[  121.704214][ T8745] vcan0 speed is unknown, defaulting to 1000
[  121.821685][ T8770] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1280'.
[  121.829899][ T8767] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1279'.
[  121.839612][ T8767] netlink: 'syz.1.1279': attribute type 10 has an invalid length.
[  121.843261][ T8767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1279'.
[  121.854737][ T8767] team0: entered promiscuous mode
[  121.857009][ T8767] team_slave_0: entered promiscuous mode
[  121.864974][ T8767] team_slave_1: entered promiscuous mode
[  121.877523][ T8767] team0: entered allmulticast mode
[  121.881583][ T8767] team_slave_0: entered allmulticast mode
[  121.886674][ T8767] team_slave_1: entered allmulticast mode
[  121.911990][ T8767] bridge0: port 1(team0) entered blocking state
[  121.979029][ T8778] netlink: 'syz.0.1283': attribute type 2 has an invalid length.
[  121.979041][ T8778] netlink: 'syz.0.1283': attribute type 9 has an invalid length.
[  122.045912][ T8767] bridge0: port 1(team0) entered disabled state
[  122.534915][ T8767] bridge0: port 1(team0) entered blocking state
[  122.538965][ T8767] bridge0: port 1(team0) entered listening state
[  122.776982][ T8799] __nla_validate_parse: 2 callbacks suppressed
[  122.776993][ T8799] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1293'.
[  123.067889][ T8822] pim6reg1: entered allmulticast mode
[  123.164563][ T8824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1305'.
[  123.335445][ T8834] netlink: 'syz.2.1309': attribute type 13 has an invalid length.
[  123.372033][ T8834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.418863][ T8840] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1312'.
[  124.182620][ T8896] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1338'.
[  124.308132][ T8902] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1342'.
[  124.497861][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'.
[  124.538326][ T8925] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1352'.
[  124.713406][ T8940] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1359'.
[  124.939768][ T8938] netlink: 'syz.2.1358': attribute type 10 has an invalid length.
[  125.212275][ T8938] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  125.217007][ T8938] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  125.221649][ T8938] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  125.462420][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1371'.
[  125.466813][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1371'.
[  125.556748][ T8980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.634970][ T8988] netlink: 'syz.1.1379': attribute type 2 has an invalid length.
[  125.638321][ T8988] netlink: 'syz.1.1379': attribute type 8 has an invalid length.
[  125.721038][ T8992] sit0: entered allmulticast mode
[  125.735523][ T8992] sit0: entered promiscuous mode
[  126.221376][ T9012] netlink: 'syz.0.1391': attribute type 46 has an invalid length.
[  126.868805][ T9056] openvswitch: netlink: Duplicate or invalid key (type 0).
[  126.872074][ T9056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.916254][ T9062] netlink: 'syz.0.1414': attribute type 1 has an invalid length.
[  127.018973][ T9072] netlink: 'syz.0.1419': attribute type 10 has an invalid length.
[  127.022132][ T9072] dummy0: entered promiscuous mode
[  127.123857][ T9079] -1: renamed from syzkaller0
[  127.294730][ T9094] pim6reg1: entered allmulticast mode
[  127.506942][ T9108] syzkaller0: entered promiscuous mode
[  127.509139][ T9108] syzkaller0: entered allmulticast mode
[  128.623160][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.638044][ T9116] bridge_slave_0 (unregistering): left allmulticast mode
[  128.640800][ T9116] bridge_slave_0 (unregistering): left promiscuous mode
[  128.643216][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.132584][ T9157] netlink: 'syz.0.1459': attribute type 4 has an invalid length.
[  129.135676][ T9157] __nla_validate_parse: 6 callbacks suppressed
[  129.135686][ T9157] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1459'.
[  129.759233][ T9192] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1474'.
[  129.851739][ T9200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1478'.
[  129.857349][ T9200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1478'.
[  129.861335][ T9200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1478'.
[  129.892971][ T5234] Bluetooth: hci1: Malformed LE Event: 0x1b
[  129.900232][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'.
[  129.975720][ T9214] netlink: 'syz.1.1485': attribute type 4 has an invalid length.
[  129.991942][ T9216] netlink: 'syz.0.1486': attribute type 10 has an invalid length.
[  129.998657][ T9216] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.147347][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1493'.
[  130.150957][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1493'.
[  130.160110][ T9230] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1493'.
[  131.119816][ T9277] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1515'.
[  131.966203][ T9330] netlink: 'syz.2.1540': attribute type 1 has an invalid length.
[  132.466731][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.468847][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.943513][ T9365] openvswitch: netlink: EtherType 50a is less than min 600
[  133.240357][ T9393] sctp: [Deprecated]: syz.0.1569 (pid 9393) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.240357][ T9393] Use struct sctp_sack_info instead
[  134.150596][ T9445] __nla_validate_parse: 9 callbacks suppressed
[  134.150711][ T9445] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.1590'.
[  134.623372][ T9457] syzkaller0: entered promiscuous mode
[  134.626125][ T9457] syzkaller0: entered allmulticast mode
[  134.976207][ T5234] Bluetooth: hci1: adv larger than maximum supported
[  135.351237][ T9472] netlink: 'syz.1.1603': attribute type 10 has an invalid length.
[  135.631585][ T9472] bridge0: port 3(macsec0) entered blocking state
[  135.677798][ T9472] bridge0: port 3(macsec0) entered disabled state
[  135.686325][ T9472] macsec0: entered allmulticast mode
[  135.689092][ T9472] veth1_macvtap: entered allmulticast mode
[  135.760933][ T9472] macsec0: entered promiscuous mode
[  135.794936][ T9472] bridge0: port 3(macsec0) entered blocking state
[  135.801203][ T9472] bridge0: port 3(macsec0) entered listening state
[  135.992548][ T9482] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1606'.
[  136.751656][ T9503] netlink: 'syz.1.1617': attribute type 1 has an invalid length.
[  136.756114][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1617'.
[  136.802894][ T9501] bridge_slave_1: left allmulticast mode
[  136.806675][ T9501] bridge_slave_1: left promiscuous mode
[  136.809186][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.922492][ T5234] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  137.331787][ T9518] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1623'.
[  137.337309][ T9518] netlink: zone id is out of range
[  137.341067][ T9518] netlink: zone id is out of range
[  137.343467][ T9518] netlink: zone id is out of range
[  137.362286][ T9518] netlink: zone id is out of range
[  137.365658][ T9518] netlink: zone id is out of range
[  137.368222][ T9518] netlink: zone id is out of range
[  137.370874][ T9518] netlink: zone id is out of range
[  137.373525][ T9518] netlink: zone id is out of range
[  137.381040][ T9518] netlink: zone id is out of range
[  137.585522][    C0] bridge0: port 1(team0) entered learning state
[  137.836612][ T9529] netlink: 'syz.1.1628': attribute type 10 has an invalid length.
[  137.839811][ T9529] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1628'.
[  137.926528][ T9535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1632'.
[  138.009071][ T9543] netlink: 'syz.2.1635': attribute type 10 has an invalid length.
[  138.012619][ T9543] lo: entered promiscuous mode
[  138.023289][ T9543] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  138.166629][ T9554] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1640'.
[  138.945558][ T5234] Bluetooth: hci0: command tx timeout
[  139.148878][ T9635] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1671'.
[  139.194049][ T9642] netlink: 'syz.2.1675': attribute type 3 has an invalid length.
[  139.200032][ T9642] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1675'.
[  139.686338][ T9675] netlink: 'syz.2.1688': attribute type 11 has an invalid length.
[  139.697134][ T9675] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1688'.
[  139.728780][ T9684] netlink: 'syz.1.1694': attribute type 33 has an invalid length.
[  139.731606][ T9684] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1694'.
[  139.809640][ T9694] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1698'.
[  139.906064][ T9704] netlink: 'syz.0.1704': attribute type 10 has an invalid length.
[  139.910560][ T9702] net_ratelimit: 73 callbacks suppressed
[  139.910571][ T9702] netlink: set zone limit has 4 unknown bytes
[  139.966244][ T9711] netlink: 'syz.0.1708': attribute type 4 has an invalid length.
[  140.011181][ T9714] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1709'.
[  140.026777][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'.
[  140.261062][ T9727] netlink: 'syz.2.1715': attribute type 2 has an invalid length.
[  140.266010][ T9727] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1715'.
[  140.589080][ T9770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1735'.
[  140.592948][ T9770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1735'.
[  140.635593][ T9776] netlink: 'syz.0.1738': attribute type 29 has an invalid length.
[  140.641922][ T9776] netlink: 'syz.0.1738': attribute type 29 has an invalid length.
[  140.698166][ T9783] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1741'.
[  140.714664][ T9783] tc_dump_action: action bad kind
[  141.080860][ T9809] netlink: 'syz.2.1754': attribute type 46 has an invalid length.
[  141.542705][ T9852] netlink: 'syz.2.1774': attribute type 1 has an invalid length.
[  141.550928][ T5234] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6
[  141.614143][ T9856] netlink: 'syz.0.1772': attribute type 10 has an invalid length.
[  143.217439][ T9929] syzkaller0: entered promiscuous mode
[  143.219751][ T9929] syzkaller0: entered allmulticast mode
[  143.299416][ T9930] C: renamed from team_slave_0
[  143.325390][ T9933] bond_slave_1: entered promiscuous mode
[  143.327374][ T9933] bond_slave_1: entered allmulticast mode
[  144.441529][ T9964] __nla_validate_parse: 13 callbacks suppressed
[  144.441544][ T9964] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1826'.
[  144.955805][ T5234] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  144.960234][ T5234] Bluetooth: hci2: Injecting HCI hardware error event
[  144.963230][   T54] Bluetooth: hci2: hardware error 0x00
[  145.049325][ T9981] netlink: 'syz.1.1833': attribute type 2 has an invalid length.
[  145.052153][ T9981] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1833'.
[  145.117961][ T9985] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1835'.
[  145.224360][ T9993] raw_sendmsg: syz.1.1839 forgot to set AF_INET. Fix it!
[  145.517341][T10003] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1844'.
[  145.675673][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1850'.
[  146.532054][T10028] netlink: 'syz.0.1854': attribute type 1 has an invalid length.
[  146.535501][T10028] netlink: 'syz.0.1854': attribute type 2 has an invalid length.
[  146.567798][T10030] netlink: 'syz.0.1855': attribute type 29 has an invalid length.
[  146.572672][T10030] netlink: 'syz.0.1855': attribute type 29 has an invalid length.
[  146.578376][T10030] netlink: 'syz.0.1855': attribute type 29 has an invalid length.
[  146.582667][T10030] netlink: 'syz.0.1855': attribute type 29 has an invalid length.
[  146.652863][T10037] netlink: 'syz.1.1859': attribute type 9 has an invalid length.
[  146.658191][T10037] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.1859'.
[  147.025609][   T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  148.472252][T10100] netlink: 'syz.0.1886': attribute type 21 has an invalid length.
[  148.475792][T10100] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1886'.
[  148.689316][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'.
[  148.837369][T10111] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  149.050117][T10123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1897'.
[  149.250560][T10140] netlink: 'syz.1.1905': attribute type 21 has an invalid length.
[  149.670817][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'.
[  149.678456][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'.
[  150.304841][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1914'.
[  150.503550][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'.
[  150.507238][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'.
[  150.510523][T10175] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1922'.
[  151.024509][    C0] bridge0: port 3(macsec0) entered learning state
[  151.481356][T10224] netlink: 'syz.1.1946': attribute type 29 has an invalid length.
[  151.639430][T10236] validate_nla: 2 callbacks suppressed
[  151.639441][T10236] netlink: 'syz.0.1952': attribute type 27 has an invalid length.
[  151.647203][T10236] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1952'.
[  151.719290][T10243] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.1956'.
[  151.977508][T10268] C: renamed from team_slave_0 (while UP)
[  151.980822][T10268] netlink: 'syz.1.1968': attribute type 8 has an invalid length.
[  151.983391][T10268] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  152.944600][    C0] bridge0: port 1(team0) entered forwarding state
[  152.947519][    C0] bridge0: topology change detected, propagating
[  153.147646][T10294] blkio.reset_stats is deprecated
[  153.359713][T10302] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1983'.
[  153.712277][T10323] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.1992'.
[  154.672484][T10357] netlink: 'syz.1.2009': attribute type 3 has an invalid length.
[  154.677660][T10357] netlink: 'syz.1.2009': attribute type 10 has an invalid length.
[  154.698139][T10357] veth1_macvtap (unregistering): left allmulticast mode
[  154.704121][T10357] bridge0: port 3(macsec0) entered disabled state
[  154.719976][T10357] macsec0 (unregistering): left allmulticast mode
[  154.722651][T10357] macsec0 (unregistering): left promiscuous mode
[  154.726527][T10357] bridge0: port 3(macsec0) entered disabled state
[  154.759992][T10360] netlink: 'syz.0.2010': attribute type 2 has an invalid length.
[  154.763466][T10360] __nla_validate_parse: 1 callbacks suppressed
[  154.763475][T10360] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2010'.
[  154.769404][T10360] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  155.031757][T10379] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2019'.
[  156.244178][T10405] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2030'.
[  156.375449][T10411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2033'.
[  156.378892][T10411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2033'.
[  156.382939][T10411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2033'.
[  156.572687][T10425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2038'.
[  156.577243][T10426] netlink: 'syz.1.2039': attribute type 10 has an invalid length.
[  156.580293][T10426] team0: Device ip6_vti0 is of different type
[  157.128428][T10444] netlink: 'syz.1.2046': attribute type 10 has an invalid length.
[  157.227264][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  157.231121][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  157.235160][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  157.239907][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  157.243602][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  157.247659][T10450] netlink: 'syz.1.2048': attribute type 10 has an invalid length.
[  157.256172][T10450] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  157.259253][T10450] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  157.265679][T10450] team0: Port device wlan1 added
[  157.343534][T10455] netlink: 'syz.1.2050': attribute type 41 has an invalid length.
[  157.405666][T10449] vcan0 speed is unknown, defaulting to 1000
[  157.659989][T10449] chnl_net:caif_netlink_parms(): no params data found
[  157.677128][T10472] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2057'.
[  157.708006][T10449] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.711492][T10449] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.714468][T10449] bridge_slave_0: entered allmulticast mode
[  157.717627][T10449] bridge_slave_0: entered promiscuous mode
[  157.720955][T10449] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.723286][T10449] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.725779][T10449] bridge_slave_1: entered allmulticast mode
[  157.728792][T10449] bridge_slave_1: entered promiscuous mode
[  157.747772][T10449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.752842][T10449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.775106][T10449] team0: Port device team_slave_0 added
[  157.779406][T10449] team0: Port device team_slave_1 added
[  157.796277][T10449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.798718][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.807243][T10449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.812254][T10449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.814774][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.823473][T10449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.852770][T10449] hsr_slave_0: entered promiscuous mode
[  157.856412][T10449] hsr_slave_1: entered promiscuous mode
[  157.959195][T10449] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  157.964121][T10449] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  157.969145][T10449] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  157.974566][T10449] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  158.044654][T10449] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.047632][T10449] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.050620][T10449] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.053340][T10449] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.117939][T10449] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.139059][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.142266][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.152628][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'.
[  158.192088][T10449] 8021q: adding VLAN 0 to HW filter on device team0
[  158.199899][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.202371][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.211569][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.214260][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.259770][T10505] netlink: 'syz.1.2068': attribute type 1 has an invalid length.
[  158.272173][T10505] netlink: 'syz.1.2068': attribute type 2 has an invalid length.
[  158.424635][T10449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.467334][T10449] veth0_vlan: entered promiscuous mode
[  158.475720][T10449] veth1_vlan: entered promiscuous mode
[  158.508377][T10449] veth0_macvtap: entered promiscuous mode
[  158.522867][T10449] veth1_macvtap: entered promiscuous mode
[  158.551435][T10449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.570128][T10449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.589878][ T5674] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.593430][ T5674] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.607962][ T5674] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.611151][ T5674] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.670668][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.674225][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.685577][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.688797][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.938533][T10536] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2079'.
[  159.265070][ T5234] Bluetooth: hci3: command tx timeout
[  159.823356][T10580] netlink: 'syz.3.2099': attribute type 3 has an invalid length.
[  160.046217][T10597] netlink: 'syz.3.2106': attribute type 21 has an invalid length.
[  160.159554][T10603] syzkaller0: entered promiscuous mode
[  160.161992][T10603] syzkaller0: entered allmulticast mode
[  160.214105][ T5234] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  160.693613][T10622] netlink: 'syz.1.2118': attribute type 10 has an invalid length.
[  160.710553][T10622] __nla_validate_parse: 1 callbacks suppressed
[  160.710613][T10622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2118'.
[  160.717628][T10622] batadv0: entered promiscuous mode
[  160.720796][T10622] batadv0: entered allmulticast mode
[  160.730107][T10622] bridge0: port 3(batadv0) entered blocking state
[  160.741060][T10622] bridge0: port 3(batadv0) entered disabled state
[  161.162524][T10641] netlink: 'syz.0.2127': attribute type 3 has an invalid length.
[  161.344952][ T5234] Bluetooth: hci3: command tx timeout
[  161.363948][ T5674] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  161.368468][ T5674] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  161.733721][ T5234] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  161.815865][T10686] netlink: 'syz.0.2149': attribute type 3 has an invalid length.
[  161.821576][T10686] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.2149'.
[  161.929924][T10692] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2152'.
[  162.129352][T10708] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2159'.
[  163.241843][T10755] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2181'.
[  163.433360][ T5234] Bluetooth: hci3: command tx timeout
[  163.587689][T10759] wg2: entered promiscuous mode
[  163.592340][T10759] wg2: entered allmulticast mode
[  163.741973][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'.
[  163.745523][ T5234] Bluetooth: hci1: command 0x0406 tx timeout
[  163.882776][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2190'.
[  163.886472][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2190'.
[  164.013493][T10787] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2196'.
[  164.117254][T10797] caif0: entered promiscuous mode
[  164.119179][T10797] caif0: entered allmulticast mode
[  164.179679][T10806] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2202'.
[  164.476397][T10837] validate_nla: 4 callbacks suppressed
[  164.476412][T10837] netlink: 'syz.0.2213': attribute type 29 has an invalid length.
[  164.505877][T10837] netlink: 'syz.0.2213': attribute type 29 has an invalid length.
[  164.551718][T10845] netlink: 'syz.0.2218': attribute type 29 has an invalid length.
[  164.557830][T10847] netlink: 'syz.3.2219': attribute type 21 has an invalid length.
[  164.758307][ T5234] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  164.799500][T10864] netlink: 'syz.0.2227': attribute type 10 has an invalid length.
[  164.803316][T10864] hsr0: left promiscuous mode
[  164.811812][T10864] hsr0: left allmulticast mode
[  164.813874][T10864] hsr_slave_0: left allmulticast mode
[  164.822479][T10864] hsr_slave_1: left allmulticast mode
[  164.841150][T10864] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  165.516661][ T5234] Bluetooth: hci3: command tx timeout
[  166.397601][T10904] netlink: 'syz.3.2246': attribute type 39 has an invalid length.
[  166.427964][T10907] __nla_validate_parse: 8 callbacks suppressed
[  166.427975][T10907] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2247'.
[  166.749815][T10926] netlink: 'syz.0.2253': attribute type 10 has an invalid length.
[  166.758809][T10926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2253'.
[  166.829674][T10926] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  166.992650][T10940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2261'.
[  168.206792][T10977] netlink: 'syz.1.2279': attribute type 2 has an invalid length.
[  168.209559][T10977] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2279'.
[  168.688295][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'.
[  168.740951][T10993] : renamed from vlan0 (while UP)
[  169.154538][T11036] netlink: 'syz.1.2305': attribute type 21 has an invalid length.
[  169.157397][T11036] netlink: 'syz.1.2305': attribute type 5 has an invalid length.
[  169.244231][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'.
[  169.248504][T11044] netlink: 130076 bytes leftover after parsing attributes in process `syz.1.2309'.
[  169.252011][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'.
[  169.292338][T11052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2313'.
[  169.302511][T11052] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  169.468525][T11062] batman_adv: batadv0: Adding interface: team0
[  169.471119][T11062] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.482458][T11062] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  169.591854][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'.
[  169.726746][T11088] validate_nla: 1 callbacks suppressed
[  169.726760][T11088] netlink: 'syz.3.2330': attribute type 12 has an invalid length.
[  169.935081][T11103] netlink: 'syz.3.2338': attribute type 21 has an invalid length.
[  171.252707][T11168] syzkaller0: entered promiscuous mode
[  171.259016][T11168] syzkaller0: entered allmulticast mode
[  172.308528][T11184] netlink: 'syz.3.2377': attribute type 51 has an invalid length.
[  172.383249][T11189] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  172.757743][T11207] netlink: 'syz.1.2386': attribute type 1 has an invalid length.
[  173.493679][T11233] can: request_module (can-proto-0) failed.
[  173.853646][T11258] __nla_validate_parse: 13 callbacks suppressed
[  173.853657][T11258] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2409'.
[  173.868935][T11258] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2409'.
[  173.872825][T11258] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2409'.
[  174.045913][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'.
[  174.049859][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'.
[  174.506644][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2423'.
[  174.547443][T11291] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2421'.
[  174.664287][T11296] netlink: 'syz.1.2425': attribute type 3 has an invalid length.
[  174.667875][T11296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2425'.
[  175.067334][T11308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.070052][T11308] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.073800][T11308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.076728][T11308] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.079794][T11308] batman_adv: batadv0: Removing interface: netdevsim0
[  175.087351][T11308] batman_adv: batadv0: Removing interface: team0
[  175.231691][T11328] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2436'.
[  176.825772][T11379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2457'.
[  178.178722][T11407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.810879][T11459] vxcan1: entered allmulticast mode
[  179.258610][T11500] netlink: 'syz.3.2511': attribute type 13 has an invalid length.
[  179.263392][T11500] netlink: 'syz.3.2511': attribute type 58 has an invalid length.
[  179.269016][T11500] __nla_validate_parse: 5 callbacks suppressed
[  179.269031][T11500] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2511'.
[  179.898222][T11542] netlink: 'syz.1.2533': attribute type 3 has an invalid length.
[  179.901792][T11542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2533'.
[  180.624698][ T5852] Bluetooth: hci1: command 0x0406 tx timeout
[  180.627092][ T5859] Bluetooth: hci0: command 0x0406 tx timeout
[  180.737009][T11550] netlink: zone id is out of range
[  180.739112][T11550] netlink: zone id is out of range
[  180.777215][T11550] netlink: set zone limit has 4 unknown bytes
[  180.785527][T11550] netlink: del zone limit has 4 unknown bytes
[  180.793074][T11550] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2537'.
[  182.472196][T11572] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2545'.
[  182.701961][T11597] netlink: 'syz.3.2555': attribute type 10 has an invalid length.
[  182.828763][T11597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.856634][T11597] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  182.863239][T11598] bond0: entered promiscuous mode
[  182.868303][T11598] bond_slave_0: entered promiscuous mode
[  182.870468][T11598] bond_slave_1: entered promiscuous mode
[  182.872623][T11598] batadv0: entered promiscuous mode
[  182.898332][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'.
[  182.959069][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2559'.
[  183.050973][T11612] netlink: 'syz.0.2561': attribute type 10 has an invalid length.
[  183.052046][T11614] delete_channel: no stack
[  183.053832][T11612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2561'.
[  183.057095][T11614] delete_channel: no stack
[  183.072874][T11612] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  183.182559][T11631] netlink: 'syz.1.2569': attribute type 5 has an invalid length.
[  183.186195][T11631] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2569'.
[  183.940996][T11665] netlink: 'syz.1.2583': attribute type 13 has an invalid length.
[  184.750603][T11671] netlink: 628 bytes leftover after parsing attributes in process `syz.0.2584'.
[  184.868070][T11665] bridge0: port 1(team0) entered disabled state
[  184.870879][T11665] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.883615][T11673] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2585'.
[  184.993984][T11665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.013156][T11665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.128295][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.135283][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.138325][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.141270][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.860260][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'.
[  185.893635][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'.
[  186.017489][T11733] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2612'.
[  187.579398][T11781] netlink: 'syz.1.2634': attribute type 1 has an invalid length.
[  187.582383][T11781] netlink: 'syz.1.2634': attribute type 2 has an invalid length.
[  188.268592][T11791] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2639'.
[  189.257720][T11821] netlink: 'syz.3.2650': attribute type 1 has an invalid length.
[  189.544990][T11828] netlink: 484 bytes leftover after parsing attributes in process `syz.1.2653'.
[  189.630664][T11835] netlink: 'syz.3.2657': attribute type 1 has an invalid length.
[  189.647594][T11836] netlink: 'syz.0.2655': attribute type 3 has an invalid length.
[  189.707293][T11836] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2655'.
[  189.726648][T11838] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2658'.
[  189.730668][T11838] D`: renamed from hsr_slave_1 (while UP)
[  189.852340][T11844] netlink: 'syz.0.2660': attribute type 41 has an invalid length.
[  189.855778][T11844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2660'.
[  190.125721][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'.
[  190.132766][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'.
[  190.556064][T11878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2675'.
[  192.681351][T11960] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  192.689849][T11960] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  193.027807][T11994] vcan0 speed is unknown, defaulting to 1000
[  193.110166][T12003] netlink: 'syz.3.2733': attribute type 3 has an invalid length.
[  193.113256][T12003] netlink: 199752 bytes leftover after parsing attributes in process `syz.3.2733'.
[  193.908102][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.912227][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.516782][T12030] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2744'.
[  194.826607][T12057] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2756'.
[  194.919732][T12066] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2758'.
[  195.061952][T12074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2762'.
[  195.153665][T12083] netlink: 'syz.3.2768': attribute type 21 has an invalid length.
[  195.290631][T12094] netlink: 948 bytes leftover after parsing attributes in process `syz.1.2771'.
[  195.326953][T12099] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2772'.
[  195.359139][T12102] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2775'.
[  195.515183][   T54] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  195.515587][   T54] Bluetooth: hci0: connection err: -111
[  195.921923][T12124] mac80211_hwsim hwsim3 .3c: renamed from wlan1
[  196.488375][T12136] netlink: 703 bytes leftover after parsing attributes in process `syz.1.2789'.
[  196.752825][T12152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.800131][T12154] netlink: 'syz.3.2797': attribute type 5 has an invalid length.
[  196.803740][T12154] netlink: 130080 bytes leftover after parsing attributes in process `syz.3.2797'.
[  197.090673][T12161] sit0: entered allmulticast mode
[  197.363180][T12163] sit0: entered promiscuous mode
[  197.680563][T12176] syzkaller0: entered promiscuous mode
[  197.682945][T12176] syzkaller0: entered allmulticast mode
[  197.766182][T12183] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2808'.
[  198.973749][T12215] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2823'.
[  199.223638][T12222] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2822'.
[  202.115238][T12254] netlink: 'syz.3.2839': attribute type 10 has an invalid length.
[  202.324090][T12254] team0: Device ipvlan1 failed to register rx_handler
[  202.654042][T12254] syz.3.2839 (12254) used greatest stack depth: 18296 bytes left
[  204.022910][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1058445008 wd_nsec: 1058445055
[  204.393320][T12272] netlink: 'syz.3.2847': attribute type 2 has an invalid length.
[  204.395996][T12272] __nla_validate_parse: 1 callbacks suppressed
[  204.396005][T12272] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.2847'.
[  205.551547][T12276] netlink: 'syz.3.2849': attribute type 2 has an invalid length.
[  205.694072][T12280] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2851'.
[  205.768937][T12285] netlink: 'syz.1.2853': attribute type 21 has an invalid length.
[  205.772360][T12285] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2853'.
[  206.040928][T12304] netlink: 'syz.1.2861': attribute type 39 has an invalid length.
[  206.214937][T12315] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2865'.
[  206.483892][T12330] netlink: 'syz.1.2872': attribute type 10 has an invalid length.
[  206.486995][T12330] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2872'.
[  206.626165][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'.
[  206.771064][T12347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2879'.
[  206.774963][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2879'.
[  206.789428][T12348] netlink: 'syz.3.2877': attribute type 10 has an invalid length.
[  206.834650][T12348] geneve0: entered promiscuous mode
[  206.843432][T12348] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  207.620565][T12386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2898'.
[  208.268492][T12446] netlink: 'syz.0.2928': attribute type 39 has an invalid length.
[  208.405046][T12454] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.2932'.
[  209.057685][T12501] netlink: 'syz.0.2954': attribute type 28 has an invalid length.
[  209.061293][T12501] netlink: 'syz.0.2954': attribute type 29 has an invalid length.
[  209.107318][T12506] lo speed is unknown, defaulting to 1000
[  209.110093][T12506] lo speed is unknown, defaulting to 1000
[  209.113810][T12506] lo speed is unknown, defaulting to 1000
[  209.124025][T12506] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  209.137361][T12506] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  209.158557][T12506] lo speed is unknown, defaulting to 1000
[  209.171223][T12506] lo speed is unknown, defaulting to 1000
[  209.177837][T12506] lo speed is unknown, defaulting to 1000
[  209.181230][T12506] lo speed is unknown, defaulting to 1000
[  209.218080][T12508] smc: removing ib device syz!
[  210.509040][T12549] sctp: [Deprecated]: syz.1.2972 (pid 12549) Use of int in maxseg socket option.
[  210.509040][T12549] Use struct sctp_assoc_value instead
[  210.637794][T12555] IPv6: NLM_F_CREATE should be specified when creating new route
[  210.736584][T12563] __nla_validate_parse: 2 callbacks suppressed
[  210.736594][T12563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2980'.
[  210.742458][T12563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2980'.
[  210.748453][T12563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2980'.
[  211.149156][T12578] netlink: 'syz.3.2986': attribute type 2 has an invalid length.
[  211.151937][T12578] netlink: 110008 bytes leftover after parsing attributes in process `syz.3.2986'.
[  211.300176][T12583] netlink: 'syz.0.2988': attribute type 29 has an invalid length.
[  211.327471][T12583] netlink: 'syz.0.2988': attribute type 29 has an invalid length.
[  211.331491][T12583] netlink: 'syz.0.2988': attribute type 29 has an invalid length.
[  211.357283][T12588] netlink: 'syz.3.2989': attribute type 2 has an invalid length.
[  211.365175][T12588] netlink: 'syz.3.2989': attribute type 1 has an invalid length.
[  211.368398][T12588] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2989'.
[  211.372232][T12588] nbd: must specify at least one socket
[  211.451624][T12585] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2990'.
[  211.682662][T12612] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3001'.
[  211.692576][T12612] netlink: zone id is out of range
[  211.697410][T12612] netlink: zone id is out of range
[  211.699717][T12612] netlink: zone id is out of range
[  211.701942][T12612] netlink: zone id is out of range
[  211.706665][T12612] netlink: zone id is out of range
[  211.709679][T12612] netlink: zone id is out of range
[  211.711976][T12612] netlink: zone id is out of range
[  211.714239][T12612] netlink: zone id is out of range
[  211.719839][T12612] netlink: zone id is out of range
[  211.722900][T12612] netlink: zone id is out of range
[  211.799889][T12623] netlink: 'syz.1.3006': attribute type 4 has an invalid length.
[  211.802634][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3006'.
[  211.871576][T12625] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.3007'.
[  212.133331][T12651] netlink: 'syz.0.3021': attribute type 11 has an invalid length.
[  212.382618][T12683] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3034'.
[  212.747845][T12706] team0: left allmulticast mode
[  212.751459][T12706] C: left allmulticast mode
[  212.753757][T12706] team_slave_1: left allmulticast mode
[  212.757339][T12706] mac80211_hwsim hwsim3 .3c: left allmulticast mode
[  212.760417][T12706] team0: left promiscuous mode
[  212.762636][T12706] C: left promiscuous mode
[  212.772719][T12706] team_slave_1: left promiscuous mode
[  212.775591][T12706] mac80211_hwsim hwsim3 .3c: left promiscuous mode
[  212.779231][T12706] bridge0: port 1(team0) entered disabled state
[  212.936117][T12706] batman_adv: batadv0: Adding interface: team0
[  212.938223][T12706] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.946517][T12706] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  213.769244][T12764] validate_nla: 1 callbacks suppressed
[  213.769254][T12764] netlink: 'syz.1.3069': attribute type 10 has an invalid length.
[  213.869281][T12764] batman_adv: batadv0: Removing interface: team0
[  213.874651][T12764] team0 (unregistering): Port device C removed
[  213.877813][T12764] team0 (unregistering): Port device team_slave_1 removed
[  213.883270][T12764] team0 (unregistering): Port device .3c removed
[  213.933182][T12778] netlink: 'syz.0.3079': attribute type 39 has an invalid length.
[  214.096476][T12790] netlink: 'syz.3.3086': attribute type 21 has an invalid length.
[  214.630856][T12814] netlink: 'syz.0.3098': attribute type 39 has an invalid length.
[  214.749727][T12826] netlink: 'syz.0.3104': attribute type 5 has an invalid length.
[  214.942351][T12856] Q6\bY4: renamed from lo
[  215.016240][T12863] netlink: 'syz.3.3122': attribute type 2 has an invalid length.
[  215.057627][T12867] netlink: 'syz.3.3124': attribute type 17 has an invalid length.
[  215.060246][T12867] netlink: 'syz.3.3124': attribute type 16 has an invalid length.
[  215.168860][T12877] batadv_slave_1: entered promiscuous mode
[  215.915122][   T54] Bluetooth: hci3: unknown advertising packet type: 0xc5
[  215.945852][T12952] __nla_validate_parse: 13 callbacks suppressed
[  215.945868][T12952] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3163'.
[  215.994318][T12958] netlink: 166 bytes leftover after parsing attributes in process `syz.0.3167'.
[  217.631696][T13010] netlink: 'syz.1.3191': attribute type 1 has an invalid length.
[  217.637684][T13010] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3191'.
[  217.779288][T13021] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3196'.
[  217.857842][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'.
[  217.957945][T13036] net_ratelimit: 75 callbacks suppressed
[  217.957959][T13036] openvswitch: netlink: Actions may not be safe on all matching packets
[  218.367573][T13044] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3207'.
[  218.453343][T13055] netlink: 'syz.1.3212': attribute type 3 has an invalid length.
[  218.464524][T13055] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3212'.
[  218.573195][T13070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3218'.
[  218.577746][T13070] ipvlan1: entered promiscuous mode
[  218.580383][T13070] ipvlan1: entered allmulticast mode
[  218.582161][T13070] veth0_vlan: entered allmulticast mode
[  218.586120][T13070] bridge0: port 3(ipvlan1) entered blocking state
[  218.590492][T13070] bridge0: port 3(ipvlan1) entered disabled state
[  218.595653][T13070] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  218.649709][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  219.078009][T13101] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3234'.
[  219.317489][T13118] validate_nla: 1 callbacks suppressed
[  219.317499][T13118] netlink: 'syz.1.3242': attribute type 1 has an invalid length.
[  219.360201][T13123] netlink: 'syz.3.3245': attribute type 49 has an invalid length.
[  220.292239][T13158] netlink: 'syz.3.3260': attribute type 29 has an invalid length.
[  220.296298][T13158] netlink: 'syz.3.3260': attribute type 3 has an invalid length.
[  220.299625][T13158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3260'.
[  220.700376][   T54] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  220.706674][   T54] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff
[  221.119628][T13186] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3275'.
[  221.777842][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3292'.
[  221.836934][T13238] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3296'.
[  221.919697][T13247] netlink: 'syz.1.3301': attribute type 10 has an invalid length.
[  221.922740][T13247] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3301'.
[  221.980154][T13254] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3304'.
[  223.542912][T13274] netlink: 'syz.1.3311': attribute type 39 has an invalid length.
[  224.469193][T13302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'.
[  224.472468][T13302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'.
[  224.913519][T13319] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3331'.
[  225.318052][T13342] debugfs: '!' already exists in 'ieee80211'
[  225.475395][T13351] netlink: 'syz.0.3346': attribute type 21 has an invalid length.
[  225.767637][T13369] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  225.770081][T13369] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  225.911785][T13385] netlink: 'syz.3.3362': attribute type 2 has an invalid length.
[  227.595936][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  227.600672][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  227.604620][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  227.608618][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  227.612341][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  227.641469][T13424] vcan0 speed is unknown, defaulting to 1000
[  227.781465][T13424] Q6\bY4 speed is unknown, defaulting to 1000
[  227.940587][T13424] chnl_net:caif_netlink_parms(): no params data found
[  228.029850][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3389'.
[  228.033776][T13454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3389'.
[  228.078976][T13424] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.082240][T13424] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.094811][T13424] bridge_slave_0: entered allmulticast mode
[  228.099178][T13424] bridge_slave_0: entered promiscuous mode
[  228.112456][T13424] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.117863][T13424] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.121193][T13424] bridge_slave_1: entered allmulticast mode
[  228.133283][T13424] bridge_slave_1: entered promiscuous mode
[  228.165040][T13460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3391'.
[  228.173609][T13424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.182546][T13424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.238312][T13424] team0: Port device team_slave_0 added
[  228.242221][T13424] team0: Port device team_slave_1 added
[  228.281886][T13424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.284628][T13424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.299588][T13424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.304861][T13424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.308291][T13424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.321021][T13424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.490325][T13424] hsr_slave_0: entered promiscuous mode
[  228.493588][T13424] hsr_slave_1: entered promiscuous mode
[  228.499897][T13424] debugfs: 'hsr0' already exists in 'hsr'
[  228.504775][T13424] Cannot create hsr debugfs directory
[  228.568545][T13477] veth1_macvtap: left promiscuous mode
[  228.570623][T13477] macsec0: entered allmulticast mode
[  228.716889][T13424] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  228.725867][T13424] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  228.733306][T13424] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  228.741604][T13483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3402'.
[  228.749366][T13424] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  228.790037][T13424] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.793163][T13424] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.796652][T13424] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.799744][T13424] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.873697][T13424] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.884146][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.890529][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.922593][T13424] 8021q: adding VLAN 0 to HW filter on device team0
[  228.933809][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.936587][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.943725][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.946277][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.664620][   T54] Bluetooth: hci3: command tx timeout
[  230.094805][T13424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.289761][T13529] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3414'.
[  230.355257][T13424] veth0_vlan: entered promiscuous mode
[  230.362855][T13424] veth1_vlan: entered promiscuous mode
[  230.421296][T13424] veth0_macvtap: entered promiscuous mode
[  230.430207][T13424] veth1_macvtap: entered promiscuous mode
[  230.456258][T13424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.486440][T13424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.499949][ T5674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.503549][ T5674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.515816][ T5674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.519214][ T5674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.570565][T13543] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3420'.
[  230.611265][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.619592][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.647755][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.651852][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.652495][T13551] netlink: 'syz.1.3424': attribute type 21 has an invalid length.
[  230.668027][T13551] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3424'.
[  230.679386][T13551] netlink: 'syz.1.3424': attribute type 5 has an invalid length.
[  230.682009][T13551] netlink: 'syz.1.3424': attribute type 6 has an invalid length.
[  230.685298][T13551] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3424'.
[  230.737009][T13553] TCP: TCP_TX_DELAY enabled
[  230.797256][T13557] netlink: 'syz.1.3426': attribute type 33 has an invalid length.
[  230.799981][T13557] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3426'.
[  230.831763][T13561] netlink: 'syz.1.3428': attribute type 49 has an invalid length.
[  231.209849][T13573] netlink: 'syz.0.3434': attribute type 4 has an invalid length.
[  231.214009][T13573] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3434'.
[  231.331766][T13597] vcan0 speed is unknown, defaulting to 1000
[  231.348845][T13600] netlink: 'syz.0.3448': attribute type 39 has an invalid length.
[  231.355783][   T54] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  231.470525][T13597] Q6\bY4 speed is unknown, defaulting to 1000
[  231.523887][T13617] netlink: 'syz.4.3453': attribute type 10 has an invalid length.
[  231.531702][T13617] team0: Device veth1_macvtap failed to register rx_handler
[  231.814948][   T54] Bluetooth: hci3: command tx timeout
[  232.243603][T13628] netlink: 'syz.4.3458': attribute type 5 has an invalid length.
[  233.169798][T13696] __nla_validate_parse: 3 callbacks suppressed
[  233.169814][T13696] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3491'.
[  233.246362][T13698] netlink: 'syz.4.3492': attribute type 10 has an invalid length.
[  233.250622][T13698] vlan0: entered allmulticast mode
[  233.252985][T13698] veth0_vlan: entered allmulticast mode
[  233.274256][T13698] team0: Port device vlan0 added
[  233.824600][   T54] Bluetooth: hci3: command tx timeout
[  234.142965][T13715] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3500'.
[  234.286828][T13720] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3501'.
[  235.770725][T13718] Set syz1 is full, maxelem 65536 reached
[  235.905133][   T54] Bluetooth: hci3: command tx timeout
[  236.646864][T13752] validate_nla: 2 callbacks suppressed
[  236.647086][T13752] netlink: 'syz.0.3516': attribute type 64 has an invalid length.
[  237.572502][T13773] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3523'.
[  237.581976][T13773] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3523'.
[  237.586021][T13773] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3523'.
[  237.743033][   T54] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  239.283229][T13808] netlink: 'syz.0.3539': attribute type 21 has an invalid length.
[  239.290084][T13808] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3539'.
[  239.294133][T13808] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3539'.
[  239.632901][T13836] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.3553'.
[  239.636137][T13836] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  239.639001][T13836] openvswitch: netlink: Duplicate key (type 0).
[  239.865066][T13857] netlink: 'syz.0.3560': attribute type 2 has an invalid length.
[  240.143541][T13866] netlink: 'syz.4.3567': attribute type 21 has an invalid length.
[  240.147649][T13866] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3567'.
[  240.151722][T13866] netlink: 'syz.4.3567': attribute type 4 has an invalid length.
[  240.156086][T13866] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3567'.
[  240.343218][T13869] netlink: 'syz.4.3568': attribute type 12 has an invalid length.
[  240.351686][T13869] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3568'.
[  240.936607][T13883] netlink: 'syz.0.3574': attribute type 10 has an invalid length.
[  240.942100][T13883] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  240.961143][T13883] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  241.073432][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'.
[  241.240727][T13905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3586'.
[  241.246570][T13905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3586'.
[  241.251045][T13905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3586'.
[  241.628078][T13937] netlink: 'syz.0.3598': attribute type 2 has an invalid length.
[  241.669971][T13941] tc_dump_action: action bad kind
[  242.051370][T13975] netlink: 'syz.4.3616': attribute type 39 has an invalid length.
[  242.056260][T13975] veth0_macvtap: left promiscuous mode
[  242.382327][T13986] syzkaller0: entered promiscuous mode
[  242.384856][T13986] syzkaller0: entered allmulticast mode
[  243.903809][T14009] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  244.852994][T14031] GPL: port 1(gretap0) entered blocking state
[  244.859474][T14031] GPL: port 1(gretap0) entered disabled state
[  244.862569][T14031] gretap0: entered allmulticast mode
[  244.882037][T14031] gretap0: entered promiscuous mode
[  245.079830][T14039] __nla_validate_parse: 10 callbacks suppressed
[  245.079845][T14039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3643'.
[  245.147910][T14042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3644'.
[  245.297257][T14049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.442884][T14057] delete_channel: no stack
[  245.447549][T14057] delete_channel: no stack
[  245.502146][T14059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3652'.
[  246.105239][T14089] sit0: entered allmulticast mode
[  246.111646][T14089] sit0: entered promiscuous mode
[  246.280869][T14093] syzkaller0: entered promiscuous mode
[  246.282927][T14093] syzkaller0: entered allmulticast mode
[  247.956822][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  247.960792][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  247.963741][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  247.970998][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  247.977925][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  248.019209][T14103] vcan0 speed is unknown, defaulting to 1000
[  248.179782][T14103] Q6\bY4 speed is unknown, defaulting to 1000
[  248.326500][T14103] chnl_net:caif_netlink_parms(): no params data found
[  248.469024][T14103] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.471536][T14103] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.474062][T14103] bridge_slave_0: entered allmulticast mode
[  248.486138][T14103] bridge_slave_0: entered promiscuous mode
[  248.498445][T14103] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.501627][T14103] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.511800][T14103] bridge_slave_1: entered allmulticast mode
[  248.520292][T14103] bridge_slave_1: entered promiscuous mode
[  248.577392][T14103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.582756][T14103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.646175][T14103] team0: Port device team_slave_0 added
[  248.650841][T14103] team0: Port device team_slave_1 added
[  248.673896][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3690'.
[  248.690302][T14103] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.693325][T14103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.704745][T14103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.711943][T14103] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.715188][T14103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.727658][T14103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.797535][T14103] hsr_slave_0: entered promiscuous mode
[  248.800894][T14103] hsr_slave_1: entered promiscuous mode
[  248.803895][T14103] debugfs: 'hsr0' already exists in 'hsr'
[  248.822318][T14103] Cannot create hsr debugfs directory
[  249.216097][T14103] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  249.227583][T14183] siw: device registration error -23
[  249.251162][T14103] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  249.256931][T14103] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  249.263681][T14103] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  249.332350][T14103] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.343801][T14103] 8021q: adding VLAN 0 to HW filter on device team0
[  249.380353][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.383329][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.388411][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.391510][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.408103][T14193] netlink: 'syz.4.3704': attribute type 29 has an invalid length.
[  249.530863][T14203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3706'.
[  249.533305][T14103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.729922][T14216] sit0: entered allmulticast mode
[  249.737739][T14216] sit0: entered promiscuous mode
[  249.811310][T14103] veth0_vlan: entered promiscuous mode
[  249.833010][T14103] veth1_vlan: entered promiscuous mode
[  249.858484][T14103] veth0_macvtap: entered promiscuous mode
[  249.865271][T14103] veth1_macvtap: entered promiscuous mode
[  249.901045][T14103] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.919803][T14103] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.936408][ T5897] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.945500][ T5897] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.949383][ T5897] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.132471][   T54] Bluetooth: hci4: command tx timeout
[  250.189697][ T5897] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.269000][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.271584][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.285447][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.288075][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.427085][T14241] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3720'.
[  250.599032][T14253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.085907][T14278] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  251.137281][T14282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3737'.
[  251.343970][T14292] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3741'.
[  251.483554][T14298] syzkaller0: entered promiscuous mode
[  251.485781][T14298] syzkaller0: entered allmulticast mode
[  252.037673][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'.
[  252.155598][   T54] Bluetooth: hci4: command tx timeout
[  252.662593][T14300] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3745'.
[  252.957311][T14318] netlink: 'syz.4.3753': attribute type 33 has an invalid length.
[  252.960623][T14318] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3753'.
[  252.978598][T14318] mac80211_hwsim hwsim21 : renamed from wlan1 (while UP)
[  253.007196][T14318] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  254.225386][   T54] Bluetooth: hci4: command tx timeout
[  254.737558][T14342] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3764'.
[  254.794256][T14351] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3767'.
[  254.830448][T14353] netlink: 'syz.4.3769': attribute type 10 has an invalid length.
[  254.837348][T14353] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3769'.
[  255.417127][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.420062][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.666731][T14353] team0: Port device vlan0 removed
[  256.304724][   T54] Bluetooth: hci4: command tx timeout
[  257.245334][T14418] netlink: 'syz.4.3799': attribute type 8 has an invalid length.
[  257.248529][T14418] netlink: 'syz.4.3799': attribute type 3 has an invalid length.
[  257.251629][T14418] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.3799'.
[  257.348646][T14422] netlink: 'syz.4.3801': attribute type 10 has an invalid length.
[  258.190357][T14422] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  258.268503][T14424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  258.317890][T14430] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3805'.
[  258.321852][T14430] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3805'.
[  258.326218][T14430] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3805'.
[  258.521107][T14453] C: renamed from team_slave_0 (while UP)
[  258.526738][T14453] netlink: 'syz.5.3817': attribute type 4 has an invalid length.
[  258.530200][T14453] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  258.613134][T14454] : renamed from gre0 (while UP)
[  258.783314][T14473] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3826'.
[  258.846592][T14485] netlink: 'syz.5.3831': attribute type 33 has an invalid length.
[  258.852996][T14485] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3831'.
[  258.951467][T14494] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3835'.
[  258.956743][T14494] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3835'.
[  258.961109][T14494] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3835'.
[  258.997400][T14497] sctp: [Deprecated]: syz.5.3837 (pid 14497) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.997400][T14497] Use struct sctp_sack_info instead
[  259.061725][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3841'.
[  259.243802][T14519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.662371][T14534] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  259.772388][T14537] netlink: 'syz.4.3853': attribute type 29 has an invalid length.
[  259.779663][T14537] netlink: 'syz.4.3853': attribute type 29 has an invalid length.
[  260.581984][T14568] syzkaller1: tun_chr_ioctl cmd 1074025676
[  260.584077][T14568] syzkaller1: owner set to 778
[  261.207154][T14604] netlink: 'syz.5.3882': attribute type 2 has an invalid length.
[  261.638878][T14633] netlink: 'syz.5.3896': attribute type 1 has an invalid length.
[  261.644661][T14633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.891363][T14653] syzkaller1: tun_chr_ioctl cmd 1074025677
[  261.894320][T14653] syzkaller1: linktype set to 776
[  262.500236][T14691] vcan0 speed is unknown, defaulting to 1000
[  262.938964][T14723] netlink: 'syz.0.3938': attribute type 10 has an invalid length.
[  263.091356][T14732] __nla_validate_parse: 10 callbacks suppressed
[  263.091368][T14732] netlink: 731 bytes leftover after parsing attributes in process `syz.5.3942'.
[  263.155683][T14691] Q6\bY4 speed is unknown, defaulting to 1000
[  263.285464][T14746] netlink: 'syz.5.3948': attribute type 4 has an invalid length.
[  263.289391][T14746] netlink: 'syz.5.3948': attribute type 1 has an invalid length.
[  263.292190][T14746] netlink: 'syz.5.3948': attribute type 2 has an invalid length.
[  263.300454][T14746] netlink: 198236 bytes leftover after parsing attributes in process `syz.5.3948'.
[  263.517779][T14750] syzkaller0: entered promiscuous mode
[  263.521162][T14750] syzkaller0: entered allmulticast mode
[  264.856433][T14767] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3957'.
[  264.885477][T14768] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3956'.
[  264.958867][T14778] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3962'.
[  265.094010][T14792] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3969'.
[  265.144133][T14802] netlink: 825 bytes leftover after parsing attributes in process `syz.0.3974'.
[  265.161211][T14802] netlink: 130144 bytes leftover after parsing attributes in process `syz.0.3974'.
[  265.983730][T14837] netlink: 'syz.4.3990': attribute type 10 has an invalid length.
[  265.986864][T14837] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3990'.
[  266.003272][T14839] bond_slave_1: mtu less than device minimum
[  266.025939][T14841] netlink: 'syz.4.3992': attribute type 3 has an invalid length.
[  266.028855][T14841] netlink: 'syz.4.3992': attribute type 3 has an invalid length.
[  266.031641][T14841] netlink: 130500 bytes leftover after parsing attributes in process `syz.4.3992'.
[  267.696644][T14888] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  268.941821][T14917] netlink: 'syz.5.4027': attribute type 2 has an invalid length.
[  268.972109][T14919] __nla_validate_parse: 6 callbacks suppressed
[  268.972119][T14919] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4028'.
[  269.238934][T14955] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4046'.
[  269.242790][T14955] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4046'.
[  269.278153][T14959] delete_channel: no stack
[  269.696679][T14985] netlink: 'syz.0.4060': attribute type 10 has an invalid length.
[  270.756425][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4068'.
[  270.760356][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4068'.
[  271.329070][T15013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4072'.
[  271.333049][T15013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4072'.
[  271.453259][T15028] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4080'.
[  271.473140][T15029] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4078'.
[  271.613264][T15037] pim6reg1: entered allmulticast mode
[  271.647338][T15044] netlink: 'syz.4.4087': attribute type 11 has an invalid length.
[  271.651661][T15044] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.4087'.
[  272.127934][T15066] pim6reg1: entered allmulticast mode
[  273.581689][T15091] netlink: 'syz.4.4104': attribute type 4 has an invalid length.
[  276.128893][T15188] netlink: 'syz.0.4144': attribute type 29 has an invalid length.
[  276.136871][T15188] netlink: 'syz.0.4144': attribute type 29 has an invalid length.
[  276.143904][T15188] netlink: 'syz.0.4144': attribute type 29 has an invalid length.
[  276.153293][T15188] netlink: 'syz.0.4144': attribute type 29 has an invalid length.
[  276.340134][T15210] __nla_validate_parse: 2 callbacks suppressed
[  276.340147][T15210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4153'.
[  276.810079][T15230] netlink: 'syz.5.4164': attribute type 2 has an invalid length.
[  276.812730][T15230] netlink: 'syz.5.4164': attribute type 1 has an invalid length.
[  276.815839][T15230] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4164'.
[  276.849374][T15231] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4163'.
[  276.854271][T15227] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4163'.
[  276.941810][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4167'.
[  276.963743][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4167'.
[  276.973291][T15241] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4169'.
[  277.153784][T15265] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.4181'.
[  277.160299][T15265] openvswitch: netlink: Message has 6 unknown bytes.
[  277.321619][T15263] netlink: 'syz.5.4180': attribute type 1 has an invalid length.
[  277.325274][T15263] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4180'.
[  278.246283][T15290] netlink: 388 bytes leftover after parsing attributes in process `syz.5.4191'.
[  281.110294][ T5897] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.219595][ T5897] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.288126][ T5897] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.372846][ T5897] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.471089][ T5897] bridge_slave_1: left allmulticast mode
[  281.473168][ T5897] bridge_slave_1: left promiscuous mode
[  281.476719][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.483263][ T5897] bridge_slave_0: left allmulticast mode
[  281.485470][ T5897] bridge_slave_0: left promiscuous mode
[  281.487790][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.583789][T15396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4237'.
[  281.800381][ T5897] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  281.942994][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  281.946413][ T5897] bond_slave_0: left promiscuous mode
[  281.952336][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.956034][ T5897] bond_slave_1: left promiscuous mode
[  281.961258][ T5897] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  281.964771][ T5897] batadv0: left promiscuous mode
[  281.972041][ T5897] bond0 (unregistering): Released all slaves
[  282.009398][T15397] delete_channel: no stack
[  282.556467][ T5897] hsr_slave_0: left promiscuous mode
[  282.558954][ T5897] D`: left promiscuous mode
[  282.561042][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.572198][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.576739][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.579255][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.608266][ T5897] veth1_macvtap: left promiscuous mode
[  282.610165][ T5897] veth0_macvtap: left promiscuous mode
[  282.612825][ T5897] veth1_vlan: left promiscuous mode
[  282.616468][ T5897] veth0_vlan: left promiscuous mode
[  282.662108][T15434] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4254'.
[  283.002634][ T5897] team0 (unregistering): Port device team_slave_1 removed
[  283.026043][ T5897] team0 (unregistering): Port device team_slave_0 removed
[  283.351724][T15441] : entered promiscuous mode
[  285.091010][T15507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4287'.
[  285.172044][T15511] siw: device registration error -23
[  286.583436][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4301'.
[  286.587505][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4301'.
[  287.200624][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4319'.
[  288.117176][T15589] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  288.372047][T15605] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4335'.
[  288.546284][T15622] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4341'.
[  288.578345][T15624] netlink: 'syz.0.4344': attribute type 2 has an invalid length.
[  288.580820][T15624] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4344'.
[  288.585165][T15624] netlink: 'syz.0.4344': attribute type 2 has an invalid length.
[  288.587776][T15624] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4344'.
[  289.733137][T15700] netlink: 'syz.4.4378': attribute type 22 has an invalid length.
[  289.735971][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4378'.
[  289.799245][T15706] syzkaller0: tun_chr_ioctl cmd 1074025681
[  289.977028][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4391'.
[  290.033231][T15733] netlink: 103 bytes leftover after parsing attributes in process `syz.5.4394'.
[  292.235608][T15758] netlink: 'syz.0.4404': attribute type 10 has an invalid length.
[  293.320613][T15787] vcan0 speed is unknown, defaulting to 1000
[  294.082075][T15787] Q6\bY4 speed is unknown, defaulting to 1000
[  294.097895][T15800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4422'.
[  294.590371][   T33] audit: type=1107 audit(1755541762.366:2): pid=15826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  294.679495][T15831] vcan0 speed is unknown, defaulting to 1000
[  294.852759][T15831] Q6\bY4 speed is unknown, defaulting to 1000
[  294.898032][T15846] netlink: 'syz.0.4443': attribute type 10 has an invalid length.
[  294.901183][T15846] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4443'.
[  295.435573][T15879] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4457'.
[  299.344723][T15949] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  299.348743][T15949] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  300.374799][T15960] netlink: 802 bytes leftover after parsing attributes in process `syz.5.4490'.
[  300.399229][T15962] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4492'.
[  300.694256][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4500'.
[  300.702373][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4500'.
[  303.793772][T16085] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4543'.
[  303.868816][T16092] netlink: 'syz.4.4547': attribute type 3 has an invalid length.
[  303.872136][T16092] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4547'.
[  303.911514][T16098] openvswitch: netlink: IP tunnel dst address not specified
[  304.061866][T16114] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4558'.
[  305.351831][T16163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4579'.
[  305.355716][T16163] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4579'.
[  305.379553][T16165] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4580'.
[  305.401343][T16167] netlink: 'syz.0.4581': attribute type 1 has an invalid length.
[  305.403973][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4581'.
[  306.888581][T16196] netlink: 'syz.4.4593': attribute type 3 has an invalid length.
[  306.891714][T16196] netlink: 'syz.4.4593': attribute type 2 has an invalid length.
[  306.895010][T16196] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.4593'.
[  307.209065][   T54] Bluetooth: hci3: unexpected event 0x36 length: 15 > 7
[  307.799631][T16223] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4606'.
[  308.035824][T16245] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4616'.
[  308.039908][T16245] unsupported nlmsg_type 40
[  308.267452][T16267] veth1_macvtap: left promiscuous mode
[  308.278404][T16267] veth1_macvtap: entered promiscuous mode
[  308.281788][T16267] macsec0: entered promiscuous mode
[  308.283901][T16267] macsec0: entered allmulticast mode
[  308.288635][T16267] veth1_macvtap: entered allmulticast mode
[  308.832289][T16261] vcan0 speed is unknown, defaulting to 1000
[  309.160758][T16261] Q6\bY4 speed is unknown, defaulting to 1000
[  309.663410][T16325] cgroup: fork rejected by pids controller in /syz5
[  310.213675][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  310.233299][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  310.238965][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  310.254906][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  310.258519][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  311.109660][T16339] vcan0 speed is unknown, defaulting to 1000
[  311.248759][T16339] Q6\bY4 speed is unknown, defaulting to 1000
[  311.385683][T16339] chnl_net:caif_netlink_parms(): no params data found
[  311.438866][T16339] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.441974][T16339] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.445840][T16339] bridge_slave_0: entered allmulticast mode
[  311.448729][T16339] bridge_slave_0: entered promiscuous mode
[  311.451750][T16383] syzkaller0: refused to change device tx_queue_len
[  311.454764][T16339] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.457259][T16339] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.460610][T16339] bridge_slave_1: entered allmulticast mode
[  311.464761][T16339] bridge_slave_1: entered promiscuous mode
[  311.506189][T16339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.513274][T16339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.531687][T16385] netlink: 'syz.4.4675': attribute type 1 has an invalid length.
[  311.547796][T16385] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4675'.
[  311.570775][T16339] team0: Port device team_slave_0 added
[  311.575457][T16339] team0: Port device team_slave_1 added
[  311.597082][T16339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.599560][T16339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.609173][T16339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.613677][T16339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.616223][T16339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.625810][T16339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.667012][T16339] hsr_slave_0: entered promiscuous mode
[  311.669899][T16339] hsr_slave_1: entered promiscuous mode
[  311.694052][T16391] netlink: 'syz.0.4677': attribute type 3 has an invalid length.
[  311.698660][T16391] netlink: 'syz.0.4677': attribute type 2 has an invalid length.
[  311.704648][T16391] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.4677'.
[  311.772267][T16339] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.851843][T16339] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.899977][T16339] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.941790][T16402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4682'.
[  311.978460][T16339] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.058097][T16410] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4685'.
[  312.085155][T16339] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  312.090949][T16339] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  312.096520][T16339] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  312.107943][T16339] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  312.135473][T16339] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.137989][T16339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.140523][T16339] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.143117][T16339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.151066][   T89] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.157236][   T89] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.165082][T16423] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4689'.
[  312.202085][T16339] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.229036][T16339] 8021q: adding VLAN 0 to HW filter on device team0
[  312.249199][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.251650][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.263998][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.266662][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.305326][ T5234] Bluetooth: hci4: command tx timeout
[  312.391078][T16339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.529398][T16455] netlink: 'syz.0.4699': attribute type 29 has an invalid length.
[  312.539188][T16455] netlink: 'syz.0.4699': attribute type 29 has an invalid length.
[  312.542010][T16339] veth0_vlan: entered promiscuous mode
[  312.548860][T16455] netlink: 'syz.0.4699': attribute type 29 has an invalid length.
[  312.558755][T16339] veth1_vlan: entered promiscuous mode
[  312.576767][T16339] veth0_macvtap: entered promiscuous mode
[  312.583790][T16339] veth1_macvtap: entered promiscuous mode
[  312.589020][T16457] sctp: [Deprecated]: syz.4.4700 (pid 16457) Use of struct sctp_assoc_value in delayed_ack socket option.
[  312.589020][T16457] Use struct sctp_sack_info instead
[  312.600799][T16339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.612712][T16339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.619409][ T5897] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.622715][ T5897] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.638130][ T5897] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.640988][ T5897] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.699462][T16465] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4704'.
[  312.705499][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.711262][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.752118][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.760874][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.343029][T16493] veth1_macvtap: left promiscuous mode
[  313.347066][T16493] macsec0: entered allmulticast mode
[  314.387789][ T5234] Bluetooth: hci4: command tx timeout
[  314.765470][T16498] !: renamed from bond_slave_0 (while UP)
[  314.978711][T16522] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4726'.
[  315.960385][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4752'.
[  316.475797][ T5234] Bluetooth: hci4: command tx timeout
[  316.814982][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.817725][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.721100][T16687] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4776'.
[  317.735409][T16687] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4776'.
[  317.802896][T16693] netlink: 'syz.5.4779': attribute type 10 has an invalid length.
[  317.808260][T16693] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4779'.
[  317.812865][T16693] veth0_vlan: entered allmulticast mode
[  317.819415][T16693] bridge0: port 3(veth0_vlan) entered blocking state
[  317.822458][T16693] bridge0: port 3(veth0_vlan) entered disabled state
[  317.833799][T16693] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  318.152887][T16713] netlink: 'syz.4.4789': attribute type 10 has an invalid length.
[  318.161588][T16713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4789'.
[  318.177982][T16713] batman_adv: batadv0: Adding interface: vlan1
[  318.183824][T16713] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.195175][T16713] batman_adv: batadv0: Interface activated: vlan1
[  318.198751][T16699] vcan0 speed is unknown, defaulting to 1000
[  318.544802][ T5234] Bluetooth: hci4: command tx timeout
[  318.679680][T16729] netlink: 'syz.0.4797': attribute type 21 has an invalid length.
[  318.682242][T16729] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4797'.
[  318.828838][T16737] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4801'.
[  318.871355][T16743] netlink: 'syz.4.4804': attribute type 1 has an invalid length.
[  318.879340][T16699] Q6\bY4 speed is unknown, defaulting to 1000
[  318.978552][T16751] netlink: 'syz.4.4808': attribute type 10 has an invalid length.
[  318.981136][T16751] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4808'.
[  322.439797][T16830] netlink: 'syz.5.4844': attribute type 12 has an invalid length.
[  322.442913][T16830] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4844'.
[  322.451754][T16837] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4847'.
[  322.518192][T16842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.673554][T16857] netlink: 'syz.0.4856': attribute type 10 has an invalid length.
[  322.696461][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4857'.
[  323.305601][T16875] netlink: 'syz.5.4863': attribute type 23 has an invalid length.
[  323.310454][T16875] netlink: 'syz.5.4863': attribute type 6 has an invalid length.
[  323.494022][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4868'.
[  323.686371][T16901] netlink: del zone limit has 4 unknown bytes
[  323.961700][T16924] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4886'.
[  334.974050][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 9206742766 wd_nsec: 9206742986
[  341.528483][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  341.533158][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  341.537162][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  341.541936][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  341.546551][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  341.595131][ T5859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  341.600007][ T5859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  341.603677][ T5859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  341.607990][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  341.612800][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  341.617464][ T5859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  341.621668][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  341.625676][ T5859] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  341.630893][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  341.641392][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  343.584487][   T54] Bluetooth: hci5: command tx timeout
[  343.664820][ T5234] Bluetooth: hci7: command tx timeout
[  343.667566][ T5859] Bluetooth: hci6: command tx timeout
[  345.664924][   T54] Bluetooth: hci5: command tx timeout
[  345.744496][ T5859] Bluetooth: hci7: command tx timeout
[  345.746719][   T54] Bluetooth: hci6: command tx timeout
[  347.744518][   T54] Bluetooth: hci5: command tx timeout
[  347.824553][ T5859] Bluetooth: hci7: command tx timeout
[  347.826508][   T54] Bluetooth: hci6: command tx timeout
[  349.824670][   T54] Bluetooth: hci5: command tx timeout
[  349.904803][ T5859] Bluetooth: hci7: command tx timeout
[  349.907395][   T54] Bluetooth: hci6: command tx timeout
[  354.704871][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  378.251950][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.255341][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  396.154824][   T34] INFO: task syz.1.3468:13649 blocked for more than 143 seconds.
[  396.158166][   T34]       Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  396.187202][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  396.191005][   T34] task:syz.1.3468      state:D stack:25664 pid:13649 tgid:13648 ppid:5849   task_flags:0x400140 flags:0x00004004
[  396.254430][   T34] Call Trace:
[  396.255997][   T34]  <TASK>
[  396.257312][   T34]  __schedule+0x1798/0x4cc0
[  396.259324][   T34]  ? perf_trace_run_bpf_submit+0xee/0x170
[  396.261844][   T34]  ? perf_trace_lock+0x2f8/0x3b0
[  396.264021][   T34]  ? __pfx___schedule+0x10/0x10
[  396.344471][   T34]  ? schedule+0x91/0x360
[  396.346416][   T34]  schedule+0x165/0x360
[  396.348248][   T34]  schedule_preempt_disabled+0x13/0x30
[  396.350951][   T34]  __mutex_lock+0x7e6/0x1360
[  396.353033][   T34]  ? __mutex_lock+0x5b6/0x1360
[  396.384448][   T34]  ? nfsd_nl_listener_set_doit+0x137/0x1690
[  396.387090][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  396.389315][   T34]  ? __asan_memset+0x22/0x50
[  396.391383][   T34]  ? ____sys_sendmsg+0x505/0x830
[  396.393586][   T34]  ? ___sys_sendmsg+0x21f/0x2a0
[  396.487064][   T34]  ? __x64_sys_sendmsg+0x19b/0x260
[  396.489245][   T34]  nfsd_nl_listener_set_doit+0x137/0x1690
[  396.491721][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  396.494240][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  396.574575][   T34]  ? __nla_parse+0x40/0x60
[  396.576644][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  396.579375][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  396.581788][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  396.646126][   T34]  ? bpf_lsm_capable+0x9/0x20
[  396.648251][   T34]  ? security_capable+0x7e/0x2e0
[  396.650349][   T34]  genl_rcv_msg+0x60e/0x790
[  396.652321][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  396.674428][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  396.677166][   T34]  ? perf_trace_run_bpf_submit+0xee/0x170
[  396.679659][   T34]  netlink_rcv_skb+0x208/0x470
[  396.681365][   T34]  ? __lock_acquire+0xab9/0xd20
[  396.683156][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  396.719154][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  396.721509][   T34]  ? down_read+0x1ad/0x2e0
[  396.723483][   T34]  genl_rcv+0x28/0x40
[  396.794474][   T34]  netlink_unicast+0x82f/0x9e0
[  396.796602][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  396.798770][   T34]  ? netlink_sendmsg+0x642/0xb30
[  396.800463][   T34]  ? skb_put+0x11b/0x210
[  396.802286][   T34]  netlink_sendmsg+0x805/0xb30
[  396.819347][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.821682][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  396.823872][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  396.848140][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.850516][   T34]  __sock_sendmsg+0x21c/0x270
[  396.852640][   T34]  ____sys_sendmsg+0x505/0x830
[  396.877603][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  396.879990][   T34]  ? import_iovec+0x74/0xa0
[  396.881987][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  396.884060][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  396.904913][   T34]  ? __fget_files+0x2a/0x420
[  396.906933][   T34]  ? __fget_files+0x2a/0x420
[  396.908929][   T34]  ? __fget_files+0x3a0/0x420
[  396.910870][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  396.913043][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  396.994459][   T34]  ? do_syscall_64+0xbe/0x3b0
[  396.996638][   T34]  do_syscall_64+0xfa/0x3b0
[  396.998632][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.000907][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.003576][   T34]  ? exc_page_fault+0x9f/0xf0
[  397.034138][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.037010][   T34] RIP: 0033:0x7fe1d7f8ebe9
[  397.038877][   T34] RSP: 002b:00007fe1d8d5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  397.042310][   T34] RAX: ffffffffffffffda RBX: 00007fe1d81b5fa0 RCX: 00007fe1d7f8ebe9
[  397.076235][   T34] RDX: 0000000000008000 RSI: 0000200000006e40 RDI: 0000000000000004
[  397.079729][   T34] RBP: 00007fe1d8011e19 R08: 0000000000000000 R09: 0000000000000000
[  397.083167][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  397.191326][   T34] R13: 00007fe1d81b6038 R14: 00007fe1d81b5fa0 R15: 00007ffd42e14978
[  397.204438][   T34]  </TASK>
[  397.205904][   T34] 
[  397.205904][   T34] Showing all locks held in the system:
[  397.209241][   T34] 3 locks held by kworker/u8:1/13:
[  397.211519][   T34]  #0: ffff888022912948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  397.229340][   T34]  #1: ffffc90000107bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  397.264757][   T34]  #2: ffffffff8f537d08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  397.268897][   T34] 3 locks held by kworker/1:0/24:
[  397.272578][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  397.300092][   T34]  #1: ffffc900001c7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  397.310247][   T34]  #2: ffffffff8f537d08 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  397.334707][   T34] 1 lock held by khungtaskd/34:
[  397.336927][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  397.341141][   T34] 3 locks held by kworker/u9:2/52:
[  397.343345][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  397.386661][   T34]  #1: ffffc900007afbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  397.391986][   T34]  #2: ffff8881001c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[  397.434435][   T34] 3 locks held by kworker/u10:2/68:
[  397.436733][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  397.441650][   T34]  #1: ffffc9000174fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  397.484425][   T34]  #2: ffff88810eb50768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[  397.488747][   T34] 2 locks held by getty/5675:
[  397.490815][   T34]  #0: ffff888028de50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  397.520924][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  397.524687][   T34] 6 locks held by kworker/u11:4/5859:
[  397.526567][   T34]  #0: ffff88812279a948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  397.530255][   T34]  #1: ffffc9000368fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  397.554427][   T34]  #2: ffff888119f0cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  397.558776][   T34]  #3: ffff888119f0c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  397.562748][   T34]  #4: ffffffff8f69c9c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  397.594403][   T34]  #5: ffff888108cc2b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  397.597675][   T34] 2 locks held by syz.2.1789/9883:
[  397.599444][   T34]  #0: ffffffff8f59d330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  397.602351][   T34]  #1: ffffffff8e4184c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  397.644448][   T34] 2 locks held by syz.1.3468/13649:
[  397.646653][   T34]  #0: ffffffff8f59d330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  397.650054][   T34]  #1: ffffffff8e4184c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  397.671395][   T34] 2 locks held by syz.4.4906/16965:
[  397.673222][   T34]  #0: ffff888112a96208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  397.684419][   T34]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  397.689136][   T34] 1 lock held by syz.0.4908/16968:
[  397.691291][   T34]  #0: ffff88804002c4a8 (&ctx->mutex){+.+.}-{4:4}, at: perf_event_ctx_lock_nested+0x38f/0x460
[  397.725299][   T34] 5 locks held by syz.0.4908/16969:
[  397.727158][   T34] 3 locks held by syz.5.4909/16974:
[  397.728966][   T34]  #0: ffffffff8f537d08 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0xea/0x8f0
[  397.732260][   T34]  #1: ffffffff8f53af88 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90
[  397.764410][   T34]  #2: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  397.768134][   T34] 1 lock held by syz-executor/16981:
[  397.769996][   T34]  #0: ffffffff8f537d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  397.773344][   T34] 1 lock held by syz-executor/16983:
[  397.794420][   T34]  #0: ffffffff8f537d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  397.798557][   T34] 1 lock held by syz-executor/16984:
[  397.800841][   T34]  #0: ffffffff8f537d08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  397.826580][   T34] 
[  397.827696][   T34] =============================================
[  397.827696][   T34] 
[  397.831275][   T34] NMI backtrace for cpu 1
[  397.831289][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  397.831304][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  397.831312][   T34] Call Trace:
[  397.831318][   T34]  <TASK>
[  397.831325][   T34]  dump_stack_lvl+0x189/0x250
[  397.831347][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.831362][   T34]  ? __pfx__printk+0x10/0x10
[  397.831387][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  397.831406][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  397.831422][   T34]  ? __pfx__printk+0x10/0x10
[  397.831442][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  397.831464][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  397.831481][   T34]  watchdog+0xf93/0xfe0
[  397.831501][   T34]  ? watchdog+0x1de/0xfe0
[  397.831522][   T34]  kthread+0x711/0x8a0
[  397.831563][   T34]  ? __pfx_watchdog+0x10/0x10
[  397.831580][   T34]  ? __pfx_kthread+0x10/0x10
[  397.831597][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  397.831614][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.831630][   T34]  ? __pfx_kthread+0x10/0x10
[  397.831645][   T34]  ret_from_fork+0x3fc/0x770
[  397.831661][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  397.831677][   T34]  ? __switch_to_asm+0x39/0x70
[  397.831693][   T34]  ? __switch_to_asm+0x33/0x70
[  397.831706][   T34]  ? __pfx_kthread+0x10/0x10
[  397.831722][   T34]  ret_from_fork_asm+0x1a/0x30
[  397.831748][   T34]  </TASK>
[  397.831753][   T34] Sending NMI from CPU 1 to CPUs 0:
[  397.895631][    C0] NMI backtrace for cpu 0
[  397.895648][    C0] CPU: 0 UID: 0 PID: 16969 Comm: syz.0.4908 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  397.895662][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  397.895671][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  397.895691][    C0] Code: 74 05 e8 ab 86 4b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> f3 2d 14 f6 65 8b 05 6c 71 24 07 85 c0 74 40 48 c7 04 24 0e 36
[  397.895701][    C0] RSP: 0018:ffffc90000006ee0 EFLAGS: 00000206
[  397.895713][    C0] RAX: e32e8f1cca931200 RBX: 0000000000000a02 RCX: e32e8f1cca931200
[  397.895720][    C0] RDX: 0000000000000002 RSI: ffffffff8d9b6dcb RDI: 0000000000000001
[  397.895729][    C0] RBP: ffffc90000006f60 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  397.895736][    C0] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000
[  397.895768][    C0] R13: ffff88802864a2d8 R14: ffffffff99d603b0 R15: 1ffff92000000ddc
[  397.895776][    C0] FS:  00007f239301d6c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  397.895786][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  397.895794][    C0] CR2: 0000000100000000 CR3: 00000000243ea000 CR4: 00000000000006f0
[  397.895804][    C0] Call Trace:
[  397.895809][    C0]  <IRQ>
[  397.895816][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  397.895831][    C0]  ? alloc_object+0xbf/0x310
[  397.895848][    C0]  debug_object_activate+0x2e2/0x420
[  397.895865][    C0]  kvfree_call_rcu+0x4f/0x410
[  397.895884][    C0]  cfg80211_update_known_bss+0x634/0x1330
[  397.895898][    C0]  ? cmp_bss+0x8b3/0xe80
[  397.895912][    C0]  ? cmp_bss+0x8b3/0xe80
[  397.895923][    C0]  __cfg80211_bss_update+0x147/0x2120
[  397.895938][    C0]  ? do_raw_spin_lock+0x121/0x290
[  397.895953][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  397.895969][    C0]  ? cfg80211_inform_single_bss_data+0xb90/0x1ac0
[  397.895981][    C0]  cfg80211_inform_single_bss_data+0xba9/0x1ac0
[  397.895994][    C0]  ? __lock_acquire+0xab9/0xd20
[  397.896012][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  397.896023][    C0]  ? do_raw_spin_lock+0x121/0x290
[  397.896042][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  397.896058][    C0]  ? cfg80211_inform_bss_data+0x1e8/0x3b30
[  397.896072][    C0]  cfg80211_inform_bss_data+0x1fb/0x3b30
[  397.896085][    C0]  ? ktime_get+0x3e/0x1f0
[  397.896097][    C0]  ? ktime_get+0x3e/0x1f0
[  397.896111][    C0]  ? ktime_get+0x3e/0x1f0
[  397.896122][    C0]  ? ktime_get+0x3e/0x1f0
[  397.896135][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  397.896148][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  397.896162][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  397.896175][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  397.896189][    C0]  ? sched_clock+0x3f/0x60
[  397.896204][    C0]  ? sched_clock_cpu+0x74/0x430
[  397.896219][    C0]  ? lapic_next_event+0x11/0x20
[  397.896232][    C0]  ? clockevents_program_event+0x24d/0x360
[  397.896247][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  397.896262][    C0]  ? hrtimer_interrupt+0x889/0xaa0
[  397.896275][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  397.896291][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  397.896304][    C0]  ? irqentry_exit+0x74/0x90
[  397.896320][    C0]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  397.896336][    C0]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  397.896352][    C0]  ieee80211_bss_info_update+0x746/0x9e0
[  397.896367][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  397.896385][    C0]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  397.896397][    C0]  ieee80211_scan_rx+0x593/0xa20
[  397.896412][    C0]  ieee80211_rx_list+0x201c/0x2a90
[  397.896425][    C0]  ? hrtimer_interrupt+0x889/0xaa0
[  397.896438][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  397.896452][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  397.896469][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  397.896483][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  397.896499][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  397.896511][    C0]  ieee80211_rx_napi+0x1a8/0x3d0
[  397.896525][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  397.896582][    C0]  ? skb_dequeue+0x10e/0x150
[  397.896600][    C0]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  397.896614][    C0]  tasklet_action_common+0x36c/0x580
[  397.896629][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  397.896642][    C0]  ? __pfx_tasklet_action+0x10/0x10
[  397.896657][    C0]  handle_softirqs+0x286/0x870
[  397.896669][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  397.896682][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  397.896694][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  397.896709][    C0]  __irq_exit_rcu+0xca/0x1f0
[  397.896721][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  397.896735][    C0]  irq_exit_rcu+0x9/0x30
[  397.896744][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  397.896764][    C0]  </IRQ>
[  397.896768][    C0]  <TASK>
[  397.896772][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  397.896785][    C0] RIP: 0010:generic_exec_single+0x481/0x500
[  397.896797][    C0] Code: 75 11 e8 d2 6e 0b 00 48 85 db 75 16 e8 c8 6e 0b 00 eb 15 e8 c1 6e 0b 00 e8 2c fb c4 09 48 85 db 74 ea e8 b2 6e 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 66 43 c7 44 2c
[  397.896807][    C0] RSP: 0018:ffffc90003bcf9c0 EFLAGS: 00000246
[  397.896817][    C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  397.896824][    C0] RDX: ffffc90008029000 RSI: 00000000000002e2 RDI: 00000000000002e3
[  397.896830][    C0] RBP: ffffc90003bcfa90 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  397.896839][    C0] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: 1ffff92000779f3c
[  397.896846][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000779f5d
[  397.896861][    C0]  ? __pfx_remote_function+0x10/0x10
[  397.896877][    C0]  ? __pfx_generic_exec_single+0x10/0x10
[  397.896888][    C0]  ? __pfx___might_resched+0x10/0x10
[  397.896900][    C0]  ? smp_call_function_single+0xa0/0x590
[  397.896912][    C0]  smp_call_function_single+0x351/0x590
[  397.896924][    C0]  ? __pfx_remote_function+0x10/0x10
[  397.896938][    C0]  ? __pfx_smp_call_function_single+0x10/0x10
[  397.896949][    C0]  ? __pfx_remote_function+0x10/0x10
[  397.896967][    C0]  perf_install_in_context+0x593/0x8f0
[  397.896983][    C0]  ? __pfx_perf_install_in_context+0x10/0x10
[  397.896997][    C0]  ? __pfx___perf_install_in_context+0x10/0x10
[  397.897012][    C0]  ? __se_sys_perf_event_open+0x126f/0x1d70
[  397.897024][    C0]  ? perf_event__header_size+0x168/0x230
[  397.897041][    C0]  __se_sys_perf_event_open+0x193a/0x1d70
[  397.897058][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  397.897069][    C0]  ? lapic_next_event+0x11/0x20
[  397.897085][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  397.897104][    C0]  ? do_syscall_64+0xbe/0x3b0
[  397.897119][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  397.897132][    C0]  do_syscall_64+0xfa/0x3b0
[  397.897146][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.897157][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  397.897169][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.897181][    C0] RIP: 0033:0x7f239218ebe9
[  397.897191][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  397.897200][    C0] RSP: 002b:00007f239301d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  397.897211][    C0] RAX: ffffffffffffffda RBX: 00007f23923b5fa0 RCX: 00007f239218ebe9
[  397.897220][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100
[  397.897226][    C0] RBP: 00007f2392211e19 R08: 0000000000000000 R09: 0000000000000000
[  397.897234][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  397.897240][    C0] R13: 00007f23923b6038 R14: 00007f23923b5fa0 R15: 00007fff50229a08
[  397.897253][    C0]  </TASK>
[  398.235967][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  398.238876][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  398.244025][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  398.248341][   T34] Call Trace:
[  398.249822][   T34]  <TASK>
[  398.251123][   T34]  dump_stack_lvl+0x99/0x250
[  398.253120][   T34]  ? __asan_memcpy+0x40/0x70
[  398.255066][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  398.257281][   T34]  ? __pfx__printk+0x10/0x10
[  398.259318][   T34]  vpanic+0x281/0x750
[  398.261062][   T34]  ? __pfx_vpanic+0x10/0x10
[  398.262974][   T34]  ? preempt_schedule+0xae/0xc0
[  398.265003][   T34]  ? preempt_schedule_common+0x83/0xd0
[  398.267278][   T34]  panic+0xb9/0xc0
[  398.268881][   T34]  ? __pfx_panic+0x10/0x10
[  398.270793][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  398.273048][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  398.275619][   T34]  watchdog+0xfd2/0xfe0
[  398.277459][   T34]  ? watchdog+0x1de/0xfe0
[  398.279356][   T34]  kthread+0x711/0x8a0
[  398.281150][   T34]  ? __pfx_watchdog+0x10/0x10
[  398.283212][   T34]  ? __pfx_kthread+0x10/0x10
[  398.285188][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  398.287443][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.289731][   T34]  ? __pfx_kthread+0x10/0x10
[  398.291748][   T34]  ret_from_fork+0x3fc/0x770
[  398.293717][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  398.295927][   T34]  ? __switch_to_asm+0x39/0x70
[  398.298003][   T34]  ? __switch_to_asm+0x33/0x70
[  398.300054][   T34]  ? __pfx_kthread+0x10/0x10
[  398.302075][   T34]  ret_from_fork_asm+0x1a/0x30
[  398.304166][   T34]  </TASK>
[  398.306328][   T34] Kernel Offset: disabled
[  398.308173][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:31:04  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81ade201 RBX=dffffc0000000001 RCX=ffffffff81ade2b7 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8fa37e30 RBP=0000000000000000 RSP=ffffc90000007450
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc6
R12=0000000000000001 R13=0000000000000000 R14=fffffbfff1f46fc7 R15=1ffffffff1f46fc6
RIP=ffffffff822305f9 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f239301d6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000100000000 CR3=00000000243ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=00000000000f0602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2392212e53
XMM06=0000000000000000 00007f2392212e4d XMM07=0000000000000000 00007f2392212e61
XMM08=0000000000000000 00007f2392212ee7 XMM09=0000000000000000 00007f2392212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007740000 RBX=1ffff1100459125a RCX=ffff8881001e0000 RDX=0000000000010000
RSI=ffff888022c88000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0dc0
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=ffffffff86999570
R12=dffffc0000000000 R13=ffff888022c892d0 R14=ffff888022c88000 R15=dffffc0000000000
RIP=ffffffff869995b8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4c2c65b085 CR3=000000000df36000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f4c2e987d20
XMM02=d2c6560100000065 9a40123b00000000 XMM03=678c705c366a7412 2b20fab80446d9a5
XMM04=0000000000000000 00007f4c2e987d20 XMM05=00005555665a708c 00005555665a6f50
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 000000000003bf12
XMM08=cccc28ebe110492a 6722be5300000066 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
